Phishing is a fraud tactic where someone pretends to be a legitimate company or person to steal your information. Attackers usually reach you through a fake email, a text message (known as smishing), or a message on social media.

Attackers use phishing because it's easier to trick you into clicking a malicious link than to break into a computer system. They often collect real details about you from social media or other sources, like your name, your email, or the financial services you use, so the message looks convincing.

A well-crafted phishing message can look almost identical to a real one. It may include a company logo and sound official. Watch for these signs that a message is a phishing attempt:

• The link uses a misspelled URL or a web address that doesn't match the company it claims to come from.
• The message comes from a public email address instead of an official company email address.
• The message pressures you with fear or urgency.
• The message asks you to confirm personal information, like a password or financial details. No legitimate institution asks for this.
• The message has spelling or grammar mistakes.

Knowing these signs makes you less likely to fall for a phishing attempt. If you get a suspicious message claiming to be from Bitso, don't click any links or share any personal information.