Stopping Phishing Before Users Click

Phishing emails and messages trick people into clicking links that lead to fake login pages or malware downloads. Attackers impersonate banks, suppliers, courier companies and even colleagues. Despite training, someone eventually clicks.

Why phishing works

Messages are increasingly convincing, often personalised and timed to coincide with real events like tax deadlines or deliveries. Busy employees act quickly.

Layered defences

• Email filtering stops many phishing messages before they arrive.
• User awareness helps people recognise suspicious messages.
• Multi-factor authentication limits the damage of stolen passwords.
• DNS filtering blocks access to known phishing sites even after a click.

How DNS filtering helps

When a user clicks a phishing link, the device first looks up the domain. If the domain is on a threat list, the lookup is blocked and a warning page appears instead of the fake login page.

Newly registered domains

Many phishing campaigns use domains registered days or hours earlier. Blocking or flagging newly registered domains adds extra protection.

Messaging apps and SMS

Phishing also arrives via WhatsApp, SMS and social media. DNS filtering protects company devices regardless of where the link came from.

Learn from blocked attempts

Reports showing blocked phishing domains can be used in training to show real examples targeting your organisation.

Report suspicious messages

Encourage staff to report phishing attempts quickly so others can be warned.

When someone does enter credentials

Reset passwords immediately, review account activity and check for forwarding rules or unusual logins.

The bottom line

Phishing will keep evolving, but DNS filtering provides a reliable safety net. Combine it with training and MFA for strong protection.

Learn more about Cloud DNS & Web Filtering from UbiFi, or talk to our team.