Phishing and social engineering

Social engineering means tricking people instead of hacking computers. Attackers pretend to be a boss, a bank, IT support, or a tribal office.

Red flags

• Urgency: "Act now or your account will close."
• Requests for passwords, codes, gift cards, or wire transfers.
• Sender addresses or links that look almost right but not quite.
• Unexpected attachments.

What to do

Stop and verify using a phone number or website you already know is real, not the one in the message. Report suspicious messages to your IT or security team. Reporting quickly protects everyone else.