What phishing is and why it works
How scammers think, and why smart people get fooled.
Phishing is a message that pretends to be someone you trust, so that you will do something that helps the sender. It might be an email, a text, a phone call or a code on a flyer. The message is the bait, and you are the target.
What the sender wants
- Your password or a sign-in code.
- Money, through a fake invoice, a gift card or a changed bank account.
- A click that puts malware on your computer.
- Information they can use for a bigger scam later.
Why it works
Scammers do not need to trick your computer. They trick people, by pushing feelings that make us act fast.
- Urgency. Do this now or lose access.
- Fear. Your account was hacked. A payment failed.
- Authority. A message that seems to come from the boss, the bank or the government.
- Helpfulness. A coworker asks for a quick favor.
- Curiosity. A voicemail, a photo or a shared file you did not expect.
Try it. A text says your package is on hold, and you must confirm your address within one hour or it will be sent back. Which pressure tactic is this?
Being fooled does not mean you were careless. Scam messages are written by professionals and tested on thousands of people. What protects a business is a habit of pausing, and a culture where people report quickly and nobody is blamed.