--- title: What is phishing and how can you prevent it? description: Phishing is an online scam. Find out everything you need to know about all the different forms of phishing and how to protect yourself from these attacks. image: https://www.smartlockr.io/hubfs/what%20is%20phishing.webp --- [![Smartlockr logo](https://www.smartlockr.io/hubfs/Smartlockr-logo.png) ](https://www.smartlockr.io/en?hsLang=en) - Product - [Product overview ](https://www.smartlockr.io/en/product?hsLang=en) - [Integrations ](https://www.smartlockr.io/en/integrations?hsLang=en) - Customers - [Case studies ](https://www.smartlockr.io/en/blog/tag/casestudy) - Team - [Management ](https://www.smartlockr.io/en/teams/management?hsLang=en) - [IT specialist ](https://www.smartlockr.io/en/teams/it-specialist?hsLang=en) - [CISO ](https://www.smartlockr.io/en/teams/ciso?hsLang=en) - [End user ](https://www.smartlockr.io/en/teams/end-user?hsLang=en) - Branches - [Healthcare ](https://www.smartlockr.io/en/branches/secure-email-healthcare?hsLang=en) - [Municipalities ](https://www.smartlockr.io/en/branches/secure-email-municipalities?hsLang=en) - [Finance ](https://www.smartlockr.io/en/branches/secure-email-financial-services?hsLang=en) - [Legal ](https://www.smartlockr.io/en/branches/secure-email-legal-industry?hsLang=en) - [Education ](https://www.smartlockr.io/en/branches/secure-email-education?hsLang=en) - [Recruitment ](https://www.smartlockr.io/en/branches/secure-email-recruiters?hsLang=en) - [Housing associations ](https://www.smartlockr.io/en/branches/secure-email-housing-associations?hsLang=en) - [Pricing ](https://www.smartlockr.io/en/pricing?hsLang=en) - Resources - [Blog ](https://www.smartlockr.io/en/blog) - [Guides ](https://www.smartlockr.io/en/resources?hsLang=en#guides) - [Webinars ](https://www.smartlockr.io/en/resources?hsLang=en#webinars) - [Videos ](https://www.smartlockr.io/en/resources?hsLang=en#videos) - [Partners ](https://www.smartlockr.io/en/partners?hsLang=en) - Company - [Contact ](https://www.smartlockr.io/en/contact?hsLang=en) - [Support ](https://support.smartlockr.io/hc/en-us?hsLang=en) - [Request more licenses ](https://www.smartlockr.io/en/request-more-licenses?hsLang=en) - [Who we are ](https://www.smartlockr.io/en/about-us?hsLang=en) - [Jobs ](https://www.smartlockr.io/en/careers?hsLang=en) [![Free Consultation](https://no-cache.hubspot.com/cta/default/6122972/846d7346-3e53-4811-b976-8a3dd0a3f9ee.png)](https://cta-redirect.hubspot.com/cta/redirect/6122972/846d7346-3e53-4811-b976-8a3dd0a3f9ee) # What is phishing and how can you prevent it? [ Elin Jansson ](https://www.smartlockr.io/en/blog/author/elin-jansson) Feb 20, 2023 --- ![What is phishing and how can you prevent it?](https://www.smartlockr.io/hubfs/what%20is%20phishing.webp) Phishing is a type of online scam, typically sent via email. The purpose is to gain access to sensitive information or money. The scammers do this by pretending to be a legitimate sender. For example, your boss, your bank, the post office or someone close to you.  Phishing has been around for a long time and the most famous example is probably the 'Nigerian prince' of the 1990s. Since then, this form of fraud has become increasingly sophisticated, which can make it quite tricky to identify a phishing attack. The typical phishing email asks for personal details, a payment or includes a link/file with malware. Phishing examples: - The sender pretends to be a logistics company (like DHL or UPS). The message states that they are unable to deliver your parcel and asks you to update your delivery details by clicking on a link. - The sender claims to be your bank and asks you to urgently update your login details. - The sender claims to be Paypal and states that you need to update your credit card details. ![Examples of phishing](https://www.smartlockr.io/hs-fs/hubfs/Exempel%20pa%20phishing.webp?width=800&height=400&name=Exempel%20pa%20phishing.webp) *Phishing is a type of fraud that involves gaining access to sensitive information or money.