Readers will learn how to identify malicious messages, avoid clicking dangerous links, and properly report phishing attempts using steps provided by CISA.
What it does
Phishing occurs when criminals try to get us to open harmful links, emails or attachments that could request our personal information or infect our devices. These messages usually come in the form of an email, text, direct message on social media or phone call.
Before you start
CISA notes that you should watch out for messages designed to look like they come from a trusted person or organization in order to trick you into responding.
Steps
Step 1: CISA recommends looking for common signs of phishing, such as urgent or emotionally appealing language, requests to send personal and financial information, untrusted shortened URLs, and incorrect email addresses or links.
Step 2: CISA advises that if you suspect phishing, you should resist the temptation to click on links or attachments. Instead, report the phish near the person’s email address or username, or via the report spam button in the toolbar or settings.
Step 3: CISA instructs users to delete the message without replying or clicking on any attachment or link, including any unsubscribe link.
What the agency says
CISA states that if a message looks suspicious, it is probably phishing. If you think it could be real, CISA advises looking up another way to contact the company or person directly by searching for the site in your web browser or using another known way to reach them.
What to do
- Look for urgent language, requests for personal and financial information, untrusted shortened URLs, and incorrect email addresses or links.
- Resist clicking suspicious links or attachments and report the phish using the report spam button or options near the email address.
- Delete the suspicious message without replying or clicking any links, attachments, or unsubscribe links.
Key facts and where they come from
- CISA explains phishing messages often look like they come from a trusted person or organization.
These messages are often designed to look like they come from a trusted person or organization, to get us to respond.
- CISA lists urgent language as a common warning sign of phishing.
Urgent or emotionally appealing language, especially messages that claim dire consequences for not responding immediately
- CISA states users can report phishing via a toolbar option.
You can also report via the “report spam” button in the toolbar or settings.