Phishing uses email, text messages, social media, or phone calls to impersonate a trusted source and steal information or money. Text phishing is called smishing, and phone phishing is called vishing.

• A link or attachment in an unexpected message.
• Urgency, threats, or a claim that you will lose money or face penalties.
• Generic greetings, misspelled domains, unusual characters, or requests for credentials.
• A prize or competition requiring personal or financial details.

• Do not use links supplied in unexpected messages; visit the organisation’s site directly.
• Never share passwords, card details, PINs, or one-time codes in response to a message or call.
• Enable multi-factor authentication and keep software updated.
• Avoid sensitive logins on public Wi-Fi and log out of important sessions when finished.