How to Check a Suspicious Message Before You Click

Introduction

Almost everyone receives messages from unknown or unexpected sources. They may arrive through email, text messages, social media, messaging applications, or workplace communication platforms. Some look like ordinary notifications, while others appear to come from banks, delivery companies, online stores, government services, or people we know.

At first glance, these messages may seem completely normal. They might contain a familiar company logo, a professional-looking design, or a link that appears to lead to a trusted website. However, not every message that looks legitimate is safe.

Cybercriminals regularly use fake messages to trick people into clicking harmful links, sharing passwords, downloading malicious files, or revealing personal information. These attempts are commonly associated with phishing and other forms of social engineering.

A suspicious message does not always contain obvious spelling mistakes or strange formatting. Some fraudulent messages are carefully written and designed to look almost identical to genuine communication. This makes it important to understand how to check a message before interacting with it.

The good news is that you do not need advanced technical knowledge to recognise many warning signs. By examining the sender, reading the message carefully, checking links, reviewing attachments, and verifying unexpected requests independently, you can reduce the risk of falling for common online scams.

This guide explains how to identify suspicious messages, investigate questionable links, recognise common phishing techniques, and respond safely when something does not look right.

The most important habit is simple: pause, check, and verify before you click.

1. Why You Should Check a Message Before Clicking

A link may look harmless, but clicking it can begin a chain of events that puts your information or device at risk.

For example, you might receive a message claiming that your online account has been temporarily suspended. It asks you to click a link and confirm your login details. The page looks like the official website, so you enter your username and password.

Unfortunately, the page may be controlled by someone trying to steal your credentials.

Once your information is submitted, the attacker may attempt to access your account, change its recovery settings, or use the same password on other services.

This is one reason why checking messages before clicking is so important.

1.1 Protecting Your Personal Information

Suspicious messages may attempt to collect information such as:

• Full name.
• Email address.
• Phone number.
• Home address.
• Account usernames.
• Passwords.
• Financial information.
• Identification details.
• Verification codes.

Some scammers collect information gradually rather than requesting everything in one message.

For example, an initial message might ask you to confirm your email address. A later message may request additional details.

Always consider why someone is asking for information and whether the request is coming through an appropriate channel.

1.2 Preventing Account Theft

Phishing messages often imitate login notifications, password-reset alerts, and account-security warnings.

Their purpose is to make recipients enter their login details on a fraudulent website.

If an attacker obtains a password, they may attempt to access email accounts, social media profiles, cloud storage, or other online services.

Email accounts are particularly valuable because they can sometimes be used to reset passwords for other accounts.

1.3 Avoiding Malware

Some suspicious messages contain attachments or links that lead to malicious downloads.

Depending on the file and the vulnerability involved, opening or running the content may expose a device to malware.

Malicious software can be designed to steal information, monitor activity, damage files, or provide unauthorised access.

Checking unexpected attachments before opening them reduces this risk.

1.4 Preventing Financial Loss

Fraudulent messages sometimes claim that a payment has failed, a delivery requires an additional fee, or an account needs urgent verification.

The recipient may be directed to a fake payment page.

If they enter payment information, attackers may attempt unauthorised transactions or misuse the information.

A few moments spent independently verifying a payment request can prevent significant problems.

2. Understand What Makes a Message Suspicious

A suspicious message is any communication that contains signs of deception, unexpected requests, unusual links, or potentially harmful content.

Not every unusual message is necessarily fraudulent. Legitimate organisations sometimes send unexpected notifications, and genuine messages may contain formatting errors.

The purpose of checking is to identify warning signs before taking action.

Common sources of suspicious messages include:

• Email.
• SMS and text messages.
• WhatsApp.
• Telegram.
• Facebook Messenger.
• Instagram direct messages.
• Social media comments.
• Online marketplace conversations.
• Workplace communication applications.
• Unexpected calendar invitations.

The same basic security checks apply across these channels.

2.1 Unexpected Communication

An unexpected message deserves attention, particularly when it asks you to take an action.

For example:

“You have received a refund. Confirm your bank information to claim it.”

If you did not request a refund, there is no obvious reason to provide financial information.

Similarly, an unexpected message about a package should be checked against an actual order before you interact with its link.

2.2 Unusual Requests

Be cautious when a message asks you to do something outside normal procedures.

Examples include:

• Sending a password.
• Sharing a one-time verification code.
• Downloading an unfamiliar application.
• Transferring money.
• Changing payment details.
• Providing identification documents.
• Disabling security protections.
• Moving a conversation to another platform.

These requests may be attempts to bypass normal security controls.

2.3 Messages That Create Confusion

Some fraudulent messages are deliberately vague.

They may say:

“Your account requires attention.”

