Shi Zha Tong visual guides 14 / Shopping and devices

Phishing links: a login page can steal your account

A familiar design may be hosted on an unfamiliar domain.

A familiar design may be hosted on an unfamiliar domain.
Conceptual illustration, not real people, a crime scene or investigative evidence.
  1. 1

    Fake notification

    A message mentions a parcel, unpaid bill or account problem.

  2. 2

    Clicking a link

    It leads to a counterfeit login or payment page.

  3. 3

    Entering secrets

    Passwords, card numbers or one-time passwords are entered.

  4. 4

    Account misuse

    The information may be used for unauthorised payments or account takeover.

Warning signs

HTTPS and a padlock do not establish a website’s identity.

Protective action

Open the official app yourself. Do not enter verification codes through unfamiliar links.

Open sources and scope

Based on official advice and cases. The four stages are simplified for teaching; roles and order differ between cases and do not establish wrongdoing by any particular person or service.

Police / Criminal Investigation Bureau: phishing and stolen LINE accounts (new tab)

Survey and livestream scenarios include risk analysis. Citations do not mean official approval of every statement. Edited: 1 October 2026.