How to Spot Phishing Emails
Phishing is a form of online fraud that uses email, social media, or text messages to trick users into disclosing personal information. It aims to obtain confidential information such as passwords, credit card numbers, and bank account details.
Phishers conduct their attacks either through technical methods or by exploiting human psychology (Ollmann, 2004; Herley and Florencio, 2008). These phishing campaigns are often carried out using malware or malicious software that is installed on the victim’s computer.
Identifying and avoiding phishing threats is crucial to protecting your company and ensuring data security. Educate your employees about phishing risks and train them in the best practices of spotting and reporting suspicious emails.
Scammers have gotten increasingly smarter at sending fake emails to people they don’t know. Many scams mimic the appearance of legitimate companies and use recognizable branding, including logos and addresses.
For example, a recent Chase phishing attack used actual Chase logos and URLs in its emails to try and fool people into revealing their login information. It also included a sense of urgency to lure users into responding quickly, which is a hallmark of many phishing scams.
First time or infrequent senders – If you receive an email from someone who you don’t recognize or who Outlook says is new to your organization, take extra care before clicking on any links or opening any attachments.
Spelling and bad grammar – If an email contains spelling or grammatical errors, it’s probably a scam. These mistakes may be caused by a foreign language or by a hacker trying to evade email filters that are designed to block such spam.