How to protect yourself from phishing scams

Phishing is a type of online scam in which cybercriminals trick people into revealing sensitive information, such as usernames, passwords, or bank details, by pretending to be a reputable company. These attacks often arrive via email, SMS, or phone call, and can look incredibly convincing.

Scammers frequently impersonate well-known companies, government bodies, or banks to gain your trust. As a broadband provider, Virgin Media is often impersonated in these scams, so it's important to know how to spot phishing scams if you're with us.

Phishing attacks have come a long way. They can now copy real websites so closely that it's hard to tell what's fake. Once you start typing your details, scammers can see everything you do, even if extra security steps are involved. It's no surprise that phishing now accounts for a significant portion of cybercrime: according to the Verizon Data Breach Investigations Report, 20% of data breaches involve phishing.

Phishing scams come in many forms, and scammers use different tricks to catch people out. Understanding the most common types can help you spot a phishing attack before it does any damage. Here are the ones to watch out for: 

So, how can you spot a phishing email or message? Knowing what to look for can help you identify them before you click: 

Poor spelling or grammar

Legitimate companies and organisations have editorial teams to ensure their communications are clear and professional. So, if an email has obvious spelling or grammar mistakes, it could be a scam. These errors are the result of awkward translation from a foreign language, and sometimes they’re deliberate, to slip past spam filters and reach your inbox. 

Watch for urgent or threatening language

Scammers want you to panic or rush, especially when money or personal details are involved, hoping you won't take the time to check if the message is real or not. Phrases like 'Your account will be locked!' are classic phishing tactics, designed to stop you from thinking twice or seeking advice.

Look at the sender’s email address

It may look like a real email from Virgin Media or another business you use, but if you hover over or right-click the sender's name, you'll be able to see the email address it has been sent from. Suspicious sender addresses or links with small misspellings or extra characters can be easy to miss but are often a giveaway. Slow down and take extra care if you receive a message from someone for the first time. 

Unexpected attachments

Always hover your mouse over links to check if they lead where they claim to. If it doesn’t match what’s written or looks suspicious, it’s likely a phishing attack.

Phishing scams can be sneaky and convincing, but staying safe is easier when you build good habits into your daily online routine. Here are the key steps you can take to protect yourself, your devices, and those around you: 

1. Keep your software and settings up to date 
Make sure your devices, apps, and browsers are running the latest versions. Updates often include important security patches that help block phishing attempts and other threats. While you’re at it, check your privacy and security settings to ensure your logins and data sharing options are as secure as possible. 

2. Use multi-factor authentication (MFA) 
Whenever possible, turn on MFA for your online accounts. It adds an extra layer of security. So even if someone gets hold of your password, they still won’t be able to log in without your second verification step. 

3. Install antivirus and anti-phishing tools 
Good security software can detect phishing links and block suspicious websites. If you think you’ve clicked something dodgy, run a full antivirus scan straight away to catch and remove any threats. 

4. Be cautious with links and attachments 
If you get an unexpected message, especially one asking you to act quickly, pause before clicking. Instead of following the link, go directly to the official website (like My Virgin Media) to check your account. And if anything looks suspicious, forward the message to phishing@virginmediao2.com and delete it. 

5. Don’t overshare 
Legitimate companies won’t ask for sensitive info like passwords or full bank details over email or text. If something feels off, don’t respond. Reach out to the company using verified contact details instead. 

6. Stay informed and help others do the same 
Scammers are always updating their tactics, so it’s worth staying in the loop. Visit our Security Matters space in the Virgin Media Community for the latest scam alerts, real examples, and expert advice. And don’t forget to talk to your family, especially older relatives and young ones, about phishing. A quick chat can go a long way in helping them stay safe. 

7. Use strong, unique passwords 
Avoid using the same password across multiple sites. Instead, create strong, unique passwords for each account and consider using a password manager to help you keep track of them securely.

If you think you’ve fallen for a phishing scam don’t panic but act quickly. 

Change your passwords immediately for any compromised accounts. If you’ve entered your My Virgin Media username and password into a website that claims to be Virgin Media or in an email response, we recommend changing your My Virgin Media password immediately by visiting My Virgin Media and following the simple steps. 

Next, contact your bank or credit card provider, especially if the scam involved debit cards, online banking, or cheques. They can monitor your account for unusual activity and help secure your finances. 

Run a full antivirus scan on any device you used to click a suspicious link or download an attachment. This can help detect and remove any malware. Make sure your antivirus software is up to date to protect against future threats. 

It’s also important to report the scam to help stop it from spreading. Here’s who to notify: 

• Virgin Media: Forward any suspicious emails to phishing@virginmediao2.com 

• Action Fraud (England, Wales, and Northern Ireland) call 0300 123 2040 or visit actionfraud.police.uk 

• Scotland: Report to Police Scotland via 101 

• Your email provider: Mark the message as phishing or spam to help block similar messages in the future.

Finally, let others know. If you’ve been targeted, it’s possible others you know have been too. Share what happened with friends and family so they can stay alert and avoid falling for similar scams. 

Have a look at our Online Safety Guide to stay secure year-round.