Expanded Lesson
5 min read
What Is a Phishing Attack? - 5 Ways to Recognize a Phishing Scam
-
-
Copied link to Clipboard!
You know scammers are out there, lurking behind friendly, seemingly legitimate emails and text messages. They attempt to get your personal information, often by asking you to click on a link. The link will bring you to a website that looks like a legitimate website, but it only exists solely for fraudulent purposes. Did you know that most phishing scams arrive by email? Just 1% attempt to scam you by phone. How can you recognize a phishing scam so you don’t fall prey to one? There are five common giveaways that an email may not be legitimate.
LESSON CONTENTS
1. Companies don’t request your personal information via email.
Unsolicited emails from a company that provide a link or ask you to verify your account details are often a scam. Companies don’t ask you for your bank account information or Social Security number.
2. Companies usually call you by name.
Scammers are sophisticated, but phishing attacks are usually sent to thousands of people at the same time. They often begin with something like, “Dear Customer” or “Dear Amazon Customer.” If this email was actually from your bank, your credit union, or a personal account, they would know who you were and call you by name.
3. Phishing emails prey on fear.
Common phrases used in phishing attacks are:
- Changes to your health benefits
- Action required: new login attempt
- Payment declined
- Security update required
- Important: please read
Sometimes scammers will send an invoice for something that you didn’t order in the hopes that you will click on the link they’ve helpfully provided to cancel this order so they can get your sensitive information.
Certain companies are impersonated more often than others. The most impersonated companies in the first quarter of 2021 were:
- Microsoft
- Amazon
- DHL
- IKEA
- Chase
- Rakuten
- PayPal
If you get an email from any of these companies, you should be suspicious. If you have any doubts, go directly to the website (DO NOT click on a link!) and log into your account. Some scam emails are one gigantic hyperlink, so if you click anywhere on the email, it will initiate a malicious attack.
Hackers are pretty good at recognizing opportunities. During times of general uncertainty, they know people are more anxious and might not be paying as much attention. At the start of the Covid-19 pandemic, phishing attacks increased significantly. During hotly contested political contests, they send out scam emails looking for contributions. The last round of stimulus checks brought a new set of scams.
If an email is targeted to you specifically, that’s called spear phishing. They could be after your financial information, but they could be gathering information to use later.
A newer scam is “sextortion”. Attackers claim they have video of you doing something compromising, and they ask for a ransom in exchange for not releasing the information. Delete the email immediately—they don’t have any such video.
Another thing you can do is enter the exact wording of the email message into a search engine. This will often identify scams.
4. Legitimate companies know how to spell and use grammar.
This is the easiest way to recognize a phishing scam. Legitimate companies employ people with excellent grammar and spelling skills to write emails for them. Did you know that hackers do this on purpose? They use awkward syntax and bad grammar as an attempt to pry on the uneducated.
If the email doesn’t read right, or there are errors especially in grammar or syntax, you should be suspicious.
5. Check the domain address.
This is often overlooked by even savvy consumers. Hover your mouse or your cursor over the link in the email address, and the destination address should appear in a bar along the bottom of the browser. If there is a string of random letters and numbers after the company name, it could be a phishing attack. Sometimes companies do include varied domains to send emails, in which case you should make sure that the link in the text matches the URL.
What to do if you’ve been phished.
If you think a scammer has obtained your information, go to IdentityTheft.gov and follow the instructions. You should also:
- Change all of your passwords immediately. You should change your passwords every three months or so, but especially after a phishing attack. Consider using a password manager to keep track of them all.
- Get anti-virus software and scan for viruses as soon as possible.
- Disconnect from the internet as soon as possible. You may be able to prevent the hacker from gaining remote access to your computer or from installing malware.
- Contact the company that was spoofed. Companies have departments dedicated to dealing with fraud. You can also report what happened to you to the Anti-phishing Work Group, which analyzes and works to prevent phishing attacks.
- Watch carefully for signs of identity theft. If you gave out financial information, check your bank accounts and credit card accounts for signs of fraud. You should also contact credit reporting agencies to let them know. Keep an eye out for new credit inquires that you didn’t authorize.
- File a report with the Federal Trade Commission (FTC).
- Don’t be too hard on yourself. While most people think they can recognize a phishing scam, hackers know that it only takes one moment of inattention.
Hopefully, you won’t fall victim to a phishing scam but if you do, you’re definitely not alone. Scammers send phishing emails because they work. Not clicking on random links or attachments will go a long way towards protecting yourself.
Related Resources
View All
6 min read
What is a social engineering attack?