“An important document is waiting.”

“Your payment is incomplete.”

“Unusual activity has been detected.”

The message does not provide enough information to establish whether it is genuine, but it encourages you to click a link to discover more.

Instead of following the link, visit the relevant service independently.

3. Check the Sender Carefully

The sender is one of the first things you should examine.

However, do not assume that a familiar display name proves a message is genuine.

Fraudsters can imitate names, create similar email addresses, and sometimes abuse compromised accounts.

3.1 Examine the Full Email Address

Email applications often display only a person’s name or a company’s name.

Click or expand the sender information to view the complete email address.

For example, consider these addresses:

• support@example.com
• support@example-security.com
• example-support123@gmail.com

They may look related, but they are not necessarily controlled by the same organisation.

Look carefully for:

• Extra words.
• Missing letters.
• Additional numbers.
• Unexpected domain extensions.
• Hyphens or symbols.
• Slightly altered company names.

A small difference can indicate that an address is impersonating a legitimate organisation.

3.2 Look for Misspelled Domains

A technique known as typosquatting involves registering domain names that resemble legitimate websites.

For example, a fraudulent domain might replace one letter with another or add an extra character.

A person reading quickly may not notice the difference.

Always inspect the actual domain rather than relying on how familiar the company name looks.

3.3 Be Careful With Free Email Addresses

A message claiming to come from a large bank or established company but using an unrelated personal email account deserves additional scrutiny.

However, the opposite is also true: a professional-looking email address does not guarantee that a message is safe.

Attackers may use compromised accounts or domains that closely resemble legitimate ones.

The sender address is one clue, not complete proof.

3.4 Check Whether the Person Was Expected to Contact You

Think about the context.

Were you expecting an invoice? Did you recently place an order? Have you contacted customer support? Is the sender connected to an ongoing project?

A message that fits an existing conversation is generally easier to verify than an unexpected request.

Still, compromised email or messaging accounts can be used to send fraudulent messages within genuine conversations.

If a familiar person suddenly asks for money, passwords, or confidential information, confirm the request through another trusted channel.

3.5 Understand Email Authentication

Email authentication technologies help receiving systems assess whether a message is authorised to come from a particular domain.

Three commonly used technologies are:

SPF (Sender Policy Framework): Helps identify which servers are authorised to send email for a domain.

DKIM (DomainKeys Identified Mail): Uses a digital signature to help verify message integrity and domain association.

DMARC (Domain-based Message Authentication, Reporting and Conformance): Builds on SPF and DKIM to provide domain-level authentication policies and reporting.

These technologies can help reduce email spoofing, but they do not guarantee that a message is harmless.

A genuine account can be compromised, and a properly authenticated message can still contain deceptive content.

4. Read the Message for Warning Signs

After checking the sender, examine the actual content.

Phishing messages often use language designed to influence your emotions or make you act without thinking.

The wording may be more revealing than the visual design.

4.1 Urgent Language

One common warning sign is excessive urgency.

Examples include:

• “Your account will be closed today.”
• “Immediate action is required.”
• “Your payment will be cancelled.”
• “Respond within 30 minutes.”
• “Your files will be deleted.”
• “Your account has been permanently restricted.”

Urgency is used to reduce the time available for careful thinking.

A genuine service may occasionally send urgent security notifications, but you should still verify them through the official application or website.

Do not let a deadline pressure you into clicking an unfamiliar link.

4.2 Threatening Language

Some messages attempt to frighten recipients.

They may claim that:

• A bank account has been frozen.
• A legal case has been opened.
• A subscription has been cancelled.
• A social media account will be deleted.
• A security violation has occurred.
• An unpaid bill will result in immediate penalties.

A threat does not prove that the message is genuine.

If the message concerns a real account, check its status through the official service.

4.3 Unexpected Rewards

Messages promising money, prizes, gift cards, or exclusive benefits can also be suspicious.

Examples include:

“You have won a free smartphone.”

“Claim your shopping voucher now.”

“You have been selected for a cash reward.”

If you never entered a competition or requested the offer, ask why you would be receiving it.

Be especially careful when claiming a prize requires a payment, bank information, identity documents, or an unexpected application download.

4.4 Poor Grammar and Spelling

Spelling mistakes, awkward sentences, unusual punctuation, and inconsistent formatting can indicate a fraudulent message.

However, this is not a reliable test on its own.

Modern scams may use polished writing, professional templates, and automated language tools.

Similarly, legitimate messages can contain occasional mistakes.

Use writing quality as one warning sign rather than your main security test.

4.5 Generic Greetings

A message that begins with “Dear Customer” instead of using your name may deserve closer inspection, especially if it claims to be a personalised account notification.

