What is a phishing email and why are they dangerous?

Phishing emails (also called ‘spoof emails’) are sent by fraudsters with the aim of tricking you into giving them valuable personal details, such as usernames, passwords or bank details.

The emails usually contain links which fool you into thinking you are about to visit a ‘real’ website, however when you click them they go to a different website set up by the fraudsters. The fake website will look like the real one in order to convince you to enter your details.

The website may ask for you to reset a password, change your username or enter bank/credit card details. When you submit those details, they are sent to the fraudster, potentially giving them access to your accounts.

Sometimes malware or other malicious software is automatically downloaded to your computer when you click the links which infects your computer and can search for any saved personal information that may be valuable to the fraudsters.

Some of the most common phishing emails to watch out for imitate websites such as PayPal, HMRC, email clients (Gmail, Hotmail, Yahoo, Outlook.com, etc.), banking websites, eBay and social media websites (Facebook, Twitter, etc.).