Education • Awareness • Safety

What is Phishing?

Phishing is when attackers impersonate trusted sources to trick you into giving up passwords, personal info, or money. It happens through email, texts, phone calls, fake websites, social media, and even physical mail.

Why phishing works

Phishing works because it targets human trust — not technology. Scammers use urgency, fear, or temptation to push quick decisions.

Urgency & pressure
“Act now” / “final notice” / “account locked.”
Impersonation
Banks, delivery companies, coworkers, law enforcement.
A trap action
A link, QR code, attachment, phone number, or payment request.
The payoff
Stolen logins, identity info, money, or access to accounts.

Common red flags

  • Unexpected message demanding action
  • Threats, fear, or “you’ll be arrested” language
  • Links that don’t match the real site
  • Requests for passwords, codes, or personal data
  • Payment requests via gift cards, crypto, wire, or “untraceable” methods
  • Sender looks “almost right” (extra letters, odd domain)
Quick rule
If it creates urgency and asks you to click, call, or pay — pause and verify.

Phishing Facts & Statistics

A quick snapshot of why awareness training matters.

Over 5 million Americans scammed yearly
Phishing drives a major share of cybercrime reports
Financial losses reach billions annually
Email remains a top delivery method
Text/SMS scams are growing rapidly
Voice/in-person tactics still work on victims
Tip: If you want, we can replace these with your preferred sources and keep them updated site-wide.

Common phishing methods

Email phishing
Spoofed emails that push you to click a link, open an attachment, or “verify” your account.
Smishing (SMS)
Texts about deliveries, banking, job offers, or “prizes” with malicious links or numbers.
Vishing (phone)
Calls impersonating tech support, government, banks, or executives to pressure you.
Fake websites
Look-alike login/checkout pages designed to steal usernames, passwords, or payment info.
Social & ad scams
Fake ads, posts, and DMs that lead to malicious sites or direct payment scams.

Why GonePhishing exists

GonePhishing was created to educate and empower everyone to recognize and report scams before they cause harm. Through real examples, true stories, and interactive training, we help people build safer habits — fast.