Phishing is a popular form of cyberattack that attempts to steal your money, or your identity, by getting you to reveal personal information - such as credit card numbers, bank information, or passwords - on websites that pretend to be legitimate.

We feel the best defence is awareness and knowing what to look for. So, here are six ways to recognise a potential phishing scam:

Spelling and
bad grammar

Legitimate companies and organisations usually have an editorial team to ensure customers receive high-quality, professional content. If an email message has glaring spelling or grammatical errors, it might be a scam.

Urgent call to
action or threats

Be wary of emails that claim you must click, call, or open an attachment immediately. By pressuring you to reply quickly, cybercriminals hope to instil panic and fear to trick you into providing confidential information. Creating a false sense of urgency is a common trick of phishing attacks and scams.

Promise of
attractive rewards

False offers of amazing deals or unbelievable prizes are commonly used by cyber criminals to encourage you to act immediately. Don’t let curiosity get the better of you and pull you into the scam!

Mismatched and
misleading domains

Cyber criminals will attempt to mislead you into believing that the information you see is genuine. Check the email content properly. Inspect if the information, such as email address, message body, or links, are inconsistent or misspelt.

Pro Tip:

Be vigilant! Cybercriminals can also tempt you to visit fake websites with other methods, such as text messages or phone calls. Sophisticated
cybercriminals set up call centres to automatically dial or text numbers for potential targets.

Suspicious links or
unexpected attachments

Attachments included in emails are a way to infect a user’s device with malware and steal their data. If you suspect that an email message is a scam, don’t open any links or attachments that you see. It is important to exercise caution.

Unexpected or
first time senders

While it’s not unusual to receive an email from someone for the first time, especially if they are outside your organisation, this can be a sign of phishing. If you receive such an email, take a moment to examine it extra carefully before you proceed, do not click on the links and attachments and delete the email immediately if you feel something is amiss.

What should I do if I receive a phishing message?

  • Disconnect immediately and share the fraud number with us by calling our helpline.
  • Call us immediately if you have mistakenly revealed your OTP details to someone.
  • If you get a SMS/call asking for sensitive information, do not provide these details.
  • Don’t open or forward these suspicious links via email, SMS or chat.

What should I do if I've been phished?

If you have shared your credit/debit card information with a suspected fraudster, please block your card immediately by contacting your bank or through Grab app for GrabPay Card and lodge a police report for further investigation.

If you have shared your Grab app login credentials or suspect any irregular activities/charges from your account, please reset the password or GrabPIN and report it to us here.

Read other articles.

Spot the fake… website

Spotting a fake website is the first line of protection against cyberattacks. Learn the tell-tale signs now.

Protect before you connect

It’s not an if, but a when you will be subject to a cyberattack. Find out four ways to beat these threats.

Komsan Chiyadis

GrabFood delivery-partner, Thailand

Komsan Chiyadis

GrabFood delivery-partner, Thailand

COVID-19 has dealt an unprecedented blow to the tourism industry, affecting the livelihoods of millions of workers. One of them was Komsan, an assistant chef in a luxury hotel based in the Srinakarin area.

As the number of tourists at the hotel plunged, he decided to sign up as a GrabFood delivery-partner to earn an alternative income. Soon after, the hotel ceased operations.

Komsan has viewed this change through an optimistic lens, calling it the perfect opportunity for him to embark on a fresh journey after his previous job. Aside from GrabFood deliveries, he now also picks up GrabExpress jobs. It can get tiring, having to shuttle between different locations, but Komsan finds it exciting. And mostly, he’s glad to get his income back on track.