Phishing Awareness: How to Recognize and Avoid Scams

🎣 What is Phishing?

Phishing involves tricking a user into believing that a communication is from a trusted source—like a bank, employer, or popular online service—when it’s actually a fraudulent attempt to collect data or install malware.

📬 Common Phishing Techniques

1. Email Spoofing
   Attackers disguise an email to look like it’s from a legitimate company. The email might contain a link to a fake website that looks real but is designed to steal login credentials.

2. Spear Phishing
   A more targeted attack. These emails are customized to a specific person or organization, often using personal details to seem credible.

3. Smishing and Vishing
   Phishing through SMS (smishing) or voice calls (vishing), where attackers pretend to be from institutions like banks or tax agencies.

4. Business Email Compromise (BEC)
   Hackers impersonate high-level executives or business partners to trick employees into transferring funds or confidential data.

🔍 How to Spot a Phishing Attempt

• Check the sender’s email address: The actual address may be suspicious, even if the name looks right.

• Look for grammar and spelling mistakes: Many phishing emails are poorly written.

• Hover over links: See where they lead before clicking.

• Urgent or threatening language: Be cautious of messages that pressure you to act quickly.

• Unexpected attachments: These can carry malware.

🛡️ How to Protect Yourself

• Enable multi-factor authentication (MFA) wherever possible.

• Use security software and keep it updated.

• Verify requests by contacting the sender through official channels.

• Educate yourself and others about phishing tactics.

• Report phishing emails to your IT department or relevant authority.

🚨 What to Do If You Fall for a Phishing Scam

1. Change your passwords immediately.

2. Contact your bank or service provider to secure your accounts.

3. Run a full security scan on your device.

4. Report the incident to your company’s IT team or local cybercrime unit through the following hotlines:

   • Hotline of the Department of Cyber ​​Security and High-Tech Crime Prevention: 069.219.4053

   • People in Ho Chi Minh City can call the hotline 08.3864.0508 to report information about property appropriation and online fraud.

Being vigilant and informed is your best defense against phishing. With growing digital threats, cyber-awareness isn’t optional—it’s essential.