Penny.Tshabalala@dcs.gov.za

How to Identify Fake Emails – A Practical Guide Using a Government Procurement Example 

In today's digital world, spam and phishing emails are more sophisticated than ever. They often mimic the tone, structure, and even the email addresses of legitimate institutions, making it difficult to differentiate between genuine and fake messages. One such case is a message allegedly sent from a government employee at the Department of Correctional Services in South Africa.

This article provides a detailed guide on how to identify fake emails, what red flags to look for, and how to protect yourself from online scams — using a real-world example that claims to be from “Penny Tshabalala” of the Barberton Correctional Centre.

📌 Example Email (Submitted):

From: Penny.Tshabalala@dcs.gov.za
Name: Tshabalala Penny
Title: Procurement Clerk – Supply Chain Management
Department: Department of Correctional Services, Barberton Correctional Centre
Address: 1 Kruger Street, Barberton, Private Bag X611, Mpumalanga 1300
Contact Number: 013 516 0161

On the surface, everything in this email appears legitimate — a proper government email address, a professional signature, and official contact details. So why did this end up in the spam folder?

🔍 SECTION 1: Common Red Flags in Emails

Even professional-looking emails can be spoofed. Here's what to check:

1. The Email Address Itself

• The domain @dcs.gov.za seems legitimate. But scammers can spoof or fake "From" addresses.

• Always hover over the sender's email address to see the real one. It may be different from what is displayed.

• Check the SPF/DKIM/DMARC records if you're using a business email system.

2. Unexpected Procurement Contact

• Ask yourself: Did I reach out to this department?

• If you're not actively engaged with the Department of Correctional Services, this might be a phishing bait to gain your attention.

3. Missing Message Body

• If all you received was the signature block with no subject line or email body, that's suspicious.

• Legitimate emails include context, project details, and documents or references.

4. Phone Numbers and Addresses

• Scammers often use real addresses and contact numbers to build trust.

• But it’s the email intent and attached links/files (if any) that usually give it away.

🧠 SECTION 2: What Makes an Email Look Legitimate (Yet Still Be Fake)

Scammers often:

So how can you verify it?

🔒 SECTION 3: How to Verify a Government Email

1. Google the name and number

   • Search “Penny Tshabalala Department of Correctional Services”.

   • Match details from their official government website.

2. Call the department directly

   • Use the main switchboard of DCS, not the number in the email.

3. Don't click links or download attachments

   • Wait until you’ve verified the sender.

4. Check for digital signatures

   • Some government departments digitally sign their emails.

⚠️ SECTION 4: Spam Keywords and Trigger Phrases to Avoid

Emails with these trigger keywords often go to spam:

• "Procurement opportunity"

• "Urgent response required"

• "Confidential bid"

• "Government tender"

• "Click here for documents"

• "Submit within 24 hours"

If the email you received had any of these in the subject or body (not shown in your case), it could explain why it landed in your spam folder.

🏷️ Tags to Use in Articles Like This

You can use the following tags to categorize and boost SEO:

• #EmailSecurity

• #PhishingAlert

• #SpamEmail

• #FakeEmails

• #GovernmentScams

• #CyberSafety

• #EmailVerification

• #SouthAfricaSecurity

• #ProcurementFraud

✅ Tips to Recognize Legit Emails

1. They reference specific projects or RFQs.

2. You are expecting the email (you’re already in communication).

3. Emails are professionally written, with no grammatical errors.

4. Official tenders are published publicly, not just sent to random inboxes.

5. You can verify the contact online or in a government directory.