PURPOSE Credential theft attacks try to trick users into revealing usernames, passwords, or authentication codes. COMMON METHODS Phishing emails, fake login pages, fake support calls, QR code scams, and malicious pop-ups. WARNING SIGNS Unexpected login requests, urgent password resets, fake security alerts, or links to unfamiliar domains. WHAT TO DO Navigate directly to trusted websites instead of clicking suspicious links. REPORT Report suspicious login requests or messages immediately.