How to prevent phishing and smishing attacks: learn best practices
Posted :
Updated :
Learn how to prevent phishing attacks and protect yourself and your policies from phishing and smishing scams with these essential safety tips.
Understanding phishing and smishing attacks
Phishing and smishing are cyber threats that target sensitive personal information. Phishing uses fraudulent emails or websites to obtain confidential details, such as passwords or financial data. Smishing uses text messages to prompt victims to click on harmful links or share personal information. Both methods rely on deception to exploit users.
Why phishing and smishing are dangerous
Phishing and smishing attacks are serious threats, especially to your policies and financial security. If you fall for these scams, someone could get into your personal or financial information. This might lead to identity theft, empty bank accounts, or problems with your insurance policies. These attacks can also put your Manulife account at risk, making it easier for criminals to change your policy details or commit fraud. The impact can be serious, both for your finances and your long-term security.
Here are a few tips to help protect yourself online:
1. Be wary of messages and emails sent to your devices.
Never share your private information outside of secure channels, especially when it involves providing account numbers, credit card details, personal data, personal identification numbers, or answers to common verification questions like your mother's maiden name. Cybercriminals may attempt to contact you via phone calls, SMS, or emails, so exercise caution. If you are unsure about the legitimacy or security of the source, do not respond and avoid further communication. For more tips on staying safe from phishing, you can check out the Anti-Phishing Working Group (APWG) or look at Google’s Safe Browsing report. These resources offer helpful advice on how to spot and avoid phishing scams.
2. Do not access or download suspicious content.
One common tactic used by cybercriminals is to direct you to malicious websites via links or encourage you to download suspicious files that can make your devices vulnerable to hacking. To protect yourself, always verify the source and avoid downloading content from untrusted senders or opening suspicious attachments especially those with “.exe” at the end of the file name.
3. Never share your One-Time Password (OTP).
An OTP is used as an authentication tool for logging into your online accounts or making an online transaction, so your service providers know it’s really you who’s trying to access or transact with your account. The number one rule for OTPs is to never share them with anyone, as divulging them to others may give them access to your private information and secure accounts, which could lead to fraud and scam incidents. According to the Cybercrime Prevention Act of 2012 (Republic Act No. 10175) in the Philippines, sharing sensitive information like OTPs can make you vulnerable to cybercrime, as it enables unauthorized access to your accounts, putting you at legal and financial risk. Always keep your OTP confidential to protect yourself from such threats.
4. Use strong, unique passwords.
Avoid using the same password for all your accounts to prevent a breach in one account from compromising others. Also, steer clear of easily guessable information like birthdays and common words as passwords. Instead, create unique, complex passwords for your online accounts by combining upper- and lower-case letters, numbers, and special characters. And, same with OTPs, never share your account passwords with anyone.
5. Protect your personal information.
While we share various details on social media, from vacation photos to recent purchases, be cautious about the personal information you post online, particularly your address, phone numbers, and financial data. Avoid sharing sensitive personal information details.
6. Invest in security software.
To safeguard your private and financial information when you go online, invest in anti-malware and antivirus software. These tools will automatically block suspicious websites and provide an additional layer of security. Alongside this, ensure that your software is regularly updated to prevent breaches and security vulnerabilities.
What to do immediately after a phishing attack?
If you think you might be a victim of a phishing or smishing attack, act fast to limit any harm. Here’s what you can do:
- Contact the institution or service provider
Immediately reach out to your bank, insurance provider (such as Manulife), or any service provider that may have been targeted. Inform them of the potential security breach and ask them to freeze your account or put a hold on any unauthorized transactions.
- Change your passwords
To be safe, update the passwords on any accounts that might be at risk. Make sure your new passwords are strong and different from each other. You can also turn on two-factor authentication for extra protection.
