How to Recognize Suspicious Online Messages
Learn common warning signs in unexpected emails, texts and social messages, and how to verify a request before responding.
Notice urgency and pressure
Messages that threaten immediate consequences or promise an unusually large reward may be trying to stop you from thinking carefully. Treat pressure as a reason to verify, not as proof that a message is genuine.
Check the sender and destination
Look closely at the sender's address and the actual destination of links. A familiar logo or display name alone does not establish that a message is authentic.
Never share verification codes
Do not share one-time passwords or account recovery codes with someone who contacts you unexpectedly. Legitimate support should not need you to reveal a private login code in a chat.
Verify through another route
If a message asks for payment, account changes or sensitive information, contact the organization using details from its official website or app.
If you already clicked
Close the page if it seems suspicious. If you entered a password, change it using the official service and review account sessions and security settings. Contact your bank directly if payment information may be at risk.
This guide is intended for general informational purposes. Check official documentation or qualified advice for decisions that depend on your specific circumstances.