Spot the Red Flags in a Fake Broker Email
Posted: Wed Oct 28, 2026 7:28 pm
Spot the Red Flags in a Fake Broker Email
Scenario: you receive this message. Subject: "URGENT: Your account will be suspended in 24 hours." Body: "Dear Customer, we noticed unusual activity. Click the link below to verify your identity and password. Failure to comply will result in closure and loss of funds. Sent from [email protected]." The broker's real website is brokerfx.com. The invented link text says brokerfx.com but points elsewhere.
Count the flags. One: urgency and a threat, with a short deadline. Two: a generic greeting, "Dear Customer," instead of your name. Three: a sender domain, brokerfx-secure-verify.com, which differs from the broker's real domain. Four: a link whose visible text does not match its destination, which you can see by hovering. Five: a request for your password, which no genuine broker asks for by email. Six: a vague reason, "unusual activity," with no details of any trade. Seven: a threat of losing funds, which exploits fear.
Seven flags out of seven checks. Any two would justify caution.
What should you do? Do not click. Do not reply. Open your broker's website by typing the address yourself, log in, and check for messages. Contact support using details from the official site if you are unsure. Report the email to the broker and mark it as phishing.
If you clicked and entered your password, change it immediately from a clean device, enable two-factor authentication, review account activity, and contact the broker.
Exercise: write your own checklist of five questions to ask about any message that mentions your account.
Scenario: you receive this message. Subject: "URGENT: Your account will be suspended in 24 hours." Body: "Dear Customer, we noticed unusual activity. Click the link below to verify your identity and password. Failure to comply will result in closure and loss of funds. Sent from [email protected]." The broker's real website is brokerfx.com. The invented link text says brokerfx.com but points elsewhere.
Count the flags. One: urgency and a threat, with a short deadline. Two: a generic greeting, "Dear Customer," instead of your name. Three: a sender domain, brokerfx-secure-verify.com, which differs from the broker's real domain. Four: a link whose visible text does not match its destination, which you can see by hovering. Five: a request for your password, which no genuine broker asks for by email. Six: a vague reason, "unusual activity," with no details of any trade. Seven: a threat of losing funds, which exploits fear.
Seven flags out of seven checks. Any two would justify caution.
What should you do? Do not click. Do not reply. Open your broker's website by typing the address yourself, log in, and check for messages. Contact support using details from the official site if you are unsure. Report the email to the broker and mark it as phishing.
If you clicked and entered your password, change it immediately from a clean device, enable two-factor authentication, review account activity, and contact the broker.
Exercise: write your own checklist of five questions to ask about any message that mentions your account.