Phishing on the Rise: Tips for Identifying and Avoiding Online Scams

Nowadays, phishing has become one of the main digital threats faced by Internet users and organizations.

What is phishing and why is it on the rise?

Phishing is a fraud technique that uses fake communications, such as emails, text messages or cloned websites, to trick victims into obtaining confidential information.

According to a recent report by Check Point Research, there was a 48% increase in phishing attacks globally in 2023, driven by the popularization of remote work and the increasing digitalization of services.

These scams stand out for their ability to deceive both individuals and large companies.

Phishing campaigns are often carried out on a large scale, but there are also highly personalized attacks such as spear phishing.

This type of targeted approach uses specific information about the victim to increase the chances of success.

Additionally, cybercriminals exploit global events and crises to lure victims.

For example, phishing campaigns during the COVID-19 pandemic have taken advantage of fear and misinformation to spread malicious links and steal personal data.

Main types of phishing scams

To protect yourself, it is essential to know the different forms that phishing can take.

Here are the most common ones:

Email Phishing:

Scams sent to inboxes, often disguised as messages from banks, companies or online services.

Phishing emails often contain malicious links or file attachments that, when clicked, install malware on the victim's device.

Another common aspect is the use of logos and formats that imitate trusted organizations, making it difficult to identify their authenticity.

A recent example involved messages allegedly sent by popular streaming services warning of issues with a user's account and asking them to update their payment details.

Scams like this have fooled thousands of people around the world.

Smishing (via SMS)

Use text messages with malicious links, asking the user to click or provide personal information.

This type of attack has gained ground with the popularization of messaging applications.

Scammers send messages that seem urgent, such as promotions or pending charges, encouraging victims to act quickly.

Another example is messages that pretend to be from carriers, asking for payment of fees to release a delivery.

These scams exploit the increase in online shopping, especially on festive dates like Black Friday.

Vishing (via phone calls)

Scammers call pretending to be representatives of companies or financial institutions.

Calls may include automated recordings or even live agents, who use manipulation techniques to obtain sensitive data.

Banks and service providers have reinforced that they never ask for passwords or authentication codes over the phone.

Vishing scams have become more sophisticated, including calls that even mimic the caller ID of legitimate institutions, making it essential to verify contacts directly with the company.

Fake websites

Pages that mimic well-known services, such as e-commerce platforms and banks, to capture user data.

Criminals create websites that are nearly identical to the real ones, using similar URLs to trick victims.

These sites often ask for login information or credit card details.

To avoid falling for these scams, it is essential to check the website's security, such as the presence of a security padlock in the browser and the correct spelling of the domain.

Spear phishing

A more targeted attack that uses personal or business information to trick specific victims.

This type of attack is often used against senior executives or critical sectors within companies, where the impact of information theft can be devastating.

Scammers do detailed research to make their messages more convincing.

Companies can mitigate this risk by promoting internal training and implementing stricter security policies, such as restricting information shared on social networks.

+ 7 Essential Tools for Web Developers

How to identify phishing attempts?

Recognizing a scam can make all the difference. Here are some warning signs:

Grammatical and typing errors: Fraudulent messages often contain errors.

Many malicious emails are machine translated or written by people who are not fluent in the target language.

These errors can be a clear clue that something is wrong, especially in supposedly formal communications.

Suspicious links: Always check the URL before clicking. Scams often use addresses that imitate real websites.

A good practice is to hover your mouse over the link to view the full address before clicking on it.

Link checking tools can also help identify malicious sites.

Exaggerated urgency: Messages that try to rush you are usually suspicious.

The tactic of creating a sense of urgency is used to prevent the victim from calmly analyzing the situation.

Always be wary of immediate deadlines or threats of serious consequences.

Requests for confidential information: Serious companies do not ask for personal data via email or message.

If you receive such a request, please contact the company directly through official channels to confirm the authenticity of the request.

Unusual sender addresses: Check if the sender has an authentic domain.

Domains that contain strange characters or small spelling mistakes are a clear sign of a scam.

Also be wary of emails that simulate official addresses but use generic domains, such as @gmail.com or @yahoo.com.

Practical tips to avoid phishing scams

Now that you know how to identify the signs of a scam, it's time to learn how to protect yourself.

1. Enable Two-Step Verification (2FA)

Two-factor authentication is an extra layer of security that significantly reduces the risk of hacking, even if your credentials are compromised.

This measure adds an additional step to the login process, usually requiring a code sent to your mobile phone or generated by an authentication app.

This makes it much more difficult for scammers to access your accounts.

2. Educate yourself and your team

If you manage a team, it is vital to invest in cybersecurity training.

Studies show that 90% of cyber attacks start with phishing.

Awareness campaigns can include phishing simulations to identify weaknesses and reinforce good practices.

This helps to create a culture of security within the organization.

3. Use reliable security software

Antivirus and email filters can block many threats before they reach you.

Frequently updated tools include protections against malicious websites and real-time phishing detection engines, significantly increasing your protection.

4. Keep your systems up to date

Frequent updates fix vulnerabilities exploited by hackers.

Avoiding delays in software and operating system updates is essential.

Phishing scams can exploit known vulnerabilities, often fixed in recent updates.

5. Do not click on unknown links

Always check before clicking on links sent via email, SMS or social media.

Taking a skeptical approach to unsolicited messages can save you a lot of trouble.

Additionally, use security tools to check URLs before accessing them.

Table 1: Comparison of Online Threats

Threat Type	Frequency Level (%)	Impact Risk
Phishing	48%	High
Ransomware	20%	Very High
General Malware	15%	Moderate
Others	17%	Variable

Table 2: Increase in Smishing and Vishing Usage (2020-2023)

Year	Smishing (%)	Vishing (%)
2020	15%	10%
2021	20%	12%
2022	28%	18%
2023	35%	25%

Real examples of recent scams

In 2023, an email scam disguised as a tax notice hit thousands of Brazilians.

The message contained a link to a supposed “pending bill” and redirected victims to a fake website.

Many internet users lost large amounts of money before the warning was widely publicized.

Another notable example involved fraudulent messages simulating contacts from financial institutions asking for data updates.

The victims, when accessing the links provided, ended up sharing banking information that led to the theft of considerable amounts.

Final considerations

Phishing is a growing threat that requires attention and caution.

Being informed and prepared is the best way to protect yourself.

By adopting good security practices and sharing knowledge with friends and family, you can significantly reduce risks.

Online security should not be neglected.

Stay up to date on new threats and invest in preventative measures to ensure your protection and that of your loved ones.

Remember: prevention is always the best medicine against virtual attacks.

Never underestimate the power of knowledge in fighting cybercrime.

Nara January 15, 2025

Blog