But they seem so real...
Fraudsters try to make their phishing scams look as real as possible to get as many bites as they can. They might use the names of real people, official logos and branding, and cap off their email with some official-looking fine print to make for some very convincing fakes.
It’s also common for phishing emails to include links to pages that appear to be from a real website but are in fact copies or ‘ghost sites’ of the real company’s website. The tell tale sign will be the website address (URL) which will be similar to but not the same as the real site. For example, where you would visit www.carsales.com.au a fraudster may include http:/log-in123.carsales.com.au/details in their email.