What exactly is phishing?#
Phishing means tricking you into handing over sensitive information yourself. The attacker doesn't need to break a lock; they only need you to type a password, an SMS code, or a card number into a fake page. The message usually arrives by SMS, email, Telegram, WhatsApp, or a direct message, and its tone is built to create urgency and fear.
A familiar example#
A text arrives: "Your account will be suspended. Click the link below to verify your identity." The link looks like your bank's website, but the address is slightly different. The page even looks like the real login portal. If you enter your second password or SMS code right there, the attacker uses it that very moment.
Common warning signs#
- Manufactured urgency: "within the next hour", "your account will be closed".
- A strange or shortened address that doesn't match the service's official name.
- A request for a password, verification code, or card details where the real service would never ask.
- A prize, loan, or financial aid you weren't expecting.
How to protect yourself#
- Don't click links in messages; type the official address into your browser yourself or open the official app.
- Never read a one-time code out to anyone, even someone who says they work for your bank.
- Turn on two-factor authentication and use a different password for every site.
- If you gave information by mistake, change your password immediately and contact official support.
Phishing keeps getting smarter and can even use fake voice and video, so the simple rule is this: any message that rushes you should be treated as suspicious first.