To protect yourself, never click on links or download attachments from unsolicited emails—even if they appear to come from legitimate companies like Xfinity. Instead, verify legitimacy by contacting Comcast directly using the number listed on your official bill or their verified website.

Legitimate companies will use your name and account details, not generic greetings. Always inspect the sender’s email address and look for grammatical errors or odd formatting—common red flags of phishing attempts. Finally, use a credit card instead of a debit card for payments online, as credit cards offer stronger fraud protections.