Spot, stop, and report phishing, smishing and vishing.
20 lessons · knowledge checks · final exam · verifiable certificate
Buy now · CHF 9.90 Open in the course readerPhishing is a fraudulent message that pretends to come from someone you trust, such as a bank, delivery service, IT department or boss, to make you click a link, open a file, hand over a password or code, or send money.
They are phishing through different channels: smishing uses SMS or messaging apps, vishing uses phone calls, often with a spoofed caller ID, and quishing hides the malicious link in a QR code on a poster, letter, parking meter or email.
Preview the link by hovering or long-pressing, find the hostname, and read it from right to left to identify the registrable domain. If that domain does not belong to the service, or uses tricks like an @ sign or xn-- characters, do not log in there; use your own app or bookmark.
No. The padlock and https only mean the connection is encrypted. They say nothing about who runs the site, and phishing sites use HTTPS routinely because certificates are free and automatic.
Hang up and call the number printed on your card or in the official app. Caller ID can be spoofed, and one-time codes are meant only for you. A legitimate bank will not mind you calling back.
Systems that hide file extensions show Invoice.pdf.html as Invoice.pdf, yet only the last extension decides how a file opens, so it opens in a browser and can show a fake login page. A right-to-left override character can also make a program's name look like a PDF. Show extensions and get documents through your own route.
One-time purchase, no subscription. Pay as a guest — no account needed.
Buy now · CHF 9.90 Open in the course readerLessons unlock after a single one-time purchase — no subscription. Pricing & FAQ → · All course overviews →