Phishing.

In plain English

Phishing is a trick where a scammer poses as your bank, a delivery service, or another trusted name to get you to reveal a password, card number, or login code. The message usually creates urgency, like a fake fraud alert or a frozen-account warning, and points you to a fake website or phone number. If you type your details in, the scammer captures them and can drain your accounts. The defense is to never use links or numbers from a surprise message, and instead go straight to the company using a number or address you already trust.

01Why it matters

One rushed click can hand over your bank login and let a stranger move your money in minutes. Recognizing the pressure tactic is what stops you before any damage is done.

02The math, step by step

You get a text saying your bank account is locked and to tap a link to verify. Instead of tapping, you open your banking app directly or call the number on the back of your card. The account is fine, and the text was a scam. If you did enter your details, your first steps are to change your password, turn on two-factor authentication, and call your bank. Under Reg E, report any unauthorized electronic transfers to your bank promptly to limit your liability.

03What this is NOT

04Receipts

Every figure on this page is sourced to a primary document. Tap to open the original.