Fake emails and websites look more and more professional. The BSI explains how you can still spot phishing.

Be suspicious if a message puts you under time pressure, threatens to block your account or asks you to enter passwords, PINs or credit card details. Reputable providers do not ask for such data by email. Spelling mistakes are no longer a reliable warning sign.

Do not open links or QR codes in suspicious messages. Instead, go to the provider's website yourself in your browser. Do not open attachments in suspicious emails either. If in doubt, contact the provider through a channel you already know. Phishing is not limited to email, by the way: it also happens via text message and on the phone.

All information on this topic can be found in this article on the website of the Federal Office for Information Security.

back to overview