Skip to main content

How to spot a phishing email

The warning signs of a phishing email, and what to do if you receive one.

Phishing emails are messages designed to look like they come from a trusted organisation, including ScottishFibre, but are actually sent by criminals trying to trick you into clicking a link, sharing personal information, or making a payment. Knowing the signs can help you avoid falling for one.

Common signs of a phishing email

  • Urgency or pressure: phrases like "your account will be closed in 24 hours", "act now", or "immediate action required" are designed to make you panic and click without thinking.

  • A generic greeting: emails from genuine companies usually address you by name. "Dear Customer" or "Dear Sir/Madam" can be a red flag.

  • An unexpected request: being asked for your password, full bank details, or one-time security codes, especially out of the blue.

  • A suspicious link: hover over any links (without clicking) to see the real address. If it doesn't match the company's actual website, don't click it.

  • A slightly off email address: scammers often use addresses that look almost right but aren't, for example "scottishfibre-billing.com" instead of "scottishfibre.com".

  • Spelling and grammar mistakes: phishing emails are getting more sophisticated, but typos and awkward phrasing are still common.

  • Unexpected attachments: never open an attachment you weren't expecting, especially Word documents, PDFs, or .zip files.

What ScottishFibre will and will not do

We will never:

  • Ask for your full password by email, phone, or text

  • Ask you to make a payment to a personal bank account, by gift card, or via cryptocurrency

  • Pressure you to act urgently or threaten immediate disconnection without prior written notice

  • Ask you to install remote access software unless you've specifically requested support

If you receive a suspicious email

  1. Don't click any links, open any attachments, or reply to the message.

  2. Forward it to [email protected] as an attachment, so we can investigate.

  3. Forward it to the National Cyber Security Centre's Suspicious Email Reporting Service at [email protected].

  4. Delete the message from your inbox.

If you've already clicked or shared information

Don't panic. Take these steps straight away:

  • Change your ScottishFibre password and any other accounts using the same password

  • Contact your bank if you've shared payment details

  • In Scotland, report it to Police Scotland on 101

  • Elsewhere in the UK, report it to Report Fraud at www.reportfraud.police.uk or 0300 123 2040

  • Let us know at [email protected] so we can monitor your account for unusual activity

Still need help? Report suspicious emails to [email protected].

Did this answer your question?