Did it land in Junk or Spam?

Yes — it's already in Junk / Spam

Your provider has already flagged it. Leave it there or delete it. Don't open links or attachments.

No — it landed in my inbox

Verify the sender before you do anything else.

How to inspect email headers — confirms the real sender domain.

Then check for these red flags:

  • Asking for money, crypto or bank details? Treat as scam.
  • Contains a link or attachment? Don't open it. Go to the company's site directly.
  • Threats or extortion? Don't reply. Report it.

If you can't verify the sender, see the Scamwatch email guide.