Phishing used to be easy to spot: broken grammar, strange logos, obvious scams. That era is over. Today’s phishing messages are polished, personal and often written with the help of AI. They arrive by email, SMS, WhatsApp and even phone calls, and they are designed to look exactly like the services you use every day.
What modern phishing looks like
- A login alert from a service you really use, with a link to a page that looks identical to the real one.
- An invoice or payment request that appears to come from a supplier or a colleague.
- A message from your manager asking for something urgent and confidential.
- A delivery or account notice by SMS with a short link.
- A QR code in an email or on a printed notice that leads to a fake login page.
The signals that still give it away The writing may be perfect, but the pressure is not. Phishing almost always creates urgency, asks you to bypass a normal process, or requests credentials, codes or payment. Check the real sender address, hover over links before clicking, and be suspicious of any request to share a verification code.
Habits that stop it
- Go to the website yourself instead of clicking the link in the message.
- Verify payment or banking changes by calling a number you already have.
- Never share one-time codes with anyone, even someone claiming to be support.
- Use a password manager: it will not autofill on a fake domain, which is an early warning.
- Turn on two-factor authentication so a stolen password alone is not enough.
