“Hey, is this you?”
“Please vote for me.”
“Congratulations! You've been selected.”
“Your account has been flagged. Click here to verify.”
“There's a job opportunity for you.”
We've all received messages like these.
And sometimes, they're completely harmless.
But sometimes, that innocent-looking message is exactly how someone gets access to your account, information, or money.
The scary part?
It doesn't always look like a scam.
How does it work?
A lot of online attacks don't start with someone hacking into a complicated system.
They start with you clicking something.
Someone might send you a message that looks like it's from Instagram, your bank, a company offering a job, or even someone you know.
You click it.
Maybe it asks you to log in.
Maybe it asks for your password.
Maybe it asks for a verification code sent to your phone.
And just like that, you've handed over information that can be used against you.
This is where phishing and social engineering come in.
Instead of relying only on technical tricks, attackers often use psychology.
They create urgency.
They make you curious.
They scare you.
Or they offer you something you really want.
A job.
Money.
A giveaway.
A chance to win something.
Anything that makes you act before you think.
So what should you look out for?
Before clicking a link or replying to a suspicious message, pause.
Ask yourself:
Do I know this person or organisation?
Would they ever text first?
If it's supposedly from a company, don't rely on the message alone. Find the company's official website or verified social account and contact them through a trusted channel.
Is the message creating unnecessary urgency?
“Act now.”
“Your account will be deleted.”
“Only 10 minutes left.”
Pressure is often part of the trick.
Is someone asking for your password or verification code?
Don't share them.
Your OTP or verification code is not something someone needs to “help” you with.
One more thing
A message doesn't have to look obviously suspicious to be dangerous.
Sometimes it comes from an account that looks exactly like someone you know.
Sometimes the account itself has been compromised.
Sometimes the message is designed specifically to look like something you'd normally receive.
So don't just ask:
“Does this look real?”
Ask:
“Was I expecting this?”
That extra question could save you from a lot of trouble.
Cybersecurity isn't always about complicated code or sophisticated hackers.
Sometimes, it's simply about slowing down long enough to think before you click.
And if you're interested in learning more about cybersecurity and other tech skills, Nannoy can help you learn with a personalised learning path and a personal AI dedicated to your learning journey.
Because the more you understand how technology works, the easier it becomes to protect yourself while using it.
Stay curious. Stay cautious. And think before you click.
