Skip to main content

What are phishing scams?

What are phishing scams?

Speak To An Expert

Get clear, personalised advice for your situation.

Jot down a few questions to make the most of your conversation.


What Are Phishing Scams?

Phishing scams are deceptive attempts by cybercriminals to acquire sensitive information such as usernames, passwords, and financial details by disguising themselves as trustworthy entities in electronic communications. These scams primarily occur through email, but can also be executed via text messages, phone calls, and social media platforms. They exploit the trust of individuals to trick them into providing confidential data, often leading to identity theft and financial loss.

How Phishing Scams Work

Phishing scams typically start with an unsolicited message that appears to come from a reputable source, such as a bank, government agency, or well-known company. The message often contains an urgent or alarming tone, compelling the recipient to act quickly. It may direct the individual to click on a link or download an attachment that contains malicious software designed to steal information.

The link in a phishing email often leads to a fake website that closely resembles the legitimate one. Once there, users are prompted to enter personal data, which is then captured by the scammers. In more sophisticated attacks, scammers might use personal information gathered from social media to tailor messages and increase their credibility.

Common Types of Phishing Scams

One common type is 'Spear Phishing', where attackers customise their scam to target a specific individual or organisation, making the attack more convincing. 'Clone Phishing' involves the replication of an actual email that has been received previously but with malicious content included. 'Whaling' targets high-profile individuals like executives, using targeted and researched information to increase the chances of success.

How to Recognise Phishing Scams

Phishing emails often contain signs that can give them away. Look out for poor spelling and grammar, generic greetings like "Dear Customer" rather than your actual name, and email addresses that don't match the domain of the alleged sender’s organisation. Always be wary of links that do not seem genuine or request sensitive information. Additionally, be cautious about any email that creates a sense of urgency, pushing you to make quick decisions.

Protecting Yourself from Phishing Scams

To protect yourself against phishing scams, it's essential to be sceptical of unsolicited messages asking for personal information. Always verify the authenticity of an email by contacting the organisation through a known and trusted communication channel — not through information provided within the suspicious message. Maintain robust security software on your devices to detect and block potential threats, and consider using multi-factor authentication for an extra layer of security.

Educate yourself and others about the dangers of phishing and regularly update your knowledge of common scams. By staying informed and vigilant, you can help protect yourself and your data from being compromised by phishing attacks.

What Are Phishing Scams?

Phishing scams are tricks that bad people use to steal important information like usernames, passwords, and money details. They pretend to be people you trust. These scams often happen through email, but they can also come in text messages, phone calls, and on social media. The scammers want you to trust them so you give them your private information, which can lead to problems like losing your money or having your identity stolen.

How Phishing Scams Work

Phishing scams usually start with a message you didn't ask for. This message might look like it comes from a bank, the government, or a company you know. The message might sound very urgent or scary to make you act quickly. It might ask you to click a link or download something harmful to steal your information.

The link might take you to a fake website that looks real. Once there, you are asked to enter personal info, which the bad people then steal. Some scams are very clever and use your personal info from social media to make their messages seem more real.

Common Types of Phishing Scams

One common trick is 'Spear Phishing', where the bad people focus on one person or company, making the trick seem more real. 'Clone Phishing' happens when they copy a real email you got before but add something bad. 'Whaling' is when they target important people like company bosses, using special information to make the trick work better.

How to Recognise Phishing Scams

Phishing emails can show signs that they are fake. Look for bad spelling and grammar, greetings like "Dear Customer" instead of your name, and email addresses that don't match the real sender they pretend to be. Be careful of links that seem strange or ask for private info. Watch out for emails that try to rush you to make quick choices.

Protecting Yourself from Phishing Scams

To stay safe from phishing, be careful with any message asking for your private details. Always check if an email is real by contacting the company through a phone number or website you know is real, not through the one in the suspicious message. Have good security software on your computer and phone to block threats, and consider using two-step verification for extra safety.

Learn more about phishing and tell others too. Stay updated on new scams to protect yourself and your information from being taken by bad people.

Frequently Asked Questions

A phishing scam is a type of cyber attack where the attacker pretends to be a trustworthy entity to trick individuals into revealing personal information such as passwords and credit card numbers.

Phishing scams work by sending fraudulent communications, often emails or messages, that appear to come from a reputable source, aiming to deceive the recipient into providing sensitive data.

Common signs include unfamiliar sender addresses, generic greetings, spelling and grammar mistakes, urgent or threatening language, and suspicious attachments or links.

No, phishing scams can also target users through text messages (SMS), phone calls, social media, and fake websites.

Do not click on any links or download attachments. Verify the sender's identity through other means and report the email to your IT department or email provider.

Be cautious of unsolicited messages, verify the source before clicking links or providing information, use security software, keep your systems updated, and educate yourself about phishing.

Phishing scams often target login credentials, credit card numbers, personal identification numbers, and other sensitive financial or personal information.

Yes, you can report phishing scams to organizations such as the Anti-Phishing Working Group or to your email provider. Many email services also have options to mark emails as phishing.

If you fall victim, your information may be used for fraudulent activities such as identity theft or unauthorized financial transactions. It's essential to act quickly to mitigate damage.

