Phishing bait alert concept on a smartphone

Receiving annoying emails or text messages from unknown senders? They may seem harmless, but they can be a scam method cybercriminals use, known as phishing.

Phishing is a common but dangerous form of cybercrime that’s on the rise, with an estimated 3.4 billion phishing emails being sent on a daily basis trying to trick victims into sending personal information, banking details and more.

While some of these scam messages can be easy to spot, it’s getting harder to know the difference between what is a legitimate text message, email or social media post and what is a scam. Hackers are relying on mimicking popular brands and AI to quickly generate mass amounts of messages at scale, meaning one could slip through the cracks.

However, there are several ways to stop phishing attacks and to protect your private data from being stolen.

This guide will help explain what is phishing and how you can prevent getting scammed online.

See more:

What is Phishing?

Phishing is a form of cybercrime where attackers will trick unsuspecting victims into sending sensitive information or installing malware on their devices. It involves contacting victims via email, text message or telephone and posing as a legitimate company or individual seeking information to benefit the victim. Malicious actors will use social engineering techniques to convince unsuspecting victims they are real.

If you received an email that looks suspicious, you aren’t alone. Scammers often send millions of phishing emails, thousands at a time, to trick recipients, with malicious messages being sent to email addresses found through social profiles or via data breaches. These email scams are widespread, meaning attackers cast a wide net to see how much they can reel in.

Phishing attacks commonly use links in messages to dodgy websites or PDF attachments with malware to quickly gain unauthorised access to user accounts or steal valuable information.

Hackers will also resort to installing malicious software, including spywareransomwareadware and more, onto a victim’s device to cause more damage.

With phishing scams on the rise, it’s best to use proper protection to fend off any suspicious messages you receive. This includes Windows 11 Enhanced Phishing Protection, but there are other tools you can use, too.

Common types of phishing attacks

Scammers use several phishing methods to steal information. Sometimes, it’s through email, while other times, it’s through phone calls or texts. Threat actors will also target specific individuals, knowing they can grab a bigger prize if the victim is successfully duped.

Here’s a better look at the most common phishing scams to look out for.

Email phishing

If you have an email address, you’ll likely have received unwanted phishing emails in your inbox. Phishing emails are the most common form of cybercrime, as scammers can easily send emails to millions of people to see if anyone bites.

These scam emails often involve the attackers using a fake email domain that looks similar to an official brand, dodgy links to fake websites and malicious attachments to download.

For example, the scammers may disguise the email as an official-looking message from Amazon. They will use the same brand imagery, language and common messages the company sends.

Amazon.com, Action needed Sign-in attempt scam Example

Look out for misspellings in the message, the email address and URL. In this case, if the URL doesn’t appear to be “Amazon.com” or “Amazon.co.uk” or country-specific, don’t trust it. Cybercriminals may use names that look like they come from Amazon, but they are often misspelt or include periods (“.”) in random points of the address. If it’s from Amazon, it should simply be “example@amazon.com.”

Smishing

Similar to emails, fraudsters will send fake SMS texts to catch people off guard on their phones. This is known as smishing.

These text messages often include a link to a fake website for customers to enter their login details. However, this allows the hacker to access their accounts instead. Never click on the link if you receive these types of messages.

BNZ Text Scam Message
BNZ Text Scam Message via BNZ

These text messages often include a link to a fake website for customers to enter their login details. However, this allows the hacker to access their accounts instead. This could be for social media platforms or banks, allowing attackers full access. Never click on the link if you receive these types of messages.

Vishing

Instead of using a form of text, vishing is when scammers use telephone calls to trick individuals.

Scam callers will pretend to be from retailers, banks or companies to make them sound official. They will often request a call to action to get private information. For example, they will say that you’ve won a prize but need your personal information, request your banking details due to your account being compromised or ask for private information as part of a survey.

As a rule of thumb, no company will request this information out of the blue over a phone call. Don’t give away any personal details to an unknown caller.

Spear phishing and whaling

Phishing can often be random, but spear phishing and whaling are emails or messages sent to specific targets.

Spear phishing is the act of targeting an individual the scammer already has information on. They will use information like the target’s name, job title, email address and more to make the victim think it’s a legitimate message.

For example, scammers will email employees a notice about the company, stating their name and information about their job. They will then request a sly way to be sent personal information or banking details.