* [Read about 5 phishing mistakes all organizations do and how to prevent them. ](https://www.smartlockr.io/en/blog/phishing-mistakes-and-how-to-prevent-them?hsLang=en)   ## Different types of phishing Phishing comes in different forms. That is why we have created this handy list for you! Here you can learn all you need to know about phishing. Read about some of the most common types of phishing scams and what they may look like below. In addition, we have provided you with some handy tips on how to recognize and protect yourself against a phishing attempt. - [What is spear phishing?](https://www.smartlockr.io/en/blog/phishing#Spear-phishing) - [What is smishing?](https://www.smartlockr.io/en/blog/phishing#Smishing) - [What is vishing?](https://www.smartlockr.io/en/blog/phishing#Vishing) - [Why is phishing so effective?](https://www.smartlockr.io/en/blog/phishing#why-phishing-effective) - [How to prevent phishing attacks](https://www.smartlockr.io/en/blog/phishing#how-to-prevent-phishing) - [How to identify phishing emails](https://www.smartlockr.io/en/blog/phishing#identify-phishing) ### What is spear phishing? Spear phishing is a form of phishing attack that targets one person, or a small group of people. The victim is typically a key stakeholder within a company, like someone in the finance department, the HR manager or an IT expert. To trick these people, the attacker pretends to be someone high up in a company, such as a CEO or the victim's direct manager. Spear phishing vs phishing The difference between spear phishing and traditional phishing lies in the number of recipients. Regular phishing emails are sent to a huge amount of people. The attackers simply throw out as many hooks as they can. Spear phishing is much more personal, and the victim is addressed by name. It is also common that scammers target the CEO or the management within a company. This kind of spear phishing is called whaling. Spear phishing examples: - The attacker pretends to be the company's CEO and asks a person in the finance department to transfer a large sum of money. This is urgent and much is at stake if it is not done within a short amount of time. - The attacker is impersonating a CISO and manages to trick someone in the IT-department to give out their login to important systems. - The attacker pretends to be part of the IT department and asks you to click on a link to upgrade your software. In reality the link includes malware. ![Spear phishing is a targeted attack](https://www.smartlockr.io/hs-fs/hubfs/Spear%20phishing.webp?width=800&height=400&name=Spear%20phishing.webp) *Spear phishing targets one person or a small group of people. * ### What is smishing? Smishing is short for SMS phishing. Just as it sounds, it is a form of phishing sent via text messages. The aim is to gain access to your [personal data ](https://www.smartlockr.io/en/blog/what-is-personal-data-and-secure-email?hsLang=en)or to get money. As we initially stated, phishing attacks are typically being sent by email. But other forms like text messages and phone calls are becoming more common. (More on telephone phishing later). Just as in traditional phishing, the attacker pretends to be a trusted sender such as your bank, your boss, the tax authorities and so on. Common examples of smishing messages: - Suspicious activity or login attempts have been detected on your account. - There is a problem with your account or payment information. - You need to confirm personal information. - You need to click on a link to make a payment. - You have received a discount code or coupon. Click here to claim it. - You have won a prize and you need to claim it.     ### What is vishing? Vishing is when scammers call you and try to get personal information over the phone. This could be your account number, password or personal information. Vishing stands for voice phishing. This type of attack can be difficult to recognize as it is hard to verify the identity of the person you are talking to. If someone says they are calling from the bank, your first thought might not be that they are lying to you. Vishing examples: - The attacker states that they are calling from your bank to inform you that there is a problem with your account or credit card. - The attacker states that they are calling from a government agency and ask you to confirm personal details. - The attacker states that they are calling from the customer service department of a well-known company and need your details to sort out an invoice. ![Vishing can be hard to detect](https://www.smartlockr.io/hs-fs/hubfs/vishing.webp?width=800&height=400&name=vishing.webp) *Vishing attacks can be difficult to catch as it’s hard to confirm the identity of the person you are talking to. * ## Why is phishing effective? Most people can identify a traditional phishing attempt. Not clicking on unknown links is basically the first thing you learn about cyber security. Well, that and to not use the same password for every account you own. What makes phishing and smishing so successful is the quantity being sent out. If over 1000 phishing messages are sent out in a day, it only takes a fraction of them to be successful for it to be profitable for the attackers to continue.  