Don’t take the bait: how to spot and avoid phishing attempts

A phishing scam is a fraudulent attempt by cybercriminals to impersonate reputable companies to deceive individuals into revealing sensitive information, such as passwords, credit or debit card numbers, or personal details through text, emails or other digital communication methods. Phishing scams continue to be a prevalent method used by cybercriminals to steal personal information and data. The frequency of phishing attacks varies, but it remains a significant concern to everyone in this digital age. Let’s explore how to spot phishing attempts, how to avoid them and things you can do to protect yourself online.

The phishing threat

There is not just one type of phishing scam. Some common variations of phishing approaches are email phishing, text message phishing or smishing and voice phishing or vishing. Cybercriminals use these approaches hoping people will bite on their bait. Some things to look out for would be generic greeting like “valued customer” or “hello user” instead of a personalized name and urgent or threatening language – phishing scams often use urgency like “account closing” or “don’t miss this opportunity” to get us on their hook. Also watch for spelling and grammar errors, unusual sender addresses, suspicious links in text or unexpected attachments. Keep an eye out for mismatched URLs, you can hover your mouse over any links in emails to display the URL. Ensure it matches the legitimate website’s URL or domain, and be cautious of shortened URLs as they hide the real destination that might not be legitimate. Keeping an eye out for these things can help you not take the bait when cybercriminals are phishing for your personal information.

Protect and avoid phishing attempts

Being able to identify the red flags of phishing from above is a big help, but we can also learn more about common phishing scams. Being aware of the threat is the first line of defense. The Federal Trade Commission (FTC) has a consumer website (https://consumer.ftc.gov/) that regularly publishes articles about current phishing scams and trends. You can also verify a sender’s information before opening the email. Check a sender’s email address to ensure it matches the legitimate organization’s domain. Using multifactor authentication can also be helpful when trying to avoid phishing. This provides an extra layer of security, even if your login credentials are compromised. Another thing to consider is to be mindful of the personal information you share online and avoid oversharing. Lastly, consider using a comprehensive security suite that includes email filtering, anti-phishing and anti-malware features.

In the ever-evolving landscape of the digital age, the threat of phishing looms large, but so does our ability to defend against it. We can fortify our digital lives against the deception of phishing scams. Stay informed, stay cautious, and stay safe. Together we can navigate the online world with confidence, knowing we hold the keys to our own digital security.


Article by Kara Robinson, TFCU Financial Educator

Kara Robinson

About the author

Kara Robinson started with Tinker Federal Credit Union as a teller and earned a coveted leadership development role within the credit union that lead her to the position of Financial Educator. Kara enjoys helping others and has a passion for financial education. Learn more about TFCU’s Financial Education team here.

Facebook
Twitter
LinkedIn