Phishing

Contents table

• Definition
• Legal consequences
• Applicable law
• Related doctrine
• Categories

Definition

Phishing is the act of committing fraud through electronic means to obtain confidential information of the legitimate user, such as passwords or bank details.
The phisher impersonates someone or a reliable company, so that the recipient of a supposedly official electronic communication (per e-mail, fax or phone) believes it and provides the phisher with personal data.

Phishing is one of the fastest-growing and diversified computer crimes of the latest years.

Originally, this online fraud consisted of sending e-mails to bank customers. However, this illegal activity has evolved and there are phishing attempts using tempting job offers, in which the victim collaborates with the phisher without being aware of it.

The most current versions of the traditional phishing use any mischievous act to “fish” the attention and good faith of possible victims (false donations, NGOs, etc.).

Technically, phishing has also evolved. In many occasions, the phisher uses malware to access the computer of the victim in order to not be noticeable and to easily obtain the data that the phisher needs.

Legal consequences

Phishing is a type of activity laid down in Section 282.2 of the Spanish Criminal Law, which is considered as a fraud. The fact of accessing commercial communications to obtain confidential and secret information without the express consent of the victim shall be considered as a crime of exposure and disclosure of secrets punishable by Section 197 thereof. The fact of causing damages derived from the activity of phishers shall be considered as a damaging crime punishable by Section 263 thereof.

Applicable law

• Ley Orgánica 10/1995, de 23 de Noviembre, del Código Penal (Public General Act 10/1995, of 23 November, of the Spanish Criminal Law).

Related doctrine

• Los Delitos de Descubrimiento y Revelación de Secretos. Especial consideración a su comisión en conexión con las Nuevas Tecnologías de la Información y de la Comunicación, Romeo Casabona.
• El Fraude y la Estafa mediante Sistemas Informáticos. Análisis del artículo 248.2, C.P, Galan Muñoz.
• Los Servicios Financieros Bancarios Electrónicos, Raul Lafuente Sanchez.

categories

• Security
• Technology