Phishing is a trick where scammers send fake messages, often emails, to steal your personal information. In simple terms Phishing is like a fisherman throwing a net (or bait) into the water, hoping to catch fish. In the digital world, it means sending emails or messages that look like they're from a trustworthy source, like your bank, but aren't. The goal is to trick you into giving away personal information like your password or credit card number.
For example, you get an email that looks like it's from your bank, asking you to click a link and enter your account details. The link takes you to a fake website that looks real but is actually designed to steal your information.
Social Engineering is a broader trick where scammers use manipulation and deception to get sensitive information or access. It's not limited to emails and can happen in many ways, like phone calls, in-person interactions, or online. It's like someone trying to trick a security guard into letting them into a building by pretending to be a delivery person. In the digital world, it involves manipulating people into breaking normal security procedures or giving away confidential information.
For example, A 75-year-old man reportedly lost ₹1.22 lakh, while he was making an online payment of ₹499 after he received an e-mail saying that his Netflix subscription has been kept on hold.The businessman told the police that after receiving the e-mail around 10am on September 16, he clicked on the link attached to the mail and entered his credit card details and OTP to renew the subscription. Soon he received a call from a mobile number saying, “you have made a payment of ₹1,22,556, please press 8 if you have not done this transaction.”
After receiving the message, the complainant pressed 8 on his mobile phone and immediately the said amount was debited from his account.