Instead, spear phishing and vishing rely on the credibility of the people the scammers are impersonating. The victim is more likely to do what they are told because they think they are talking to someone they know or a brand they trust. [Read about which companies and organizations that are extra vulnerable to phishing attacks. ](https://www.smartlockr.io/en/blog/departments-or-companies-soon-become-phishing-targets?hsLang=en)   ## How to prevent phishing attacks The first step is to be aware of the risks and know how to recognize a phishing message or call. Always be critical when someone asks you to make a payment or give out personal information. Using [secure email](https://www.smartlockr.io/en/secure-emailing?hsLang=en) software, such as Smartlockr, will also make you extra alert to phishing messages. By notifying you when you send an email outside of your organization, and by allowing you to confirm recipients and files, you are more aware when receiving suspicious messages. ### How to identify phishing emails There are some handy tricks to recognize a phishing email. Check out our list of what to be aware of below: - The email address does not match the sender. For example, you have received a message from DHL but the email address is 'dfg123@gmail.com'. -  You are asked to do something urgently. - You are asked to provide personal or sensitive information or to make a payment. - The message contains many spelling and grammatical errors. - The domain name is not correct or does not appear to be official (extra numbers or letters are added). For example, you have received an e-mail from [customerservice@paypal1.com ](mailto:customerservice@paypal1.com) - Beware of clicking on links and attachments. By hovering with your mouse over a link (without clicking it) you can display where it leads. Does it look suspicious? Send it to your CISO! ![Phishing-email-EN](https://www.smartlockr.io/hs-fs/hubfs/Phishing-email-EN.webp?width=752&height=526&name=Phishing-email-EN.webp) Are you curious to learn more about sending secure email? Download our e-book below.   [![Prevent data breaches](https://no-cache.hubspot.com/cta/default/6122972/ef3f3dfa-44a8-4b12-a27d-49702bff6d54.png)](https://cta-redirect.hubspot.com/cta/redirect/6122972/ef3f3dfa-44a8-4b12-a27d-49702bff6d54) [Phishing](https://www.smartlockr.io/en/blog/tag/phishing) [![secure communication](https://www.smartlockr.io/hs-fs/hubfs/secure-communication-bp.png?width=336&name=secure-communication-bp.png)](https://www.smartlockr.eu/en/request-demo?hsLang=en)   ### Whitepapers - [Is it safe to store data in a US-based Cloud provider?](https://www.smartlockr.eu/en/whitepaper-is-it-safe-store-data-us-cloud-provider?hsLang=en) - [Good cop, bot cop: the truth about AI, ML and your privacy](https://www.smartlockr.eu/en/whitepaper-ai-ml-and-data-privacy?hsLang=en) - [The 8 things you can expect from a partnership with Smartlockr](https://www.smartlockr.eu/en/whitepaper-things-you-can-expect-from-partnetship-smartlockr?hsLang=en) - [How to choose the right secure email solution?](https://www.smartlockr.eu/en/how-to-choose-the-right-secure-email-solution-whitepaper?hsLang=en) - [Keep your organization free of data leaks](https://www.smartlockr.eu/en/keep-organization-free-of-data-leaks?hsLang=en) - [Smartlockr & Workspace 365: Prevent data breaches, work and communicate more securely](https://www.smartlockr.eu/en/safe-emailing-and-safe-workplace?hsLang=en) ### Popular Post [ Oops, I sent an important email to the wrong recipient. What now? ](https://www.smartlockr.io/en/blog/sent-email-to-wrong-recipient-what-now?hsLang=en) [ Is Microsoft 365 GDPR-compliant? Spoiler alert: no ](https://www.smartlockr.io/en/blog/is-microsoft-365-gdpr-compliant?hsLang=en) [ Recall sent emails to protect data: block emails, files and recipients ](https://www.smartlockr.io/en/blog/recall-sent-email?hsLang=en) [ Why Pentesting is a must for banks and financial services ](https://www.smartlockr.io/en/blog/why-pentesting-is-a-must-for-banks-and-financial-services?hsLang=en) [ Preventing misdirected emails with files and recipients confirmation ](https://www.smartlockr.io/en/blog/confirmation-on-files-and-recipients?hsLang=en) ## Similar posts ### [5 phishing mistakes every organization makes and how to prevent them](https://www.smartlockr.io/en/blog/phishing-mistakes-and-how-to-prevent-them?hsLang=en) Using the five most common phishing mistakes made by organizations, we will teach you how to prevent a phishing attack. Read on to stay protected! Phishing Jul 28, 2022 ### [These 5 departments/companies could soon become a phishing target](https://www.smartlockr.io/en/blog/departments-or-companies-soon-become-phishing-targets?hsLang=en) Anyone can fall victim to a phishing attack, but these 5 teams and companies should be extra careful, as they are fast becoming a favorite phishing... Phishing Jul 22, 2022 [![Smartlockr logo](https://www.smartlockr.io/hubfs/smartlockr-logo2.png) ](https://www.smartlockr.io/nl/?hsLang=en) **Netherlands: **H.J.E Wenckebachweg 123 1096 AM, Amsterdam Kvk: 61781614 BTW-nr: NL854485685B01   ### Contact - Netherlands: +31 (0) 20 244 03 50 - Sweden: +46 81 211 29 68 ### Smartlockr - [Terms & Conditions](https://www.smartlockr.io/en/general-terms-and-conditions-smartlockr?hsLang=en) - [Privacy Statement](https://www.smartlockr.io/en/privacy-statement?hsLang=en) - [Smartlockr A-Z](https://www.smartlockr.io/en/smartlockr-a-z?hsLang=en) - [Status of our services](https://www.smartlockr.io/en/status-of-our-services?hsLang=en) ### Support - [Help Center](https://support.smartlockr.io/hc/en-us?hsLang=en) - [FAQ](https://support.smartlockr.io/hc/en-us/categories/5354862458012-FAQ-and-information?hsLang=en) - [Need help? Download TeamViewer](https://get.teamviewer.com/smartlockr) © 2026 Smartlockr All rights reserved ![BC Certified logo_ISO 27001-2022 RVA_ENG](https://www.smartlockr.io/hs-fs/hubfs/BC%20Certified%20logo_ISO%2027001-2022%20RVA_ENG.jpg?width=303&height=80&name=BC%20Certified%20logo_ISO%2027001-2022%20RVA_ENG.jpg) ![NEN 7510 certificate Smartlockr](https://www.smartlockr.io/hs-fs/hubfs/BC-Certified-logo_NEN7510-1-2017_RVA_ENG.png?width=320&height=85&name=BC-Certified-logo_NEN7510-1-2017_RVA_ENG.png) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Elin Jansson", "url" : "https://www.smartlockr.io/en/blog/author/elin-jansson" }, "dateModified" : "2023-04-06T07:06:55.740Z", "datePublished" : "2023-02-20T16:09:29.000Z", "headline" : "What is phishing and how can you prevent it?", "image" : [ "https://www.smartlockr.io/hubfs/what%20is%20phishing.webp" ], "mainEntityOfPage" : { "@id" : "https://www.smartlockr.io/en/blog/phishing", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.smartlockr.io/hubfs/SL-logo@3x.png" }, "name" : "Smartlockr" } } ``` ```json { "@context" : "http://schema.org", "@type" : "Organization", "address" : { "@type" : "PostalAddress", "addressCountry" : "", "addressLocality" : "Amsterdam", "addressRegion" : "Noord Holland", "postalCode" : "", "streetAddress" : "H.J.E. Wenckebachweg 123 " }, "alternateName" : "AttachingIT", "areaServed" : { "@type" : "GeoCircle", "geoMidpoint" : { "@type" : "GeoCoordinates", "latitude" : "52.336690", "longitude" : "4.929430" }, "geoRadius" : "150 km" }, "description" : "Secure email and file sharing for businesses that handle privacy sensitive data", "email" : "sales@smartlockr.eu", "image" : "https://www.smartlockr.io/hubfs/homepage-en.png", "logo" : "https://www.smartlockr.io/hubfs/Smartlockr-logo.png", "mainEntityOfPage" : { "@id" : "https://www.smartlockr.io/en/blog/phishing", "@type" : "WebPage", "description" : "Phishing is an online scam. Find out everything you need to know about all the different forms of phishing and how to protect yourself from these attacks." }, "name" : "Smartlockr", "sameAs" : [ "https://www.linkedin.com/company/smartlockr/", "https://www.youtube.com/@smartlockr9354", "https://www.instagram.com/smartlockr/" ], "telephone" : "+31 (0) 20 244 03 50", "url" : "https://www.smartlockr.io/" } ``` ```json { "@context" : "https://schema.org/", "@type" : "WebSite", "description" : "Secure email and file sharing for businesses that handle privacy sensitive data", "name" : "Smartlockr", "potentialAction" : { "@type" : "SearchAction", "query-input" : "required name=search_term_string", "target" : "https://www.smartlockr.io/hs-search-results{search_term_string}" }, "url" : "https://www.smartlockr.io/" } ```