A social engineering attack is a certain type of malicious attack that relies on human error. Hence the word “social.” Human beings are designed to make mistakes, especially when using the internet or corresponding online, and cyber criminals will try and take advantage of the situation. Learn how to protect yourself and others from a social engineering attack.
4 min read
How Can I Protect My Elderly Parent's Money?
If you have an aging parent or loved one, it’s important to help them protect their savings and assets from fraud and mismanagement. Elderly individuals with dementia or Alzheimer’s disease may have trouble managing their money. Others may have trouble hearing, seeing or using technology, which can make them vulnerable to online hackers and scam artists. If you are worried about your parent’s ability to manage their finances, take these steps:
4 min read
Five Holiday Scams to Avoid
The holiday season is one of the busiest times of year, especially as people shop, gather, exchange gifts and travel. Scammers and criminals see it as an opportunity to steal your personal information or try to trick you into sending money. Read this article to learn more about common holiday scams and how to avoid them.
3 min read
What are the Benefits of Contactless Cards?
Contactless credit and debit cards are becoming more widely accepted at point-of-sales systems across the country as retailers adopt this form of payment processing. Read this article to learn more about contactless cards, how they work and how they help safeguard your transactions from fraud.
6 min read
Don't Be Fooled: Know What Information Ent Will Never Ask You For
Here at Ent Credit Union, we go to great lengths to protect our members. A new scam has started affecting some of our members, and we want to help you stay safe. Learn how to protect your financial and personal information online, so you don’t have to worry about a stranger taking your money. Instead of robbing banks with black hoods over their faces, today’s thieves spend their time scamming everyday consumers and businesses out of their hard-earned money. Suspicious calls, texts, and emails can catch some people off guard, giving fraudsters a chance to drain their bank account.
5 min read
What to Do if You Think Your Elderly Parent Is Being Scammed
Millions of seniors are scammed out of their money every year in the United States. Elderly individuals tend to be more susceptible to financial scams. They also tend to have more assets, including owning a home, financial savings and good credit after a lifetime of work. Older Americans suffering from medical conditions such as Alzheimer’s or dementia may also get confused when managing their money. Others may have trouble using the latest technology, including mobile banking apps, email or the internet. Use this guide to protect your aging relatives from scams targeting seniors.
5 min read
Top 10 Financial Scams Targeting Retired Adults
Senior citizens and retired adults are often prime targets for digital hackers and con artists looking to defraud those that they consider vulnerable. These criminals often try to take advantage of these individuals costing them their life savings, which can lead to debt and other financial hardships. If you know someone who is retired, learn about the leading scams targeting them and how they can be identified.
4 min read
Common Scams that Prey on College Students
College students may be vulnerable to online scams and predatory behavior. Many students may be living on their own and managing their money for the first time. They may not be familiar with the warning signs of fraud, which can lead to all kinds of unfortunate outcomes, including identity theft and scam purchases. If you or someone you know is getting ready to go to college, use this guide to help protect yourself from common scams that target college students.
5 min read
Help I've Been Scammed! What Should I Do Now?
So, you believe you’re the victim of a scam—what do you do now? Online scams are becoming increasingly common as online scammers and hackers look for new ways to trick consumers into handing over their personal information. If you’ve been scammed, you might have noticed an unauthorized transaction posted to your bank account or your funds may be lower than expected. There’s also a chance that you sent your personal information to the wrong person by mistake, including your debit and credit card numbers, bank account information, Social Security number, phone number or email address. If you notice a problem with your account, there are several ways to rectify the situation. Follow these steps to secure your money before the scammer has a chance to make another withdrawal.
4 min read
Mobile Banking Safety Tips
More people are using mobile banking apps and websites than ever before. Many people prefer to manage their money online using a mobile device rather than visiting a local service center in person. You don’t have to deal with traffic or wait in line to use the ATM. Banking apps are as safe as the financial institutions they represent, but you need to be careful when sending and sharing your information online. Use these safety tips to enjoy the benefits of Ent mobile banking without putting your finances at risk.
6 min read
How Secure is My Password?
It’s generally recommended that you change your password once every three months or so, but it can be easy to forget or push it off. You may be wondering if it’s really such a big deal? Yes, it is because cybercrime is on the rise. In a 2018 survey of adults, almost 33% said they personally had experienced a hack of their social media and email accounts. This may be because up to 50% of them use the same password for multiple accounts. Read this article to help you secure your passwords and online accounts before you get hacked.
3 min read
EMV Chip-Enabled Debit Cards: How EMV Technology Keeps You Safe
Today, most debit and credit cards have multiple ways to transmit data and authenticate a payment. One such way is the small, square computer chips you see on the card. This is called an EMV chip and is used to help protect the user from fraud. Read this article to learn more about how EMV chips work and how they help keep your information safe.