Visit page
Press "Enter" to skip to content

Don’t take the bait: How to recognize and protect against phishing attacks

Phishing attacks are some of the most prevalent scams on the internet. As Cybersecurity Awareness Month winds down, we’re focusing today on how to recognize phishing scams and what you can do to fight back.

Phishing emails, or fraudulent emails intended to scam users out of money or into revealing sensitive information like passwords or account numbers, first appeared in the late 1990s. Early phishing emails were typically generic and riddled with spelling and grammar errors.

Today phishing has evolved into a highly targeted and emotionally manipulative practice. Attackers leverage AI to create thousands of personalized messages instantly, hitting emotional pressure points with themes of fear, urgency, and authority. In our overstimulated digital world where we are constantly bombarded with emails and notifications, fear has become a highly effective tool for cutting through the clutter and pressuring users to fall for more sophisticated scams.

Our friends at the National Cybersecurity Alliance provide a real-world example of phishing attacks by way of the Giant Company scam.

Giant Company was one name for a massive scam operation based in Myanmar but targeting regular Americans like you and your grandmother. Almost 300 people were arrested in connection with theGiant Company, and nine scam centers were disrupted as part of the crackdown. But Giant Company is a drop in an ocean of scams. Scammers and phishing attackers impersonate your bank, your boss, a delivery company, customer support, or even a family member. They want you to click their links, take their phone calls, open their DMs, respond to their “accidental” texts, and eventually, send them your hard-earned money.

And now with AI, scammers can commit more fraud every day! These big scamming syndicates love to make you feel something and act fast.

  • Be especially cautious of unexpected inbound messages, especially if it’s urgent. Make use of your email provider’s phishing analyzers if they’re available.
  • Look out for urgency, like fear (“you just got hacked!”) and pressure (“you won an expensive grill!”)
  • Don’t click on anything in an email if it seems suspicious. You don’t need to respond to urgent messages, nor do you need to answer the phone. A scammer’s biggest enemy isn’t technology. It’s your skepticism.

Learn more about staying safe online all year long at the National Cybersecurity Alliance.

Comments are closed.