In today’s digital age, staying safe online is crucial

What is Phishing?

Phishing is a form of cybercrime where scammers use email or text messages to trick you into giving them your personal and financial information. Phishing emails and texts often direct you to spoofed websites.

How to recognize phishing

The Federal Trade Commission (FTC), offers the following guidance on how to better recognize and avoid phishing.

Scammers use email or text messages to try to steal your passwords, account numbers, or Social Security numbers. If they get that information, they could get access to your email, bank, or other accounts. Or they could sell your information to other scammers. Scammers launch thousands of phishing attacks like these every day — and they’re often successful.

Scammers often update their tactics to keep up with the latest news or trends, but here are some common tactics used in phishing emails or text messages:

Phishing emails and text messages often tell a story to trick you into clicking on a link or opening an attachment. You might get an unexpected email or text message that looks like it’s from a company you know or trust, like a bank or a credit card or utility company. Or maybe it’s from an online payment website or app. The message could be from a scammer, who might

• say they’ve noticed some suspicious activity or log-in attempts — they haven’t
• claim there’s a problem with your account or your payment information — there isn’t
• say you need to confirm some personal or financial information — you don’t
• include an invoice you don’t recognize — it’s fake
• want you to click on a link to make a payment — but the link has malware
• say you’re eligible to register for a government refund — it’s a scam
• offer a coupon for free stuff — it’s not real

What are spoofed websites?

Spoofed or imposter websites are fake websites or domains designed to look legitimate. These sites look to trick users into giving away personal information (phishing). These scams can range from fake e-commerce sites to counterfeit account portals. Falling for a spoofed website can lead to identity theft and financial loss.

To make spoof websites appear legitimate, identity thieves will often use the names, logos, graphics, and branding of the real company’s website. Many times, scammers will slightly change the website address (URL) to trick you. Spoof web forms will often instruct you to enter personal information that a legitimate web form wouldn’t typically ask you for. Links in phishing emails will almost always take you to a spoof website.

How can you avoid fake websites?

Look before you click… To protect yourself from spoofed websites, here are a few things to watch out for:

URL errors and issues: Watch for slight misspellings, numbers replacing letters, or unusual subdomains and domain endings. Sometimes scammers hope you will confuse a subdomain with the real domain name of their website. For example, a scammer might use the domain name netflix.com.movies.com hoping you won’t notice the real domain name is actually movies.com.

Look for a secure website: Make sure the website uses HTTPS, indicated by a locked padlock symbol in the address bar.

Grammar and spelling mistakes: Legitimate sites usually avoid many errors. If you notice spelling errors, incorrect grammar, or formatting issues, there’s a good chance that it’s a fake site.

Malicious pop-ups: Scammers often create pop-ups on spoofed websites that download malware onto your device. Once installed, they can spy on you or scan your hard drive for personal information. Avoid clicking on any pop-ups and use an ad-blocker to help reduce your risk. You can also access a site directly using the proper web address rather than clicking on links.

Should you have any questions or concerns about this website or our online content, feel free to contact us directly at (800) 493-6226 or at contact@primefinancial.com.