How to Spot Phishing Scams

Learn

How to Spot Phishing Scams: Stay One Step Ahead

The global costs of cybercrime are estimated to surpass $16 trillion (38 times the size of New Zealand’s whole economy!) by 2026. By the way, that’s trillion with a 'T', which means it’s more important than ever to stay vigilant and protect yourself from scams like phishing.

Phishing is when a scammer sends messages pretending to be from a reputable source to trick you into revealing personal information like passwords or credit card numbers. Knowing what to look for can help you steer clear of these traps. Here are some telltale signs:

1. Bad Grammar or Awkward Language

Scammers aren’t known for their grammar skills. Their messages often have misspellings, strange phrasing, or just seem "off." If you get an email that’s full of errors, especially from a company that should know better, that’s a major red flag. Also, always double-check the sender’s email address. It should match the company's domain exactly, like support@company.co.nz, not support@company.xyz or even something more obvious like companysupport123678@gmail.com

2. “Urgent” Requests or Offers

If an email demands that you act right now, take a pause. Whether it’s a friend claiming to be in an emergency, a “too good to be true” offer, or a security alert that your account will be locked, urgency is a favourite tactic. Scammers know that when people feel rushed, they don’t think as clearly. If you get one of these messages, slow down and verify its authenticity before doing anything else.

3. Suspicious Links or Attachments

Hover your mouse over links (without clicking!) to see where they actually lead. If it doesn’t match the sender’s website or seems suspicious, avoid it. Attachments can also be dangerous, so unless you’re expecting one and trust the sender, it’s better not to download it.

Sadly, with the use of AI, scammers can make their messaging seem more and more credible, so the main thing you can do, is always stay vigilant. Don’t rush to react and where possible always double check with the company direct via the web, email or phone rather than responding to the messages.