{"id":8202,"date":"2025-05-02T17:33:55","date_gmt":"2025-05-02T15:33:55","guid":{"rendered":"https:\/\/eu.it-cyberwall.com\/blog\/2025\/05\/02\/phishing-texts-and-calls-the-requests-to-refuse\/"},"modified":"2026-10-19T18:12:33","modified_gmt":"2026-10-19T16:12:33","slug":"lingenierie-sociale-comprendre-les-manipulations-psychologiques","status":"publish","type":"post","link":"https:\/\/eu.it-cyberwall.com\/en\/blog\/2025\/05\/02\/lingenierie-sociale-comprendre-les-manipulations-psychologiques\/","title":{"rendered":"Phishing, texts and calls: the requests to refuse"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"8202\" class=\"elementor elementor-8202 elementor-6939\" data-elementor-settings=\"{&quot;ha_cmc_init_switcher&quot;:&quot;no&quot;}\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-7efc628 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"7efc628\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-da5ab1d\" data-id=\"da5ab1d\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-9d3298e elementor-widget elementor-widget-html\" data-id=\"9d3298e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t\t<style>.itcw-g{max-width:900px;margin:0 auto;font-size:17px;line-height:1.65;color:#2b2f3a}.itcw-g h2{margin-top:10px}.itcw-g .tw{overflow-x:auto;margin:18px 0}.itcw-g table{width:100%;border-collapse:collapse;font-size:15px;min-width:640px}.itcw-g th,.itcw-g td{border:1px solid #e3e6ee;padding:10px 12px;vertical-align:top;text-align:left}.itcw-g thead th{background:#0E0129;color:#fff}.itcw-g tbody th{background:#F6F7FA;font-weight:600}.itcw-g .box{background:#F6F7FA;border-left:4px solid #DE3241;padding:16px 20px;border-radius:6px;margin:18px 0}.itcw-g .box.ok{border-left-color:#2C9703}.itcw-g sup a{text-decoration:none;font-weight:600}.itcw-g ol.src li{margin-bottom:8px;font-size:15px;word-break:break-word}.itcw-g .note{font-size:14px;color:#6b7080}.itcw-g .toc a{display:inline-block;margin:4px 10px 4px 0}<\/style><style>.itcw-post{max-width:none}.itcw-post .lead{font-size:19px;font-weight:600;color:#0e0129}.itcw-post h2{font-size:24px;margin:28px 0 12px}.itcw-post ul,.itcw-post ol{padding-left:22px}.itcw-post li{margin-bottom:8px}.itcw-post .itcw-wdb{text-align:left!important;margin-top:18px!important}<\/style>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-302a96c elementor-widget elementor-widget-text-editor\" data-id=\"302a96c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"itcw-g itcw-post\"><p class=\"lead\">Any message or call asking you for a password, a code received by text message, to install software or to make an urgent payment must be refused, even if it seems to come from Microsoft, the tax office, your management or your IT provider. These four requests are enough to spot most attempts.<\/p><h2>Three common scenarios<\/h2><p><strong>The email.<\/strong> \u201cYour Microsoft 365 mailbox is full\u201d, \u201cyour password expires today\u201d, \u201ca tax refund is waiting for you\u201d: the link leads to a fake login page that captures your username and password. Microsoft and the tax authorities never ask for your password by message.<\/p><p><strong>The text message.<\/strong> A parcel held up, a fine, a business account \u201csuspended\u201d: the shortened link opens a fake website asking you to log in or pay. On a phone, the real address of the website is hard to read, which is what makes text messages so effective.<\/p><p><strong>The call.<\/strong> Someone introduces themselves as IT support, the bank or management. They want you to install a remote-control tool, to give them the validation code you have just received, or to push a payment through. Urgency and secrecy are their two levers.<\/p><h2>What has changed since 2025<\/h2><p>In its overview of 11 March 2026, ANSSI notes that manipulation techniques now go beyond fake IT support. On the email side, Google, Yahoo and Microsoft now require domains that send large volumes of email to be authenticated (SPF, DKIM, DMARC): a properly configured domain is harder to spoof.<\/p><h2>To check this week<\/h2><div class='box ok'><ul><li>Do your teams know that a password or a code received by text message is never given to anyone?<\/li><li>Is the second factor enabled on every mailbox?<\/li><li>Does your domain have a DMARC record?<\/li><li>Do you know who to forward a suspicious message to, rather than quietly deleting it?<\/li><\/ul><\/div><div class=\"box\"><strong>Further reading:<\/strong> <a href=\"https:\/\/eu.it-cyberwall.com\/en\/guides\/spf-dkim-dmarc\/\">SPF, DKIM and DMARC: protecting an SME\u2019s email<\/a><br \/><a href=\"https:\/\/eu.it-cyberwall.com\/en\/formation-sensibilisation\/\">Training your teams: our awareness sessions<\/a><\/div><p>Questions about your situation? <a href=\"https:\/\/eu.it-cyberwall.com\/en\/contact\/?mf-besoin=cybersecurite#formulaire\">Describe my needs<\/a><\/p><p class=\"note\">Sources consulted on 19 October 2026: <a href=\"https:\/\/www.cybermalveillance.gouv.fr\/tous-nos-contenus\/fiches-reflexes\/hameconnage-phishing\" target=\"_blank\" rel=\"noopener\">Cybermalveillance.gouv.fr \u2013 Que faire en cas de phishing ou hame\u00e7onnage ? (updated on 7 May 2026)<\/a>; <a href=\"https:\/\/cert.cyber.gouv.fr\/cti\/CERTFR-2026-CTI-002\" target=\"_blank\" rel=\"noopener\">ANSSI \u2013 Panorama de la cybermenace 2025, published on 11 March 2026<\/a>.<br \/>Article written by IT CyberWall.<\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Any message or call asking you for a password, a code received by text message, to install software or to make an urgent payment must be refused, even if it seems to come from Microsoft, the tax office, your management or your IT provider. These four requests are enough to spot most attempts.<\/p>\n","protected":false},"author":1,"featured_media":6517,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_titles_title":"Phishing, texts, calls: what to refuse, EU | IT CyberWall","_seopress_titles_desc":"Fake Microsoft or tax office email, rigged text, fake support call: three scenarios hitting European firms and four requests staff must always refuse.","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"business phishing europe,sme phishing,fake it support scam,smishing","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"page_builder":"","footnotes":""},"categories":[72],"tags":[],"class_list":["post-8202","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cyber-securite"],"_links":{"self":[{"href":"https:\/\/eu.it-cyberwall.com\/en\/wp-json\/wp\/v2\/posts\/8202","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eu.it-cyberwall.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/eu.it-cyberwall.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/eu.it-cyberwall.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/eu.it-cyberwall.com\/en\/wp-json\/wp\/v2\/comments?post=8202"}],"version-history":[{"count":1,"href":"https:\/\/eu.it-cyberwall.com\/en\/wp-json\/wp\/v2\/posts\/8202\/revisions"}],"predecessor-version":[{"id":8203,"href":"https:\/\/eu.it-cyberwall.com\/en\/wp-json\/wp\/v2\/posts\/8202\/revisions\/8203"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/eu.it-cyberwall.com\/en\/wp-json\/wp\/v2\/media\/6517"}],"wp:attachment":[{"href":"https:\/\/eu.it-cyberwall.com\/en\/wp-json\/wp\/v2\/media?parent=8202"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/eu.it-cyberwall.com\/en\/wp-json\/wp\/v2\/categories?post=8202"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/eu.it-cyberwall.com\/en\/wp-json\/wp\/v2\/tags?post=8202"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}