Can You Trust an Email Sender Name?
A familiar name is not proof of who sent a message.
Free video lesson · 1:10
Can You Trust an Email Sender Name?
Phishing Awareness for Beginners
Music: “Thinking Music” by Kevin MacLeod. Creative Commons Attribution 4.0.
A familiar name is not proof of who sent a message.
Read the video transcript
An email sender name is a label. It might say teacher, support team, or someone you know. That label does not prove who sent it.
Imagine an email labelled School Office asking for your password. The familiar name is meant to help you trust it. But someone else can write that name on a message.
You can open the sender details to see the full email address. A strange address is a useful warning. Still, a correct-looking address is not a guarantee. A real account can be taken over.
Focus on the request. If the request is unexpected, contact the school through its usual app or a number you already have. Starting a separate conversation helps you check the story.
Do not reply to the suspicious message to ask if it is real. That could mean asking the same stranger for reassurance. Verify the request with the person through your own trusted route.
For another clear example, watch How Do You Check a Link Without Clicking? Then try How Do You Check a Payment Change Request?
The short answer
An email sender name is a label. It might say teacher, support team, or someone you know. That label does not prove who sent it.
A simple example
Imagine an email labelled School Office asking for your password. The familiar name is meant to help you trust it. But someone else can write that name on a message.
You can open the sender details to see the full email address. A strange address is a useful warning. Still, a correct-looking address is not a guarantee. A real account can be taken over.
Focus on the request. If the request is unexpected, contact the school through its usual app or a number you already have. Starting a separate conversation helps you check the story.
Do not reply to the suspicious message to ask if it is real. That could mean asking the same stranger for reassurance. Verify the request with the person through your own trusted route.
Put it into practice
- Open the full sender details rather than relying on the display name.
- Check whether the request is expected and makes sense.
- Verify sensitive requests through a contact method you already trust.
Check your understanding
A teacher’s real email account sends an unexpected request for your password. Should you reply with it?
Answer
No. Real accounts can be taken over. Contact the teacher through another trusted route and keep your password private.
Explore next
Follow the free video course one question at a time. Teams can practise these habits through security training. For the cryptography protecting your systems, explore a cryptography audit.