Phishing & Scams: Questions and Answers
How to recognize, avoid and report phishing emails, scam texts, fake calls and payment fraud.
How can I tell if an email is a phishing attempt?
Treat any message as suspicious when it creates urgency, asks you to sign in, pay or open an attachment, and comes from an address or link that does not match the organization it claims to be. Phishing works on pressure, so a demand to act right now is itself a warning sign.
Full answer and next stepsWhat should I do if I clicked a phishing link?
Close the page, do not enter anything else, and change the password of any account you typed into the page, starting with email. If you downloaded a file, disconnect the device from the internet and run a full security scan before using it for anything sensitive.
Full answer and next stepsWhere do I report a phishing email or scam text?
Use the "Report phishing" or "Report junk" option in your email or messaging app, then report it to your national authority. In the United States, forward scam texts to 7726 and report fraud at ReportFraud.ftc.gov; in the United Kingdom, forward emails to report@phishing.gov.uk and texts to 7726.
Full answer and next stepsHow do I know if a package delivery text is a scam?
A delivery text is likely a scam if you did not expect a package, it asks for a small "redelivery" or customs fee, or the link goes to a domain that is not the courier’s official site. Real couriers rarely ask for payment by text link.
Full answer and next stepsWhat is smishing and how is it different from phishing?
Smishing is phishing sent by SMS or messaging apps instead of email. The goal is the same, stealing passwords, money or personal data, but texts feel more personal and urgent, and phones make it harder to inspect a link before tapping it.
Full answer and next stepsHow do I protect myself from phone call scams (vishing)?
Hang up on any unexpected caller who asks for passwords, one-time codes, remote access to your computer or an urgent payment, then call the organization back on a number you look up yourself. Caller ID can be faked, so a familiar name on screen proves nothing.
Full answer and next stepsAre QR codes safe to scan?
A QR code is just a link, so it is as safe as the website it opens. Check the address your camera shows before opening it, and be cautious with codes on stickers placed over parking meters or posters, or codes sent by email asking you to sign in.
Full answer and next stepsHow can I check whether a website is legitimate before buying or signing in?
Confirm the exact domain spelling, reach the site by typing the address or using a saved bookmark, and look for independent reviews of the shop outside the site itself. The padlock icon only means the connection is encrypted; scam sites have padlocks too.
Full answer and next stepsWhat is business email compromise (BEC)?
Business email compromise is a scam where a criminal impersonates or takes over a trusted email account, such as a CEO, supplier or lawyer, to trick staff into paying a fake invoice or changing bank details. It often contains no malware or link, so filters can miss it.
Full answer and next stepsWhat should I do if I sent money to a scammer?
Contact the bank, card issuer or payment service you used immediately and ask them to stop or reverse the payment, then report the scam to the police or your national fraud service. Speed matters, because funds are often moved within hours.
Full answer and next stepsHow can you tell if a QR code is a scam?
You can tell a QR code is a scam by checking the physical label for tampering, previewing the destination URL before opening it, and evaluating what the webpage asks you to do. Fraudulent QR codes often hide behind physical stickers pasted over legitimate codes, route through shortened or misspelled links, and lead to phishing forms that demand urgent payments or login credentials.
Full answer and next stepsHow do I report an Apple gift card scam?
To report an Apple gift card scam, file a report with the Federal Trade Commission at ReportFraud.ftc.gov and contact Apple using verified details from their official website. If the scam arrived by text message, forward it to 7726 or use the junk reporting option in your messaging app. For deceptive emails, use your provider's spam reporting button. Check what to do if you sent money to a scammer if you suffered a financial loss.
Full answer and next stepsWhat should you do if a scam number calls you?
Hang up immediately and do not engage with the caller. Never share sensitive information, such as passwords, account numbers, or Social Security numbers. If the caller claimed to represent a bank, utility, or government agency, verify the claim independently. Look up the organization's verified contact information on its official website and contact them directly.
Full answer and next stepsHow do you stop scam calls on an iPhone?
You can stop scam calls on an iPhone by enabling the built-in Silence Unknown Callers feature, blocking specific nuisance numbers, and using call-filtering tools from your wireless carrier or third-party apps. Silence Unknown Callers automatically mutes calls from numbers not found in your contacts, messages, or recent outgoing calls, routing them directly to voicemail. Carrier tools and filtering apps inspect incoming numbers against fraud databases to block recognized spam before your phone rings.
Full answer and next stepsWhat should you do after clicking a phishing link?
Disconnect your device from the internet immediately if you downloaded a file or suspect malware. If you submitted passwords or sensitive information on the page, change your account credentials right away from a separate, secure device and enable multi-factor authentication. Run a full scan using updated antivirus software. If you entered payment information, contact your bank immediately to flag fraudulent charges and monitor your statements.
Full answer and next stepsGo deeper
Step-by-step articles on this subject are in the Personal Security guides.