Skip to main content

What is a phishing scam?

What is a phishing scam?

Get Answers


What is a Phishing Scam?

Phishing scams are a type of cybercrime where attackers attempt to deceive individuals into providing sensitive information such as usernames, passwords, and credit card details. These scams often involve masquerading as a trustworthy entity through electronic communication, most commonly email. In the UK, phishing is a prevalent threat to personal and financial security, targeting both individuals and businesses.

How Do Phishing Scams Work?

Phishing scams typically begin with a fraudulent message that appears to come from a legitimate source like a bank, government agency, or popular online service. The message usually contains a sense of urgency, prompting the recipient to take immediate action. This action often involves clicking a link that leads to a fake website designed to look authentic. Once on this site, victims may be asked to enter personal information, which is then captured by the scammers.

Types of Phishing Scams

There are several types of phishing scams targeting UK residents. One common type is spear phishing, where attackers customize their approach to specifically target an individual or organization. Another variant is smishing, which uses SMS messages instead of emails to lure victims. Vishing, or voice phishing, involves phone calls from impostors pretending to be from legitimate organisations to extract personal information.

Recognising Phishing Scams

Being able to recognise phishing scams is crucial for protection. Indicators include misspelled domain names, suspicious email addresses, and generic greetings instead of personal ones. Phishing emails often contain poor grammar and spelling errors, and the linked websites, while similar to those of legitimate organizations, might have subtle differences. Additionally, the presence of unsolicited attachments or downloads in an email is a red flag.

Protecting Yourself from Phishing Scams

To safeguard against phishing attempts, it is important not to click on links or open attachments from unknown or suspicious messages. Always verify the authenticity of any communication by contacting the company or individual directly using official contact information. Using security software that offers phishing protection can also be beneficial. Regularly updating passwords and maintaining a critical eye while online are additional preventative measures.

Reporting Phishing Scams in the UK

In the UK, it is important to report phishing attempts to help reduce the prevalence of such scams. The National Cyber Security Centre (NCSC) encourages reporting by forwarding suspicious emails to report@phishing.gov.uk. The NCSC analyses the reports and takes action to remove fraudulent sites. By reporting these scams, individuals can contribute to wider efforts to combat cybercrime and increase overall internet safety.

What is a Phishing Scam?

A phishing scam is when criminals try to trick you into giving them important information like your passwords or credit card numbers. They pretend to be someone you trust, like your bank, using email. In the UK, this is a big problem for people's safety online.

How Do Phishing Scams Work?

Phishing scams start with a fake message that looks like it’s from a real place, like a bank. The message says there is a problem and you must act fast. It asks you to click a link to a website that looks real but is fake. Here, they want you to type in your personal details, which the scammers steal.

Types of Phishing Scams

In the UK, there are different phishing scams. "Spear phishing" is when they target a specific person or business. "Smishing" uses text messages instead of email. "Vishing" is when they call you and pretend to be someone real to get your information.

Recognising Phishing Scams

It’s important to spot phishing scams. Watch out for things like names that are spelled wrong or strange email addresses. Phishing emails might have bad grammar and spelling mistakes. The fake websites may look real but have small differences. Be careful if an email has attachments or links that you didn’t ask for.

Protecting Yourself from Phishing Scams

To stay safe from phishing, don’t click on links or open attachments from emails that seem odd. Always check if a message is real by contacting the company yourself. Use security software that helps block phishing. Change your passwords often and be careful online.

Reporting Phishing Scams in the UK

In the UK, you should tell someone if you see a phishing scam to help stop them. You can report suspicious emails to the National Cyber Security Centre by sending them to report@phishing.gov.uk. They will check and try to block the scam websites. Reporting helps others stay safe online too.

Frequently Asked Questions

A phishing scam is a fraudulent attempt to trick people into revealing sensitive information such as passwords, credit card numbers, or bank details. Phishing scam tactics often use fake emails, text messages, phone calls, or websites that look legitimate.

