Shika Help Centre

Identify “phishing” and “spoofing” attempts

Phishing attempts try to trick you into revealing personal information. They look like they’re from a legitimate source, such as your bank or Shika, but they’re not. Spoofing is specifically faking the identity of the sender to make it look like it’s from someone you know.

How to spot fake messages

Never send personal information over email or text message unless you’re sure who you’re sending it to. Messages or websites phishing for information might ask you to enter:

  • Usernames and passwords
  • Social Security numbers
  • Bank account numbers
  • PINs (Personal Identification Numbers)
  • Full credit card numbers

Real messages from Shika might ask you to click a link to verify your email address, but you won’t need to enter any information.


If we can’t verify your Shika information, we might send you an email from, and ask you to sign in and send certain documents that verify your details. We won’t ask you for any information until you’ve signed in to your Shika account.