How to know when something smells 'phishy'

Columnist Tom Regan's five tips for avoiding online cons.

from the August 15, 2007 edition

Page 2 of 2

Page 1 | 2

Beware of Web addresses that begin with https://. Normally "https" is the sign of a secure site. Sometimes these crooks use https to hide the real URL of the scam site. One easy way to check is to look at the bottom of the browser. If the little padlock is unlocked, it's a scam – the site is not secure. Or right-click on the page and look under "properties." That will show you the website's real address.

Third rule: Financial institutions will never send you an e-mail asking to "verify" your login information. Never.

These phishers don't necessarily stick to using websites. Sometimes phishing e-mails will ask you to call a number and give your information over the phone. Don't do it. No real financial institution will ever ask you to verify your username and password, but will ask for other clues that you have given them (mother's maiden name, day you got married, etc.).

Be very careful with pop-ups is rule No. 4. Often phishing sites include a pop-up that asks you to enter your account information. This is a sure sign of a scam. Close that pop-up and the browser. Get outta there!

Rule No. 5: Be wary of any e-mails addressed to "Dear Customer" and not to you personally.

There are other things you can do to protect yourself. Both Internet Explorer and Firefox browsers allow you to download plug-ins that will help your browser detect phishing sites. They aren't foolproof. When you click on the site, the browser will check it against a database of known phishing sites and alert you if necessary – but it's hard for the browser companies to keep up with the bad guys.

Often your financial institutions will provide a way for you to set up a series of passwords and other means of identification to protect your information. They can seem time-consuming, but it's much smarter to create these protocols than to risk the theft of your information. That way, even if the bad guys do get your username and password, they can't get into your account.

But you can't count on any of these above methods to be foolproof. While the Internet has made online banking and bill payment much easier., it has also made it easier for unscrupulous people to try to get your info. Be on your guard. Your own vigilance is your best protection.

1 | Page 2