Phishing is one of the most common online scams and a leading cause of account compromise, identity theft, and financial fraud.
Introduction
Phishing is a type of cybercrime where criminals attempt to trick people into revealing sensitive information such as:
- Passwords
- Banking details
- Credit card information
- Security codes
- Personal information
Phishing attacks typically arrive through:
- Text messages
- Social media
- Messaging applications
- Fake websites
The attacker usually pretends to be a trusted organisation or individual in order to gain the victim’s trust.
How Does Phishing Work?
A phishing attack often follows a simple process:
Scammer > Fake Message > Victim Clicks Link > Opens Fake website > Information Stolen
The message may appear to come from:
- A bank
- Microsoft
- Amazon
- PayPal
- Netflix
- A delivery company
- A colleague or manager
The goal is to persuade the recipient to take immediate action.
Common Examples of Phishing
Fake Password Reset Email
You receive an email stating:
Your Microsoft account password is about to expire. Click here to reset it.
The link directs you to a fake website designed to steal your login credentials.
Delivery Scam
You receive a message claiming:
A parcel could not be delivered. Please pay £1.99 to reschedule delivery.
The website then requests your payment card details.
Banking Alert
You receive an email saying:
Suspicious activity has been detected on your account. Please verify your details immediately.
The message creates urgency and attempts to trick you into logging into a fake banking site.
Common Signs of a Phishing Email
Unexpected Messages
Be cautious if you receive an unexpected email or text asking for information.
Ask yourself:
Was I expecting this message?
Requests for Personal Information
Legitimate organisations rarely ask for:
- Passwords
- PINs
- Security codes
via email or text message.
Poor Grammar or Formatting
Many phishing emails contain:
- Spelling mistakes
- Unusual wording
- Formatting problems
While attackers are becoming more sophisticated, errors remain a common warning sign.
What Happens If You Click a Phishing Link?
Clicking a link does not always cause harm by itself.
However, risks increase if you:
❌ Enter your username and password
❌ Enter payment card details
❌ Download unknown files
❌ Run software from untrusted sources
The sooner you recognise the scam, the better.
How to Protect Yourself
Think Before You Click
If in doubt:
✅ Visit the organisation’s website directly
instead of using links in emails or text messages.
Enable Multi-Factor Authentication (MFA)
MFA adds an extra layer of security.
Even if attackers obtain your password, they may still be unable to access your account.
Use Strong Passwords
Avoid reusing passwords across multiple services.
If one account is compromised, unique passwords help protect the others.
Keep Software Updated
Install updates for:
- Windows
- macOS
- Mobile devices
- Browsers
Security updates help protect against known threats.
What Should You Do If You Fall for a Phishing Scam?
If you’ve entered information into a suspicious website:
Immediately
✅ Change your password
✅ Enable MFA if not already configured
✅ Notify your bank if financial information was involved
✅ Scan your device for malware
✅ Monitor accounts for unusual activity
The faster you react, the better your chances of limiting any damage.
Spear Phishing
A targeted phishing attack aimed at a specific individual or organisation.
These attacks are often more convincing because the attacker has researched the target beforehand.
Quick Checklist
✅ Verify unexpected messages
✅ Check website addresses carefully
✅ Avoid clicking unknown links
✅ Enable Multi-Factor Authentication
✅ Use strong, unique passwords
✅ Be cautious of urgency or threats
✅ Never share passwords via email
✅ Keep software updated
Key Takeaway
Phishing is a scam designed to trick people into revealing sensitive information or performing actions that benefit a criminal. While phishing messages can appear convincing, they often contain warning signs such as urgency, suspicious links, and requests for personal information. Taking a moment to verify messages before responding can significantly reduce the risk of becoming a victim.