Attackers often use spoofed email addresses, copied branding from legitimate organizations, and carefully crafted messages to make phishing emails appear authentic.

Yes, phishing scams are illegal as they involve fraud and unauthorized access to personal information.

Spear phishing is a targeted phishing attempt aimed at a specific individual or organization, often using personalized information to increase likelihood of success.

A phishing kit is a set of tools and templates that enable cybercriminals to launch phishing attacks with relative ease, often available for purchase on the dark web.

Organizations can implement security awareness training, use email filtering solutions, enforce strong password policies, and regularly update security measures to prevent phishing.

Clone phishing involves creating a nearly identical copy of a legitimate email previously received by the victim, with a malicious link or attachment replacing the original content.

Yes, phishing scams can deliver malicious software through email attachments or infected links, which can compromise your system's security.

Phishing scams target both individuals and businesses, often seeking valuable data or access to business systems.

Immediately disconnect from the internet, run security scans, change any potentially compromised passwords, and monitor financial accounts for suspicious activity.

Yes, there are tools and services such as anti-phishing browser extensions, email filters, and security suites that help identify and block phishing attempts.

Unfortunately, phishing scams can be quite effective due to their ability to exploit human psychology, and even a small percentage of success can yield significant gains for attackers.

A phishing scam is a trick on the internet. A bad person tries to look like someone you trust. They want you to give them personal information, like passwords or credit card numbers.

Phishing scams are tricks. They send fake emails or messages. These look like they come from someone you trust. They try to trick you into giving them private information.

Look for these signs: if the email is from someone you don’t know, it starts with a general hello, has spelling or grammar mistakes, uses scary or fast language, or has strange files or links to click.

No, bad people can trick you in other ways too. They might send you tricky text messages, call you on the phone, or use social media and fake websites to try and fool you.

Do not click on any links or download attachments. Check who sent the email by other ways to make sure it is safe. Tell your computer helpers or email company about the email.

Be careful with messages you did not ask for. Check who they are from before you click on any links or give any details. Use security apps to stay safe. Keep your computer and phone updated. Learn about scams that try to trick you.

Phishing scams try to trick people to steal their login details, credit card numbers, personal info, and other important information.

Yes, you can tell people about phishing scams. You can tell the Anti-Phishing Working Group or your email provider. Lots of email services let you mark emails as phishing.

If someone takes your information, they might use it to pretend to be you or take your money without asking. You should act fast to stop it and fix the problem.

Bad people sometimes try to trick us with fake emails. They might use a pretend email address. They might copy the logo and name of a real company. They write tricky messages so the emails look real.

Yes, phishing scams are against the law because they trick people and steal their information without asking.

Spear phishing is a trick where bad people try to get personal information from someone. They look for details about a person or a company. Then, they send fake messages that look real, hoping to fool that person into sharing important things like passwords.

If you ever get an email or message that seems odd, here are some tips to help:

  • Check if you know the person who sent it.
  • Look for mistakes in spelling or grammar.
  • If the message asks for important information, be careful!
  • Use a tool like a spam filter to check emails.
  • Ask someone you trust if you're not sure.

A phishing kit is a bunch of tools and templates. Bad people use it to trick others online. This is called a phishing attack. These kits are sometimes sold on secret websites.

Companies can help keep safe from trick emails by doing a few smart things. They can teach people how to spot bad emails. They can use special tools to check emails before they reach you. They can make sure everyone uses strong passwords. They can also keep updating their safety rules. All of these things help stop bad emails.

Clone phishing is when someone makes a fake email that looks like a real one you got before. This fake email has a bad link or file in it instead of the real stuff.

Yes, bad people can send tricky emails. These emails might have fake links or files that can harm your computer.

Phishing scams try to trick people and businesses. They want to steal important information or get into business systems.

First, turn off your internet. Next, check your computer for problems using a security program. Then, make new passwords for your accounts. Finally, keep an eye on your bank accounts to make sure nothing strange is happening.

Yes, there are tools that can help you stay safe. Some tools can help stop phishing. Phishing is when someone tries to trick you online.

You can use special add-ons in your internet browser, email filters, and security programs. These tools help find and block phishing scams.

Phishing scams trick people into giving away personal information. They work well because they play with our feelings. Even if only a few people are fooled, the scammers can still get a lot of information.

Important Information On Using This Service


This website offers general information and is not a substitute for professional advice. Always seek guidance from qualified professionals. If you have any medical concerns or need urgent help, contact a healthcare professional or emergency services immediately.

Some of this content was generated with AI assistance. We've done our best to keep it accurate, helpful, and human-friendly.

  • Ergsy carefully checks the information in the videos we provide here.
  • Videos shown by Youtube after a video has completed, have NOT been reviewed by ERGSY.
  • To view, click the arrow in centre of video.
Using Subtitles and Closed Captions
  • Most of the videos you find here will have subtitles and/or closed captions available.
  • You may need to turn these on, and choose your preferred language.
Turn Captions On or Off
  • Go to the video you'd like to watch.
  • If closed captions (CC) are available, settings will be visible on the bottom right of the video player.
  • To turn on Captions, click settings.
  • To turn off Captions, click settings again.