Let’s set the scene.
You’re halfway through your morning brew, phone buzzes, and there it is:
“🚨 URGENT: Your bank account has been suspended. Click here to restore access.”
Your heart skips a beat, your hands twitch toward that link… and that’s exactly what the scammer is counting on.
What Is Phishing, Really?
Phishing is when criminals pretend to be someone you trust—your bank, Amazon, Netflix, even HMRC—to trick you into clicking a link or handing over details.
It’s not new. It’s not clever. But it works—because it preys on panic and urgency rather than logic.
And once you bite? They can reel you in for:
• Bank logins
• Email credentials
• Credit card info
• Or even installing malware on your device
Real-Life Example
One of the nastiest recent scams in the UK pretended to be the Royal Mail. People got texts saying:
“You missed a delivery, pay £2.99 to reschedule.”
Looks harmless, right? But the payment page was fake, designed to steal your card details. And because it’s such a small amount, most people didn’t think twice.
Thousands fell for it.
How to Spot a Phishing Hook
- Check the sender address
“support@hsbc-security.com” is not the same as “@hsbc.co.uk”. Tiny differences matter. - Hover over links before clicking
On a computer, hover your mouse and look at the bottom left of your screen. On a phone, press and hold the link. If it looks dodgy—don’t click. - Urgency is a red flag
“Act now!” “Account suspended!” “Final warning!” – all designed to make you rush. - Spelling & grammar
Hackers are not English teachers. Mistakes are often the giveaway. - Unexpected attachments
Banks, HMRC, PayPal—none of them will send you an attachment out of the blue.
Do This Today
• Slow down — take a breath before clicking.
• Verify — if in doubt, log into the official app or website directly, not through the link.
• Report — forward dodgy emails to report@phishing.gov.uk and texts to 7726 (it’s free).
Key Takeaway
Phishing works because it hijacks your emotions, not your brain. The second you feel panic, that’s the second to pause.
Remember: real companies won’t mind if you double-check before clicking. Scammers are the only ones who’ll rush you.
At The Cyber Workshop, our Phishing Workshop shows you how these scams work, with real-world examples and practical steps to keep your details safe. No jargon, no blame, just the know-how to spot the hook before you bite.
Till next time,
Keep your fish on the plate, not in your inbox.
