It seems that any time I open my email, phishing emails await in my inbox. I know I am not the only one, and these are the phishing scams you should watch out for every day.
First, let me say this: phishing emails are becoming increasingly cunning and easier to miss. They are incorporating new and unique disguises and tried-and-true methods to dupe unsuspecting victims from your grandma who just wanted to buy and send you something nice to businesses large and small.
1Black Friday/Holiday Spam
It’s that time of the year again! Holiday deals are popping up, and scammers are seizing this opportunity to flood inboxes with fraudulent, too-good-to-be-true offers.
And sadly, most of the time, they are.
These emails usually mimic legitimate retail promotions from places like Victoria’s Secret, Kohl’s, Walmart, and Amazon. As soon as you click on the coupon or follow the link, however, your information is already being captured. It is even worse if you put in your sensitive information, such as your phone number or, even worse, your credit card info.
To avoid falling prey to thesephishing scams, scrutinize promotional emails closely and verify any and all links by heading to the retailer’s official website outside the email.
2Phishing via QR Codes (Quishing)
QR codes were created for convenience and are super simple to use, but even they have now entered the phishing landscape. Cybercriminals can easily use them to redirect victims to malicious websites—scan them once, and bam, your info is gone in what’s known as a quishing attack.
If you want to keep yourself safe, alwayscheck if a QR code is safe to scan. This includes QR codes out in the wild as scammers have been known to cover up ‘legitimate’ codes with their own, so look for signs of tampering like peeled edges or a different appearance.
3Phishing Through Collaborative Tools
Few of us expect collaboration tools and platforms like Slack or Teams to be a place for phishing, but attackers exploit them to fish for sensitive information. These attempts may come disguised as urgent requests from your “boss” under an odd name or unfamiliar links from people posing as colleagues.
If you want to avoid these attacks, your best bet is always to remain skeptical of unusual requests. Verify its authenticity through alternative channels if and where you can.
4Increased Use of AI and Deepfakes
AI and deep fakes being used to steal your information might seem like a made-up thing of the future, something you’d see in a sci-fi show. The truth is that artificial intelligence is used to create highly convincing phishing emails, photos, and videos.
This sophisticated approach uses things like emails that appear unnaturally polished or media content that seems slightly… off. It uses gestures that don’t look “right” or words that, while making sense, just don’t appear natural. Look out for subtle language and media presentation inconsistencies as signs that might betray them as phishing scams.
5Offer/Fundraising/Discount Scams
False promotions or fundraising appeals are more common during such times, namely, around elections and after major incidents like the recent hurricanes. The common thread between these are that they tap into our emotions, or the urgency of a situation. You’ll see suspicious URLs and requests for payment or sensitive data—tell-tale signs of scams. Always confirm the legitimacy of the charity or promotion before engaging.
6Tax Scams
Phishing emails masquerading as communications from the IRS or other tax agencies are usually the most prevalent around tax season. But what you may not realize, at least if you aren’t a business owner, is that business taxes can be paid quarterly. This means fall is the perfect time for business tax-related scams.
These emails request immediate payment or personal information. It’s important that you verify any communication with tax authorities through official websites or direct contact methods.
With these common and developing threats in mind, your thoughts should turn to safeguarding against phishing attempts. This requires a blend of vigilance and proactive measures, including but not limited to:
Phishing emails are not merely spam; they are calculated, evolving threats that require constant awareness and adaptation from everyone involved, especially those targeted. Luckily, by understanding the latest trends and being proactive, you should be able to keep yourself safe and sound even as your inbox gets flooded.
