Unexpected contact
A message, call or social-media approach arrives without a normal reason and quickly asks you to take action.
A message, call or social-media approach arrives without a normal reason and quickly asks you to take action.
You are told an account will close, a parcel will be returned, a payment will fail, police action is coming or an opportunity will disappear unless you act immediately.
The sender claims to be a bank, employer, government agency, marketplace, delivery company, relative or major technology company.
Gift cards, crypto, wire transfers or payments to a “safe account” are requested instead of a normal commercial process.
The person asks for passwords, one-time codes, recovery codes, identity documents or full card information.
You are told not to contact the bank, employer, family member, cashier or another person who could challenge the story.
The visible brand does not match the actual domain, the address is a lookalike, or a short link hides the destination.
Use the same homepage field for a URL or email address.
A message, call, social profile, or email arrives without a normal reason for the contact.
You are pushed to act immediately, keep the conversation secret, or avoid checking the story independently.
The sender claims to be a bank, government agency, employer, celebrity, support agent, friend, or family member.
Gift cards, cryptocurrency, wire transfers, cash, or payment apps are demanded because reversal is difficult.
The message says your account is locked, compromised, suspended, or must be “verified” through a supplied link.
A prize, job, investment return, refund, giveaway, or opportunity requires money or sensitive data first.
The visible brand and the actual domain do not match, or a shortened/redirected link hides the real destination.
A seller, recruiter, romantic contact, or support account insists on moving to another channel to avoid platform protections.
Do not verify a suspicious contact using the phone number, reply address, profile link, QR code, or website supplied by that same contact. Find the organization independently and use contact information you already trust.
Official references: FTC — How to avoid a scam and CISA — Secure Our World.