Spot a phishing message before you click

Urgency, odd links, and requests for codes are the usual warning signs. A few seconds of checking is the best protection against scams by email and text.

Notice the pressure

Phishing messages try to rush you: an account will be closed, a package is held, a payment failed. Real companies rarely demand action within minutes.

When a message makes you feel anxious or hurried, slow down and check it independently.

Check the sender and the link

Look closely at the sender’s address and hover over or long-press links to see where they really lead. Misspelled domains and unexpected link shorteners are common giveaways.

Instead of clicking, open the company’s app or type its address yourself.

Never share codes or passwords

No legitimate support team will ask for your password or the verification code you just received. Anyone asking for that code is trying to sign in as you.

If you think you clicked something suspicious, change the password for that account and review its recent activity.