Skip to main content

Phishing and scams on Linux

Running Linux protects you from a lot of malware, but it makes no difference at all to phishing. A scam email or fake login page works the same whatever system you're on, because it targets you, not your computer. This is the threat most likely to catch out a Linux user, so it's worth knowing the signs.

Reading is great. Tracking makes it stick. Sign up for a free Dashboard to tick off tasks and see your Security Score.

Get my free Dashboard →
CE: Malware ProtectionEasy
An illustration warning about a phishing scam

Cyber Nova AI helps you prepare for Cyber Essentials. It doesn't award or certify it. Follow the steps here to get ready, then apply for certification through an accredited Cyber Essentials body when you're set.

How to spot a phishing message

A few tells give most scams away.

4 steps

The habit that beats it

When a message asks you to log in or pay, don't use its link. Open a new browser tab and type the company's address yourself, or use a bookmark. That one habit defeats almost every phishing attempt.

If you clicked

If you entered your password on a fake page, change that password straight away, and change it anywhere else you used the same one. Turn on two-factor authentication for that account. If it involved payment details, contact your bank.

Track your Linux security progress. Free.

Create a free account to tick off tasks, see your Security Score improve, and know exactly what you've done and what's still to do.

Start your free security check