How to recognize a phishing email or text in the U.S.
Quick answer: Check the sender, destination link, and request before acting. Be suspicious of unexpected messages that create urgency or ask for passwords, one-time codes, payments, or personal information.
Check the sender and destination
Look beyond the display name. Inspect the real sender address and, before clicking, verify where the link actually goes.
Treat urgency and unusual requests cautiously
Messages demanding immediate payment, account verification, gift cards, passwords, or one-time codes are common phishing patterns. Verify the request through a channel you already trust.
Use the official website instead
Open the organization’s website or app yourself rather than following an unexpected link. Report suspicious messages through the appropriate service when possible.
Source & methodology
The FTC explains common phishing signs and practical steps for avoiding fraudulent messages.