Spot the Phish - e-Commerce Scams

Spot the Phishing Attempt - Cybersecurity Awareness

The images displayed below are a combination of phishing emails and real emails sent from various e-commerce websites. Spot the phish! Click on the images to zoom in.

Spoiler Alert: Answers are below.

Answer: Image 1 and 4 are real emails. The others are phishes. Take a look below…

Image 1 details: The biggest sign is that the URL is legitimate. Further, there is nothing in the image that looks phishy.

Image 2 details: The email is purportedly sent from an online travel booking website, Kayak.com. They are asking for personal details including a contact number and address which is unusual as they should already have these details. They are asking for a credit card number, which is highly phishy. Professional organizations typically won’t request such information over email. All in all, there’s something phishy going on here, and it could well be an e-Commerce scam!

Kayak Phishing Attempt Explained 2

Image 3 details: In cybersecurity awareness you should understand an IT department wouldn’t likely ask employees to click a link to reset passwords.

IT Email Phishing Attempt Explained 3

Image 4 details: There is nothing phishy in the hyperlink if you run it through your typical URL check. Overall, it looks like a typical login notification email sent from Google.

 

 

 

ERMProtect's Weekly Newsletter

Get a curated briefing of the week's biggest cyber news every Friday.

Stop Phishing Attacks with ERMProtect's Security Awareness Training

Turn your employees into a human firewall with our innovative Security Awareness Training.

Our e-learning modules take the boring out of security training.

Intelligence and Insights

pci certification steps

Step by Step Guide to Achieving PCI Certification for PCI DSS 4.0

The pathway to PCI certification in PCI DSS 4.0 involves several critical deliverables, each designed to ensure organizations meet rigorous security standards effectively and sustainably …
PCI compliance companies

Leaning on PCI Compliance Companies to Navigate the Maze of PCI Compliance

These cases demonstrate the critical role of PCI compliance companies in helping businesses not only recover from breaches but also prevent future incidents through rigorous compliance practices …
PCI QSA Companies

Selecting the Right PCI QSA Company

The right PCI QSA company should act as a trusted advisor, helping to identify vulnerabilities and suggesting improvements to secure data and comply with PCI DSS requirements …