Identify legitimate Yahoo communications and websites versus Internet scams

Yahoo sends you emails to keep you informed of changes to your account or Yahoo services as they occur. Unfortunately, there are also imposters who may pretend to be Yahoo to try to get your personal information. Knowing the signs of Internet scams, and how to respond, will help you stay safe online.

 Remember, support from Yahoo is always free of charge.

Don't be vulnerable to scams

Be aware of phishing and spoofing

  • Phishing is an attempt by scammers to pose as a legitimate company or individual to steal someone's personal information, usernames, passwords, or other account information.
  • Spoofing is used by spammers to make an email or website appear as if it's from someone you trust.
If you see a pop-up asking you to update your phone number or email address after signing in to Yahoo, rest assured it's really from Yahoo. It's a good idea to keep your account recovery info up-to-date in case you ever have trouble signing in.

Check if the website is verified

  • Scammers use fake websites to get you to disclose personal information.
  • A Yahoo page will always contain "" or "" in the website address. Don't provide your Yahoo ID or password to websites that don't contain one of these, even if the address looks similar.
  • Click the lock icon site verified icon graphic in your browser's address bar to check if the page you're on is verified authentic.

Think twice before you provide personal information

 Be suspicious of SMS messages asking about verification codes. Don't reply to any SMS request asking for a verification code.

  • Watch for password thieves - Yahoo will never ask you to email your password. If you're asked to send your password, never do it.
  • Don't respond to unsolicited email - Be wary of anyone asking for personal information via email. Scammers try to trick you into providing personal information.
  • Never click fraudulent links - Never click on suspicious-looking links on webpages or in email.
  • Check the sending address - Double-check the sender's email address without opening the email by mousing over the sender's name in your Inbox, or other folder's message list.
  • Beware of requests for money - Never agree to send a check or money order to someone who sent you unsolicited email.

Look for the Yahoo icon Purple Y icon in Yahoo Mail

  • Legitimate emails from Yahoo include a Yahoo icon Purple Y icon next to the subject or sender in your Inbox.
  • The Yahoo icon Purple Y icon will only display through the Yahoo website or Yahoo Mail app. You won't see it in third-party mail apps or email clients.
  • If you don't see it, the email isn't actually from Yahoo. Report the email as spam.

What to do if you think you've been scammed

If you've only received a suspicious email and haven't provided any personal information, there's likely no need to secure it. If you provided personal information, then it would definitely be a good idea to secure your Yahoo account as a precaution.

Secure your account

Thank you! Your feedback has successfully been submitted.

Please tell us why you didn't find this helpful.

Send Feedback