Take a moment! 5 ways to tell that email is not what it seems
March is fraud prevention month. All across the world, scam messages are on the rise - over text, email and social media. It can seem almost impossible to keep ahead of the scammers looking to impersonate your bank, your loved ones, or the companies you rely on for your service.
These attempts to get your passwords and personal information - often referred to as phishing (because they’re fishing for your info!) - are getting increasingly sophisticated. But there are some everyday steps you can take to protect yourself and avoid falling for even sophisticated attacks.
Take a moment and breathe!
Phishing attacks often seek to build a sense of urgency. “Your account is about to be deleted!” “Your tax rebate is ready now!” “Your loved one needs help!” When you receive an urgent message, avoid the urge to click on the link or open the attachment. Take a few deep breaths and collect yourself. Then you can calmly follow the next steps to see if this urgent request is legitimate (it usually isn’t).
Go beyond just the name.
Scammers are good at pretending to be things they are not. They will use a company logo and branding, or maybe your boss’ name to create familiarity. Go beyond the name and check the actual email address or phone number. Does it make sense that your boss is calling from an international area code? Does the company email address match the actual internet address of the company. If not, these are big red flags. For example, emails that are legitimately from Northwestel will only come from the following valid domains that end with our website – "nwtel.ca":
- @nwtel.ca
- @email.nwtel.ca
- @emails.nwtel.ca
Don’t open that link or attachment.
When in doubt, don’t follow the link or open that attachment. Most reputable companies will make it easy to log in to your account straight from their website. If you’re feeling something isn’t right, you can always close that email or text, go to the website on your own, and login there. If you have clicked on the link already, check the url address in the address bar. If it doesn’t match the company’s url, close that page immediately.
"Dear user…" watch for that generic greeting.
Generic greetings, misspelled company names, fonts or logos that seem off… these are all warning signs that it’s time to pay extra attention. But beware, scammers can often guess your name from your email address or may have it from another source. Be sure to follow all the steps above and be vigilant.
Be part of the solution. Report phishing when you find it.
Many Canadian companies, including Northwestel, take phishing attempts very seriously. When we know a certain IP address is being used to generate phishing attacks, we can take action to reduce the impact for you and other network users.
If you come across emails pretending to be Northwestel, forward them on to phish@nwtel.ca. If you have been the victim of fraud, contact your local police immediately.
Take a deep breath, don’t react to the urgency, and follow these simple steps to help protect yourself online. Stay safe everyone and help share awareness for fraud prevention month!
