
Email remains a key communication tool—but it’s also a top target for cybercriminals. One of the most common and misleading tactics is email spoofing, where scammers forge the “From” address to make it look like someone you trust is emailing you.
From fake boss requests to phony package updates, here’s what to watch out for—and how to protect yourself.

If you’ve ever gotten an email from your own address asking for Bitcoin or threatening exposure, that’s spoofing in action.
Tip: Don’t panic. Change your passwords and turn on two-factor authentication.
Scammers impersonate executives or vendors, often requesting urgent wire transfers or sensitive company info.
Tip: Always confirm unusual requests with a phone call or face-to-face conversation.
Spoofed messages pretending to be from FedEx, UPS, or Amazon claim you missed a delivery or need to verify info.
Tip: Never click links. Instead, visit the official website directly.
You may see emails pretending to be from Microsoft, Apple, or Google, warning that your account is compromised.
Tip: Tech companies won’t ask you to install software or provide passwords via email.
Some spoofed messages claim you owe taxes or face legal action, pushing for quick responses.
Tip: The IRS never contacts people initially through email—ignore and report these.

Double-check the sender: Hover over the “From” name to reveal the real email address.
Watch for red flags: Bad grammar, urgent requests, and suspicious links are warning signs.
Don’t click without verifying: Even if it appears to come from someone you know.
Use security tools: Spam filters, antivirus software, and two-factor authentication add layers of protection.

Email spoofing is clever—but with a critical eye and cautious habits, you can stay ahead of scammers. When in doubt, don’t click.