Како уочити е-пошту за пхисхинг за 10 секунди
24. јун 2026. · 3 мин читања · Коментари
Пецање је најчешћи начин на који се компромитују налози. Модерни мејлови за превару изгледају убедљиво стварни. Ево неколико знакова који их одају сваки пут.
Пример е-поште за „пецање“.
Тај емаил има најмање пет црвених заставица видљивих пре него што прочитате тело. Ево како да их уочите:
1. Проверите адресу е-поште пошиљаоца
- The display name can say anything — "PayPal Security", "Apple Support", "Your Bank". Click on it to reveal the actual address.
- Look carefully at the domain.
paypa1-support.comis not PayPal. Scammers use typos, hyphens, and look-alike characters (1 instead of l). - Legitimate companies always email from their own domain:
@paypal.com,@apple.com, etc.
2. Уочите вештачку хитност
- Phishing emails create panic. "24 hours", "immediately", "permanently closed", "action required" — these phrases are designed to make you click before you think.
- Real companies don't threaten to delete your account in 24 hours over an email. If something were genuinely wrong, you'd see a notice when you log in.
3. Пређите курсором преко веза пре него што кликнете
- On a computer, hover your mouse over any link without clicking. The real destination appears in the bottom-left corner of your browser.
- A button that says "Verify My Account" might actually lead to
paypal-verify-login.ru. The button text is decoration — the URL is what matters. - On mobile, press and hold a link to preview the URL before it opens.
4. Генерички поздрав
- "Dear Valued Customer" or "Dear User" means the sender doesn't actually know your name — because they sent this to thousands of random email addresses.
- Your bank, PayPal, and Amazon all know your name. They will use it.
5. Неочекивани прилог
- An invoice you didn't request. A "shipping label". A "document for your review". If you didn't expect an attachment, don't open it.
- Malicious attachments are commonly disguised as PDFs, Word documents, or ZIP files. Opening them can install malware silently.
10-SECOND CHECKLIST
☐ Да ли је домен пошиљаоца тачан?
☐ Да ли то ствара хитност или претње?
☐ Да ли УРЛ линка одговара компанији?
☐ Да ли користи ваше право име?
☐ Да ли сте очекивали овај имејл?
Ако је било који одговор сумњив — немојте кликнути. Идите директно на веб локацију компаније тако што ћете сами унети адресу.
Шта да радите ако нисте сигурни
- Don't click any links in the email. Instead, open a new browser tab and type the company's address directly (e.g.
paypal.com). - Log in there. If something is actually wrong with your account, you'll see a notice after logging in.
- Report the phishing email using your email client's built-in "Report phishing" option. This helps train filters to catch similar emails for everyone.
