Phishing : Examples and its Prevention Methods

Phishing is an online identity theft scam that attempts to get hold of sensitive information such as passwords, usernames, social security numbers, and other personal information by posing as a credible/trustworthy entity in electronic communication. The attacker then uses the information gained from phishing in whatever fraudulent manner they please . The masquerades used to lure the unsuspecting usually take form of popular social websites, auction sites, online banks, online payment processors or IT Administrators. Phishing is usually carried out through email or instant messaging and often directs victims to websites that look and feel authentic where they'll be asked to key in their details. Below are several examples of phishing emails.

1. SunTrust


This phishing scam is directed to SunTrust Bank customers. This email warns that the customer's account would be suspended should they fail to comply with the instructions and even uses the company logo to increse the emails credibility.

2. eBay


Similar to SunTrust, this phishing email uses the eBay logo to achieve credibility. This email warns of a billing error and urges users to login and verify their charges.

3. PayPal


Another phishing email directed to PayPal users that users that warns of several unauthorized attempts to enter the user's account and urges them to reconfirm their account detail or risk account closure.

There are several prevention methods to avoid falling victim to this scam:

1. Avoid filling forms in email messages. Reason being, your information's destination cannot be confirmed and may possibly end up in the scammer's hands.

2. Verify legitimacy of the company before acting. Give the company a call to confirm the email's authenticity. Reputable companies do not contact their customers via email to request to update or verify an account.

3. Technological support. There are various anti-phishing measures that have been implemented as features in browsers or as part of a website login procedures. These anti-phishing measures include helping to identify legitimate websites, alerts users to fraudulent websites, augmenting password logins and eliminating phishing mail.