Search the briefing
Try “phishing,” “identity theft,” or “security key.”
From the archive
MpragansDo not call a phone number in an unexpected PayPal invoice, and do not pay it. Log in by typing paypal.com or opening the official app, review the request there, and report it through PayPal. Alarmist invoice notes are often…
Send Cash App payments only to people you trust, verify the $Cashtag or other recipient detail, and reach support from the app or cash.app. Never share a sign-in code or PIN, pay to join a giveaway, or send money to…
Verify wire instructions through a previously known person and channel before sending, particularly when details changed. Read the account name and number back, confirm the business purpose, and use a second approval for large transfers. Email history, a familiar signature,…
Use Zelle only with people you personally know and trust, and verify the enrolled recipient before sending. It is not a substitute for protected marketplace checkout. A bank or Zelle impersonator will not need you to send money to yourself…
Do not reply to or call a suspicious bank text. Open the bank app or use the number printed on the payment card and check the transaction directly. A genuine alert may ask whether you recognize activity, but an unsolicited…
Inspect a suspicious link without navigating to it: reveal or copy its text into a plain-text note, identify the registered domain, and compare that domain with the organization’s official address. Do not paste it into a browser address bar, and…
Do not reset a password through an email you did not request. Open the account directly, review security activity, and start a fresh reset from the real service only if needed. The message may reflect a mistaken username, an attacker…
Smishing is phishing delivered by text or another mobile message. Do not tap its link, reply, or call its number. Check the claimed bank, carrier, delivery, toll, account, or prize through an independently opened app or known website, then report…
An email is likely phishing when its true sender, destination, or requested action cannot be reconciled with the organization it claims to represent. Do not use one clue alone. Expand the address, inspect links without opening them, avoid unexpected attachments,…
A remote interview is not trustworthy merely because the recruiter speaks well or appears on video. Verify the opening on the company’s real careers site, confirm the recruiter through the company domain or switchboard, and refuse payments, deposited checks, equipment…
