Half don't know what phishing is

Nearly half of people in the UK don't know what a phishing email is, with just 54 per cent understanding what the term means.

And people in this country are so confused by the practice that only 42 per cent of them would feel comfortable explaining the concept to someone else, according to online payment firm PayPal.

Phishing scams typically attempt to steal a surfer's financial details by convincing them to input the information into a 'spoofed' webpage, usually reached by clicking on a link in a fake email that appears to come from a bank.

"Phishing emails are designed to target vulnerable people who perhaps don't know very much about using the internet. The good news is that just two per cent of people in the UK have fallen for these scams," said Michael Barrett, chief information security officer at PayPal.

PayPal announced the results of its latest research this morning at a gathering of industry experts in London to discuss the problem of phishing.

The conference, hosted by online payment service PayPal, included participants from the Metropolitan Police, the Confederation of British Industry (CBI), The Association of Payment and Clearing Services (APACS), and the Interactive Media in Retail Group (IMRG).

Barrett explained that one of the main problems PayPal had was protecting its 143 million worldwide customers from themselves, as stopping people clicking on links in emails from untrusted sources is very hard to do.

Barrett also added that it was "working with law enforcement and court systems so they know how to prosecute electronic crimes effectively". However, as phishing is a crime that is potentially incredibly profitable, more scammers are attempting to get in on the act.

Charlie McMurdy of the Metropolitan Police told attendees that it had neither the resources nor the expertise to deal with the problem on its own.

"If you were to walk into a police station and report an instance of phishing you would be lucky to find someone who knew what you were talking about," McMurdy said. "We need to work with the banks, the ISPs... it has to be everybody pulling together."

Jeremy Beale of the CBI attacked the system used for reporting electronic crime in the UK, calling it a "shambles".

"What the hell do people do? The government has not addressed this problem," Beale said.

However, the main problem with phishing scams was the lack of education on the topic. "There is no concerted education program about phishing in the UK," said Beale.

Colin Whittaker of APACS added that many people were so ignorant about the topic, they "don't realise they have been a victim of a phishing attack".

"Many people have funny ideas about the way the internet works," said Whittaker.

PayPal offered the following four tips for spotting a phishing email.

- Generic greetings. Many spoof emails begin with a general greeting, such as: "Dear PayPal member." If you do not see your first and last name, be suspicious and do not click on any links or button.

- A fake sender's address. A spoof email may include a forged email address in the "From" field. This field is easily altered.

- A false sense of urgency. Many spoof emails try to deceive you with the threat that your account is in jeopardy if you don't update it ASAP. They may also state that an unauthorised transaction has recently occurred on your account, or claim PayPal is updating its accounts and needs information fast.

- Fake links. Always check where a link is going before you click. Move your mouse over it and look at the URL in your browser or email status bar. A fraudulent link is dangerous.

www.whatisyourtq.com

More news via RSS Post item to Del.icio.us Post item to Digg.com