Episode 04ChecklistA short list of things to check before you trust the answer.28 sec
No typos. Still a scam.
Scam emails written with AI don’t have typos any more. Check who really sent it and where the link really goes, and if you’re unsure, contact them a way you already trust.
Try it yourself
Is this email real?
- You looked at the sender’s full address, not just the name, and it matches the real company’s domain letter for letter.
- You checked where the link really goes (long-press on a phone, hover on a computer) before tapping anything.
- You noticed pressure: a countdown, a threat, or a request for a password or payment.
- Still unsure? You didn’t click. You contacted them using a phone number or website you already know is real.
The two checks
1. Who really sent it? Read the full address. 2. Where does the link really go? Long-press or hover before you tap.
The call-back rule
Not sure? Don’t click and don’t reply. Contact them a way you already trust: the number on your card, your company directory, or the website you type in yourself.
Bix shows you how
Step 1: Ignore the spelling.
AI writes scam emails with clean grammar now, so a tidy email proves nothing.
Step 2: Check who really sent it.
Tap the sender’s name to see the full address. Look for swapped letters, like a capital I for an l, or an extra word in the domain.
Step 3: Check where the link really goes.
Long-press (phone) or hover (computer) to see the real address before you tap.
Step 4: Still unsure? Call them.
Use a number or website you already know is real, never the details in the email.
What you should see
You spot the fake before you click. In the video, the sender is it-helpdesk@brightIine-support.net, with a capital I where the l should be, and the button goes to the same fake domain.