What Is Phishing?
Phishing is a practice used by Fraudsters/Scammers to send fake email or set up fake website that look alike a legitimate website (Banks sites, ebay, paypal etc.) to trick the users to disclose their confidential information such as User Name and Password.
Phishing emails are not very rare these days and we see these emails very frequently where email promise something with a link and when you click on the link, it takes you to a website which is a complete replica of a website. It asks for your login credentials and once you enter it, there job is done.
This is called Phishing because fraudster is fishing for your private account information. Typically, fraudsters try to trick you into providing your user name and password so that they can gain access to an online account. Once they gain access, they can use your personal information to commit identity theft, charge your credit cards, empty your bank accounts, read your email, and lock you out of your online account by changing your password.
Here this is very important to note that If you’re at all unsure about a website, do not enter your user name and password and follow below steps:
- Close and reopen your browser
- Clear Cache and cookies
- Type the URL into your browser’s URL bar
- Typing the correct URL is the best way to be sure you’re not redirected to a spoofed site.
These are the easiest and safest steps you can take to avoid leaking your private information.
How To Identify If You Have Received a Phishing Email:
If you have received an email from a company or web site asking you to provide confidential/private information, such as a password, PAN or AADHAR number, you might be the target of a phishing scam. Below are few things you should check before clicking on link.
“From” address. Check for a sender’s email address that is similar to, but not the same as, a company’s official email address. These email addresses are meant to fool you.
Urgent action required. They ask you that its very urgent and you might be penalized if don’t take action. If you receive such email, again go back to 1st point check the “From” address, call or email the company. Go to to company website by manually typing web address and check there. Don’t click on link in email unless you do all verification.
Seasons greeting (Generic) without your name: Fraudsters often send thousands of phishing emails at one time. They may have your email address, but they may not have your name. Be skeptical of an email sent with a generic greeting such as “Dear Customer” or “Dear Member”.
Links going to a fake web site. To trick you into disclosing your user name and password, fraudsters often include a link to a fake web site that looks like (sometimes exactly like) the sign-in page of a legitimate web site. Just because a site includes a company’s logo or looks like the real page doesn’t mean it is! Logos and the appearance of legitimate web sites are easy to copy
Thank you for reading this article. Please post your thoughts/comments/question using comment box.