Scam Examples Secria

Phishing email examples

Phishing emails tell a story to trick you: a problem with your account, a sign-in you didn't make, an invoice, a refund or a free gift.1 Here are seven, made safe.

Streaming Account Team9:41 AM

<billing@account-hold.example.com>1

Your account is on hold

Dear Customer,2 we couldn't process your last payment, so your account is on hold.3 Update your payment details4 to keep watching.

  1. A sender you can't place. Ask yourself whether you have an account with this company at all.1
  2. A generic greeting, one of the FTC's marked flags on its own example.1
  3. A billing problem that puts your account on hold.1
  4. A link to update your payment details.1

What to do Don't click. If you do have an account, contact the company on a phone number or website you know is real.1

Rebuilt from the FTC's own marked example; the company, sender and address are made up. Checked 1 November 2026 against the sources.

Six more, by the story they tell

Every name, address and amount is made up. Spelling mistakes are no longer a reliable sign: scams are getting smarter.2

Account security

"Unusual sign-in attempt"

Account Security9:41 AM

<no-reply@secure-login.example.net>

Unusual sign-in attempt

We noticed a sign-in attempt from a new device.1 If this wasn't you, secure your account within 24 hours2 or it will be locked. Review activity3

  1. Suspicious activity or sign-in attempts. The FTC says there weren't any.1
  2. "Within 24 hours", a deadline with a threat attached.2
  3. A button. Go to the site yourself instead.1

What to do Open the app or type the site's address yourself and check your activity there.1

Billing

"Your invoice is attached"

Billing Department9:41 AM

<invoices@billing-center.example.org>

Invoice INV-20418 is due

Hello,1 please find invoice INV-20418 for $849.002 attached. Pay now with the secure link3 to avoid a late fee.

  1. No name, just a greeting.1
  2. An invoice you don't recognize. The FTC says it's fake.1
  3. A link to make a payment, which carries malware.1

What to do Check your real account or statement. Contact the company on details you already have.1

At work

"Our bank details have changed"

Dana Reyes, Accounts9:41 AM

<dana.reyes@supplier-co.example.com>1

Updated payment details

We've moved banks. Please send this month's payment to our new account below.2 I'm in meetings all day, so email only.3

  1. An address that looks almost right. Check it matches the sender, especially on a phone.3
  2. A change of account details. This is business email compromise, which cost $3,046,598,558 in reported losses in 2025.3,4
  3. No way to check. The FBI says to verify changes on a second channel.3

What to do Call the person on a number you already have. If money went, call your bank to ask for a recall, then file at ic3.gov.3

QR code

"Scan to keep your mailbox"

IT Service Desk9:41 AM

<helpdesk@it-support.example.net>

Action required: mailbox storage

From the IT Service Desk:1 your mailbox is full. Scan the QR code below with your phone2 today3 to keep receiving email.

  1. Someone official. Criminals often pose as important people or organizations.2
  2. A QR code in an email. The NCSC says criminals use them more and more to reach scam sites.2
  3. A short deadline.2

What to do Don't scan it. Contact your IT team on the details you already use.2

Government

"You're eligible for a refund"

Refund Notice9:41 AM

<refunds@tax-return.example.org>

You are eligible for a government refund

You are eligible to register for a government refund of $1,120.1 Confirm your identity and bank account2 to receive it before the tax deadline.3

  1. A government refund to register for. The FTC calls it a scam.1
  2. A request to confirm personal or financial information.1
  3. Timed to the tax season, so it feels expected.2

What to do Delete it. Check with the agency on its own website.2 IRS and HMRC versions.

Offer

"Claim your free reward"

Customer Rewards9:41 AM

<rewards@loyalty-gift.example.com>

You've been selected

You've been selected for a free $100 store coupon.1 Only 50 left: claim yours now.2 Claim reward3

  1. A coupon for free stuff. "It's not real."1
  2. Something in short supply. Fear of missing out makes you rush.2
  3. A link you didn't ask for.1

What to do Report it and delete it.1

Five questions for any email

The UK's National Cyber Security Centre lists the signs that work even when the spelling is perfect.2

  1. Authority.Does it claim to be from someone official, like your bank, a doctor or a government department?2
  2. Urgency.Are you told to respond "within 24 hours" or "immediately", with a fine or other threat?2
  3. Emotion.Does it make you panic, afraid, hopeful or curious?2
  4. Scarcity.Is it offering something in short supply, like tickets or money?2
  5. Current events.Is it tied to the news, a big event or a time of year like tax season?2

If one reaches you

  1. Don't click, reply or open attachments. Contact the organization on details from its official website.2
  2. In the US, forward it to reportphishing@apwg.org and report it at ReportFraud.ftc.gov.1 In the UK, forward it to report@phishing.gov.uk.5 Where to report each kind of scam
  3. If you think you opened something harmful, update your security software and run a scan.1

Want to test yourself? Try a free phishing quiz.

Questions people ask

Can I use these examples for training?

Yes. Every address uses example.com, example.net or example.org, second-level domain names reserved for use as examples since 1999, and every name is made up.6 Each flag cites the agency it comes from.

How common is phishing?

The FBI received 191,561 phishing and spoofing complaints in 2025, more than for any other crime type.4

Are phishing emails always badly written?

No. The NCSC says scams are getting smarter and some even fool the experts.2 The FBI notes that chat generators can write official-sounding emails that mimic a company's CEO.4

What if the email looks like it's from someone I know?

Check the sender's address really matches, and confirm any request to change payment details on a second channel, such as a phone number you already have.3

More scam examples

Sources 6
  1. How To Recognize and Avoid Phishing Scams (September 2022), Federal Trade Commission, Consumer Advice. Read 1 November 2026.
  2. How to spot a scam email, text message or call (undated page), National Cyber Security Centre. Read 1 November 2026.
  3. Business Email Compromise (undated page), FBI IC3. Read 1 November 2026.
  4. Internet Crime Report 2025, FBI IC3. Read 1 November 2026.
  5. Avoid and report internet scams and phishing (updated 11 October 2024), GOV.UK. Read 1 November 2026.
  6. RFC 2606: Reserved Top Level DNS Names (June 1999), section 3, Internet Engineering Task Force. Read 1 November 2026.

Every example is rebuilt from an official alert and made safe, and every source shows the day we read it. How we check