How to Avoid Phishing
Phishing is an attempt to steal sensitive information, like account numbers and passwords, or install malware (the spoils). With this info, thieves can loot your checking account, run up bills on your credit cards or do other damage to your financial history and reputation.
The most common phishing attack is a malicious link or attachment in an email or a fake website. Criminals often try to mimic a company they think the victim interacts with, such as banks or popular app makers. This allows them to target people who have a high likelihood of being gullible or willing to give away their information or download malware.
Criminals also try to trigger a sense of urgency in their victims. In their emails, they usually claim that there is a problem with the user’s account and ask for information to fix it. This makes victims feel rushed to respond, which could lead them to overlook other inconsistencies of the message.
Emails should never contain a link or an attachment without explicit permission from the sender, especially if it contains an executable file (with extensions like.exe,.zip or.scr). Additionally, users should be wary of messages that ask them to provide personal or financial information over email or text and those that are too good to be true. If they are unsure, they should open a new browser tab and navigate to the organization’s official website to verify the information or contact them directly.