It's increasingly common for internet users to be tricked by e-mails and websites that look as if they come from or belong to well-known, reliable companies. So how can you spot phishing and reduce the risk of your website being hijacked for phishing? Businesses use all sorts of clever techniques, such as prize draws, to get hold of your details – and not always for innocent purposes. That was one of the findings of our survey Trends in Internet Use. In 2016, 72 per cent of consumers and 80 per cent of businesses reported coming across phishing.
Fictitious webshop
With the aim of highlighting this form of cybercrime and the dangers of sharing your details on the internet, SIDN set up a playful phishing scam during the Webwinkel Vakdagen (Webshop Trade Days) on 18 and 19 January. The trick revolved around a fictitious game webshop, Onlyforgamers.nl. To promote the new webshop, we gave away a PlayStation 4 with GTA 5 on each day of the show, in exchange for a few personal details. Two people from SIDN walked around the show hall to see how easily they could get people to part with their details in order to have a chance of winning that PlayStation. To see how easy it was, watch our video (in Dutch)…

Terms and conditions
To have a chance of winning, people had to agree to a specially prepared set of terms and conditions. The T&Cs explained the whole competition, including the fact that our webshop didn't really exist. Hardly anyone bothered to read the T&Cs; all the rest agreed to them blindly before giving us their details. SIDN's Marketing Manager Michiel Henneke revealed the truth about the competition when presenting the prize, and then went on to describe how criminals often abuse information such as we had been given. The moral of the story is that you should always be cautious about parting with your personal details, because nothing is quite what it seems… Of course, we did genuinely hold a draw and give a PlayStation to each day's winner. Think of it as the one and only time that being a victim of phishing actually worked out well. :-)
Phishing game
Visitors to our stand at the show were able to play a phishing game to test their skills. We also gave out tips and tricks for spotting phishing. What lots of webshop proprietors wanted to know was "What can I do to minimise the risk of my webshop being hijacked for phishing?" Many of them had never heard of SIDN BrandGuard: a monitoring tool that notifies you straight away if someone registers a domain name similar to your brand name or your own domain name. The notifications enable you to take action straight away and minimise the harm.