Creating look-alike domains that closely resemble legitimate websites. Using urgent language to create a sense of urgency and prompt immediate action. Exploiting current events or trending topics to make their emails more believable. Sending emails that appear to be from trusted authorities or well-known brands.