Phishing: Fraudulent emails and websites designed to steal data by masquerading as reputable entities like banks.⁴

Vishing (Voice Phishing): Fraudulent phone calls that trick you into revealing personal information. Attackers may spoof caller IDs or use advanced techniques like deepfake technology.⁴

Smishing (SMS Phishing): Fraudulent text messages intended to trick you into revealing data or downloading malicious software.⁴

Create Urgency or Fear: They often demand immediate action to prevent negative consequences (e.g., threatening to close bank accounts, legal action, or service cancellation).

Contain Errors: Frequent spelling, grammar, or logic errors can be significant red flags, as these messages may originate from non-native speakers or bad actors operating from abroad.

Are Unexpected: Messages from unknown senders with unexpected offers, information, or demands that seem out of place should raise immediate suspicion.

Have Disguised Links: In emails, hovering over links can reveal if they point to an irregular or unexpected website address that differs from the purported sender's legitimate domain. Fraudulent links may have slight variations in names, numbers, or characters.

Demand Personal Information: Be highly suspicious of unexpected or unknown sources demanding personal information, passwords, or payments, especially if the request seems out of context. Legitimate financial institutions will never ask for personalised security features like PINs or passwords over the phone or email.

Lack of Authentication Certificates: For websites, the absence of proper authentication certificates (indicated by "https://" in the URL and a padlock icon) is a red flag.

Contain Unusual Attachments: Email attachments may be in strange formats or have unusual titles.