Email Scams

Email scams, often called phishing, are messages designed to look like they come from a company or service you use, such as a bank, retailer, or streaming service. They typically warn about a problem with your account or payment and link to a fake login page. Some carry harmful attachments or fake invoices. The sender address and links rarely match the real organisation.

Common red flags

  • A sender address that does not match the real company domain
  • Generic greetings like 'Dear customer' instead of your name
  • Urgent claims that your account is locked, expired, or will be charged
  • Links that point to a different website than the one displayed
  • Unexpected attachments or requests to 'verify' your login or payment

Email scam guides

Medium risk Email

Fake Invoice Email Scam

This scam emails an invoice or receipt for something you did not buy, hoping you call a fake 'support' number or click a link to dispute it.

Medium risk Email

Fake Amazon Order Email

This scam emails a fake order confirmation for an expensive item, hoping you click a link or call a number to dispute a charge you never made.

Medium risk Email

Fake Netflix Payment Email

This scam warns that your Netflix payment failed and your account is on hold, linking to a fake page that steals your login and card details.

High risk Email

Fake Apple ID Locked Email

This scam claims your Apple ID has been locked for security reasons and links to a fake sign-in page that captures your Apple ID and password.

High risk Email

Fake Refund Email Scam

This scam emails that you are owed a refund and asks you to confirm bank or card details, or to accept a refund that is really designed to steal your money.

Medium risk Email

Fake Subscription Renewal Email

This scam emails that a subscription is renewing for a large amount, hoping you call a fake support number or click a link to cancel and hand over details.

High risk Email

Fake PayPal Email Scam

This scam sends an email claiming your PayPal account is limited or shows unusual activity, urging you to 'confirm' your details through a link that leads to a fake login page designed to steal your password.

High risk Email

Microsoft Account Email Scam

This scam sends a fake Microsoft or Outlook email about an unusual sign-in or an account about to be closed, linking to a fake Microsoft login page that captures your email and password.

Medium risk Email

Fake DocuSign Email Scam

This scam sends a fake 'you have a document to review and sign' email with a 'View Document' link that leads to a credential-harvesting page or to malware instead of a genuine document.

Medium risk Email

Fake LinkedIn Email Scam

This scam sends fake LinkedIn notification emails, such as a new message, appearing in searches or a job offer, with links to phishing pages that steal your login or push you toward fake recruiters.

Medium risk Email

Inheritance Scam

This scam emails you out of the blue claiming you are the beneficiary of a large inheritance or unclaimed estate, often from a distant relative or stranger, then asks for fees, bank details, or documents to 'release' the money that never exists.

High risk Email

Fake Tech Support Scam

This scam uses a pop-up, email, or phone call warning that your computer is infected or your account is compromised, urging you to call a number or allow remote access, after which the fake 'technician' charges fees, installs software, or takes your data.

Medium risk Email

Google Docs Sharing Scam

This scam sends an email saying someone shared a Google Doc or file with you, with an 'Open' link that leads to a fake Google login page or asks you to grant risky account permissions, aiming to capture your password or access your account.

Medium risk Email

Spotify Payment Scam

This scam sends a fake Spotify email claiming your payment failed or your subscription is on hold, linking to a fake login or billing page that harvests your account and card details.

Medium risk Email

Dropbox Shared File Scam

This scam sends an email claiming someone shared a Dropbox file or folder with you. The 'View file' link leads to a fake login page designed to capture your email address and Dropbox or work password.

Medium risk Email

Email Storage Full Scam

This scam warns that your mailbox or storage is full and that you will stop receiving messages unless you 'verify' or 'upgrade' through a link. The link leads to a fake webmail login page that captures your email password.

Medium risk Email

Fake Zoom Invite Scam

This scam sends a fake Zoom, Teams, or video meeting invite by email and urges you to join or review a missed meeting through a link that leads to a fake login page built to capture your work or email credentials.

Medium risk Email

WeTransfer File Scam

This scam imitates WeTransfer or a similar file-sharing service. You receive an email saying a contact has sent you files, with a prominent Download button. Instead of delivering a file, the link opens a fake login page designed to capture your email address and password, often your work account. Because file transfers feel routine at work, many people click without checking. Treating an unexpected transfer with caution and verifying the sender first are the safest responses.

High risk Email

CEO Fraud Scam

CEO fraud, a form of business email compromise, involves a scammer pretending to be a senior leader and pressuring an employee to move money or buy gift cards quickly and quietly. The email often mimics the executive's name and writing style, claims they are busy or travelling, and stresses secrecy. Because it exploits authority and urgency, even careful staff can be caught out. Slowing down and verifying any unusual payment request through a known channel is the most reliable defence.

