If you're seeing this message, it means we're having trouble loading external resources on our website.

If you're behind a web filter, please make sure that the domains *.kastatic.org and *.kasandbox.org are unblocked.

Main content

How Not To Get Hacked: Phishing

Phishing is a common cyber attack in which attackers use fake emails, text messages, or other forms of communication to trick individuals into divulging sensitive information. In this video, we'll discuss how to recognize phishing attacks and offer tips for avoiding them. Created by Code.org.

Want to join the conversation?

  • piceratops ultimate style avatar for user Nazia
    Thank you this really helps!You guys break everything down into really easy bits which I think is a great strategy
    (2 votes)
    Default Khan Academy avatar avatar for user

Video transcript

My name is Jesse, and I'm a white hat hacker. The white hat hacker is somebody that hacks for good. They try to find vulnerabilities in systems and help those companies get better. You might be asking, how does a hacker get passwords in the first place? It usually happens because of human error, like using an easily guessable password or falling for phishing scam. A phishing scam is when you get an email from what looks like a familiar source asking you to log in or download something. Following the link will take you to a fake site that looks like the real ones. If you log in, you've been tricked into giving away your username and password and now someone has access to your real account. Links can trick you into downloading malware. Hackers use malware to spy on you and steal your information. If you accidentally download something like this from the internet, do not install it. Instead, only download software from verified sources. If you see a suspicious email or a text or a website, ask you for personal or financial information, do not fill it out. Legitimate sites won't ask you to send your password via email, even if an email request looks just like it's coming from a site you trust. It's better to just go to the site itself. And if you see an email from someone you know that says they're stuck in another country and urgently need to be wired money, be careful about how you respond in case their account was hacked and they're being impersonated.