Email Phishing Scams Have Become More Subtle: Here’s How to Spot Them

by | Jun 16, 2026

With the advent of AI, fraudulent emails aimed at church communities have become much easier to send and more professional-sounding. These emails appear to come from a clergy member, church or diocesan staff, ministry leader, or even a bishop. They often begin with a short personal request that sounds urgent and confidential.

Though the ultimate goal of scammers is to get you to send them money, the exchange frequently begins in a vague way with the simple aim of getting you to respond before introducing the topic of money.

While the names on these emails are accurate, the email addresses are not. The easiest way to spot a scam email is to click or hover above the sender’s name to see the actual email address.

Below are several examples of scam emails recently sent to parishioners or church staff. Note the official sounding name of the sender versus the actual email address highlighted in red.

From: Rev. Joseph Leaman <[email protected]>
Date: April 10, 2026 at 11:13:30 EDT
To: [email protected]
Subject: Confidential Church Matter

Hello, I hope you're doing well.

I wanted to ask if you might have some time for a short discussion. There's a matter I'd like to talk through that requires a careful and confidential approach, and I would greatly value your perspective.

If you're open to continuing the conversation over email, I would truly appreciate it.

Peace & Blessings,
The Rev. Joseph Leaman
Rector

Here’s another example in that vein that appears to be from Bishop Scanlan:

From: Rt. Rev. Audrey C. Scanlan <[email protected]>
Date: May 25, 2026 at 9:02:40 AM EDT
To: [email protected]
Subject: Encouraging Those Who Serve Our Church Family

Dear Jane,

I hope this message finds you well. Thank you for your continued service and faithful commitment to our ministry. Your leadership helps guide our staff and volunteers in serving God and our community.

We are planning a brief effort to recognize our staff and volunteers, and I would value your quiet assistance when convenient. Your guidance will inspire and encourage our volunteers.

At present, my availability for phone calls is limited. When you have a moment, please reply to let me know if you are able to assist.

"Let us not grow weary of doing good, for in due season we will reap, if we do not give up." (Galatians 6:9)

Grace and Peace,
Rt. Rev. Audrey C. Scanlan

Bishop Diocesan
The Episcopal Diocese of the Susquehanna
321 Wyandotte Street
Bethlehem, PA 18015

Other times, the request for money comes with the first email:

From: Rev. Amy O'Malley <[email protected]>
Date: June 11, 2026 at 3:24:10 AM EDT
To: [email protected]
Subject: Recent Tragedy

Dear friend,
I am reaching out because a family in our congregation has suffered a house fire this week and lost nearly everything. They have three young children and are staying with relatives while they get back on their feet.
I am quietly collecting donations on their behalf before Sunday's service. If you are able to contribute, please send a gift card (Amazon or Walmart) to this email address with the card number and PIN in the message. Even $50 or $100 would make a real difference to this family right now.
Thank you for your compassion and generosity. I will share more with the congregation on Sunday.
God bless you,
The Rev. Amy O'Malley
St. James Episcopal Church

Remember:

  1. Always review the sender’s email address. If the email comes from the diocese, the address will end in diosusquehanna.org. If it comes from your church, it can be harder to ascertain whether the address is correct. Church emails usually end with the church domain (for instance, gracehonesdale.org or stlukescranton.org). Some churches use other email formats. You can either check your church’s website to find its official email contact or call the church office to verify whether the email address is real. When in doubt, do not respond to the email.
  2. Remember that bishops, diocesan staff members, and parish clergy will never solicit immediate or emergency financial assistance via email, text, or phone message.
  3. Never provide bank account numbers, social security numbers, gift card numbers, or other financial information to anyone via email. Never agree to mail, wire, or use an online payment platform to send funds.

As a default, learn to distrust any church-related message that refers to a “confidential” or “quiet” matter, or that solicits “emergency” or “urgent” funds. If it appears to be from someone at the diocese, forward the message to [email protected]. We will be able to verify the message’s authenticity and respond appropriately.