The Sneakiest Way That Phishing Scammers Can Get Your Passwords

coruscate(76)

Published in

#security

Words

596

Reading

3 min

Listen

Play

Hi Friends!

The topic of avoiding phishing scams is really important here in the crypto space. I think most of us know to avoid clicking on sketchy links or opening attachments from emails we don't trust.

Scammers are constantly evolving their strategies and tactics though - and their phishing attempts are becoming more and more believable.

The "Ad" Section at the Top of a Google Search

Does the below image look familiar? Almost anytime you search for something in Google, the first few hits will be ads, and not real search results. I am using Binance as an example. If you search for Binance, the top hit is actually an ad. You can see in the section I circled below that it clearly says "AD" right next to the link.

Now, I'm not picking on Binance, because this does actually take you to the real Binance site - but how easy would it be for a scammer to pay for Google Ads to make a fake Binance site and put it as the top hit?

Many people click on that top link without realizing it is an add... or without understanding the potential security issues.

SEO vs. Google Ads

Why do scammers use this tactic? Because it is much easier for them to pay for google ads to artificially prop their website to the top of a google search instead of spending months building the SEO (Search Engine Optimization) to organically get their site to the first page of Google.

Also, many people click on these links without thinking twice, and so it can be an effective strategy.

Always Check The Website Link Before Inputting Passwords

If you are someone who often clicks on the "AD" at the top - simply make it a habit to scroll down to the first real search result as this is more likely to be the legitimate website.

Even then, we should always be double checking the link in the bar to make sure it is correct. I always double check to make sure it says "Https" instead of "Http". The S stands for secure and sites that only list "http" are not secure and are likely not a good site to enter any kind of password.

A Simple Change to Stay More Secure

I hope you guys found this video helpful! It is such an easy change to make to help keep you and your information more protected. Even if the ad looks like the correct link - just make it a habit to not click on them.

If you guys have any questions, please let me know and I'll do my best to help! If you have any other tips and tricks for people to avoid phishing scams, feel free to shoot them below as well. Let’s learn from each other!

xo, Lea

Equipment Used in this Vlog

In order to add an extra layer of transparancy and value to my vlog's, I will be adding a list of equipment used at the bottom of each one! If you ever have questions about the gear I use, or how I use it - please don't hesitate to ask.