Do not press the link in the message. Open the organisation's official app or website separately, or telephone it using a number you already trust.
Look at what the message is trying to make you feel
Fraudulent messages often create urgency, fear or excitement. They may claim that a parcel cannot be delivered, an account will be closed, money has been taken or a prize is waiting.
Check the request, not just the sender's name
A sender name can be copied, and a fraudulent message may even appear beside genuine messages. Ask whether the organisation would normally request payment, passwords or personal information in this way.
Do not trust a link because it looks familiar
A fraudulent web address may use a familiar word while leading somewhere different. It is safer to avoid the link and reach the service independently.
What to do when you are unsure
- Stop and leave the message alone.
- Open the official app yourself.
- Use a trusted telephone number.
- Ask somebody you trust to look at it with you.
- Delete or report it once you are satisfied it is fraudulent.
Already pressed the link?
Do not panic. Close the page. If you entered a password, change it through the genuine service and check whether you reused it elsewhere. Contact your bank promptly if you disclosed card or banking details.