Phishing Email Examples: Legitimate vs. Malicious

Example 1: Malicious Email (Phishing)

Subject: URGENT: Your Account Will Be Suspended!

Dear User,

We have detected suspicious activity on your Microsoft account. To prevent permanent suspension, you must verify your identity within 24 hours.

Click here to verify your account immediately:https://microsoft-accountverify.example/login

Failure to act will result in your account being permanently disabled.

Warning Signs:

• Urgent language and threats of account suspension.
• Suspicious sender address (not from an official Microsoft domain).
• Generic greeting ("Dear User") instead of your name.
• Link that does not match the official Microsoft website.

Example 1: Legitimate Email

From: Microsoft Account Team account-security-noreply@accountprotection.microsoft.com

Subject: Microsoft Account Security Notification

Hello John,

We noticed a recent sign-in to your Microsoft account from a new device.

If this was you, no further action is required. If you do not recognize this activity, please review your account security settings by visiting Microsoft's official website directly.

Thank you,

Microsoft Account Team

Signs of legitimacy

• Uses an official Microsoft domain.
• Provides clear information without threatening language.
• Does not pressure the recipient to click an unfamiliar link.

Key Takeaways

Always verify the sender's email address, inspect hyperlinks, and avoid clicking suspicious links. When uncertain, visit the company's official website directly rather than using links provided in an email.