How to Identify a Phishing Attack
By Hannah Harvey. If you've ever typed your details into a fraudulent website or absent-mindedly fired off a text containing your account number in response to a message from your “bank”, you'll understand the sinking feeling of realisation that comes after you've been phished. You'll also know only too well that this sinking feeling rapidly turns to panic and fury as you scrabble to notify your real bank, change passwords and generally conduct essential damage limitation.
There are increasing numbers of internet fraudsters out there and, over time, phishing techniques have evolved, becoming increasingly sophisticated and convincing. Today the most successful phishing scams pose as existing companies to con the original business's customers out of their details and are visually almost indistinguishable from the companies they are trying to emulate. A good example of this type of con is the case of Wonga SA, who were forced to take out adverts in newspapers to inform customers about phishing scamsters who were posing as the short term lender to steal customers' crucial details. This was addressed pro-actively on the brand’s website with the creation of a specific fraud hotline (more information here) to help protect customers. However the case with Wonga is only one of many, many examples all over the world. With brands as big as Netflix and Paypal reporting similar issues.
Clearly, it's not easy to be vigilant all the time, but you can be informed. Here are a few clear indications that the email or text you've received is a scam.
How to spot a phishing email
- The URL doesn't match the “business”
If the web address you're asked to click through to from the email doesn't match the “company's” real web address – it's likely you're about to be phished. - The URL has a “weird” structure
Even if the business name is in the URL, the email could still be a scam. If there are lots of distinct sections in the web address, it may well be a phishing scam. Look out for addresses similar to: www.microsoft.examplehoaxwebsite.com - The email features bad spelling & grammar
Spelling mistakes, typos and dodgy grammar are a strong indicator that an email didn't come from a legitimate business. - The email asks for personal information
No reputable company will send you a request for information – no matter how official the email looks. If you're uncertain, get in touch with the company directly and call an official helpline to confirm their request.
How to spot a phishing text (SMSishing)
- The text comes from a “5000” number or similar
Some legitimate companies use such numbers too, but many SMSishers will conceal their phone number by using email-to-text services which appear in this type of format. - The text includes a link
Again, some legitimate companies will use links in SMSs, but if you don't recognise the source or there are any other warning signs, never open a link in a text. - The text asked for personal details
It is extremely unlikely that any business you have dealings with will contact you for information this way – again, call the company directly to confirm and do not respond to the text.
The message urges you to act quickly
Scamsters want to put you on the back foot so that you act before you've had time to think. A message which asks you to act quickly will often be a dupe.
Hannah Harvey works with Wonga.com, an outfit that seeks to transform South Africa's credit market by offering small, short term loans online with more speed, convenience and flexibility than banks, traditional lenders and other websites.
About Wonga
Wonga was founded in London by two South Africans who wanted to the turn the credit market upside down. They spent three years perfecting the service in the UK, building it into one of the most innovative credit businesses around. Now they feel it is good enough to help customers in other regions, so it is only natural for them to want to bring it home to Mzansi. It is Wonga’s mission to solve people's short term and urgent cash flow problems with an equally short term and responsible solution.
