Skip to main content

How can I verify the legitimacy of emails and identify phishing attempts?

D
Written by David Hung

How to Verify the Legitimacy of Emails and Identify Phishing Attempts

Email security is a critical concern, especially when dealing with sensitive information. Suspicious emails can often appear legitimate, making it essential to know how to verify their authenticity and protect yourself from phishing attempts. Below are guidelines to help you identify and handle potentially fraudulent emails.

Steps to Verify Email Authenticity

  1. Check the Sender’s Domain - Ensure the email is from an official domain. For example, emails from Take Command should come from @takecommandhealth.com. - Be cautious of slight misspellings or variations in the domain name, as these are common phishing tactics.

  2. Avoid Clicking Links or Opening Attachments - Do not interact with links or attachments in suspicious emails. Instead, navigate to the organization’s official website directly and log in from there.

  3. Look for Personalization and Accurate Details - Legitimate emails often include specific details about your account or interactions. Generic greetings and urgent requests are red flags.

  4. Verify Through Official Channels - Check your account notifications or statements within the official portal to confirm any claims made in the email.

Common Scenarios and How to Handle Them

Mass Emails About Coverage or Payments

  • If you receive an email about health insurance coverage or payment systems, such as one from support@takecommandhealth.com, avoid clicking any buttons or links. These emails may have been sent in error or could be under investigation for legitimacy. Wait for further instructions from the organization.

Emails Claiming to Be from Third-Party Services

  • Take Command does not send emails about payments or reimbursements from third-party services like BILL. Treat such emails as suspicious and report them.

Emails Found in Junk or Spam Folders

  • Emails in your junk folder should be treated with caution. Follow the verification steps above before interacting with them.

Confirmed Legitimate Emails

  • If you’re unsure about an email’s legitimacy, check that it comes from an official domain and avoid interacting with it until confirmed. For example, Take Command has confirmed that some emails were legitimate but still advises caution.

Actions to Take for Suspicious Emails

  • Mark as Spam or Phishing: Use your email provider’s tools to report suspicious messages.

  • Forward for Review: Send the email to Take Command or the relevant organization for confirmation.

  • Ignore and Delete: If you’re unable to verify the email, it’s safer to ignore and delete it.

By following these steps, you can better protect yourself from phishing attempts and ensure the emails you interact with are legitimate.

Did this answer your question?