Check who a message is really from
The name on a message is easy to fake. The address behind it is harder.
Anyone can set the display name on an email to anything. The address behind the name is what matters.
Look at the address, not the name
An email shows a name, such as Pat Miller, and an address, such as pat.miller@example.com. Hover over the name to see the address. On a phone, tap the name, because many phone apps hide the address.
Watch for lookalike addresses
- A number in place of a letter, such as lakesidesupp1y.com, where the last letter of supply is a one.
- Two letters that look like another, such as rn in place of m.
- Extra words, such as microsoft-support-team.com.
- A different ending, such as .co or .net where the real company uses .com.
- A free email account, such as Gmail, used by someone who says they are your boss.
Try it. Your supplier is lakesidesupply.com. Which of these addresses is a lookalike?
A real account can still send a fake request
Sometimes a scammer takes over a real coworker's or supplier's mailbox. Then the address is correct and the request is still a scam. So judge the request as well as the sender. Is it unusual? Does it involve money, passwords or secrecy? If so, check another way, such as a phone call.
Your phone shows only the name in many email apps. Tap the name to see the full address before you trust a message.