Spear phishing email example via Tessian
Spear phishing email example via Tessian

Whaling takes this a step further by targeting individuals with senior roles in a company. Attackers will disguise themselves as a senior-level position at a company, like a CEO, and request employees to get something done. This could be a bank transfer or sensitive company information. Scammers take advantage of the hierarchy of positions in a company, with employees often responding to senior-level roles and following instructions.

As with all phishing tactics, always check for suspicious behaviour in emails, text messages and phone calls, and double-check the email address or URL to see if the message comes from an official source.

How to prevent phishing attacks

Follow the steps below to prevent any kind of phishing email or scam message.

Turn on Windows 11 Enhanced Phishing Protection

Windows 11’s Enhanced Phishing Protection can be found in the Windows Security app, and all you have to do is flip the switch. Find out how below:

1. In the taskbar, type in “reputation” in the search field.

2. Click on Reputation-based protection.

Windows 11 Enhanced Phishing Protection How to

3. Under Phishing protection, click the switch to turn on Enhanced Phishing Protection.

Windows 11 Enhanced Phishing Protection

4. Select other features you wish to turn on.

There you have it. As Microsoft notes, only the typed password used to sign into Windows 11 can be protected. Regardless, it’s worth turning on to keep your device safe, along with other accounts that may use a similar password.

Block phishing emails

Clicking on a scam email can evoke even more spam crowding your inbox. If you are aware of an email address consistently sending spam, you can block the email address in Gmail.

  • Open Gmail on your device.
  • In your inbox, check the box beside the spam email of the sender you wish to block.
How to block scam emails in Gmail
  • Click the three vertical dots located at the top bar of your inbox.
  • Click Filter messages like these.
Gmail how to block scam email
  • In the pop-up window, select Create filter.
  • Check the Delete it box and click Create filter.
Gmail how to block scam email

When the email address tries to send you mail, it will automatically be deleted.

For more on how to block spam email in Outlook and how to block spam email in Yahoo Mail, including reporting senders and changing email privacy settings, we’ve got you covered.

Block suspicious phone numbers

To stop receiving scam texts from random numbers, we have just the guides below.

Use scam detection tools

With phishing emails are on the rise, with people receiving everything from Amazon scams to sextortion scams. That’s why cybersecurity companies are coming up with new tools to protect users online.

Cybersecurity solutions company Norton introduced Norton Genie, a free real-time AI-powered scam detector available for iPhone and PC, and it lets you know if texts, emails, websites and social media posts are a scam.

The new scam detection tool uses Norton cybersecurity data and AI that’s “trained on millions of scam messages” to identify scam messages, emails, links or posts received online. It aims to make it easier for users to spot scams, phishing attacks and fake websites.

Norton Genie is currently available in New Zealand, Australia, Ireland and the United States and can be downloaded on the Apple App Store or through Norton’s official website. Currently, it is compatible with iOS 14.0 or greater, Chrome, Safari, Microsoft Edge and Firefox.

Use antivirus software to stop phishing

The best antivirus software will stop phishing in its tracks. Many high-standard AV protection offers near-perfect scores when detecting and protecting against malware, meaning even complex malicious software can’t go unnoticed in messages or emails.

Messages from scammers can contain harmful links or attachments filled with malware, which you never want on your device. The good news is you can let one of the best antivirus software services do all the legwork for you, as they have security and privacy features to protect your accounts.

Services such as Avast OneBitdefenderNorton 360 and more have protection tools that block malicious email addresses, links and attachments. To make sure scams block malware damaging your device or keep you safe from threat actors hacking your phone through texting and more, set yourself up with an antivirus.

Best antivirus for phishing

1. Norton 360 🥇From $19.99/year
Best overall antivirus of 2023

Norton 360 on Laptop scaled

“Norton” and “antivirus” are synonymous these days, as the well-established cybersecurity brand has successfully fought against malware, viruses and nasty software threats since 1990. 

Norton 360 offers excellent antivirus protection and extra features that make for a valuable, all-in-one security product. Its Norton 360 Deluxe and Premium package may cost a pretty penny. Still, with security across multiple platforms, a full-blown VPN, Dark Web Monitoring, Parental Controls and more, it will have a household free of cyber threats. 

Norton’s certainty of its antivirus software’s capabilities is clearly defined by the brand’s 100% Virus Protection Promise. If a device protected by Norton 360 can’t get rid of a virus, the user receives their money back. It’s a big claim, but unquestionably, no one should expect to get that refund.

