Smishing

A form of social engineering exploiting SMS, or text messages. A malicious text appears to be genuine. They may prey on real world concerns or impersonate legitimate messages to trick you into engaging.

Vishing

Where cyber-attacks are conducted over telephone calls. The attacker may ask you for sensitive information, claiming to be someone senior, often pressuring you to act quickly. They are designed to get you to act without thinking.

Quishing

Where a fraudulent QR code is scanned, designed to steal personal and financial information.

What should you do?

  • Do not assume a caller or a text message is genuine because they know information about your organisation
  • Terminate the call and call back using your usual contact number, not the details provided by the caller
  • Be wary of QR codes, especially in car parks. Find other means to gather information the QR code claims to provide, rather than scanning it.

Cyber fraud amounted to £1.63 billion in losses for individuals and business in 2025.

Cyber security awareness is important as it helps protect individuals and organisations from threats, reducing the risk of sensitive information being compromised and helps keep organisations secure.

Where to get help:

Always contact IT if you are unsure – pause, independently verify and promptly report.

STOP – CHECK – REPORT