Protecting yourself
Never give sensitive
personal information in a message
Most businesses will not ask for passwords, account or credit card
numbers, or other confidential information in an e-mail, instant
message, or pop-up window. While browsing, be particularly
suspicious of windows that do not include the address bar. If you
think you've received a phishing e-mail message, just delete it
without responding.
Make sure the Web site is
legitimate
Do not enter personal information unless you're sure it is to a Web
site you trust and that the site takes appropriate steps to protect
your data. Find out if the site uses encryption to protect your
data. Look for https (the s is for secure) in the Web address,
and check for a tiny closed padlock or an unbroken key icon in your
browser window.
On some systems, the padlock (and key) can be faked, so
double-click it to display the security certificate for the site.
Look for a match between the name on the certificate and in the
address bar. If the name differs, you may be on a faked site. If
you have even the slightest doubt about a site's legitimacy, play
it safe and leave.
Be wary of clicking a
link in a message or pop-up window
If you get an e-mail, instant message, or pop-up window that asks
for personal information, do not click the link. Doing so could
take you to a phony site where any information you give may be sent
to the phisher who built it.
If you're unsure whether a message is genuine, call the company by
using the telephone number on a past statement or the telephone
book. To visit the companys Web site, type the address (do not
copy and paste), or use your own bookmark or Favorites list.
Routinely review your
financial statements
Carefully check all your credit card and bank statements monthly
and regularly log on to any online accounts. If you review your
bank and credit card statements often, you may be able to catch con
artists and stop them before they cause significant damage.
Improve your computer's
security
Phishers hope you haven't been applying the latest security fixes,
and may try to take advantage of these vulnerabilities. Some
phishing e-mail may contain malicious or unwanted software that can
track your activities or simply slow down your computer.
