One of the biggest threats to the security of your your account and your identity is fraudulent email and Web sites, called spoof email and spoof Web sites. Both are used to obtain personal and account information.
If you receive email that includes links and requests sensitive information – be suspicious
A spoof email pretending to be from a bank/hotmail/gmail etc typically contains a link that takes you to a fake Web site that requests that you sign in and submit personal and account information.
No genuine website requires you to enter information on a page that cannot be accessed from the parent site. When possible, you should avoid clicking links. Instead of clicking the link, you should copy the address and paste it into the address bar area of your Web browser.
Beware of fake Web sites pretending to be genuine. They are designed to look and behave like the original web site.
If you clicked a link in an email, verify that the Web address in your browser is the same as the address shown in the email.
Never enter your user ID and password on a page that doesn't have the original web site immediately before the first forward slash (/). If the address includes additional characters prior to the forward slash such as "@," dashes, and so on, it is not a genuine page.
Even if the Web address contains the word from your website, it may not be the original web site.
Before signing in, check the Web address in your browser.
To be sure that you are signing into a genuine Web site, look at the address bar area of your browser. At a sign-in page, the Web address (URL) that appears in the Address/Location field of your browser should begin with https://
If you've upgraded to a browser with the latest anti-phishing capabilities, the Web address bar may help you to identify secure Web pages. Look for a green Web address bar to confirm that you are on a secure page before entering sensitive information.
If you have already submitted information after receiving an email request and you suspect that your account may have been tampered with, immediately securing your account and review the steps on the Protecting Your Identity page in the original web site. This may involve using 2 step authentication or verification using your mobile number.
If you receive email that includes links and requests sensitive information – be suspicious
A spoof email pretending to be from a bank/hotmail/gmail etc typically contains a link that takes you to a fake Web site that requests that you sign in and submit personal and account information.
No genuine website requires you to enter information on a page that cannot be accessed from the parent site. When possible, you should avoid clicking links. Instead of clicking the link, you should copy the address and paste it into the address bar area of your Web browser.
Beware of fake Web sites pretending to be genuine. They are designed to look and behave like the original web site.
If you clicked a link in an email, verify that the Web address in your browser is the same as the address shown in the email.
Never enter your user ID and password on a page that doesn't have the original web site immediately before the first forward slash (/). If the address includes additional characters prior to the forward slash such as "@," dashes, and so on, it is not a genuine page.
Even if the Web address contains the word from your website, it may not be the original web site.
Before signing in, check the Web address in your browser.
To be sure that you are signing into a genuine Web site, look at the address bar area of your browser. At a sign-in page, the Web address (URL) that appears in the Address/Location field of your browser should begin with https://
If you've upgraded to a browser with the latest anti-phishing capabilities, the Web address bar may help you to identify secure Web pages. Look for a green Web address bar to confirm that you are on a secure page before entering sensitive information.
If you have already submitted information after receiving an email request and you suspect that your account may have been tampered with, immediately securing your account and review the steps on the Protecting Your Identity page in the original web site. This may involve using 2 step authentication or verification using your mobile number.
