Phishing and Scams

Introduction

The easiest way into an account is often not clever hacking. It is a message that persuades you to hand over the key. This is called phishing, and it arrives by email, text message, phone call, social media and even QR codes.

The simple explanation

Phishing is a trick message that pretends to be someone you trust so that you click, pay or share something.

Common warning signs

Urgency or fear: "Your account will be closed in 24 hours" or "Unusual activity, act now".
Too good to be true: a prize, a refund or a job offer you did not ask for.
Unexpected requests: to pay, to buy gift cards, or to share a code or password.
A mismatched sender or link: the address looks slightly off, or the link text does not match where it really goes. On a computer you can hover over a link to preview it.
Strange wording or pressure to keep it secret.
An attachment you did not expect.

Quick quiz

You get a text saying your bank account is locked and you must click a link in the next hour. What is the safest response?

What to do when you are unsure

Stop and breathe. Scammers want you to rush.
Do not click, open attachments or call numbers in the message.
Check another way. Contact the company using the number on its official website or the back of your card.
Report it. Use the report button in your email or messaging app. Many countries also have an official reporting address.
If you already shared something, change the password at once, turn on two-step sign-in, and tell your bank if money or card details were involved.

Other scams to know

Fake support calls claiming your computer has a virus
Romance and friendship scams that build trust and then ask for money
Fake delivery and toll messages
Impersonation, where someone pretends to be a family member or your boss asking for urgent money

A real organisation will not pressure you to pay with gift cards, cryptocurrency or a hurried bank transfer.

Try it yourself

Look at the last three unexpected messages in your inbox or phone. Do any show the warning signs above? Practise checking one by going to the official site yourself.

Summary

Phishing is a trick message pretending to be someone you trust.
Watch for urgency, fear, rewards, unexpected requests and odd links.
Pause, check through an official route, and report it.