Phishing - What's It All About?
Don't get caught out by emails and websites set up by criminals posing as your bank or building society
Stories on phishing scams have been doing the rounds in the news media for months now, but they still keep producing headlines. But while phishing emails and websites are on the rise, it is straightforward to avoid them.
What is Phishing?
'Phishing' is the term that's given to fraudulent emails and websites that are created by criminals in an attempt to get you to reveal personal details about yourself, usually your bank account information. It's not only banks that criminals masquerade as, either; any institutions involved with money, including shops and subscription services, can be copied, too. They mimic the legitimate websites and communiqués that an institution, such as your bank, would create, except that the data that you enter is sent to the criminal.
When it arrives in your inbox, a phishing email will have one aim in mind: to get you to divulge your bank or credit card details. This is usually as part of a so-called security check or review of your account details, where the sender will act as though you're simply confirming what they already know. You'll be asked to provide your details in one of two ways: either by including them in a reply to the email or by clicking on a link in the email that takes you to a website that's been made to look like that of the institution in question. Here you'll be asked to log in or simply enter your details in a form on the page, at which point your account details are saved and the criminals have all they need to pose as you at the real website of your bank and transfer your money out.
Phishing is prevalent because it's a low-cost, low-effort activity on the part of its perpetrators. Some criminals are so lazy that they don't even bother making their emails look all that authentic, with poor-quality graphics and no attempt made to look like the bank they're posing as.