Can you tell a fake (phishing) web site from a real one ? Or can you recognize spam emails that request you to verify your eBay or Paypal account credentials.
McAfee has created a very simple quiz with screenshots of websites and emails for you to spot the fake ones from the real site. Do take this 10 question quiz and the results may actually surprise you even when you are a pro-geek - it looks deceptively easy but that's not the reality.
I scored perfect for ebay, amazon and paypal (popular phishing targets) but had trouble identifying the financial websites of Chase, CapitalOne and Bank of America.
Overall Rating: Tightrope Walker - "You avoided some deceptive Web sites that would have put your personal information at risk. But you chose others that pose serious security threats that could lead to identity theft or financial losses". Share your phishing score in the comments.
(1) How to Detect Phishing Websites, (b) Google Phishing Warning Extension
Find this article at: http://labnol.blogspot.com/2007/07/how-good-are-you-at-recognizing-fake.html
web: http://www.labnol.org/ email: amit@labnol.org


Reader Comments
Rating : Tightrope Walker. The last 2 questions were more like G.K. questions however :-(
Written on 17/7/07 7:32 PM
my score was 7/10...not baad ...:D
hey amit do u think average internet users can really differentiate between a real and a "phishing" site?
well i think ...they cant do it ! its those guys who usually fall into phishers traps
Written on 17/7/07 7:47 PM
8/10, Security Guru :)
Written on 17/7/07 9:28 PM
same here.. Tightrope Walker
Written on 17/7/07 9:51 PM
I scored 8/10. Man, they're hard!
Written on 17/7/07 10:06 PM
Rating: Tightrope Walker :)
Written on 17/7/07 10:40 PM
I got 6 out of 10, Tightrope Walker!
Written on 17/7/07 10:49 PM
This test is nonsense and serves no other purpose than to scare people so much that they'll use McAfee products.
All of these sites are fake to me, because I use never use one of them. So receiving an email about any of these sites would go straight to my trashcan. Other than that, a lot of these tests don't even list an URL. Because I'm not even familiar with these companies nor their websites, there is absolutely no way I can know which one is real and which one is not.
Nothing more than McAfee spreading FUD.
Written on 17/7/07 11:02 PM
9/10, Missed the Chase one.... scary thing is, I have a Chase account....
Written on 17/7/07 11:16 PM
I was a tightrope walker as well :)
Written on 17/7/07 11:31 PM
8/10 - kinda embarrassing.
A lot of their "how we knew" was based on poor English used by the scamsters and flawed site design - this may not necessarily be the case. There's nothing stopping a scamster from making his site a byte for byte clone of the original.
The only real indicator is the url via which that popup was loaded, we're at a complete disadvantage since the tests don't let us see these urls.
Written on 17/7/07 11:39 PM
9/10. Not spuprised there, to be honest.
Best regards
John Smith
Written on 18/7/07 12:21 AM
I got 9/10, but I found the quiz hard to take. On a real site, I usually check out some of the hyperlinks to see if they go to bogus domains -- I couldn't really do that w/ the screen shots. Interesting illustration of how sophisticated these phishers are getting, though. I'm not sure we, as in industry, can really expect an end-user to distinguish a fake site reliably.
Written on 18/7/07 12:43 AM
heh! how 'bad phrasing' in english is stressed in identifying fake sites :P
amit agarwal, how about detecting bad phrases in ur blogs? ;)
Written on 18/7/07 1:53 AM
easiest way to find out fishing is to look at URL. The quiz tests your grammer skills and the real sites can also do grammatical mistakes.
Written on 18/7/07 3:01 AM
I missed the Chase one as well. Someone mind telling me why it's fake? I googled the phone number and it leads to the real Chase site.
Written on 18/7/07 5:56 AM
6/10. Whoever duplicated the fake sites were non professionals to leave obvious clues (like using poor english etc).
Written on 18/7/07 8:29 AM
Rating: Tightrope Walker
Not bad. You avoided some deceptive Web sites that would have put your personal information at risk. But you chose others that pose serious security threats that could lead to identity theft or financial losses.
Don't let scammers fool you! SiteAdvisor can help protect your identity by warning you before you visit a risky site.
Written on 18/7/07 10:12 AM
8/10. Safty Guru
Written on 18/7/07 1:11 PM
YOU ANSWERED 8 OF 10 QUESTIONS CORRECTLY
Rating: Safety Guru
Not too shabby, but some of those banking ones were a bit tricky...I'm not so sure if I would second guess them if I were in a hurry.
Written on 18/7/07 4:20 PM
9/10 - missed the amazon one
I liked this test, but you can always tell if the website is a fake via the address bar. Sub domains should always have the real brand name next to the .com or .whatever.
They made the test difficult by leaving that out on some of the examples - I didn't even look for spelling errors, I assumed the scammer copied and pasted the same content.
Nice content...I'll be linking to it from my blog.
Written on 27/7/07 10:33 PM