{"id":107336,"date":"2024-07-01T00:37:34","date_gmt":"2024-07-01T00:37:34","guid":{"rendered":"https:\/\/logmeonce.com\/resources\/sample-phishing-email\/"},"modified":"2026-10-04T00:02:43","modified_gmt":"2026-10-04T00:02:43","slug":"sample-phishing-email","status":"publish","type":"post","link":"https:\/\/logmeonce.com\/resources\/sample-phishing-email\/","title":{"rendered":"Stop Damage Fast: 7 Step Response and Sample Phishing Email Templates"},"content":{"rendered":"<div class=\"336cb5b64765e27a1a6c1bb71b941f1a\" data-index=\"1\" style=\"float: none; margin:10px 0 10px 0; text-align:center;\">\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-4830628043307652\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- above content -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-4830628043307652\"\r\n     data-ad-slot=\"5864845439\"\r\n     data-ad-format=\"auto\"\r\n     data-full-width-responsive=\"true\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\n<\/div>\n<\/p>\n<p>A sample phishing email almost always tries to get you to act fast: click a link, open a file, or hand over a password before you think it through. The three fastest tells are a sender address that does not quite match the real company, a link whose destination does not match its visible text, and a request for credentials, payment, or personal data under time pressure. The examples and checks below walk through both.<\/p>\n<hr>\n<blockquote>\n<p><strong>TL;DR:<\/strong><\/p>\n<ul>\n<li>Phishing emails often create a false sense of urgency, such as claiming account issues or alleging security threats, to prompt quick reactions.<\/li>\n<li>Common signs include misleading sender addresses, mismatched links, unexpected attachments, and requests for sensitive information or payments.<\/li>\n<li>Hovering over links and checking full sender details can reveal domain mismatches or malicious redirects before clicking.<\/li>\n<li>Immediately disconnect from the network, change affected passwords, and notify IT or banks if credentials or financial information are compromised.<\/li>\n<li>Regular habits like using unique passwords, multi-factor authentication, and verifying requests through known contact channels significantly reduce phishing risks.<\/li>\n<\/ul>\n<\/blockquote>\n<hr>\n<div data-blg-cta=\"after_tldr\" data-blg-cta-layout=\"banner\" style=\"margin:28px 0;font-family:-apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif\">\n<div style=\"border-radius:26px;padding:min(22px,3.2vw)\">\n<div style=\"background:#ffffff;border-radius:18px;overflow:hidden\">\n<div style=\"padding:34px 30px;text-align:center\">\n<div style=\"margin:0 0 18px\"><span style=\"max-width:100%;border-radius:999px;padding:6px 13px;font-size:12px;font-weight:800;letter-spacing:0.1em;text-transform:uppercase;line-height:1.3;background:#F47F24;color:#ffffff\">Logmeonce<\/span><\/div>\n<div style=\"font-size:26px;font-weight:800;line-height:1.2;letter-spacing:-0.01em;color:#1f2937;margin:0\">Strengthen Your Digital Security<\/div>\n<div style=\"width:56px;height:6px;border-radius:3px;background:#F47F24;margin:12px 0 14px;margin-left:auto;margin-right:auto\"><\/div>\n<div style=\"font-size:15px;line-height:1.55;color:#64748b;margin:0 0 24px;max-width:44em;margin-left:auto;margin-right:auto\">Explore LogMeOnce resources for password management, passwordless MFA, cloud encryption, and dark web monitoring.<\/div>\n<p><a href=\"https:\/\/logmeonce.com\/resources\" style=\"align-items:center;gap:9px;border-radius:10px;font-weight:700;font-size:15px;text-decoration:none;padding:13px 22px 13px 26px;background:#F47F24;color:#ffffff\">Explore security resources<\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_77 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/logmeonce.com\/resources\/sample-phishing-email\/#Sample_phishing_emails_by_common_attack_type\" >Sample phishing emails by common attack type<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/logmeonce.com\/resources\/sample-phishing-email\/#Why_these_tricks_work_and_how_to_spot_them_fast\" >Why these tricks work and how to spot them fast<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/logmeonce.com\/resources\/sample-phishing-email\/#How_to_safely_inspect_links_attachments_and_senders\" >How to safely inspect links, attachments, and senders<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/logmeonce.com\/resources\/sample-phishing-email\/#What_to_do_if_you_clicked_opened_or_entered_credentials\" >What to do if you clicked, opened, or entered credentials<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/logmeonce.com\/resources\/sample-phishing-email\/#Everyday_prevention_habits_that_actually_hold_up\" >Everyday