- Report the incident
Let the right authorities know about the phishing or smishing attack. In the Philippines, you can contact the National Bureau of Investigation (NBI) Cybercrime Division or the Philippine National Police (PNP) Anti-Cybercrime Group. The Cybercrime Prevention Act requires quick reporting of online fraud and cybercrimes to help reduce the impact on victims.
- Monitor your accounts and credit
Check your bank and credit accounts often for anything unusual. If you can, get a credit report to make sure no one has opened credit in your name without your permission.
- Educate yourself on phishing attack prevention
Find out about the best ways to avoid phishing attacks and use security tools that can help. Staying up to date is one of the best ways to protect yourself from future threats.
Stay safe online and protect your personal information
Remember that Manulife will never ask you to verify or divulge your personal information, such as your policy number, birthday, contact information, etc., via email links or text messages. If you receive an email or text message from an unofficial or unverified source requesting confidential information, DO NOT ENGAGE. Immediately change your Manulife Online password and report the incident to phdataprivacy@manulife.com.
Staying alert online and protecting your personal information is more important than ever. With threats like phishing and smishing on the rise, following best practices and using security tools can help lower your risk of cyberattacks. Make sure to secure your accounts, use strong and unique passwords, and report anything suspicious right away. Taking these steps helps keep your money and personal data safe in our connected world.
Key takeaways
Phishing and smishing attacks pose significant threats to your security. Here are essential tips to protect yourself:
- Be cautious with emails and messages – Never share sensitive information like account numbers or personal details via email or text from unverified sources.
- Avoid suspicious content - Don’t click on links or open attachments from people you don’t know, especially files that end with .exe.
- Keep your OTP confidential – Never share your One-Time Password (OTP). Sharing it can lead to fraud and unauthorized access.
- Use strong, unique passwords – Create complex, unique passwords for each account and keep them private.
- Guard your personal information – Be mindful of the personal data you share online, especially on social media.
- Invest in security software – Use antivirus and anti-malware software to block phishing attempts and protect your devices.
Stay vigilant and follow these tips to secure your Manulife account and personal information.
Frequently asked questions
Phishing emails usually have warning signs like generic greetings, urgent requests for your information, or strange attachments and links. To protect yourself, check the sender’s email address, watch for spelling or grammar mistakes, and be careful with emails that promise unbelievable deals or threaten immediate action. Don’t click on links in emails you didn’t expect. Type the website address directly into your browser instead.
If you think you’ve been caught by a phishing scam, change your passwords right away and turn on two-factor authentication for your accounts. Let your bank, insurance provider, or other service providers know so they can freeze your accounts and stop any unauthorized activity. Report what happened to the right authorities, such as the NBI Cybercrime Division in the Philippines, and keep an eye on your financial statements for anything unusual.
To keep your business safe from phishing attacks, teach employees how to spot phishing attempts and set up strong email and web security rules. Update your software regularly and use security tools like firewalls and spam filters. Use multi-factor authentication for sensitive accounts, run regular security checks, and make sure your business data is encrypted. Also, have a clear plan for how to respond if a phishing attack happens.
There are several tools you can use to protect yourself from phishing and scams, like antivirus software, email filters, and password managers. Google Safe Browsing and the Anti-Phishing Working Group (APWG) can alert you to risky websites, and your email’s spam filter can block many phishing emails before they reach you.
To block phishing emails from your inbox, use your email service’s spam filters. Mark suspicious emails as spam or junk to help your provider filter out similar messages in the future. You can add extra security by turning on DMARC, which helps prevent others from using your domain. Also, avoid sharing your email address online too often to reduce phishing attempts.
Antivirus software helps find and block dangerous attachments and links in phishing emails, but it can’t stop every phishing attack. These tools protect your computer from malware and fake websites, but staying alert is still your best defense. Use antivirus software together with email filters, strong passwords, multi-factor authentication, and training to reduce your risk of phishing scams.
Want to learn more about how to plan for a better, longer life?
Talk to a financial advisor today!