--- title: Emails Designed for Deception - Phishing Emails Decoded - Omnis Technologies description: "Phishing emails are created to look like emails from financial institutions, government agencies, or ecommerce sites. Scammers design these emails with logos, buttons, and text to trick you into clicking dangerous links. I took one of these emails out of my spam folder and inspected the HTML code behind it. Here are my findings: Misleading […]" image: https://www.omnistech.com/hubfs/Imported_Blog_Media/Omnis-Thumbnail-Phishing-Decoded.png --- [![Omnis-logo](https://www.omnistech.com/hubfs/Omnis-logo.png)](https://www.omnistech.com) - [MANAGED IT](https://www.omnistech.com/managed-it-support) - [CYBERSECURITY](https://www.omnistech.com/cybersecurity-consulting) - RESOURCES - [BLOG](https://www.omnistech.com/blog) - [SMALL BUSINESS CYBERSECURITY PLAN](https://www.omnistech.com/small-business-cybersecurity-plan) - [VIDEOS](https://www.omnistech.com/videos) - COMPANY - [ABOUT US](https://www.omnistech.com/about-us) - [TESTIMONIALS](https://www.omnistech.com/testimonials) - [CAREERS](https://www.omnistech.com/careers) [I Need IT Support](https://www.omnistech.com/contact-us) [Submit a Ticket](http://portal.omnistech.com/WCC2/Home/Login?ReturnUrl=%2fWCC2%2f) # Emails Designed for Deception – Phishing Emails Decoded Phishing emails are created to look like emails from financial institutions, government agencies, or ecommerce sites. Scammers design these emails with logos, buttons, and text to trick you into clicking dangerous links. I took one of these emails out of my spam folder and inspected the HTML code behind it. Here are my findings: Misleading \[…\] [protocol80](https://www.omnistech.com/blog/author/protocol80) Jun 9, 2020 --- Phishing emails are created to look like emails from financial institutions, government agencies, or ecommerce sites. Scammers design these emails with logos, buttons, and text to trick you into clicking dangerous links. I took one of these emails out of my spam folder and inspected the HTML code behind it. Here are my findings: ![](https://static.hsstatic.net/BlogImporterAssetsUI/ex/missing-image.png) ## Misleading Sender Name ![](https://static.hsstatic.net/BlogImporterAssetsUI/ex/missing-image.png) To try circumventing an email provider’s security, this scammer used a sender name “Paypai”, using a capital “i” instead of a lowercase “L”. I suspect this is because Google increases their scrutiny for emails that have “Paypal” in them.  In our inbox, it will look like we’re getting an email from Paypal. ![](https://static.hsstatic.net/BlogImporterAssetsUI/ex/missing-image.png) ## Invisible Text ![](https://static.hsstatic.net/BlogImporterAssetsUI/ex/missing-image.png) This is another circumvention tactic. Since Google screens for terms like “account activity”, the scammer adds invisible characters to break up these words. When I open the message in Outlook, you can see which terms they’re trying to mask. ![](https://static.hsstatic.net/BlogImporterAssetsUI/ex/missing-image.png) ## Misleading Button By opening the HTML behind the email, you can see where the link will take you. In this case, it does not go to a Paypal page like it says. It goes  ![](https://static.hsstatic.net/BlogImporterAssetsUI/ex/missing-image.png) It links to a site that will give you a trojan virus. Our antivirus software blocked it, which you can see in this screen snip. ![](https://static.hsstatic.net/BlogImporterAssetsUI/ex/missing-image.png) Hopefully, this gives you an understanding of how emails aren’t always as they appear. While Google was able to flag this email for spam, it may not be successful every time. It’s important to be skeptical of all communications you have regarding private information. If you need assistance installing antivirus software or training your team to spot dangerous phishing emails, contact us at info@omnistech.com. [antivirus](https://www.omnistech.com/blog/tag/antivirus) [phishing](https://www.omnistech.com/blog/tag/phishing) ## Similar posts Education ### [Email Phishing: 5+ Ways to Protect Your Personal Information](https://www.omnistech.com/blog/email-phishing-5-ways-to-protect-your-personal-information) Phishing is the practice of tricking someone to get their sensitive information. The “bait” is often an email created to look like a message from... protocol80 Mar 2, 2020 ### [Money or Malware? Beware of Malicious Email](https://www.omnistech.com/blog/money-or-malware-beware-of-malicious-email) Did you get an email with a "remittance invoice" you weren't expecting? Be careful. It could be a malicious email. Learn how to spot them. Nate Rodgers May 25, 2022 ### [Gmail vs Outlook for Business Email](https://www.omnistech.com/blog/gmail-vs-outlook-for-business-email) If you’re starting a business or upgrading an in-house email solution to the cloud, how do you choose an email provider? For most, the choice is... protocol80 Apr 21, 2020 [![OMNIS Technologies](https://www.omnistech.com/hubfs/Asset%201WHITE.png)](https://www.omnistech.com) OMNIS Technologies PO Box 334 32 Lafayette Ave. Lewis Run, PA 16738 ### Services - [Managed IT](https://www.omnistech.com/managed-it-support) - [Cybersecurity](https://www.omnistech.com/cybersecurity-consulting) ### Resources - [Blog](https://www.omnistech.com/blog) - [Small Business Cybersecurity Plan](https://www.omnistech.com/small-business-cybersecurity-plan) - [Videos](https://www.omnistech.com/videos) ### Company - [About Us](https://www.omnistech.com/about-us) - [Careers](https://www.omnistech.com/careers) - [Testimonials](https://www.omnistech.com/testimonials) - [Contact Us](https://www.omnistech.com/contact-us) © 2022 protocol 80, Inc All rights reserved [Privacy Policy](https://www.omnistech.com/privacy-policy)