prevention habits that actually hold up<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/logmeonce.com\/resources\/sample-phishing-email\/#Why_habits_matter_more_than_spotting_the_perfect_fake\" >Why habits matter more than spotting the perfect fake<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/logmeonce.com\/resources\/sample-phishing-email\/#Where_protective_tools_fit_alongside_good_habits\" >Where protective tools fit alongside good habits<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/logmeonce.com\/resources\/sample-phishing-email\/#FAQ\" >FAQ<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/logmeonce.com\/resources\/sample-phishing-email\/#Whats_a_common_trick_used_in_phishing_emails\" >What\u2019s a common trick used in phishing emails?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/logmeonce.com\/resources\/sample-phishing-email\/#What_does_a_phishing_email_address_look_like\" >What does a phishing email address look like?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/logmeonce.com\/resources\/sample-phishing-email\/#What_are_some_examples_of_funny_phishing_emails\" >What are some examples of funny phishing emails?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/logmeonce.com\/resources\/sample-phishing-email\/#Can_I_get_phished_just_by_opening_an_email\" >Can I get phished just by opening an email?<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/logmeonce.com\/resources\/sample-phishing-email\/#Sources\" >Sources<\/a><\/li><\/ul><\/nav><\/div>\n<h2 id=\"sample-phishing-emails-by-common-attack-type\"><span class=\"ez-toc-section\" id=\"Sample_phishing_emails_by_common_attack_type\"><\/span>Sample phishing emails by common attack type<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Most phishing messages fall into a handful of templates. Seeing the pattern makes the next one easier to spot, whether it lands in your inbox or a coworker forwards it to ask if it\u2019s real.<\/p>\n<ul>\n<li><strong>Account alert:<\/strong> Subject reads \u201cUnusual sign-in activity detected.\u201d The body claims your account was accessed from a new device and asks you to \u201cverify your identity\u201d through a link. Red flags: sender domain is close but not exact (like \u201csecurity-alerts-support.com\u201d), the link text says your bank\u2019s name but hovers to a different domain, and the message demands action within 24 hours. Goal: credential theft.<\/li>\n<li><strong>Invoice or payment request:<\/strong> Subject reads \u201cInvoice #4471 overdue.\u201d An attached PDF or Excel file claims to be a bill. Red flags: an unexpected attachment from an unfamiliar vendor, a file extension like .exe disguised as .pdf, and pressure to pay immediately to avoid late fees. Goal: malware installation or wire fraud.<\/li>\n<li><strong>Shipping notification:<\/strong> Subject reads \u201cYour package could not be delivered.\u201d The message asks you to \u201cconfirm your address\u201d via a link. Red flags: generic greeting (\u201cDear Customer\u201d), a shortened or obscured URL, and no order number matching anything you actually bought. Goal: credential theft or malware.<\/li>\n<li><strong>Shared document:<\/strong> Subject reads \u201cJohn shared a file with you on SharePoint.\u201d Red flags: the sender\u2019s name looks familiar but the email address does not match their usual one, and the link leads to a login page asking for your work credentials outside your company\u2019s actual portal. Goal: credential theft.<\/li>\n<li><strong>HR or training notice:<\/strong> Subject reads \u201cMandatory security training due today.\u201d Red flags: urgent, authority-driven language, a login page that mimics your company\u2019s single sign-on screen, and a request for your username and password on a page with a slightly wrong domain. Goal: credential harvesting at scale.<\/li>\n<li><strong>Colleague or executive impersonation:<\/strong> Subject reads \u201cQuick favor.\u201d The message appears to come from a manager and asks you to buy gift cards or process a wire transfer, often from a personal-looking email address. Goal: direct financial loss.<\/li>\n<\/ul>\n<p><strong>Pro Tip:<\/strong> <em>Save real phishing examples your team receives (with headers intact) and reuse them as internal training samples instead of generic stock templates.