If you have the money for it, you can also check out the premium Norton 360 Platinum package for even more online protection, including from identity theft. Without a doubt one of the best antivirus to get.

Read our full Norton 360 review

Special Offer!

2. Bitdefender 🥈 From $19.99/year
Best security features and tools

Bitdefender Lead Image scaled

Bitdefender takes the spot as best antivirus, and for good reason. It’s not enough that it boasts near-perfect lab test scores across the board, as it goes the extra mile by giving users access to a plethora of advanced security features.

Bitdefender goes above and beyond in the features department, all while keeping known malware, ransomware, and viruses at bay. It will defend your device against new attacks, provide security for online transactions, keep you safe with a reliable VPN, and protect your accounts with a password manager.

It’s a no-brainer when it comes to defending your devices against virtually any form of cyberattack, and its top-notch protection extends to its most affordable package, too. Protecting your PC and smartphone, from Windows and macOS to iOS and Android, is becoming even more necessary, and Bitdefender is the tricked-out shield you need. 

Read our full Bitdefender review

Special Offer!

3. Malwarebytes 🥉 From $44.99/year
Best antivirus for Windows PC

Malwarebytes Logo scaled

Hundreds of malware emerge every minute, and it’s Malwarebytes’ mission to detect and conquer them all. Does the antivirus do this successfully? Yes, but there’s wiggle room for improvements.

Malwarebytes’ no-nonsense approach to protecting your devices from the onslaught of malware and viruses is effective for those who need a reliable antivirus that will detect and remove malicious software, especially with its free version. However, while its premium service provides 24/7 real-time detection, conveniently blocks vicious ransomware and shields users from malicious websites, it doesn’t go beyond on the feature front.

That’s no bad thing, as sometimes a user only needs a powerful antivirus to keep them safe from cyber threats. But considering its competitors add a few more security tools, such as data breach monitoring and a firewall, there’s room for improvement. 

Read our full Malwarebytes review

Special Offer!

4. Avast One 🙌 From $39.99/year
Best antivirus for beginners + free plan available!

Avast One logo on laptop

With Avast One, you can protect your device from viruses, malware and ransomware for free. That’s right, and you don’t have to pay a dime for the extra security features the antivirus throws in, including its VPN, firewall and more.

Avast One will safeguard your device from malware, comes with ransomware protection, blocks harmful websites and downloads from the web, scans your emails for malicious attachments, stops hackers from infiltrating your device through Wi-Fi with a firewall – the list goes on. That’s a lot of tools for software that’s free, and the included VPN and the ability to speed up your PC are a welcome bonus.

It’s the ideal antivirus software for home use, as it takes the hassle out of staying wary of cyber threats lurking around, even if you’re not a tech whizz. What’s more, if you are looking for added precautions, its paid Individual and Family packages still boast great value. Hard to go wrong with this best antivirus.

Read our full Avast One review

Special Offer!

5. AVG👍 From 4.99/month
Best antivirus for + free plan available!

AVG Antivirus logo scaled

You can never go wrong with free antivirus protection, but some deliver even better detection and protection rates, along with extra security features, without costing a dime. This is where AVG antivirus shines.

AVG provides reliable protection and only a small impact on performance for Windows, Mac, iOS and Android. It safeguards your devices against malware, viruses and zero-day exploits, along with blocking malicious links and attachments in emails. Throw in phishing protection when surfing the internet and extra security features such as its SafePrice browser extension and Network Inspector, and you’ve got yourself a do-it-all antivirus.

Sure, you can find all of these perks with Avast, but if you like a slick, darker user interface that’s easy to navigate, then AVG is for you.

Read our full AVG Antivirus review

Special Offer!

Darragh Murphy
Darragh Murphy is fascinated by all things bizarre, which usually leads to assorted coverage varying from the mischievous world of online security to washing machines designed for earbuds. Whether it's connecting Scar from The Lion King to two-factor authentication or turning his love for laptops into a fabricated rap battle from 8 Mile, he believes there’s always a quirky spin to be made. When he's not checking out the latest devices and all things tech, he can be found swimming laps, watching terrible shark movies, and trying to find time to game.  Previous Editor at Laptop Mag and News Editor at Time Out Dubai, specialising in food culture, nightlife events, gaming, tech and entertainment.

LEAVE A REPLY

Please enter your comment!
Please enter your name here