--- title: How to identify Social Engineering Scams description: Almost all data breaches involve a social engineering element, hence why good security starts with the ability to recognize and report phishing scams. image: https://blog.seedspark.com/hubfs/AdobeStock_141638214.jpeg --- [![logo-white-2020](https://blog.seedspark.com/hs-fs/hubfs/logo-white-2020.png?width=80&height=80&name=logo-white-2020.png "logo-white-2020")](https://seedspark.com/) [![logo-square](https://blog.seedspark.com/hs-fs/hubfs/logo-square.png?width=55&height=54&name=logo-square.png "logo-square")](https://seedspark.com/) [![Contact Us](https://no-cache.hubspot.com/cta/default/1546797/3ad3da3a-9602-4c46-afb0-274659a1f959.png)](https://cta-redirect.hubspot.com/cta/redirect/1546797/3ad3da3a-9602-4c46-afb0-274659a1f959) - [**](https://www.facebook.com/sharer/sharer.php?u=https://blog.seedspark.com/blog/how-to-identify-social-engineering-scams&title=How%20to%20identify%20Social%20Engineering%20Scams&description=Almost%20all%20data%20breaches%20involve%20a%20social%20engineering%20element,%20hence%20why%20good%20security%20starts%20with%20the%20ability%20to%20recognize%20and%20report%20phishing%20scams.) - [**](https://twitter.com/intent/tweet?source=https://blog.seedspark.com/blog/how-to-identify-social-engineering-scams&text=How%20to%20identify%20Social%20Engineering%20Scams%20-%20https://blog.seedspark.com/blog/how-to-identify-social-engineering-scams) - [**](http://www.linkedin.com/shareArticle?mini=true&url=https://blog.seedspark.com/blog/how-to-identify-social-engineering-scams&title=How%20to%20identify%20Social%20Engineering%20Scams&summary=Almost%20all%20data%20breaches%20involve%20a%20social%20engineering%20element,%20hence%20why%20good%20security%20starts%20with%20the%20ability%20to%20recognize%20and%20report%20phishing%20scams.) 03 November 2022 Thursday # How to identify Social Engineering Scams By [Robert Griffin](https://blog.seedspark.com/blog/author/robert-griffin) In: [5-Second Tech Tip](https://blog.seedspark.com/blog/topic/5-second-tech-tip) #### *Almost all data breaches involve a social engineering element, hence why good security starts with the ability to recognize and report phishing scams. * According to Deloitte, [91% of cyberattacks](https://www2.deloitte.com/my/en/pages/risk/articles/91-percent-of-all-cyber-attacks-begin-with-a-phishing-email-to-an-unexpected-victim.html) involve a social engineering element, making it by far the most common attack vector. After all, it’s generally much easier to exploit human ignorance and unpreparedness than today’s cybersecurity technology.   Social engineering, or phishing attacks, can exploit any form of communication, such as email, websites, social media, voice calls, and instant messaging apps. However, while the methods of communication may vary, there are some commonalities that are almost universal. Learning how to identify these characteristics is vital for protecting yourself and your business online.  Here are some of the phishing characteristics that everyone should be aware of:  ## #1. The sender asks for something unusual  The first and most important rule of identifying phishing emails is that no legitimate company will ever ask you for login credentials like passwords. Neither will they ask you to send payment information via channels like email or instant message. Admittedly, however, not all phishing attempts are that obvious. Some will encourage recipients to download an attachment instead. If you ever receive an attachment you weren’t expecting, especially if it’s an executable file like an EXE, then it’s almost certainly malicious.    ## #2. There are inconsistencies in the message  Social engineering scammers often use spoofed email addresses or domain names. At first glance, they might look legitimate, but upon closer inspection, you might notice a single letter that’s out of place. Some spoofs are harder to recognize, especially in the era of multilingual domain names. For example, the letter ‘e’ looks exactly the same in the Latin alphabet as it does in Cyrillic, but it’s actually a different letter as far as the computer is concerned. Always verify email addresses, domain names, and links from new or unexpected senders.   ## #3. There are threats or a sense of urgency  Many phishing scammers use similar tactics to those of legitimate marketers, such as building a sense of urgency. Some scams go even further by making threats like locking you out of an account, taking legal action, or demanding payments if you fail to follow their instructions. Scammers often hope that such tactics will distract their victims, who will then be less likely to sufficiently scrutinize the message.   ## #4. The message arrives unexpectedly   Of course, there are plenty of emails that arrive unexpectedly every day, such as queries from customers or fellow employees. However, phishing messages almost invariably arrive without any prior warning, even if they claim to be from someone the recipient personally knows. The first thing that usually arouses suspicion is an unfamiliar greeting or tone. You should also be wary of any apparent marketing emails purporting to be from otherwise legitimate companies that you did not opt-in to receive messages from.   ## #5. There are grammar and spelling errors  When you receive a message from a legitimate company, it’s highly unlikely that it will contain spelling or grammar errors. Although that doesn’t mean you should start ignoring friends and colleagues whose native language isn’t English, poor spelling and grammar in something like a marketing or otherwise ‘official’-looking email is almost a sure sign of a phishing scam. Additionally, some scammers may deliberately include spelling and grammar errors in an attempt to circumvent spam filters or even come across as more ‘authentic’.   ### Mitigating the risks with email security  Social engineering attacks are, by definition, a human challenge. However, while they require a human solution in the form of ongoing security awareness training, modern email security solutions can greatly reduce the risk, while easing the burden on your employees. SeedSpark provides tools like Ironscales, harnessing AI-driven security to detect more sophisticated phishing scams while keeping security teams informed with real-time reports and insights. We’ll implement the cybersecurity tools you need to alleviate potential employee mistakes and keep your information secure.   [Download your free guide: How to Detect A Phishing Email](https://share.hsforms.com/1G_nUc-9sRICqDg7zxIwBDAx5il?__hstc=243157341.1080672bb8ae2c726a37ca34d00a5a0a.1667500143604.1667500143604.1667500143604.1&__hssc=243157341.17.1667500143604&__hsfp=1149209764) **Offer available for new clients with 50+ employees and all current clients that do not already use LastPass.*  SeedSpark provides managed services to bolster your security posture and mitigate the risks to your organization. [Get in touch](https://seedspark.com/contact/) today to get the proactive IT support you need to succeed.  **Tags:** [5-Second Tech Tip](https://blog.seedspark.com/blog/topic/5-second-tech-tip) Share: - [**](https://www.facebook.com/sharer/sharer.php?u=https://blog.seedspark.com/blog/how-to-identify-social-engineering-scams&title=How%20to%20identify%20Social%20Engineering%20Scams&description=Almost%20all%20data%20breaches%20involve%20a%20social%20engineering%20element,%20hence%20why%20good%20security%20starts%20with%20the%20ability%20to%20recognize%20and%20report%20phishing%20scams.) - [**](https://twitter.com/intent/tweet?source=https://blog.seedspark.com/blog/how-to-identify-social-engineering-scams&text=How%20to%20identify%20Social%20Engineering%20Scams%20-%20https://blog.seedspark.com/blog/how-to-identify-social-engineering-scams) - [**](http://www.linkedin.com/shareArticle?mini=true&url=https://blog.seedspark.com/blog/how-to-identify-social-engineering-scams&title=How%20to%20identify%20Social%20Engineering%20Scams&summary=Almost%20all%20data%20breaches%20involve%20a%20social%20engineering%20element,%20hence%20why%20good%20security%20starts%20with%20the%20ability%20to%20recognize%20and%20report%20phishing%20scams.) ### Written by [Robert Griffin](https://blog.seedspark.com/blog/author/robert-griffin) Our COO, Robert Griffin, has a history of success applying analytical and technical expertise while leveraging various technology and cybersecurity solutions to optimize business capabilities and mitigate organizational risks. - [**](https://www.linkedin.com/in/robert-griffin-gtcs/) PREVIOUS POST [** How to Simplify Password Management ](https://blog.seedspark.com/blog/how-to-simplify-password-management) [**](https://blog.seedspark.com/blog/how-to-identify-social-engineering-scams#top) Next Post [Why you need to keep your software up to date **](https://blog.seedspark.com/blog/why-you-need-to-keep-your-software-up-to-date) [Content Title](https://blog.seedspark.com/blog/how-to-identify-social-engineering-scams#) Description ### Search ### Recent Posts [ Building a Resilient Business: Strategies for Navigating Economic Uncertainty ](https://blog.seedspark.com/blog/building-a-resilient-business-strategies-for-navigating-economic-uncertainty) [Chad Jenkins](https://blog.seedspark.com/blog/author/chad-jenkins) Feb 1, 2024 [ Harnessing Data for Business Success: A Comprehensive Guide to Data-Driven Decision-Making ](https://blog.seedspark.com/blog/harnessing-data-for-business-success-a-comprehensive-guide-to-data-driven-decision-making) [Chad Jenkins](https://blog.seedspark.com/blog/author/chad-jenkins) Jan 8, 2024 [ Top Business Trends of 2024: Strategies for Growth and Success ](https://blog.seedspark.com/blog/top-business-trends-of-2024-strategies-for-growth-and-success) [Chad Jenkins](https://blog.seedspark.com/blog/author/chad-jenkins) Jan 4, 2024 [ Empowering Organizations with CISA's Cybersecurity Awareness Month 2023 Toolkit ](https://blog.seedspark.com/blog/empowering-organizations-with-cisas-cybersecurity-awareness-month-2023-toolkit) [Patrick Kinsley](https://blog.seedspark.com/blog/author/patrick-kinsley) Oct 26, 2023 [ Four Essential Steps to Enhance Your Online Safety ](https://blog.seedspark.com/blog/four-essential-steps-to-enhance-your-online-safety) [Patrick Kinsley](https://blog.seedspark.com/blog/author/patrick-kinsley) Oct 19, 2023 ### Popular Posts [ The 8 Best Productivity Tools Included with Microsoft 365 ](https://blog.seedspark.com/blog/meet_office365) [Samuel Adams](https://blog.seedspark.com/blog/author/samuel-adams) - Apr 21, 2021 [ Bots Are Stealing MFA Codes and Accessing Accounts - The New Cyber Threat in 2021 ](https://blog.seedspark.com/blog/mfa-code-stealing) [Samuel Adams](https://blog.seedspark.com/blog/author/samuel-adams) - Nov 3, 2021 [ What is Windows 11 S Mode and Should You Use It? ](https://blog.seedspark.com/blog/windows11-smode) [Samuel Adams](https://blog.seedspark.com/blog/author/samuel-adams) - Sep 17, 2021 [ Alternatives to Using SMS for 2-factor Authentication ](https://blog.seedspark.com/blog/alternatives-to-using-sms-for-2-factor-authentication) [Robert Griffin](https://blog.seedspark.com/blog/author/robert-griffin) - Mar 9, 2023 [ How to Use Shifts in Microsoft Teams for Your Organization ](https://blog.seedspark.com/blog/shifts_microsoft_teams) [Samuel Adams](https://blog.seedspark.com/blog/author/samuel-adams) - Jul 2, 2020 ## Related Post - [**](https://www.facebook.com/sharer/sharer.php?u=https://blog.seedspark.com/blog/empowering-organizations-with-cisas-cybersecurity-awareness-month-2023-toolkit&title=Empowering%20Organizations%20with%20CISA's%20Cybersecurity%20Awareness%20Month%202023%20Toolkit&description=With%20the%20end%20of%20October%20just%20around%20the%20corner,%20that%20also%20means%20it%20is%20the%20end%20of%20Cybersecurity%20Awareness%20Month.