As the world becomes even more connected, it’s an unfortunate fact of life that scammers and cyber criminals have gone online, too. Which means it’s more important than ever to be aware of potential online scams and how to spot one. Read on to find out more about phishing scams and how you can keep your sensitive information safe from a phishing attempt.

What is a phishing scam?

Phishing scams are cyber attacks where scammers trick people into giving out their personal information, such as passwords, bank details or other sensitive information. There are a few different types of phishing attacks to look out for:

• Email phishing: fake emails from otherwise reputable companies, like PayPal or your bank
• SMS phishing: fraudulent text messages linking to a malicious website
• Spear phishing attack: a personalised attack on an individual or business
• Voice phishing: fraudsters impersonating an official over the phone, such as someone calling from your bank
• Clone phishing: this is where a real email has been duplicated, but the links have been swapped to fake ones

How to spot a phishing scam

Cyber criminals are getting more sophisticated, and it’s getting harder to recognise a phishing attempt. The general rule of thumb is if you’re unsure, reach out to the company directly – they’ll be able to confirm if it’s really them getting in touch. Scrutinise those credit card statements for anything that looks suspicious, and do remember it’s safer to use a credit card for online transactions – unlike a debit card, you’ll be insured should the worst happen.

Spotting email scams

It’s oh-so-easy to click into an email without thinking. If you’re unsure about the legitimacy of an email, hover over the sender’s name to check the address. If it looks like junk, that’s where it should end up. Keep an eye out for poor spelling and grammar, too. And be extra wary of any emails unexpectedly asking you for personal information.

How to avoid a phishing attack and stay safe from scammers

The internet has become our go-to place for everything from shopping to banking, streaming, and even meeting new people. But with all that convenience comes a downside – scammers are lurking around every virtual corner, ready to pounce on an unsuspecting click or an innocent response to a seemingly legitimate email.

Keeping one click ahead of cyber threats can feel like a battle. As our dependency on our digital world intensifies, and the dangers seem more prevalent – yet harder to detect – than ever, it can be a minefield to many. So, let’s look at some simple ways you can stay safe from common scams.

Keep your software updated

Start by not putting off your software security updates. Yep, that’s right, they’re actually there for good reason – and usually security-related. Cyber criminals love outdated software because it’s full of security weak spots. Whether it’s your phone, laptop, or even your browser, keeping everything up to date ensures you’ve got the latest security settings and fixes.

Turn on automatic updates for your operating system, apps, and antivirus software. That way, you’re always one step ahead of the scammers. And while we’re on the subject, make sure you’ve got decent antivirus protection. It doesn’t have to cost an arm and a leg – there are lots of free options that offer solid protection.

Verify the source

The golden rule of the internet is that if something sounds too good to be true, it probably is. That ‘you’ve won’ or ‘you’ve inherited’ email? Ignore it. The amazing offer that’s valid for the next 10 minutes? Let it expire. Scammers know how to press your buttons and will use urgency, excitement or fear to push you into acting without thinking.

You’ll often hear about phishing scams, where fraudsters send emails or texts pretending to be from your bank, HMRC or even Royal Mail. They want you to click a dodgy link, so they can steal your personal information or drain your bank account. The trick here is to always double-check. If your bank needs something urgent, it won’t be through a random email or text with a weird URL. Call them up, or log in directly through their app or website to confirm.

Speaking of URLs, get into the habit of looking for the tell-tale signs of safety. A padlock symbol and ‘https’ in the URL bar means the site is secure (but still not fool proof). Always pay attention to misspellings or strange web addresses, especially if you’ve been redirected there through an email.

The power of a strong password (and a password manager)

A good password isn’t your pet’s name (sorry Luna), your birthday, or anything that could be guessed from your social media profiles. Ideally, it’s a long, random string of characters that includes letters (upper and lowercase), numbers, and symbols. Think something impossible to remember off the top of your head and you’re bang on the money!

Don’t worry about remembering all those complex passwords for every site. That’s where a password manager comes in. This handy tool stores all your passwords securely and can even generate random passwords for you. So, you only need to remember one master password. Many password managers can also share passwords securely with family members, which can be useful for things like Netflix or Spotify accounts.

Multi-factor authentication: your new best friend

Passwords are great, but unfortunately they’re not always enough (how many of us are guilty of using the same password for multiple sites?) And even when you’re careful, data breaches happen, and scammers can access your private information.

This is where multi-factor authentication becomes helpful. It adds an extra layer of security by using not just your password but also a code sent to your phone or email, or sometimes biometric data like your fingerprint.

Setting up multi-factor authentication is pretty straightforward, and most major services (e.g. email and social media accounts, or banking and retailer apps) already offer it. If you haven’t set it up yet, now’s the time – it makes it much harder for cyber criminals to get into your accounts, even if they’ve somehow worked out your password.

Beware of social engineering

Social engineering is a fancy term for tricking people into giving up personal information. It’s less about tech and more about tricking you with clever tactics. Scammers might call you pretending to be from your bank, or they could send you a message on social media, claiming to be a friend in trouble. These schemes are common in the UK, especially with banking and government-related scams.

The truth is a legitimate company will never ask for sensitive information over the phone or by email. Always take a step back and think before responding. If someone says they’re in a crisis, verify it through another method, like calling them directly. And if you get an unexpected call from a bank or service provider, hang up and call them back using the official number on their website.

Public WiFi is great…for scammers

We’ve all done it – logged into a free public WiFi service at a café or in the airport. But public WiFi is a prime spot for hackers to get access to your data. That friendly-looking network could be set up by a scammer hoping to steal your details.

If you must use public WiFi, avoid doing anything sensitive like online banking or shopping. Alternatively, keep your financial information safe though using a Virtual Private Network (VPN) which adds a layer of encryption to your connection. 

Watch out for fake websites and e-commerce scams

Online shopping is part of daily life now, but unfortunately fake e-commerce sites are a common scam. You think you’re getting a bargain, but after you enter your payment details, the site vanishes, or you receive a poor-quality counterfeit product.

Before buying from a website you’ve never used, do a quick Google search. Look for reviews, make sure the company has a physical address, and check for a secure connection (remember the ‘https’ thing from earlier.) Avoid paying by bank transfer as credit cards or services like PayPal offer more protection if something goes wrong.

Reporting scams: it’s not just for you

If you fall for a scam or even just come across a suspicious site or message, report it. In the UK, Action Fraud is the go-to place for reporting an online scam. Not only does this help you, but it also helps others avoid falling into the same trap. And the more scams get reported, the harder it becomes for these cybercriminals to keep operating.

At the end of the day, staying safe online doesn’t have to be complicated. It’s all about staying alert, trusting your instincts, and following a few simple precautions. By being cautious and proactive, you’ll be miles ahead of the scammers, and you can enjoy the internet without constantly looking over your shoulder.

And finally, don’t forget that full-fibre broadband is automatically the more secure option for your home or business internet connection. It’s more difficult to intercept fibre-optic signals compared to those sent through copper cables, meaning your data is more secure and private than ever before. So, if you haven’t already, why not switch to our full-fibre broadband now?

Happy browsing!