Phishing Scams: What to Know & Avoid

Online scammers use fake emails to trick people into revealing sensitive information. Learning how to recognize and avoid phishing scams can help you keep your accounts safe.

What Is Phishing?

Phishing is a type of online scam where cybercriminals pose as legitimate businesses or organizations to steal personal information. These scams often come in the form of emails designed to look like they’re from financial institutions, online stores, government agencies, or other trusted entities.

Once scammers get your account numbers, passwords, or Social Security numbers, they can access your banking details, install harmful software on your computer, or even steal your identity.

How Phishing Scams Work

Phishing emails often:

• Look like official messages from companies you trust.
• Use urgent language to make you act quickly.
• Contain fake links that lead to scam websites that steal your information.
• Include attachments that can infect your device with malware.

How to Identify a Phishing Email

Be on the lookout for these warning signs:

• Generic Greetings: Emails that don’t address you by name (e.g., “Dear Customer”) could be scams.
• Typos & Poor Grammar: Many phishing emails contain spelling errors or awkward wording.
• Suspicious Email Addresses: The sender’s email may look similar to a real company’s address but with slight variations (e.g., support@paypa1.com instead of support@paypal.com).
• Urgent or Threatening Language: Phrases like “Your account has been compromised!” or “Act now to avoid suspension!” are designed to pressure you into clicking.
• Unexpected Attachments or Links: Hover over links (without clicking) to see where they lead—if the URL looks suspicious, don’t click.

How to Protect Yourself from Phishing Scams

Follow these steps to stay safe:

• Verify Before You Click: If you get an email asking for sensitive information, contact the company directly using a phone number or website you trust.
• Don’t Share Personal Information via Email: Legitimate companies will never ask for passwords, Social Security numbers, or account details through email.
• Use Two-Factor Authentication (2FA): This adds an extra layer of security by requiring a second form of verification, such as a code sent to your phone.
• Keep Your Software Updated: Enable automatic updates on your device to protect against new security threats.
• Report Phishing Attempts: Forward phishing emails to reportphishing@apwg.org and report them to the FTC at reportfraud.ftc.gov.

What to Do If You Fall for a Phishing Scam

If you accidentally respond to a phishing email or click a suspicious link:

• Change your passwords immediately for any compromised accounts
• Monitor your financial accounts for unauthorized transactions
• Report identity theft at identitytheft.gov
• Run a security scan on your computer to check for malware or viruses

Stay Safe Online

Scammers always look for new ways to trick people, but staying informed can help avoid their traps. When in doubt, pause before clicking, verify the source, and protect your personal information.

By following these tips, you can keep your accounts secure and help stop phishing scams in their tracks.