Scammers are becoming increasingly skilled at making their emails look authentic, which makes it harder to tell the difference between a legitimate message and a dangerous fake. To protect yourself from phishing attempts designed to steal your identity, money, or security, keep these tips in mind:

• Avoid clicking unknown links. Even if an email looks real, hover over the link to check that the web address is one you recognize and trust.
• Check the “Reply-To” address. Phishers often disguise emails to look like they’re from someone you know.
• Don’t log in through email links. These often lead to fake login pages. If you need to log in, type the company’s website address directly into your browser.
• Protect your personal information. Never share user IDs, passwords, birthdates, Social Security numbers, addresses, or password recovery details.
• Be cautious with attachments. Only open attachments you trust, and scan them first.
• Ignore offensive or spam emails. Responding can expose you to more risk.
• Don’t be tricked by scare tactics. Legitimate companies won’t ask you to verify accounts, revalidate information, or confirm quotas via email.
• Watch out for too-good-to-be-true offers. Prize winnings, fake purchase orders, or suspicious work opportunities are almost always scams.