Internet users are bombarded with emails from senders attempting to fraudulently obtain their personal information, and then use it to steal their identity for personal gain.

Phishing as it is known, involves the sending of a massive number of emails appearing to be from a legitimate source such as a bank, retailer, eBay, PayPal or others. Many recipients assume the emails are legitimate since some already have a relationship with the legitimate company. These messages typically contain a realistic message that your account has been compromised or closed, or in the case of eBay, a disputed transaction.

These emails prey on consumers fears which increase the response rates. They then lure you into clicking on a link in the email to “correct the problem” or confirm personal information.

Things to Watch Out For

• False website. Many phishing emails point you to a fraudulent web site that appears to be the subject site, complete with proper formatting and logos just like the real deal. Never click a website link from an email. Instead, enter the URL in a web browser.
• Generic email greeting. A typical phishing email may address you in a generic fashion, such as “Dear User” rather than using your real name.
• Sender’s Email Address. The “From” email address may appear to be from a legitimate source. These emails can easily be altered and should not be used to verify the authenticity of the email or the sender.
• Avoid Filling out Forms in the Email. Many times phishing emails will request personal information be “validated” and ask you to enter personal information on a form. If you have not initiated the contact, don’t fill out these forms.
• Act Now or Negative Action will be Taken. Most Phishing emails typically try to convince you that urgent action is required or negative action will be taken against your account. Call the company and ask them about the issue before responding.
• Attachments. Open attachments if you are certain who the sender is and you know exactly what the attachment contains. These attachments could contain small programs that can run on your computer and record your keystrokes or transmit other personal information to the bad guys.
• AntiVirus and Anti-Spyware. Keep your AntiVirus and Anti-Spyware up to date. Many will catch these emails before you do, but they are not foolproof. You must continue to be vigilant.

Reputable companies do not ask for your personal information via email or request you update your files. If you are not 100% sure the email is legitimate, delete it and call the legitimate company. Consider the email the bait. Don’t get caught by a “phish”.