Pause when a message creates urgency
Scam messages often claim your account will close or a payment is overdue. Take a moment before clicking. A real-looking logo or familiar sender name is not proof that a message is genuine.
Check where the link actually goes
Inspect the full destination domain, not just the words in the message. On a touch device, use the browser’s link preview without opening the page. Watch for misspellings, extra words and unusual subdomains.
Open the service yourself
Instead of following a link in an unexpected message, open the service’s official website or app directly. If an alert is genuine, you can usually confirm it there. Never share one-time codes with someone who contacts you.
Add protection, but keep good habits
Browser security tools can help identify known malicious pages. No tool guarantees complete protection. Use unique passwords, enable multifactor authentication and report suspicious messages.