# How to check a suspicious message before you click

An urgent text, an unexpected invoice, a familiar logo. Here is a slower way to respond.

Canonical page: https://howtosurvivethepresent.com/guides/spot-a-scam-message/
Publisher: How to Survive the Present
Updated: 2026-11-02
Audience: US readers.

## The short version
Check the claim through an app, website, or phone number you already trust. Keep the message out of the verification process.

“Your account is locked.” “Your delivery needs a small payment.” When a message demands immediate action, you do not have to use the link it gives you.

## 1. Name what the message wants
Is it asking for a password, payment, verification code, download, or personal information? Identify the requested action before deciding whether the story sounds plausible.

## 2. Take a separate route
If the message claims to come from your bank or a service you use, open its usual app or type a known address yourself. You can also call a number from a trusted statement. Avoid using the message’s link or contact details to check itself.

## 3. Treat appearance as a clue, not proof
Brand logos and familiar-looking names can be copied. A message that looks professional still needs verification. Spelling mistakes are not a dependable screening test on their own.

## 4. Avoid sharing sensitive information while checking
Do not send payment information or login codes back to the unexpected sender. If there is a real issue, handle it through the independently verified account or support channel.

## 5. If you already responded, switch to recovery
If you gave away personal or financial information, visit IdentityTheft.gov for steps matched to the information involved. If you suspect a malicious download, update your security software and run a scan. You can report the attempt to ReportFraud.ftc.gov.

## One small thing to try
Save your bank’s official support number from a trusted statement now. An independently verified route is easier to use when you are not under time pressure.

## Your quick checklist
- [ ] I identified the requested action
- [ ] I checked through an independent channel
- [ ] I did not use the sender’s link to verify the sender
- [ ] I know where to find recovery guidance if needed

## Sources
- [FTC: Recognizing and avoiding phishing](https://consumer.ftc.gov/articles/how-recognize-avoid-phishing-scams)
- [IdentityTheft.gov: Recovery guidance](https://www.identitytheft.gov/)
- [FTC: Report fraud](https://reportfraud.ftc.gov/)

The sample messages above are illustrative. A suspicious-looking message is a reason to verify, not proof that a particular company is involved in fraud.

Editorial note: Researched and drafted with AI assistance; original exercises and examples are identified in the guide. The publisher does not claim credentialed expert review.