How to protect yourself from phishing

Email. Scammers often use fake addresses that look very similar to official ones. For example, [email protected] instead of [email protected]. Carefully examine the sender's address.

Links. If an email, messenger message, or SMS contains a link, hover over it (without clicking) and make sure the domain matches the company’s official website. Suspicious links may lead to fake login pages.

Malicious attachments. Some phishing attacks rely on infected files containing viruses or spyware. Don’t open attachments from unknown senders or people who suddenly ask you to confirm something.

Suspicious websites. If a site looks odd (unusual design, sudden redirects, or strange pop-ups), don’t enter your personal information.

Passwords and PINs. Legitimate companies, banks, and payment systems never ask for passwords or PINs via email, phone, or messaging apps.

Verification codes. No bank employee or support agent should ever ask you to forward a one-time code (e.g., an SMS code).

Account protection. Even if an attacker obtains your login and password, with 2FA enabled, they would still need confirmation from a special app (like Google Authenticator or Authy).

Enable wherever possible. Turn on 2FA for all services that support it, including email and social media.

Software updates. Regular updates to your computer, smartphone, and apps help fix vulnerabilities that scammers could exploit.

Antivirus. Install antivirus software on your computer and mobile device to scan emails, downloaded files, and websites for malware.

Risks in public networks. Traffic interception is a common hacker tactic in public Wi-Fi networks. Avoid financial transactions or entering important passwords in cafes, airports, or other open access points.

Use VPN. If there’s no other option, use VPN services to encrypt your traffic and reduce the risk of data leakage.

Urgency messages. Phishing emails often contain threats (like “Your account will be blocked”) to pressure victims into quickly clicking links. Stay calm and verify through the official website or customer support.

Friends and acquaintances. If you receive a strange request for help (especially involving money), contact them directly by another method - their account might have been hacked.

Unique passwords. Use different passwords for every service to prevent a chain reaction if scammers steal one.

Password manager. Use apps like 1Password, LastPass, or Bitwarden to securely store and manage your credentials. These tools can generate strong, unique passwords and auto-fill them on websites.