However, many legitimate companies send automated messages with generic greetings.

The more important question is whether the message contains a specific, verifiable reason for contacting you.

4.6 Requests for Secret Information

Treat any unexpected request for passwords, recovery codes, or one-time verification codes as a serious warning sign.

Legitimate support staff should not need you to reveal your password.

Never share an authentication code with someone who contacts you unexpectedly.

An attacker may already have your username and password and be trying to obtain the additional code needed to access your account.

5. Check Links Before Opening Them

Links are among the most common elements used in phishing messages.

A message might display a familiar company name while directing you to a completely different website.

The destination is what matters.

5.1 Preview the Link

On many desktop browsers and email applications, you can hover over a link to preview its destination.

On mobile devices, pressing and holding a link may display a preview or menu, depending on the application.

Be careful not to tap the link accidentally.

Examine the displayed address and look for unexpected domains or suspicious characters.

5.2 Understand the Main Domain

Consider this example:

The main domain is example.com.

Now compare it with:

The actual domain is account-checking.net, not example.com.

Fraudulent websites often place a trusted company name before an unrelated domain to make a link appear legitimate.

Learn to identify the registered domain rather than reading only the first part of the address.

5.3 Look for Extra Characters

Attackers may use small changes that are difficult to notice.

For example:

• examp1e.com instead of example.com
• example-login.com instead of example.com
• example-secure.net instead of the official domain

Pay attention to numbers, hyphens, additional words, and unexpected domain endings.

5.4 Do Not Trust HTTPS Alone

A website beginning with HTTPS uses an encrypted connection.

This helps protect information transmitted between your browser and the website.

However, HTTPS does not prove that a website is legitimate.

Fraudulent websites can also obtain HTTPS certificates.

A secure connection to a fake website is still a connection to a fake website.

Always check the domain itself.

5.5 Watch for URL Shorteners

Services that shorten URLs can hide the original destination.

A shortened address may look like:

The link does not immediately reveal which website it opens.

Shortened URLs are used for legitimate purposes, but they can also conceal malicious destinations.

If an unexpected message contains a shortened link, verify the sender and purpose before opening it.

For sensitive situations, visit the organisation’s official website directly instead.

5.6 Be Careful With Unusual Web Addresses

Suspicious links may contain:

• Long strings of random characters.
• Multiple redirects.
• Unusual subdomains.
• Unexpected file extensions.
• Misspelled brand names.
• Strange combinations of letters and numbers.

These characteristics are not always harmful, but they justify additional investigation.

6. Use Safe Methods to Inspect Suspicious Links

Sometimes a link requires more investigation.

There are online services that can help analyse URLs, domain information, or website reputation.

However, using these tools requires care.

6.1 VirusTotal

<Entity value=”VirusTotal” category=”software” disambig=”Online file and URL security analysis service”/> provides tools for checking URLs and files against multiple security detection sources.

You can visit its official website and use the URL analysis feature to inspect a suspicious destination.

Website: https://www.virustotal.com/

Keep in mind that a clean result does not guarantee safety. New malicious websites may not yet have been detected.

Also, do not submit private or confidential URLs containing personal tokens, password-reset codes, or sensitive access parameters to public analysis services.

6.2 Google Safe Browsing

<Entity value=”Google Safe Browsing” category=”software” disambig=”Web security and malicious URL protection service”/> helps identify websites associated with phishing, malware, and other unsafe content.

It is integrated into several browsers and Google security services.

You can learn more through:

A warning from a browser or security service should be taken seriously.

However, the absence of a warning does not prove that a website is safe.

6.3 URLScan.io

<Entity value=”urlscan.io” category=”software” disambig=”Website scanning and URL analysis service”/> analyses submitted URLs and provides information about website behaviour, requests, and page activity.

Website: https://urlscan.io/

This can be useful for more detailed investigations.

However, scans may be publicly visible depending on the submission settings.

Never submit confidential URLs that contain private access tokens or personal information.

6.4 Check Domain Information

Domain registration information can sometimes provide useful context.

You may investigate:

• When the domain was registered.
• Whether the domain appears newly created.
• Which registrar is associated with it.
• Whether the domain resembles a known brand.

A recently registered domain is not automatically fraudulent. Legitimate businesses launch new websites every day.

However, a newly created domain pretending to represent an established organisation deserves additional scrutiny.

6.5 Never Open a Link Just to Test It

One of the most important rules is to avoid opening a suspicious link simply to see what happens.

A website may attempt to download files, redirect visitors, exploit browser vulnerabilities, or present a convincing login page.

Use trusted security tools where appropriate, and remember that no scanning service provides a perfect guarantee.

