Phishing Examples: 8 Real-World Scam Messages Explained

Updated: October 28, 2026

Phishing messages change their wording, but they reuse the same few patterns. These eight examples are rewritten from common scams. Names and links are fictional.

1. The locked bank account

"We detected unusual activity. Your account will be suspended in 24 hours. Verify your identity: secure-bank-verify.com"

Red flags: a deadline, a link that is not your bank's domain. Goal: your online banking password.

2. The parcel on hold

"Your package could not be delivered. Pay the $1.99 redelivery fee: parcel-redelivery.top"

Red flags: a small fee, an odd domain ending. Goal: your card details.

3. The failed subscription payment

"Your Netflix payment was declined. Update your billing information to keep watching."

Red flags: generic greeting, link instead of telling you to open the app. Goal: card and account password.

4. The tax refund

"You are eligible for a tax refund of $412.80. Claim it before Friday."

Red flags: unexpected money, a deadline. Goal: tax login, ID numbers and card.

5. "Hi Mom, new number"

"Hi Mom, I dropped my phone, this is my new number. Can you send money for a bill? I'll pay you back tomorrow."

Red flags: unknown number, urgency, money. Goal: a bank transfer.

6. The verification code

"Hi! I sent you a code by mistake, could you forward it to me?"

Red flags: any request for a code. Goal: taking over your WhatsApp or email account.

7. The fake invoice

"Attached is the overdue invoice #48213. Open the file to review the charges."

Red flags: an attachment you did not expect. Goal: installing malware.

8. The prize

"Congratulations! You were selected for a free iPhone. Just pay shipping."

Red flags: a prize for a contest you never entered. Goal: card details and personal data.

The patterns at a glance

Pattern	Examples
Fear and deadlines	1, 3, 4
Small payment	2, 8
Someone you know	5, 6
Unexpected file	7

What Qhawa does

Qhawa warns you in Chrome before a known phishing page loads. You can also paste any suspicious link into our free scam website checker.

Try Qhawa for freeBlocks ads, trackers and scams. It never charges advertisers or sells your data.
Add to Chrome

Frequently asked questions

What is the most common type of phishing?

Messages that impersonate banks, delivery companies and popular services, usually by text message or email with a link.

How do I report a phishing message?

Use your email or phone "report spam" option, tell the company being impersonated, and report it to your national fraud authority.

Phishing examples: 8 real-world messages explained