What is phishing?
Phishing is a form of deception in which someone pretends to be a trusted person or organization to obtain information, money or access to an account. It can happen through email, text messages, social media, websites or phone calls. The message may look professional and use familiar names or logos.
Recognize common warning signs
Look for unexpected requests, urgent deadlines, threats, unusual payment instructions, suspicious attachments and links that do not match the claimed organization. Be especially cautious when someone asks for a password, payment information or a one-time verification code. Poor spelling can be a warning sign, but well-written messages can also be fraudulent.
Check before responding
Do not rely on the sender's display name or the appearance of a message. Check the complete sender address and website domain where possible. Do not open unexpected attachments or sign in through links in suspicious messages. Instead, open the organization's official app or enter its known website address yourself.
If you receive a suspicious message
Avoid replying, clicking links or sharing information. Use the service's reporting feature when available, then delete or ignore the message. If it claims to come from someone you know, contact that person through a separate, trusted method.
If you have already responded
Change the affected password through the official service, preferably from a trusted device. Sign out of other sessions and enable additional account protection. If you shared financial details or sent money, contact your bank or payment provider promptly. If you installed an unexpected app or file, seek help from a trusted technical support source.