How to Verify a Black Friday Email Isn't a Phishing Scheme
Spot mismatched senders, misleading links and risky requests before you click a holiday deal.
To verify a Black Friday email, type the store address into your browser instead of clicking the email link. Then check the sender address, preview links without clicking, and contact the store through a number you look up yourself. Phishing means a fake message that pretends to be from a store to steal logins or payment details.
Holiday inboxes carry high-volume risk, so a quick check before you click saves time and trouble.
Verification note: Program terms and availability can change. This page was checked against linked sources on November 05, 2026.
Does the sender match the store it claims?
A message is suspicious when the sender address does not match the claimed company, Apple warns in its guide to recognizing suspicious messages. Pause if the logo says one store but the From address uses an unrelated mailbox or misspelled name. CISA instructs recipients to look up the store phone number themselves and contact the store directly.
Do not reply to the email or use phone numbers or links inside it.
Does the link go where it claims?
CISA lists spoofed links as a core phishing indicator in its guide to avoiding social engineering and phishing. Hovering without clicking may reveal a destination that does not match the displayed text. Hover on a computer to preview the address before you click.
On a phone, press and hold to preview without opening. Treat a mismatch as a stop sign. Close the email and go to the store site yourself.
- Display text says one address but preview shows a different domain
- Brand name has an extra, missing, or swapped letter
- Link uses .net when the store site uses .com
Can you reach the deal without the email?
CISA advises shoppers who are unsure to type the retailer address into the browser themselves, as stated in its holiday online shopping guidance. That habit avoids malicious links and look-alike login pages. Open a new browser window.
Type the store address you have used before. Search for the sale item on the store site. If the Black Friday price does not appear on the store site, treat the email offer as unreliable.
Use the store cart and checkout you reached on your own.
What should you never send in reply?
Shoppers should never send passwords or personal or payment details in reply to an unsolicited email, CISA states in its holiday shopping safety advice. Stores do not ask for that information by email, so treat such a request as a stop sign. The FBI's Jacksonville office reported Dec.
1, 2025 that threat actors now write convincing phishing emails without spelling or grammar mistakes. A clean layout and correct spelling no longer prove a Black Friday message is safe.