Notice the pressure
Attackers use urgency, fear, curiosity, or authority: an account will close, a package failed, a boss needs gift cards, or a prize is waiting. A familiar logo or caller name is not proof of identity; both can be copied.
Verify another way
Do not use contact details in the suspicious message. Open the official app, type the known website yourself, or call a trusted number.
- Inspect the full sender address
- Preview links before opening
- Treat unexpected attachments as untrusted
- Never share one-time codes