Question

What is the best way to verify the legitimacy of an email claiming to be from your bank?

• A. Clicking on any links in the email to check their authenticity.
• B. Contacting the bank directly using their official website or phone number.
• C. Replying to the email and asking for proof of legitimacy.
• D. Downloading and running any attachments in the email.

Hint:

Banks never ask for sensitive personal information, PINs, or passwords over emails.
Always verify details using an independent, trusted channel.

Answer 1

The Correct Option is B

•

Step 1: Understanding the Question:
The question asks for the safest cyber security practice to verify whether an email claiming to be from a bank is genuine or a malicious phishing attempt.

•

Step 2: Key Formula or Approach:
Phishing is a social engineering attack where malicious actors impersonate trusted organizations (like banks) to steal user credentials, credit card details, or install malware.
Security rules advise users to avoid trusting links, attachments, or contact details enclosed within suspicious messages.

•

Step 3: Detailed Explanation:
Let us evaluate each of the given choices:
- Option (A), "Clicking on any links," is highly dangerous. Phishing links lead to fake login portals that capture passwords or trigger drive-by malware downloads.
- Option (B), "Contacting the bank directly using their official website or phone number," is the best practice. By independently looking up the bank's contact details, you bypass the phishing channel and get authentic confirmation from bank staff.
- Option (C), "Replying to the email," is unsafe. You are interacting with the attacker, who will simply falsify proofs of legitimacy to trick you further.
- Option (D), "Downloading and running attachments," is extremely risky because attachments in phishing emails often contain spyware, trojans, or ransomware.
Therefore, option (B) is the safest and most effective method.

•

Step 4: Final Answer:
The correct option is (B).