We have all received a email or SMS from a bank or a service company or similar in which we are ordered to enter a link that is provided to us and we are asked to verify personal data, bank details or passwords.
At first sight look like trustworthy emails or messagesbut these are fake web pages that mimic real pages.
Phishing is a computer technology which consists of supplanting the identity of a bank or a company to obtain personal data from users.
How can they be detected? There are several ways to identify a phishing attempt, but be vigilant, because cybercriminals invent new formulas almost daily to get some unsuspecting person to bite and be able to steal any data with which to impersonate their identity.
From address: there are strange or untrustworthy email addresses. If this is the case, it is better to distrust or contact directly the company that supposedly sends the email.
Non-personalized greeting: If they address you without using your name and they also do not distinguish your gender (that is, it is a generic greeting), it is likely that it is a phishing attempt.
Request for personal information: companies or banks do not usually request personal data through emails or messages.
Urgency: If companies order you to give personal data and warn you that your account will be suspended or give you a short period of time to provide it, it is probably phishing.
Threats: As with urgency, companies do not usually threaten to deactivate accounts either. If it happens, it’s suspicious.
Incoherent links: a phishing generally contains a link in which the company name does not match the name of the url. In addition, the url does not usually start with ‘https://’, but it removes the “s” for sure and stays with ‘http://’.
If the email has misspellings or grammatical errors.
Attached files. Be careful when opening unverified attachments. Large companies usually have ‘online’ forms -not words or PDF- to request data from their clients.
Signature: A business email without additional sender information or corporately signed (no custom name) is usually not a reliable email.
Without consent: By law, users must give their prior consent to a company through opt-in to start receiving their communications. If you receive an email from a brand you’re not subscribed to, it’s best to delete it.
What to do in the face of a phishing attack?
If you receive a suspicious email or message, it is best to send it to spam without selecting anything, not even the usual ‘Unsubscribe’.
In the event that it has been entered somewhere, it is best to change access passwords and notify the company or entity that they have supplanted.
George is Digismak’s reported cum editor with 13 years of experience in Journalism