Scam emails used to be obvious — bad spelling, a Nigerian prince, that sort of thing. These days they're much more convincing. Here's how to protect yourself.
Check the sender's actual email address
Not the display name — the actual address. Hover over it or click on it. If it says 'Royal Mail' but the address is something like notifications@rm-delivery-update.xyz, it's fake.
Look for urgency and fear
'Your account will be closed in 24 hours.' 'Unusual activity detected.' 'You must verify your identity immediately.' Legitimate companies rarely email you with this level of panic.
Don't click links — go direct
If an email says there's a problem with your Amazon/bank/Royal Mail account, don't click the link in the email. Open your browser, type the real website address yourself, and log in there. If there's genuinely a problem, you'll see it.
Check for generic greetings
'Dear Customer' or 'Dear User' instead of your actual name is a red flag. Though some sophisticated scams do use your name, so this alone isn't enough.
What to do if you've clicked a dodgy link
Don't panic. If you entered a password, change it immediately — on the real website, not through the email. If it was a banking or financial site, call your bank straight away. Run a virus scan on your computer. And if you're worried or unsure, give us a call — we can check your machine over and make sure nothing nasty has been installed.
One more thing
It happens to everyone. Getting caught by a scam email doesn't make you stupid. These things are designed by professionals to trick people. The important thing is acting quickly.