Phishing messages try to trick you into clicking a link, sharing codes or passwords, or sending money. Red flags include urgency, threats or prizes, unexpected attachments, slightly wrong sender addresses or links, requests for one-time codes, and pressure to keep things secret. When in doubt, contact the organisation or person through a channel you already trust.
Common phishing tricks
- Fake delivery messages: "Your parcel is held; pay a small fee."
- Bank or account alerts: "Your account is blocked; verify now."
- Prize and lottery messages: "You have won; share your details to claim."
- Job offers that require a fee or personal documents.
- Hijacked friends: a friend's WhatsApp sends "Please send me the code I just sent you by mistake."
- Impersonation calls: someone claiming to be from a bank, telecom company or government agency.
- AI-powered scams: cloned voices of relatives, or very polished messages without the old spelling mistakes. See deepfakes.
Red flags checklist
- Urgency or fear: "act within 24 hours", "your account will be closed".
- Unexpected contact about something you did not start.
- Requests for codes, passwords, PINs or card details.
- Links that do not match the real website. Look for misspellings or extra words in the domain.
- Payment by unusual methods such as gift cards or crypto.
- Requests for secrecy.
- Too good to be true.
How to check safely
- Do not use links or numbers in the suspicious message.
- Open the official app or type the website address yourself.
- Call the person or organisation on a number you already know.
- Ask a family member or colleague for a second opinion.
If you clicked or shared information
- Change the affected password immediately, and anywhere you reused it.
- Enable two-factor authentication. See password security.
- Contact your bank at once if financial details were shared.
- Scan your device for malware.
- Warn contacts if your account was used to send messages.
- Report the scam to the platform and relevant authorities.
Protecting your family
Talk about scams openly, especially with older relatives and teenagers. Agree a family code word for urgent requests. Make it normal to say "I am not sure, let me check" before acting.
Frequently asked questions
Why are scams more convincing now?
AI tools help scammers write fluent messages and even clone voices, so spelling mistakes are no longer a reliable warning sign.
Can I get hacked just by opening a message?
Rarely. The main danger is clicking links, downloading attachments or sharing information. Keep devices updated.
Where can I report scams in Pakistan?
Report to your bank and telecom provider, and to the national cybercrime reporting authorities.
