Search the briefing
Try “phishing,” “identity theft,” or “security key.”
From the archive
MpragansDo not pay or send more material. Preserve the threat and original account details, stop direct engagement, secure your accounts, and report the content to the platform and appropriate authorities. Payment cannot guarantee deletion and may invite repeated demands. Seek…
You do not need to determine whether a support agent is human or AI; you need to determine whether the channel belongs to the real company. Start support from the official app, account, or typed website. Never share a password…
An email is likely phishing when its true sender, destination, or requested action cannot be reconciled with the organization it claims to represent. Do not use one clue alone. Expand the address, inspect links without opening them, avoid unexpected attachments,…
Smishing is phishing delivered by text or another mobile message. Do not tap its link, reply, or call its number. Check the claimed bank, carrier, delivery, toll, account, or prize through an independently opened app or known website, then report…
Do not reset a password through an email you did not request. Open the account directly, review security activity, and start a fresh reset from the real service only if needed. The message may reflect a mistaken username, an attacker…
An unrequested one-time password means a verification flow used your phone number or email, but it does not necessarily mean anyone completed access. Do not approve or share it. Check the named service directly for login attempts or changes, and…
Inspect a suspicious link without navigating to it: reveal or copy its text into a plain-text note, identify the registered domain, and compare that domain with the organization’s official address. Do not paste it into a browser address bar, and…
Do not trust a familiar voice alone. End the call and contact the family member through a number you already know, then try another relative or friend if they do not answer. Use a family safe word or ask a…
Good grammar is no longer meaningful evidence that an email is legitimate. Judge the sender’s actual domain, the requested action, link destinations, attachments, and whether the underlying business event exists. Verify any consequential request through a known channel even when…
No set of visual glitches can reliably prove that a video is fake. Treat odd lip movement, lighting, edges, blinking, audio, and motion as prompts for investigation, then verify the original source, context, date, and underlying claim through independent primary…
