March 13, 2026 | By Dan Kelchner

The One Question That Tells You If an Email Is a Scam

Last month, a woman named Barbara called me in a panic. She'd received an email from "Bank of America" saying her account had been compromised. It had the bank's logo, the right colors, and a link to "verify her identity."

She was about to click the link when her daughter walked in and said, "Mom, wait."

Barbara doesn't bank with Bank of America. She banks with a local credit union. But in the moment, the urgency of the email made her forget that.

That's how scams work. They don't trick you with bad grammar and obvious lies anymore. They trick you with emotion. Fear. Urgency. The feeling that something terrible is about to happen if you don't act right now.

But there's one question you can ask yourself that cuts through all of it. Every single time.

"Did I start this conversation?"

That's it. Five words. And they work better than any spam filter, any antivirus software, or any warning label.

Why This Question Works

Think about how real life works. When your bank actually has a problem with your account, what happens? You notice something wrong. You call the bank. You start the conversation.

Banks don't email you out of the blue asking you to click a link and enter your password. Amazon doesn't text you about a delivery you never ordered. Medicare doesn't call you demanding your Social Security number.

If someone is contacting you about your account, your payment, your delivery, your benefits, and you didn't start the conversation, that's your first and biggest warning sign.

Example 1: The Fake Bank Alert

Subject: URGENT: Suspicious Activity on Your Account

"Dear valued customer, we have detected unusual activity on your account. For your protection, your account has been temporarily limited. Please click the link below to verify your identity within 24 hours or your account will be permanently suspended."

Ask yourself: Did I start this conversation? No. I didn't call the bank. I didn't report a problem. They contacted me. That's the first sign something is off. Real banks don't threaten to "permanently suspend" your account by email. If there were really a problem, call the number on the back of your card, not the number in the email.

Notice the pressure tactics: "within 24 hours," "permanently suspended." That urgency is designed to make you act before you think. Legitimate companies give you time. Scammers don't.

Example 2: The Fake Amazon Delivery

Subject: Your package could not be delivered

"We attempted to deliver your package today but were unable to complete the delivery. To reschedule, please confirm your shipping address and payment information by clicking the link below."

Ask yourself: Did I start this conversation? No. And do I even have an Amazon order right now? If you're not expecting a package, this is almost certainly a scam. But even if you are expecting something, Amazon will never ask you to "confirm your payment information" to deliver a package. When in doubt, go directly to amazon.com and check your orders there. Don't click any links in the email.

Scammers love delivery scams because almost everyone orders things online. They're betting that you'll think, "Oh, maybe it's that thing I ordered last week." They're counting on vagueness. They never name the specific product because they don't know what you ordered. Because they didn't ship you anything.

Example 3: The Fake Medicare Notice

Subject: Important Update to Your Medicare Benefits

"As part of the 2026 Medicare update, all beneficiaries must verify their information to continue receiving benefits. Please call 1-800-XXX-XXXX or click below to update your records. Failure to respond within 7 days may result in a lapse in coverage."

Ask yourself: Did I start this conversation? No. Medicare does not contact you by email to threaten your coverage. They send official letters by mail for important changes. If you're ever worried about your Medicare benefits, call 1-800-MEDICARE (the real number: 1-800-633-4227). Never call a number from a suspicious email.

This one is especially dangerous because it targets fear. Losing your health coverage is terrifying. That fear is exactly what scammers use to override your good judgment.

What to Do When You're Not Sure

Sometimes you'll get an email and genuinely wonder if it's real. That's okay. Here's what to do:

Don't click anything in the email. If you think your bank actually does need you, open your browser and type the bank's website address yourself. Or call the number on the back of your card. Never use a link or phone number from a suspicious email.

Copy the email text and paste it into Claude. Type: "Does this email look like a scam? Here's what it says:" and paste the text. Claude will break down every red flag for you. It's like having a scam expert on call 24/7.

Talk to someone you trust. Call your daughter. Ask your neighbor. There is no shame in getting a second opinion. The only shame is in losing money to someone who doesn't deserve it.

The One Question, Every Time

Before you click that link, before you call that number, before you enter any information anywhere, ask yourself:

"Did I start this conversation?"

If the answer is no, slow down. That pause, that one moment of hesitation, is worth more than any software you could buy. It's the difference between staying safe and losing thousands.

The scammers are counting on you to act fast. Your best defense is to slow down.