Phishing Basics • Warning Signs • Safer Choices

What is phishing?

Phishing is when a scammer pretends to be a trusted person, company, or organization to pressure you into clicking, replying, logging in, sharing information, or sending money.

The message may arrive by email, text, phone, a fake website, social media, or another communication channel. The safest response is usually the same: pause and verify before you act.

Start Free Training Check Something Suspicious

Simple, practical guidance No technical knowledge required Built around safer everyday habits

THE BASIC PATTERN

Most phishing follows three simple steps.

You do not need to memorize every scam. Learn the pattern and you can recognize many suspicious situations faster.

Pretend

The scammer acts like someone you already trust: a bank, employer, delivery service, government office, friend, or family member.

Pressure

The message creates urgency, fear, curiosity, or excitement so you react before you have time to verify it.

Get You to Act

The goal is usually to make you click, call, log in, open a file, share a code, provide information, or send money.

Simple rule: If a message pushes you to act immediately, slow down and verify through an official source you already trust.

WARNING SIGNS

What should make you stop and check?

One warning sign does not always mean something is a scam, but several together deserve extra caution.

Urgency or threats “Act now,” “final notice,” “your account will be closed,” or similar pressure.

Requests for sensitive information Passwords, one-time verification codes, account details, or personal information.

Unexpected links or login pages A message asks you to sign in, verify an account, or open a link you were not expecting.

Something looks slightly wrong The sender name, email address, website address, wording, or branding does not quite match.

Unusual payment requests Gift cards, cryptocurrency, wire transfers, payment apps, or other hard-to-reverse payments.

You are told not to verify The sender discourages you from calling the company, another employee, or someone you trust.

COMMON CHANNELS

Phishing and scam tactics can show up almost anywhere.

The delivery method changes, but the pressure-and-action pattern often stays the same.

Email Fake invoices, account alerts, password resets, attachments, and login links.

Text Messages Delivery notices, bank alerts, toll notices, prizes, jobs, and account warnings.

Phone Calls Fake banks, technical support, government agencies, businesses, or family emergencies.

Fake Websites Look-alike login, payment, shopping, or support pages designed to steal information.

Social Media & Ads Direct messages, marketplace listings, sponsored posts, fake stores, and account impersonation.

Mail & Letters Similar impersonation and payment tactics can also arrive through physical mail.

WHAT TO DO NEXT

Pause. Verify. Then decide.

Do not use the phone number, link, or contact information inside a suspicious message. Go to the official website yourself, use a trusted number, or contact the person or organization another way.

Practice With Free Training I Already Clicked, Replied, or Paid

Already acted on something suspicious? Use the recovery guidance to secure accounts, document what happened, and take the appropriate next steps.