Illustrative scene: A laptop on a train table showing a generic unexpected account-verification email.

Scam method

Phishing

Deceptive messages that try to obtain passwords, payment details or other information.

Phishing is a type of online scam where criminals pretend to be trustworthy organizations or people to trick you into giving away important information—like passwords, credit card numbers, or personal details. The name 'phishing' comes from the idea of 'fishing' for victims by luring them in with fake but convincing messages.

Published Updated

STOP. CHECK. ASK. MONITOR.

A simple habit to stay safer from scams.

STOP

Pause before you act.

CHECK

Verify independently.

ASK

Get another perspective.

MONITOR

Watch what happens next.

How Phishing Works

Phishing attacks usually happen through emails, text messages, or social media. The attacker sends a message that looks like it’s from someone you know or a company you trust, like a bank or a popular website. The message might say things like:

  • Your account has a problem and needs to be fixed immediately.
  • You’ve won a prize! Click here to claim it.
  • There’s been suspicious activity on your account. Please verify your identity.

These messages are designed to make you act quickly, without thinking. If you click the link, it takes you to a fake website that looks almost identical to a real one. Once you enter your information (like your password or credit card number), the scammers steal it and use it for things like identity theft, accessing your accounts, or spending your money.

Why Do People Fall for Phishing?

Phishing works because it plays on our emotions. Scammers use fear, excitement, and urgency to make you feel like you need to act right now. Whether it’s the fear of losing access to your bank account or the thrill of winning something, they want you to act quickly, without thinking too much.

These attacks are designed to catch you off guard. Scammers might also send phishing messages at times when people are more distracted—like during holidays or major events—making it easier for them to fool you.

The Mindset Behind Phishing

The key idea behind phishing is to exploit trust. Scammers know that people are more likely to respond to a message if it looks like it’s coming from a company or person they already trust. By mimicking familiar logos, branding, or email addresses, they try to convince you that their fake message is legitimate.

It is less about technology and more about tricking people into making mistakes. Even if you have strong security software, phishing still works because it’s about fooling you, not your computer.

Phishing is a way for cybercriminals to trick you into giving them your personal information by pretending to be someone you trust. It relies on creating a sense of urgency or excitement, and it plays on our natural tendency to trust familiar names and brands.

We’ll email you a link to confirm your subscription.

Share your experience

Your experience could help someone else.

Share what happened and help others recognise the warning signs. You can choose whether to include your name.

Share your experience

This is not an official reporting service.

Scam Busters HQ

Become a Digital Hero

Fun activities, games and guides to help children and young people spot scams and stay safe online.

Visit Scam Busters HQ
A smiling Digital Hero wearing a green eye mask, hoodie and cape.