Phishing is a message designed to trick you into sharing information, clicking a malicious link, downloading software, or sending money. It can arrive by email, text message, phone call, messaging app, or social media. The channel changes; the goal is usually the same.
What phishing messages try to get
A phishing message usually asks, directly or indirectly, for your passwords, verification codes, banking details, identity information, or access to your device. Once a scammer has it, they use it to commit further fraud.
Common warning signs
Unexpected contact
You receive a message you weren't expecting.
Urgent language
The sender wants you to act immediately, with no time to check.
Suspicious links
The link doesn't match the organisation it claims to be from.
Requests for credentials
The message asks for a password, code, or other security detail.
Emotional pressure
The sender uses fear, worry, or excitement to push you into acting without thinking.
How to verify a message
If a message looks suspicious:
- Don't click any links
- Don't download any attachments
- Don't share any information
- Contact the organisation yourself, using contact details you find independently — never the ones in the message
Modern phishing scams
Criminals increasingly use fake websites, AI-generated content, copycat branding, spoofed phone numbers, and fake social media profiles. A message can look completely genuine and still be fake — a professional appearance is not proof.
If you clicked a link
Act immediately:
- Change your passwords
- Secure your email account
- Review your account activity
- Run a security check on your device
- Contact us if your Xe account may be affected
Received a suspicious message claiming to be Xe? Contact us here.