Technology
Don’t click that link! How to spot, prevent phishing attacks in your inbox
‘CyberGuy’: Don’t take the bait
Kurt Knutsson provides advice on how to identify safe email links and tips for safeguarding your email account against phishing attacks.
Imagine this nightmare scenario. You receive an email from your health insurance provider, let’s say it’s Blue Shield, asking you to update your personal information by clicking on a link. You think it’s a routine request, so you click on the link and enter your name, date of birth, and social security number. The next thing you know, your identity is stolen, and your credit score is ruined.
This is a common occurrence of a phishing attack, a type of online scam that targets your email account. Phishing attacks are designed to trick you into clicking on malicious links, opening infected attachments, or providing personal information to hackers who want to steal your money, identity, or data. It’s definitely a concern of Don, from Michigan, who wrote to us asking,
“You mention not to tap/select links in emails, how do I know if email links are OK to select? (like Blue Cross Blue Shield??)” — Don, Michigan
Well, Dan, that is a great question that we will answer and share some tips on how to protect yourself from these attacks.
CLICK TO GET KURT’S FREE CYBERGUY NEWSLETTER WITH SECURITY ALERTS, QUICK VIDEO TIPS, TECH REVIEWS, AND EASY HOW-TO’S TO MAKE YOU SMARTER
A person typing on a laptop (Kurt “CyberGuy” Knutsson)
How do I know if an email link is safe to select?
Here are three simple and effective ways to check if an email link is safe to select. These tips will help you avoid clicking on links that could lead you to phishing websites or malware downloads.
1) Inspect the link
One of the best ways to check if a link is safe to select is to inspect the link before clicking on it. To do this, you can carefully hover your mouse over the link and look at the web address that appears. If the web address looks suspicious, misspelled, or unfamiliar, don’t click on it.
When in doubt, go directly to the company’s website by manually typing in the web address, or searching for the site in a search engine. Most often, the first or second result that comes up is legitimate. If you see the word “Sponsored “above the search result, take a beat before clicking it and consider clicking on the result below it.
Example of inspecting a link in an email (Kurt “CyberGuy” Knutsson)
2) Verify the sender of the email
Another way to check if an email link is safe to select is to verify the sender of the email. Make sure that the email is from a legitimate source and not a spoofed or fake one. Scammers often use slight variations or impersonate legitimate sources. You can do this by looking at the sender’s email address and name. If the email address or name doesn’t match the sender’s identity, don’t trust the email.
If you’re still unsure about the authenticity of an email or a link, you can contact the sender directly and ask them to confirm. Don’t use the contact information provided in the email, but look for it on their official website or other trusted sources. Whatever you do, do not click on any links or provide personal information.
Example of how to check who an email is from (Kurt “CyberGuy” Knutsson)
MORE: HOW TO PROTECT YOUR IPHONE FROM CYBERATTACKS WITH LOCKDOWN MODE
3) Before you click on any links or email attachments, ask yourself 3 questions
Pause before clicking. Before you click on any link or open any attachment, take a moment to evaluate it and ask yourself these 3 questions:
- Do I know the sender?
- Do I trust them?
- Did I expect them to send me a link or an attachment?
If the answer is no to any of these questions, then you should absolutely not click on any link or open the attachment. These links or attachments may look harmless, but they can actually contain harmful malware that can damage your device or steal your data. It’s better to be safe than sorry when it comes to email attachments.
Person typing on a smartphone (Kurt “CyberGuy” Knutsson)
MORE: ANOTHER HOME THERMOSTAT FOUND VULNERABLE TO ATTACK
How to secure your email account from phishing attacks
Here are 6 tips to protect your email account from phishing attacks.
#1 CyberGuy tip: Use antivirus software: This is perhaps one of the best investments you can make for yourself to protect yourself from phishing scams. Having antivirus software actively running on your devices will make sure you are stopped from clicking on any malicious links or from downloading any files that will release malware into your device and potentially have your private information stolen. Read my review of my best antivirus picks here.
2) Enable two-factor authentication (2FA): Whenever possible, enable 2FA for your online accounts. This adds an extra layer of security by requiring a second form of verification, such as a unique code sent to your phone, in addition to your password.
3) Keep software up to date: Regularly update your operating system, web browsers, and antivirus software to ensure they are equipped to detect and prevent the latest threats. You can regularly check for these updates on your device’s settings app for software updates, and you can go to your App Store or Google Play Store (depending on the device you have) to check for updates on individual apps. Follow these steps here.
