How to Detect a Phishing Email: Stay Safe from Scams
Phishing emails are a constant threat, and they don’t take a summer break! These fake messages are designed to trick you into giving up sensitive information—like your password or credit card number—or to get you to click on a malicious link. The good news is: you can avoid getting hooked by learning what to look for.
Here’s how to spot a phishing attempt.
🎣 1. Look Closely at the Sender’s Email Address
Phishing emails often come from email addresses that look almost right—but aren’t. It may say it’s from a Dearborn Public Schools employee or from a known service (like Google, Microsoft, or even from Dearborn Public Schools), but the actual address is off by a letter or uses a strange domain like support-google.com
instead of google.com
.
✅ Tip: Hover over the sender’s name to reveal the full email address.
🖱️ 2. Hover Over Links Before You Click
Never click a link without checking where it goes. Hover your mouse over any button or hyperlink to see the full URL. If it looks strange, misspelled, or doesn’t match the company’s real website—don’t click it!
⚠️ Red flags include:
- Shortened links (like
bit.ly
) - Long URLs with odd strings
- URLs that don’t match the brand (e.g.,
googIe.com
with a capital “i” instead of “l”)
💬 3. Watch for Urgent or Threatening Language
Phishing emails often try to scare you or pressure you into acting quickly.
Examples:
- “Your account will be locked in 24 hours.”
- “Click here to avoid service interruption.”
- “Unusual login detected. Reset your password now!”
Real tech support rarely pressures you like this. When in doubt, don’t rush and contact the Technology Department.
✏️ 4. Check for Poor Grammar and Spelling
While not all phishing emails have typos, many do. Strange phrasing, bad grammar, and unusual formatting are common signs of a scam.
📁 5. Never Open Unexpected Attachments
Unless you’re expecting an attachment from someone you trust, don’t open it. Malicious files can infect your device or steal your data.
Common dangerous file types: .exe
, .zip
, .js
, .scr
, and sometimes .doc
or .xls
with macros.
🧠 6. Think Before You Enter Your Password
If you click a link and it asks you to log in—pause. Look at the web address. If it’s not a trusted website (like google.com or dearbornschools.org), don’t enter your credentials.
🚩 7. Report Suspicious Emails
If you receive a suspicious email, don’t delete it right away. Report it to the Technology Department by calling the Help Desk at 73003.
✅ Stay Safe: When in Doubt, Reach Out
The best defense against phishing is staying alert. If something feels off, trust your instincts and double-check with your tech team before clicking or replying.
Want more tips like this?
Browse the Security section of this blog or sign up for updates from the Technology Department.