How to Spot a Spoof

Email spoofing occurs when someone (a “bad actor”) sends emails from a forged or misleading sender address that looks to be from someone you know and trust. These emails are specifically designed to trick you into taking an action that the sender wants you to do. This may include attempts to trick you into sending money or gifts, providing personal data, or downloading a virus. Unfortunately, spoofing emails are very common, and more unfortunately, they are very easy to create.

It is important to understand that just because you receive a spoofed email, it does not mean your email has been compromised. Email addresses are quite easy for bad actors to find from a variety of sources including online directories, social media accounts, and by simply following naming protocols for company emails. The best defense is to know the signs so you can spot the spoof and act accordingly.

• Look carefully at the sender address. Although the “name” may be familiar, if the email address is unknown, it is likely a spoof. For example, all official emails from AMWA will come from an amwa.org email address.
• Please note that the steps to view the email sending address may be different for each email client and each device type, so become familiar with how to view email headers for your inbox software.
• Never click links in a suspicious email. The text for the hyperlink and the URL assigned to that text may not match. Visit known webpages by typing them into your browser, rather than clicking on unknown links.
• Do not open attachments from suspicious or unknown senders.
• Remember the old adage “if it seems too good to be true, it probably is.” These unbelievable email deals and offers are most likely scams.
• Be suspicious of emails that create a sense of urgency or danger. Email the actual “sender” to inquire if they are truly in need of help or your support.
• Beware of emails supposedly from an official source with bad spelling or grammar. AMWA members definitely can spot this!