How to Avoid Phishing and Online Fraud

Phishing is a form of fraud designed to make you reveal information, approve a payment, download malicious software, or give someone access to an account. The message may appear to come from a bank, delivery company, platform, colleague, or public institution.

Slow down before you click

Urgency is one of the most common signals. A message may claim that your account will be closed, a payment has failed, or a document needs immediate approval. Instead of using the link in the message, open the official app or type the organisation’s address yourself.

Check the sender address, the link destination, spelling, unusual requests, and whether the message fits the context. A familiar logo is not proof that the message is genuine.

Protect access to your accounts

Use a different, strong password for every important account and enable multi-factor authentication wherever possible. Never share one-time codes, recovery phrases, private keys, or complete card details with someone who contacts you unexpectedly.

Keep your phone, browser, operating system, and security software updated. For financial and crypto accounts, use official applications and bookmark the correct websites instead of searching for them through advertisements.

What to do if you made a mistake

Act quickly. Contact your bank or payment provider using an official phone number, change the affected password, revoke suspicious sessions, and report the message. If a crypto wallet recovery phrase or private key was exposed, treat the wallet as compromised and move remaining assets only through a safe, verified process.

Online safety is not about recognising every scam perfectly. It is about creating enough friction that a surprising request does not turn into an irreversible decision.