A text saying your package is stuck, an email from your “bank” asking for your details, an urgent message from the “government”: online scams are everywhere, and they keep getting more convincing. Knowing how to spot a scam is now an essential skill, at home and at work. Here are the signs that give it away.

Quick answer: To spot a phishing email or text scam, watch for messages that create a sense of urgency, ask for personal or banking information, contain typos, or come from a strange sender address. When in doubt, don’t click any links, and contact the organization directly through its official website.

What is phishing?

Phishing is a scam where a fraudster poses as a trusted company or person to steal your information: passwords, card numbers, your identity. Learning to spot this kind of scam protects you and the people around you.

1. A sense of urgency or a threat

“Your account will be closed in 24 hours,” “Payment declined, act now”: scammers play on fear to get you to act fast, without thinking. A legitimate organization never puts that kind of pressure on you through a message.

2. A request for personal information

No bank, no government agency, and no legitimate service will ever ask for your password, PIN, or full card number by email or text. A request like that is almost always a scam.

3. A suspicious sender address

Look at the full sender address, not just the display name. A strange address with random numbers or a domain that has nothing to do with the organization is a red flag. On a phone, press and hold the sender’s name to see the real address.

4. Suspicious links

Never click a link without checking where it leads. On a computer, hover over the link (without clicking) to see the actual address at the bottom of the screen. If it doesn’t match the official site, it’s a scam.

5. Typos and an impersonal tone

Many scams contain spelling mistakes, awkward translations, or a vague greeting like “Dear customer” instead of your name. That said, be careful: scams are getting more polished, especially with AI in the mix, so flawless writing doesn’t guarantee anything.

6. An offer too good to be true

Winning a lottery you never entered, an unexpected refund, a free gift: if it sounds too good to be true, it is. These lures are designed to get you to click or pay “fees.”

What to do if you get a suspicious message

Don’t click any links and don’t open any attachments.
Don’t reply and don’t provide any information.
Verify through another channel: contact the organization via its official website or phone number.
Report and delete the message. In Canada, you can report it to the Canadian Anti-Fraud Centre.

What to do if you already clicked

Don’t panic. Change the password for the affected account right away, turn on two-factor authentication, keep an eye on your bank statements, and notify your financial institution. If it happened on a work device, let your IT team know immediately.

Frequently asked questions

Are text message scams common?

Yes, and they’re on the rise. Fake package delivery texts and fake financial institution alerts are among the most common. The same warning signs apply as with email.

How can I protect my parents or my employees?

Awareness is the best defense. Explaining the warning signs, sending regular reminders, and, for businesses, offering short training sessions all go a long way toward reducing the risk of getting caught.