All attacks

Phishing

Fake messages designed to steal your info or money.

What it is

Phishing is when scammers send emails, texts, or DMs pretending to be a company, friend, or government agency, hoping you'll click a link or share personal info.

How it works

An attacker copies the look of a real brand (your bank, Netflix, Amazon) and links to a fake login page. When you type your password there, they capture it.

How people get tricked

The message creates urgency: 'Your account will be closed in 24 hours!' Most people panic and click without checking the sender's address.

How to protect yourself

  • Hover over links before clicking — look at the real URL.
  • Never enter passwords from a link in an email. Go to the site directly.
  • Turn on two-factor authentication so a stolen password isn't enough.
  • If unsure, contact the company through their official app or phone number.

Know this now

If a message pressures you to act fast, slow down. Urgency is the #1 phishing red flag.