What is phishing?
Phishing is type of cyber scam used to trick people into revealing sensitive information.
Attackers try to trick users to reveal personal information, financial information, or confidential data. They pretend to be someone trustworthy and known to users by falsifying logos, email addresses, websites, and more. Phishing attacks usually happen via fake email messages that almost seem credible.
Emails aren’t the only method of attack: phishing can also take place by sending a fradulent link via SMS (also called smishing) or through phone calls, where a fake operator tries to steal confidential information (also called vishing).
How to recognize it?
Here are some simple rules that will help you identify a potential attack of this type:
Check the address or origin of the sender.
Always verify the credibility of the sender of emails, SMS, chat messages or phone calls. In the case of an email, if you are accessing from your computer, you can hover your mouse over the email address to verify its correctness. If you have doubts about the sender, do not reply, do not click on links and do not open any attachments.
Check the grammar, tone and content.
Phishing emails often contain grammatical or punctuation errors, express urgency and use hostile language. Pay close attention especially to emails containing requests for confidential information or money transfers.
Learn to recognize suspicious pages.
Malicious email messages often contain references to websites that, at first glance, look very similar to the original ones, both in URL address and content. For this reason:
- before clicking any link, hover over it with your mouse cursor to verify the actual destination;
- make sure it is a protected page: the address of these pages always starts with https:// and, in various browsers, there is a padlock icon;
- we suggest you always type the Telepass address in your browser's navigation bar and access the Reserved Area by clicking on the appropriate link.
Do not provide confidential information.
Do not share your password or PIN with anyone. This information is confidential and we will never ask you to reveal these details.
Report the incident.
If you suspect you have received an unreliable email from Telepass, alert us by selecting the "Submit a report" button, available both at the beginning and at the bottom of the page. A new email message will open: attach the suspicious communication and describe what happened, indicating, for example, the date and time of receipt, the sender's address, any presence of links or attachments and whether you clicked on a link or provided personal or payment data. Do not send us passwords, OTP codes or access credentials. Your report can help us adopt timely and effective countermeasures.
Victim of a phishing attack?
If you think you’ve received a fraudulent email/SMS/phone call or have revealed your personal data to an attacker,
here’s what you should do:
