Spot a Phishing Message Before It Steals an Account

Urgency, unexpected links and requests for secrets are warning signs; pause, verify through another route and report suspicious activity.

Notice pressure and unusual requests

A message may claim an account will be blocked, a parcel is held or a refund is expiring to rush a decision. Look closely at the sender and destination link, but remember that a familiar-looking name can be spoofed. Requests for passwords, PINs, OTPs or remote access are strong reasons to stop.

Verify without using the message

Open the organisation's app or type its known official address yourself, then check whether the alert appears there. Contact support using a number from a card, statement or official website, not the number in the suspicious message. Do not download an attachment or install an app simply because a caller says it is necessary.

Contain and report a mistake quickly

If you clicked or shared information, change affected credentials using the official service, contact the relevant bank or provider and preserve the message, time and transaction details. CERT-In's public awareness materials provide general cyber-safety guidance; reporting channels depend on the incident. Keep devices and apps updated, and use unique passwords where available.