Which is a common sign of a phishing email?

• A. The sender's address matches the official domain
• B. The message asks you to verify your account by clicking a link in the message
• C. The email reproduces a recent purchase you made
• D. The email indicates a data breach with no action required

Answer: (C)

Phishing often uses social engineering by playing on what you recognize in your own activities. An email that reproduces a recent purchase you made is a classic tactic to look legitimate because it references something familiar and tangible. By citing a purchase, the message taps into your memory and trust, making you more likely to click a link, reply, or share information without thinking twice. The key idea is that attackers try to mirror your real experiences to lower your guard, so you should treat any message that mentions recent activity with extra caution and verify through the official site or app rather than following any links in the email.

For context, simply having the sender appear to be from a legitimate domain is not a reliable sign on its own, because domains can be spoofed. A request to verify an account by clicking a link is a very common phishing tactic, but the option that emphasizes recent activity highlights how personalization is used to boost credibility. Statements about a data breach with no action required can also be suspicious, but the use of your own purchase history is a particularly telling cue phishers use to seem real.