Phishing email warning

Learn how to identify a phishing email: fraudulent messages that mimic legitimate institutions to steal personal data.

About this subject

Phishing is one of the most common cybersecurity threats, where criminals send fake emails pretending to be from trusted companies or agencies. These messages often trick recipients into clicking malicious links or downloading infected attachments. In 2024, Brazil saw a 35% increase in phishing attacks, according to security firm Eset. The goal is to steal passwords, financial data, or install malware.

Signs of a phishing email include spelling errors, generic greetings ("Dear customer"), suspicious URLs, and a sense of urgency ("Your account will be blocked immediately"). The macro close-up in the image highlights these details. Many attacks use copied logos from banks like Itaú or Bradesco, or services like Netflix and Mercado Livre.

To protect yourself, never click links in unsolicited emails. Hover over the link to see the actual destination before clicking. Enable two-factor authentication and report suspicious messages to your company's security team or CERT.br. Digital education is the best defense, as attacks become more sophisticated with artificial intelligence.

Frequently Asked Questions

How to tell if an email is phishing?

Check the sender, spelling errors, fake links, and excessive urgency. Never provide personal data without verification.

What should I do if I receive a phishing email?

Do not click anything, report as spam, and forward to the security channel of the involved institution.

Can phishing be prevented?

Yes, with training, anti-spam tools, and careful verification of each message.