Scam › Module 1 › Lesson 1
What is Phishing?
Learn what phishing is, how attackers steal trust, and why it remains the top way accounts get stolen
Opening
It does not have to look like a hacker movie
Most breaches do not start with a genius exploit. They start with a normal-looking email, text, or chat that asks you to "verify," "unlock," or "confirm" something. That is phishing: social engineering delivered through messages. If you understand the game, you stop feeding it.
1. What Phishing Actually Means
Phishing is when an attacker impersonates a trusted person or brand to trick you into doing something unsafe—opening a malicious link, entering credentials on a fake site, installing malware, or transferring money. The word comes from "fishing": cast many hooks, wait for someone to bite. You do not need to be "tech dumb" to get caught. You need to be busy, scared, or in a hurry—exactly what attackers design for.
2. Why It Works So Well
Trust
Messages borrow logos, names, and tone from banks, delivery companies, bosses, or coworkers.
Urgency
"Account locked in 1 hour," "package held," "CEO needs this NOW"—pressure short-circuits careful checking.
Fear or greed
Threats of fines, refunds, prize money, or "job offers" push you to act before you verify.
3. Common Phishing Channels
Email is still the classic channel, but phishing also arrives as SMS (smishing), voice calls (vishing), chat apps, QR codes, fake job posts, and AI-cloned voices. The channel changes; the goal stays the same: steal access, money, or data. In security teams, phishing remains one of the most common initial access methods because one click can beat a million-dollar firewall.
Slow is a security control
If a message demands an instant password, code, or payment, pause. Real banks and employers almost never need you to act that fast via a random link.
Knowledge Check
What is the main goal of most phishing attacks?
Multiple choice
Knowledge Check
True or False: Phishing only works against people with no technical knowledge.
True or False
Knowledge Check
Which tactic do phishers commonly use to push victims to act fast?
Multiple choice