Phishing Emails-How to Recognize and Safety Precautions



Phishing Emails-How to Recognize and Safety Precautions-The word Phishing is derived from the word fishing. Phishing email messages and websites are designed by the Cybercriminals for the specific purpose of stealing money from some one’s bank account. As in the case of a fisherman, the fisherman puts his fishing hook in the ocean where countless fishes wander and wait to snow in some one, the same principle is followed by the Cybercriminals. The aim of Phishing emails is to install a malicious software on your computer for stealing personal information like passwords, user names from your computer. Cybercriminals also use social engineering to convince you to install malicious software or hand over your personal information under false pretenses.
One day I received an email as if it was from my bank with an attachment with the instruction that the bank has decided to improve it’s services and transaction speed for which the attached software is to be installed immediately. Being from a banker’s family and an experienced user of net banking I was alerted immediately and following points striked my mind.
1.    The bank is capable of installing every thing at his own, why I have been requested to install some thing in my own computer.
2.         How a software installed in my computer will improve the bank’s services and speed.
3.         Banks always install every thing in their own server and not in a clients computer.
4.         Banks never install even a cookie in the client’s computer.
I checked the email deeply and was convinced that it was a real phishing email. I redirected the email to the internet banking security department of my bank and within a few hours I received an email from my bank confirming that really it was a phishing email.
This was a simple example but what could happen if the spyware may have been installed on my system believing the email to be genuine –
1.         The spyware may have been stolen my bank account ID, passwords and all other account related information an sent it automatically, without my information to the criminals.
2.         The spyware may have been keep on reporting all my transaction and balances immediately when these take place, to the criminals.
3.         After receiving all these information, the criminals may have wiped off  my account.
Not only me but any body all over the world may be a victim of such criminals so let us be cautious and follow the standard rules.

How to recognize a phishing/Fake email

1. Emails Asking your Account Details

If you receive an email asking your account details, account ID or password, it is 100% fake. You should always be sure your bank already has all these detail with full access rights, then why your bank need to ask you. People do not apply their mind on the point that all these details have been given to him by the bank it self then why the bank will need to ask him on email. Each time you login to your bank account, your bank always displays a warning that bank will never ask you any thing on email and never ask you to install a software, beside this people follow the fake mails and become victims of the criminals.

2. Threat to close Bank Account 

If you received a threat that your account would be closed if you didn't provide the desired information, it is 100% fake? This is a trick adopted by the criminals otherwise bank will never close an account for such reasons. Please note that closing of an account is an activity of high importance and your bank will need you mostly in person on such occasions. Moreover If the bank has a problem with your account they do not need your permission, they will keep the account on hold or close your account and put the balance in suspense account to be paid to you later.

3.Your Security has been compromised

 If you receive an email asking your account details, account ID or password, for the reason that the security of your account has been compromised it is 100% fake. You should always be sure that no detail of your bank account is recorded in your computer and not even in the computers of your branch. In the computer of your branch, only the data of that current day are available, then how your account security can be compromised in your computer. It is a trick of the Cybercriminals to use such threats.

4.Check the Language and Grammar of Email 

Cybercriminals are mostly less educated and can not write error free emails and banks and financial companies or organizations usually have professionals and highly qualified staff of editors to write impressive and error free language. These institutes never allow a mass email service. If you notice mistakes in an email, it might be a scam.

5.Beware of attachments or links in an email 

If you see a link in a suspicious email message, don't click on it. Hover your mouse (but never click) on the link, the real address will be displayed in the bottom left corner of your browser, if the address does not match with given in the link, it is the confirmation of the link of being fake.(This is not a sure test and some times may be manipulated by setting)
You can find more details on Phishing HERE


Reactions:

1 comment:

  1. Bajrang Lal Choudhary10 August 2014 at 05:14

    Phishing Emails is a great problem now a days because the Cybercriminals also use social engineering to convince you to install malicious software or hand over your personal information under false pretenses.This article will help to combat fishing mails

    ReplyDelete