7. Examine Attachments Before Downloading or Opening Them

Suspicious messages may include documents, compressed files, images, or other attachments.

The attachment may appear to be an invoice, receipt, delivery notice, job offer, or business report.

However, the file may contain harmful content.

7.1 Be Careful With Unexpected Documents

Common attachment formats include:

• PDF.
• DOCX.
• XLSX.
• ZIP.
• RAR.
• HTML.
• EXE.

Some formats are commonly used for legitimate work, while others can contain executable content or scripts.

Do not open an unexpected attachment simply because its filename looks familiar.

7.2 Watch for Double File Extensions

A suspicious file might use a name such as:

invoice.pdf.exe

The first extension may make the file appear to be a PDF, while the final extension indicates an executable program.

On some systems, file extensions may be hidden or displayed in a confusing way.

Enable the option to show file extensions when possible, and inspect the complete filename.

7.3 Treat Password-Protected Archives Carefully

A ZIP or RAR file protected by a password is not automatically safe.

Password protection may be used to prevent security scanners from inspecting the contents easily.

If you were not expecting the archive, confirm its source before extracting it.

7.4 Scan Attachments With Security Software

Use reputable, updated security software to scan suspicious files.

For files that contain sensitive information, prefer local antivirus scanning rather than uploading them to public analysis services.

Public scanning services may share submitted samples or analysis information with security partners.

Check the service’s privacy terms before uploading private documents.

7.5 Avoid Enabling Macros

Unexpected Office documents may ask you to enable macros or other active content.

Do not enable macros simply because a document claims they are necessary to display an invoice or view important information.

Macros can be used to execute harmful commands.

If the document is supposedly from a known organisation, contact the sender through an independently verified channel.

8. Recognise Common Types of Suspicious Messages

Understanding common scam patterns makes it easier to identify suspicious communication.

8.1 Fake Bank Alerts

A fraudulent message may claim that your bank account has been restricted or that an unusual transaction has occurred.

It may include a link asking you to verify your details.

Warning signs include:

• Unexpected login requests.
• Unknown website addresses.
• Requests for PINs or passwords.
• Pressure to act immediately.
• Unfamiliar transaction details.

Open your bank’s official application or contact the bank using a verified phone number.

Do not use the link or phone number included in the suspicious message.

8.2 Delivery and Parcel Scams

Delivery-related messages may claim that a parcel cannot be delivered without additional information or payment.

They often contain links to fake tracking websites.

Before interacting, check your order confirmation and use the courier’s official website to track the package.

Do not provide payment details through an unexpected delivery link.

8.3 Fake Password-Reset Messages

You may receive an email claiming that someone has requested a password reset.

If you did not initiate the request, do not click the link automatically.

Instead:

1. Open the official service independently.
2. Check your account’s security activity.
3. Review any genuine security notifications.
4. Change your password if you identify suspicious activity.
5. Enable multifactor authentication.

An unexpected password-reset email does not necessarily mean your account has been compromised, but it should not be ignored.

8.4 Fake Job Offers

Fraudulent recruiters may send messages promising attractive salaries or remote opportunities.

They may request personal documents, registration payments, or application fees.

Warning signs include:

• No verifiable company information.
• Unusually high salaries for simple work.
• Requests for money before employment.
• Pressure to provide identity documents.
• Interviews conducted through unusual channels.
• Requests to receive or transfer money.

Research the company independently and verify the recruiter’s identity.

8.5 Fake Customer Support Messages

Scammers may impersonate technical support teams and claim that your account has a problem.

They might ask you to install remote-access software or provide verification codes.

Never give an unknown person control of your device.

Contact the company using its official support channels instead.

8.6 Social Media Giveaway Scams

A message may claim that you have won a prize through a brand giveaway.

It might ask you to click a link, pay a delivery charge, or provide personal details.

Check the company’s official social media account to see whether the promotion exists.

Be careful with accounts that use similar usernames, copied branding, or recently created profiles.

8.7 Fake Invoice and Payment Requests

Businesses frequently receive invoices through email.

Attackers may impersonate suppliers or employees and provide altered bank details.

Before making a payment, verify any unexpected change through a known phone number or previously established communication channel.

Never rely only on the contact details included in the suspicious message.

8.8 Romance and Relationship Scams

Some scammers develop relationships through messaging platforms before requesting money or sensitive information.

They may create emergencies, claim to need travel expenses, or request financial help.

Be cautious when someone you have only met online repeatedly asks for money, gift cards, cryptocurrency, or financial assistance.

Do not send money based solely on emotional pressure or promises.

8.9 QR Code Scams

Suspicious messages may include QR codes that lead to fraudulent websites.

A QR code hides the destination until it is scanned.

Before opening the resulting page, inspect the displayed URL and confirm that it belongs to the intended organisation.

