Phishing is when fraudsters try to gain access to your confidential information such as bank details, credit card information, or passwords. If you have ever received an email with an urgent message containing a link asking you to sign into one of your accounts, reset a password, or telling you that you have won a prize in a random competition then you have been a target of phishing. It often capitalises on a sense of urgency that might cause people to take actions they might not otherwise take. For  example, during the Covid19 emergency there was an increase in phishing attacks to try and trick users into revealing personal details by posing as organisations such as the World Health Organisation, in an attempt to donate money or download software.

In the past it was easier to spot a phishing email or message because it was badly written or contained information that was unconnected to your life, but phishing messages have evolved to appear far more legitimate – making it difficult to distinguish between what is malicious communication and what is genuine.

Phishing emails are often disguised to look like they come from an organisation or person that you know, such as a bank (fake requests to update information) or service provider (fake requests to change passwords).

Messages usually include a link or an attachment. By clicking on these links you may be taken to a fake form or website, where you are asked to provide or to confirm your personal details. The sender may use different reasons for why this information is needed, for example asking you to reset a password, because an account is expiring, or to claim money. Opening attachments or links can also download malicious software or viruses, causing harm to your computer and potentially allowing your data to be stolen.