Phishing scams imitate trusted communications from banks, businesses, government agencies or people you know. Today’s attempts can use polished branding and personal details to look remarkably convincing whether they arrive by email, text, phone or social media. So how can you spot a scam before a quick click or reply puts your information and money at risk? Read on for the warning signs and simple steps that can help you stay protected.

Red Flags That Deserve a Second Look

1. Urgency or pressure: The message demands immediate action or threatens a consequence.
2. Requests for private information: You are asked for a password, PIN, one-time code or account details.
3. Unexpected links or attachments: You are prompted to sign in, verify information or open an unfamiliar file.
4. Sender or website inconsistencies: The address, domain, wording or contact information looks unusual.
5. Unusual payment requests: Be suspicious of demands for gift cards, wire transfers or cryptocurrency.

Pause, Verify and Protect

1. Pause before responding. Do not let urgency override caution.
2. Verify independently. Avoid the message’s links and phone numbers. Use your bank’s app, type the known website address or call the number on the back of your card.
3. Keep security codes private. Never share passwords, PINs or one-time passcodes with someone who contacts you unexpectedly.
4. Protect and report. Use unique passwords and multifactor authentication, keep software updated, and report suspicious messages before deleting them.

What To Do If You Took The Bait

Act quickly. Contact your financial institution using a trusted number, change compromised passwords, enable multifactor authentication and review your accounts for unfamiliar activity. Explain what happened and continue monitoring for suspected fraud.

This Cybersecurity Awareness Month, make “stop and verify” a habit. Question unexpected requests and use a trusted contact method before you click, share or send. One careful pause can protect your identity, accounts and money.

Sources: American Bankers Association, “Phishing” consumer resource and “Phishing: Don’t Take the Bait” analysis guide.