← Back to the guide
Phishing emails
How it works
- An email that seems to come from a bank, ANAF, Netflix, PayPal, etc.
- “Your account has been blocked / suspended: click here to update your details”
- The button leads to a page that looks identical to the real one and steals your login details
Warning signs
- The sender's address does not match the institution (e.g. bancatransilvania@gmail.com, noreply@bt-secure.info)
- A generic greeting: “Dear customer” instead of your name
- Unexpected attachments (.zip, .exe, invoices you are not expecting)
- A link that, when you hover over it, shows a different domain from the text displayed
What to do
- Do not click anything in the email.
- Open your browser and go directly to the institution's website or app.
- If you have already entered details: change your password immediately and call the bank.