4) Be cautious with personal information: Be wary of sharing sensitive information online, especially if it’s unsolicited or seems suspicious. Legitimate organizations rarely ask for personal details via email.
5) Report suspicious emails: If you receive a suspicious email claiming to be from a specific organization, report it to that organization’s official support or security team so they can take appropriate action.
6) Educate yourself and others: Stay informed about the latest phishing tactics and share this knowledge with friends, family, and colleagues. Awareness is a powerful tool in preventing scams.
MORE: FACEBOOK ACCOUNTS HIT WITH MALICIOUS AD ATTACK WITH DANGEROUS MALWARE
What should you do if you’ve clicked a link and installed malware on your device?
If you’ve been hacked, it’s not too late. There are several ways you can protect yourself from hackers, even when they have access to your information.
Scan your device for malware
First, you’ll want to scan your computer with a reputable and legitimate antivirus program. See my expert review of the best antivirus protection for your Windows, Mac, Android & iOS devices.
Change your passwords immediately
If you’ve inadvertently given your information to hackers or malicious actors, they could have access to your social media or banking accounts. To prevent this, you should change your passwords for all your important accounts as soon as possible. However, you should not do this on your infected device, because the hacker might see your new passwords. Instead, you should use ANOTHER DEVICE, such as your laptop or desktop, to change your passwords. Make sure you use strong and unique passwords that are difficult to guess or break. You can also use a password manager to generate and store your passwords securely.
Monitor your accounts and transactions
You should check your online accounts and transactions regularly for suspicious or unauthorized activity. If you notice anything unusual, report it to the service provider or the authorities as soon as possible. You should also review your credit reports and scores to see signs of identity theft or fraud.
Use identity theft protection
Phishing emails target your personal information. Hackers can use this information to create fake accounts in your name, access your existing accounts, and pretend to be you online. This can cause serious damage to your identity and credit score.
To avoid this, you should use identity theft protection services. These services can track your personal information, such as your home title, Social Security Number, phone number, and email address, and notify you if they detect any suspicious activity. They can also help you freeze your bank and credit card accounts to stop hackers from using them. Read more of my review of best identity theft protection services here.
Contact your bank and credit card companies
If hackers have obtained your bank or credit card information, they could use it to make purchases or withdrawals without your consent. You should contact your bank and credit card companies and inform them of the situation. They can help you freeze or cancel your cards, dispute any fraudulent charges, and issue new cards for you.
Alert your contacts
If hackers have accessed your email or social media accounts, they could use them to send spam or phishing messages to your contacts. They could also impersonate you and ask for money or personal information. You should alert your contacts and warn them not to open or respond to any messages from you that seem suspicious or unusual.
Restore your device to factory settings
If you want to make sure that your device is completely free of any malware or spyware, you can restore it to factory settings. This will erase all your data and settings and reinstall the original version. You should back up your important data before doing this, and only restore it from a trusted source.
MORE: HOW HACKERS ARE TARGETING X VERIFICATION ACCOUNTS TO TRICK YOU
Kurt’s key takeaways
Making you and your family resilient from these growing dangers needs to be your number one priority. Protecting yourself from phishing attacks is crucial. Falling victim to such scams can result in identity theft, financial losses, and data breaches. Don’t let yourself become a target. By following the steps we’ve outlined above and staying vigilant, you can significantly reduce the risk of falling prey to phishing attacks. Your online security is in your hands, so make informed choices to protect your personal information and data.
Have you ever encountered a suspicious email or phishing attempt? How did you handle it, and what did you learn from the experience? Let us know by writing us at Cyberguy.com/Contact.
For more of my tech tips & security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.
Ask Kurt a question or let us know what stories you’d like us to cover.
Answers to the most asked CyberGuy questions:
Copyright 2024 CyberGuy.com. All rights reserved.
Microsoft’s Office 2019 apps for Mac will stop working next month, because the company isn’t renewing a certificate that validates Office licenses. Owners of Office 2019 for Mac are being warned they’ll have to purchase Office 2024 or a Microsoft 365 subscription if they want to continue editing documents.