Never assume a QR code is safe because it appears on a printed document or official-looking message.

9. Check Suspicious Messages on Different Devices

The basic security principles are the same across devices, but the available tools and interfaces differ.

9.1 Checking Messages on a Computer

Desktop devices make it easier to inspect full email addresses and link destinations.

Recommended steps:

1. Open the message without interacting with its links.
2. Expand the sender details.
3. Examine the full email address.
4. Hover over suspicious links to preview their destination.
5. Inspect attachments without opening them.
6. Check the message’s context.
7. Verify unexpected requests through official channels.

Use an updated browser and reputable security software.

9.2 Checking Messages on Android

On Android devices, suspicious messages may arrive through SMS, email, messaging applications, or social media.

Follow these precautions:

• Check the sender or phone number.
• Avoid opening unknown links.
• Preview links carefully where supported.
• Do not install applications from unexpected messages.
• Review requested application permissions.
• Keep Android and installed applications updated.
• Use available spam and phishing protection.

If a message claims to come from a bank, open the official banking application instead.

9.3 Checking Messages on iPhone

iPhone users should apply similar precautions.

Before interacting with an unexpected message:

• Check the sender.
• Review the wording.
• Inspect the destination address.
• Avoid unknown downloads.
• Do not share authentication codes.
• Keep iOS updated.
• Use official applications for account verification.

Apple’s security protections can help reduce certain risks, but they do not make every message or website safe.

9.4 Checking Messages on WhatsApp

WhatsApp messages may come from known contacts, unknown numbers, or groups.

Be careful when someone:

• Requests an urgent payment.
• Asks for a verification code.
• Sends an unfamiliar file.
• Shares an unexpected shortened link.
• Claims to represent a company.
• Asks you to install another application.

If a friend sends an unusual request, contact them using another trusted method to confirm that the account has not been compromised.

You can also report and block suspicious accounts through WhatsApp’s available controls.

10. Verify Unexpected Requests Through Official Channels

One of the most reliable ways to avoid phishing is to verify the request independently.

This means not using the contact details or links provided in the suspicious message.

10.1 Visit the Official Website Manually

If a message claims that your account needs attention, type the organisation’s known website address into your browser.

Alternatively, use a trusted bookmark or official application.

Check whether the same notification appears inside your account.

10.2 Use Verified Contact Details

If a message claims to come from a bank, courier, employer, or service provider, contact that organisation through an independently verified phone number.

You can find contact details on:

• The official website.
• An existing account statement.
• A previous verified contract.
• The official application.
• Trusted documentation.

Do not automatically trust the phone number included in the suspicious message.

10.3 Confirm Requests With Known Contacts

If a colleague or family member sends an unusual request, contact them using a separate communication channel.

For example, if someone emails you asking for an urgent bank transfer, call them using a previously verified number.

A compromised email account can be used to impersonate someone the recipient already knows.

10.4 Check Your Account Directly

If a message claims that an account has been locked, suspended, or compromised, sign in through the official application or website.

Look for security alerts, recent activity, and account notifications.

If no matching warning appears, the message may be fraudulent.

However, if you suspect an account has actually been compromised, contact the service provider through its official support process.

11. Understand Social Engineering Techniques

Social engineering involves manipulating people into revealing information or taking actions that benefit an attacker.

It often targets human behaviour rather than technical weaknesses.

Understanding these techniques makes suspicious messages easier to recognise.

11.1 Fear

A message may claim that your account will be deleted or your money will be lost.

The goal is to make you act quickly without checking the facts.

11.2 Curiosity

Messages such as “Look at this photo” or “Someone mentioned you” may encourage recipients to open unfamiliar links.

Curiosity can be used to bypass normal caution.

11.3 Authority

An attacker may impersonate a manager, bank employee, police officer, or technical support representative.

People are more likely to follow instructions when they believe they come from someone with authority.

Always verify unusual requests, even when the sender appears important.

11.4 Trust

Scammers sometimes pretend to be friends, relatives, colleagues, or familiar organisations.

They may copy profile photographs, logos, and communication styles.

Trust should never replace verification when money, passwords, or confidential information are involved.

11.5 Scarcity

Messages may claim that an offer, prize, or opportunity is available for a limited time.

This creates pressure to act before checking the details.

A genuine opportunity should not require you to ignore basic security precautions.

12. What to Do If You Already Clicked a Suspicious Link

Clicking a suspicious link does not automatically mean your device or account has been compromised.

The risk depends on what happened after the link opened.

For example, simply viewing a webpage is different from entering a password, downloading a file, or installing software.

The important thing is to respond calmly and take the appropriate steps.

