Don't fall for phishing scams while you work, shop or chat online

One of the main virtual tactics to exploit people is phishing. Like the word suggests, it is electronic or online communication you receive that baits you into thinking you are dealing with a trusted person or business. The message you receive lures you into clicking on links and providing personal and financial information, like usernames or banking details, that could lead to theft and other fraud against your business or on your personal accounts. 

Be aware of the latest scams that may cross your screen  

Cyber-criminals are skilled at playing on emotions and knowing which buttons to push to get what they need through the various types of cyber-attacks and phishing scams. So if an email or any other communication makes you feel anxious, fearful or happy, be cautious. You also have to understand how these scams can affect you when it comes to banking and other Discovery services.

The threat is very real and there has been an increase in scams linked to COVID-19 in recent months − including a scam that offers financial relief through the file-sharing service, Dropbox, as well as a false WhatsApp group under the name of Discovery Invest. Read more about these and other recent scams here.

Steps to not taking the phishing bait

Hackers are upping their game and phishing emails look more real. Never think you cannot be fooled by phishing or other online scams − these scams are becoming more sophisticated and will increase even further in this time.

When it comes to your online security, don't rely only on your company's IT security measures to keep your information safe - protecting personal and business information starts with you. Remember, it is extremely important that you:

1. Never store your login credentials on your browser.
2. Never click on links or download attachments you weren't expecting. Never do something that you would not normally be asked to do over email.
3. Never share you OTP and PIN via a call. We will never call you to ask for your personal information.
4. Check the domain and who sent the email. Remember, even if the domain is from your organisation, small changes could mean the email goes to another domain.
5. Check the sender's information, including their email signature and role.
6. Look out for spelling errors, grammar errors, and odd sentence structures.
7. Be suspicious if they want you to act as soon as possible. When in doubt, always call the sender to confirm the validity of the email.
8. Always let your IT department know when you receive something suspicious.
9. Protect your devices, including tablets and cellphones, by installing anti-malware (short for malicious software) and antivirus software.

The best protection is to always check everything. Online communication and services are convenient for us, but it's just as convenient for fraudsters. So remember that online scammers are everywhere and can turn every situation into an opportunity to get your valuable business and personal information.