How to Spot and Avoid Phishing Emails

Phishing is one of the most common online threats — scammers send emails pretending to be a company you trust (your host, your bank, a delivery service) to trick you into handing over passwords or payment details. The good news is that once you know the warning signs, phishing emails become much easier to spot.

Red flags to watch for

Urgency and threats — “Your account will be closed in 24 hours!” is designed to make you panic and act without thinking.
Suspicious sender address — the display name may look right, but the actual email address is off, like support@vernalweb-billing.co.
Odd links — hover over a link before clicking; if it does not go where it claims, do not click.
Requests for passwords or payment — legitimate companies never ask for your password by email.
Spelling and grammar mistakes, or generic greetings like “Dear Customer”.

How to protect yourself

Never click links in unexpected emails. Instead, type the website address yourself or use a bookmark.
Check before you act. If an email claims to be from us, log in to your client area directly to verify.
Turn on two-factor authentication — even a stolen password is not enough then. See enabling 2FA.
Use strong, unique passwords — see creating strong passwords.

What to do if you receive a phishing email

Do not click anything. Delete it, and if it impersonates VernalWeb, feel free to report it to us. If you already entered a password, change it immediately everywhere you used it.

Frequently asked questions

Does VernalWeb ever ask for my password by email?

Never. We will not ask for your password, card number or full login details by email. Anyone who does is not us.

I clicked a phishing link. What now?

If you entered any details, change those passwords right away and enable 2FA. Then scan your computer for malware.

How can I tell if an email is really from you?

Check the sender’s full address, and when in doubt, log in to your client area directly rather than through any emailed link.