How do I tell if an email comes from a look-alike address?

What should I check in the address?

Verify the sender's email address to confirm it matches the official address of the organization or individual they claim to be.

The Canadian Anti-Fraud Centre suggests taking a few seconds to hover over an email address or link and confirm that it is correct.

Compare the part after the @ with an email you know is genuine. Look for an added or missing letter, rn in place of m, a 1 in place of an l, a hyphen, an extra word or a different ending.

What other clues point to a look-alike?

Take a few seconds to hover over an email address or link and confirm that they are correct

The Cyber Centre lists an unfamiliar or misspelled sender name or address among the clues to a malicious email.

A request to change bank details, pay urgently, or keep a matter quiet deserves a check whatever the address looks like.

What should I do if I am unsure?

an unfamiliar or misspelled name or email address of the sender

The Anti-Fraud Centre recommends payment procedures that include confirming by voice any urgent request or change in payment details.

1. Do not reply to the message or use any phone number in it.
2. Call the person on a number you already have and ask whether they sent it.
3. Report the message to the Canadian Anti-Fraud Centre if it asked for money.