Prevent Phishing

In phishing cybercriminals try to steal your personal information or login credentials. With this information, they can gain access to your account, change your information, or scam you in other ways. Phishing often occurs via email, but it can also happen through text messages (smishing), mail, WhatsApp, phone calls (vishing), QR codes (quishing), or fake websites. These messages are so convincing these days that they’re hard to tell apart from the real thing.

How does phishing work?

In phishing, criminals often try to lure you to a fake website that looks like a trustworthy one, such as a bank’s or an insurance company’s site. Without realising it, you log in to such a counterfeit website, enter sensitive information, or your device becomes infected with malicious software (malware). Criminals can then gain access to your real account to make changes or use this information for other malicious purposes.

Unfortunately, the name Athora—or one of our brands, Zwitserleven and Reaal—is sometimes misused in phishing attempts. That’s why it’s especially important to stay alert.

How to recognise phishing?

Phishing can occur via email, text message, WhatsApp, social media, the mail, or by phone. Be especially careful if a message has one or more of the following characteristics:

• A strange or unusual sender address
  For emails, always check the email address. Criminals often use addresses that resemble those of official organisations. Does the address not match the company’s website? Then it could be phishing.
• You’re being pressured
  For example: “Your account will be blocked immediately” or “Respond within a few minutes.”
• You’re asked to click a link or scan a QR code and immediately enter your information
  The text accompanying links or QR codes often contains words like overdue payment, log in, personal page, or confirm your details. Never enter confidential information via a QR code or a link from an email, text message, or app.
• The link does not lead to the expected page
  Hover your mouse over the link (without clicking) to see where it actually leads.
• The message is not addressed to you personally
  For example: “Dear customer” instead of your name.
• Your email program or spam filter flags the message as spam
  Take such warnings seriously.
• Not sure about a link?
  Check it using the online tool checkjelinkje.nl. You’ll then see where the link takes you and whether it’s safe. You can also contact us via Service & Contact - Customer Service for Individuals.

Please note: In the past, phishing messages often contained spelling and grammar errors. Thanks to AI, they are now much better written.

What can criminals do with leaked data?

Criminals can use your data to gain your trust or steal your identity. For example:

• Hacking into accounts
  Do you use the same username and password combination for multiple accounts? A single data breach can leave all of these accounts vulnerable.
• Help desk fraud
  With your data, criminals can credibly impersonate an employee or an official agency to gain your trust for the benefit of their criminal activities.
• Targeted phishing
  By using your name and other details, phishing messages appear even more convincing.
• Identity fraud
  Criminals can sign up for subscriptions, incur financial obligations, or carry out criminal activities in your name.

What can you do yourself?

• Use strong, unique passwords.
  A password manager can automatically generate these for you and store them securely.
• Regularly check to see if your data has been leaked, for example via Have I Been Pwned or Check je hack from the police. Change your password immediately if it turns out to have been leaked.
• Enable two-step-authentication (2FA/MFA) wherever possible.
  With 2FA or MFA, you cannot log in using just your password.
• Use only trusted devices and networks.
  Avoid public Wi-Fi networks: others may be able to eavesdrop.
• Did you receive a suspicious email from one of our brands?
  Forward it to valse-email@athora.nl. This helps us identify new phishing attempts.
• Did you accidentally share your information?
  Unfortunately, this happens to thousands of people every day. So don’t be embarrassed—but do take immediate action: contact us here.
• Have you been a victim of cybercrime?
  Always file a report with the police: I want to report phishing | politie.nl
• Would you like more tips on online safety?
• Then visit the page Safe Internet for practical and reliable information. For more information, visit the police’s website: Phishing / smishing | politie.nl. In addition, you’ll find veiliginternetten.nl even more general tips and advice on safe online behavior.