How to Spot Phishing Scams

What Is a Phishing Scam?

Phishing means sending a fake email or SMS that impersonates a well-known company, bank, or delivery service to lure you to a fake website, then stealing your ID, password, or credit card number. The word is said to blend "fish" (fishing for victims) and "sophisticated" (because the fakes are polished). Like a fish taking bait, people are drawn to pages that look identical to the real thing. Teens are targeted because they use games, social media, and online shopping.

How a Typical Attack Unfolds

Fig. 1: Phishing SMS vs. genuine notification. If you habitually open things through the official app, link-based scams are almost entirely preventable.

Watch out for one particularly sneaky trick: right after you enter your credentials the fake site displays "Login failed. Redirecting to the real site" — and bounces you to the real page. The victim thinks they just mistyped, and has no idea their ID and password were just stolen.

5 Checkpoints for Spotting Fakes

Fig. 2: Real vs. fake URL comparison. Memorizing the real domain lets you spot fakes in SMS and emails at a glance.

① Checking the URL is essential. Fakes use look-alike characters like replacing the letter "l" with the number "1." On a small phone screen the URL is easy to miss — build the habit of reading it to the end. ② Check the sender's email domain too. ③ "Within 24 hours" and "Account suspended" urgency is a classic phishing pattern. ④ Natural-sounding language does not mean an email is safe. ⑤ Never follow a link in an email — open your bookmarks or the official app directly instead.

Patterns That Target Teens Specifically

Teens are commonly targeted through: missed-delivery SMS notifications, game "account suspended" notices, and SNS "terms of service violation" messages. DM-based attacks like "check out this link," "vote for me," or "verify your account" are also common. Natural, well-written phishing messages have become more frequent, so "I can spot bad Japanese" is no longer a reliable defense.

When in doubt, pause before tapping any link. Open the official app yourself, show it to a family member or teacher, or search "[service name] phishing scam" — following those steps in order makes it much easier to avoid being scammed. The more urgently the message tries to rush you, the more important it is to slow down and not enter anything right away.

Common Pitfalls

Mistakes people make with phishing

Opening a link "just to check" if the login works. The moment you enter your ID, it can be stolen.
Believing an SMS that appears to come from a family member ("new number, please contact me here"). Verify through a separate channel.
Entering credit card details and then entering an SMS verification code. That sequence also defeats two-factor authentication.

How Does This Help Your Future?

As an adult, your work email will receive fraudulent messages disguised as invoices or contracts. One careless click can expose confidential company data or customers' personal information. The ability to recognize phishing is a skill that will be genuinely valued in any workplace.

What You Can Do Today

Today: point at the URL

Pick one ordinary message
Do not tap. Read the domain with a finger
Agree to forward anything odd to a parent

Summary

Phishing is a scam that uses fake sites to steal IDs and card numbers. Check the URL, sender, urgency language, and how you opened the link — and never follow links inside emails; use the official app or bookmarks instead. Even messages in natural, fluent language can be scams, so judge by "how did I get here," not by how it looks.

Check When you doubt a fake mail, look at?