Person using a laptop with a warning symbol on the screen, illustrating online phishing and scam activity

Phishing scams: don’t take the bait

Scammers continue to find new ways to trick people, and phishing is one of the most common. By understanding how phishing works and knowing what to watch for, you can help protect your personal information, your finances, and your peace of mind.

About phishing scams

Phishing is a scam where criminals pretend to be a trusted source, such as a bank, business, or government agency, to try to collect sensitive information.

Phishing attempts often come through:

Email
Text messages
Phone calls
Social media messages

These scams are designed to pressure you into clicking a link, opening an attachment, or sharing private information like passwords, account numbers, or one‑time passcodes.

Common phishing scam types

Recognizing the different types of phishing can make scams easier to spot.

Email phishing - Fraudulent emails made to look legitimate. These messages may claim there is a problem with your account or that urgent action is needed.
Vishing (phone scams) - Scam phone calls that attempt to create urgency and ask you to verify information or take immediate action.
Smishing (text message scams) - Text messages that appear to come from a trusted organization and urge you to click a link or call a number.
Targeted phishing - Scams that feel more personal and may reference your job, community, or recent activity to appear more convincing.

Common phishing red flags

Many phishing messages share common warning signs, including:

Urgent or threatening language
Requests for personal or account information
Unexpected links or attachments
Misspellings or poor grammar
Generic greetings like “Dear customer”
Contact information that does not match the organization
If something does not feel right, trust your instincts and take a closer look.

How to protect yourself

Simple, everyday habits can help keep you safe:

Do not click links or download attachments from unexpected messages
Never share passwords, one‑time passcodes, or account numbers
Verify requests by contacting the organization directly using trusted contact information
Keep your devices and software up to date
Review your accounts regularly for unusual activity

What to do if a message seems suspicious

If a message seems suspicious, take these steps:

Do not respond or click on anything
Delete the message
Report it to the organization it claims to be from
Contact your bank if you are unsure or think your information may be at risk

Taking action quickly can help reduce potential harm.