It can be very difficult to distinguish these malicious messages from genuine communications. Because of phishing, it is now standard policy for many companies that they will not call, email or SMS you to: ask to confirm personal information such as credit card details or account information