Don't Get Caught by a Phishing Scam
A phishing scam is a tactic that internet criminals use to try to steal your personal information.
You've probably received some pretty absurd emails from people claiming to be holding large amounts of money in your name in a foreign bank. All they need from you is your bank account information so that they can transfer you your fortune. Chances are you've recognized these emails as fraudulent. But these scammers, known as phishers, are becoming more clever. Scammers send some emails disguised as email from legitimate institutions, like banks or e-commerce websites, claiming that they need you to confirm your personal information. They'll usually ask you to click on a link that will redirect you to a website that may look genuine, where it will ask you to "confirm" your account information or provide other personal information, such as your social security number. When you enter this information, it is sent to the scammer, instead of your bank or other institution being imitated.
Sometimes, these emails can be difficult to differentiate from emails legitimately sent from your bank, preferred online vendor, or other site.
NSIT has created a web page that offers valuable information on how to determine whether an email is legitimate or fraudulent, including identifying fake URLs. By visiting the Phishing Scams page, you can read about how phishing scams work, and how you can protect yourself against them. The site also features an interactive game, developed by Carnegie Mellon University, which is a good resource for learning to identify internet and email scams, and for staving off internet crime.
For more information and tips on safe computing, please visit the Safe Computing website.
Last updated: 12/13/07