Plain-language glossary

Security Terms, Without the Jargon

These general definitions help explain the language used across the guides. They describe categories and patterns rather than diagnosing a particular message or incident.

Independent guideTeamjieletric is an independent educational publisher. It is not affiliated with, endorsed by, or acting on behalf of TIAA. We do not verify messages, investigate incidents, recover accounts or provide technical support.

Phishing

A deceptive communication intended to persuade someone to reveal information or take an unsafe action by posing as a trusted source. The request may arrive with familiar wording or a convincing explanation. A polished message can still be deceptive; obvious mistakes are not required.

Smishing

Phishing carried through text messages. A text may contain urgency, an unfamiliar destination or a request for a reply. The term describes the channel, not a special test for determining whether a specific text is genuine.

Vishing

Phishing through voice communication, commonly a phone call. A speaker may use urgency, a familiar name or a request for a code. A natural voice and a confident explanation do not independently confirm the speaker's identity.

Spoofing

Presenting identity information so that it appears to come from another source. Caller-ID spoofing is one example: the displayed name or number can be misleading. A displayed identifier should not be treated as conclusive evidence of who is contacting you.

Credential request

A request for information used to establish access, such as a password. An unexpected sender may describe disclosure as a protective measure or confirmation. The explanation does not remove the need to keep the information private and verify independently.

Security code

A code used as part of a verification or access process. Receiving a code on your device does not authorize an unknown caller to ask for it. Do not read it aloud or forward it in response to an unexpected contact.

Account takeover

Unauthorized control of an account. The phrase describes a type of harmful outcome, not a service Teamjieletric provides. This publisher does not investigate access events, restore accounts or assist with authentication. A specific concern belongs with a confirmed official source.

Social engineering

Using persuasion, authority, emotion or pressure to influence a person's decisions. Urgency and secrecy can make an unusual request seem necessary. Slowing down and choosing your own confirmed contact route can help you make the decision outside that pressure.

Malicious link

A link used for a harmful or deceptive purpose. Display text alone does not reveal the actual destination, and reading an address does not certify its safety. Leave an uncertain link unused rather than opening it to investigate.

Independent verification

Checking through a confirmed source you located without relying on the uncertain message to supply it. Calling the number in the message or accepting the caller's transfer does not establish that separation. Our safe-verification guide explains the general sequence.

Keep this in mind

Knowing the terms helps you understand the pattern; it does not replace a confirmed source.

A smiling person holding a glass while talking with friends
Illustrative photograph; no person pictured is identified as a staff member or an incident subject.

Related reading

Source Reference

Sources reviewed November 4, 2026. External references are informational, with no referral tracking or partnership implied. Confirm current instructions at the source.