Medium risk Email

Domain Renewal Scam

Domain renewal scams target website and small business owners with urgent emails or invoices claiming a domain is about to expire. The message often poses as your registrar or a vague "domain services" provider and pushes you to renew through a link. The aim is usually to charge inflated fees, capture your card details, or steal the login to your registrar account so the domain can be taken over.

Medium risk Email

PayPal Invoice Scam

In a PayPal invoice scam, a fraudster uses PayPal's own invoicing or money request feature to send you a genuine-looking bill for a purchase you never made. The message often includes a "call this number to dispute" note that connects you to a fake support line, where you may be pressured to pay, share account access, or move money. Because the email can come from PayPal's real systems, it can look very convincing.

Medium risk Email

iCloud Storage Scam

An iCloud storage scam arrives as an email or text pretending to be from Apple, warning that your storage is full or a payment for extra storage has failed. It claims your photos, files, or backups will be deleted unless you update your details through a link. That link leads to a fake Apple sign-in page built to capture your Apple Account email, password, and sometimes payment details.

Medium risk Email

SharePoint Phishing Scam

This scam sends a fake Microsoft SharePoint or OneDrive email saying a document has been shared with you, linking to a counterfeit Microsoft login page designed to steal your work email credentials. It is commonly aimed at businesses.

High risk Email

Email Thread Hijacking Scam

This scam happens when attackers who have compromised a contact's mailbox reply within a real, existing email thread, using the genuine history to make a malicious link or attachment look trustworthy because it continues a conversation you recognise.

High risk Email

Malware Attachment Scam

In a malware attachment scam, an email arrives with a file posing as an invoice, receipt, CV, statement or delivery note. Opening the attachment, or clicking a prompt to 'enable content' or 'enable macros', can quietly install malware that steals passwords, banking logins or files. The message is often crafted to feel urgent or routine so you act before thinking. Treating every unexpected attachment with caution, and verifying it through a separate channel, is one of the most effective defences.

High risk Email

Geek Squad Renewal Email Scam

This scam emails a fake Geek Squad or tech-support 'renewal invoice' for a subscription you do not have, urging you to call a number where a fake agent talks you into refunds, remote access, or payments.

Medium risk Email

Sextortion Email Scam

This scam emails a threatening claim that the sender has recorded you through your webcam or has compromising material, and demands payment in cryptocurrency to stay silent, even though they almost always have nothing.

High risk Email

Voicemail Notification Email Scam

This scam emails a fake 'new voicemail' or 'missed call' notification with a link or attachment to 'listen', which leads to a phishing login page or downloads malware.

Medium risk Email

Fake Unsubscribe Email Scam

This scam relies on the 'unsubscribe' link in spam emails, which can confirm your address is active, lead to a phishing page, or trigger a malware download rather than stopping the messages.

High risk Email

Quarantined Email Scam

This scam emails a warning that several messages are 'held in quarantine' or 'pending delivery' and asks you to log in to 'release' them, leading to a fake page that steals your email password.

Medium risk Email

Survey Reward Email Scam

This scam emails an offer of a gift, gift card, or cash reward for completing a short survey, often impersonating a known brand, then asks for a small shipping fee and card details or enrols you in recurring charges.

High risk Email

Bank Statement Email Scam

This scam emails a fake 'your e-statement is ready' or 'review your statement' notice impersonating your bank, linking to a fake login page that captures your online banking credentials.

Medium risk Email

Calendar Invite Phishing Scam

This scam sends unsolicited calendar invites that auto-add events to your schedule, with notifications containing phishing links or fake alerts that lure you to malicious sites or scam pages.

High risk Email

Google Security Alert Email Scam

This scam emails a fake Google 'security alert' or 'new sign-in detected' notice and links to a fake page that captures your Google account password and two-factor codes.

Medium risk Email

Google Business Profile Email Scam

This scam emails small business owners claiming their online business profile or map listing will be suspended or unverified unless they confirm details or pay a fee through a link, stealing logins or money.

High risk Email

Tax Document Email Scam

This scam emails that a tax document, payslip, or important form is ready to download or view, linking to a fake login page or a malicious attachment that steals credentials or installs malware.

High risk Email

HR Portal Email Scam

This scam emails employees pretending to be the HR or staff portal, asking them to log in to review a policy, payslip, or benefits update, leading to a fake page that captures work credentials for further fraud.

