Phishing is a type of online scam where criminals impersonate legitimate organizations or people to trick you into revealing sensitive information. Think of it as a digital con artist. The goal is usually to steal things like passwords, credit card numbers, or bank account details. Sometimes, the aim is to get you to install malicious software, known as malware, on your device.

This isn't a new problem. The term "phishing" emerged in the mid-1990s, when hackers targeted America Online (AOL) users. They would pose as AOL employees to get users to reveal their passwords. The tactics have grown much more sophisticated since then, but the basic principle remains the same: deception.

Phishing attacks come in many forms, each using a different channel to reach potential victims. While the goal is the same, the methods vary.

The most common type is email phishing. This is a numbers game. Attackers send out thousands, or even millions, of generic emails. They might look like they're from a bank, a social media site, or an online store. Because they're sent so widely, the messages are often impersonal, starting with "Dear Customer" or something similar. The hope is that out of all the recipients, a few will take the bait.

Phishing has also moved beyond email:

• Vishing: This is voice phishing. Attackers call you, often using automated systems, pretending to be from your bank, the government, or a tech company. They might claim there's a problem with your account and ask you to "verify" personal information.
• Smishing: This is phishing via SMS, or text messages. You might get a text with a link, claiming you've won a prize, have a package delivery, or need to update your account information. These links lead to fraudulent websites.
• Quishing: A newer method that uses QR codes. An attacker might place a sticker with a malicious QR code over a legitimate one on a menu or poster. When you scan it, you're taken to a fake website designed to steal your data.

Phishing works because it exploits human psychology. Attackers don't just rely on fake logos; they manipulate our emotions and natural instincts to make us act without thinking.

One of the most common tactics is creating a sense of urgency. Messages often claim your account will be closed, you'll be charged a fee, or you'll miss out on a great deal if you don't act immediately. This pressure is designed to make you panic and click before you have a chance to question the message's legitimacy.

Fear is another powerful motivator. A phishing email might warn you that your account has been compromised or that suspicious activity has been detected. To solve the scary problem, you're told to click a link and log in, which is exactly how they steal your credentials.

Attackers also leverage our tendency to respect authority. By impersonating a CEO, a government agency like the IRS, or a police department, they make their requests seem official and non-negotiable.

Finally, they play on our curiosity or desire for a reward. An email might promise a large sum of money, a free vacation, or exclusive information. The lure of a prize can be enough to make someone overlook the warning signs and click a dangerous link.

Now that you understand the different types of phishing and the psychology behind them, let's test your knowledge.

Understanding these tactics is the first step. By recognizing the methods scammers use to trick people, you're better equipped to spot a phish in the wild.