Quick answer

A fast, evidence-based check before you tap, reply or share information.

  • Start with: Pause before interacting
  • Finish with: Report and delete safely
  • Pause if: Urgency is not proof

Primary sources for this guide: CISA: Recognize and report phishing; FTC: How to recognize and avoid phishing scams. Check the source that applies to your location and situation before acting.

Know when to escalate: If the situation involves immediate danger, suspected crime, serious health symptoms or a deadline with major legal or financial consequences, contact the appropriate local emergency service, official body or qualified professional.

A step-by-step plan

  1. Pause before interacting

    Do not reply, open attachments or use a phone number in the message. A short pause keeps the sender from controlling the pace.

  2. Check the sender outside the message

    Open the claimed organization's app or type its known address yourself. Compare the alert there instead of trusting the message header.

  3. Inspect the request and destination

    Read the full destination before opening it and ask what the sender wants you to reveal, pay or approve. Unexpected access requests deserve independent checking.

  4. Report and delete safely

    Use the platform's reporting control, keep a screenshot if a report needs evidence, then remove the message without forwarding its active links.

Common mistakes and warning signs

Use these checks as reasons to slow down and verify the situation. One warning sign alone does not settle every case.

  • Urgency is not proof
  • Display names can be forged
  • A familiar logo proves nothing

Progress checkpoints

CheckpointWhat you should have
Before actingPause before interacting
Before finishingReport and delete safely
Reason to pauseUrgency is not proof

Final checklist

Checklist state stays in this browser tab and is not sent to Help.You.

Sources and further verification

Rules and official processes vary by country and can change. Use the responsible organization for your location and situation. These starting points may cover a different jurisdiction.

How this guide was made

Help.You editors structured this page around the task sequence, reviewed it for avoidable risk and checked that its claims stay within general informational scope. Read our content process.