What do you do when you want to do some online banking, but you don't remember the correct website to visit (or have it bookmarked)?
If you're like most people, you head to your favorite search engine and enter the financial institution's name. Most of the time it works.
However, some phishing sites successfully get good rankings - the first or second search result - and steal clicks from legitimate sites. A recent study conducted with a California credit union showed how easy it is to pull this off.
It may seem wise to Google your bank to get to the website. However, you can't count on this approach. When in doubt, go to the extra trouble to hunt down a statement or call your bank for the correct address.
In general, obscure institutions (such as small banks and credit unions) are more vulnerable to this tactic. Scammers have a hard time getting better seach placement than Bank of America's legitimate site.
Further reading:
Justin, Thanks for your nice article about phishing and the way to prevent scams, It’s really very informative one, every one should know this in current world.