피싱과 스팸 신고하기

Spot fake messages, report phishing, and block senders, and learn what to do if you entered your password on a fake page.

A phishing message pretends to come from a service you use and asks you to sign in on a page the sender controls, or to send a code or a payment.

Know what real Aster mail looks like

• Aster support never asks for your password, recovery codes, or backup codes. Any message that does is fake.
• You sign in only at app.astermail.org or in the Aster apps.
• A display name can say anything, so always check the sender’s address.

Spot a fake message

• Check links before you open them: Hover over a link, or touch and hold it on a phone, and read the address that appears.
• Be wary of urgency: A message that says your account closes in 24 hours is trying to stop you from checking.
• Compare the name and the address: A sender name that copies a well-known brand, or that shows one email address while the message comes from another, is a common trick.
• Check where replies go: If replies would go to a different domain than the sender’s, treat the message with suspicion.

Understand Aster’s warnings

Aster checks incoming mail for common phishing signs, such as reply addresses that don’t match the sender, sender names that copy brands, lookalike domains, urgent language, and domains or links on known phishing blocklists.

• If a message looks suspicious, Aster shows a warning banner that explains why.
• If a message looks like phishing, Aster turns off its links. To turn them back on for a sender you trust, type I understand the risks in the banner.
• If Aster flagged a message by mistake, select Not phishing.

To see a warning before any link opens a site outside Aster, go to Settings > Security and turn on External Link Warnings.

Report a message

1. Open the message.
2. Select Report spam in the toolbar or in the message menu.

Aster moves the message to Spam and shows Reported as phishing. The report sent to Aster contains only a one-way hash of the sender’s address and domain. It doesn’t include the message, its headers, or anything else from your mailbox.

If you reported a message by mistake, open it in Spam and select Not spam.

Block a sender

1. Open a message from the sender.
2. In the message menu, select Block sender, and then confirm.

Aster filters new mail from that address out of your inbox. To review or remove a block, go to Settings > Mail Rules, click the Blocked tab, and find the address in Blocked Senders.

If you entered your password on a fake page

Act quickly, in this order:

1. Change your Aster password. This signs out every other session and removes your trusted 2FA devices.
2. Go to Settings > Security and review Browsers and Devices. Sign out anything you don’t recognize.
3. If two-factor authentication is off, turn it on. To learn how, see Turn on two-factor authentication.
4. In Account Recovery, select Get new codes to replace your recovery codes.
5. Go to Settings > Mail Rules and check for rules you didn’t create.
6. Open a support request and describe what happened.

Troubleshooting

• A real message landed in Spam: Open it and select Not spam.
• Links in a trusted message don’t work: Aster turned them off because the message looked like phishing. Confirm the sender another way, and then turn the links back on from the banner.
• Mail from a blocked sender still arrives: Check whether it comes from a slightly different address, and block that one too. Blocking works on one address at a time.
• A message had no warning but looks fake: Automatic checks catch common patterns, not every scam. Report it.

Related articles

• Review devices and sessions
• Change your password or add a passkey
• Privacy controls in your mailbox
• Manage spam and blocked senders