Consumer Resource Center 한인시민센터

All scam guides

Phishing Emails & Fake Texts

That "bank alert" or "package delivery" message may be a trap designed to steal your information.

Phishing is when scammers send fake emails or text messages that look like they come from a real company: your bank, the post office, Amazon, or a delivery service. The message says something urgent happened: a package could not be delivered, your account is locked, or a payment failed. It asks you to click a link and "verify" your information. The link leads to a fake website that steals your passwords, card numbers, or personal information.

Watch: how this scam works

Published by the U.S. Postal Inspection Service · 1:19 Open the original

Warning signs

  • A text about a package you were not expecting, with a link to "reschedule delivery" or pay a small fee.
  • The message creates urgency: "Your account will be closed in 24 hours" or "Suspicious activity detected. Act now."
  • The sender's email address or phone number does not match the real company. Look closely: "amaz0n" or a random Gmail address.
  • The link looks almost right but slightly wrong, like "bankofamerica-secure.com" instead of the real site.
  • It asks you to enter your password, Social Security number, or card number after clicking a link.
  • Greetings are generic ("Dear Customer") or the message has odd spelling and grammar.

How to protect yourself

  • Never click links in unexpected texts or emails. If you think it might be real, go to the company's website yourself by typing the address, or call the number on the back of your card.
  • Your bank and the government will never ask for your password or full Social Security number by text or email.
  • Slow down. Scammers create urgency on purpose. A real company gives you time.
  • Turn on two-step verification (a code sent to your phone) for your email and bank accounts.
  • Delete suspicious texts without replying. Even replying "STOP" tells scammers your number is active.

If it happened to you

  1. If you entered a password, change it right away on the real website, and on any other account that uses the same password.
  2. If you entered card or bank information, call your bank immediately to freeze the card and dispute charges.
  3. Save the message. Take a screenshot before deleting. It is useful evidence when you report.
  4. Do not be embarrassed. These messages fool millions of people. Reporting helps stop the scammers.

All scam guides