Skip to content
Cyber Unboxed
Attacks

Phishing: How a Simple Email Can Lead to a Big Problem

It only takes one click. Here is how phishing works, why it is so effective, and how you can spot it.

2 min readBeginner Aug 11, 2026

Explain Like I'm Not a Hacker

Phishing is like a fake knock at your door — it looks like someone you know, but it's a stranger trying to get inside.

The 30-second explanation

Someone pretends to be a person or company you trust, creates a sense of urgency, and asks you to click, sign in, or open something.

How it works

  1. 1

    1. Fake message

    You receive an email, SMS or message that looks legitimate.

  2. 2

    2. You click

    You click a link, download a file or enter your details.

  3. 3

    3. Attacker gets access

    The attacker collects your information or installs malware.

  4. 4

    4. Damage

    They can steal data, access your accounts or spread further attacks.

Phishing works by using fake emails, messages or websites that look real. The attacker pretends to be a trusted company or person, and tries to make you click a link, download a file or share your details. Once you do, they can steal your data, passwords or money.

Real-world example

You get an email saying your account has been suspended due to unusual activity, asking you to verify your identity within 24 hours. It looks real — same logo, same style. You click the link, enter your details, and unknowingly give the attacker access to your account. A genuine company will never ask you to verify your password this way.

How to spot it

  • Check the sender

    Look for unusual email addresses or domains.

  • Watch for red flags

    Urgent language, threats, or too-good-to-be-true offers.

  • Hover over links

    See where the link actually leads, before clicking.

  • Think before you act

    When in doubt, verify through the official website or app.

What to do

  1. 1Don't click any links or download attachments.
  2. 2Report it to your organisation or email provider.
  3. 3If you already clicked, change your password and enable MFA.

Stay curious. Stay safer.

This is one piece of a bigger picture. Explore more real-world examples, concepts and tips to build your cybersecurity awareness.

Explore More

Keep reading