Phishing Attacks: How Do Scammers Obtain Your Information?

Phishing is a method of deceiving people into revealing passwords, verification codes or financial information. A scammer may impersonate a bank, government organisation, delivery service or someone you know. The aim is to gain trust and persuade the user to take a dangerous action.

An attack often begins with an unexpected message: “your payment failed,” “your account will be blocked” or “enter your details to claim a prize.” The linked page may resemble a genuine website. However, the information entered is delivered to the scammer. Some messages instead ask users to open a file or install an application.

An attractive design and an official logo do not establish a page’s trustworthiness. Examine the website address carefully, but do not rely on appearance alone. A safer approach is to open the service’s official application or independently visit a website you already know, without using the suspicious message’s link.

Students and staff should also scrutinise messages about “scholarship confirmation,” “updating institutional email” or a “document from management.” Verify unexpected requests with the relevant department or sender through another channel. Do not send passwords or SMS codes to another person or install unfamiliar software. Keep phone and computer software updated.

If you opened a suspicious page, close it and do not follow further instructions. If you entered a password, change it using a trusted device and secure other accounts where it was reused. Enable two-step verification where available. If you ran a file or application, carry out a device security check.

If banking information or a payment code was exposed, contact your bank immediately. Preserve the message, page address and transaction records, and report resulting harm to the police. Notify the appropriate institutional contact if a work or study account is involved. Seeking assistance promptly instead of concealing a mistake can help limit further harm.