Fraudsters may use a practice called phishing to try to obtain sensitive data such as usernames, passwords, and credit card information. These fraudsters impersonate legitimate companies or people by sending emails, messages, or posting fraudulent links that attempt to direct you to false websites or infect your computer with malware. LinkedIn will never ask you for your password or ask you to download any programs.

Phishing emails

Important: LinkedIn has several email domains, which are determined by our email service provider (ESP). We can assure you that emails from linkedin_support@cs.linkedin.com, linkedin@e.linkedin.com, and linkedin@el.linkedin.com are not phishing emails.

Common indicators of a phishing message:

Learn more about protecting yourself from fraudulent messages or what to do if you've already clicked on a bad link or attachment. Additionally, be cautious of third-party sites offering assistance with our products.

To report phishing emails you've received, please forward the suspicious email to phishing@linkedin.com.

If you receive a message on LinkedIn and believe it's a phishing attempt, you can report it.

1. Click the More icon.
2. Select Report/Block.
3. Select It's spam or a scam and answer the questions that follow.

Once you complete the above steps, you will no longer see the message in your inbox. You'll also have the option to block or report the member.

Below are some examples of phishing emails:

Phishing comments

Phishing messages or comments are sent from fake profiles or compromised accounts that attempt to trick users into taking unsafe actions. They can appear as direct messages to you or in comments to posts you make on the platform and typically encourage you to click malicious links or share sensitive information—like passwords or financial details—by mimicking real interactions or exploiting trust in the platform.

Common indicators of phishing messages or comments:

• Creating a sense of urgency
• Promoting fake offers such as giveaways or high‑value sales
• Impersonating brands or trusted organizations by using company logos
• Falsely communicating a policy violation
  

If you receive a comment on LinkedIn and believe it's a phishing attempt, you can report it.

1. Click the  More icon.
2. Select Report Post.
3. Select Fraud or scam.

Your report helps signal to us that something may be wrong and allows us to review the comment and take the appropriate action.

Below are some examples of phishing comments:

LinkedIn has also joined the DMARC organization with other industry leaders like Facebook, Google, and PayPal, with the goal of fighting phishing and spam. In accordance with DMARC standards, LinkedIn digitally signs all emails we send. This allows participating email providers to identify our legitimate emails and throw away the phishing and/or spam emails. While most major email providers such as Google, Yahoo!, Microsoft, and AOL adhere to DMARC standards, a number of providers haven't implemented it. Additionally, messages that come from LinkedIn will contain a security footer to help you verify if they're authentic.

We also work with many industry partners to identify websites and email campaigns that engage in phishing or spamming, so that we can remove them from the Internet. Sometimes we're able to do this within an hour of the email crossing our radar. These combined efforts should decrease the chances of you receiving a fraudulent LinkedIn phishing or spam email.