Credential-harvest email
Email sends you to a fake Microsoft 365, Google or bank sign-in page.
How to spot it
- Unexpected sign-in request
- Link destination not on the real provider's domain
What to do
Go to the service directly via bookmark and check for notices there.
What the real thing looks like
- A real sign-in notification that asks nothing and links nowhere sensitive
Try an example
A practice example with fictional companies. Answer it, then see the tells.
Is this email a scam or legit?
FromFrom: Orbit CloudSender address: share@orbitcloud-docs.example
Tome
Marcus T. shared a file with you
Hello,
Marcus T. shared "Q4 vendor payments" with you. Sign in to view it:
Hover over or tap a link to see where it really goes. Links in this lesson are never clickable.
Sure and right: +15. Sure and wrong: -5. Calling a legitimate item a scam counts as a miss.
Test yourself on eight more
The free quiz mixes scams with legitimate messages, like real life. No sign-up.