What Is a Phishing Email Example: How to Spot Scams Fast

That moment of doubt before clicking an email link? Scammers count on it. Phishing emails are the most reported contact method used by scammers, according to the FTC’s 2023 data (email, phone calls, and text messages topped the list). This guide walks you through real examples so you can recognize the tricks before they catch you. By the end, you’ll know exactly what to look for and what to do when you spot one.

Common phishing scams: Fake invoice, account upgrade · Top providers warning: Microsoft, Norton examples · Red flags count: 4 main warning signs · Real examples shared: Netflix, PayPal scams · Reporting advised: Don’t just delete

What is a typical phishing email?

A phishing email is a fraudulent message designed to look like it comes from a trusted source. According to the FTC, phishing is a type of online scam that targets consumers by sending them an email that appears to be from a well-known source. The goal is to trick recipients into clicking malicious links or sharing sensitive information like passwords or credit card numbers.

Common types from security reports

Norton lists 10 distinct phishing examples in their security reporting, including IRS impersonation scams, suspended account alerts, and unusual sign-in activity warnings. These templates cycle through different brand impersonations—Microsoft, Netflix, PayPal, and even government agencies—to maximize their reach.

One real example documented by CalPCC shows a fake Microsoft security alert with subject line “Unusual sign-in activity detected – Action Required.” The email contained a link pointing to microsoft-login-alerts.com.signinverify.ru—a lookalike domain designed to harvest credentials. The red flags included urgent language, a mismatched URL, and poor grammar throughout the body.

How do you know if an email is phishing?

Spotting a phishing email comes down to checking a few specific details. Microsoft confirms that links in phishing emails point to unknown URLs not associated with official domains like @norton.com or @microsoft.com. The sender’s email address must match recognized domains.

Check sender details

Look at the “From” address carefully. Phishing emails often come from addresses like @gmail.com instead of the corporate domain they claim to represent. Hoxhunt recommends checking for typos in domain names—a single character difference can indicate spoofing.

Look for urgent language

Norton’s red flags include spelling and grammar errors, generic greetings like “Dear Customer,” and blank To fields. The FTC Consumer Advice page notes that phishing emails commonly claim your account is “on hold” or require immediate action to “update your information.” These pressure tactics are designed to bypass your critical thinking.

What’s the most common example of phishing?

The most common phishing examples target major financial and streaming brands. Norton documents billing issue claims from Netflix impersonators, while PayPal scams appear in advance-fee fraud and contest win schemes. Brand deception phishing mimics trusted companies to steal personal information like credit cards or login credentials.

PayPal and Netflix scams

Fortra Email Security explains that spear phishing customizes attacks using company research, stolen signatures, and logos to appear authentic. These targeted campaigns research their victims before sending messages that look professionally designed. The FTC warns of fake emails claiming to be from FTC itself with subject “Pending consumer complaint”—a sophisticated tactic that exploits trust in regulatory authority.

What is the biggest red flag for a phishing email?

Four warning signs consistently appear across Microsoft, Norton, and FTC guidance. First, urgency: phrases like “Your device is at risk” or “Immediate action is required” signal manipulation. Second, requests for personal information—legitimate companies do not ask for passwords or financial details via email.

Suspicious links or attachments

Third, suspicious links: hover over any URL to verify the destination matches the claimed sender. Fourth, unexpected attachments. Microsoft confirms that phishing emails request personal information or prompt clicks to resolve issues that do not actually exist. Norton adds that low-resolution logos and blank To fields are telltale signs.

How to report a phishing email?

Do not delete phishing emails—report them instead. According to FTC guidance, you can forward phishing emails to reportphishing@apwg.org for investigation. The agency also maintains ReportFraud.ftc.gov for formal complaints. For text messages, forward phishing SMS to 7726 (SPAM) so carriers can track patterns.

Steps for Gmail and general reporting

In Gmail, select the suspicious email, click the three-dot menu, and choose “Report phishing.” This trains Google’s spam filters while alerting their security team. For business accounts, follow your organization’s incident reporting protocol—many companies have dedicated security aliases for forwarding suspicious messages.

For consumers encountering suspicious emails, the path forward is straightforward: slow down, verify the sender independently, and report rather than delete. The implication is that every unreported phishing email gives scammers another chance to succeed. For anyone managing corporate email security, Norton and Fortra both recommend DMARC protocols to prevent domain spoofing—a technical defense that complements user awareness training.