Scammers create urgency because panic reduces careful thinking. The message may claim your account is locked, a package cannot be delivered, a payment failed, a family member is in trouble, or a government agency is demanding immediate action.
Use the STOP method
- Stop. Do not click, call the number in the message, install software, or provide a verification code.
- Take a separate path. Open the company's official app, type the known website address yourself, use the number on the back of your card, or call a trusted contact.
- Observe the request. Look for pressure, secrecy, unusual payment methods, remote-access requests, unexpected attachments, and a demand for codes or passwords.
- Protect and report. Block the sender, report the message through the app or provider, and tell the impersonated organization when appropriate.
Caller ID and sender names are not proof
Phone numbers, email display names, text-message threads, and logos can be spoofed or copied. A message can appear in the same conversation as a legitimate bank or delivery service and still be fraudulent.
If you clicked or entered information
- Disconnect from any remote-support session and uninstall software the scammer asked you to install.
- Change the affected password from a clean device and end active sessions.
- Change any account that reused the same password.
- Contact the bank or payment provider immediately if money or card information was involved.
- Turn on MFA and review recovery methods.
- Report identity theft or fraud through the appropriate official service.
Never give a one-time code to a callerA legitimate support representative should not need the verification code sent to prove that you are you. That code may be the final step the scammer needs to enter your account.