TryBench
Phishing Email Red Flags: How to Spot a Fake
Identify manipulative urgency, spoofed headers, and fake penalties in phishing communications.
Why this matters
Phishing emails look real, but they share the same warning signs. Once you know them, you can spot a fake in seconds.
Fake Urgency and Fear
Scammers invent emergencies like "Account suspended in 2 hours". They want you to panic and click before you check.
In real life: Scammers invent a deadline, such as 'in 2 hours', so you panic and click before you think. A real bank does not threaten you this way.
Check the Real Sender Address
The name you see can be faked. The address after the @ shows the truth, such as "@kwaratrust-login.biz" instead of "@kwaratrust.ng".
In real life: The name shown can be faked easily. Look at the actual email address after the @ sign. A small change like -login-alert.biz is a warning sign.
Display: Kwara Trust Bank Alert Actual: <security@kwaratrust-login-alert.biz> (fake domain!)
Your practice task
This email landed in the finance inbox. Pick out its red flags, then choose the safe response.
How to do it
- Read the email in the box above.
- Find the pressure tactic and the real sender domain.
- Decide what the email wants you to do, and what the safe response is.
- Press Run proof.
Practice it for free in the app. You get instant checks that show what you got right and what to fix. A lesson takes about two minutes and you can try as many times as you like.
Quick reference: Phishing Triage Anatomy
Scrutinize sender headers whenever high-stakes actions are requested.
Check 1: Artificial countdown. Check 2: Unofficial domain. Check 3: Urgent credential link.
More lessons in this course
- Inspecting Links & DomainsSeparate deceptive display text from actual web addresses and understand padlock limitations.
- Rapid Incident ReportingTake immediate action when a security mistake occurs: isolate credentials and report without delay.
- Updates, Backups & Device SafetyKeep devices patched, backed up, and protected so one mistake or theft does not become a disaster.