You open your email and you have a message claiming your bank account has been compromised. You click the link, log in, and, whoops, you just handed your credentials to a cybercriminal. You’ve been a victim of phishing, where scammers bait you with fake messages and reel you in like an unsuspecting fish. You don’t have to be their next catch. Here’s how to recognize and fight back against phishing attempts.

If it feels like scammers are everywhere, it’s largely because they are. Every day, they’re cooking up new ways to trick people into giving up money, data, or access to their accounts. One of the biggest problems we run into is that we’re bombarded with so many scam warnings that we start tuning them out. That’s called threat fatigue, the phenomenon when you get so tired of hearing about security risks that you stop paying attention. That’s exactly what scammers want.