What are Phishing Emails?

Internet Safety is a much discussed issue and there are many scams out there looking to fool unsuspecting victims. One type of scam is called ‘phishing’.

Phishing is a term derived from ‘fishing’ and refers to criminals who ‘fish for’ victims personal information, such as bank account details. The most common types of phishing scams involve people trying to obtain bank account information and passwords.

The phishing technique that is used most is the sending of emails claiming to be the recipient’s bank and saying there is a problem with their account, for example they have entered the incorrect PIN three consecutive times. They send these to a large number of people. Most will not fall for the scam but by targeting a large number they hope that some will. These scams will ask recipients to click a link that will take them to the banks website where they can enter their details. Of course this will not be the actual banks website, but it may be very similar, therefore looking authentic. The original email might even claim that accounts will be suspended if this is not done, which can make some people panic and follow the instructions.

After being directed to this website victims will be asked to enter their bank account number and password. This will mean that these criminals will now have the victim’s bank details and may be able to access their account.

Not all phishing emails will involve visiting a website, some will ask recipients to call a phone number. When this number is called an automated voice message will claim to be the bank in question and request the entry of the account number and password using the telephone keypad. This will also give the scammers these details and access to the account.

To most some phishing emails are obviously scam emails, as they are poorly written and even contain spelling mistakes. Some though look very genuine and this is where many people are fooled. There are other clues as well. A URL of a bank website will be something like, www.bank.com, whereas the email address from a phishing email will be something like @onlinebanking.bank.com. The URL’s if clicked on will also begin with ‘http’ like most websites, but secure URL’s should begin ‘https’. With secure websites there is also a lock symbol in the URL box.

Links in emails from a bank should NEVER be clicked on. These types of emails will not be sent by a genuine bank. If there is a genuine problem with a bank account the bank will phone or write to customers. If unsure, you should always contact the bank to confirm whether or not any contact is genuine.

Andrew Marshall (c)