By Sabrina Karl

Whether or not you’re familiar with the term phishing, you’ve most likely been a target. That’s because phishing scams attempt to access the private banking info of millions of Americans every year. Fortunately, easy-to-follow rules of thumb can help you thwart phishing criminals and keep your money safe.

A common strategy of phishers is to call you directly, presenting themselves as your bank. They may suggest there’s an issue regarding your account that needs your urgent attention, or they may simply say they’re conducting routine account maintenance. What they’ll likely ask for next is your bank account number, your banking login credentials, or your social security number.

Private information like this should never be provided over the phone to someone who has contacted you, since you have no idea who is actually on the other end of the line. No matter how official and convincing the caller may sound, someone calling to ask for this type of information should raise a red flag.

If the scammer doesn’t succeed in coaxing this information out of you in the initial phone call, they’re likely to try a couple more tactics. One is to urge you to call a phone number they provide for your bank, or to visit a specific web address that they provide. These are most likely spoofed numbers and sites, with calls being answered by accomplices of the caller and the fake website siphoning your sensitive information or installing malware on your computer.

The way to thwart them is to not provide sensitive information during the initial phone call, and to avoid calling any number or visiting any website the caller provides. If you want to contact your bank, call them at the phone number listed on your statements, or type your bank’s known web address directly into your browser.