Every day, cybercriminals send millions of phishing emails, text messages, and fake websites designed to steal personal information, passwords, and money. While phishing scams have become more sophisticated, the good news is that many still contain warning signs that can help you avoid becoming a victim.
What is phishing?
Phishing occurs when a fraudster pretends to be a trusted company, bank, government agency, or even a friend to trick you into providing sensitive information. Their goal may be to steal your online banking credentials, download malware on your device(s), payment card information, Social Security number, or one-time verification codes.
The best defense is knowing what to look for before you click.
Common Phishing Examples
Example 1: The "Urgent Account Alert"
Email Subject: Immediate Action Required: Your Account Will Be Suspended
The message claims there is suspicious activity on your account and directs you to click a link immediately to "verify" your information.
Red Flags:
- Creates a sense of panic or urgency
- Requests personal information
- Includes a link that may lead to a fake website
- Uses generic greetings such as "Dear Customer"
What to Do: Never click the link. Instead, open your banking app or type the institution's official website address directly into your browser.
Example 2: The Fake Package Delivery Notice
Text Message: "Your package delivery is on hold. Click here to update your shipping information."
Many people are expecting deliveries, making these scams especially effective during holiday seasons.
Red Flags:
- Unexpected message about a package
- Suspicious link
- Requests payment or personal information
What to Do: Visit the shipping company's website directly and enter the tracking number if you have one.
Example 3: The Government Impersonation Scam
Email: "You owe unpaid taxes and must submit payment immediately to avoid penalties."
Scammers frequently impersonate the IRS, Social Security Administration, DMV, and other government agencies.
Red Flags:
- Threatens arrest, fines, or legal action
- Demands immediate payment
- Requests payment through gift cards, wire transfers, or cryptocurrency
What to Do: Government agencies typically communicate through official channels and do not demand immediate payment using unconventional methods.
Example 4: The Fake Bank Fraud Alert
Text Message: "Did you authorize a $499 purchase? Reply YES or NO."
If you reply, the scammer may call pretending to be your bank and ask for your online banking password, card number, or verification code.
Red Flags:
- Unexpected fraud alert
- Requests security credentials
- Asks you to share one-time authentication codes
What to Do: Contact your bank directly using the number listed on your debit card or official website.
Example 5: The AI-Powered Impersonation Scam
Today's scammers may use artificial intelligence to create convincing emails, cloned voices, and realistic messages that appear to come from trusted individuals.
You might receive:
- A voicemail that sounds like a family member
- An email that appears professionally written
- A text message that looks identical to a legitimate company communication
Red Flags:
- Requests for money or personal information
- Unusual urgency
- Requests to bypass normal verification processes
What to Do: Pause and verify the request using a known phone number or trusted contact method.
Test Your Phishing Detection Skills
Think you're ready to spot a scam? Try this quick quiz.
Answers at the bottom
Question 1
You receive an email stating:
"Your online banking account has been locked. Click here within 30 minutes to prevent permanent closure."
What is the biggest red flag?
A. The email uses your name
B. It creates urgency to pressure you into acting quickly
C. It mentions online banking
D. The message is short
Question 2
A text message from an unknown number states:
"You have won a $500 gift card. Click here to claim your prize."
What should you do?
A. Click the link immediately
B. Reply asking for details
C. Delete the message and do not engage
D. Forward it to friends
Question 3
You receive a phone call from someone claiming to be from your bank. They ask for the six-digit code that was just sent to your phone.
A. Share the code so they can verify your identity
B. Ignore the request and hang up
C. Provide only part of the code
D. Ask them to call back later
Question 4
Which of the following is the safest way to access your bank's website?
A. Click a link in an email
B. Click a link in a text message
C. Search a random result online
D. Type the website address directly into your browser or use the mobile app
Remember: Pause Before You Click
Phishing attacks succeed because they exploit emotions such as fear, urgency, curiosity, and excitement. Before clicking a link, opening an attachment, or responding to a message, take a moment to pause and ask yourself:
- Was I expecting this message?
- Is the sender legitimate?
- Am I being pressured to act immediately?
- Is someone asking for personal information, passwords, or security codes?
- Can I verify this request through another channel?
A few extra seconds of caution can help protect your personal information and financial accounts.
Important Reminder: The Harbor Bank of Maryland will never ask for your online banking password, PIN, or one-time authentication codes by email, text message, or phone. If something doesn't feel right, stop, verify, and contact the bank directly through official channels.
To report fraud or suspicious activity, you can contact us at:
Lost or stolen debit card: 800-555-5555, 24/7
Lost or stolen credit card: 866-555-5555, 24/7
Fraud claims: 800-500-5555, Monday–Friday, 8:00 a.m.–9:00 p.m. ET; Saturday, 9:00 a.m.–3:00 p.m. ET
Quiz Answers:
Answer 1: B
Answer 2: C
Answer 3: B
Answer 4: D