What is a Phishing email?

A "Phishing" email is a fraudulent message that purports to be from a legitimate organisation such as a bank, credit card issuer, payment processor or any other organisation with which you have a financial relationship. It will usually contain a link to a fake version of the organisation's website, with a log-in form asking you to enter your username, password and other security information. Instead of logging you into your bank as you expect, the website will send your details to a criminal who can then use them to log into your online accounts and transfer your money out of your account. The email may claim that you have a secure message, that fraudulent activity has been detected on your account or that you need to update your details to continue using your online banking facility. Whatever the story, you can be sure that it's a scam.

What happens if I fall for it?

If you log into a fake bank site and your details are passed to scammers, you will probably find your account emptied, your billing address changed (so scammers get your bank statements) and your overdraft taken to its very limit. You may also find yourself falling victim to identity theft, with loans and credit cards being applied for in your name.

What do I do if I've already entered my details?

Contact your bank IMMEDIATELY and tell them. They will freeze your account and investigate any fraudulent transactions. There's a list of contact details for the major banks here.

Key points to remember

• Your bank will not contact you by email to report suspicious activity or to ask you to update your details. If there's a problem with your account they will write to you to let you know.
• NEVER click on a link in an email that looks like it's come from your bank, no matter how convincing. Open your browser and go to your bank's website by typing in their web address and log in that way. Just clicking on the link could start a download of malicious software to your computer, which could include viruses and malware.
• NEVER reply to the email, even to tell the scammers what you think of them. This will confirm to the scammer that your email address is live and you will be inundated with email scams of all descriptions.
• ALWAYS check your bank statements as soon as you receive them, and keep an eye on your credit reports. If you see anything suspicious, report it immediately.
• If you want to check out some real examples of phishing emails, try our Click or Don't Click game and see how well you do!