Check the message. Not the pressure.

Pause before doing anything

An unexpected message can arrive by text, email, social media or phone. You do not need to decide whether it is genuine on the spot. Creating a little distance gives you time to check.

1. Do not use the link, attachment or phone number in the message while you are uncertain.
2. Do not send money, passwords or verification codes.
3. If it is a call, end it. If someone may be in immediate physical danger, call 911.

Use a route you already trust

Open the organization’s app yourself, use a saved official website, or call a number from a statement or the back of your card. For a family request, use the number you already have—not a new one supplied in the message.

1. Ask whether the request actually came from them.
2. Check the account in the official app, rather than following the message’s instructions.
3. If you cannot verify it, leave the request unanswered and ask a trusted person for help.

Look beyond spelling and logos

Pressure, secrecy, a surprise payment or a request for remote access are reasons to stop. But good spelling, caller ID and a familiar name do not prove a message is real. A lack of obvious warning signs is not a safety certificate.