FixableScams & deception
Spear-phishing
Phishing written for you alone, using details that make it ring true.
Understand it
Rather than a mass mailing, the sender studies you first - your role, your colleagues, a deal in progress - and writes to fit. Because it belongs in your world, it is far more convincing. In our experience, it is how most serious intrusions begin.
How to spot it
A message that knows a little too much, names real people or projects, and lands at a plausible moment.
Close the gap
- Treat requests that draw on inside knowledge as more suspicious, not less.
- Agree a call-back rule, or a code word, for anything involving money or data.
- Keep your role, email and phone off public pages where you reasonably can.
- Report the attempt - one is rarely the last.
What to do about it
This is part of your plan at the Hardened level - Add passkeys or a security key. Work through it there and you’ll close this off along with everything else it covers.