How to spot phishing emails and messages that try to steal your details

Phishing is when someone sends a message that looks real so that you will give away a password, a code or money. It can arrive by email, SMS, WhatsApp or social media, and the messages are getting more convincing.

Common clues

• Urgency or fear: "Your account will be closed in one hour."
• A strange sender address that is close to the real one but not the same.
• Links that do not match the company they claim to come from.
• Requests for sensitive details: passwords, PINs, card numbers or one-time codes. Real companies do not ask for these in a message.
• Poor spelling or odd wording, although well-made fakes can look perfect.
• Surprise prizes, refunds or job offers you did not ask for.

What to do when you get one

1. Do not tap the link or open the attachment.
2. Do not reply, even to say "stop".
3. Contact the company yourself using the number or app you already trust, not the one in the message.
4. Report the message and delete it.

If you already clicked

Change the password of the affected account at once and any account that uses the same password. Switch on two-step verification. If you shared card or bank details, call your bank straight away and ask them to block the card or watch the account.

A simple habit

Pause for ten seconds before you act on any message that asks for money or information. Most scams depend on you moving too fast.

Written by the EarnNaija team at EarnNaija Digital Technologies.

This article is general information, not financial or legal advice. Earnings are never guaranteed. See our fees page for the exact costs.