Protecting Seniors from Email Phishing Scams

Phishing emails are one of the most widespread threats facing older adults online. These fraudulent messages are designed to look like they come from trusted sources — banks, government agencies, online retailers, or even family members — with the goal of stealing personal information, passwords, or money.

For seniors who didn't grow up navigating digital communication, these emails can be surprisingly convincing. Here's how to spot them and stay protected.

What Is Phishing?

Phishing is when a scammer sends a fake email pretending to be someone you trust. The email usually asks you to click a link, download an attachment, or provide personal information like your password, Social Security number, or credit card details.

The word "phishing" comes from "fishing" — the scammer casts a wide net, hoping someone will take the bait.

Common Phishing Emails Targeting Seniors

The Bank Alert

You receive an email that appears to be from your bank saying there's suspicious activity on your account. It asks you to "verify your identity" by clicking a link and entering your username and password.

Why it works: It creates fear and urgency. No one wants their bank account compromised.

How to spot it: Your bank will never ask you to verify your password through email. If you're concerned, call the number on the back of your debit card directly.

The Package Delivery Notice

An email claims a package couldn't be delivered and asks you to click a link to reschedule delivery or confirm your address.

Why it works: Many people order items online and may not remember exactly what's coming.

How to spot it: Check the sender's email address carefully. It will often be a random string of characters, not an official domain like @ups.com or @fedex.com.

The Tech Support Warning

An email claims your computer has been compromised or your antivirus subscription has expired. It urges you to call a phone number or click a link immediately.

Why it works: Fear of losing access to your computer or having your data stolen.

How to spot it: Legitimate software companies don't send unsolicited threat notifications via email. If your antivirus needs attention, the software on your computer will notify you directly.

The Lottery or Prize Notification

You've "won" a prize, inheritance, or sweepstakes — but you need to pay a fee or provide banking details to claim it.

Why it works: The promise of unexpected money is hard to ignore.

How to spot it: You cannot win a contest you didn't enter. Any prize that requires you to pay money to collect it is a scam.

The Family Emergency

An email appears to come from a grandchild or family member saying they're in trouble and need money urgently. They ask you to keep it a secret.

Why it works: The emotional pull of wanting to help family is powerful.

How to spot it: Always verify by calling the family member directly at their known number. Scammers rely on you acting out of emotion before thinking critically.

Red Flags in Any Email

Regardless of who the email claims to be from, watch for these warning signs:

• Urgency or threats. "Your account will be closed in 24 hours" or "Immediate action required."
• Generic greetings. "Dear Customer" or "Dear User" instead of your actual name.
• Suspicious sender address. The display name might say "Bank of America" but the actual email is something like notification@bnk-alert-service.com.
• Spelling and grammar errors. Professional organizations proofread their communications.
• Requests for personal information. No legitimate company asks for passwords, Social Security numbers, or PINs via email.
• Suspicious links. Hover over (don't click) any link to see where it actually goes. If the URL looks strange, don't click it.
• Unexpected attachments. Never open an attachment you weren't expecting, especially .zip or .exe files.

What to Do If You Receive a Suspicious Email

1. Don't click any links or open any attachments.
2. Don't reply to the email. Replying confirms your email address is active, which leads to more scam attempts.
3. Verify independently. If the email claims to be from a company you do business with, look up their official phone number and call them directly.
4. Report it. Forward the email to reportphishing@apwg.org. You can also report it to the FTC at reportfraud.ftc.gov.
5. Delete it. Once reported, delete the email from your inbox and your trash folder.

How to Help a Senior Stay Safe

If you're helping a parent or grandparent protect themselves from phishing:

• Set up spam filters. Most email providers have built-in spam filtering. Make sure it's turned on.
• Teach the hover trick. Show them how to hover over a link (without clicking) to reveal the real URL.
• Create a safe word. Establish a family code word that must be used in any email requesting money or urgent action.
• Be patient. Learning to identify scams takes practice. Celebrate the times they correctly identify a suspicious email rather than criticizing mistakes.
• Give them someone to call. When something feels off, having a trusted resource to check with makes all the difference.

SafeLineCare is designed to be exactly that resource. When your parents receive an email they aren't sure about, they can call SafeLineCare for patient, jargon-free guidance on whether it's legitimate or a scam.