Phishing: Don't take the bait!

National Fish & Chip Day is coming up on June 7. But we’re interested in a whole other type of fishing. You’ve probably heard of phishing – cyberattacks where criminals pose as someone they’re not to steal your personal info. They’ll nick anything they can get their hands on, from passwords to your credit card number.

So, if you think that text from your ‘bank’ looks a bit fishy, it’s better to be safe than sorry. Hopefully, our tips will help you to avoid being caught hook line and sinker by the fraudsters…

It’s because it’s an easy – and very effective – way for cybercriminals to steal valuable info and money. It doesn’t require much technical skill to pull off either. By creating messages that look legit and play on fear and urgency, attackers can lure victims into a digital trap. It’s low cost, with a high reward. Plus, by throwing their net wide enough, they can target thousands of people at once. 

They’ll use the identity of a person or company you trust. This could be a bank, a music streaming service, or even your boss at work. The aim is to make something that seems so legitimate, that you follow their instructions without questioning it. 

You might get an email from ‘Netflix’ telling you that your payment didn’t go through, and that you need to update your details. These messages will look pretty convincing too, using official logos and language that sounds professional. But don’t take the bait!

Phishing isn’t just limited to emails though. It can also happen through a phone call or text message. Here’s how to spot a phishing attempt: 

• Unexpected contact – Be careful if you get a call or text completely out the blue. Especially if it’s asking for personal info or telling you to do something ASAP.
• Sense of urgency – Phishing tries to create a sense of panic, convincing you to act quickly.
• Requests for personal information – Legitimate companies and brands won’t ask for sensitive details like passwords over the phone or text.
• Generic greetings – Messages that use generic intros like ‘Dear Customer’ instead of your name can be a big red flag.
• Unusual instructions – Don’t listen if the message asks you to do something odd, like install a piece of software, or visit another website.
• Check the number – If the call or text comes from a number you don’t recognise, be careful. Scammers can spoof numbers to make them look authentic.

While it’s hard to completely avoid being targeted, there are a few steps you can take to reduce the risk:

• Use email filters – Most email services have a spam filter that can catch lots of phishing emails. Make sure this is switched on and updated regularly.
• Educate yourself – Stay up to date on the latest phishing tactics. Knowing what to look out for can help you to stop being scammed.
• Turn on two-factor authentication – This adds an extra layer of security to your account. To get in, you (and the potential hacker) will need a password, plus a second bit of info – like a code that’s sent to your phone.
• Keep software updated – Download the latest security updates on your computer and phone.
• Be sceptical - Always question how legitimate any strange messages are, even if it looks like they’re from someone you trust. Verify their details before you do anything.

If you run into phishing, it’s important to report it. This helps the authorities to track down and stop scammers. Here’s how to file a report:

• Forward emails – If a phishing email lands in your inbox, forward it onto the National Cyber Security Centre (NCSC) at report@phishing.gov.uk. The NCSC investigate these reports and take action to block malicious sites.
• Report texts – For phishing texts, forward the message to 7726 (which spells SPAM). Your mobile carrier should then look into it.
• Contact the organisation – If the phishing attempt looks like it’s from a proper company, contact them to let them know. Most companies have special channels for reporting it (which you can usually find on their official website).
• Report to Action Fraud – You can report phishing to Action Fraud, the UK’s national reporting centre for fraud and cybercrime. Head to their website or ring them on 0300 123 2040.
• Tell your bank – If you’ve given out any financial info (or think you have), get in touch with your bank immediately. They can help secure your account and monitor it for any suspicious activity.

We’re giving one lucky winner the chance to win a Ninja Double Stack SL400UK Air Fryer.

So on a lighter note – and in tribute to National Fish and Chip Day – what’s your go-to order at your local chippy? 

Let us know down below, and we’ll randomly select a winner. Entries close at 23:59 on 17 June 2024. We'll announce the lucky iD Community winner of the Ninja Double Stack SL400UK Air Fryer shortly after. 

We’ll notify the winner by direct message here on the Community, so please keep an eye on your inbox.

Good luck!