Scam emails are getting more convincing by the day. They look like they're from your bank, HMRC, Royal Mail, or even a friend. But there are always telltale signs if you know what to look for — and spotting them quickly could save you from losing money or having your accounts hacked.
Here's how to spot a scam email in 30 seconds.
1. Check the Sender's Email Address
The name might say "HMRC" or "Barclays" but look at the actual email address. Scammers use addresses like hmrc-refund@gmail.com or support@barclays-secure.net. Legitimate organisations always use their own domain (e.g. @hmrc.gov.uk or @barclays.co.uk).
What to do: Hover over or tap the sender's name to reveal the full email address. If it looks wrong, it is wrong.
2. Look for Urgency and Threats
Scam emails love phrases like "Your account will be suspended in 24 hours", "Immediate action required", or "You owe a fine". They're designed to panic you into clicking without thinking.
What to do: Stop and breathe. Legitimate organisations don't threaten you by email. If you're worried, go directly to the organisation's official website rather than clicking any links in the email.
3. Hover Over Links Before Clicking
A link might say www.barclays.co.uk but actually take you somewhere completely different. Always hover your mouse over a link (or press and hold on mobile) to see where it really goes.
What to do: If the URL looks strange or doesn't match the organisation, don't click it. Go to the website directly by typing it in your browser instead.
4. Watch for Poor Spelling and Grammar
Many scam emails come from overseas and contain spelling mistakes, odd phrasing, or sentences that don't quite make sense. Legitimate companies proofread their communications.
What to do: Read the email carefully. Any obvious errors are a red flag.
5. Be Wary of Unexpected Attachments
If you weren't expecting an attachment, be very cautious. Scammers often use Word documents, PDFs or ZIP files to deliver malware to your computer.
What to do: Don't open attachments from people you don't know, or that you weren't expecting. When in doubt, contact the sender through a different channel to verify.
What to Do If You Think You've Been Scammed
If you've already clicked a link or given your details, act quickly. Change your passwords immediately, contact your bank if any financial information was shared, and run a full virus scan on your device.
My Fake Virus Pop-Up & Scam Check service is a remote session where I check your device, confirm whether any real threat exists, and make sure everything is clean and secure.
Or 👉 get in touch at bytova.co.uk and I'll help straight away.