Phishing and Other Traps: My 10-Step Protocol

# Phishing and Other Traps: My 10-Step Protocol

**Summary**
**Phishing** steals credentials or money via emails, SMS, or fake websites. Here’s my **practical protocol**—follow it as written.

## 1) Red flags to spot fast

* Artificial **urgency** (“account closes today”), **prizes**, or **threats**.
* Weird domains (bank-secure-verify.net).
* Shortened links or unexpected attachments.
* Grammar/locale inconsistencies.

## 2) My 10-step protocol

1. **Assume suspicion**: never click blindly.
2. **Check sender** and domain letter by letter.
3. **Hover over links** to preview the real URL.
4. **Do not open attachments** you weren’t expecting.
5. **Go to the official app/website**, not the email/SMS link.
6. **Enable 2FA** (limits damage even if a password leaks).
7. **Update** OS/browser/antivirus.
8. **Report** the attempt (mail provider/service).
9. **Change password** if you entered anything.
10. **Monitor** banking/accounts for 48–72 hours.

## 3) Social engineering beyond email

* **Vishing** (phone): never share codes over the phone.
* **Smishing** (SMS): avoid links; open the official app.
* **Fake support**: verify the number/channel every time.

## 4) Quick security checklist

* [ ] 2FA on email/social/banking.
* [ ] Password manager; unique, long passphrases.
* [ ] Backups (3-2-1).
* [ ] Automatic updates on.
**Image**: lock/keyboard (CC0).
**Credit**: “Credit: Author — CC0/CC-BY — link”.