Is this email really safe before you act?
An email can look official and still be a scam. This page gives you a clear checklist to spot warning signs and a simple method to check whether there is verifiable proof.
Important: a well-written email proves nothing. What matters is traceability and the absence of scam warning signs.
The most common signs of a scam
These signals appear in most phishing campaigns.
- The sender’s real address : Look at the full address (not only the displayed name). Beware of lookalike domains (for example: support-paypai.com).
- Urgent tone and pressure : Scams push you to act fast: “final reminder”, “account blocked”, “payment pending”.
- Links and buttons : Hover over links before clicking. A link that does not point to the official domain is suspicious. Avoid shortened links.
- Attachments : An unexpected invoice or document (PDF, ZIP, Office) = danger. Do not open it if you were not expecting anything.
- Unusual requests : No serious service will ask you for a password, an SMS code or an urgent bank transfer by email.
- Visible inconsistencies : Typos, strange layout, approximate logo, vague information: taken together, this is often a scam.
Simple rule: from 2 red flags, treat the email as suspicious until verified.
Check an email: the cautious 30-second method
Goal: confirm whether there is verifiable proof or act as if you are facing a scam.
- Do not click any link in the email.
- Copy the sender address and the subject line.
- Run a check through Kicklinks.
- If there is no proof, apply the rule: doubt = stop.
Simple shortcut
The cost of an unnecessary check is low. The cost of validating a fraudulent email too quickly can be huge.
Check an email nowWhat should you do if the email is probably fraudulent?
- Do not click, do not reply : Do not provide any information. A reply confirms that your address is active.
- Verify through an official channel : Go to the official website via your bookmarks or call support using an official number.
- If you clicked : Change your passwords immediately, enable 2FA and monitor payments and logins.
- Report and quarantine : Mark it as spam/phishing. In a company, notify the IT or security team.
