Here are some ways to identify emails from impersonators:

• The email is poorly written, has incorrect grammar, and has many typos.
• Impersonators ask you to send confidential information over an unsecure platform, for example, via SMS, WhatsApp, email, etc.
• They ask you to fill out a form on an unsecure website without an HTTPS (secured) connection.
• They ask you to download unsecure mobile apps in the form of APK files that aren’t offered on Google Play Store or Apple App Store.
• They ask you to download file attachments or remote access software (such as Teamviewer) to give them remote control of your device. For example, an impersonator may take control and install ransomware on your device and then demand a ransom. If the ransom isn’t paid, you may lose access to your device permanently.
• Impersonators typically use free email domains such as @yahoo.com, @gmail.com, or @protonmail.com. Always read the sender's full email address to know who sent the email. Note: Emails from Deriv will always come from @deriv.com.