How to Prevent Phishing Scams

Step 1. Know How to Detect Phishing Scams

Scam artists are becoming more ingenious in doing their phishing e-mail messages and pop-up windows so they often include official-looking logos from real organizations and other identifying information taken directly from legitimate Web sites. Therefore you have to learn how to detect emails for a possible phishing scam. The following are examples of email messages that you should look out for:

• "Verify your account." Businesses should not ask you to send passwords, login names, Social Security numbers, or other personal information through e-mail. Be suspicious of a message that asks for personal information even if the request looks legitimate.

  If you receive an e-mail from Microsoft asking you to update your credit card information, do not respond to this phishing scam. To learn more, read Fraudulent e-mail sent to Microsoft customers.

• "If you don't respond within 48 hours, your account will be closed." Phishing e-mail may be polite and accommodating in tone, but these messages often convey a sense of urgency so that you'll respond immediately without thinking. Phishing e-mail may threaten to close or suspend your account or may even say your response is required because your account may have been compromised.
• "Dear Valued Customer." Phishing e-mail messages are usually sent out in bulk and do not contain your first or last name. Although, it is possible that con artists have this information. Most legitimate companies (but not all) should address you by first and last name.
• "Click the link below to gain access to your account." HTML-formatted messages can contain links or forms that you can fill out just as you'd fill out a form on a Web site. The links that you are urged to click may contain all or part of a real company's name and are usually "masked," meaning that the link you see does not take you to that address but somewhere different, usually a phony Web site. Notice in the following example that resting the mouse pointer on the link reveals the real Web address, as shown in the box with the yellow background. The string of cryptic numbers looks nothing like the company's Web address, which is a suspicious sign.

Step 2. Spread the Word

Friends and family may not be aware of new phishing scams, or even of phishing at all. Be sure to inform them - especially keep in mind any new Internet users you may know. Click here to tell a friend about this site and help spread awareness.

Step 3. Stay Informed

Sign up for our free newsletter and receive phishing news, updates on legislation, and technological developments. You can also visit our resources page for links to other informative websites regarding phishing, identity theft, and internet fraud.

Step 4. Take Action

One of the best and easiest ways you can fight phishing is to report suspicious emails to the proper authorities: forward the phishy email to the companies the email is spoofing, along with organizations that archive and investigate phishing scams. For details on how to do this, click here.

You can also help the fight against phishing by supporting the Anti-phishing Act of 2005. This bill was introduced by Senator Patrick Leahy, and, if passed, will outlaw phishing.  The bill would also give law enforcement officials another tool to fight phishing scams by allowing prosecution before the actual fraud takes place. Anyone who emails or creates a legitimate-seeming website - copycat or not - with the intent to carry on any activity which would be a federal or state crime of fraud or identity theft could face prison time of up to five years and fines of up to $250,000.

Click Here to get a copy of a sample letter to mail to your representative.

Step 4. Contact your Government Officials

You can visit Congress.org to get in touch with elected leaders in Congress, the White House, and state legislatures. The site offers all the contact information you need to phone, fax, email, or mail your representative.

One of the most effective ways of raising your concerns to government officials is simply picking up the phone and calling. Ask to be connected directly to the legislator's aide. Remember to give the full name of any legislation that you are asking your official to support, and to also briefly describe the legislation. This is important as it will help avoid confusing similar bills (like SPYACT and Anti-Phishing Act of 2005.) Faxing. emailing, or mailing are also very effective ways to get in touch.

For further reference, check out these other websites about phishing and anti-phishing action; addressing fraud and identity theft; and computer security software. If you'd like to recommend a site, please contact us.

About Phishing and Anti-Phishing Organizations

• AntiPhishing.org
• Anti-Phishing.info
• CodeFish.Info
• DigitalPhish.org
• Department of Justice's recent whitepaper "Special Report on Phishing" antiphishing.org/DOJ_Special_Report_On_Phishing_Mar04.pdf
• FTC.gov/bcp/conline/pubs/alerts/phishingalrt.htm.
• Millersmiles.co.uk
• PhishingInfo.org
• PhishReport.net
• Privacyrights.org/ar/phishing.htm

About Fraud and ID Theft

• consumer.gov/idtheft
• fightidentitytheft.com
• FraudWatchInternational.com
• identity-theft-help.us
• identitytheft.org
• idtheftcenter.org
• ifccfbi.gov
• privacyrights.org
• Staysafeonline.info
• USdoj.gov/criminal/fraud/idtheft.html
• ftc.gov/bcp/conline/pubs/credit/affidavit.pdf

Corporate Anti-Fraud Policies

• American Express https://www124.americanexpress.com/cards/loyalty.do?page=FraudCenter.idtheftassist
• APACS UK http://www.apacs.org.uk/about_apacs/htm_files/emailscams.htm
• Citibank http://www.citi.com/domain/spoof/report_abuse.htm
• Discover http://www.discovercard.com/discover/data/account/securityprivacy/emailsmarts.shtml
• eBay and PayPal http://pages.ebay.com/help/policies/id-account-theft-spoof.html
• MasterCard http://www.mastercard.com/education/fraud/fraud.html
• NatWest Bank http://www.natwest.com/hottopics/index.asp?navid=EMAILHOAX
• Washington Mutual http://www.wamu.com/personal/welcome/security.htm
• Wells Fargo Bank http://www.wellsfargo.com/jump/fraud_prevention.jhtml
• US Bank http://www.usbank.com/cgi_w/cfm/promo/personal/fraud_email_info_and_help.cfm
• Visa http://www.usa.visa.com/personal/security/id_theft/index.html

Operating System and Browser Updates

• Apple.com
• Microsoft.com/security
• Wp.Netscape.com/security
• Windowsupdate.Microsoft.com