What is Phishing?

Phishing is a common cyber scam where attackers pretend to be someone you trust like a bank, delivery company, colleague, or even your workplace – to trick you into giving away sensitive information or clicking dangerous links.

How Phishing Works?

Scammers usually send messages through:

  • Email,
  • SMS (text messages),
  • WhatsApp or social media, or
  • Fake websites.

These messages often look real but are designed to steal your information or infect your device with malicious software.

Here is a quick comparison of common phishing methods:

Method Description Communication Medium
Email Phishing Mass-distributed, generic attempt Email
Spear Phishing Targeted attack on a specific individual Email
Whaling Targeted attack on high-level executives Email
Smishing Phishing via text messages SMS (Text Message)
Vishing Phishing via voice communication Phone Call

 

What Are They After?

Phishing attackers want:

  • Usernames and passwords for online banking, email accounts, or corporate networks.
  • PINs or OTPs (One Time Passwords).
  • Bank account or credit card details.
  • Access to your email or work accounts for confidential company information, intellectual property, and client data.
  • Personal identifiable information (PII) which can be used to commit fraud in the victim’s name.

Once they get this, they can steal money or access systems.

Why Phishing Is Dangerous

It is the most effective and persistent cyber threat as it exploits human psychology rather than technical vulnerabilities. And:

  • One click can compromise your account.
  • It can lead to identity theft or financial loss.
  • It is constantly evolving as bad actors continually refine their tactics, making phishing emails and websites more convincing.
  • Phishing is often the first step in bigger attacks like ransomware.

Remember!

To protect yourself and your information, always be vigilant. If a message creates panic, urgency, or pressure, stop and think. Real organizations do not ask for passwords or OTPs by email or message.