Phishing on social media typically occurs through direct messages, fake profiles, and misleading posts. For example, a child may receive a direct message that appears to be from a friend or a reputable company, asking them to click on a malicious link. Alternatively, fake profiles may lure children into sharing personal information, or misleading posts may promise free gifts or exclusive content in exchange for sensitive data.