Advertisement
Canada markets closed
  • S&P/TSX

    22,167.03
    +59.95 (+0.27%)
     
  • S&P 500

    5,254.35
    +5.86 (+0.11%)
     
  • DOW

    39,807.37
    +47.29 (+0.12%)
     
  • CAD/USD

    0.7387
    +0.0015 (+0.20%)
     
  • CRUDE OIL

    83.11
    +1.76 (+2.16%)
     
  • Bitcoin CAD

    95,880.55
    +1,981.13 (+2.11%)
     
  • CMC Crypto 200

    885.54
    0.00 (0.00%)
     
  • GOLD FUTURES

    2,254.80
    +16.40 (+0.73%)
     
  • RUSSELL 2000

    2,124.55
    +10.20 (+0.48%)
     
  • 10-Yr Bond

    4.2060
    +0.0100 (+0.24%)
     
  • NASDAQ futures

    18,465.00
    -38.75 (-0.21%)
     
  • VOLATILITY

    13.01
    +0.23 (+1.80%)
     
  • FTSE

    7,952.62
    +20.64 (+0.26%)
     
  • NIKKEI 225

    40,168.07
    -594.66 (-1.46%)
     
  • CAD/EUR

    0.6843
    +0.0038 (+0.56%)
     

How to Identify a Phishing Email

Q. I’ve received emails from my bank that I suspect are fraudulent, but I’m nervous about ignoring them. What should I do?

A. First, check the sender’s email address for misspellings. Fraudsters trying to lure you with a phishing scam might use an address that’s similar to a company’s official one, but not exactly the same. It’s not a foolproof tactic, though, because some crooks can completely “spoof” an email address. But you can be certain that a U.S.-based organization’s email address won’t include a domain extension from a different country (such as .ru for Russia or .br for Brazil). Many phishing attempts originate abroad, often from non-native English speakers, so poor spelling and awkward sentence structure in the body of the email could be another telltale clue.

Hovering your cursor over links in the email’s text will reveal a code showing where the link really leads. If it doesn’t include the company’s domain name before the first forward slash (/), don’t click on it. And last, if the email asks you to verify or provide personal information such as credit card and bank account numbers, your Social Security number, or passwords, it’s definitely a fraud, says the Federal Trade Commission. If you’re still in any doubt about whether the email is legit, reach your bank directly; check the contacts page on its website.

ADVERTISEMENT

For more information, check our security software buying guide and Ratings.

Send your questions to ConsumerReports.org/askourexperts.

Editor's Note: This article also appeared in the September 2016 issue of Consumer Reports magazine.



More from Consumer Reports:
Top pick tires for 2016
Best used cars for $25,000 and less
7 best mattresses for couples

Consumer Reports has no relationship with any advertisers on this website. Copyright © 2006-2016 Consumers Union of U.S.