Social Media Phishing

Phishing is a form of cyberattack that manipulates individuals into revealing personal information such as passwords, credit card numbers, or login credentials. On social media, phishing often appears to come from someone familiar—like a friend, colleague, or trusted organization—making the message seem more believable.

These attacks often contain links to fake websites designed to mimic trusted services, tricking users into entering sensitive information. The page might look identical to your bank, government service, or social media platform—but it's a carefully crafted copy designed to steal your data or install malware.

Even the most cautious users can fall for phishing scams. Always verify links and messages—especially when urgency or emotional manipulation is involved.

Common Social Media Phishing Techniques

• A fake security warning: Claims your account is compromised and asks you to verify login details.
• A suspicious link from a friend: Could lead to malware or fake login pages.
• A message pretending to be from support teams: Asking you to confirm account credentials.
• A fake prize or giveaway: Requesting your contact or payment info to “claim” the reward.

Examples of Popular Phishing Attacks

• "Verify Your Account" — You receive an urgent email from a fake bank or government site asking for your login credentials to avoid deactivation.
• "Boss Impersonation" — A message appears from a superior asking you to open a file or respond with sensitive information.
• "Friend in Trouble" — Someone claims to be your friend trapped in a foreign country and needs you to send money immediately.
• Spear Phishing — Highly targeted scams using information about your workplace or social network to appear legitimate.

Tips to Protect Yourself from Social Media Phishing

• Always double-check the sender's identity—even if it seems familiar.
• Hover over links to see the real URL before clicking.
• Do not share passwords, PINs, or personal information through messages.
• Enable two-factor authentication on all accounts.
• Use official apps and direct URLs—avoid links in messages.
• Be cautious with shortened links (like bit.ly) unless you trust the source.
• Report suspicious accounts and posts to the platform’s support team.