Phishing is a form of social engineering. A message may pretend to come from your bank, a delivery company, a government department, a workplace, a friend or another service you use.
Common warning signs include unexpected requests, urgency or threats, unusual payment instructions, requests for passwords or one-time passwords, suspicious links and unexpected attachments.
Look beyond the display name. Check the actual sender address or number and, when there is a link, consider where it really leads. A familiar logo or professional wording does not prove that a message is genuine.
Never provide your password, PIN or one-time password simply because a message asks for it. If a request might be legitimate, verify it through an official app, website or trusted contact method that you found independently.
Cyber Conduct's Suspicious Message Check can help you work through common warning signs without requiring you to paste passwords, PINs, one-time passwords or other secrets.
If you already interacted with the message, use Get Help for the action you took, such as clicking a link, entering a password or sharing banking information.