Check the claim through an app, website, or phone number you already trust. Keep the message out of the verification process.
“Your account is locked.” “Your delivery needs a small payment.” When a message demands immediate action, you do not have to use the link it gives you.
Name what the message wants
Is it asking for a password, payment, verification code, download, or personal information? Identify the requested action before deciding whether the story sounds plausible.
Take a separate route
If the message claims to come from your bank or a service you use, open its usual app or type a known address yourself. You can also call a number from a trusted statement. Avoid using the message’s link or contact details to check itself.
Treat appearance as a clue, not proof
Brand logos and familiar-looking names can be copied. A message that looks professional still needs verification. Spelling mistakes are not a dependable screening test on their own.
Avoid sharing sensitive information while checking
Do not send payment information or login codes back to the unexpected sender. If there is a real issue, handle it through the independently verified account or support channel.
If you already responded, switch to recovery
If you gave away personal or financial information, visit IdentityTheft.gov for steps matched to the information involved. If you suspect a malicious download, update your security software and run a scan. You can report the attempt to ReportFraud.ftc.gov.
Save your bank’s official support number from a trusted statement now. An independently verified route is easier to use when you are not under time pressure.
Your quick checklist
0 / 4Your progress stays on this browser.
Check the sources
Further reading behind this guide. These organizations do not endorse this website.
