Phishing emails

Last updated: 11 months ago
Fraudsters may use a practice called phishing to try to obtain your sensitive data such as usernames, passwords, and credit card information. These fraudsters impersonate legitimate companies or people, sending emails and links that attempt to direct you to false websites, or infect your computer with malware. LinkedIn will never ask you for your password or ask you to download any programs.

Important: LinkedIn has several email domains, which are determined by our email service provider (ESP). We can assure you that emails from linkedin_support@cs.linkedin.com, linkedin@e.linkedin.com, and linkedin@el.linkedin.com are not phishing emails.

Possible warning signs of a phishing message:
  • Messages containing bad spelling, grammar, and that aren't addressed to you personally.
  • Messages asking you to act immediately.
  • Messages asking you to open an attachment to install a software update.
Learn more about protecting yourself from fraudulent messages or what to do if you've already clicked on a bad link or attachment. In addition, be cautious of third-party sites offering assistance with our products.
To report phishing emails you've received, please forward the suspicious email to phishing@linkedin.com.

If you receive a message on LinkedIn and believe it's a phishing attempt, you can report it.

  1. Click the More icon.
  2. Select Report/Block.
  3. Select It's spam or a scam and answer the questions that follow.

Once you complete the above steps, you will no longer see the message in your inbox. You'll also have the option to block or report the member.

Below are some examples of phishing emails:
LinkedIn has also joined the DMARC organization with other industry leaders like Facebook, Google, and PayPal, with the goal of fighting phishing and spam. In accordance with DMARC standards, LinkedIn digitally signs all emails we send. This allows participating email providers to identify our legitimate emails and throw away the phishing and/or spam emails. While most major email providers such as Google, Yahoo!, Microsoft, and AOL adhere to DMARC standards, a number of providers haven't implemented it. Additionally, messages that come from LinkedIn will contain a security footer to help you verify if they're authentic.
We also work with many industry partners to identify websites and email campaigns that engage in phishing or spamming, so that we can remove them from the Internet. Sometimes we're able to do this within an hour of the email crossing our radar. These combined efforts should decrease the chances of you receiving a fraudulent LinkedIn phishing or spam email.