Security guide

Security Decision System: How to Tell if an Email or Website is a Scam

Most people do not get hacked because they know nothing. They get hacked because the message looks safe while pushing them to act fast.

Use this simple system to slow down, identify the main signal, check the context, and choose the safest next action.

Analyze a suspicious email Check a risky website before you trust it

Why people still fall for scams

The email looks official. The request feels urgent.

Ignoring it feels risky. That pressure is where bad decisions happen.

The email looks official.

The request feels urgent.

Ignoring it feels risky.

That pressure is where bad decisions happen.

The system

The 4-step decision system

Step 1

Primary signal

What is the message trying to make you do?

Step 2

Pattern

Does it use urgency, payment pressure, login pressure, fear, or secrecy?

Step 3

Context

Did you expect this email, website, invoice, or request?

Step 4

Safe action

Verify separately, ignore, report, or write a cautious reply.

Real scenarios

Real examples help the decision feel obvious

Google Ads email for an account you never used

82/100

SituationA branded service email arrives, but you never signed up for that service.

Primary signalContext mismatch

PatternUnexpected service email

Safe decisionDo not interact. Open the official account manually and verify there.

Fake PayPal invoice with phone numbers

95/100

SituationThe message says you owe money and tells you to call a number to fix it.

Primary signalPayment pressure

PatternFake invoice and external contact method

Safe decisionDo not call. Check inside your real PayPal account instead.

Not sure if this is your situation?

Check the message before you click, pay, or reply.

Analyze this message before you reply Use the decision system

Blackmail or sextortion email

99/100

SituationA threat is used to scare you into paying fast.

Primary signalFear-based coercion

PatternThreat and crypto demand

Safe decisionIgnore it. Do not pay and do not reply with personal details.

Dropshipping spam emails

68/100

SituationUnwanted outreach from a seller, supplier, or buyer you never contacted.

Primary signalUnsolicited outreach

PatternScraped email and vague intent

Safe decisionIgnore or filter it. Do not share business details yet.

Fake payment failed provider email

91/100

SituationA service says payment failed and pushes you to update billing details right away.

Primary signalLogin or payment pressure

PatternUrgency plus payment request

Safe decisionDo not click the link. Open the provider manually and check your billing there.

Not sure if this is your situation?

Check the message before you click, pay, or reply.

Analyze this message before you reply Use the decision system

Suspicious website with missing company details

74/100

SituationThe page looks real but hides the business, legal, or contact information.

Primary signalThin trust signals

PatternMissing company details and weak proof

Safe decisionDo not enter payment details yet. Check the homepage, contact page, and legal pages first.

Prize or reward scam page

97/100

SituationThe page says you won something and asks for card or email details before release.

Primary signalPrize bait

PatternReward claim and payment ask

Safe decisionClose the page. Do not give details or pay to collect it.

Vague agency or business inquiry

61/100

SituationSomeone says they want to work with you but gives no clear context.

Primary signalVague unknown request

PatternUnclear intent and low context

Safe decisionVerify through a known official channel before you reply or share anything.

Before you reply

If you still need to reply, do it safely

Sometimes you still need to answer, to a client, supplier, platform, or stranger. The safest reply is calm, short, and non-committal. It should not confirm private details, promise payment, or click their links.

Generate a safe reply

Use it when you need to respond without confirming sensitive details or guessing.

Common signs of a scam

Suspicious email patterns usually repeat the same pressure tricks

Common scam email signs include a suspicious email with a strange sender, scam email signs that push urgency, fake invoices, account suspension notices, and phishing examples that imitate real services. If you are asking “is this email legit,” verify it through a known channel first.