You recognize the
business name as one that you've conducted business with in the past. So, you click on the
convenient "take me there" link and proceed to provide all the information they
have requested.
Unfortunately, you find out much later that the website is bogus. It was created with the
sole intent to steal your personal information. You, my friend, have just been phished.
Phishing (pronounced as fishing) is
defined as the act of sending an email to a recipient falsely claiming to have an
established, legitimate business. The intent of the phisher is to scam the recipient into
surrendering their private information, and ultimately steal your identity.
It is not at easy as you think to spot an
email phishing for information. At first glance, the email may look like it is from a
legitimate company. The "From" field of the e-mail may have the .com address of
the company mentioned in the e-mail. The clickable link even appears to take you to the
company's website, when in fact, it is a fake website built to replicate the legitimate
site.
Many of these people are professional
criminals. They have spent a lot of time in creating emails that look authentic. Users
need to review all emails requesting personal information carefully. When reviewing your
email remember that the "From Field" can be easily changed by the sender. While
it may look like it is coming from a .com you do business with, looks can be deceiving.
Also keep in mind that the phisher will
go all out in trying to make their email look as legitimate as possible. They will even
copy logos or images from the official site to use in their emails. Finally, they like to
include a clickable link that the recipient can follow to conveniently update their
information.
A great way to check the legitimacy of
the link is to point at the link with your mouse. Then, look in the bottom left hand
screen of your computer. The actual website address to which you are being directed will
show up for you to view. It is a very quick and easy way to check if you are being
directed to a legitimate site.
Finally, follow the golden rule. Never,
ever, click the links within the text of the e-mail, and always delete the e-mail
immediately. Once you have deleted the e-mail, empty the trash box in your e-mail accounts
as well. If you are truly concerned that you are missing an important notice regarding one
of your accounts, then type the full URL address of the website into your browser. At
least then you can be confident that you are, in fact, being directed to the true and
legitimate website. |