The Agency for Regulation and Development of the Financial Market of the Republic of Kazakhstan published an educational note warning consumers about phishing as a common form of online fraud and outlining practical steps to reduce the risk of credential and payment-data theft. The guidance explains that fraudsters often create fake websites that closely copy banks, online retailers and other popular services, and distribute links via email, messaging apps and social networks. Key red flags include suspicious website addresses (for example, small changes to domains) and the absence of “https://”, poor design and text errors, broken links, and prompts to enter an individual identification number, card number, CVV code or SMS password, noting that banks do not request such information via websites. Recommended protections include carefully checking URLs before entering data, installing antivirus software with anti-phishing functionality, avoiding links in suspicious messages, not entering personal data on unfamiliar sites, and using a separate virtual card with limited funds for online purchases; victims are advised to contact their bank and law enforcement, block the card and change passwords. Additional materials are available via Fingramota.kz.