The following messages from the Federal Trade Commission’s OnGuardOnline are examples of what attackers may email or text when phishing for sensitive information: 

• "We suspect an unauthorized transaction on your account. To ensure that your account is not compromised, please click the link below, and confirm your identity.” 
• “During our regular verification of accounts, we couldn’t verify your information. Please click here to update and verify your information.” 
• “Our records indicate that your account was overcharged. You must call us within 7 days to receive your refund.” 

The bottom line is that whenever you’re online, you’re vulnerable. If devices on your network are compromised for any reason, or if hackers break through an encrypted firewall, someone could be eavesdropping on you—even in your own home on encrypted Wi-Fi.