Oooops, you clicked the phishing link!

What is considered as phishing?

Phishing attempts usually start with someone in an email approaching you from a familiar company or service that you use: your employee, your bank, phone provider, a social media service, anywhere you might have an account. In the email, you are asked to click on a link that will lead you to a login page where you will enter your credit card number or provide some other sensitive or valuable information. Phishing emails are very common, and even the tightest firewalls or junk mail detectors might not necessarily notice them. Everyone will encounter these sorts of emails sooner or later.

How to react – 4 +1 easy steps

1. Take it easy 

Usually, things go wrong if you're in a hurry. So take a minute to breathe and read the email carefully.
 

2. Move the mouse over the URL without clicking it

Before you click on a link, it is a good idea always to check where it leads. Be advised that a link that looks like a direct link to a web site can lead somewhere completely different. It is usually possible to check where a link leads by simply moving the mouse over the link; a box with the URL should pop up or be visible at the browser's bottom left corner.

Oh no! I already clicked the link! What to do?

If you visit the page in question by clicking on a link you received in an email, it is incredibly important to check the address in your browser. If it's weird in any kind, copy the link and send it to the IT support // Service Desk who can investigate it further.

Do not trust the site just because it looks genuine. The address is often the only way to see the difference between a phishing page and a real page. Even the URL can be adapted so that it is indistinguishable from the real thing.

3. Move to junk

If you are asked to send any critical or sensitive information by email, you can immediately throw the email in the junk basket. Never send login credentials, bank codes, credit card information or anything sensitive by email.

4. Report it 

Follow your company guidelines to report any phishing email you get.