Phishing on Windows: what to look for
Phishing is a message or pop-up designed to trick you into handing over a password or clicking something harmful. It's the most common way ordinary people get caught out, and spotting it is a skill anyone can learn.
Reading is great. Tracking makes it stick. Sign up for a free Dashboard to tick off tasks and see your Security Score.
Get my free Dashboard →
Cyber Nova AI helps you prepare for Cyber Essentials. It doesn't award or certify it. Follow the steps here to get ready, then apply for certification through an accredited Cyber Essentials body when you're set.
How it reaches you
On Windows it shows up as emails, browser pop-ups, and fake system alerts. A common trick is a full-screen message claiming your PC is infected, with a phone number to call. That message is the scam. Microsoft never puts a phone number in a security warning.
The tell-tale signs
Common warning signs include:
4 steps
What to do
Don't click, don't call, and don't enter anything. Close the message. If it claims to be from a company you use, go to that company's website yourself, in a new tab, rather than using any link provided.
If you did click
Change the password for any account you entered details into, and turn on two-step verification if it isn't already on. Then run a scan in Windows Security. Acting quickly limits any harm.
Track your Windows security progress. Free.
Create a free account to tick off tasks, see your Security Score improve, and know exactly what you've done and what's still to do.
Start your free security check