What is Phishing?

How can you protect from online fraud?

Additional to the information I provided here are a few more steps you can consider (this were obtained from office.microsoft.com):

• Never reply to e-mail messages that request your personal information –  Be very suspicious of any e-mail message from a business or person that asks for your personal information — or one that sends you personal information and asks you to update or confirm it. Instead, use the phone number from one of your statements to call; do not call a number listed on the e-mail message. Similarly, never volunteer any personal information to someone who places an unsolicited call to you.
• Don’t click links in suspicious e-mail –  Don’t click a link contained in a suspicious message. The link might not be trustworthy. Instead, visit Web sites by typing their URL into your browser or by using your Favorites link. Do not copy and paste links from messages into your browser.
• Use strong passwords and change them often -   If your account allows them, strong passwords combine uppercase and lowercase letters, numbers, and symbols, which make them difficult for other people to guess. Don’t use real words. Use a different password for each of your accounts and change them frequently. It’s hard to remember all those passwords. For tips on creating strong passwords and how to remember and store passwords securely, see Creating stronger passwords.
• Don’t send personal information in regular e-mail messages -  Regular e-mail messages are not encrypted and are like sending a post card. If you must use e-mail messages for personal transactions, use Outlook to digitally sign and encrypt messages by using S/MIME security. MSN®, Hotmail®, Outlook Express, Microsoft Office Outlook Web Access, Lotus Notes, Netscape, and Eudora all support S/MIME security.
• Do business only with companies you know and trust -  Use well-known, established companies with a reputation for quality service. A business Web site should always have a privacy statement that specifically states that the business won’t pass your name and information to other people.
• Make sure the Web site uses encryption -  The Web address should be preceded by https:// instead of the usual http:// in the browser’s Address bar. Also, double-click the lock icon  on your browser’s status bar to display the digital certificate for the site. The name that follows Issued to in the certificate should match the site that you think you’re on. If you suspect that a Web site is not what it should be, leave the site immediately and report it. Don’t follow any of the instructions it presents.
• Help protect your PC -  It is important to use a firewall, keep your computer updated, and use antivirus software, especially if you connect to the Internet through a cable modem or a digital subscriber line (DSL) modem. For information on how to do this, visit Protect your PC. For additional information on virus protection, see Best practices for protection from viruses, and Best practices to help prevent spam. You should also consider using anti-spyware software. You can download Microsoft anti-spyware or use a third-party product available from the security software downloads and trials site.
• Monitor your transactions -  Review your order confirmations and credit card and bank statements as soon as you receive them to make sure that you’re being charged only for transactions you made. Immediately report any irregularities in your accounts by dialing the number shown on your account statement. Using just one credit card for online purchases makes it easier to track your transactions.
• Use credit cards for transactions on the Internet -  In most locales, your personal liability in case someone compromises your credit card is significantly limited. By contrast, if you use direct debit from your bank account or a debit card, your personal liability frequently is the full balance of your bank account. In addition, a credit card with a small credit limit is preferable for use on the Internet because it limits the amount of money that a thief can steal in case the card is compromised. Better yet, several major credit card issuers are now offering customers the option of shopping online with virtual, single-use credit card numbers, which expire within one or two months. For more details, ask your bank about perishable virtual credit card numbers.

My personal practice? If I receive an email were I am not sure or it create doubts. I go directly to the website or I call the company. For example if I receive an email from Fedex that they cannot deliver my package and I am not sure if I order a package I call FedEx directly. What you will realize is that the first thing they will do is ask you for a tracking number that you don’t have because the email never include that but if you are able to bypass their system, talk to a representative and ask. If the email is coming from my bank or PayPal, I will logon directly to their site and find out additional information or like I mentioned before I will call. Beleive me, it will cost you less hassle a few minutes on the phone than your computer infected with viruses or your whole personal life stolen.

If you are not sure if your computer is infected or if you are fully protected, you can contact us and we will be glad to help you.

If you like to read more you can visit these links:

http://office.microsoft.com/en-us/outlook-help/identify-fraudulent-e-mail-and-phishing-schemes-HA001140002.aspx

http://office.microsoft.com/en-us/outlook-help/identify-fraudulent-e-mail-and-phishing-schemes-HA001140002.aspx#BM111