Spotting Scams and “Phishing”

The internet is a wonderful place to learn, play, and connect with friends. But just like in the real world, there are some people who try to trick others. These tricks are called scams. A scam is when someone lies to you to steal your money, your personal information, or your accounts.

What is Phishing?

Phishing is one of the most common types of online scams. It happens when someone sends you an email, message, or text that looks like it’s from a real company or person you trust — like your bank, a popular game, or even a friend. But it’s actually a fake!

The word “phishing” comes from “fishing.” Just like a fisherman casts a line and waits for a fish to bite, a scammer sends out a fake message and waits for someone to fall for it. The “ph” at the beginning is a common spelling in tech words (like “phone” or “photo”).

Here is what a phishing message might look like:

Subject: URGENT: Your gaming account will be deleted!

Dear Player,

We noticed unusual activity on your account. Click this link immediately to verify your password or your account will be deleted in 24 hours!

[Click Here]

The link might take you to a fake website that looks exactly like the real one. If you type in your password, the scammer now has it!

Other Common Online Scams

Phishing is not the only trick scammers use. Here are some others you should know about:

Fake Prizes and Giveaways

Have you ever seen a message saying, “Congratulations! You won a free iPhone!” or “Click here for free Robux/V-Bucks”? These are almost always scams. Real companies do not give away expensive prizes randomly through pop-ups or messages from strangers. If it sounds too good to be true, it probably is.

Fake Friend Requests

A scammer might create a social media profile that looks like someone you know — or someone your age who wants to be friends. After chatting for a while, they might ask you for money, personal information, or ask you to click a strange link. Remember, not everyone online is who they say they are.

Fake Tech Support

Sometimes a scary pop-up appears on your screen saying, “Your computer has a virus! Call this number immediately!” This is a trick. The person on the phone will pretend to be from a real tech company and ask for money to “fix” a problem that does not exist. Real tech companies do not warn you about viruses through pop-up ads.

How Scammers Try to Trick You

Scammers are good at playing with your feelings. They want you to react quickly before you have time to think. Here are some tricks they use:

• Fear: They might say your account will be deleted, your parents are in trouble, or you did something illegal.
• Excitement: They promise amazing prizes, free gifts, or special deals that only last for a few minutes.
• Curiosity: They might send you a message that says, “Is this you in this video?” or “Someone is talking about you online.”
• Pretending to Be a Friend: They might hack a friend’s account and message you saying, “I’m stuck, can you send me money?”

How to Spot a Scam

Scams can be hard to spot, but there are some common warning signs:

• Urgent Messages: They use words like “URGENT,” “IMMEDIATE,” or “ACT NOW” to rush you. Real companies rarely demand instant action.
• Spelling Mistakes: Many scams have bad spelling or grammar that a real company would not have.
• Strange Email Addresses: A message might say it’s from “Amazon,” but the actual email address is something like amazon-support123@randommail.com instead of @amazon.com.
• Requests for Personal Information: Real companies will never ask for your password, credit card number, or home address through an email or message.
• Requests for Money or Gift Cards: If someone asks you to send money, especially through gift cards, it is almost certainly a scam.
• Strange Links: If you hover your mouse over a link (without clicking!), look at the web address that appears at the bottom of your screen. If it looks different from the real company’s website, it’s probably a scam!

What to Do

If you think you’ve found a scam, follow these steps:

1. Stop: Do not click on any links, do not open any attachments, and do not reply to the message.
2. Check: Ask yourself if the message is trying to scare you or excite you. Does it feel rushed? That is a red flag.
3. Tell: Show the message to a parent, teacher, or another trusted adult right away. They can help you figure out if it’s real or a trick.
4. Report: If the message is on a game or social media app, use the “Report” button to let the company know about the scammer.
5. Block: Block the sender so they cannot contact you again.

If you accidentally clicked a suspicious link, don’t panic! Tell an adult right away so they can help you change your password and check that your device is safe.

Did you know?

• The name “Phishing”: The name comes from the idea of “fishing” for information. The “ph” is a way to show that it’s a computer-related term, like “phone” or “photo.”
• Millions of Attacks: Every day, millions of phishing emails are sent out to people all over the world!
• It’s Not Personal: Most scammers don’t even know who they’re sending their messages to. They just send them to thousands of people at once and hope that a few people will be tricked.
• The First Phishing Scam: The very first known phishing attack happened in 1996, when scammers sent fake emails pretending to be from AOL, asking people for their passwords!

Check Your Knowledge

1. What is “phishing”?
2. Name two emotional tricks scammers use to make people fall for scams.
3. What are three warning signs that a message might be a scam?
4. What are the first two things you should do if you receive a message that looks like a scam?
5. True or False: Real companies will sometimes ask for your password through an email to keep your account safe.