What Is Phishing: Definition, Warning Signs, and How to Avoid It

Phishing is a scam that impersonates a trusted party in order to trick the victim into handing over their own password, one-time code, or personal data.

Table of Contents

• How Phishing Works
• Warning Signs to Recognise
• Phishing That Targets Children
• How to Avoid It

What is attacked is not the computer but the person. The scammer does not break into a system; they get the victim to open the door. That is why even the best security software cannot fully protect against phishing.

How Phishing Works

The pattern is almost always the same, in three steps.

Impersonation. A message arrives appearing to come from someone the victim knows: a bank, a school, a game platform, or even a friend whose account has been taken over.

Manufactured urgency. The content is always pressing - the account will be blocked today, a prize must be claimed within the hour, a suspicious charge must be cancelled now. The urgency is deliberate, because a panicking person stops thinking.

A fake link. The link opens a page that looks exactly like the real one, but the address differs. Everything typed there goes straight to the scammer.

Warning Signs to Recognise

• An address that is not quite right. Watch for letters replaced by numbers, or domains that look similar but are not identical. Reading the address to the end is the single most effective defence.
• Time pressure. No legitimate institution gives you a one-hour deadline by text message.
• Requests for a password or one-time code. No bank or platform ever asks for these, under any circumstances.
• Generic greetings. Dear customer instead of an actual name often signals a mass mailing.
• Implausible prizes. Winning a draw you never entered is the oldest pattern that still works.

Phishing That Targets Children

Children rarely have bank accounts, so what is targeted is whatever else they value.

• Game accounts. Offers of free Robux, skins, or rare items in exchange for logging in through a link. This is the most common form in Indonesia.
• Social media accounts. A message from a friend whose account has been hijacked, asking for the code that just arrived on the victim's phone.
• Fake quizzes and giveaways. Pages asking for personal data in exchange for a prize.

Children are especially vulnerable precisely because the offer touches something they genuinely want, and because the message often comes from a real friend's account.

How to Avoid It

1. Never click a link in an unsolicited message. Open the app directly instead.
2. One-time codes are shared with nobody, including people claiming to be staff, and including friends.
3. Turn on two-step verification. If a password leaks, the account is still protected.
4. Be suspicious of free things. Nobody gives away expensive game items for no reason.
5. Agree a house rule: every prize offer is shown to a parent before anything is clicked.

That last rule matters most. A child who knows they will not be scolded for almost falling for something will ask first - and that question is what prevents the loss. See also Digital Literacy for Children.