Six Common Phishing Tactics and How to Outsmart Them

By Kevin Novak, Chief Information Security Officer at Old National Bank

Phishing scams are among the most persistent and dangerous forms of cybercrime. Whether delivered via email, text message, phone call, or fake websites, phishing attacks aim to trick individuals into revealing sensitive information.

At Old National, we deploy advanced tools and training to help protect our clients and employees from phishing threats. Here are five common phishing tactics — and how to outsmart them.

1. The “Urgent Action Required” Email

   • Pause and verify the content
   • Check the sender’s address
   • Contact the sender/company directly using known, good info

2. Malicious Attachments in Emails

   • Don’t open unexpected attachments
   • Use antivirus/antimalware software
   • Enable email filtering
   • Report phishing whenever possible

3. Malicious Links or Attachments in Texts

   • Don’t open attachments from unknown senders
   • Don’t open links from unknown senders
   • Block numbers from unknown senders

4. Phone Calls from “Support,” “Fraud,” or “Security” Teams

   • Hang up and call back using a known, good number
   • Never share sensitive information, especially passwords or MFA codes
   • Report suspicious calls

5. Spoofed Websites that Look Real

   • Double-check the website address/URL
   • Use known, good bookmarks or type the address manually
   • Look for HTTPS and a padlock icon () in or near the address bar
   • Use caution when navigating from publicly posted QR Codes

6. Social Media Impersonation

   • Verify the account
   • Don’t click links, send money, or share sensitive information
   • Report fake profiles

 

Final Thoughts

Phishing attacks are constantly evolving — but so are the tools and habits that can protect you. At Old National, we combine technology with education to help our clients stay safe.