You should be familiar with two schemes that affect the way you handle e-mail and keep your business safe: phishing (“fish-ing”) and pharming (“farm-ing”). Both methods use unscrupulous means to find personal information or private account information about you and then use it for a hacker's personal gain.
Phishing occurs when you receive an e-mail that seems to be from a legitimate source, such as PayPal, Amazon, or even your bank. The e-mail usually requests that you immediately update your account information because it has been compromised or needs to be verified for other reasons. When you click the link (included in your e-mail notice), a bogus site opens that captures your personal information as you “update” the account.
Legitimate companies have done a good job of alerting users to potential phishing scams and making it easier for you to spot e-mails that don't originate with the company. Figure 3-3 shows a sample e-mail and the elements you should look for to determine whether it's real.
Generally, though, you should be aware of these details: