Do you know phishing when you see it?

anti-phishing champion - Perfect score the first time. ;)
@santuccie (3384)
United States
June 23, 2007 2:26am CST
Take the PayPal phishing challenge here: https://www.paypal.com/cgi-bin/webscr?cmd=xpt/cps/securitycenter/antiphishing/CanYouSpotPhishing-outside By the way, if you know anyone (including fellow myLotters) who might have a PayPal account, you'd be doing a friendly favor to have them take this test too. Salute!-santuccie P.S.: Laughing at dumb jokes is still good for your health!!!
4 people like this
10 responses
@vivek2006 (1418)
• India
25 Jun 07
Phishing sites are designed for identity thefts, they are merely duplicates of some well known sites . They trick you into revealing your login information. eBay and PayPal are two of the most targeted companies, and online banks are also common targets. Phishing is typically carried out by email or instant messaging and often directs users to give details at a duplicate website. Sometimes phishing sites can be spotted easily, most login sites use https login page but phishing sites have http and the phishing sites have a mistake in the original name of the site like paypa| or paypa! unlike the original name "paypal". So i guess its easy to differentiate if we are careful, although i haven't experienced anything of this sort
2 people like this
@santuccie (3384)
• United States
25 Jun 07
Very good. Thank you for your response. So, have you taken the test yet? It's only five questions.
@VotreAmie (3028)
• United States
1 Jul 07
Thanks for sharing this information sanctuccie. I receive a lot of phishing emails. Especially for paypal and ebay. They usually ask me to update my information. I just delete the email and when I am in doubt I just call the company to be sure of things. There is a lot of identity theft over the internet and we have to be very careful. Thanks I will take a look at the site.
2 people like this
@mimpi1911 (25464)
• India
20 Dec 07
Santuccie, the test was interesting, I got 4 correct out of 5. The last one I missed and that was the new thing I learned. I thought that an associated link in the email body is quite safe! That's where I am fooled. Thanks for sharing this.
1 person likes this
@santuccie (3384)
• United States
7 Jan 08
Always a pleasure. Good job! Best 4 out of 5 ain't bad. :) And yes, e-mail links can lead to anywhere they want. Not only is it simple to create an anchor out of any old text or even image, but the link itself could be cloaked. And that's just one of the dangers ever present in e-mail.
@trinihd (996)
• United States
7 Jan 08
4 correct Thanks for taking the Challenge. Thanks for taking the Challenge. You’re better than most at identifying and avoiding phishing email. But for even more about how to guard against phishing, see How to protect yourself and visit PayPal fights phishing to learn what we’re doing to keep you safe. Or take the Challenge again and try for a perfect score. Ah well, I think I could actually spot phishing anywhere, despite my score, and I am always surprised that people think it is that easy to dupe someone. The question I got wrong was about the email addresses, which I think are easy to spot, because although they may have part of the authentic company in their email addy, I've never seen one that has an accurate simple address, so I can always spot them that way. Has anyone ever seen a phishing email come from an address @ebay.com or @paypal.com? I never have. And besides, even if it did, and it asked for info that I expect a phishing email to ask, I would be suspicious of it.
1 person likes this
@santuccie (3384)
• United States
7 Jan 08
An alias is easy to create. A phisher might not be able to create an e-mail address with one of these domains, but they could forge it. Anyway, good job! You really are better than average at spotting this stuff. Believe it or not, people get duped all the time. If you skim through the discussions, you will find fellow myLotters asking you whether their winning lotto number (which they'd never submitted in the first place) was authentic.
1 person likes this
@trinihd (996)
• United States
7 Jan 08
Thanks! :) I guess you are right, because when you think about it, one of the reasons phishing still persists is because they can still fool quite a lot of people with it, unfortunately.
@sacmom (14192)
• United States
6 Jan 08
Apparently I do as I got all the questions right! :P LOL Thanks for the quiz santuccie. I think it is an important one as some people don't know the difference between a real email or a phishing one. They can learn the difference just by taking this test.
1 person likes this
@santuccie (3384)
• United States
7 Jan 08
Wow! Great job sacmom! And it's my pleasure. The more people work to spread safety and security awareness on the Internet, the safer it becomes for you and me. :)
• Italy
19 Dec 07
I didn't know this test, it's really good for paypal members. Since I'm italian I have even a better way to indentify hackers: since most of my english friends don't know my email while my italian ones do, if I receive an english mail 9 times out of 10 it's spam or phishing XD
1 person likes this
@santuccie (3384)
• United States
19 Dec 07
Oh, that's really good! Yah, I think most phishers target Americans, because they think we have all this money. Almost every country in the world speaks English, calling it the "language of money." I use Challenge-Response to avoid spam. I check my pending folder (Bluebottle doesn't have a junk/bulk/spam folder) at Bluebottle periodically, but it's usually empty. When there is something in it, it's pretty much always important. I think I've seen one or two spam messages in the two years I've had this account; spammers know what Bluebottle is, and they don't bother with it. 8-)
1 person likes this
@kelly60 (4546)
• United States
24 Jul 07
I have taken the test and gotten all of the answers correct. I was sure that I would though. There are many people though who could easily be fooled though, that everyone should really take this test. Thanks for sharing.
@santuccie (3384)
• United States
24 Jul 07
Great job, Kelly! And I agree; everyone should take this test. There was a harder test on CNET that I took, and missed four out of ten. I'm happy to say the four I missed had to do with websites and not e-mail. Fortunately, I have TrendProtect and SiteAdvisor to consult with for them, and I won't waste my time with any site that's not green in both. TrendProtect is installed on my computer, and I can quickly navigate to siteadvisor.com for a second opinion. Thank you for responding!
@carmelanirel (20942)
• United States
6 Jan 08
Um, I must have missed something or my security prevented it..lol Anyways, just to let you know I replied to my computer problem, though I don't believe phishing was involved..lol
• Philippines
14 Feb 10
i'M VERY SLOW in detecting Phishing... I guess i have to learn more about detecting it and thanks for more ideas gaining more caution...
@myl0t1 (346)
• Indonesia
14 Feb 10
"5 Correct Tank for taking the challenge you're obviously doing a great job identifying and avoiding fake email.... " #In the test i can do better, i hope in real life can do it better to prevent phishing. Thank for share the link :)