What is Phishing?

Phishing is a cybercrime technique where attackers use fraudulent emails, websites, or messages to trick people into revealing sensitive information like passwords, credit card numbers, or personal data. The term "phishing" is a play on "fishing," as attackers are "fishing" for information using deceptive bait.

Red Flags in Email Sender Information

Examine the sender's email address carefully:

• Suspicious Domain: Check if the email domain matches the official company website (e.g., support@yourbank.com vs support@yourbank-secure.com)
• Generic Greetings: Legitimate companies address you by name, not "Dear Customer" or "Dear User"
• Unexpected From: If you don't have an account with the sender's organization, it's likely phishing
• Display Name Spoofing: The display name shows a company but the actual email address is different

Suspicious Content Red Flags

Pay attention to the message content itself:

• Urgency or Threats: "Your account will be closed!" or "Immediate action required!" to panic you into clicking
• Requests for Credentials: No legitimate company asks for passwords via email
• Mismatched Information: References to accounts you don't have
• Poor Grammar/Spelling: Many phishing emails contain noticeable errors
• Suspicious Links: Hover over links (don't click!) to see the actual URL

URL and Link Inspection

Links are a primary vector for phishing attacks:

• Always Hover First: Before clicking any link, hover over it to see the actual destination URL
• Check the Protocol: Look for https:// (secure) rather than http://
• Look for Domain Confusion: Attackers use similar-looking domains (goggle.com instead of google.com)
• Verify Shortened URLs: Be cautious of bit.ly or tinyurl links in official communications
• Use Bubo's Link Verification: Our tool can scan URLs before you visit them

What to Do If You Suspect Phishing

1. Do not click any links or download attachments
2. Do not reply to the email
3. Report the email as spam or phishing to your email provider
4. If it claims to be from a company you use, contact them directly using a phone number or website you know is legitimate
5. Mark the email as phishing in your email client
6. Consider using Bubo to verify suspicious emails

Family Protection Strategies

• Teach your family to verify requests through alternative communication methods
• Enable two-factor authentication on important accounts
• Use strong, unique passwords for each account
• Set up email filters to reduce phishing emails
• Keep software and security tools updated