This guide outlines the mechanisms of phishing attacks and provides strategies to prevent falling victim to them. Phishing is a common method used by criminals to steal personal and organizational information through deceptive messages that appear to come from trusted sources. The document details various tactics employed by attackers, such as sending emails, texts, or making phone calls that prompt individuals to take specific actions, like clicking links or providing sensitive information. It emphasizes the importance of verifying the sender's identity and being cautious of messages marked with urgency. The guide also lists practical tips for identifying phishing attempts, including checking for spelling errors and unusual requests. Furthermore, it advises on how to respond if one encounters a phishing message, stressing the need to avoid engaging with the sender and to report the incident to the appropriate IT personnel. By following these guidelines, individuals can significantly reduce the risk of phishing attacks.