Understanding the topic
Phishing messages try to trick people into sharing information, sending money or opening malicious links. They may imitate banks, delivery services, colleagues or popular websites.
This lesson explains the main ideas, then shows how to use them in realistic situations. Work through the examples and check your understanding at the end.
Quick reference
Use this table as a starting point; always check the needs of your own file, device or account.
| Concept | Meaning or example | Practical use |
|---|---|---|
| Unexpected urgency | Act within 10 minutes | Pressure to bypass checks |
| Link mismatch | Visible label differs from destination | May lead to imitation site |
| Unusual attachment | Unexpected invoice or ZIP | Could contain harmful content |
| Payment change | New bank account in an email | Needs independent verification |
| Code request | Send your login code | May enable account takeover |
Step-by-step method
- Pause before responding to an unexpected urgent request.
- Check the sender and the actual destination, not just the display name.
- Open the official website or app independently instead of using a message link.
- Verify payment or account changes using a known contact method.
- Report suspicious messages and delete them after checking.
Worked examples
Delivery text requests a small redelivery fee
Go directly to the courier’s official site rather than tapping the text link.
Supplier sends new bank details
Call the supplier using a previously verified phone number.
A message asks for an MFA code
Do not provide it; investigate your account through the official app.
Common mistakes and limitations
- Correct spelling and professional logos do not prove a message is genuine.
- An email appearing to come from a familiar person can still be compromised.
- Hover previews can help on desktop but do not replace independent verification.
Practice questions with answers
Try to answer each question before opening the explanation.
Question 1: A bank text links to a login page. What is safer?
Answer: Open the bank app or type the known official address yourself.
Question 2: A familiar supplier changes payment details by email. Next step?
Answer: Verify by a previously trusted phone number or channel.
Question 3: Does a company logo prove an email is genuine?
Answer: No. Logos are easy to copy.
Review checklist
- Can you explain the key idea without using technical jargon?
- Can you choose an appropriate action for a new example?
- Can you identify one mistake and explain why it matters?
- Can you check your result or settings before sharing or saving?