How to check a suspicious message

The red flags

• Urgency, threats, or a deadline measured in hours.
• A link that does not match the official domain, or a shortened link.
• A request for a password, a one-time code, a full card number, or a photo of your ID.
• A request to move to WhatsApp, Telegram, or a personal email.
• Payment by gift card, crypto, or a bank transfer to a person.
• A job, prize, refund, or overpayment you did not ask for.

Verify without the message

Open the official app, or type the official website into your browser. For a bank, call the number on the back of your card. For a delivery, use the retailer's own tracking page. If the message is real, the official route will show it.

If you already clicked

• Do not enter more information.
• Change the password on the account, and anywhere you reused it.
• Tell your bank if you entered card details.
• Report the message to the platform and your local fraud agency.
• Watch for follow-up messages that use what you already gave.

AI is a second opinion

AI can point out common red flags, but it cannot verify the sender or the link. Use it to slow down and make a list, then verify through the official route. A green light from an AI is not proof.