Look for suspicious or "spoofed" email addresses that don't match the company they claim to represent.
Report malicious sites to Google Safe Browsing .
Uses vague terms like "Dear Customer" instead of your actual name. 2. Immediate Safety Actions
If you are in the US, file a report at ReportFraud.ftc.gov . Did you already download or open the file, or
If you have already downloaded the file, do not extract or open it.