Phishing is a type of scam where criminals pretend to be trusted organisations or people to trick you into revealing passwords, financial information or installing malware. Phishing can arrive by email, SMS, WhatsApp, social media messages or phone calls. Knowing the warning signs helps you stay safe.
Common Types of Phishing
| — | — |
|---|---|
| SMS phishing (smishing) | “Your account will be blocked, click here” |
| Voice phishing (vishing) | Calls pretending to be bank or tech support |
Warning Signs
- Urgent or threatening language (“Act now or your account will be closed”)
- Requests for passwords, OTPs, PINs or card details
- Sender address that does not match the official domain
- Spelling and grammar mistakes
- Unexpected attachments or links
- Offers that seem too good to be true
- Requests to pay via unusual methods
- Links that show different URLs when you hover over them
How to Check a Suspicious Message
- Do not click links or open attachments
- Check the sender’s full email address or phone number
- Hover over links (on computers) to see the real destination
- Contact the organisation directly using official contact details from their website
- Ask a colleague or IT team if at work
What Legitimate Organisations Usually Do Not Do
| — | — |
|---|
What to Do If You Clicked a Phishing Link
- Disconnect from the suspicious page immediately
- Change your password from the official website, especially if reused
- Enable two-factor authentication
- Contact your bank immediately if financial details were shared
- Scan your device for malware
- Monitor accounts for unusual activity
- Report the incident to the relevant platform or authorities
Reporting Phishing
Use “Report phishing” options in email services, report spam messages in messaging apps and use official cybercrime reporting channels in your country. In India, the national cybercrime reporting portal and helpline can be used for fraud reports.
Protect Yourself
- Use two-factor authentication
- Keep software and browsers updated
- Use a password manager, which will not autofill on fake domains
- Be cautious with public Wi-Fi
- Educate family members, especially older relatives
Frequently Asked Questions
Can phishing happen on WhatsApp?
Yes, through fake offers, job scams and impersonation.
Is it safe to open a phishing email?
Opening is usually low risk; clicking links or downloading attachments is dangerous.
Should I reply to scammers?
No. Report and delete.
How do scammers get my number?
Through data leaks, public listings or random targeting.
Conclusion
Phishing relies on urgency and trust. Pause before acting, verify through official channels, never share OTPs or passwords and report suspicious messages. A few careful habits protect your money and accounts.
