Five Simple Checks That Can Help You Avoid a Scam

Online links are part of everyday life. We click them in emails, text messages, social media posts, QR codes, and websites without giving them much thought. While most links are safe, cybercriminals often rely on people clicking before taking the time to verify where a link leads. One wrong click could expose personal information, install malicious software, or lead to financial fraud.

During Cybersecurity Awareness Month, we’re reminding you to Pause Before You Proceed. Spending just a few seconds checking a message or link before taking action can help protect your personal and financial information from online scams.

Here are five simple ways to identify suspicious links and messages before you click.

1. Verify who sent the message.
Take a close look at the sender before interacting with an email or text message. Scammers may impersonate trusted businesses, financial institutions, or people you know by using email addresses and phone numbers that appear legitimate at first glance. Watch for misspellings, extra characters, or other small differences that could indicate the message is fraudulent.

2. Be suspicious of urgent requests.
Cybercriminals often create a sense of urgency to pressure you into acting quickly. A message may claim your account has been compromised, your access will be suspended, you’ve won a prize, or you need to respond immediately. Before taking action, stop and consider whether the request makes sense. A legitimate organization generally won’t pressure you into making an immediate decision through an unexpected message.

3. Check where a link leads before clicking.
When using a computer, hover your cursor over a link without selecting it. You should be able to preview the destination and review the web address before visiting the page. Look carefully for misspellings, unfamiliar domains, or other unusual details. If the destination doesn’t look right, avoid the link.

4. Use caution with unexpected attachments.
Email attachments can also be used to spread malware or steal sensitive information. Even when a message appears to come from someone you recognize, be cautious if you weren’t expecting a file. If you have any doubts, contact the sender through a phone number, email address, or other method you already know and trust to confirm the attachment is legitimate.

5. Visit the official website yourself.
When you’re uncertain about an email, text, or other message, skip the provided link altogether. Instead, type the organization’s official website address directly into your browser or open its trusted mobile app. From there, you can safely check your account or determine whether action is actually required.

Before You Proceed...

Phishing scams and other online threats often depend on people reacting before they have time to recognize the warning signs. Building the habit of stopping, checking the source, and verifying links before clicking can significantly reduce your risk of falling victim to a scam.

When something doesn’t look or feel right, remember: Pause Before You Proceed.