EFA Is Working

You Got a Warning. Here's What It Means.

EFA found something in this email that matches patterns commonly used in fraud. That doesn't mean it's definitely a scam — it means take a second look before you act.

A warning isn't a crisis. It's a pause button.

You Got a Warning. Here's What to Do:

Don't reply, click links, or send money — not until you verify.

Call the sender at a number you find yourself — not one from the email.

When in doubt, delete it.

We Look at What You Can't See.

EFA analyzes the structure of every email — the parts most people never check. When something matches known fraud tactics, we tell you.

Here's what might have triggered this warning:

Lookalike Address

The email is almost identical to someone you know, but not quite. (sara.miller vs sara.milller)

Reply-To Mismatch

Your reply would go somewhere other than where the email came from.

Brand Impersonation

The email mentions a company but doesn't come from that company's domain.

Display Name Spoofing

The name looks official, but the email address doesn't match.

Suspicious Domain

The sender uses a free email service or a domain designed to deceive.

Urgent Language

Pressure words like "act now" or "verify immediately."

Sometimes We Warn About Emails That Are Actually Fine.

We know. And we'd rather it work that way.

Legitimate emails can trigger warnings when:

A coworker's name matches a brand (like "Chase" or "Amazon")
A company uses a third-party sender (Mailchimp, SendGrid)
A vendor emails from an unusual subdomain
An e-signature request includes urgent-sounding boilerplate
Your CPA or bank discusses payments, taxes, or refunds

These aren't dangerous — just patterns scammers imitate.

We'd rather warn you 10 times than miss the one that costs you $100,000.

What a Warning Doesn't Mean

Your device is infected
Someone hacked your account
The email is definitely bad
You did something wrong

A warning means:

"This looks similar to a known scam. Take a moment to verify."

Your judgment comes first. Always.

When You See a Warning, Ask Yourself:

Was I expecting this email?

Do I know and trust the sender?

Is it asking me to click, sign, pay, or share something sensitive?

If anything feels off — even slightly — verify before acting.

A 10-second check can prevent a mistake that takes weeks to fix.

EFA Doesn't Block Your Email.

You can still open the message, reply, click links, and take action.

EFA gives you information before you act. You decide what to do with it.

We're a second pair of eyes — not a gatekeeper.

Still Unsure? We're Here.

If you're not sure whether an email is legitimate — or if you think we got it wrong — reach out.

Contact Support

We read every message. Your feedback makes EFA better.

EFA Is Working.

Every warning is a moment to pause — a chance to verify before you act.

That pause is the difference between catching fraud and falling for it.

Thank you for trusting Email Fraud Alert.