How to Avoid
Financial Phishing...
According to
Wikipedia, Phishing is defined as "is a
criminal activity using social engineering techniques. Phishers attempt
to fraudulently acquire sensitive information, such as passwords and
credit card details, by masquerading as a trustworthy person or business
in an electronic communication. Phishing is typically carried out using
email or an instant message, although phone contact has been used as
well. Attempts to deal with the growing number of reported phishing
incidents include legislation, user training, and technical measures."
Always be careful
and aware when you’re online -
Without the ability to con an
individual, technology itself will now be able to successfully scam
money out of a persons bank account or credit card. Though there is some
technical vulnerability which may aid the con process, it is nearly
always down to the vigilance and care of the individual to prevent a
con.
Be careful where you use your
e-mail address online - One way to avoid financial phishing is to
keep your e-mail address private, and not to use it too frequently
online. By limiting where you use your e-mail address when registering
for different websites etc. you can keep limited the chances of your
address being used by scam artists who might get their hands on your
address. It may be an idea if you do register frequently for different
sites to have a special e-mail address for that purpose, and therefore
limit the exposure of your "proper" e-mail address to scammers.
Don’t get upset or
worried about the tone of an e-mail -
If you receive
what looks like a threatening e-mail from your bank, you don’t have to
react immediately – when have you ever known a financial institution to
react instantaneously? Wouldn’t you expect to receive a letter through
the post? Didn’t you receive your online banking credentials through the
post originally? If there are any problems, won’t you receive them in
the same way next time around? Scam artists depend on getting people
upset so they won’t think things through logically in the home that they
will react instantaneously. Don’t fall into this trap – think things
through.
Don’t give out
information that your bank should already have -
Phishers will
ask for sensitive information that the real company would already have,
such as usernames, passwords, credit card numbers, and so on. Your real
financial institution will most likely have your real name. Never fill
out forms in e-mail that ask for personal information. Give sensitive
info only over a secure Web site or by telephone.
Never use an
e-mail link to access financial websites -
Access the site
directly by typing the address into the address bar or use your
bookmarks. Scam artists can make links look realistic but which will
still take you to a false website. Phishers can make e-mail links do any
of the following nasty tricks: Take you to the legit site but sneak in a
pop-up window from a phisher's site that asks for personal info. Or they
can direct you to a site that is very similar to the real site where
it’s hard to tell the difference.
Look out for
errors or mistakes -
Is your name spelt correctly? Or is
it in an unusual format? Phisher e-mail is generally not personalized,
or if it is, contains only the same name you use in your e-mail address.
Check the grammar and spellings in the text of the e-mail. Check the
name of the financial institution in the e-mail – is it exactly the name
of the institution as you normally recognise it?
Always ensure that
any site you access is properly secure -
Usually, you can
tell if you're on a secure server if the URL begins with https: instead
of http: and if you see the security symbol locked in your browser. But
phishers can get legitimate-looking certificates and fool people, as
happened recently to a credit union in Utah. If you get a warning about
a site's security certificate, read it. If the certificate isn't valid,
don't go there. Don't rely entirely on the fact that a URL begins with
https:.
Check
your accounts balances regularly -
Don't
go more than a month without logging in to an online account to check
activity. Pay attention if the account tells you when the last time you
logged in was. Is that when you really did last log in? The more you
check the better. Check your statements from financial institutions,
too. If you ever see suspicious activity, contact your bank and card
issuers immediately.
Keep
your software updated and secure -
Keep
your browsers and operating system up-to-date with the latest security
patches. Windows XP can automatically patch your system, if you set it.
If you use Internet Explorer, you should download this patch immediately
if you haven't already. Use antivirus and anti-spyware apps and
firewalls and keep them current. Check out the use of personal firewalls
as an extra level of security on your machine.
Make sure you use the security features
in your software -
Tools such as
pop-up blockers can be useful in protecting yourself from scams. While
sometimes you may think that you’re accessing a site where it’s okay to
allow pop-ups, you should make sure that it’s always active.
Don’t respond to
phishing e-mails -
By responding to such e-mails, you’re
letting the scammers know that your e-mail address is active and valid.
This will then open you up to a barrage of further e-mails attempting to
con you.
Reassure yourself
that you’ve identified a scam e-mail -
Search the web for the text of the
e-mail that you’ve just received – chances are that if it’s dodgy, other
people will have reported it, or highlighted it elsewhere online as
well.
Block future
e-mails from this source -
Once you’ve satisfied yourself that you’ve received a phishing e-mail,
use the blocking feature in your e-mail application to block any further
e-mails from that address. They’ll in future be blocked from your inbox,
and won’t cause you any bother in the future.
Use your common
sense -
Are you expecting an e-mail
communication from your bank? Have you even allowed them to use e-mail
as a means of communicating with you? When was the last time you
accessed your online accounts – were there any problems or issues then?
Have you received multiple e-mails all at the same time telling you the
same thing – this is a common tactic of some phishing scams.
If in doubt, do
nothing -
You can always ring up your banks
telephone banking service and see if the e-mails you’re receiving are
legitimate.
Please read our Legal Disclaimer by
clicking here.