Email scams are becoming more convincing every day, and one of the latest tricks making the rounds is the “Your Messages Couldn’t Be Delivered” phishing scam.
It preys on our natural urge to keep communication flowing, making you believe your outgoing emails have failed to send because of an expired password or outdated account information.
While it may look like a legitimate notice from your email provider, this scam is designed with one purpose: to steal your email credentials. Here’s how it works and what you can do to protect yourself.
How the Scam Works
1. Phishing Email
It starts with a message claiming that your recent emails didn’t go through. The email might use your provider’s logo and branding to appear official, warning that your account will be suspended unless you update your password or confirm your account details immediately. This creates a false sense of urgency, pushing you to act quickly without thinking.
2. Fake Login Page
If you click the link in the email, you’ll be redirected to a phishing site that mimics a legitimate login page. Once you enter your email address and password, the scammers instantly gain access to your account—and possibly much more.
The Risks Involved
Falling for this scam can have serious consequences:
-
Identity Theft – With access to your email, scammers can gather personal information, impersonate you, and even reset passwords on your other online accounts.
-
Financial Loss – If your email is connected to banking, shopping, or subscription accounts, scammers may use it to make unauthorized purchases or transactions.
How to Protect Yourself
You don’t need to be a tech expert to stay safe, just follow these simple steps:
-
Verify the Sender
Always double-check the sender’s email address. Scam emails often come from addresses that look similar but aren’t quite right, and may include spelling errors or strange formatting. -
Do Not Click Links
Never click on links in suspicious emails. Instead, open a new browser window and manually type in your email provider’s official web address to check for notifications. -
Enable Two-Factor Authentication (2FA)
Turning on 2FA adds an extra layer of protection. Even if scammers get your password, they won’t be able to log in without your second verification step. -
Report and Delete
If you receive one of these phishing emails, report it as spam here: Department of Justice | Report Spam
What to Do If You’ve Been Targeted
If you think you may have fallen for this scam, act quickly:
-
Change your email password immediately.
-
Enable two-factor authentication if you haven’t already.
-
Monitor your accounts for any suspicious activity or unauthorized access.
Stay Vigilant
Cybercriminals rely on panic and haste to trick people, but by staying calm, cautious, and informed, you can stop scams like this in their tracks. Always think twice before clicking, and remember: if something feels off, it probably is.