<\/em><\/p>\n<h2 id=\"why-these-tricks-work-and-how-to-spot-them-fast\"><span class=\"ez-toc-section\" id=\"Why_these_tricks_work_and_how_to_spot_them_fast\"><\/span>Why these tricks work and how to spot them fast<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Phishing works because it borrows from how people already make decisions under pressure. CISA\u2019s guidance on <a href=\"https:\/\/www.cisa.gov\/secure-our-world\/recognize-and-report-phishing\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">recognizing phishing attempts<\/a> points to urgent or emotionally charged language, requests for sensitive information, generic greetings, and suspicious hyperlinks as the core, recurring signals, regardless of how the message is dressed up.<\/p>\n<p>Four tactics show up again and again:<\/p>\n<ol>\n<li><strong>Urgency:<\/strong> a countdown, a deadline, or a threat of account suspension pushes you to skip verification.<\/li>\n<li><strong>Authority impersonation:<\/strong> the message poses as a bank, employer, or government agency to borrow trust you would not extend to a stranger.<\/li>\n<li><strong>Social proof:<\/strong> language like \u201cother employees have already completed this\u201d nudges you to comply without questioning it.<\/li>\n<li><strong>Helpfulness or fear:<\/strong> offers of a refund, a prize, or a warning about a security breach trigger a quick, emotional response instead of a careful one.<\/li>\n<\/ol>\n<p>Once you know the tactic, the checklist is short: does the sender address match exactly, does the link\u2019s real destination match its visible text, is there an attachment you did not expect, and is the message asking for credentials, payment details, or a money transfer?<\/p>\n<p>**Statistic callout: ** The <a href=\"https:\/\/consumer.ftc.gov\/articles\/how-recognize-avoid-phishing-scams\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">FTC\u2019s guidance on phishing scams<\/a> notes that legitimate companies typically will not ask you to send sensitive information through an email link, which makes that single request one of the most reliable signals on its own.<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/media.babylovegrowth.ai\/blog-images\/organization-6456\/1790946934880_Illustration-of-phishing-warning-signals.jpeg\" alt=\"Illustration of phishing warning signals\" title=\"\"><\/p>\n<p>Grammar is no longer a dependable clue. CISA has noted that the underlying behavioral trigger, urgency and borrowed authority, persists even as AI-assisted writing makes phishing emails read more smoothly than they used to.<\/p>\n<h2 id=\"how-to-safely-inspect-links-attachments-and-senders\"><span class=\"ez-toc-section\" id=\"How_to_safely_inspect_links_attachments_and_senders\"><\/span>How to safely inspect links, attachments, and senders<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Before you click anything, hover your cursor over the link (without clicking) and look at the preview that appears in your browser or email client\u2019s status bar. If the visible text says \u201cyourbank.com\u201d but the preview shows a different domain, that mismatch alone is enough to stop. CISA\u2019s guidance on social engineering points out that HTML emails can display legitimate-looking text while the actual coded link sends you somewhere else entirely.<\/p>\n<ul>\n<li>Check the sender\u2019s full email address, not just the display name, for lookalike domains (an extra letter, a swapped number, a different top-level domain).<\/li>\n<li>Treat unexpected attachments, especially .exe, .zip, or macro-enabled Office files, as suspicious until scanned.<\/li>\n<li>If you need to verify a request, open a browser and type the company\u2019s known address directly instead of clicking the link.<\/li>\n<li>Run suspicious links through a URL scanner before visiting, or open attachments on an isolated or secondary device if you must check them at all.<\/li>\n<\/ul>\n<p><strong>Pro Tip:<\/strong> <em>When in doubt, call the sender using a phone number you already have on file, not one listed in the email.<\/em><\/p>\n<h2 id=\"what-to-do-if-you-clicked-opened-or-entered-credentials\"><span class=\"ez-toc-section\" id=\"What_to_do_if_you_clicked_opened_or_entered_credentials\"><\/span>What to do if you clicked, opened, or entered credentials<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Acting fast limits the damage. Work through this in order:<\/p>\n<ol>\n<li>Disconnect the device from Wi-Fi or unplug the network cable to stop any background activity.<\/li>\n<li>From a separate, clean device, change the password for the affected account and any account sharing that password, then turn on multi-factor authentication.<\/li>\n<li>Run a full malware scan on the affected device and update your operating system and antivirus software.<\/li>\n<li>If this happened on a work account, notify your IT or security team immediately so they can check for wider exposure.<\/li>\n<li>If you entered financial details, contact your bank or card issuer to flag possible fraud.