---
title: 'Avoiding Phishing Scams'
url: 'https://blog.datum-consulting.com/blog/avoiding-phishing-scams'
markdown: 'https://blog.datum-consulting.com/blog/avoiding-phishing-scams.md'
date: '2019-10-04'
description: 'Phishing is a scam where criminals use misleading information to trick you into revealing passwords or other confidential information. Below are eight important rules to help avoid being victimized. We also outline a few realistic phishing scams. To protect yourself, use a password manager and foll…'
taxonomy:
  category:
    - blog
  tag:
    - cybersecurity
    - hacker
    - 'data security'
    - 'security solutions'
    - 'Two-Factor Authenication'
    - passwords
    - 'password manager'
    - 'data recovery'
    - 'multi-factor authentication'
    - phishing
    - 'phishing attack'
  month:
    - October
  archives_month:
    - oct_2019
  archives_year:
    - '2019'
---

# Avoiding Phishing Scams

[ Home ](https://blog.datum-consulting.com/)      Avoiding Phishing Scams    

## [Avoiding Phishing Scams](https://blog.datum-consulting.com/blog/avoiding-phishing-scams)

    4th Oct 2019   [cybersecurity](https://blog.datum-consulting.com/tag:cybersecurity#body-wrapper) [hacker](https://blog.datum-consulting.com/tag:hacker#body-wrapper) [data security](https://blog.datum-consulting.com/tag:data%20security#body-wrapper) [security solutions](https://blog.datum-consulting.com/tag:security%20solutions#body-wrapper) [Two-Factor Authenication](https://blog.datum-consulting.com/tag:Two-Factor%20Authenication#body-wrapper) [passwords](https://blog.datum-consulting.com/tag:passwords#body-wrapper) [password manager](https://blog.datum-consulting.com/tag:password%20manager#body-wrapper) [data recovery](https://blog.datum-consulting.com/tag:data%20recovery#body-wrapper) [multi-factor authentication](https://blog.datum-consulting.com/tag:multi-factor%20authentication#body-wrapper) [phishing](https://blog.datum-consulting.com/tag:phishing#body-wrapper) [phishing attack](https://blog.datum-consulting.com/tag:phishing%20attack#body-wrapper)  

Phishing is a scam where criminals use misleading information to trick you into revealing passwords or other confidential information. Below are eight important rules to help avoid being victimized. We also outline a few realistic phishing scams.

To protect yourself, use a [password manager](lock-down-your-passwords) and follow these best practices!

##### Top 8 rules to protect yourself from phishing scams

1. **Never tell your master password to anyone for any reason.**
2. **Always use anti-virus, anti-malware, and firewall software.** Protect yourself on all of your devices. Make sure virus definition files are up to date.
3. **Never click links in emails unless you asked for them.**
4. **Be suspicious of incoming emails. Make sure the sender is really who they claim to be.** Bad guys can easily forge email signatures. It’s best to stay suspicious!
5. **Avoid using untrusted computers or networks.** Bad guys have lots of tricks, and any computer or network you aren’t familiar with could be their playground. They install stuff like keylogging, screen capture, and traffic sniffing software. So beware!
6. **Don’t trust anyone claiming to be from Microsoft, Google, etc., who has personal or confidential information about you.** When you signed up for these services, you may have entered personal information, but they have no way of ever reading or knowing such information.
7. **Use a password manager to fill login credentials for sites you visit.** Password managers protect you against fake-website phishing attacks by only filling your credentials to actual sites. For example, suppose your bank’s website is www.mybank.com. Along comes a scammer who sets up a fake site that’s identical on the surface, but with a slightly different address: www.mybank1.com. Let’s say you visit the bad guy’s site at www.mybank1.com and don’t notice it’s a fake. You’re safe, because most password managers recognize the difference for you and won’t fill in your username and password.
8. **Always click on your password manager’s browser extension icon to access your vault.** If an extension isn’t offered, always type the full site’s address into your browser’s address bar. Otherwise you risk visiting a site designed by bad guys to look exactly like a real site.

##### Phishing scam scenarios

| **Example Scam #1** You receive an email that appears to be from your password manager informing you that your account has been compromised. The email looks real and even includes accurate personal information about you. It asks you to click a link to reset your master password.  **Here’s how to protect yourself:**  - **Never assume an email you get from your password manager was actually sent by them.** - **Never click links in emails unless you asked for them.** |
|---|

| **Example Scam #2** You get a call from someone claiming to be an employee from your password manager company. They tell you a server has failed, and your data might have been lost. They give you their own employee ID number. They know some personal information about you: your address, your social security number, your date of birth, your maiden name, and even your credit card number. They ask you for your master password so they can safely copy and backup your data. Without your master password, they say, your data will be lost forever.  **Here’s how to protect yourself:**  - **Never believe anyone who contacts you by phone.** - **Be suspicious of anyone who has confidential information about you.** - **Never reveal your master password to anyone.** |
|---|