High risk Email

Account Closure Email Scam

This scam emails that your account will be permanently closed or deleted for inactivity unless you log in to confirm it, leading to a fake login page that steals your credentials.

High risk Email

Payment Confirmation Email Scam

This scam emails a fake payment or order confirmation for something you did not buy, prompting you to call a number or click a link to 'cancel' or 'dispute' it, leading to a scammer or a phishing page.

High risk Email

Utility Bill Email Scam

This scam emails a fake utility bill or overdue-payment notice, warning of disconnection unless you pay or log in through a link that collects your card details and account credentials.

Medium risk Email

Charity Appeal Email Scam

This scam emails an urgent appeal impersonating a charity or disaster relief effort, using emotional language to direct you to a fake donation page that collects your card and personal details.

High risk Email

eFax Document Email Scam

This scam emails a fake notification that a fax or scanned document has arrived for you, with a link or attachment to 'view' it that leads to a phishing login page or downloads malware.

High risk Email

Seller Account Suspension Email Scam

This scam emails online sellers claiming their marketplace account is suspended, limited, or needs verification, linking to a fake login page that captures seller credentials and, in turn, their payouts.

Medium risk Email

Insurance Renewal Email Scam

This scam emails a fake insurance renewal notice, claim update, or refund, impersonating your insurer and linking to a page that collects your card, policy, and personal details.

High risk Email

Tax Software Account Email Scam

This scam emails users of tax-preparation software around filing season, claiming an account issue, refund, or required verification, linking to a fake login page that captures credentials and financial data.

High risk Email

Teams Notification Email Scam

This scam emails a fake notification that you have a new Microsoft Teams or Slack message or missed call, linking to a fake login page that captures your work credentials.

Medium risk Email

Airline Miles Expiry Email Scam

This scam emails that your airline miles, hotel points, or loyalty rewards are about to expire unless you log in to claim or redeem them, leading to a fake page that captures your account and card details.

Medium risk Email

Freelance Platform Email Scam

This scam emails freelancers posing as a platform message, client, or job offer, linking to a fake login page or pushing you off-platform to be paid by fake cheque, advance-fee, or overpayment tricks.

High risk Email

Data Download Ready Email Scam

This scam emails that your requested data download or account export is ready, urging you to log in to retrieve it before it expires, leading to a fake login page that captures your credentials.

Medium risk Email

Conference Invitation Email Scam

This scam emails a flattering invitation to speak, exhibit, or attend a conference, then charges bogus registration, travel, or visa fees, or collects your personal and payment details for an event that is fake or misrepresented.

High risk Email

Ad Account Suspended Email Scam

This scam emails advertisers claiming their Google Ads or Meta Ads account is suspended or has a billing problem, linking to a fake login page that captures account access and, in turn, ad spend and linked cards.

High risk Email

Card Verification Email Scam

This scam emails that your card needs 'verification' for online payments, impersonating 3-D Secure schemes like Verified by Visa or Mastercard SecureCode, linking to a fake page that captures your card and banking details.

Medium risk Email

Class Action Settlement Email Scam

This scam emails that you are owed money from a class action settlement and must verify details or pay a fee to claim it, harvesting your bank and personal details or taking a bogus processing fee.

High risk Email

App Store Receipt Email Scam

This scam emails a fake App Store or Google Play receipt for an app or subscription you did not buy, urging you to click or call to 'cancel' or 'refund', leading to a phishing page or a scammer posing as support.

High risk Email

Student Portal Email Scam

This scam emails students claiming a tuition issue, refund, grant, or portal verification, linking to a fake university login page that captures credentials and, in turn, financial aid or personal data.

High risk Email

Patient Portal Email Scam

This scam emails that you have new test results, a medical bill, or a required portal verification, linking to a fake patient-portal login that captures your health, identity, and payment details.

High risk Email

Mortgage Statement Email Scam

This scam emails a fake mortgage statement, payment issue, or rate-change notice from your lender, linking to a fake login page that captures your mortgage account and banking credentials.

Frequently asked questions

How can I check who really sent an email?
Look at the full sender address, not just the display name. Hover over links to see the real destination before clicking. When in doubt, open the company's official website or app directly instead of using links in the email.
Is it dangerous to open a phishing email?
Simply opening most emails is low risk. The risk comes from clicking links, downloading attachments, or entering information. Avoid those actions and the email itself is usually harmless to delete.
What should I do with a phishing email?
Do not click anything. You can report it to your email provider as phishing and to the company being impersonated, then delete it.

Related scam categories

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.