Security Tip: Be Leery of Email Links

Always check email links BEFORE clicking on them.

One of the most common ways to get intrusive files, spyware, adware, worms, or cookies on your computer is by clicking links in emails. Links that take you to websites you wouldn’t otherwise visit.

spoofed; spoofing; spoofs
Definition of spoof
transitive verb
DECEIVE, HOAX
Merriam Webster

Another concern is identity fraud. The email looks like it is from a trusted source; you click the link and provide the requested information. That information is then in the hands of tricksters you don’t know.

These nefarious scammers operate by spoofing that the email is from your financial institution or a site you frequent and would assume is legitimate. The senders of these emails are very sneaky, while others are blatantly obvious. What they have in common is that they all think you are ignorant.

Always Mouse Over the Link First

With these sneaky emails, you will see links to click, like “Click here…” or even “Login.” Other emails have domain names you trust and recognize — as the visible text. Unless you hover over those links, you won’t see the underlying domain name or IP address in the email code, so it may seem like a site you’re familiar with.

These scammers have gotten so good at mimicking the look of credible emails that I hover over every link before I click it, even in legit emails — better safe than sorry.

So never just click on links in emails without taking this extra step. Mouse over to see what is displayed in the underlying code and where the link would direct you. You’ll see the underlying website address in your email program or in your browser’s address bar at the bottom of the screen.

Emails that do this are often a bait-and-switch: You see a warm, fuzzy domain name to click on, while the underlying code takes you to unknown locations. Unfortunately, “unknown” is rarely good online.

Before You Click on Email Links

Also, look at the email address in the From field. Does that match the URL displayed in the link? That email will be another clue as to whether it’s legit. If you see an email from Gmail, AOL, or another domain, mark it as spam and delete it.

To be safe, never click on a link that consists entirely of numbers, no matter how good the offer or noble the cause may seem. A website address that consists only of numbers is an IP address and raises a red flag.

Emails that only note IP addresses are not to be trusted. Think about this. Why wouldn’t the sender spend the ten bucks to have a domain name to lend credibility? Because they don’t want to risk being traced. And they are not credible.

They have a throw-away hosting account that can be shut down when complaints occur. The same is true for the email address. Using freebie email addresses for scams is pretty standard practice.

Quick Email Link Tips

Never click on links in an email unless you know the sender and are 100% confident the link is what it claims to be. Be as cautious with forwards from irresponsible forwarders who unknowingly perpetrate scams in their zeal to forward.
Take a moment and check the From field to see if that email address is a throwaway or matches the email links.
Unless you recognize the link as a reply to a specific request for information (website request, newsletter, ezine, etc.), click cautiously.
Do not click on IP numbers in the email.
Do not click on URLs from sources you are not absolutely positive are trustworthy — even if they say they are.
Always mouse over a link in an email to see if the underlying URL matches the clickable text.