Microsoft previously promised that “all your Office 2019 apps will continue to function,” when it announced end of support in 2023. The company then quietly updated that support note last month to remove the mention of apps continuing to function, replacing it with “Rest assured that all your Office 2019 apps won’t lose any data.”
Starting on July 13th, Office 2019 for Mac and Office 2021 for Mac will both run in “reduced functionality mode,” allowing people to open files but not edit, save, or create new documents. The reduced functionality will impact Word, Excel, PowerPoint, Outlook, and OneNote.
While Microsoft is providing a certificate update for Office 2021 as it’s still supported until October 13th, 2026, the company is leaving Office 2019 for Mac users out in the cold as support for these apps ended a few years ago. “Office 2019 for Mac reached end of support on October 10, 2023, and no longer receives updates,” says Microsoft. “Because Office 2019 cannot be updated to the required version, this issue cannot be resolved by updating or reinstalling Office 2019 for Mac.”
JimmyTech points out that old versions of Microsoft 365 apps on Mac and iOS will also be affected by this certificate issue, but a simple update will fix it for those users.
Microsoft regularly ends support of software and there’s always the risk you could run into issues running older apps or versions of Windows. It’s still surprising to not see Microsoft make an exception here though, particularly because this certificate issue breaks the main functionality of an app you’ve paid a one-time license fee for.
NEWYou can now listen to Fox News articles!
You know that little moment when your phone rings and the name on the screen makes you drop everything?
Maybe it says your spouse, your daughter, your boss or your best friend. You answer because you trust the name. Then the voice sounds familiar too.
That is exactly what makes the latest phone scams so dangerous.
Android’s fake call detection can warn you when a caller may be pretending to be someone saved in your contacts. (Silas Stein/Picture Alliance)
Scammers no longer have to call from a strange number. They can spoof a trusted contact’s phone number. Then they can use AI voice tools to sound like someone you know. Android is now rolling out a new feature called fake call detection to help warn you when that familiar call may be a fake.
FAKE AGENT PHONE SCAMS ARE SPREADING FAST ACROSS THE US
Join CyberGuy Live: Lock Down Your Phone in 30 Minutes (Saturday, June 13, 10 am ET)
- Your phone holds your email, passwords, photos, banking apps and personal data. In this free, live online class, Kurt the CyberGuy will walk you step by step through simple phone security fixes you can do in real time. You’ll learn how to improve your privacy settings, spot the latest phone scams, use trusted security tools and walk away with a simple checklist to stay protected. Register here: CyberGuyLive.com
What is Android fake call detection?
Android fake call detection is a new protection built into Phone by Google. It is designed to spot suspected spoofed calls when both people on the call use Phone by Google.
Think of it as your phone quietly asking, “Is this call really coming from that person’s device?” If the answer looks suspicious, your phone can show a warning and advise you to hang up. That small alert could stop a scam before fear, panic or confusion takes over.
ANDROID SECURITY UPGRADES OUTSMART SCAMS AND PROTECT YOUR PRIVACY
How Android fake call detection works
The feature works automatically in the background. You do not need to answer a quiz, scan a code or press a button during the call. When a trusted contact calls you, their phone sends a silent confirmation signal to your phone. That signal helps prove the call really came from their device.
If a scammer spoofs your contact’s number, that confirmation signal may be missing. Your phone then checks with your contact’s actual device. If the real device says it is not placing a call, your screen can warn you that the call may be fake.
The system uses end-to-end encrypted RCS technology, so the check happens privately. You can also turn the feature off in Phone by Google settings.
AI DEEPFAKE ROMANCE SCAM STEALS WOMAN’S HOME AND LIFE SAVINGS
Why fake calls are getting harder to spot
For years, caller ID gave people a sense of control. If the name looked familiar, most of us felt safer picking up. That old habit now works in the scammer’s favor.
Scammers can use internet-based calling tools to spoof numbers. That means your phone may display the name of someone you trust, even though the call comes from somewhere else.
Then comes the AI voice trick. With today’s audio tools, scammers can make a fake voice sound shockingly real. They may pretend to be a family member in trouble, a bank employee warning about fraud or a manager asking for urgent help.
SCAMMERS EXPLOITED MOM’S FEARS TO STEAL HER ENTIRE LIFE’S SAVINGS
That combination makes the call feel personal and immediate. It also makes you more likely to act before you think.
