Home › Cybersecurity wiki › What is anti phishing protection?

Wiki

What is anti phishing protection?

Anti-phishing covers techniques and software that recognise fake messages and pages before someone hands over credentials or payment details.
The protection sits with the recipient, the mail service and the browser.

Understanding Phishing

Phishing pretends to be a trusted organisation and asks for an action: open a link, enter a password or authorise a payment.
The message creates urgency or fear so that nobody looks closely.

Types of Phishing Attacks

Mass emails use generic greetings, while targeted attacks mention real transactions and people.
Other paths are fake calls, text messages and sign-in pages that closely copy a genuine one.

Anti-Phishing Techniques

Technology filters some of the messages, and people have to recognise the rest.
Both are needed, because filters never know every new wording.

Education and Awareness Training

Exercises with harmless sample messages show what to check: the sender, unexpected links and any request to reveal a secret.
There should be a simple way to report suspicious mail without embarrassing the person who received it.

Email Filtering

Filters check the sender domain, signatures such as SPF, DKIM and DMARC, links and conspicuous wording.
Matches go to quarantine or are marked so they do not sit unchecked in the inbox.

Anti-Phishing Software

Specialised software runs in the browser, on the mail gateway or on the endpoint.
It warns about known fraud pages and about pages that imitate a real sign-in.

How Anti-Phishing Software Works

It compares addresses with lists of known fraud pages and weighs domain age, the certificate and similarity to real brands.
Some products open the link in an isolated environment and inspect the result before the user sees it.

Benefits of Anti-Phishing Software

It stops many repeats of known campaigns automatically and takes load off recipients.
Pages built moments ago are recognised only once features or reports exist, so a personal check is still required.

Conclusion

Anti-phishing combines filters, browser warnings and trained recipients.
No single layer catches every fake, but together they reduce the chance that credentials land on the wrong page.