How to Spot a Phishing Email

← Back to CyberSpace

Phishing emails are one of the most common ways criminals try to steal your personal information, passwords, and money. The good news? Once you know what to look for, they're surprisingly easy to spot. Here's what to watch for.

What Is a Phishing Email?

A phishing email is a fake message designed to trick you into clicking a link, downloading a file, or handing over sensitive information. They're often disguised to look like they're coming from your bank, Canada Post, the CRA, Netflix, or even someone you know.

The goal is always the same: get you to do something you wouldn't do if you knew who was really sending it.

Red Flags to Watch For

1. The sender's email address looks off. The name might say "Canada Revenue Agency," but the actual email address is something like cra-notice@gmail.com or refund@tax-canada-gov.net. Real government agencies and businesses use their own official domains — not free email services.
2. It creates urgency or fear. Phrases like "Your account will be suspended in 24 hours," "Immediate action required," or "You owe back taxes — act now" are classic pressure tactics. Scammers want you to panic and click without thinking.
3. There's a suspicious link. Hover over any link before clicking it (on a computer, not a phone). The address that appears at the bottom of your screen may be completely different from what the link text says. If it looks strange, don't click it.
4. It asks for personal information. Legitimate banks, government agencies, and companies will never ask for your password, SIN, credit card number, or banking information by email. Ever. Full stop.
5. The spelling and grammar are poor. While scammers have gotten better, many phishing emails still contain awkward phrasing, spelling mistakes, or odd punctuation. Professional organizations proofread their communications.
6. There's a suspicious attachment. If you weren't expecting a file, don't open it. Attachments can install malware on your device the moment you click them — no further action required on your part.
7. The greeting is generic. "Dear Customer" or "Hello User" instead of your actual name is a red flag. Businesses you have accounts with usually address you by name.

What to Do If You Get One

If you receive a suspicious email:

• Don't click any links or open any attachments
• Don't reply to the sender
• Report it as spam or phishing in your email client
• If it's pretending to be a Canadian business or government agency, report it to the Canadian Anti-Fraud Centre at 1-888-495-8501 or at antifraudcentre.ca

What to Do If You Already Clicked

If you clicked a link or entered information before realizing something was wrong, act quickly:

• Change your passwords immediately, especially for your email and banking accounts
• Contact your bank if you entered any financial information
• Run a full virus and malware scan on your device
• Check your accounts for any unauthorized activity
• Report the incident to the Canadian Anti-Fraud Centre

If you're not sure what to do next or want someone to check your device, we're here to help. Bring it in and we'll take a look.