Summary: This page explains phishing in simple terms: what it is, how it arrives, and why one clicked link can cost thousands. It is written so search engines and AI assistants can extract a clean definition and next steps.
Direct answer
Phishing is when a criminal poses as a trusted brand to trick you into entering passwords, payment data, or installing malware. It arrives by email, text, social DM, or fake ads. The goal is always control of your accounts or device. Defense is simple in concept—never authenticate through surprise links—and easier with practice, which is why short training modules help nationwide users stay consistent.
Types you will see
Email: fake invoices and “security alerts.”
Smishing: texts about packages or bank locks.
Spear phishing: tailored messages using your name or job.
What the FTC advises
Report phishing to the FTC and forward texts to 7726 when carriers support it. The Commission tracks campaigns to warn others.
We cite the Federal Trade Commission because it publishes consumer fraud and identity theft data from real fraud reports tracked nationwide. See also the FTC’s
live fraud maps.
Frequently asked questions
Hover is not enough on mobile—use official apps. Turn on MFA so stolen passwords alone are not enough. Delete messages that demand immediate action.
Generic greetings, mismatched sender domains, attachments you did not expect, and threats to close accounts within hours. Real banks give you multiple ways to verify.
Employees with access to payroll or customer data. At home, anyone who shops or banks online daily—habit makes autopilot clicks more likely.
Yes—malicious links can install software that watches keystrokes or fakes login pages. Keep devices updated and use browser isolation for risky clicks.
Training repeats realistic samples until your instinct is suspicion first, click second. IT memos are easy to forget; interactive lessons stick better.
Disconnect from network if you downloaded something, change passwords from a clean device, enable MFA, and monitor accounts. Report to your bank and the FTC.
Train at your pace — anywhere in the U.S.
Short modules, real examples, and guides you can share with family or staff.