12.1 If You Only Opened the Page

If you opened the link but did not enter information or download anything:

1. Close the suspicious page.
2. Do not interact with its buttons or forms.
3. Check whether anything downloaded automatically.
4. Review your browser’s download history.
5. Run a security scan if you have concerns.
6. Avoid revisiting the website.

Keep your browser and operating system updated.

12.2 If You Entered Your Password

If you entered your password on a suspicious website:

1. Open the genuine service through its official application or website.
2. Change the affected password immediately.
3. Change the same password on other accounts where it was reused.
4. Enable multifactor authentication.
5. Review recent account activity.
6. Sign out of unfamiliar sessions.
7. Check recovery email addresses and phone numbers.
8. Contact the service provider if you cannot regain control.

Do not use the suspicious message’s link to change your password.

12.3 If You Shared a Verification Code

Contact the affected service immediately through its official support channels.

Review account activity and terminate unfamiliar sessions where possible.

Change the password if necessary and check whether recovery settings have been modified.

Never share additional codes with someone claiming to help you recover the account.

12.4 If You Downloaded a Suspicious File

Do not open or run the downloaded file.

If you already executed it, disconnect the affected device from networks if you suspect active compromise and use reputable security software to investigate.

For work devices, notify your IT or security team.

If malware is detected, follow the security software’s instructions and obtain professional assistance when needed.

12.5 If You Shared Financial Information

Contact your bank or payment provider immediately using its official contact details.

Explain what information was exposed.

Depending on the situation, the provider may recommend:

• Blocking a payment card.
• Monitoring transactions.
• Changing account credentials.
• Disputing unauthorised payments.
• Securing online banking access.

Keep records of suspicious messages and transactions.

12.6 If You Shared Personal Documents

If you sent identification documents or other sensitive personal information, contact the relevant organisation or authority to understand the available protective steps.

Monitor for unusual account activity and follow any applicable identity-protection procedures.

13. How to Report Suspicious Messages

Reporting suspicious communication can help service providers identify scams and protect other users.

The reporting method depends on where the message was received.

13.1 Report Phishing Emails

Most email services provide a feature such as “Report phishing” or “Report spam.”

Use the phishing option when a message appears designed to steal information or impersonate an organisation.

Reporting helps the email provider assess the message and improve its filtering systems.

13.2 Report Suspicious SMS Messages

Mobile network providers and messaging applications may offer ways to report fraudulent text messages.

Avoid replying to suspicious messages.

In some countries, users can forward scam texts to designated reporting numbers.

Check the official guidance from your mobile operator or local communications authority.

13.3 Report Fraudulent Social Media Accounts

Social media platforms generally provide reporting tools for impersonation, scams, and suspicious content.

You can report accounts that:

• Impersonate another person.
• Pretend to represent a business.
• Send fraudulent payment requests.
• Promote suspicious links.
• Attempt to steal personal information.

Block the account when appropriate.

13.4 Preserve Evidence

Before deleting a suspicious message, consider preserving relevant information.

Useful evidence may include:

• Sender details.
• Message screenshots.
• Full email headers.
• Suspicious URLs.
• Attachment names.
• Transaction records.
• Dates and times.

Do not forward harmful links to other people simply to warn them.

If you need to share evidence, use a safe reporting method.

14. Create Better Habits for Everyday Message Security

The most effective protection comes from consistent habits rather than occasional checks.

You do not need to investigate every message for several minutes. You need to recognise when a message deserves additional attention.

14.1 Pause Before Responding

Make it a habit to stop briefly before clicking an unexpected link.

Ask yourself:

• Was I expecting this message?
• Do I recognise the sender?
• Is the request reasonable?
• Does the link match the official website?
• Is there unnecessary urgency?
• Can I verify the request independently?

This short pause can prevent impulsive decisions.

14.2 Keep Your Devices Updated

Install security updates for:

• Operating systems.
• Web browsers.
• Messaging applications.
• Email applications.
• Antivirus software.

Updates often include security fixes that address known vulnerabilities.

14.3 Use Strong, Unique Passwords

Avoid using the same password across multiple websites.

A password manager can help generate and store unique passwords.

This reduces the damage if one website or service experiences a data breach.

14.4 Enable Multifactor Authentication

Multifactor authentication adds another verification step when signing in.

Use it on important accounts, particularly:

• Email.
• Banking.
• Cloud storage.
• Social media.
• Business accounts.

Where available, phishing-resistant authentication methods such as passkeys or security keys offer stronger protection against credential theft than traditional passwords alone.

14.5 Review Account Activity

Check your important accounts periodically.

Look for:

• Unfamiliar login sessions.
• Unknown devices.
• Unexpected password changes.
• New recovery methods.
• Unusual transactions.
• Unrecognised connected applications.

