Email: Spam Email or Phishing Attack?

Body

Use this guide to determine if unwanted emails in your inbox are phishing attacks or spam.

	Spam/Junk	Phish
What is it?	Unwanted advertisements for products or services Includes links to websites offering products or services Does not typically contain attachments Does not require immediate action	Wants your personal information: credit card number, password, bank account, etc. Often targeted: Sent to a specific individual or group and contains relevant information. Includes malicious links or attachments to fake websites, malware downloads, or documents. May appear to be from a person or organization you know in order to gain your trust. Has a sense of urgency
What should I do?	Should be reported using the Report Junk Button	Should be reported using the Report Phish Button

Spam/Junk

Phish

What is it?

Unwanted advertisements for products or services

Includes links to websites offering products or services

Does not typically contain attachments

Does not require immediate action

Wants your personal information: credit card number, password, bank account, etc.

Often targeted: Sent to a specific individual or group and contains relevant information.

Includes malicious links or attachments to fake websites, malware downloads, or documents.

May appear to be from a person or organization you know in order to gain your trust.

Has a sense of urgency

What should I do?

Should be reported using the Report Junk Button

Should be reported using the Report Phish Button

Some spam emails (2.3%) are also considered phishing attacks.

Unsolicited - You didn’t ask for the email

Harmful - Both either attempt to steal your information or waste your time

Illegitimate - Use techniques like spoofing to make it to your inbox