How can I tell if a message is a scam?

Scam messages work by rushing you. They create a moment of panic or excitement so you act before you think. Once you know the signs, they get much easier to spot - and the safest response is almost always to slow down and check another way.

Signs it might be a scam

  • It pushes you to act now: a threat ("your account will be closed"), a deadline, or a prize you have to claim quickly.
  • It arrived out of the blue - a delivery you were not expecting, a refund you did not request, a bank you do not use.
  • It asks for something it should not: your password, a one-time code, card details, or payment (especially by gift card or transfer).
  • The sender looks almost right but not quite - a public email address, a misspelt company name, or a link whose address does not match the real site.
  • The greeting is generic ("Dear customer") or the wording is slightly off.
  • It wants to move you elsewhere - "reply on WhatsApp", "call this number", "install this app".

What to do instead

  • Do not tap links or open attachments in the message.
  • Go to the company directly. Type their website address yourself, or open their official app - do not use the link provided.
  • If it claims to be someone you know, check with them on a number or account you already have.
  • Never share a one-time code. No genuine bank or company will ask for it.
  • Report the message (most email and phone apps have a "report junk" or "report phishing" option), then delete it.

If you already tapped or shared details

  1. Change the password for any account you entered, and turn on two-factor authentication.
  2. If you shared card or banking details, contact your bank and freeze the card now.
  3. Check the affected account for changes to your email, phone number, or recovery options.
  4. Run a security scan if you installed anything, and watch your accounts closely for a while.

Related: How can I protect myself against credit card theft?

← All guides

General information, correct when last reviewed. Platforms and threats change - always confirm critical steps on the official source. Product names are used only to describe their features; Monkleton Labs is not affiliated with, or endorsed by, them. No ads, no affiliate links.