Most scams start with a link. A text says your package is stuck. An email says your account is locked. One tap opens a fake page built to steal your password or payment details.

Where dangerous links show up

• Texts about packages, tolls, or bank alerts you did not expect.
• Emails about a problem with your account or a payment.
• Social media messages, even from friends whose accounts were hacked.
• Pop-ups and ads claiming your device is infected.

Red flags

• The message pushes you to act now or face a penalty.
• It asks you to confirm a password, card number, or Social Security number.
• You get an invoice or refund notice for something you never bought.
• The link is shortened, or the name is misspelled, like amazan.com.
• The greeting is generic, like “Dear Customer.”

Habits to keep you safe

1. Skip links in messages you did not expect. Open the company’s app or type its web address yourself.
2. Need to check an account? Call the number on the company’s official website or the back of your card. Never use the number in the message.
3. Preview a link before you tap. Our guide How to Tell If a Link Is Legitimate walks you through it.
4. Keep your phone, computer, and browser updated. Updates close security holes.
5. Turn on two-step verification for your email and bank.
6. Delete the message. Do not reply or tap “unsubscribe.”

Already clicked?

1. Close the page. Do not enter anything else.
2. Typed a password? Change it right away from a different device, and turn on two-step verification.
3. Shared card or bank details? Call your bank using the number on your card.
4. A file downloaded? Do not open it. Run a security scan.
5. Visit IdentityTheft.gov for next steps based on what you shared.

Forward scam texts to 7726 (SPAM). Forward phishing emails to reportphishing@apwg.org. Report scams to the Federal Trade Commission at ReportFraud.ftc.gov.

Sources: Cybersecurity and Infrastructure Security Agency. (n.d.). Recognize and report phishing. Secure Our World.
Federal Trade Commission. (n.d.). How to recognize and avoid phishing scams. Consumer Advice.