Definition:
A computing scam where the perpetrators try to get sensitive personal information by sending users to fake, but legitimate looking websites. Phishing often starts with a legitimate looking email asking you to re-enter your login credentials, banking information, home address and phone number, credit card numbers, or other information that can be used against you.
Phishing is being combated through user education, legislation, and integrated anti-phishing measures in modern Web browsers.
The best way to protect yourself from phishing scams is to:
- Don't reply or otherwise act (by clicking on links) on emails asking you to enter your usernames, passwords, or other sensitive personal information. Legitimate sites will almost never ask for this information by sending you an email. (If you do think the email is legitimate, call the phone number to check. Banks will have someone answering the phone; scammers won't.)
- When you are at a website where you need to enter sensitive information, check the Web address to make sure you are actually at the site where you should be. For example, if you think you are at the PayPal website, make sure the URL in the address bar starts with "http://www.paypal.com".
- Review banking and credit card statements monthly for suspicious activity. (There were over 8 million U.S. adult identify theft victims in 2007!)
- If you are a victim of ID theft or to learn more, visit the U.S. Federal Trade Commission's Identity Theft website.
Also Known As: email scams