In our digital world, staying safe online is more important than ever. You use the internet for many things, like learning, shopping, and connecting with friends and family. But just as there are good people online, there are also those who try to trick you. Two common ways these tricksters operate are through something called “phishing” and “smishing”. Understanding these terms will help you protect yourself and your money.
What is Online Fraud?
Online fraud happens when someone tries to trick you using the internet or digital messages to steal your personal information, money, or access your accounts. These tricks often involve pretending to be someone trustworthy, like your bank, a government department, or a well-known company.
Why You Need to Be Careful Online
Being careful online is crucial because your personal details, such as your name, address, and bank account information, are very valuable. If these details fall into the wrong hands, criminals could:
- Steal money from your bank account.
- Make purchases using your identity.
- Access your online accounts, like email or social media.
- Cause you a lot of stress and trouble.
It’s like protecting your home; you wouldn’t leave your front door unlocked, and similarly, you should protect your digital information.
What is Email Phishing?
Email phishing is a type of online fraud where attackers send you fake emails that look like they come from a trusted source. The goal is to trick you into revealing sensitive information, such as passwords, bank details, or credit card numbers.
How Email Scams Work
These scams usually work by:
- Sending a deceptive email: You receive an email that appears to be from your bank, a government service, a delivery company, or a popular online shop.
- Creating a sense of urgency or fear: The email might warn you that your account will be closed, or that there’s an urgent problem you need to fix immediately. It might also offer something too good to be true, like a large refund or prize.
- Asking you to click a link or open an attachment: The email will often contain a link that takes you to a fake website designed to look exactly like the real one. If you enter your details there, the criminals will steal them. Sometimes, they ask you to open an attachment, which might contain harmful software.
Common Signs of a Phishing Email
You can often spot a phishing email by looking for these clues:
- Unexpected messages: The email comes out of the blue and asks you to do something urgent.
- Generic greetings: Instead of using your name, it might say “Dear Customer” or “Dear Account Holder”.
- Poor grammar and spelling: Official organisations usually have perfect English. Mistakes are a big red flag.
- Suspicious links: If you hover your mouse pointer over a link (without clicking!), you might see a strange web address that doesn’t match the company’s real website.
- Requests for personal information: Legitimate organisations rarely ask for your password or full bank details via email.
- Threats or promises: Messages that threaten to close your account or promise huge rewards are often scams.
Real-Life Examples of Email Phishing
- Fake bank alerts: An email claiming your bank account has been locked and you need to click a link to unlock it.
- Bogus tax refunds: An email pretending to be from a government tax department, offering a refund if you provide your bank details.
- Delivery notification scams: An email saying there’s a problem with a package delivery and asking you to click a link to reschedule or pay a fee.
What is Smishing?
Smishing is very similar to phishing, but instead of using email, it uses text messages (SMS) on your mobile phone. The word “smishing” comes from combining “SMS” and “phishing”.
How Text Message Scams Work
Smishing attacks also try to trick you into giving away personal information or clicking on harmful links.
- Sending a deceptive text message: You receive a text message that looks like it’s from a trusted source, such as your bank, a delivery service, or a government agency.
- Creating urgency: The message often creates a sense of urgency, asking you to act quickly to avoid a problem or claim a benefit.
- Asking you to click a link or call a number: The text message will usually contain a link to a fake website or ask you to call a premium-rate phone number.
Common Signs of a Smishing Text
Look out for these signs in text messages:
- Unexpected messages: Like phishing emails, these texts often arrive out of the blue.
- Unusual sender numbers: The message might come from a regular mobile number or a strange short code.
- Links to unknown websites: The text will include a link that looks suspicious or shortened.
- Requests for personal details: Asking for passwords, PINs, or bank account numbers via text is a major warning sign.
- Grammar and spelling errors: Again, official organisations usually send professional messages.
Real-Life Examples of Smishing
- Fake parcel delivery texts: A text message claiming a parcel is waiting for you and asking for a small payment or for you to click a link to arrange delivery.
