iCoreHosting Official Knowledgebase Article Structure
How to Identify Possible Scam Emails
Table of Contents
Service Direction / Introduction / Scope
Scam emails imitate trusted companies or contacts to steal information or trigger a payment. Logos, familiar names and polished writing do not prove that a message is genuine. Use these checks before responding.
This guide covers recognizing and handling suspicious email.
Service Transparency
Email filtering reduces risk but cannot confirm every sender or request. Familiar names, copied logos and even compromised real mailboxes can make a scam appear genuine.
Definitions
- Phishing: A deceptive message that tries to obtain information or make you take a harmful action.
- Spoofing: A forged sender identity or display name.
- OTP: A one-time security code used to confirm access or a transaction.
Description of Content / Step-by-Step Guide
- Check the full address
- Open the sender details, not just the display name.
- Look for misspelled or unfamiliar domains and unusual reply-to addresses.
- Check the destination
- Preview links without opening them.
- For sign-in or payment, open the official website from a trusted bookmark instead.
- Pause before opening files
- Do not open unexpected attachments.
- Confirm files with the sender through a known contact method.
- Watch for urgent demands
- Be cautious of account suspension, payment failure or last-minute warnings.
- Good grammar and familiar logos are not proof of safety.
- Protect sensitive details
- Do not share passwords, OTP codes or account access details.
- Verify payment changes and unusual document requests independently.
- Use a trusted channel
- Call a previously known number or visit the official website.
- If unsure, do not reply or act on the email. Report it privately to support.
Important Note
Change it immediately through the official website and change it anywhere else you reused it. Enable two-step verification where available and contact your IT team. If you opened a file, ask IT to check the device.
Common Mistakes
- Trusting the sender name or logo without checking the full address.
- Opening links or attachments before verifying an unexpected request.
- Sharing passwords or OTP codes, or acting under pressure.
Responsibility Breakdown
Customer / organization: Review suspicious messages, protect credentials and verify unusual requests through trusted contacts. Maintain appropriate internal approval and device-security procedures.
iCoreHosting: Review reported hosting-email or filtering issues within the applicable service scope using the information provided.
Third parties: External email providers, software vendors and business contacts control their own systems and must independently confirm requests relating to them.
Limitations
No filter or guide can guarantee that every scam is detected. Authentication, familiar branding or a clean scan is not proof of a genuine request. This guidance does not guarantee prevention, recovery or a particular investigation outcome.
Support Information
Contact iCoreHosting Support through the official channel. Include the affected address, approximate date and time, a short description and full email headers where available. Share sensitive evidence privately; never send your password or OTP.
FAQ
Is a company logo proof that the email is safe?
No. Logos and signatures can be copied.
Can a known contact send a scam?
Yes. Their account may be compromised. Verify unusual requests independently.
What if I entered my password?
Change it through the official website, change reused passwords and notify your IT team. Enable two-step verification where available.
Use Case
Situation: An email says your mailbox will be suspended unless you verify your password. The sender name is familiar, but the link uses an unfamiliar domain.
Action: Do not use the link. Open your official account portal independently or contact support using known details.
Expected result: Independent verification helps establish whether the request is genuine before you disclose information.
Summary
Pause before acting. Check the full sender address, destination links, attachments and request. Verify through a trusted channel and report suspicious messages.