Digital security
4 steps
Phishing is a social engineering technique that has become one of the most significant digital security threats. As dependence on digital communication grows, criminals use increasingly sophisticated strategies to steal personal data, login credentials, and even money. This article explains how to recognize phishing attempts, prevent attacks, and respond if you become a victim.
Main Signs of a Fake Message
Identifying suspicious messages is the first line of defense against phishing. Common warning signs include an urgent or threatening tone, incomplete or poorly written details, requests for sensitive information, and shortened or incomplete links.
How to Verify Whether a Website Is Trustworthy
Visiting fake websites is one of the most common phishing tactics. To avoid this, check the site's domain, verify that it uses HTTPS, avoid links in unexpected messages, and use website verification tools.
What to Do After Clicking a Suspicious Link
If you click a suspicious link, taking immediate action is crucial to minimize damage. Close the page immediately, change passwords for affected accounts, enable two-factor authentication (2FA), and monitor your accounts and financial statements.
Step-by-Step Guide to Identification and Prevention
Essential actions to protect your information
-
1
Be Suspicious of Urgent Messages
Messages that pressure users to act immediately, such as 'your account will be blocked within 24 hours,' are often used to provoke mistakes.
-
2
Verify the Sender's Address
Check whether the email address or website domain matches the legitimate organization. For example: 'www.bb.com.br' versus 'www.bb-bancos.com.br'.
-
3
Use Hover to Preview Link Destinations
Hovering over a link reveals its actual destination, helping identify malicious websites.
-
4
Enable Two-Factor Authentication (2FA)
This adds an extra layer of security by requiring a second factor, such as an SMS code, to access accounts.
Main Signs of Phishing
| Sign | Description | Action |
|---|---|---|
| Urgent or Threatening Tone | Messages that pressure users to act immediately | Be suspicious and do not respond |
| Incomplete or Poorly Written Details | Grammar mistakes, low-quality logos, or suspicious domains | Verify the source and communication style |
| Requests for Sensitive Information | Requests for passwords, authentication codes, or banking details | Never share sensitive information through messages |
| Shortened or Incomplete Links | Links that appear legitimate but use shortened URLs or suspicious domains | Check the full website address before clicking |
Important Tips
Keep software and operating systems updated to protect against known threats.
Never share passwords or banking information through messages.
Use official channels for verification, such as calling the organization's official phone number.
Frequently asked questions
Quick answers to common questions.
What is phishing?
Phishing is a social engineering technique designed to trick users into revealing sensitive information, such as passwords, banking details, or authentication codes. Criminals impersonate trusted organizations to create messages or links that appear legitimate.
How can I verify if a website is trustworthy?
Check the website's domain, verify that it uses HTTPS, avoid clicking links in unexpected messages, and use website verification tools to assess trustworthiness.
Related content
More practical solutions in Digital security.
Computer Virus: Warning Signs and How to Remove Threats
Learn how to identify signs of viruses, malware, and malicious programs on your computer and take safe steps to protect your files and privacy.
15 minutes
Two-Factor Authentication: How to Enable It and Protect Your Accounts
Learn how to enable two-factor authentication (2FA) to strengthen the security of email, social media, banking apps, and other online services.
Account Hacked: Immediate Steps to Protect Your Access
Learn how to respond quickly if you suspect that your email account, social media account, or application has been accessed without authorization.