A phishing scam email often contains urgent language, spelling mistakes, suspicious links, mismatched sender addresses, or requests for personal information. Always verify the sender and avoid clicking unknown links.

A phishing scam text message may claim there is a delivery problem, account issue, or prize to claim, and it often includes a link or asks for a reply. Be cautious of unexpected messages that pressure you to act quickly.

A phishing scam website may copy the design of a real company, use a slightly misspelled domain name, and request login or payment details. Check the URL carefully and look for signs of poor design or unusual behavior.

If you clicked a link in a phishing scam, close the page immediately, do not enter any information, and scan your device for malware. If you shared credentials, change passwords right away and enable extra account security.

If you entered your password in a phishing scam, change that password immediately on the real account website and update any other accounts using the same password. Turn on multi-factor authentication and monitor for suspicious activity.

You can report a phishing scam to the company being impersonated, your email provider, your mobile carrier, and appropriate government or cybercrime reporting agencies. Reporting helps block the scam and protect other people.

Protect yourself from a phishing scam by using strong unique passwords, enabling multi-factor authentication, keeping software updated, and checking links before clicking. Be cautious with unsolicited messages asking for personal information.

A phishing scam is dangerous because it can lead to stolen passwords, identity theft, financial loss, and unauthorized access to sensitive accounts. It can also install malware on devices or be used to spread further scams.

Anyone can be targeted by a phishing scam, but people who regularly use email, messaging apps, online banking, or workplace systems are often at higher risk. New users and people in a hurry may be especially vulnerable.

A phishing scam is usually sent broadly to many people, while a spear phishing scam is tailored to a specific person or organization. Spear phishing scam messages often use personal details to seem more convincing.

A phishing scam is a general term for deceptive attempts to steal information, usually through email or web pages, while smishing scam specifically uses text messages. Both are designed to trick people into giving up sensitive data.

A phishing scam typically uses email or fake websites, while vishing scam uses phone calls or voice messages to deceive victims. In both cases, attackers try to obtain personal or financial information.

Yes, a phishing scam can lead to malware if you download a fake attachment, install a malicious app, or allow harmful software to run. Malware may steal data, spy on activity, or take control of the device.

Yes, a phishing scam can happen on social media through fake profiles, direct messages, scam links, or impersonation of friends, brands, or support accounts. Always verify suspicious requests before responding.

To verify whether a message is a phishing scam, check the sender, inspect links without clicking, and contact the organization through its official website or phone number. Do not trust urgent demands for passwords or payments.

Businesses should train employees, use email filtering, require multi-factor authentication, and create clear reporting procedures for suspicious messages. Regular security awareness helps reduce the impact of a phishing scam.

A phishing scam phone call often creates urgency, asks for verification codes, or requests account details and payments. Legitimate organizations usually do not ask for sensitive information unexpectedly over the phone.

A phishing scam commonly tries to steal passwords, credit card numbers, bank account details, government IDs, verification codes, and personal contact information. Attackers may use the data for fraud or identity theft.

After a phishing scam, secure your accounts, change passwords, contact your bank or affected services, monitor statements, and report the incident. If needed, freeze credit and watch for signs of identity theft.

Important Information On Using This Service


This website offers general information and is not a substitute for professional advice. Always seek guidance from qualified professionals. If you have any medical concerns or need urgent help, contact a healthcare professional or emergency services immediately.

Some of this content was generated with AI assistance. We've done our best to keep it accurate, helpful, and human-friendly.

  • Ergsy carefully checks the information in the videos we provide here.
  • Videos shown by Youtube after a video has completed, have NOT been reviewed by ERGSY.
  • To view, click the arrow in centre of video.
Using Subtitles and Closed Captions
  • Most of the videos you find here will have subtitles and/or closed captions available.
  • You may need to turn these on, and choose your preferred language.
Turn Captions On or Off
  • Go to the video you'd like to watch.
  • If closed captions (CC) are available, settings will be visible on the bottom right of the video player.
  • To turn on Captions, click settings.
  • To turn off Captions, click settings again.