Malware scams try to trick you into installing malicious software onto your device. This could broadcast your keystrokes to a hacker or hold your device hostage for ransom, among other possible outcomes. Phishing scams try to trick you into providing information. The information could be used for identity theft or “social engineering” attacks against your company.

Both forms of attacks are counting on you to make a mistake and provide them with the information or access they want. To help you avoid falling prey to a scam, the most basic best practice is:


Don’t click, open, or respond to anything in a suspicious email.

For an overview of online safety and security best practices, please visit our Security Center. Or check out our complete online security series by clicking the links below:

    1. Step 1: General Electronic Security
    2. Step 2: Avoid Phishing & Malware
    3. Step 3: Detect Malware
    4. Step 4: Get Rid of Malware
    5. Step 5: Secure a Compromised Account

If you believe you have received a phishing attempt through Upwork, from an Upwork user, or about your Upwork credentials, please report it to

Log in to get personalized help.