Cybersecurity: stay safe from phishing and vishing attacks

October marks Cybersecurity Awareness Month, a critical time to focus on the growing digital threats we face every day. This month, the ABBL joins forces with Europol and the European Union Agency for Cybersecurity (ENISA) to raise awareness about phishing and online scams, especially within the banking sector.

One of the most prevalent tactics used by cybercriminals is phishing. In fact, 90% of data breaches start with a phishing email. These fraudulent messages are designed to trick individuals into sharing sensitive information such as passwords, banking details, or even personal identification.

However, phishing is not the only danger. Vishing, a form of scam where criminals use phone calls to extract sensitive information, has also been on the rise.

Recognising phishing emails

Bank phishing emails can be particularly deceptive, often mimicking legitimate bank correspondence. These scams are getting increasingly sophisticated, making it difficult for users to tell the difference between a real email and a fake one. However, there are some telltale signs you can watch out for:

• Suspicious email addresses: If the sender’s email doesn’t exactly match your bank’s domain, it’s a red flag.
• Urgent or threatening language: Scammers often use language that creates a sense of urgency, pressuring you to act quickly.
• Unfamiliar links or attachments: Phishing emails often ask you to click on links or download attachments. Always be cautious and avoid taking such actions without verifying the source.

Recognising vishing scams

Vishing involves fraudulent phone calls where criminals pretend to be from a trusted institution (like your bank or utility provider). Here’s how to protect yourself:

• Don’t provide personal information over the phone: Legitimate companies will never ask for sensitive information via unsolicited calls.
• Check with your provider: If you receive a suspicious call, hang up and contact the service provider directly to verify the claim.
• Block fraudulent numbers: If you identify a scam, block the number to prevent future calls.
• Report the activity: Inform your bank, utility provider, and the authorities about any suspicious calls.

What you can do to protect yourself

Preventing phishing and vishing attacks requires both vigilance and action. Here are some essential tips to stay safe:

• Keep your software updated: Ensure that your browser, antivirus, and operating system are up-to-date to block malicious attacks.
• Be cautious with unsolicited emails and calls: If an email or call requests sensitive information, especially bank-related details, verify its legitimacy directly with your bank or service provider.
• Never click suspicious links: If you receive an email with a link, type your bank’s website address directly into your browser rather than clicking the link in the email.
• Verify email and phone content: Check for spelling errors or unusual phrasing, as these are often indicators of phishing or vishing scams.

Online scams: recognising the dangers beyond emails and phone calls

It’s not just email – cybercriminals are also using SMS scams (smishing) to deceive unsuspecting individuals. These texts, like phishing emails, often contain a link that leads to a fraudulent website designed to steal your information.

Anti-financial fraud hotline, available 24/7: +352 49 10 10

Cybersecurity is everyone’s responsibility, and it’s more important than ever to stay informed. During Cybersecurity Awareness Month, the ABBL urges everyone to practice caution when dealing with online communication, whether via email, SMS, or phone calls.

If you suspect fraudulent activity or receive a suspicious email, you can report it at any time via Luxembourg’s 24/7 anti-fraud hotline at +352 49 10 10. This service allows you to report potential phishing, smishing, vishing, or any other suspicious transactions, ensuring your protection around the clock