How to Spot Phishing Emails and Protect Yourself From Website Scams

Phishing emails are becoming increasingly sophisticated. Many no longer contain obvious spelling mistakes or strange links. Instead, they rely on urgency, authority, and fear to pressure people into acting quickly.

Recently, I became aware of emails being sent impersonating me, offering compliance reviews and requesting payment for system-level updates. While this situation was addressed quickly, it highlighted how easy it is for anyone to be targeted, especially website owners, small businesses, and creatives.

Here is how to recognize phishing emails and protect yourself.

---

Common Red Flags to Watch For

1. The Email Address Does Not Match the Sender

One of the most important things to check is the actual sending email address, not just the name that appears in your inbox.

Phishing emails often:

• Use free email services such as Gmail or Outlook instead of a business domain
• Use addresses that look similar but are not exact matches
• Slightly misspell a known name or brand

If an email claims to be from a business or professional, the domain should match their official website.

---

2. Vague Compliance or System Update Warnings

A common phishing tactic is referencing:

• Recent compliance changes
• Platform updates
• System-level configuration issues
• Behind-the-scenes problems

While real compliance updates do exist, phishing emails often stay vague, avoid naming the actual platform or regulation, and use alarming language without concrete details.

Legitimate professionals will be specific, transparent, and verifiable.

---

3. Pressure and Artificial Urgency

Phrases such as:

• Immediate action required
• Risk of shutdown or suspension
• Avoid disruption
• This must be addressed now

These are designed to create anxiety and rush decision-making. Scammers want action before verification happens.

---

4. Requests for Payment Without Proper Verification

One of the clearest warning signs is being asked to send money before:

• A signed agreement
• A formal invoice
• A verified payment method
• Clear proof of identity

Any request for payment should be treated cautiously until the sender is fully verified.

---

Always Verify Payment Methods

PayPal and Online Payments

If you are asked to send money via PayPal or another online platform:

• Confirm the PayPal account is verified
• Ensure the account name and email match the business or individual exactly
• Be cautious of requests to use Friends and Family for professional services
• Avoid payments sent to personal or newly created accounts

If something feels off, pause and verify.

---

How to Protect Yourself

Simple steps that significantly reduce risk:

• Verify the sender’s email domain
• Check their website and contact details independently
• Do not click links or open attachments until verified
• Ask for confirmation through a trusted contact method
• Request a formal invoice or written agreement
• Never rush a payment due to pressure or fear

Legitimate professionals will always respect verification and transparency.

---

A Note About Emails Claiming to Be From Me

For clarity and transparency:

• I communicate only through my official business email addresses
• I do not request payment without a written agreement or invoice
• I do not ask clients to act urgently due to vague compliance threats

If you ever receive an email that seems unusual or concerning, please verify it before responding or sending payment.

Here are two examples of phishing emails sent from info.lainesutherlanddesigns@gmail.com which are phishing emails that have been sent to my clients. Note, this is a spam email address created using my name.