Phishing Emails and Texts: Warning Signs and What To Do
A phishing email or text often tells a story to trick you into clicking a link or opening an attachment. Warning signs include an unexpected message, a generic greeting, a claimed account problem and a link to update payment details. Before you click or open anything, ask whether you have an account with that company or know the sender. If yes, contact the company through a phone number or website you know is real.
What the FTC pages say about warning signs
The FTC guide How To Recognize and Avoid Phishing Scams starts with the goal behind these messages: "Scammers use email or text messages to try to steal your passwords, account numbers, or Social Security numbers." If they get that information, they could get access to your email, bank or other accounts, or sell it to other scammers. The tactics below are common ones, not a full list.
An unexpected message might look like it comes from a company you know or trust, like a bank or an online payment website or app. According to the FTC, a scammer might:
- say they have noticed "some suspicious activity or log-in attempts"
- claim there is "a problem with your account or your payment information"
- say you need to "confirm some personal or financial information"
- include an invoice you do not recognize
- want you to click on a link to make a payment, when the link has malware
- say you can register for a government refund, which the FTC calls a scam
- offer a coupon for free stuff
The guide shows a real-world phishing email that looks real at first glance and even uses the company's logo in the header. Its signs are a generic greeting, a claim that your account is on hold because of a billing problem, and an invitation to click on a link to update your payment details.
Real companies might communicate with you by email, but the FTC draws a clear line: legitimate companies will not email or text "with a link to update your payment information."
A short test for a message that asks you to click or open an attachment
The FTC test is for an email or text that asks you to click on a link or open an attachment. Answer one question:
"Do I have an account with the company or know the person who contacted me?"
- If the answer is no, it could be a phishing scam. Go back to the signs above and look for them. If you see them, report the message and then delete it.
- If the answer is yes, contact the company using a phone number or website you know is real, not the information in the email. The FTC explains that attachments and links might install harmful malware.
What to do if you clicked a phishing link or gave out information
The next step depends on what happened.
| What happened | What the FTC pages say |
|---|---|
| You think you clicked on a link or opened an attachment that downloaded harmful software | Update your computer's security software. Then run a scan and remove anything it identifies as a problem. |
| You think a scammer has your information, like your Social Security, credit card or bank account number | Go to IdentityTheft.gov, where you will see the specific steps to take based on the information you lost. |
| You think someone is using your personal information | The FTC page Protect Your Personal Information From Hackers and Scammers says to go to IdentityTheft.gov to report it and get a personalized recovery plan. |
How to report a phishing message
The FTC says the information you give helps fight scammers. Forward a phishing email to the Anti-Phishing Working Group, using the address given in the FTC guide. Forward a phishing text message to SPAM (7726). You can also report the attempt to the FTC at ReportFraud.ftc.gov.
How to lower the risk ahead of time
The FTC lists four ways to protect yourself: use security software set to update automatically, set your cell phone software to update automatically, use multi-factor authentication, and back up your data. This site also has pages on how to spot a fake immigration website and how to protect your Social Security number.
What these pages do not cover
These pages describe common signs, do not judge any specific message you received and do not address any immigration matter. The FTC says scammers often update their tactics to keep up with the latest news or trends, so a message can look different from the examples above.
Where to look next on the official site
The USAGov page on scams and fraud is the next place to look, because a few questions there show which government agency can help if you want to report a scam.
Scope of this page
The picture on this page is only an illustration: one adult in an olive jacket stands in calm water at the edge of tall grass, holding a fishing rod with a small red lure near its tip.
This page is general information from the official pages cited. A question about your personal situation belongs with an independent attorney.
- FTC: How to recognize and avoid phishing
- FTC: Protect your personal information from hackers and scammers
- USAGov: Scams and fraud
VisaNow.AI is not a law firm and does not give legal advice. This page is general information taken from official government pages; it does not assess anyone's case. An attorney-client relationship arises only with an independent attorney. Check the official pages for current details.
Information current as of 2026-10-30