%20The%20Cybersecurity%20and%20Infrastructure%20Security%20Agency%20(CISA)%20has%20taken%20a%20significant%20step%20in%20this%20direction%20by%20unveiling%20the%20Cybersecurity%20Awareness%20Month%202023%20Toolkit.) - [**](https://twitter.com/intent/tweet?source=https://blog.seedspark.com/blog/empowering-organizations-with-cisas-cybersecurity-awareness-month-2023-toolkit&text=Empowering%20Organizations%20with%20CISA's%20Cybersecurity%20Awareness%20Month%202023%20Toolkit%20-%20https://blog.seedspark.com/blog/empowering-organizations-with-cisas-cybersecurity-awareness-month-2023-toolkit) - [**](http://www.linkedin.com/shareArticle?mini=true&url=https://blog.seedspark.com/blog/empowering-organizations-with-cisas-cybersecurity-awareness-month-2023-toolkit&title=Empowering%20Organizations%20with%20CISA's%20Cybersecurity%20Awareness%20Month%202023%20Toolkit&summary=With%20the%20end%20of%20October%20just%20around%20the%20corner,%20that%20also%20means%20it%20is%20the%20end%20of%20Cybersecurity%20Awareness%20Month.%20The%20Cybersecurity%20and%20Infrastructure%20Security%20Agency%20(CISA)%20has%20taken%20a%20significant%20step%20in%20this%20direction%20by%20unveiling%20the%20Cybersecurity%20Awareness%20Month%202023%20Toolkit.) ## [Empowering Organizations with CISA's Cybersecurity Awareness Month 2023 Toolkit](https://blog.seedspark.com/blog/empowering-organizations-with-cisas-cybersecurity-awareness-month-2023-toolkit) With the end of October just around the corner, that also means it is the end of Cybersecurity Awareness Month. While the month might soon be over, cybersecurity issues and threats most certainly are not. The Cybersecurity and Infrastructure Security Agency (CISA), in partnership with the National Cybersecurity Alliance (NCA), has taken a significant step in this direction by unveiling the Cybersecurity Awareness Month 2023 Toolkit. This comprehensive resource is designed to empower organizations, IT professionals, and individuals with the knowledge and tools needed to navigate the complex world of cyber threats.   By [Patrick Kinsley](https://blog.seedspark.com/blog/author/patrick-kinsley) In: [Technology](https://blog.seedspark.com/blog/topic/technology) [**](https://blog.seedspark.com/blog/empowering-organizations-with-cisas-cybersecurity-awareness-month-2023-toolkit) - [**](https://www.facebook.com/sharer/sharer.php?u=https://blog.seedspark.com/blog/four-essential-steps-to-enhance-your-online-safety&title=Four%20Essential%20Steps%20to%20Enhance%20Your%20Online%20Safety&description=Whether%20you're%20an%20individual%20looking%20to%20protect%20your%20personal%20data%20or%20an%20IT%20professional%20tasked%20with%20safeguarding%20company%20information,%20there%20are%20fundamental%20steps%20you%20can%20take%20to%20enhance%20online%20safety.) - [**](https://twitter.com/intent/tweet?source=https://blog.seedspark.com/blog/four-essential-steps-to-enhance-your-online-safety&text=Four%20Essential%20Steps%20to%20Enhance%20Your%20Online%20Safety%20-%20https://blog.seedspark.com/blog/four-essential-steps-to-enhance-your-online-safety) - [**](http://www.linkedin.com/shareArticle?mini=true&url=https://blog.seedspark.com/blog/four-essential-steps-to-enhance-your-online-safety&title=Four%20Essential%20Steps%20to%20Enhance%20Your%20Online%20Safety&summary=Whether%20you're%20an%20individual%20looking%20to%20protect%20your%20personal%20data%20or%20an%20IT%20professional%20tasked%20with%20safeguarding%20company%20information,%20there%20are%20fundamental%20steps%20you%20can%20take%20to%20enhance%20online%20safety.) ## [Four