- Bank security alerts: A text message saying there’s suspicious activity on your bank account and asking you to click a link to verify your details.
- Lottery or prize scams: A text telling you that you’ve won a large sum of money and need to click a link or call a number to claim it.
Key Differences Between Phishing and Smishing
While both phishing and smishing aim to trick you, their main difference lies in how they reach you.
How Attackers Reach You
- Phishing: Attackers primarily use email to send their deceptive messages.
- Smishing: Attackers primarily use text messages (SMS) to send their deceptive messages.
How the Messages Look
- Phishing emails can be quite detailed, often trying to perfectly copy the layout and branding of a real company’s email. They might contain many links and a lot of text.
- Smishing texts are usually shorter and more direct, due to the nature of text messaging. They often contain a single link and a very urgent call to action.
How to Protect Yourself from Phishing and Smishing
Protecting yourself means being alert and following some simple safety rules.
Always Be Suspicious
If an email or text message seems too good to be true, or if it creates a strong sense of urgency or fear, it’s probably a scam. Take a moment to think before you act.
Check Before You Click or Reply
- Verify the sender: If you receive a suspicious message, contact the organisation directly using a phone number or email address you know is real (from their official website, not from the message itself).
- Hover over links: On a computer, move your mouse pointer over any link in an email or text to see the actual web address it leads to. If it looks strange, do not click it.
- Don’t open attachments: Never open attachments from unknown or suspicious senders.
Never Share Personal Details Easily
Legitimate banks, government bodies, or companies will never ask you for your full password, PIN, or one-time passcodes (OTPs) via email, text message, or an unsolicited phone call. Be very careful about what information you share online.
Use Strong Passwords and Two-Factor Authentication
- Strong passwords: Create unique, long passwords for each of your online accounts. Use a mix of capital letters, small letters, numbers, and symbols.
- Two-Factor Authentication (2FA): Where available, turn on 2FA. This adds an extra layer of security, often requiring a code sent to your phone or generated by an app, in addition to your password.
Keep Your Software Updated
Make sure the operating system on your phone and computer, as well as all your apps, are always up to date. Updates often include important security fixes that protect you from new threats.
Report Suspicious Messages
- Forward suspicious texts: You can often forward suspicious text messages to a special number (like 7726 in the UK) that helps mobile networks investigate and block them.
- Report emails: Many email providers have a “report phishing” button. You can also report incidents to your bank or relevant government cybercrime unit.
What to Do If You’ve Been Scammed
If you think you have fallen victim to a phishing or smishing scam, it’s important to act very quickly.
Act Quickly
The sooner you act, the better your chances of limiting any damage.
Contact Your Bank or Financial Institution
If you have shared your bank details or made a payment, contact your bank or financial institution immediately. They can help you secure your account and potentially stop any unauthorised transactions.
Change Your Passwords
If you entered your password on a fake website, change that password immediately for that account and any other accounts where you use the same password.
Report the Incident to the Authorities
Report the scam to the appropriate cybercrime reporting agency in your country. In the UK, this would be Action Fraud. This helps authorities track down criminals and prevent others from becoming victims.
Staying Safe Online: A Shared Responsibility
Keeping safe online isn’t just about what you do; it’s also about the wider support available.
Why Your Awareness Matters
Your personal awareness is your first and best defence against online fraud. By understanding how these scams work and recognising the warning signs, you become a much harder target for criminals. Sharing this knowledge with your family and friends also helps create a safer online community for everyone.
How Government Bodies Help Keep You Safe
Government bodies and regulators play a vital role in protecting you. They:
- Set rules and regulations: They create laws to combat cybercrime and protect consumers.
- Issue warnings and advice: They regularly publish information and campaigns to educate the public about the latest scams and how to stay safe.
- Investigate and prosecute: Law enforcement agencies work to investigate cybercrimes and bring offenders to justice.
- Promote secure digital services: They encourage organisations to adopt strong security measures to protect your data.
By working together – you being vigilant, and government bodies providing protection and guidance – we can all make the digital world a safer place.
Author
