Protect Yourself from Phishing Scams

October 9th, 2024

A picture of a hand holding a cellphone with a call incoming with an unknown caller. Phishing scams are a prevalent form of online fraud where cyber criminals deceive victims into revealing personal information, such as passwords, bank details, or credit card numbers. Their ultimate goal is to steal money, gain access to sensitive data, or install malware on victims’ devices. These scammers often pose as reputable companies, friends, or acquaintances in fake messages that include links to fraudulent websites.

You may have encountered this yourself—perhaps receiving a message from a church leader asking for money or gift cards. Phishing is not only damaging but also a leading cybersecurity threat. According to the IBM Cost of a Data Breach Report, phishing accounts for 15% of all data breaches, costing organizations an average of $4.88 million.

Phishing attacks can occur through various channels, including emails, text messages, social media posts, or direct messages. Here are some signs to help you identify phishing attempts:
Signs of Phishing:

Suspicious Sender: Check the email address or phone number carefully. Phishers often use addresses that resemble legitimate ones but may contain slight misspellings or unusual domains.
Generic Greetings: Legitimate organizations typically use your name. Phishing emails often begin with generic greetings like “Dear Member.”
Urgent Language: Phishing messages frequently create a sense of urgency, urging you to act quickly without thinking.
Unexpected Attachments or Links: Be cautious of unsolicited emails containing attachments or links. Always hover over links to see the actual URL before clicking.
Poor Grammar and Spelling: Many phishing emails feature grammatical errors or awkward phrasing.
Requests for Personal Information: Reputable organizations, including ministries, usually don’t ask for sensitive information via email. Be wary of any request for passwords, Social Security numbers, or financial details.
Inconsistent Branding: Look for inconsistencies in logos, fonts, or colors compared to official communications from the organization.
Too Good to Be True Offers: If an email promises large sums of money or unrealistic rewards, it’s likely a scam.
Check the URL: Before entering any information, verify the website’s URL for authenticity. Look for “https://” and signs of security.
Follow-Up: If you receive a suspicious email from a known contact, follow up directly to verify its legitimacy.

How to Protect Yourself:

While you can’t prevent phishing from happening entirely, you can take steps to reduce the likelihood:

Check Your Public Information: Review what information is available about you on public websites.
Limit Public Listings: Avoid listing email addresses or personal information about individuals on your site.
Implement Security Protections: Ensure appropriate security measures are in place on ministry networks and computers.
Train Staff and Volunteers: Educate staff and volunteers on proper cyber hygiene—practices that maintain the health and security of systems and data.
Communicate Safeguards: Inform those who contribute about the precautions your organization is taking to ensure funds are handled securely. Discuss who is authorized to ask for money or gift cards and clarify email addresses to avoid scams, especially during stewardship campaigns.
Respond Promptly to Incidents: Be prepared to inform your congregation about any scams or incidents in a timely manner.
Be Transparent: If something does happen, communicate quickly after understanding the situation. Silence can harm your reputation, especially if individuals fall for the scam.

Ultimately, the trust and reputation of pastors and ministry staff are at stake, which can disrupt the peace within our congregations.

If you have any questions or need assistance, we’re here to help. Don’t hesitate to reach out for further discussion on these tips or other cybersecurity concerns.