{"id":4303,"date":"2022-08-28T10:39:19","date_gmt":"2022-08-28T08:39:19","guid":{"rendered":"https:\/\/hetzner.co.za\/insights\/?p=4303"},"modified":"2024-03-19T13:49:42","modified_gmt":"2024-03-19T11:49:42","slug":"what-you-need-to-know-about-phishing-scams","status":"publish","type":"post","link":"https:\/\/xneelo.co.za\/insights\/what-you-need-to-know-about-phishing-scams\/","title":{"rendered":"What you need to know about phishing scams"},"content":{"rendered":"\n

We\u2019ve all received the classic email from a foreign investor promising to transfer millions of dollars into our bank account if we just provide a few sensitive details. You probably didn\u2019t fall for that. But these fraudulent attempts to obtain sensitive information \u2013 known as <\/span>phishing scams<\/span><\/a> \u2013 are getting more sophisticated. Even here at <\/span>xneelo<\/span><\/a>, we\u2019ve seen a few scammers attempting to replicate our invoices.<\/span><\/p>\n\n\n\n

Let\u2019s unpack the purpose of phishing, how to identify potential phishing scams and \u2013 most importantly \u2013 how to prevent getting scammed.<\/span><\/p>\n\n\n\n

The purpose of phishing<\/span><\/h2>\n\n\n\n

The goal with phishing scams is simple: to gain access to your personal details. This includes email addresses as well as banking or login details. Phishing scams want to steal your access details because of what those access details unlock. For example, if it\u2019s mailbox details then the purpose may be fraud, sending spam or stealing personal information. Banking details will almost always be used to steal money, while login details for e-commerce sites or credit card details could be used to make fraudulent purchases.<\/span><\/p>\n\n\n\n

There are a few tell-tale signs of a phishing scam. Once you understand the methods used, you\u2019ll be able to guard against them.<\/span><\/p>\n\n\n\n

How to identify potential phishing scams<\/span><\/h2>\n\n\n\n

No matter how high-tech the phishing scam, it essentially works like an old-fashioned con job: someone has to convince you that they\u2019re reliable before they try to steal from you.<\/span><\/p>\n\n\n\n

This is most often done through fake emails that look like they come from a trusted source. The email will ask \u2013 with some urgency \u2013 for you to click on a link to a spoofed website. The website will be convincingly designed to look legitimate and from a service provider you\u2019re most likely to use, and ask for sensitive user information. Once the information is obtained, it can be used for identity theft, financial theft or fraud.<\/span><\/p>\n\n\n\n

So how do you identify which emails are legitimate and which are phishing scams?<\/span><\/p>\n\n\n\n

4 golden rules for identifying phishing scams<\/span><\/h2>\n\n\n\n
    \n
  1. Don\u2019t trust the logo or email address
    It\u2019s easy enough for phishers to copy a real company logo, and even fake the \u201cFrom:\u201d email address to look like it comes from a trusted source. Don\u2019t trust the display name, as those are easily changed to mask the real email address.<\/span><\/li>\n\n\n\n
  2. Be suspicious of urgent requests
    If there\u2019s one thing to take away from this article, it should be this: a trusted company will never ask you to change your password via a link in an email. Phishers can use these links to obscure the actual URL, which takes you to a fake account. Nor would they randomly suspend your account and ask you to log in via a link to fix the situation, or risk your account being closed. A trusted company will give you the full URL in the text, not a link. The safest thing to do is type out the URL in your browser, rather than clicking on it.<\/span><\/li>\n\n\n\n
  3. Check for typos or spelling mistakes
    Reputable companies have copywriters to check their emails, so if you\u2019re noticing bad grammar and typos, be on the alert. Similarly, check the URL of the company for misspellings or strange versions of the URL (<\/span>    www.xneeloZA.com<\/span><\/a> instead of <\/span>www.xneelo.co.za<\/span><\/a>, for example). If in doubt, copy-paste the URL directly into your browser.<\/span><\/li>\n\n\n\n
  4. Don\u2019t open unexpected attachments
    A common phishing tactic is spreading <\/span>    viruses<\/span><\/a> and malware through attachments, which can damage files or steal passwords from your computer. If you get an email containing an unexpected attachment, double check the sender\u2019s email address before clicking on the attachment.<\/span><\/li>\n<\/ol>\n\n\n\n

    Example of a phishing email impersonating a brand:<\/span><\/p>\n\n\n\n

    \"\"<\/figure>\n\n\n\n

    Simple ways to prevent being scammed<\/span><\/h2>\n\n\n\n

    The best defence is to identify potential phishing scams, as outlined above. Here are a few additional steps to protect you:<\/span><\/p>\n\n\n\n