An email from your financial institution says there's a problem with your account. A vendor sends updated payment instructions. Someone you know sends you a message that they’re in trouble and need money to be sent quickly.
These messages might look legitimate, but scammers often use convincing emails to steal personal information or trick people into sending money. Knowing what to look for can help you spot a suspicious message before it becomes a consequential mistake.
What Are Email Compromise Scams?
Email compromise scams involve scammers impersonating someone you know or an organization you trust through email. Scammers may create fake email addresses or gain access to legitimate accounts to make their messages seem authentic.
One common example is business email compromise (opens in a new tab), in which scammers pose as company personnel to request payments or sensitive information. Other scams may impersonate familiar businesses to convince you to click a fraudulent link or share account details.
5 Red Flags to Watch For
Scammers rely on urgency and trust to get people to act without thinking twice, so it’s important to watch for these common warning signs.
A sense of urgency. Messages that demand immediate payment or action right away are designed to pressure you. Take a moment to verify the request before responding.
An unfamiliar or slightly altered email address. Scammers may use addresses that look almost identical to legitimate ones, with an extra character, a misspelled name or a different domain. Check the full sender address, not just the display name.
Requests for money or personal information. Be cautious of unexpected requests for passwords, account details, gift cards, wire transfers or changes to payment instructions. Verify financial requests directly with the person or organization involved.
Suspicious links or attachments. Unexpected links may lead to fake websites designed to steal your information, while attachments can contain harmful files. Hover over links to preview their destination and avoid opening unexpected attachments.
Messages that seem out of character. Even if an email appears to come from someone you know, an unusual request or demand for secrecy could signal a scam. Familiar names and logos aren't proof that a message is genuine.
How to Protect Yourself
A few simple habits can help keep your information and accounts safer:
Pause before clicking. Avoid clicking unexpected links or opening unfamiliar attachments.
Verify unusual requests. Contact the sender using a trusted phone number or separate communication channel, especially before sending money or changing payment information.
Protect your accounts. Use strong, unique passwords and enable multifactor authentication whenever possible.
Keep information private. Limit what you share publicly, since scammers can use this to create convincing messages.
Report suspicious emails. Use your email platform’s phishing-reporting feature or follow your employer's security procedures.
What If You've Already Responded?
If you've clicked a suspicious link, shared information or sent money, act quickly.
Contact your financial institution using the number on your card or its official website if financial information or money is involved.
Change compromised passwords and update any other accounts where you've reused them.
Review account activity and enable multifactor authentication if available.
Notify your employer's IT or security team if a work account is involved.
If you've shared sensitive personal information, visit IdentityTheft.gov (opens in a new tab) for guidance. You can also report scams to the Federal Trade Commission (opens in a new tab).
When in Doubt, Stop and Verify
Scammers are becoming increasingly convincing, but you don't have to fall for their tricks. If something feels unexpected or unusual, take an extra moment to verify the details.
At Members 1st, helping you protect your financial well-being matters. Staying informed about common scams is one way to help safeguard your information and the people you care about.