| **Example Scam #3** You receive an email from an employee from your password manager company. They say your account has been compromised. The employee leaves you their number and extension and asks you to reach out. You call the phone number and are greeted by a receptionist, who then directs you to the employee who reached out to you. The employee tells you your full address and asks you to verify your identity by providing them the last four digits of your credit card number. The employee explains that your account has been compromised and temporarily suspended for your protection. The employee asks for your master password to unlock your account.  **Here’s how to protect yourself:**  - **Never assume an email you get from an employee of your password manager company was actually sent by the company.** - **Be suspicious of anyone who has confidential information about you.** - **Never reveal your master password to anyone.** |
|---|

| **Example Scam #4** You use a computer at the library and find that the homepage for your password manager is already loaded in the browser.  **Here’s how to protect yourself:**  - **Avoid using untrusted computers or networks.** - **Use the password manager’s screen keyboard to log in to your account.** - **For protection in locations you don’t trust, use [multi-factor authentication](enabling-multi-factor-authentication).** |
|---|

Staying safe online must be an ongoing commitment on all our parts. Just as our team at [Datum Consulting](tel:4144318726) are committed to improving our suggested products, as new threats emerge, we, as users, also need to remain committed to following security best practices.

 [ Previous Post](https://blog.datum-consulting.com/blog/bad-passwords-employees-fault) [Next Post ](https://blog.datum-consulting.com/blog/10-cybersecurity-myths)

#### Related Posts

- 100 

     [The Most Hacked Passwords Around the World](https://blog.datum-consulting.com/blog/most-hacked-passwords "The Most Hacked Passwords Around the World")
- 100 

     [Apple, Google and Microsoft Commit to Expanded Support for FIDO Standard to Accelerate Availability of Passwordless Sign-Ins](https://blog.datum-consulting.com/blog/passwordless-sign-ins "Apple, Google and Microsoft Commit to Expanded Support for FIDO Standard to Accelerate Availability of Passwordless Sign-Ins")
- 100 

     [How Hackers Get Your Passwords and How To Defend Yourself](https://blog.datum-consulting.com/blog/hackers-get-passwords "How Hackers Get Your Passwords and How To Defend Yourself")
- 100 

     [How to Keep Your Company Safe from Russian Hacks](https://blog.datum-consulting.com/blog/russian-hacks-safety "How to Keep Your Company Safe from Russian Hacks")
- 100 

     [Protecting Your Business From Data Disasters](https://blog.datum-consulting.com/blog/protecting-data-disasters "Protecting Your Business From Data Disasters")

[JOIN OUR NEWSLETTER](https://zc.vg/sf/bawK1)

[PAY INVOICE ONLINE](https://datum.connectboosterportal.com/authentication/login)

[![](https://blog.datum-consulting.com/modules/sidebar/Yubico.png)](https://www.pntra.com/t/SkNJTk5MT09DSEZMTExNQ0dPR0tNSw)

#### Follow Us

[](https://twitter.com/datumconsulting "Twitter")[](https://www.linkedin.com/company/datum-consulting/ "LinkedIn")

"); #### Popular Tags

#### Archives

- [ 3 May 2022  ](https://blog.datum-consulting.com/archives_month:may_2022)
- [ 3 March 2022  ](https://blog.datum-consulting.com/archives_month:mar_2022)
- [ 3 February 2022  ](https://blog.datum-consulting.com/archives_month:feb_2022)
- [ 2 January 2022  ](https://blog.datum-consulting.com/archives_month:jan_2022)
- [ 1 December 2021  ](https://blog.datum-consulting.com/archives_month:dec_2021)
- [ 2 November 2021  ](https://blog.datum-consulting.com/archives_month:nov_2021)
- [ 2 October 2021  ](https://blog.datum-consulting.com/archives_month:oct_2021)
- [ 1 September 2021  ](https://blog.datum-consulting.com/archives_month:sep_2021)
- [ 3 August 2021  ](https://blog.datum-consulting.com/archives_month:aug_2021)
- [ 2 July 2021  ](https://blog.datum-consulting.com/archives_month:jul_2021)
- [ 4 June 2021  ](https://blog.datum-consulting.com/archives_month:jun_2021)
- [ 2 May 2021  ](https://blog.datum-consulting.com/archives_month:may_2021)

---

## Navigation

- Parent: [Home](https://blog.datum-consulting.com/index.md)
- Previous: [10 Cybersecurity Myths That Criminals Love](https://blog.datum-consulting.com/blog/10-cybersecurity-myths.md)
- Next: [Are Bad Passwords the Employee’s Fault?](https://blog.datum-consulting.com/blog/bad-passwords-employees-fault.md)