Look closely at the sender
Check the full email address or phone number, not just the display name. Watch for small spelling changes, unusual links and unexpected attachments.
Be cautious with urgent requests
A message demanding immediate payment, secrecy or a verification code deserves extra care. Do not reply with passwords or one-time codes. A real service should not need you to send a security code in a message.
Go directly to the official source
If a message claims to come from a bank, delivery company or another service, open that company’s app or type its known web address yourself. Use a published phone number to check a request.
If you already clicked
Close the page. If you entered a password, change it through the official service and review your account security. Contact your bank directly if you shared payment details.