A simple verify-before-you-act habit
Almost every online scam relies on the same thing: that you'll act before you check.
The good news is that the opposite protects you from most of them. A small pause and one quick check, with nothing technical to learn.
Scammers create pressure on purpose. A short window, a deadline, a threat of losing access, a person you care about who's "in trouble". The pressure is the giveaway. Anything that urgent, from any direction, deserves a second look.
The habit, in three small steps
Pause.
Read the message twice. Notice if it's pushing you to act now. Urgency is the loudest red flag we have.
Use a different route.
Don't reply, don't click the link, don't call the number in the message. Open a new tab, go to the organisation's real website, or call a number you already trust.
Confirm with a person or a known channel.
"Did you really send me this?" works on a colleague, a friend, a family member, your bank, your supplier. If it's genuine, they'll be glad you asked.
That's it. Three steps, and most of the time it takes less than a minute.
It works because scams are designed to skip exactly that minute. Putting it back in is the single most powerful thing you can do online.
Where to verify
- Bank or card issuer, number on the back of your card, or dial 159 in the UK.
- A colleague or boss, your normal work chat, or in person.
- A family member, call the number you already have saved, not one in the message.
- A supplier or service, their official website, not a link in the email.
When in doubt, a 30-second phone call usually settles it.
Your one habit from this lesson
Before you act on any urgent message, money, codes, logins, links, pause, switch to a channel you already trust, and confirm with a real person.
Track your progress and earn XP
Sign in to mark this lesson complete and add +25 XP to your safety score.
Sign in or create a free account