Phishing and blagging are both social engineering techniques designed to steal a person’s information and extort money. Would you recognise the signs if you were at the end of a blagging or phishing attempt?
This blog post explores the differences between blagging and phishing – the signs to look for and how to respond.
What is phishing?
Phishing is an attempt to trick you into clicking a malicious link via email or another form of messaging like SMS. These messages claim to be from a trusted source, such as your bank or a courier.
The link takes you to an official-looking website where you’re asked to enter your details.
Once you enter your information, it can be used for fraudulent purposes, such as identity theft or unauthorised access to your accounts. Clicking the link can also download malware onto your computer.
Example phishing email:
Dear Valued Customer,
We have detected unusual activity on your account. Please click the link below to verify your account information and secure your account immediately:
Verify Your Account
Failure to do so within 24 hours will result in a temporary suspension of your account.
Thank you for your prompt attention to this matter.
Sincerely,
[Your Bank’s Name] Support Team
What is blagging?
Blagging is a kind of social engineering used by criminals to extort money from their victims. A message is sent via email, social media, or SMS that claims to be from a friend or family member asking for help. An elaborate story designed to pull on the heartstrings ends with a request for money.
These attacks are thoroughly researched beforehand, so they have enough information to make the message look realistic.
Example blagging email:
Hi [Your Name],
I’m in trouble and I need your help. I’m travelling, and I lost my wallet and phone. Can you please transfer £500 to me as soon as possible? I’ll pay you back as soon as I get home.
Here’s the link to send the money: [Fake money transfer link]
Thank you so much, I really appreciate it.
[Fake Friend’s Name]
Phishing vs blagging – what to look out for
Phishing emails target many recipients with generic greetings like “Dear Valued Customer,” whereas blagging scams focus on individuals, using their names for a more direct approach.
Avoid becoming the next victim of an online scam by looking out for these signs:
How to spot a phishing scam
- Spelling and grammar errors: watch out for mistakes in the content
- Unusual web address: are there any obvious errors in the URL? Do you associate this web address with the sender?
- A generic greeting such as ‘Dear Account Holder’
- Unexpected message: were you expecting a message from the organisation claiming to be the sender?
How to spot a blagging email
- Unusual tone of voice: does the tone of voice fit the sender of the message? Are they using language they wouldn’t usually?
- A message out of the blue: is it usual for your friend or family member to contact you this way? Were you expecting their message?
- Suspicious code: is there any suspicious code in the email?
- An urgent request: are they in a rush for you to transfer the money? Do they create a sense of immediate need?
If in doubt, follow up with the sender using a different form of communication. You should never click on a link in an email unless you are sure it’s from a legitimate source, and never reveal your password to anyone.
Education is the best line of defence in an organisation’s security posture. Ensure your employees know how to spot a fake email with cyber security training.
