Phishing, Text, and Email Scams
Deceptive emails and text messages imitate familiar organizations to trigger unsafe links, replies, downloads, payments, or disclosure of information.
How this scam operates
A message may claim there is a delivery problem, unpaid toll, account alert, refund, invoice, or urgent security event. Its link opens a look-alike sign-in or payment page, or the sender asks for a reply. SMS phishing is often called smishing.
Details can vary, but the goal is usually to create enough trust, fear, or urgency that you act before verifying the story. Caller ID, profile names, logos, and polished websites can all be copied.
What the scammer wants
Passwords, verification codes, card details, personal information, money, or installation of harmful software.
Common tactics
Look-alike sender addresses and domains, copied branding, alarming deadlines, shortened links, and believable details taken from public information.
Warning signs to look for
Unexpected contact
The conversation begins through an unsolicited call, message, email, or pop-up.
Look-alike contact details
The sender address, domain, profile, or phone number resembles but does not match an official one.
Manufactured urgency
You are pressured to act before you can stop, verify, or ask someone you trust.
What to do next
Take protective action even if you are not yet certain this is a scam.
-
verification
Contact the provider independently
Use the number on your card, an official app, or a website you found independently.
-
Immediate response
Preserve evidence and secure access
Save messages, receipts, account names, URLs, and transaction details. If credentials were exposed, change them from a trusted device and review active sessions.
How to protect yourself
Do not use the message link or reply. Open the organization’s known app or type its address yourself. Inspect the sender and destination carefully, and confirm a claim in your real account.
If you were affected
If you entered details, change exposed passwords from a trusted device, review sessions, contact the relevant provider, preserve the message, and report it through the platform or official service.
Open the recovery checklistRelated practical guides
How to Check a Suspicious Message
A calm verification process for unexpected texts, emails, direct messages, and alerts.
5 minute read
Read this guideOfficial help and reporting
Choose the service for your location. External links open the organization’s official website.
ReportFraud.ftc.gov
Federal Trade Commission
Official United States service for reporting fraud, scams, and bad business practices.
Action Fraud
City of London Police
The United Kingdom’s national reporting centre for fraud and cybercrime.
Phone: 0300 123 2040
Canadian Anti-Fraud Centre
Royal Canadian Mounted Police, Ontario Provincial Police, and Competition Bureau Canada
Canada’s central service for information about fraud and for reporting fraud and cybercrime.
Phone: 1-888-495-8501
Scamwatch
National Anti-Scam Centre
Australian government information and reporting guidance about scams.
Related scam types
Social Media and Account Takeovers
Attackers steal passwords or verification codes, then impersonate account owners to target their contacts.
Read related guideBank and Payment Scams
Messages and calls impersonate banks or payment services to steal credentials, verification codes, or money.
Read related guide