<\/li>\n<li>Report the email: forward it to APWG at reportphishing@apwg.org, and file a report with the FTC at ReportFraud.ftc.gov.<\/li>\n<li>Preserve evidence, screenshots and the original email with headers, but do not forward the malicious email widely beyond official reporting channels.<\/li>\n<\/ol>\n<p>For a fuller walkthrough of recovering after exposure, see our <a href=\"https:\/\/logmeonce.com\/blog\/password-management\/sos-what-to-do-after-a-data-breach\/\" target=\"_blank\" rel=\"noopener\">guide on what to do after a data breach<\/a>.<\/p>\n<h2 id=\"everyday-prevention-habits-that-actually-hold-up\"><span class=\"ez-toc-section\" id=\"Everyday_prevention_habits_that_actually_hold_up\"><\/span>Everyday prevention habits that actually hold up<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Most phishing defenses come down to a few habits done consistently, plus some basic organizational hygiene.<\/p>\n<ul>\n<li>Use a password manager and unique passwords for every account so one stolen password does not unlock everything else.<\/li>\n<li>Turn on multi-factor authentication wherever it\u2019s offered.<\/li>\n<li>Keep your operating system, browser, and apps updated to close known security gaps.<\/li>\n<li>Never click a link in an unexpected email, even if it looks legitimate; type the address yourself instead.<\/li>\n<li>For organizations, set up SPF, DKIM, and DMARC on your email domain, run periodic phishing simulations, and give employees a one-click way to report suspicious messages.<\/li>\n<li>Use breach and dark web monitoring so you find out quickly if a password has already leaked, rather than finding out from fraud.<\/li>\n<\/ul>\n<p>Our <a href=\"https:\/\/logmeonce.com\/blog\/business\/professional-it-security-tips-everyone-can-benefit-from\/\" target=\"_blank\" rel=\"noopener\">guide to IT security habits<\/a> covers more of the organizational side, including training cadence and reporting channels.<\/p>\n<h2 id=\"why-habits-matter-more-than-spotting-the-perfect-fake\"><span class=\"ez-toc-section\" id=\"Why_habits_matter_more_than_spotting_the_perfect_fake\"><\/span>Why habits matter more than spotting the perfect fake<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>The mistake most people make isn\u2019t falling for an obviously fake email. It\u2019s assuming they\u2019d never fall for one, then clicking fast on a message that looks almost right. The habit that cuts clicks the most isn\u2019t vigilance, it\u2019s friction: pausing before you act on any request involving money, credentials, or urgency. Pair that with unique passwords and monitoring for leaked credentials, and a single bad click stops being a catastrophe.<\/p>\n<blockquote>\n<p><em>\u2014 Mike<\/em><\/p>\n<\/blockquote>\n<h2 id=\"where-protective-tools-fit-alongside-good-habits\"><span class=\"ez-toc-section\" id=\"Where_protective_tools_fit_alongside_good_habits\"><\/span>Where protective tools fit alongside good habits<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Spotting a sample phishing email is half the job. The other half is limiting the damage when one slips through, which is where a password manager, dark web monitoring, and multi-factor authentication earn their place. LogMeOnce\u2019s <a href=\"https:\/\/logmeonce.com\/password-manager\/\" target=\"_blank\" rel=\"noopener\">password manager<\/a> stops a single stolen password from unlocking every account, its <a href=\"https:\/\/logmeonce.com\/dark-web-scan-tool\/\" target=\"_blank\" rel=\"noopener\">dark web scan<\/a> flags credentials that have already leaked, and its passwordless MFA removes the password step phishing pages are built to steal. None of this replaces careful reading, it backs it up. Compare plans on the <a href=\"https:\/\/logmeonce.com\/pricing-and-comparison\/\" target=\"_blank\" rel=\"noopener\">pricing and comparison page<\/a> if you want to see what fits your setup.<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/csuxjmfbwmkxiegfpljm.supabase.co\/storage\/v1\/object\/public\/blog-images\/organization-6456\/1760417791460_logmeonce.jpg\" alt=\"Logmeonce\" title=\"\"><\/p>\n<h2 id=\"faq\"><span class=\"ez-toc-section\" id=\"FAQ\"><\/span>FAQ<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<h3 id=\"whats-a-common-trick-used-in-phishing-emails\"><span class=\"ez-toc-section\" id=\"Whats_a_common_trick_used_in_phishing_emails\"><\/span>What\u2019s a common trick used in phishing emails?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Attackers rely heavily on urgency, like a fake security alert or a payment deadline, to get you to act before you check the details. CISA\u2019s phishing guidance lists urgent language, requests for sensitive information, and generic greetings as the recurring pattern across most scams.