Look at the request
A message asking you to act immediately, share a code or pay an unexpected charge deserves a second look. Professional wording and a familiar logo do not prove who sent it.
Check through a separate channel
Do not use the message’s link to investigate. Open the official app, use a saved bookmark or contact the organisation through details you already trust. A caller’s displayed number can also be misleading.
Keep codes to yourself
Do not read a sign-in code to someone who contacts you unexpectedly. If the request appears to be from a friend or colleague, verify it with them independently before taking action.
If you already clicked
Close the page. If you entered a password, change it through the genuine service and review account activity. If you shared payment details, contact your payment provider promptly through its official channel. Report the message using your email or messaging app’s reporting tools.