Phishing Scams: An Overview

Phishing scams are a form of online fraud where malicious individuals pose as trusted entities to steal sensitive information such as passwords, credit card numbers, and personal details. These scams often come in the form of emails, text messages, or phone calls that appear to be from legitimate sources like banks, online services, or government agencies.

A common example we are seeing is an email appearing to come from “Management” with a link to an HR Policy Procedure requesting urgent action.

The goal is to trick the recipient into clicking on a malicious link, downloading malware, provide confidential information or collect your username and password details.

Types of Phishing Scams

Email Phishing: The most common type, where scammers send emails that appear to be from reputable companies.

Spear Phishing: A targeted attempt to steal sensitive information from a specific individual, often using personal details to appear more convincing.

Vishing: Voice phishing, where scammers use phone calls to deceive individuals into providing personal information.

Smishing: Phishing via SMS, where text messages are used to lure victims into clicking on malicious links.

Quishing: Phishing using QR codes, which direct victims to malicious websites when scanned.

How to Avoid Phishing Scams

Always be cautious of unexpected emails, texts, or calls, especially those asking for personal information or urging immediate action.

If you receive a suspicious message, contact the company or individual directly using a known, trusted method rather than the contact information provided in the message.

Check for spelling and grammatical errors, generic greetings, and mismatched URLs. Hover over links to see the actual URL before clicking.

Stay informed about the latest phishing tactics and share this knowledge with friends and family to help them stay safe.