Simple Checks to Help You Avoid a Scam

Emails, text messages, social media, and QR codes make it easy to access information with just one click or tap. Unfortunately, that convenience also gives scammers opportunities to send fraudulent links designed to steal personal information, spread malware, or commit financial fraud.

During Cybersecurity Awareness Month, we’re encouraging everyone to Pause Before You Proceed. Before clicking a link, opening an attachment, or responding to an unexpected message, take a few seconds to make sure it’s legitimate. A quick check can help you recognize a potential phishing scam before your information is put at risk.

Here are a few important things to look for before you click.

Confirm who the message is from.
Start by checking the sender’s email address or phone number. Scammers often impersonate trusted companies, organizations, or individuals by using contact information that looks almost identical to the real thing. Small differences, such as a misspelled name, extra character, or unfamiliar domain, may be a sign that the message isn’t legitimate.

Be cautious of messages that pressure you to act.
A common scam tactic is creating urgency. You might receive a warning that your account will be locked, a payment is overdue, you’ve won a prize, or immediate action is necessary. These messages are intended to make you react quickly instead of carefully considering the request. If a message feels unusually urgent or threatening, take time to verify it before responding.

Review links before visiting a website.
When using a computer, hover your cursor over a link before clicking to preview its destination. Look closely at the web address for misspellings, unfamiliar domains, or anything else that seems suspicious. If the URL doesn’t match the organization you expect to visit, avoid clicking the link.

Treat unexpected attachments carefully.
An attachment can be dangerous even when the email appears to come from someone you recognize. Cybercriminals may use compromised or impersonated accounts to distribute malicious files. If you receive an attachment you weren’t expecting, contact the sender through a trusted phone number or email address to confirm that the file is safe.

Use official websites and apps when you’re unsure.
If an email or text asks you to log in, update information, make a payment, or review account activity, avoid using the provided link if you have any concerns. Instead, type the company’s official website address directly into your browser or open its official mobile app. This helps reduce the risk of entering sensitive information on a fraudulent website.

Pause Before You Proceed

Phishing attempts and online scams often rely on people acting quickly. Taking a moment to evaluate the sender, review links, question unexpected requests, and verify information through trusted sources can help protect your personal and financial information.

Before you click, remember to stop and check. A simple pause could help you avoid becoming the victim of an online scam.