How to spot a phishing email or text

Phishing is a message that pretends to come from a bank, courier, government office or well-known company to make you click a link, share a password or pay money.

Check a suspicious message now

Paste a message, link, phone number, wallet or screenshot and get a verdict with the evidence.

Check a suspicious message now →

Warning signs

Urgency or threats: 'your account will be closed in 24 hours'.
A link whose domain is not the real company's, or that looks almost right (paypa1, bank-secure-login).
A request for passwords, card numbers, PINs or one-time codes. Real companies never ask for these by message.
A generic greeting, odd grammar, or a sender address that does not match the company.
An unexpected attachment or a QR code that leads to a login page.

What to do

Do not click, reply or open attachments.
Open the company's official website or app yourself, by typing the address, and check there.
Paste the message into HackFraud to see the verdict and the evidence behind it.
Delete it and report it as phishing in your mail app.

If you already clicked or paid

If you entered a password: change it now everywhere you reuse it and turn on two-factor authentication.
If you entered card details: call your bank using the number on the back of your card and block the card.
If you installed something: disconnect from the internet, run a security scan and change passwords from a clean device.

Report it: in Greece, contact the Cyber Crime Division (cyber.gr, tel. 11188). Elsewhere, contact your local police and your bank.

Frequently asked questions

What is phishing?

Phishing is a fake message that imitates a trusted organisation to steal your passwords, card details or money.

Can I check a suspicious message for free?

Yes. Paste the text, link or screenshot into HackFraud and you get a verdict with the evidence in seconds.

More guides

Languages: English · Ελληνικά · Español · Français · Deutsch · Português · Italiano · العربية

Last updated: 2026-10-18. Verified by many HackFraud checks. If in doubt, confirm through the organisation's official website or phone number.