How to Spot Fake Emails from Banks, Amazon & PayPal
Real vs fake email examples you can learn from immediately
Scammers love impersonating trusted companies. Here's how to tell the difference between real and fake emails from the companies you trust most.
Why Scammers Fake Company Emails
When you see a major company logo and email, you're more likely to trust it. Scammers exploit this psychology by creating near-perfect fakes. But there are always tell-tale signs if you know where to look.
Real vs Fake: Amazon Emails
❌ FAKE Amazon Email
From: amazon-verify@amaz0n-security.com
Subject: URGENT: Your Account Will Be Closed!
"Dear Valued Customer, We detected suspicious activity. Click here immediately to verify your account or face suspension."
🚩 Red Flags:
- Wrong domain: amaz0n-security.com (not amazon.com)
- Generic greeting ("Valued Customer")
- Urgency/threat language
- Asking to click link instead of logging in to account
- Poor grammar/formatting
✅ REAL Amazon Email
From: account-update@amazon.com
Subject: Order Confirmation - Your Recent Purchase
"Hi [Your Name], Here's your order confirmation for [specific item]. Order #123456. You can track your package here."
✓ Trustworthy Signs:
- Official domain: amazon.com
- Uses your actual name
- Specific details (order number, item name)
- Professional formatting
- No urgency or threats
Real vs Fake: PayPal Emails
❌ FAKE PayPal Email
From: security@paypa1.com (note the "1" not "l")
Subject: Confirm Your PayPal Account Now!
"Your PayPal account has been limited. Click below to verify within 24 hours or account will be closed."
🚩 Red Flags:
- Misspelled domain (paypa1 with "1")
- Pressure/urgency language
- Asking to click link to verify
- No specific account details
✅ REAL PayPal Email
From: service@paypal.com
Subject: You sent $25.00 to John Smith
"Hi [Name], You sent $25.00 to John Smith on Dec 8, 2025. Transaction ID: xxxxxxx"
✓ Trustworthy Signs:
- Official paypal.com domain
- Specific transaction details
- Transaction ID included
- Professional tone
- No suspicious links or urgency
Real vs Fake: Bank Emails
❌ FAKE Bank Email
From: security@chasebank-verify.com
Subject: URGENT: Suspicious Activity on Your Account
"We detected unusual activity. Click here to verify your identity immediately or your account will be suspended."
🚩 Red Flags:
- Wrong domain (chasebank-verify.com, not chase.com)
- Asks to verify by clicking link
- Threatens account suspension
- Generic greeting
- Banks NEVER ask for passwords via email
✅ REAL Bank Email
From: alerts@chase.com
Subject: Alert: Large Withdrawal from Your Account
"[Your Name], A withdrawal of $500 was made from your checking account ending in 5678 on Dec 8. If this wasn't you, call xxx-xxx-xxxx."
✓ Trustworthy Signs:
- Official chase.com domain
- Your actual name
- Specific account details (last 4 digits)
- Amount and date of transaction
- Phone number to call (not a link)
- No suspicious links
The Golden Rules
Rule #1: Never Click Links in Emails
Go directly to the official website by typing the URL yourself or calling the company's official number.
Rule #2: Real Companies Use Official Domains
amazon.com, paypal.com, chase.com - NOT amaz0n.com, paypa1.com, chasebank-verify.com
Rule #3: Real Companies Know Your Details
They use your name, account number, transaction details. "Dear Customer" = probably fake.
Rule #4: Real Companies Don't Create Urgency
Scammers say "act now" or "account will close". Real companies give you time.
Rule #5: Banks Never Ask for Passwords
Real banks NEVER ask for passwords, PINs, or SSN via email or phone. Ever.
🔍 Test Your Skills: Scan A Phishing Email
Use our free email scanner to check any suspicious email. Paste it and see if you can spot the red flags before our AI does.
Scan An Email Free →Click play to watch a step-by-step guide showing real vs fake emails in action
🛡️ Verify Before You Click
Use SpamScore to verify suspicious emails before clicking any links. Forward any email to scan@getspamscore.com for instant analysis.
Check Your Email Free →Last updated: December 2025. When in doubt, call the company directly using the number on your statement or their official website.