🔐 Learn to Spot Phishing Emails
Phishing is a cyberattack that uses fake emails, websites, or messages to trick you into sharing sensitive information like passwords, credit cards, or personal details.
🚩 Common Signs of a Phishing Email
- Suspicious "From" Address: Looks legit but slightly off (e.g., support@amaz0n.com)
- Generic Greeting: “Dear user” instead of your name
- Urgency or Threats: “Your account will be closed if you don't act now!”
- Strange Links: Hover to see where they really lead
- Attachments: Especially .zip, .exe, or .docm files
- Too Good to Be True: “You’ve won a free iPhone!”
🛡️ Tips to Stay Safe
- Never click suspicious links — always hover to preview
- Don’t download attachments unless you expect them
- Check the sender email closely — one character off is enough
- Enable 2FA (Two-Factor Authentication) on all accounts
- If in doubt, contact the sender via known official channels
🔍 Other Forms of Phishing to Watch For
📱 SMS Phishing (Smishing)
- Short urgent messages with malicious links (e.g., “Your package is delayed — click here”).
- Often sent from random numbers or spoofed local numbers to seem familiar.
📞 Phone Call Phishing (Vishing)
- Caller impersonates CRA, a bank, or law enforcement agency.
- Threatens arrest, fine, or account closure if you don’t comply immediately.
- Caller ID spoofing makes the call appear legit.
📲 App or Social Media Phishing
- Fake login pages for Instagram, Facebook, PayPal, etc.
- Scam DMs promising cash prizes or urgent "security issues."
🔄 Business Email Compromise (BEC)
- Emails from fake “CEO” or “vendor” asking to change bank details or approve wire transfers.
- Often based on real names and context obtained from breached inboxes.
▶️ Play the Phishing Game