Pay attention to URLs

You might already be aware that one of the tell-tale signs of a phishing ploy is a misspelled domain name or a destination where the true URL is masked by using a link shortener. Be wary of these links, but also look for “https” at the beginning of URLs through which you transmit sensitive data. Chrome will automatically display a lock icon for these secure websites.