Scams can arrive through SMS, WhatsApp, email, social media, phone calls, websites and online marketplaces. The delivery method changes, but the goal is often the same: get you to trust a story quickly enough that you reveal information, open something, approve something or send money.
Pay attention when a message creates urgency, fear, excitement or secrecy. Requests for passwords, PINs, one-time passwords, card details, identity information or unexpected payments deserve extra scrutiny.
Do not treat logos, professional-looking websites, familiar names or caller ID as proof that a request is legitimate. Scammers can imitate organisations, businesses and people you know.
Verify the request independently. Instead of using the link, phone number or email address supplied by the suspicious message, open the organisation's official app or website yourself, or contact the person through a separate trusted method.
You can also use Cyber Conduct's Scam Check and Suspicious Message Check to work through common warning signs before taking action.
If you already clicked a link, entered information, downloaded a file or sent money, stop treating the situation as a general warning and use Get Help for the specific thing that happened.