Public explainers
Phishing that already knows you
After a leak, the dangerous message is the one that sounds informed. Names, addresses, contract numbers and loyalty IDs are the raw material.
From bulk spam to a tailored pitch
Ordinary phishing guesses. After a leak, the message recites. Once a dump includes your name, email, phone, postal address or a customer number, it can mention those facts in the first sentence.
That is why contact and contract data get stolen. Criminals skip the generic greeting and go straight to a story that looks like it came from your operator, your airline or your child’s school.
The channels
This is not only email. SMS, messaging apps, phone calls and fake login pages use the same trick: lead with a true detail, then ask for a code, a password, a payment or a document.
A phone call is often more convincing than an email because you can hear the urgency. The script does not change. They already know something, and they need you to hand over the access they do not have.
What a customer-service leak is for
Notes from a support mailbox, a loyalty number, a ticket subject line: these look minor until someone uses them. “We are calling about the message you sent on Tuesday” works if they actually have that subject line.
If someone contacts you out of the blue about a delivery, a bill, a booking or a school account, go to the official app or website yourself.
Check what these guides taught you. Take the quiz