An unexpected message can arrive during an ordinary working day: a supplier has changed bank details, a parcel needs a small fee, or a colleague needs an urgent transfer. Treat the request as a decision to verify, rather than a task to complete quickly. The same habit helps at home, in a small business and in a public office.
Check the request through another channel
Phishing uses messages to persuade people to open harmful links, download files or disclose information. A polished message can still be deceptive. When the request concerns money, credentials or sensitive documents, contact the organisation using a number or website you already trust. Avoid using the contact details supplied inside the suspicious message.
A simple verification routine
Pause when a message creates urgency or asks you to keep the request secret.
Read the full sender address and destination link, while remembering that a familiar account can also be compromised.
Open your usual app or type the known website address yourself instead of following an unexpected sign-in link.
Confirm new payment details with an established contact. In a team, require another authorised person to approve a change.
Keep PINs, passwords, one-time codes and recovery codes private. A request for any of these deserves extra scrutiny.
Practise with a realistic example
Imagine that a familiar supplier emails new account details just before an invoice is due. Your team checks its existing supplier record, calls the stored telephone number and asks the known contact to confirm the change. The payment stays on hold until the check is complete. Agreeing this routine in advance makes it easier for staff to question an urgent request without feeling that they are delaying work.
If you have already responded
Tell your security or support contact promptly. If you disclosed a password, change it through the legitimate service and review account access from a trusted device. If money moved, contact the payment provider through its official channel immediately. Keep the message, timestamps and transaction references for the people helping you. Report the incident through the official reporting channel.
Further reading
Here to help
Something doesn’t look right?
Prepare an incident report with the details that matter.