Almost everyone with a phone has received a message that looked a little off: a prize you never entered, a warning that your account will be closed, or a payment request from a number you do not know. These are phishing attempts. The sender wants you to hand over a password, a PIN or a one-time code, or to send money before you have time to think. This guide explains how to recognise them and what to do if one gets through.
What phishing actually is
Phishing means pretending to be a trusted person or company in order to trick you into giving up something valuable. It arrives by SMS, email, social media messages, phone calls and even WhatsApp. The message is usually built around urgency or reward, because people make mistakes when they feel rushed or excited.
Seven warning signs
- Pressure to act now. Phrases such as ‘your account will be blocked in one hour’ are designed to stop you thinking.
- A request for a PIN, password or OTP. A real bank or wallet provider will never ask you to read out your PIN or a one-time code, not even to their own staff.
- A link that does not match the company. Look closely at the address. Scammers use look-alike names with extra words, swapped letters or strange endings.
- A prize or refund you did not expect. If you did not enter a draw, you cannot have won it.
- An unknown sender asking for money. Be careful with messages that say you received money by mistake and ask you to send it back. Check your real balance in the official app, not through the message.
- Poor spelling or odd formatting. Not every scam has mistakes, but many do.
- A request to install an app. Never install an app from a link sent in a message. Use only the official app store.
The fake ‘send money back’ trick
One common pattern in online selling works like this. A buyer says they have paid, sends a screenshot or a message that looks like a payment confirmation, and asks you to dispatch the order. Sometimes they claim they sent too much and ask for a refund. Always confirm the payment inside your own wallet or bank app before sending goods or refunds. A screenshot proves nothing, because screenshots are easy to fake.
How to check a message safely
- Do not tap the link. Close the message.
- Open the official app or type the official website address yourself.
- Look for the same notice there. If it is real, it will also appear in your account.
- If you are still unsure, call the company using the number printed on your card, your bill or their official website, not the number in the message.
If you already clicked or shared information
Act quickly. Speed matters more than embarrassment.
- Change the password of the affected account, and of any other account where you used the same password.
- If you shared a PIN or code for a wallet or bank account, contact the provider straight away using their official helpline and ask them to secure the account.
- Turn on two-factor authentication if it is not already active.
- Check recent transactions and report anything you do not recognise.
- If you installed an unknown app, remove it and run a security scan with your phone’s built-in protection.
Habits that protect you
Use a different password for every important account and keep them in a password manager. Keep your phone’s system and apps updated. Be careful on public Wi-Fi when logging in to financial accounts. Finally, talk to family members, especially older relatives, about these tricks. Scammers often target people who are less familiar with technology.
Key takeaway
No genuine company needs your PIN or one-time code, and no real prize requires you to pay first. When a message makes you feel rushed, stop, close it, and check through the official app or website. Taking one minute to verify can save you a great deal of money and trouble.
