Q.Manohar received an email from a company, named Make money Pvt. Ltd., claiming that Manohar has won ₹20 lakhs in a survey done online. In order to claim the prize money, he was required to answer few security questions such as his Name, Account number, PAN card details, Phone number and OTP for verification purposes. For this, he had to click on the link provided in the email. Answer the following questions:

Phishing Awareness

Imagine you receive an email that looks exactly like it came from your bank. The logo is correct, the language sounds official, and it warns you that your account will be closed unless you "verify" your details immediately. There is a button that says Click Here to Secure Your Account.

Most people's first instinct is to panic and click. That is exactly what the attacker is counting on.

What Phishing Actually Is

Phishing is a form of online fraud where a criminal impersonates a trusted person or organisation — a bank, a government agency, a delivery company, even a friend — to trick you into revealing sensitive information. That information might be your password, your credit card number, your Aadhaar number, or access to your online accounts.

The word itself is a play on "fishing": the attacker casts a bait (the fake message) and waits for someone to bite.

Why It Works So Well

Phishing exploits human psychology, not technical vulnerabilities. The attacker creates urgency ("Your account will be locked in 24 hours"), fear ("Unauthorised login detected"), or greed ("You have won a prize"). Under that pressure, most people stop thinking critically and act on impulse.

A well-crafted phishing message can look indistinguishable from the real thing. Attackers copy logos, email formats, and even the tone of voice used by the organisation they are impersonating.

Common Forms of Phishing

• Email phishing — the classic fake email with a malicious link or attachment.
• SMS phishing (smishing) — a text message that appears to come from your bank or a delivery service.
• Voice phishing (vishing) — a phone call where someone pretends to be from your bank or tech support and asks for personal details.
• Social media phishing — fake messages or profiles on platforms like Instagram or WhatsApp that ask for login credentials or payment.

How to Recognise a Phishing Attempt

There are reliable warning signs, even in a very convincing message:

• Generic greetings — "Dear Customer" instead of your actual name.
• Urgency or threats — "Act now or your account will be suspended."
• Suspicious links — hover your mouse over a link without clicking. If the web address looks strange (e.g., bankofindia-secure-login.xyz instead of bankofindia.co.in), it is a trap.
• Requests for sensitive information — no legitimate organisation will ask for your password, OTP, or PIN via email or text.
• Poor grammar or spelling — though this is becoming less common as attackers improve their messages.
• Unexpected attachments — especially files ending in .exe, .zip, or .docm. …

Password Strength

Think about how you protect something valuable at home. You might use a simple latch on a cupboard, a lock on your room door, or a safe with a combination. The stronger the lock, the longer it takes for someone to break in. Password strength works exactly the same way — it is a measure of how hard it is for an attacker to guess or crack your password.

The Everyday Intuition

Imagine you are telling a friend a secret word. If you choose "password" or "123456", anyone who tries that word will get in immediately. That is a weak password. Now imagine you pick something like "MyDogAteMyHomework2024!" — even someone who knows you well would struggle to guess it. That is a strong password.

The core idea is simple: a strong password is one that an attacker cannot figure out quickly, even with the help of a computer.

What Makes a Password Strong?

A password's strength depends on two things working together:

• Length — A longer password is almost always stronger than a shorter one. Think of it like a combination lock with more digits: each extra digit makes it exponentially harder to guess. …