Search the briefing
Try “phishing,” “identity theft,” or “security key.”
From the archive
MpragansA VPN encrypts network traffic between your device and the VPN service and changes the public IP seen by destinations. Identity theft protection monitors selected records and may provide recovery assistance or insurance. Neither makes a phishing page trustworthy, blocks…
Mark the phone lost with the platform’s official find-device service, lock it, contact the carrier, and review the primary email, financial, password-manager, and cloud accounts. Change credentials when access may be exposed. Do not remove an Apple device from Find…
A hardware security key is a physical authenticator that can provide phishing-resistant sign-in when a service supports standards such as FIDO. It is especially useful for people at higher risk, administrators, finance, journalists, public figures, and anyone protecting critical email…
Preserve originals before blocking or deleting: messages with full headers, profile and listing URLs, usernames, phone numbers, transaction IDs, receipts, wallet addresses, tracking details, and a dated timeline. Screenshots are useful context, but export or save original electronic records when…
Change the password immediately on the real service from a trusted device, end other sessions, correct recovery details, and enable stronger authentication. Change every other account that used the same or a closely related password, starting with email, banking, the…
If you only opened a link, close it and do not enter data or approve downloads. Update and scan the device if the page behaved suspiciously. If you entered a password, code, card, or identity information, respond to that exposure…
See the property before paying, verify the owner or authorized manager, compare the address across listings and public records, and review a written lease. Do not wire money, send crypto or gift cards, or pay an application or deposit because…
Contact the company that moved the money first—the bank, card issuer, wire service, payment app, gift-card issuer, or exchange—and say it was a scam. Ask whether it can stop, recall, reverse, or dispute the transaction. No recovery is guaranteed, but…
Verify a charity through its official website and independent records before donating. Search the exact legal name, understand the program and tax status, and donate through a channel you reach yourself. Do not let disaster images, a familiar cause, caller…
In the first 30 minutes, secure the email account that controls recovery, change the affected password from a trusted device, end unfamiliar sessions, remove changed recovery methods, and enable stronger authentication. Then review financial, message, app, and forwarding activity and…
