The common warning signs, how to check a message safely, and where to report it.
By FactInfoLive · Published 2026-11-12 · Updated 2026-11-12
The short answer
Phishing emails and texts pretend to be a company you know, like a bank or a utility, and try to get you to click a link or open an attachment. The US Federal Trade Commission says they often tell a story to trick you.
Warning signs
Consumer guidance from the FTC, as summarised by a state consumer site, says phishing messages often claim the company noticed suspicious activity. Other signs listed in guides that quote the FTC include a generic greeting and incorrect email addresses or links, such as a misspelled company name. The Better Business Bureau adds that scare tactics, a sense of urgency and too-good-to-be-true rewards are common.
How to check safely
Do not use the links or phone numbers in the message. CISA's advice, as quoted by one guide, is to go to the company's verified website to find contact details and then contact them through that channel.
How to report it
The FTC says to forward phishing emails to the Anti-Phishing Working Group at reportphishing@apwg.org, report the attempt to the FTC at ReportFraud.ftc.gov, and then delete the message. For phishing text messages, forward them to SPAM (7726), according to a Vermont state consumer page citing the FTC.
Why it matters
The BBB cites the FBI's 2025 Internet Crime Report as showing phishing and spoofing were the most reported internet crime in 2025. Those figures are US reports, so they show reported crime, not the whole picture.
Limits
This guide gives US reporting steps. If you live elsewhere, report to your national consumer or cyber-security authority. If you already clicked or entered a password, change that password and contact the real company through its official site.
Sources
FTC Consumer Alert, "Protect yourself from phishing scams" (2025): https://consumer.ftc.gov/consumer-alerts/2025/04/protect-yourself-phishing-scams
FTC Consumer Alert, "Phishing scams can be hard to spot" (2024): https://consumer.ftc.gov/consumer-alerts/2024/12/phishing-scams-can-be-hard-spot
Vermont consumer site summarising FTC tips and SPAM 7726: https://mymoney.vermont.gov/node/221
Better Business Bureau, "How to spot a scam email": https://www.bbb.org/scams/spot-a-scam/scam-emails
State of Surveillance, guide quoting FTC and CISA: https://stateofsurveillance.org/guides/basic/how-to-spot-a-phishing-email/