In this article, we'll guide you through recognising phishing, scam, suspicious or spam emails and explain what to do if you're unsure whether a message is genuine.

Signs an email may be suspicious

• The sender's email address does not match the organisation they claim to represent.
• The message creates urgency or threatens consequences if you do not act immediately.
• You are unexpectedly asked for passwords, payment details or personal information.
• The email contains an attachment or link you were not expecting, or the request does not match a recent conversation or purchase.
• The spelling, grammar, branding or tone feels unusual.
• A link's destination does not match the address shown in the message.

Check emails claiming to be from Webfactory

Emails from Webfactory will always be sent from an address ending in @webfactory.co.uk. Check the complete sender address carefully, as a display name can be copied.

Webfactory may send genuine emails containing secure payment links. A link on its own does not mean that an email is suspicious. Before using it, check that you were expecting the payment request, that it relates to a service or conversation you recognise, and that the complete sender address ends in @webfactory.co.uk.