Email · stamped FORGED

The email "from yourself"FORGED

A real scam people fell for this year, next to the real thing. The numbers mark the three things to check: hover or tap one to see what it tells you.

Safe
MInbox (3) – Gmail×
https://mail.google.com/mail/u/0/#inbox
✎ ComposeInbox 3StarredSnoozedSent
Note to self: passport
JJordan Hayes <jordan.hayes@gmail.com>to me10:42 AM

Passport renewal: get 2 photos at the pharmacy, form is in the desk drawer.

Mail it before the trip in March.

ScamFORGED
MInbox (3) – Gmail×
https://mail.google.com/mail/u/0/#inbox
✎ ComposeInbox 3StarredSnoozedSent
Your password expires today
jjordan.hayes <jordan.hayes@k7d-relay.mailz>to me10:42 AM

Hi jordan.hayes,

The password for your email account expires today. Keep your current password so you don't lose your messages.

Keep my passwordkeep-pass-verify.top

Always check the sender.

It carries your own name as the sender, but the address after it ends in ".mailz", which isn't a real web ending. Someone made it up to look like a note you sent yourself.

Always checkThe real oneThe scam
1Where it livesCheck firstIs it the real company's or person's own address or number?

jordan.hayes@gmail.com is your own address: you sent it to yourself.

jordan.hayes@k7d-relay.mailz uses your name, on an address that can't exist.

2What it asks you to doDoes it want a password, a payment, a call, or a tap?

Nothing. It's a reminder you wrote.

Click "Keep my password" before it "expires".

3How hard it pushesIs there a deadline, a threat, or a surprise charge?

No rush.

Your password "expires today".

RememberYour own name as the sender proves nothing. Look at the address after it, and never sign in from a "password expires" email.

Would you have spotted it?

10 pairs like this one, three minutes, a score to share. Then find out who in the family is the easy mark.

Take the testNext scam: The tax forms that "only open on Windows" →