Spot the approach. Stop the scam.

Warning signs

• The display name looks familiar, but the real sender address does not match.
• The message creates urgency, fear, secrecy, or a deadline.
• A link's real destination differs from the visible text or expected official domain.
• It asks for a password, one-time code, attachment, payment, or personal details.

Stop it now

1. 1Do not reply, download an attachment, or use its link.
2. 2Open the organization's known app or type its official address yourself.
3. 3Check the sender and any copied link separately, then report the message as phishing.

If you already interacted

• Change an exposed password on the real site and anywhere it was reused.
• Turn on app-based multi-factor authentication and sign out other sessions.
• Contact your bank or payment provider immediately if money or card details were sent.

Warning signs

• Caller ID appears local or official, but the caller demands immediate action.
• They request gift cards, crypto, wire transfers, remote access, or a one-time code.
• They threaten arrest, account closure, disconnection, or harm if you hang up.
• They ask you to trust the displayed number as proof of identity.

Stop it now

1. 1Hang up without pressing keys or calling a number the caller supplied.
2. 2Find the organization's published number independently and call it yourself.
3. 3Block the call and report it to your carrier and the relevant authority.

If you already interacted

• Call your bank from the number on your card if you shared payment details.
• Remove remote-access software and have the device checked if access was granted.
• Freeze US credit at all three bureaus and use IdentityTheft.gov if identity data was exposed.

Warning signs

• The handle is slightly misspelled, newly created, or inconsistent across posts.
• Copied photos, biography, or videos are paired with a different account history.
• The account moves followers into direct messages and asks for money or investment.
• A badge image or name implies verification, but the platform profile does not confirm it.

Stop it now

1. 1Do not send money, codes, identity documents, or move to another messaging app.
2. 2Verify through the person's known website or established profile—not a link in the message.
3. 3Capture the profile URL, handle, messages, dates, and screenshots before reporting it.

If you already interacted

• Warn the real person or brand and report impersonation through the platform.
• If your own account was copied, notify followers from your established channels.
• Secure any compromised account, revoke sessions, change passwords, and enable multi-factor authentication.