Why Android is adding this protection now
Impersonation scams have become a major global problem. INTERPOL’s March 2026 Global Financial Fraud Threat Assessment cited impersonation fraud as one of the leading contributors to more than $400 billion in global losses.
In the U.S., impersonation scams remain one of the top fraud categories reported to the FTC. Losses reached $2.95 billion in 2024.
GLOBAL SCAM CRACKDOWN LEADS TO 276 ARRESTS
Those numbers tell you why this feature deserves attention. Scammers go where the money is. Right now, they know trusted voices and trusted names can open the door.
Which Android phones get fake call detection?
Google says fake call detection is rolling out globally in Phone by Google this month, starting with Pixel devices.
The feature is available on Android 12 and newer devices with Phone by Google, Contacts and Google Messages installed. It also requires RCS capability in Google Messages.
SAMSUNG MESSAGES ENDING? WHAT ANDROID OWNERS MUST KNOW
There is one key limitation. Both you and the person calling you must use Phone by Google for fake call detection to work.
Phone by Google already comes as the default phone app on many Android devices. If your phone uses a different calling app, you can install Phone by Google from the Play Store and set it as your default phone app.
How Android fake call detection protects you
This feature gives you an extra warning at the exact moment you need it most. That timing is important. Scam calls often rely on emotion. The caller may say someone got arrested, a loved one had an accident or a bank account faces an urgent threat.
SSA IMPERSONATION SCAMS ARE GETTING MORE PERSONAL
When the voice sounds familiar, your guard drops. A warning on your screen can interrupt that emotional rush. It gives you a reason to stop, hang up and verify the story another way.
What Android fake call detection cannot do
This new tool helps, but it cannot protect you from every scam. It may not work if the other person does not use Phone by Google. It also may not cover calls from businesses, unknown numbers or contacts using unsupported devices. So you still need basic scam rules.
If someone asks for money, gift cards, crypto, account codes or remote access to your device, hang up. Then call the person or company back using a number you already trust.
Also, never stay on the line just because the caller tells you to. That is one of the oldest pressure tactics in the scammer playbook.
A spoofed call can look familiar on your screen, even when it is really coming from a scammer. (Kurt CyberGuy Knutsson)
How to protect yourself from AI voice scams
AI voice scams work because they sound personal, urgent and believable, so your best defense is to slow the conversation down before you act.
1) Create a family safe word
Pick a simple word or phrase that only your close family knows. It should be easy to remember but hard for a scammer to guess. Then, if someone calls with an emergency and asks for money, ask for the safe word. If they cannot give it, hang up and verify the story another way.
9 WAYS SCAMMERS CAN USE YOUR PHONE NUMBER TO TRY TO TRICK YOU
2) Pause when the call feels urgent
Scammers want you scared because fear makes people act fast. That is why fake emergency calls often sound intense, emotional and rushed. Take a breath before you do anything. A real loved one, bank or employer will let you verify what is happening.
3) Call back using a trusted number
If a call feels suspicious, hang up. Then call the person back using a number saved in your contacts or one you know is real. Do not use a number, link or instruction the caller gives you. That could send you right back to the scammer.
4) Never send money or codes during the call
Do not send gift cards, crypto, wire transfers or payment app transfers because a caller sounds convincing. Also, never share a one-time passcode, PIN or account login code over the phone. Once scammers get that information, they can move fast.
5) Turn on scam protections on your phone
Use the built-in protections already available on your device. Pixel and Samsung users can enable Scam Detection in the Phone by Google app to help flag suspicious calls. Also, consider using strong antivirus software that includes AI-powered scam protection to help detect scams in texts, online content and deepfake videos. Keep an eye on call warnings too. If your phone tells you something looks risky, treat that alert seriously. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com
6) Keep your phone apps updated
Update Phone by Google, Google Contacts and Google Messages when updates are available. These tools work best when your apps and phone software stay current. Updates often include security improvements, bug fixes and new scam protections.
Here’s how to check for updates on Android:
- Open the Google Play Store app.
- Tap your profile icon in the top right corner.
- Tap Manage apps & device.
- Under Updates available, tap See details.
- Look for Phone by Google, Google Contacts and Google Messages.
- Tap Update next to each app, or tap Update all.
You can also turn on automatic app updates by opening the Google Play Store app, tapping your profile icon, then going to Settings > Network preferences > Auto-update apps. From there, choose whether to update apps over Wi-Fi, over Wi-Fi or mobile data, with limited mobile data or not at all.
