Phishing is when someone pretends to be a trusted company or person to trick you into giving up information or money. The word is a play on “fishing”. The message is the bait.
The main types
Phishing (email)
A message that looks like it comes from your bank, a delivery company or an online service. It contains a link or attachment and urges you to act.
Smishing (SMS and messaging apps)
The same trick by text, WhatsApp or other chat apps. Fake delivery notices and toll messages are classic examples.
Vishing (voice)
Phone calls from someone claiming to be your bank, tax authority or tech support. Scammers may spoof the caller ID and speak with confidence.
Quishing (QR codes)
A QR code that leads to a fake page. Often placed as stickers on parking meters or inside emails.
Spear phishing
A targeted message that uses details about you or your employer, such as your name, boss or recent purchase.
Clone phishing
A copy of a real message you already received, with the link or attachment swapped for a malicious one.
What they want
- Passwords and one-time codes
- Card numbers and bank details
- Personal data for identity theft
- Money sent directly, often by gift card, wire or crypto
- Installation of malware
Common tactics
- Urgency: “within 24 hours”
- Fear: “your account is locked”
- Greed: “you have won”
- Authority: a bank, a government agency, your boss
The one habit that defeats most phishing
Do not use the link or number in the message. Go to the real website or app yourself, or call the number printed on your card or on the company’s official site. This single habit stops the majority of attacks.
Other good habits
- Use unique passwords and a password manager.
- Turn on two-factor authentication, ideally with an app rather than SMS.
- Keep your phone and apps updated.
- Scan unfamiliar links before you tap them.
Check a link in seconds
LinkGuard follows redirects, checks live threat databases and runs 15 security checks, so you can test a suspicious link without opening it.