A delivery text arrives while you are waiting for a package. A caller says your bank account is in danger. A website looks familiar, but asks you to sign in again. You do not have to decide whether to trust it while someone is rushing you.
Quick answer: Stop before clicking, paying, sharing a code, or installing anything. Open the official app yourself or contact the organization through a number you already trust. Verify the request outside the conversation that brought it to you.
Look at what they want you to do
A convincing logo does not tell you much. The request tells you more. Treat these as warning signs:
- You must act immediately to avoid trouble or collect a prize.
- You are told to keep the conversation secret.
- Someone demands gift cards, cryptocurrency, or a money transfer.
- You must move your savings to a “safe” account.
- A stranger wants your password, a sign-in code, or remote access to your computer.
One unusual message is enough reason to pause. You do not need to prove it is a scam before checking independently. The FTC explains these patterns in its scam prevention guide.
Texts and emails: check through the app
Imagine a text says: “Your package cannot be delivered. Pay a small fee here.” Instead of opening its link, open the retailer or delivery company’s app and check your order. Our package delivery text guide walks through the checks. A small charge can be bait for collecting card details.
The same approach works for account warnings and unexpected invoices. Reach the account yourself. Do not use the message’s phone number to verify the message. For sender and link checks, read how to spot a scam email.
Watch: Microsoft called about a virus? Hang up.
Calls: a familiar number is not proof
Caller ID can be faked. A local number or your bank’s name on the screen does not establish who is speaking.
If a caller claims there is a problem, hang up and call the number on your bank card, statement, or official app. If someone claims to be a relative with an emergency, contact that person through a number you already have. You can say: “I’ll check this and call back through the usual number.”
Websites: polished does not mean trustworthy
A copied logo, good spelling, and a professional layout can all appear on a fake site. HTTPS encrypts the connection; it does not prove the business is honest.
For an important account, use your saved bookmark or official app. Read the full address before signing in. In the fictional address bank.example.scam-site.test, the familiar word “bank” does not make the address your bank’s website. If you are unsure, close the page and start again from a trusted route.
A page claiming your computer is infected is another common trap. Follow our fake virus warning guide instead of calling the number in the pop-up.
Keep sign-in codes to yourself
A code sent when you sign in can unlock your account. Do not read it to someone who unexpectedly contacts you, even if they say they are stopping fraud. Enter a sign-in code only into the genuine login process you started, and read the message explaining what the code is for.
Already clicked or responded?
Use our Clicked a Scam Link? What to Do Next guide to choose the steps that fit what happened.
What you shared determines the next step. Clicking a link is different from entering a password, paying, or giving someone remote access.
- Shared a password: change it through the official service, check account activity, and replace it anywhere you reused it. Enable multifactor authentication.
- Sent money or card details: contact your bank or payment provider immediately. Explain that it may be fraud and ask about stopping or reversing the payment. Recovery is not guaranteed.
- Allowed remote access: end the session, disconnect the computer from the network, and get trusted help. Use another trusted device for sensitive accounts.
- Shared identity information: use IdentityTheft.gov for a recovery plan.
Save the messages and payment details if you can do so safely. Report suspected scams at ReportFraud.ftc.gov. Beware of anyone who promises to recover your money for an upfront fee.
Your three-step habit
Pause. Reach the organization yourself. Verify before acting. If you are still unsure, talk it through with someone you trust. Taking a moment to check is a useful habit, even when the request turns out to be real.
Keep learning
Official references
Reviewed October 13, 2026.
Leave a Reply