Komsan Chiyadis
GrabFood delivery-partner, Thailand
Phishing is a popular form of cyberattack that attempts to steal your money, or your identity, by getting you to reveal personal information - such as credit card numbers, bank information, or passwords - on websites that pretend to be legitimate.
We feel the best defence is awareness and knowing what to look for. So, here are six ways to recognise a potential phishing scam:
Spelling and
bad grammar
Legitimate companies and organisations usually have an editorial team to ensure customers receive high-quality, professional content. If an email message has glaring spelling or grammatical errors, it might be a scam.
Urgent call to
action or threats
Be wary of emails that claim you must click, call, or open an attachment immediately. By pressuring you to reply quickly, cybercriminals hope to instil panic and fear to trick you into providing confidential information. Creating a false sense of urgency is a common trick of phishing attacks and scams.
Promise of
attractive rewards
False offers of amazing deals or unbelievable prizes are commonly used by cyber criminals to encourage you to act immediately. Don’t let curiosity get the better of you and pull you into the scam!
Mismatched and
misleading domains
Cyber criminals will attempt to mislead you into believing that the information you see is genuine. Check the email content properly. Inspect if the information, such as email address, message body, or links, are inconsistent or misspelt.
Pro Tip:
Be vigilant! Cybercriminals can also tempt you to visit fake websites with other methods, such as text messages or phone calls. Sophisticated
cybercriminals set up call centres to automatically dial or text numbers for potential targets.
Suspicious links or
unexpected attachments
Attachments included in emails are a way to infect a user’s device with malware and steal their data. If you suspect that an email message is a scam, don’t open any links or attachments that you see. It is important to exercise caution.
Unexpected or
first time senders
While it’s not unusual to receive an email from someone for the first time, especially if they are outside your organisation, this can be a sign of phishing. If you receive such an email, take a moment to examine it extra carefully before you proceed, do not click on the links and attachments and delete the email immediately if you feel something is amiss.
What should I do if I receive a phishing message?
- Disconnect immediately and share the fraud number with us by calling our helpline.
- Call us immediately if you have mistakenly revealed your OTP details to someone.
- If you get a SMS/call asking for sensitive information, do not provide these details.
- Don’t open or forward these suspicious links via email, SMS or chat.
What should I do if I've been phished?
If you have shared your credit/debit card information with a suspected fraudster, please block your card immediately by contacting your bank or through Grab app for GrabPay Card and lodge a police report for further investigation.
If you have shared your Grab app login credentials or suspect any irregular activities/charges from your account, please reset the password or GrabPIN and report it to us here.
If you have shared your Grab app login credentials or suspect any irregular activities/charges from your account, please reset the password or GrabPIN and report it to us here.
Read other articles.
Spot the fake… website
Spotting a fake website is the first line of protection against cyberattacks. Learn the tell-tale signs now.
Protect before you connect
It’s not an if, but a when you will be subject to a cyberattack. Find out four ways to beat these threats.
