Identity theft is on the rise: don't take the bait

Phishing (pronounced "fishing"; derived from "password"+"fishing") is a particularly devious Internet crime.
Criminals set up a fake web site of a real bank, online shop, or credit card company.
They then try to fool people through spam or targeted e-mails, hoping to get lucky and find real customers of the hijacked bank, e-retailer, or credit card company.
The emails can be extremely convincing, such as a message from an online shop saying that your credit card has been declined, or from your bank saying that they have detected unauthorized activity on your account. The messages frequently feature logos, colouring schemes, and company mottos or campaign messages that seem legitimate.
The message invites you to click on a link, which takes you to the fake web site. There, you will be asked to enter private information that the criminals then use to steal your money or for identity theft crimes.

  1. Keep your operating system patched and download the latest version of your browser to ensure that it is fully updated and utilizes the latest technologies.

    Install patches from software manufacturers as soon as they are distributed since hackers can quickly assemble malware using pre-made components to exploit the weakness before most people have downloaded the fix. Browsers use whitelists and blacklists of known sites, carry out URL checks, and use advanced technology to identify and filter out phishing sites.

  2. Remember that banks and credit card institutions will never e-mail you to ask for your PIN

    Genuine banks and credit card institutions take your privacy very seriously. No bank or credit card company will send you an email asking you to reveal your PIN or other personal information. If you do receive an email asking you to do this, do not click on any link in the email and do not respond.

  3. Check the sender's email address, check the URL of any website & look for "https"

    If you do click on an emailed link, be wary before sharing any personal information. An "http" site may be safe for general surfing, but before sending private data, make sure secure encryption technology (SSL) is being used - in other words, that "https" appears in the URL. Also check that the site's domain name is legitimate. Since there is no guarantee that communication sent to you via email or a website is authentic, if anything seems "phishy" and you are just not sure, do not share your personal information.

  4. Use an Internet service provider (ISP) that implements strong anti-spam and anti-phishing technologies and policies

    Some Internet service providers block known phishing sites so that customers can't reach them. The SpamHaus organization "www.spamhaus.org" lists the current top-10 worst ISPs in this category. Consider this when making your choice.

  5. Protect your computer with strong security software and keep it up-to-date

    Hackers have databases containing millions of email addresses. Help defend yourself against phishing with McAfee® Internet Security, providing trusted PC protection from viruses, hackers, and spyware.