Phishing scams, though rare, can happen on marketplace platforms like the Andela Talent Cloud. Cybercriminals may impersonate trusted entities to steal sensitive information like passwords and credit card details. They often use emails, social media, or fake websites that look legitimate.
Scammers might create fake client profiles with verified email domains to gain your trust and request interviews or transactions. They can send malicious links or attachments that install malware on your device, even during an interview. Additionally, they may use other social engineering tactics to manipulate you into sharing sensitive information or compromising your security.
Here are tips to identify a phishing attempt while using the Andela Talent Cloud:
- Check the interviewer's email address: Look for discrepancies in the sender’s email address. Phishing attempts often come from addresses that look similar to, but are not exactly the same as, legitimate addresses.
- Look for generic greetings: Be cautious of messages that start with generic greetings like “Dear User” instead of your name.
- Beware of urgent actions: Phishing scams often create a sense of urgency, pushing you to act quickly to avoid negative consequences.
- Verify links before clicking: Hover over links to see the actual URL. If it looks suspicious or doesn’t match the legitimate website, don’t click on it.
- Check for spelling and grammar errors: Many phishing messages contain spelling and grammar mistakes.
If you suspect a phishing attack, take action:
- Don't click on links or download attachments: If you receive a suspicious message, don't click on any links or download any attachments. In addition, do not run a piece of software or code that you are not sure of the source or purpose.
- Be wary of requests to communicate outside official channels: If your interviewer requests that you conduct your interview outside of official channels, report it to the Talent Support team.
- Report any suspicious messages: Report any phishing messages to the Talent Support team with relevant screenshots of the message.
- Verify the source: Hover over links to see the actual URL to confirm legitimacy and contact the the Talent Support team to verify the message's legitimacy or a requested interview.
- Update your device and security software: Ensure your devices are running up-to-date software (enabled automatic software updates where applicable). This includes antivirus and anti-malware software, operating systems, messaging applications, and VPN software.
- NEVER share any personal information: Interviewers should never ask you for your personal information, such as passwords, encryption keys, PINs, and other forms of sensitive PII. If you are asked for this information, please report it to the Talent Support team immediately.
Phishing attacks should be treated seriously, even on the Andela Talent Cloud. By staying vigilant and following these tips, you can protect yourself and your information. Always be cautious of unsolicited messages and, when in doubt, verify the source before taking any action. Finally, when you see something, say something. Security starts with you and me!