Research Reveals At Least 76 Per Cent of Indian Web Users Unable to Spot Phishing Sites

Green Address Bar Provides High Visibility Weapon in Fight Against Cyber Crime

A YouGov survey* commissioned by VeriSign, Inc. (NASDAQ: VRSN) has revealed that at least 76 per cent of Web users in India are at risk from online fraud because they are unable to identify the different forms of phishing currently happening online.

The research asked each respondent to identify which – of two Web site images presented side by side – was a fraudulent phishing site. The most frequently missed “tell tale” indicator was the spelling on the site, with at least 76 per cent failing to spot the spelling mistakes that would have identified the phishing site. The other such “tell tales” include:

• No padlock symbol in the browser address bar – 54 per cent duped

• URL containing unspecified, numerical, domain name – 31 per cent duped

• Request for additional account information – 30 per cent duped

“Phishing continues to be a major challenge for online retailers,” said Andrew McClelland, Director of Business Development at IMRG, a UK-based industry body. “It only takes one phishing attack to dramatically reduce the web browsing public’s trust in a retailer. Once that trust is lost, it is very difficult to regain and with competition just a click away, something that retailers cannot afford to lose.”

Phishing scams and online fraud have created doubt and concern among online shoppers. To regain their trust, site owners need an easy, reliable way to show customers that their transactions are secure – and that they are who they say they are. Security vendors and Internet browsers have joined forces to establish the Extended Validation (EV) standard for SSL Certificates. With this technology, the browser and the certificate authority control the display, making it difficult for phishers and counterfeiters to hijack a brand and its customers.

“With nine out of 10 people in India vulnerable to phishing scams, a method for easily identifying a genuine site from a phishing site is a must for all businesses online,” said Tim Callan, vice president of product marketing at VeriSign. “By adopting Extended Validation, a site owner makes it easy for Web users to see that the site they are on is genuine. When a Web user visits a site secured in this way, a high-security browser will trigger the address bar to turn green. For additional clarity, the name of the organization listed in the certificate as well as the certificate’s security vendor is also displayed.”

Middle aged and elderly significantly more vulnerable

In India, the ability to identify a phishing site is highest among the 18 to 24 year old age group, with 45 to 54 year olds 14 per cent less likely to identify a phishing site. This drop in awareness is at a younger age than all other countries surveyed. India is also the only country where there is no difference between men and women in their ability to identify a phishing site.

Knowledge is key to fighting phishing and to this end VeriSign has compiled its Top five tips to distinguish a real site from a phishing site.

Consumers should check whether or not a site is genuine and is taking measures to protect their personal details by looking for the following:

1. https:// The “s” in https:// means the site is encrypted, so the information you enter is secured. While some phishing sites do have a secured Web address, many do not. Therefore, site visitors should be on the lookout for missing security on sites that should have it.

2. The padlock icon: To be meaningful this icon must appear in the
actual browser interface and not inside the content of the page itself.

3. Trust marks: Simple visual cues in the form of popular logos can show that a Web site is authenticated, secured, and the company is reputable.

4. Check the Web address: Be suspicious of any site with an unknown domain that contains the name of a well known site in the latter part of the Web address.

5. Green address bar: This signifies that this site has undergone extensive identity authentication so that you can be confident it is the site it claims to be.

To try to identify the phishing sites for yourself visit www.phish-no-phish.com/

*Notes to editors
The online survey was commissioned by VeriSign and conducted by YouGov on 22nd May to 3rd June. 1,002 Indian adults (aged 18+) were polled in the sample.

About VeriSign
VeriSign, Inc. (NASDAQ: VRSN) is the trusted provider of Internet infrastructure services for the networked world. Billions of times each day, VeriSign helps companies and consumers all over the world engage in communications and commerce with confidence. Additional news and information about the company is available at www.verisign.in

Contacts:
Nidhi Chhabra, nichhabra@verisign.com, +91.124.4292600
Dhwani Tandon, dhwani@2020india.com, +91-9911279795

Statements in this announcement other than historical data and information constitute forward-looking statements within the meaning of Section 27A of the Securities Act of 1933 and Section 21E of the Securities Exchange Act of 1934. These statements involve risks and uncertainties that could cause VeriSign’s actual results to differ materially from those stated or implied by such forward-looking statements. The potential risks and uncertainties include, among others, the uncertainty of future revenue and profitability and potential fluctuations in quarterly operating results due to such factors as the inability of VeriSign to successfully develop and market new products and services and customer acceptance of any new products or services, including VeriSign Identity Protection services; the possibility that VeriSign’s announced new services may not result in additional customers, profits or revenues; and increased competition and pricing pressures. More information about potential factors that could affect the company’s business and financial results is included in VeriSign’s filings with the Securities and Exchange Commission, including in the company’s Annual Report on Form 10-K for the year ended December 31, 2008 and quarterly reports on Form 10-Q. VeriSign undertakes no obligation to update any of the forward-looking statements after the date of this press release.

©2009 VeriSign, Inc. All rights reserved. VeriSign, the VeriSign logo, the checkmark circle, and other trademarks, service marks, and designs are registered or unregistered trademarks of VeriSign, Inc., and its subsidiaries in the United States and in foreign countries. All other trademarks are property of their respective owners.

Sphere: Related Content

Related Websites

• How to Remove Private Personal Information from the Internet Now that the Facebook privacy firestorm has, for the most part, eased up a bit, people seem to be a little more concerned about internet privacy. The scary thing is that of all the things that should worry you, Facebook probably has the least amount of information about it. When......
• How To Retire In Luxury CanadianBusiness.com has some really good articles that are worth reading. Here's another one. How we retired in luxury — on $2,000 a month Herman Heynen as told to Camilla Cornell From the May 2006 issue of MoneySense magazine Seven years ago, when I was 60 I took early retirement from......
• China Buying Gold On The Sly! I just read this interesting article in the Financial Times. Seems like China has tired of US dollars and is looking to get rid of them. Beijing Bets on Bullion  By Patti Waldmeir in Shanghai , Financial Times, 6 May 2009 China is expected to keep buying gold to diversify......
• International Markets Closing Due To Huge Losses. OK not closing exactly, but it sounded cool :-) - several international markets have suspended trading due to dropping indexes: India's benchmark Sensex crashed by 11.53 per cent on Tuesday morning which resulted in the Indian stock market being closed for an hour, a news report said. The 30-share Sensex......
• Affordable Search Engine Optimization For Unprecedented Business Leads Affordable search engine uses different methods which are undertaken to optimize a website in search engines. For doing online business it is imperative to adopt search engine optimization methods to bring visitors to the website. Search engine optimization has evolved very much over the last few years and new methods......