Phishing
Also called: phishing message, phishing link, smishing, vishing
Using a fake message, website or call that appears to come from a trusted organisation to trick someone into revealing passwords, OTPs or other details.
Phishing messages often create urgency ("your account will be blocked today") and include a link to a fake login page. Whatever is typed there goes to the fraudster. Phone versions ask you to read out an OTP or install a remote-access app.
The defence is to ignore links in messages and reach the organisation through its official app or a website address you type yourself.
Example
"Update your KYC within 2 hours or your demat account will be blocked: [link]" is a typical phishing SMS.
Learn more in these lessons
- Impersonation, phishing and account securityHow do fraudsters impersonate brokers and steal trading accounts?
- What to do after a suspected fraudWhat should you do if you have been defrauded while investing?
Related terms
Spotted a mistake or something unclear? Report it by email. Here is how corrections work.