Phishing campaign is the name given to an attack that consists of sending several emails using false addresses, pretending to be a public body. Thus, the attacker places a malware in its content in the form of invoices, activated as soon as the victim clicks on the document. Different from what most people expect, this is one more piece of malware that will not show any reaction at the time of the click. In fact, the malware is just placed inside the affected machine, remaining unresponsive until the attacker actually executes it. Currently, the phishing campaign has been used to apply scams in the financial sector, mainly related to banks. Generally, e-mails are used with important names such as "city hall" or something along those lines. Our service is ideal for anyone who wants to protect themselves from this type of attack, understanding more about how it works and what are the best practices to avoid falling into more traditional traps. For this, a series of recommendations are given, such as checking the sender's e-mail, not just your name appearing in the message. Often, despite a correct name, the email user is surrounded by random letters, making it clear that it is something dangerous and unofficial as it seemed at first.