Slow down when a message tries to rush you

A convincing scam may copy a friend’s photograph, a company name or a colleague’s tone. The recurring signal is pressure: act immediately, keep the request secret, confirm a code or pay before you have time to check.

Do not continue inside the same conversation. Close the link, preserve a screenshot if useful, and return through the service’s official app or address. That pause breaks the script chosen by the scammer and gives you control again.

Verify identity outside the conversation

A badge, photograph and plausible name do not prove identity. Check the exact account address, history, posts and links used by the organisation. For someone you know, call a number you already had or ask a question whose answer is not public.

For a company or public body, find contact details through its official website, not through the message. One independent verification is more useful than a long conversation with a suspicious account.

Check the link, request and payment method

Watch for slightly altered domains, forms requesting a password and unexpected attachments. Gift cards, cryptocurrency, instant transfers and one-time verification codes are high-risk requests because they are difficult to reverse.

Legitimate support should not ask for your full password or two-step verification code. If an offer looks exceptional, search for it separately and compare the conditions, seller and independent information.

Report without exposing more personal data

Use the network’s reporting route for the account, message or advertisement. Block the contact after preserving any evidence you need. If you shared banking information, contact your bank immediately through an official channel.

Keep dated evidence when impersonation, financial loss or threats are involved and use the reporting service for your country. Do not post identity documents or screenshots containing sensitive details in public when asking for help.

Checklist

  • I stopped the exchange and avoided the supplied link.
  • I verified the identity through another channel.
  • I did not share a password, code or rushed payment.
  • I preserved useful evidence and used the official reporting route.

Frequently asked questions

Can a verified account be used for a scam?

Yes. A genuine account can be compromised, and badge criteria vary by service. Verify the request itself and contact the person or organisation through another channel.

What should I do after clicking a suspicious link?

Close the page, stop entering information, update the device and change any password you shared by opening the official service yourself. Then review sign-ins and affected payment methods.

Should I warn my contacts?

Yes if your account sent suspicious messages or if an impersonating account is targeting them. Use a trusted channel and do not repost the fraudulent link.

Sources & method

This guide translates public-sector fraud advice into a short verification routine. Reporting and redress routes depend on your country and the harm involved.

Editorial responsibility: Alexis R., World Web Certified. Suggest a correction.