How to Protect Yourself From Phishing
Phishing is when you receive an email, text message or call that appears to be from a company or person you know but actually is from cybercriminals. They want you to click a link or share personal information (like passwords and social security numbers) that they can use to steal money or your identity.
The best defense against phishing is to be aware of how scammers work. Scammers build trust by impersonating familiar sources, like banks, payment services, online retailers or even the IRS. They also create a sense of urgency by telling you that you will lose money or end up in legal trouble if you don’t act right away.
Scammers also spend time tailoring a phishing message for you. This is called “spear phishing.” They use the personal information they have on you (like your name, job title or the names of people you know) to make the email seem more convincing. They can also spoof the sender’s email address to make it appear as if it is from a known, trusted source.
Grammar, spelling and formatting are red flags. Legitimate companies, especially those you have done business with, rarely have spelling errors or a generic greeting (e.g., “Dear Madam”).
If an email seems suspicious or doesn’t match the usual format of the company you do business with, take a moment to think about it before clicking any links or providing any information. If in doubt, contact the company directly using a phone number from their Website or your account statements or credit card. This can reduce the risk of malware infection or ransomware, which restricts access to data by encrypting files and locking computers screens.