How phishing works

Phishing is a message — email, SMS, or chat — designed to look like it's from someone you trust, in order to get you to hand over information or click something harmful.

Most phishing relies on urgency and familiarity: a fake bank alert, a 'delivery issue', or a message that appears to come from a colleague or family member.

The goal is almost always one of three things: your login details, a one-time code, or a payment.

Recognising the pattern — urgency, a request for sensitive information, and pressure to act fast — matters more than spotting any single fake logo or email address.