How to Recognize and Avoid Phishing Scams

Managed IT & Security Services for Small Business

How to Recognize and Avoid Phishing Scams

Phishing scams are a type of online fraud where criminals try to trick you into giving them your personal information, such as your passwords, credit card numbers, or Social Security number. They can do this by sending you emails or text messages that look like they’re from a legitimate company, such as your bank or credit card company. The emails or texts will usually contain a link that takes you to a fake website that looks like the real thing. If you enter your personal information on the fake website, the criminals will steal it and use it to commit fraud.

Here are some tips to help you recognize and avoid phishing scams:

Be suspicious of any email or text message that asks for your personal information. 

Phishing emails and texts often contain typos or grammatical errors, and they may use urgent language or threats to try to pressure you into taking action quickly. If you’re not sure whether an email or text message is legitimate, don’t click on any links, download any attachments or enter any personal information.

If you receive an email or text message from a sender you don’t recognize, don’t click on any links in the message. Instead, go directly to the website of the company that the email or text message claims to be from and log in to your account there.

Don’t enter your personal information on a website that you don’t trust. 

If you’re not sure whether a website is legitimate, don’t enter your personal information on it. Instead, close the website and go to a website that you trust.

Use a unique complex random password for your online accounts. 

A decently strong password is at least 14 characters long and includes a mix of upper and lowercase letters, numbers, and symbols. If you are using passwords that you remember yourself, you should change your passwords regularly.  Passphrases are another good way to get password length without making it overly difficult to remember.

If you are using a password manager and you use 36 character unique complex random character passwords, you would only need to change your password if there is a breach.

Here are a couple examples of a strong secure password:

  • R6BJ&SoHoiZiK$LhDn3py$cE4bf&3%chf5Lp
  • next-evidence-polyester-squint-discuss

Be cautious about public Wi-Fi.

Public Wi-Fi networks can be insecure, and scammers can use them to intercept your data.  Do not log in to sensitive accounts or provide sensitive information while using public Wi-Fi.  Even if you use a VPN, that won’t protect you if the Wi-Fi is spoofed.

Be careful about what information you post on social media. 

Criminals can use information you post on social media to target you with phishing scams. For example, if you post about a recent vacation, a criminal might send you a phishing email that looks like it’s from your hotel, asking for your credit card information.

If you think you’ve been a victim of a phishing scam

If you think you’ve been a victim of a phishing scam, here are some steps to take:

  • On a different device that was not part of the phishing attack, change the passwords to your most sensitive accounts, like banking and social media, and make sure they are unique passwords that have not been used before.
  • Contact your bank or credit card company immediately. They can help you protect your account and prevent further fraud.
  • Closely monitor your credit history and account transactions for the next few months.
  • Consider reporting the attack to the Federal Trade Commission or the FBI.

By following these tips, you can help protect yourself from phishing scams and keep your personal information secure. Remember to always be skeptical of unsolicited messages, and never provide sensitive information unless you are certain that the request is legitimate. Stay safe out there!

For more information on phishing scams, visit the following websites:

Tags: ,