Stop Think AskAll lessons

All lessons › Level 3: Emails & look-alikes

Buttons can lie

RememberNever log in from an email link.

Example from the test

An email from "your bank" has a button: "Log in to secure your account". What is the safest thing to do?

  • Click the button and log in quickly
  • Reply to the email and ask if it is real
  • Close the email and open your bank app yourself

Answer: Close the email and open your bank app yourself. Replying goes to the scammer. Opening the app yourself is always safe.

You press and hold the "Track order" button in an email from "Amazon". It shows: http://amazon.track-parcel.xyz/login. What does this mean?

  • It is Amazon, because it says amazon
  • It is a fake website. The real owner is track-parcel.xyz
  • It is safe if the page shows the Amazon logo

Answer: It is a fake website. The real owner is track-parcel.xyz. The real owner of a web address is the part just before the first single slash: track-parcel.xyz. Logos are easy to copy.