Essential Steps to Enhance Your Online Safety](https://blog.seedspark.com/blog/four-essential-steps-to-enhance-your-online-safety) As cyber threats continue to evolve, both individuals and businesses must be proactive in their approach to cybersecurity. Whether you're an individual looking to protect your personal data or an IT professional tasked with safeguarding company information, there are fundamental steps you can take to enhance online safety. Here are four essential steps to consider:   By [Patrick Kinsley](https://blog.seedspark.com/blog/author/patrick-kinsley) In: [Technology](https://blog.seedspark.com/blog/topic/technology) [**](https://blog.seedspark.com/blog/four-essential-steps-to-enhance-your-online-safety) - [**](https://www.facebook.com/sharer/sharer.php?u=https://blog.seedspark.com/blog/secure-our-world-the-new-mantra-for-cybersecurity-in-2023&title=Secure%20Our%20World:%20The%20New%20Mantra%20for%20Cybersecurity%20in%202023%20and%20Beyond&description=As%20cyber%20threats%20continue%20to%20evolve,%20so%20must%20our%20approach%20to%20safeguarding%20our%20digital%20realm.%20Enter) - [**](https://twitter.com/intent/tweet?source=https://blog.seedspark.com/blog/secure-our-world-the-new-mantra-for-cybersecurity-in-2023&text=Secure%20Our%20World:%20The%20New%20Mantra%20for%20Cybersecurity%20in%202023%20and%20Beyond%20-%20https://blog.seedspark.com/blog/secure-our-world-the-new-mantra-for-cybersecurity-in-2023) - [**](http://www.linkedin.com/shareArticle?mini=true&url=https://blog.seedspark.com/blog/secure-our-world-the-new-mantra-for-cybersecurity-in-2023&title=Secure%20Our%20World:%20The%20New%20Mantra%20for%20Cybersecurity%20in%202023%20and%20Beyond&summary=As%20cyber%20threats%20continue%20to%20evolve,%20so%20must%20our%20approach%20to%20safeguarding%20our%20digital%20realm.%20Enter) ## [Secure Our World: The New Mantra for Cybersecurity in 2023 and Beyond](https://blog.seedspark.com/blog/secure-our-world-the-new-mantra-for-cybersecurity-in-2023) As cyber threats continue to evolve, so must our approach to safeguarding our digital realm. Enter "Secure Our World" – the groundbreaking cybersecurity awareness program launched by the Cybersecurity and Infrastructure Security Agency (CISA). As we delve into 2023 and look towards the future, this initiative promises to redefine our understanding and approach to cybersecurity.   By [Patrick Kinsley](https://blog.seedspark.com/blog/author/patrick-kinsley) In: [Technology](https://blog.seedspark.com/blog/topic/technology) [**](https://blog.seedspark.com/blog/secure-our-world-the-new-mantra-for-cybersecurity-in-2023) ## Growth Is Just One Click Away Want to chat? Just share some project details and a member of our sales team will be in touch to learn more about your vision and how we can help!   ##### How can we grow together? [![Call Now](https://no-cache.hubspot.com/cta/default/1546797/e8917216-677b-4754-8a92-11da535e5577.png)](https://cta-redirect.hubspot.com/cta/redirect/1546797/e8917216-677b-4754-8a92-11da535e5577) ## Join Our Newsletter ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Robert Griffin", "url" : "https://blog.seedspark.com/blog/author/robert-griffin" }, "dateModified" : "2023-04-05T18:14:25.061Z", "datePublished" : "2022-11-03T13:28:06.000Z", "headline" : "How to identify Social Engineering Scams", "image" : [ "https://blog.seedspark.com/hubfs/AdobeStock_141638214.jpeg" ], "mainEntityOfPage" : { "@id" : "https://blog.seedspark.com/blog/how-to-identify-social-engineering-scams", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.seedspark.com/hubfs/SS_Logo_R_Blue_Horizontal.svg" }, "name" : "SeedSpark" } } ```