Phishing is one of the oldest tricks in cybersecurity, and it remains one of the most effective, precisely because it targets human trust rather than a technical weakness in a system. The messages have gotten more polished, but the underlying patterns behind them have stayed remarkably consistent.
Warning signs worth remembering
- A sense of urgency — 'your account will be suspended in 24 hours' pressure that discourages careful thinking
- A request to click a link and log in, rather than navigating to the site yourself
- Slight misspellings in a sender's email address or a company's domain name
- Requests for information a legitimate company would never ask for over email, like a full password
Why urgency is the biggest red flag
Scammers rely on rushed decisions. A message designed to make you panic — a locked account, a missed payment, a security alert — is engineered to short-circuit the careful thinking that would otherwise catch the scam. Slowing down is, in itself, one of the most effective defenses.
A simple habit that helps
Instead of clicking a link in a suspicious email, open the company's app or type its website address directly into your browser. If there's a genuine issue with your account, it'll show up there too — without the risk of landing on a fake login page designed to steal your credentials.