What are phishing scams?

Phishing scams: what are they?

Your inbox pings. It’s an urgent email from someone you trust, demanding immediate action. But before you hit 'send,' stop and think. Is it a legitimate request, or a carefully crafted phishing scam? A single click could compromise your entire business.

We explain what phishing scams are, the different types, and how to spot and prevent them – before it's too late.

What is phishing?

Phishing is when cybercriminals pretend to be trusted sources to steal sensitive info like passwords and financial details, or to get access to your company’s network. These scams come in a number of disguises – emails, texts, fake websites, but always with the same aim. To trick you into handing over something valuable.

What are phishing attacks?

Phishing scams can seriously harm a business. If they’re successful, they can lead to financial loss, damage your reputation, and put your security at risk.

Some common phishing scams examples include:

1. Email phishing – BEC attacks

Email phishing, especially BEC attacks – short for Business Email Compromise – is one of the most damaging types of phishing. Scammers pose as high-level people or trusted partners, tricking employees into transferring money or sharing sensitive data. BEC scams have cost businesses billions, and they’re getting more sophisticated every day.

2. Trap phishing

Trap phishing uses fake websites or portals that look like the real thing. Victims are led to these sites through phishing emails or pop-up ads, where they’re tricked into entering personal details like passwords or credit card information.

3. Spear phishing

Spear phishing takes it a step further by personalising the attack. Scammers often do their homework, researching their targets to craft highly relevant emails or messages, making them harder to spot. For example, it might mention a specific project or colleague, so it sounds real.

4. Angler phishing

Angler phishing preys on social media. Scammers create fake customer service accounts, posing as reps from well-known brands. When users contact them with complaints or questions, the cybercriminals swoop in, asking for personal information while pretending to resolve the issue.

5. Vishing (Voice phishing)

Vishing scams involve a phone call, where scammers pretend to be from a legitimate company or government agency. They usually try to scare people with threats or tempt people with rewards, pushing them to give up personal information.

6. Whaling

Whaling targets the big fish – the C-suite. These attacks are carefully designed to trick senior leaders into handing over sensitive information or approving large financial transactions. Given the level of authority involved, a successful whaling attack can have serious consequences.

How to identify and prevent phishing scams

So, how do you spot a phishing email or scam? It often comes down to a few key tell-tale signs. Here are a few things to look out for:

Small misspellings or extra characters can be giveaways, so always double-check the sender’s email address. Phishing scams also rely on creating a sense of urgency, pushing you to act fast without thinking, especially if sensitive information or money is involved. Be wary of unexpected attachments and always hover over links to check they match the sender’s claims. And remember, if an offer seems too good to be true, it probably is.

Phishing scams are constantly evolving, but by staying alert, learning to spot the red flags and taking proactive steps, you can protect your business from costly mistakes.

For personalised advice on how to protect yourself against phishing attacks, get in touch with our V-Hub advisers today.