iamtheit
Basic

Spot a scam (phishing) email

Step 1 of 3

Look at the real sender address

The name can say “Your Bank”, but the address is odd, for example @bank-verify.xyz.

The simulation shows Windows in English, like most laptops.

  1. Look at the real sender address

    The name can say “Your Bank”, but the address is odd, for example @bank-verify.xyz.

  2. Be suspicious of threats and deadlines

    “Account blocked in 24 hours”, “verify now” are tricks to make you panic.

  3. Don’t click the link; open the official app or site yourself

    Hover the mouse over the link (without clicking) to see its real address at the bottom corner.

From basic to technician

Technical details (for the curious)

Checking a link without opening it

Hover over the link: its destination appears at the bottom left of the browser. On a phone, press and hold the link to see the address.

Look-alike domains

Scammers use similar domains: bank-co.id, paypa1.com, rnicrosoft.com (rn, not m). What matters is the part just before the first .com/.co.id.

Dangerous attachments

Don’t open .zip, .exe, .html attachments or documents that ask you to “Enable content/macros” from unknown senders.

Coming soon

Still not fixed?

In the next update you can tell us what happened, and our AI helper will suggest another way. Until then, restart the device and go through the steps once more.