Keeping clients' computers safe and profitable for over 30 years

5 Common Phishing Scams

Preview: Phishing scams trick people into giving away passwords, money, or personal data through fake emails. Learn the five most common scams and how to protect yourself using simple verification habits.

Here's a list of the most common scams.

1. Bank "Fraud Alert” Email

This email claims suspicious activity was detected on your account and asks you to log in immediately.
Example
"Important: We detected unusual activity on your account. Please confirm your identity to avoid suspension.”

Key facts

• The email includes a link to a fake bank login page.
• The website often looks identical to the real bank site.
• Once the victim logs in, the attacker steals the username and password.

2. Package Delivery Problem (UPS/FedEx / USPS)

• This email says a package could not be delivered and asks you to click a link to reschedule.
  Example
  "We attempted to deliver your package today. Please confirm delivery details.”

Key facts

• The link usually leads to a fake tracking page.
• Victims may be asked for credit card information for a "small delivery fee.”
• These emails increase during holidays and tax season.

3. Microsoft or Apple Security Alert

This email claims your computer or account has been hacked or infected.
Example
"Your Microsoft account has been compromised. Secure it immediately.”

Key facts

• The email may include a phone number to call.
• The "support technician” asks for remote access to your computer.
• Victims are often charged hundreds of dollars for fake repairs.
• Neither Microsoft or Apple send out virus warnings like that.

4. Social Security or Government Warning

This message claims your Social Security number or tax records are in danger.
Example
"Your Social Security benefits are suspended due to suspicious activity.”

Key facts

• The email pressures the victim to verify identity immediately.
• The attacker collects Social Security numbers, birth dates, and addresses.
• Government agencies rarely contact people first by email about problems.

5. Grandchild or Family Emergency Scam

The attacker pretends to be a relative who needs money urgently.
Example
"Grandma, I’m in trouble and need money for bail. Please don’t tell mom and dad.”
Key facts

• The message often asks for gift cards, wire transfers, or cryptocurrency.
• Criminals sometimes gather family details from social media.
• They rely on emotional pressure to make victims act quickly.

Protecting Yourself

If an email asks you to

• click a link
• send money
• provide personal information
  Stop and verify it through a phone call (from your own source, not their email). Go to the site. Use your password manager to log in, not their email link.

Rule: The "Safe Launch” (Best Practice)

Instead of clicking the link in the email:

• Open your password manager (Bitwarden or KeePass).
• Search for that account (e.g., Microsoft, bank, vendor portal).
• Click the URL/Launch link stored inside your password manager.

This guarantees you are taken to the real, official website. Log in there. If there is a real alert or message, it will be waiting for you in your account dashboard.

In fact, I always use my password manager to launch any site I'd log into.