What Is Phishing?
Phishing is a type of cyberattack in which criminals use deceptive messages, websites, emails, or other communications to trick people into revealing information or performing an unsafe action.
Common Types of Phishing
Email Phishing
Attackers send messages that appear to come from a legitimate company, organization, or person.
Smishing
Smishing is phishing delivered through SMS or other text messages.
Vishing
Vishing uses phone calls or voice communication to trick victims into providing information or taking an unsafe action.
Social Media Phishing
Attackers may use fake accounts, messages, or posts to direct people toward fraudulent websites or requests.
Fake Login Pages
A fake login page may imitate a familiar service and attempt to trick users into entering usernames or passwords.
Warning Signs of Phishing
- Unexpected messages asking you to act immediately.
- Requests for passwords, PINs, or security codes.
- Suspicious or unfamiliar links.
- Messages containing unusual spelling or grammar.
- Unexpected attachments.
- Offers or threats that seem designed to create panic or excitement.
- A sender address or account that does not match the claimed organization.
How to Protect Yourself
- Pause before clicking links or opening attachments.
- Check the sender carefully.
- Verify unexpected requests through an independent channel.
- Never share passwords or authentication codes through unsolicited messages.
- Use multi-factor authentication where available.
- Keep your browser, operating system, and security software updated.
- Report suspicious messages using the appropriate reporting feature.
Remember
A message can look convincing and still be fraudulent. When something seems unusual, stop and verify it before taking action.