Phishing & Vishing

What is Phishing?

Phishing is a scam where criminals trick you into giving out your personal information (like your bank account details, PIN, or password) by pretending to be someone you trust, like your bank.

How Phishing Works:

  • Fake Emails or Websites: A scammer sends you an email that looks like it comes from your bank. They might ask you to click a link that takes you to a fake website that looks just like your bank’s website.
  • Fake Urgency: The email might say something like “Your account is locked, click here to unlock it.” This is to make you panic and take action quickly.

Red Flags of Phishing:

  • The email or message asks you for personal details, like your account number, password, or PIN.
  • The email address doesn’t match the official bank address.
  • The email has spelling mistakes or doesn’t seem professional.
  • The website link looks suspicious (like strange or extra words in the web address).

What is Vishing?

Vishing (Voice Phishing) is when scammers call you, pretending to be from your bank, and ask for your personal information like passwords or account numbers.

How Vishing Works:

  • Fake Phone Calls: The scammer calls you, saying they are from your bank’s fraud department and that they need your account details to “verify” something.
  • Caller ID Spoofing: The scammer can make the caller ID show your bank’s number, so it looks like an official call.

Red Flags of Vishing:

  • You get an unexpected call asking for your personal details.
  • They ask for your PIN, password, or credit card number over the phone.
  • They pressure you to act quickly or threaten that something bad will happen if you don’t respond.
  • The caller doesn’t know much about your account or gives unclear answers when you ask questions.

How to Prevent Phishing and Vishing Scams:

1. Be Careful with Emails and Links:

  • Always double-check the email address or phone number. If something seems off, don’t click on links or open attachments.
  • If you get an email asking for sensitive info, don’t reply directly. Go to your bank’s official website or call them using the number on your bank statement to check if the request is real.

2. Never Share Personal Information Over the Phone:

  • Banks will never ask for your password or PIN over the phone. If someone asks, hang up and call your bank’s official number.
  • If the call seems suspicious, don’t give any information. You can call your bank back to check if the call was legitimate.

3. Use Strong Passwords and Two-Factor Authentication (2FA):

  • Always use strong, unique passwords for your online banking.
  • Turn on two-factor authentication (2FA), which adds an extra layer of security by requiring you to verify your identity through something else (like a code sent to your phone) when you log in.

4. Monitor Your Accounts Regularly:

  • Regularly check your bank statements and online banking account for any unusual activity.
  • Set up alerts with your bank to get notified of any transactions or changes in your account.

What Banks Can Do to Prevent Phishing and Vishing:

  • Customer Awareness: Banks should teach customers how to spot phishing and vishing scams through emails, websites, and phone calls.
  • Email Protection: Banks can use special tools to protect emails and stop fake ones from reaching customers.
  • Call Verification: Banks should encourage customers to verify any suspicious phone calls by calling back on the official bank number.

Key Tips to Stay Safe:

Monitor your bank accounts regularly for any unauthorized transactions.

Don’t click on strange links in emails or text messages.

Don’t share personal information over the phone unless you are sure the call is from your bank.

Always double-check if you’re unsure whether an email or phone call is real.