CCAC ITS Website
ITS Talkin' Tech

Avoid Being hooked by a Phishing Scam!

Want to print this page?  Click here to download the pdf document

Click on any word in red to see more information on that topic!

 

"Your account will be suspended," "Update your Account," "Unauthorized Account Access" and "Warning Message" are some of the alarming subject headers that may greet you when you open your email.  Emails with these subjects are generally not legitimate, but are phishing scams.  In 2004, phishing scams cost the American public nearly one billion dollars; however, you can avoid being hooked by a phishing scam with the best known defense, education.

 

New: Take the McAfee quiz online: Can you spot a Phishing Scam?

 

What is a phishing scam?  
 
  A phishing scam is an email sent to a user falsely claiming to be a legitimate establishment in order to scam the user to surrender their private information.  The email directs the user to a website to enter personal information, such as passwords, social security or bank numbers, and/or credit card information. Please keep in mind a real organization, such as your bank, will not need to solicit this information.  Once you have entered information and clicked Continue or Submit, the information is obtained by the scammer.  The scammer may then use your personal information and commit acts of identity theft.  
How to spot a phishing scam?  
 
  To the uneducated eye, a phishing scam is often difficult to spot.  A phishing email attempts to convince recipients that the email is real by including trade names, logos, copyrights and registered symbols.
 

Here are some things to look for and consider:

·         Do you have an account with the organization?  If not, delete the email.

·         Is the email addressed to you specifically or to a valued customer?  If the email does not specifically address your account, it probably is a phishing scam.

·         Does the email threaten action unless you respond or take action? If yes, then it is probably a phishing scam. Delete the email.

·         Are there any spelling errors?  If yes, delete the email.

   

If you do click on the link in the email, there are further clues that this is a phishing scam.

  • Look at the address bar.  Is this the company's website address?  Also, look to see if https:// is the address line. If not, this is probably a phishing scam.

  • Is there a in the lower right corner of the webpage? If not, this is a phishing scam.

  • Is the webpage asking you for personal information that the company should already have?  If yes, delete the email.

  • Go to the website instead of clicking on the link in the email.  If the company has any important information, it will be posted on the website.

  I received a phishing scam email.  Now what!  
  If you were able to identify an email as a phishing scam, don't click on the link or respond to the email.  Please forward the email to spam@uce.gov  (Federal Trade Commission's email address) and to the company, bank or organization being impersonated.  After forwarding the email, please permanently delete the item by pressing the shift and delete keys.  Do not forward the email to other computer users.

If you believe you have been scammed, file a complaint with the Federal Trade Commission Identity Theft website located at www.consumer.gov/idtheft  Also, make sure that you continue to look at your credit report and credit card statements for any fraudulent transactions.

 
  Links with more information about scams:  
 

Security and your PC

Help prevent identity theft from phishing scams

Hook, Line, and Sinker: Phishing Attacks Going Professional

Is someone Phishing Your Information?

Special Report On "Phishing"

Quiz: Can you spot a Phishing Scam?

 
 

To suggest future Talkin' Tech Pages, email us.

   


See our full listing of Talkin' Tech topics


Back to

CCAC HOME

Back to Information Technology Services Web Pages