Investigate anything you do not recognise.

14.6 Educate Family Members and Colleagues

Share practical examples of suspicious messages with people around you.

Older adults, children, new internet users, and employees who regularly handle payments may benefit from additional awareness.

Encourage everyone to verify unusual requests rather than feeling embarrassed about asking questions.

14.7 Avoid Sharing Too Much Information Online

Public information can help attackers create convincing messages.

Be careful about publishing:

• Personal phone numbers.
• Private email addresses.
• Travel plans.
• Financial details.
• Workplace information.
• Account-recovery details.

Reducing unnecessary exposure can make impersonation and targeted phishing more difficult.

15. Build a Simple Message Verification Routine

A repeatable verification routine makes it easier to recognise suspicious messages.

You can use the following five-stage approach whenever a message requests information, money, or account access.

Stage 1: Identify

Check who sent the message.

Inspect the complete email address, phone number, account name, or profile.

Do not rely only on the display name or profile photograph.

Stage 2: Examine

Read the message carefully.

Look for urgency, threats, unusual requests, unexpected rewards, and requests for confidential information.

Stage 3: Inspect

Check links and attachments without opening them.

Look at the destination domain and file extension.

Use reputable security tools when appropriate.

Stage 4: Verify

Contact the organisation or individual independently.

Use a known website, official application, or previously verified phone number.

Do not use contact information supplied only in the suspicious message.

Stage 5: Decide

If the message cannot be verified, do not click, download, reply, or provide information.

Report and delete it when appropriate.

If the message is confirmed as genuine, continue through the organisation’s official channel.

16. A Practical Suspicious Message Checklist

Use this checklist before interacting with an unexpected message.

Sender Verification

• Do I recognise the sender?
• Have I checked the full email address or phone number?
• Does the domain match the organisation’s official domain?
• Was I expecting this communication?
• Have I independently confirmed unusual requests?

Message Content

• Does the message create unnecessary urgency?
• Does it threaten account suspension or financial loss?
• Does it promise an unexpected reward?
• Does it request a password or verification code?
• Does the request match normal communication from the organisation?

Link and Attachment Safety

• Have I inspected the destination address?
• Does the main domain appear correct?
• Is the link shortened or unexpected?
• Is the attachment expected?
• Have I checked the complete file extension?
• Have I avoided downloading or running unknown files?

Final Decision

• Have I verified the message through an official channel?
• Am I confident that the requested action is legitimate?
• Can I complete the task without using the message’s link?
• Have I avoided sharing sensitive information unnecessarily?

If several answers raise concerns, stop and investigate before continuing.

17. Special Advice for Businesses and Remote Teams

Businesses receive large numbers of emails, invoices, file-sharing invitations, and internal messages.

This makes them attractive targets for phishing and business email compromise.

Business email compromise involves attackers impersonating or compromising business accounts to manipulate employees into transferring money or sharing sensitive information.

17.1 Verify Payment Changes

Any unexpected change to supplier bank details should be confirmed through a previously established contact method.

Do not rely on an email reply alone.

17.2 Establish Approval Procedures

Require additional approval for high-value payments, sensitive information requests, and unusual account changes.

A second review can help identify fraudulent instructions.

17.3 Train Employees to Recognise Impersonation

Employees should know that a familiar name or email conversation does not guarantee authenticity.

Train staff to recognise unusual requests, unexpected attachments, and suspicious payment instructions.

17.4 Use Email Security Controls

Businesses can consider:

• SPF, DKIM, and DMARC configuration.
• Advanced phishing protection.
• Attachment scanning.
• URL filtering.
• Multifactor authentication.
• Centralised logging.
• Employee security training.

17.5 Create a Reporting Process

Employees should know exactly where to report suspicious messages.

The reporting process should be simple and should encourage early reporting without blaming people for asking questions.

Early reporting can help security teams investigate and contain potential incidents.

18. The Role of Artificial Intelligence in Modern Phishing

Phishing messages have become more convincing as attackers gain access to better writing and automation tools.

Artificial intelligence can be used to generate messages with polished grammar, personalised details, and professional formatting.

This means older warning signs are becoming less reliable.

18.1 Better-Written Fake Emails

Previously, poor spelling and awkward language were common indicators of phishing.

AI-generated messages can remove many of these obvious errors.

A well-written message should therefore never be treated as automatically trustworthy.

18.2 Personalised Messages

Attackers may use publicly available information to make messages appear relevant.

For example, a fraudulent message might mention:

• Your workplace.
• A recent purchase.
• A colleague’s name.
• A professional event.
• A service you regularly use.

Personalisation can increase credibility, but it does not prove that the sender is genuine.

