TL;DR: Spear phishing is a targeted phishing attack aimed at a specific individual, using personal details to make the message far more convincing than a generic scam email. Be cautious even with messages that seem to know real details about you, verify unusual requests through a separate channel, and limit how much personal information is publicly available.
👉 Check my digital footprint — free 30-second check →
Spear phishing is a targeted phishing attack aimed at a specific individual, using personal details to make the message far more convincing than a generic scam email.
How Spear Phishing Works
Unlike mass phishing, an attacker researches a specific target — using information from social media, previous breaches, or public records — to craft a message that references real details, making it much harder to spot as fake.
Warning Signs to Watch For
An email that references accurate personal or work details you wouldn't expect a stranger to know, combined with an unusual request or urgency.
How to Protect Yourself
Be cautious even with messages that seem to know real details about you, verify unusual requests through a separate channel, and limit how much personal information is publicly available.
If this looks similar to something else you've seen, it's worth reading What Is Subscription Trap Scams? How It Works and How to Protect Yourself.
This pattern shows up elsewhere too — see What Is Synthetic Identity Fraud? How It Works and How to Protect Yourself.
Frequently Asked Questions
What is Spear Phishing?
Spear phishing is a targeted phishing attack aimed at a specific individual, using personal details to make the message far more convincing than a generic scam email.
How does Spear Phishing typically work?
Unlike mass phishing, an attacker researches a specific target — using information from social media, previous breaches, or public records — to craft a message that references real details, making it much harder to spot as fake.
What are the warning signs of Spear Phishing?
An email that references accurate personal or work details you wouldn't expect a stranger to know, combined with an unusual request or urgency.
How can I protect myself from Spear Phishing?
Be cautious even with messages that seem to know real details about you, verify unusual requests through a separate channel, and limit how much personal information is publicly available.
What should I do if I think I’ve encountered Spear Phishing?
Stop responding immediately, do not click any links or share information, and report it to the appropriate authority. If money or personal information was already shared, act quickly to secure your accounts and report the incident.