Recognizing and Avoiding Phishing Attacks
Phishing attacks are one of the most common cyber threats today. They trick people into giving up private info like passwords, access codes, or payment details. As a security guard, you may be targeted or see others being targeted. It’s your job to stay alert and help protect the site—and your team—from these scams.
What Is Phishing?
Phishing is when someone sends fake emails, texts, or messages pretending to be someone they’re not. These messages try to get you to click a bad link, open a harmful file, or share private info. They often look real, using company names, logos, or urgent language.
Common Signs of a Phishing Message
- Spelling or grammar mistakes – Real companies check their writing.
- Strange sender addresses – Look closely at the email address. It may be off by a letter.
- Urgent or threatening tone – Messages that say “act now” or “your account will be locked.”
- Unusual links or attachments – Never click unless you’re sure it’s safe.
- Requests for private info – No real company asks for passwords over email.
Types of Phishing You May See
- Email phishing – The most common. Fake emails with dangerous links or files.
- Smishing – Phishing by SMS (text message). Often includes a link.
- Vishing – Voice phishing. A call pretending to be from tech support or a bank.
- Spear phishing – A targeted attack using personal info to seem more real.
Quick Scenario
You’re on shift at the front desk. An email pops up on the company computer: “Urgent: Your payroll information needs updating. Click here.” It looks like it’s from HR, but the address ends in “.net” instead of the usual “.com.”
What should you do? Don’t click. Report it to your supervisor or IT. Follow your site’s cyber policy.
Shift Checklist: Phishing Awareness
- Check sender addresses on all emails.
- Pause before clicking any link or opening attachments.
- Watch for urgent or strange language.
- Don’t share passwords or personal info by email or text.
- Report suspicious messages to your supervisor or IT.
3 Questions Guards Often Ask
1. What if I already clicked a phishing link?
Tell your supervisor or IT right away. Don’t try to fix it yourself. They need to check for damage.
2. Can phishing happen on my personal phone?
Yes. Smishing and fake apps are common. Be just as careful on your phone as on work devices.
3. What if the message looks real?
Even real-looking messages can be fake. Always double-check the sender and don’t act on messages that seem off. When unsure, ask your supervisor.
How to Stay Safe
- Use strong, different passwords for work and personal accounts.
- Don’t reuse passwords across systems.
- Keep your device software updated. Updates fix security holes.
- Log out of systems when not in use.
- Follow site policy and local law for reporting threats.
Action Takeaway
Phishing attacks are sneaky but preventable. Stay alert. Think before you click. Always report anything strange. It only takes one message to cause big problems—but it only takes one alert guard to stop it.
