Five warning signs hiding in most scam emails

Scam emails are designed by people who understand how we think. They borrow real logos, copy the tone of real companies, and arrive looking entirely plausible. So the goal is not to spot bad spelling or clumsy design; modern scams often have neither. The goal is to notice the pressure the message is putting on you.

Underneath the surface, most scam emails rely on the same five tricks. If a message shows even one of them, pause before you act.

1. It rushes you

“Within 24 hours.” “Your account will be closed today.” “Final warning.” Urgency is the scammer’s most important tool, because a rushed person checks less. Genuine organisations almost never need you to act within minutes, and they will not punish you for taking a day to check.

2. It asks for money in an unusual way

Any unexpected request to pay, refund, transfer, or update bank details deserves independent checking. Be especially careful with unusual payment methods: gift cards, cryptocurrency, and bank transfers to a “new” account are almost never how real organisations take payment. No legitimate business settles a bill in Apple gift cards.

3. It wants a password or security code

Genuine organisations should never ask you to reveal a password, PIN, or one-time security code by email or phone. A one-time code in particular is often the last thing standing between a scammer and your account; the only place you should ever type it is the official app or website you opened yourself.

4. The addresses don’t quite match

Look at the actual email address, not the display name. A message claiming to be your bank but sent from a lookalike domain, or one where replies quietly go to a different address, is showing you its seams. If the domain is not the one printed on your card or statement, treat it as unproven.

5. It discourages checking

“Don’t tell anyone.” “Don’t call the bank, use this number instead.” Secrecy only ever serves the scammer. A real organisation is happy for you to hang up and call back on a number you found yourself. Anyone who objects to that is telling you what they are.

What to do instead

• Never use the links or phone numbers inside a suspicious message. Find the organisation through its official app, the number on your card, or an address you type yourself.
• Forward suspicious emails to report@phishing.gov.uk, the National Cyber Security Centre’s reporting service. Suspicious texts can be forwarded free to 7726.
• If you use ScamBro, forward the email to your checking address first and wait for the verdict before doing anything at all.