Kurt’s key takeaways
If a call feels urgent or suspicious, pause before you respond and verify it another way. (Tristan Spinski/The Washington Post via Getty Images)
Android’s fake call detection is a smart step in the fight against AI-powered phone scams. It recognizes something many people already know: the name on your caller ID no longer proves the person calling you is real. This feature gives Android users another layer of protection when scammers try to hijack trust. Still, the safest move remains simple. Slow down, verify the call and never let panic make the decision for you.
Should the government do more to stop scammers from using AI voices to impersonate the people you trust? Let us know by writing to us at CyberGuy.com
Sign up for my FREE CyberGuy Report
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
Copyright 2026 CyberGuy.com. All rights reserved.
Congress narrowly voted to fund President Donald Trump’s mass deportation agenda, giving the Department of Homeland Security $70 billion over the next three years.
The house voted 214 to 212 in favor of the reconciliation bill Tuesday, following the Senate’s 52-47 vote last Friday morning. The vote fell largely along party lines. Sen. Lisa Murkowski (R-AK) was the only Senate Republican to vote against it. Rep. Tim Walberg (R-MI), initially voted against the bill — meaning it would have failed — but changed his vote after huddling with House Majority Leader Steve Scalise (R-LA) and Appropriations Chair Tom Cole (R-OK), according to The Hill. No Democrats voted in favor of the funding bill, which was done through a budget reconciliation process to avoid a Democratic filibuster.
In a speech on the House floor ahead of the Tuesday vote, Rep. Mary Gay Scanlon (D-PA) criticized Republicans for using the budget reconciliation process to avoid negotiating with Democrats, and emphasized ICE’s lack of popularity with the American people.
“At its core, this Republican reconciliation budget bill is a statement about priorities, and the priorities represented in this budget bill could not be more out of step with the needs and values of the American people,” Scanlon said.
Scanlon noted that DHS has yet to spend $100 billion of the nearly $200 billion it received under Trump’s One Big Beautiful Bill Act. She added that Trump has not only expanded ICE’s reach by increasingly going after legal immigrants but also weaponized DHS against its critics. The bill, she said, will “supercharge” Trump’s abuses.
After the House markup last Friday, Rep. Rosa DeLauro (D-CT), ranking member of the House Appropriations Committee, noted that the bill not only lacks sufficient reforms but also cuts funding for cybersecurity and TSA, whose workers went weeks without pay during the DHS shutdown.
The funding bill comes at a time of deep unpopularity for ICE. One recent poll found that just 33 percent of voters approve of how the agency is doing its job.
And it comes amid yet another threat from border czar Tom Homan to flood New York City with ICE agents. In an interview with Fox News on Monday, Homan said he would send “more ICE agents than you’ve ever seen” to New York City if the state government passed a bill limiting cooperation with DHS.
“Providing a quarter trillion dollars to an administration promising that the public ‘ain’t seen shit yet’ when it comes to mass deportation is a historic mistake,” Todd Schulte, president of the immigration reform group FWD.us, said in a statement. “Supercharging the funding for these already out of control systems will come with terrible human consequences and continue to be met with increasing opposition from voters.”
Correction, June 9th: A previous version of this story said Rep. Tim Walberg voted against the funding bill. He initially voted against it but then changed his vote to support it.
Update, June 9th: This story has been updated to include comment from FWD.us president Todd Schulte.
-
South Dakota50 seconds agoWhat to know about the SD’s first gubernatorial runoff
-
Tennessee8 minutes agoComparing Tennessee’s Neyland Entertainment District to others in college sports
-
Texas11 minutes agoWhere to watch Texas Rangers vs Kansas City Royals: TV channel, start time, streaming for June 10
-
Utah16 minutes agoNew NBA Draft Intel: AJ Dybantsa, Darryn Peterson and Utah
-
Vermont23 minutes agoVermont Green FC plays Canada’s national soccer team in World Cup tuneup – VTDigger
-
Virginia26 minutes agoNavy sailor sentenced to 44 years for killing fellow service member Angelina Resendiz in his Virginia barracks room
-
Washington31 minutes ago
Where to watch Washington Nationals vs San Francisco Giants: TV channel, start time, streaming for June 10
-
Wisconsin38 minutes agoChris Borland heads back to Wisconsin as Hall of Fame inductee