<\/p>\n<h3 id=\"what-does-a-phishing-email-address-look-like\"><span class=\"ez-toc-section\" id=\"What_does_a_phishing_email_address_look_like\"><\/span>What does a phishing email address look like?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>It usually mimics a real company\u2019s domain but with a small change, an extra word, a different top-level domain, or a misspelling that\u2019s easy to miss at a glance. The display name might say \u201cAmazon Support\u201d while the actual address belongs to an unrelated or slightly altered domain.<\/p>\n<h3 id=\"what-are-some-examples-of-funny-phishing-emails\"><span class=\"ez-toc-section\" id=\"What_are_some_examples_of_funny_phishing_emails\"><\/span>What are some examples of funny phishing emails?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>There is no official database of \u201cfunny\u201d phishing emails, since most are designed to look routine rather than entertaining. The odd ones that do stand out are often poorly translated scam offers or oddly specific prize notifications, which still rely on the same urgency and reward triggers as more convincing attempts.<\/p>\n<h3 id=\"can-i-get-phished-just-by-opening-an-email\"><span class=\"ez-toc-section\" id=\"Can_I_get_phished_just_by_opening_an_email\"><\/span>Can I get phished just by opening an email?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Opening a plain email is generally low risk, since the danger usually comes from clicking a link, opening an attachment, or entering information on a fake page. The FTC has also flagged newer scams, including fake CAPTCHA prompts that instruct users to run commands that install malware, so treat any unusual on-screen instruction with the same caution as a suspicious link.<\/p>\n<h2 id=\"sources\"><span class=\"ez-toc-section\" id=\"Sources\"><\/span>Sources<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>CISA and the FTC publish the primary, government-backed guidance referenced throughout this article, and both accept phishing reports. APWG maintains a long-running archive built from user-forwarded phishing emails and accepts reports at reportphishing@apwg.org. For financial losses or business email compromise, the FBI\u2019s Internet Crime Complaint Center (IC3) is the appropriate law enforcement reporting channel.<\/p>\n<ul>\n<li><a href=\"https:\/\/www.cisa.gov\/secure-our-world\/recognize-and-report-phishing\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">Recognize and Report Phishing | CISA<\/a><\/li>\n<li><a href=\"https:\/\/consumer.ftc.gov\/articles\/how-recognize-avoid-phishing-scams\" rel=\"nofollow noopener noreferrer\" target=\"_blank\">How to recognize and avoid phishing scams | FTC<\/a><\/li>\n<\/ul>\n\n<div style=\"font-size: 0px; height: 0px; line-height: 0px; margin: 0; padding: 0; clear: both;\"><\/div>","protected":false},"excerpt":{"rendered":"<p>Get labeled sample phishing email templates for training, quick link and attachment checks, plus a 7 step incident response with MFA.<\/p>\n","protected":false},"author":17,"featured_media":248380,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[19736],"tags":[4027,939,2006,5708,2080,8703,781],"class_list":["post-107336","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-single-sign-on","tag-cybercrime","tag-phishing","tag-protection","tag-data","tag-email","tag-scam","tag-security"],"acf":[],"_links":{"self":[{"href":"https:\/\/logmeonce.com\/resources\/wp-json\/wp\/v2\/posts\/107336","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/logmeonce.com\/resources\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/logmeonce.com\/resources\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/logmeonce.com\/resources\/wp-json\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/logmeonce.com\/resources\/wp-json\/wp\/v2\/comments?post=107336"}],"version-history":[{"count":1,"href":"https:\/\/logmeonce.com\/resources\/wp-json\/wp\/v2\/posts\/107336\/revisions"}],"predecessor-version":[{"id":248379,"href":"https:\/\/logmeonce.com\/resources\/wp-json\/wp\/v2\/posts\/107336\/revisions\/248379"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/logmeonce.com\/resources\/wp-json\/wp\/v2\/media\/248380"}],"wp:attachment":[{"href":"https:\/\/logmeonce.com\/resources\/wp-json\/wp\/v2\/media?parent=107336"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/logmeonce.com\/resources\/wp-json\/wp\/v2\/categories?post=107336"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/logmeonce.com\/resources\/wp-json\/wp\/v2\/tags?post=107336"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}