Phishing
Severity — Medium How common — Common
Fake emails, texts, or websites that trick you into handing over passwords, money, or personal information by pretending to be someone you trust.
How it works
An attacker sends a message that looks like it's from a company or person you know — your bank, a delivery service, your boss. It creates a reason to act fast: a locked account, a missed package, an urgent payment. The message points you to a link. The link opens a fake page that looks real, and anything you type there goes straight to the attacker.
Warning signs
A message pushing you to act right now or face a consequence
A link whose address doesn't match the real company (hover to check before clicking)
Small errors in spelling, grammar, or the sender's email address
A request for a password, code, or payment that you didn't start
How to protect yourself
STOP. Don't click the link or reply while you feel rushed. Urgency is the trick.
VERIFY. Contact the company yourself using a number or website you already trust — not the one in the message.
RESPOND. If it's fake, delete it and report it. If you already clicked, change that password and tell your bank right away.