18.3 Deepfake Voice and Video

Some scams may involve synthetic voices or manipulated video to impersonate trusted individuals.

For example, an employee might receive a voice message that appears to come from a manager requesting an urgent payment.

For important financial or confidential requests, use an established verification process rather than trusting a voice or video message alone.

18.4 Focus on Verification Instead of Appearance

As messages become more sophisticated, it is increasingly important to focus on verifiable details.

Check the sender’s identity, destination domain, account activity, and purpose of the request.

Do not rely on writing quality, logos, photographs, or professional design as proof of authenticity.

19. Frequently Asked Questions

1. How can I tell if a message is suspicious?

Look for unexpected requests, unusual sender addresses, suspicious links, urgent language, unknown attachments, and requests for sensitive information.

Verify important claims through official channels before taking action.

2. Is it safe to click a link from an unknown sender?

It is generally safer not to click unexpected links from unknown senders.

If the message claims to come from a company or service, visit its official website independently.

3. Can a phishing email look completely genuine?

Yes. Phishing emails can copy company branding, use professional language, and imitate genuine communication.

Always verify the sender, destination domain, and purpose of the message.

4. Does HTTPS mean a website is safe?

No. HTTPS encrypts the connection between your browser and the website, but it does not prove that the website is legitimate.

Fraudulent websites can also use HTTPS.

5. What should I do if I receive a suspicious text message?

Do not click its links or reply with personal information.

Verify the message independently, report it through the available messaging or mobile network tools, and block the sender when appropriate.

6. Can opening a suspicious email infect my device?

Simply viewing an ordinary email is generally less risky than opening an attachment or following a malicious link.

However, vulnerabilities in email applications can create additional risks.

Keep your software updated and avoid interacting with unexpected content.

7. Are shortened URLs dangerous?

Not necessarily. Many legitimate services use shortened URLs.

However, shortened addresses hide the final destination, making unexpected links harder to assess.

Use additional verification before opening them.

8. What if a suspicious message comes from someone I know?

Their account may have been compromised or their identity may be impersonated.

Contact them through another trusted communication method before following unusual instructions.

9. Should I reply to a suspicious message to ask whether it is genuine?

No. Replying may confirm that your address or phone number is active.

Use independently verified contact information instead.

10. What should I do if I accidentally enter my password?

Immediately visit the genuine website or application and change the password.

If the password was reused elsewhere, update those accounts too.

Enable multifactor authentication, review account activity, and sign out of unfamiliar sessions.

11. Can antivirus software identify every phishing message?

No. Security software can detect many known threats, but new or highly targeted scams may bypass detection.

Your own verification habits remain important.

12. Is a message safe if it includes a company logo?

No. Logos and other branding elements can easily be copied.

Check the sender’s actual identity and verify the request through the company’s official channels.

13. What is the difference between phishing and spam?

Spam generally refers to unwanted or unsolicited messages.

Phishing is a deceptive attempt to steal information, obtain access, or persuade someone to take an unsafe action.

Some phishing messages are spam, but not all spam is phishing.

14. Why do scammers create urgency?

Urgency reduces the time people spend thinking and verifying information.

It encourages quick decisions based on fear, curiosity, or excitement.

Pause before responding to any message that pressures you to act immediately.

15. What is the safest way to verify a bank message?

Open your bank’s official application or type its known website address into your browser.

You can also call the bank using the number printed on your card or listed on its official website.

Never use an unfamiliar link or phone number supplied in a suspicious message.

16. Can QR codes contain phishing links?

Yes. QR codes can direct users to fraudulent websites just like ordinary links.

Check the destination address before continuing.

17. Should I delete suspicious messages immediately?

If you have no reason to preserve them, deleting them after reporting is generally reasonable.

If you suspect fraud, financial loss, or account compromise, preserve relevant evidence first.

Conclusion

Suspicious messages are a common part of online life, but recognising them does not require advanced technical skills.

The most effective protection begins with a simple habit: do not click first and investigate later.

Check who sent the message, examine its wording, inspect the destination of any links, and be cautious with unexpected attachments. Pay particular attention to requests involving passwords, verification codes, payments, and personal documents.

Remember that a professional design, familiar logo, correct grammar, or HTTPS connection does not guarantee that a message is genuine.

When something seems unusual, verify it independently through the organisation’s official website, application, or previously confirmed contact details.

If you have already interacted with a suspicious message, respond quickly. Change exposed passwords, secure affected accounts, contact your bank when financial information is involved, and report potential incidents through appropriate channels.

Online safety is built through small decisions made consistently.

Pause before clicking. Check before sharing. Verify before trusting.

These three habits can help protect your personal information, online accounts, devices, and finances from many common digital threats.