1.1.2 I can recognize suspicious emails, messages, pop ups that can cause data loss or misuse on my digital device (by clicking on them or downloading unfamiliar attachments)

Email threat
Malware can be distributed in email messages, and this code can be activated when a user opens an email attachment, clicks on a link in an email message.

Steps to identify suspicious mail


Step 1 - Check the email domain name

The reply address should be next to the sender’s name.


For mobile users, tap on View details to see the full address

Step 2 - Check where links go

Hover (do not click) your mouse cursor over any links contained within the email to validate the link target and intent. Address paths will appear at the bottom of the email program.

If the domain of the URL (immediately after the HTTP or HTTPS) does not seem consistent with the sender’s email domain or takes to a foreign address (.UK, RU, etc), then be suspicious.

Avoid clicking on any links, opening any attachments, or replying to scam solicitations unless you are sure the email can be trusted.

Step 3 - Check for content 

Are there spelling or grammatical errors? Does the requestor's email seem reasonable? Are they asking for personal information, like passwords or a social security number? When in doubt, verify. Let us say you receive an email about a “questionable purchase”, rather than clicking on the link, open a new browser tab and go directly to the PayPal, Amazon, or bank website. If a friend asks you for money, call them on the phone.



Last modified: Thursday, 31 March 2022, 1:40 AM