Symptoms
- Urgent email or text saying your account will be suspended
- Countdown timer or deadline pressuring quick action
- Link asking you to 'verify' or 're-enter' your password
- Message has slightly off branding, spelling, or sender address
Likely causes
- CommonPhishing attemptScammers impersonate real companies to create urgency and steal login credentials.
- PossibleLegitimate but poorly worded notificationOccasionally a real security notice is worded urgently, though real companies rarely threaten immediate deletion.
- PossibleSpoofed sender addressThe visible sender name can be faked even when the actual email address is unrelated to the company.
What to do
- Don't click any link in the message; instead open a browser and go directly to the company's official website.
- Log into your account normally there to check if there's actually any notice or issue.
- Check the sender's actual email address, not just the display name, for mismatches with the real company domain.
- Hover over (don't click) any link to see where it actually points before trusting it.
- If the account shows no real issue, delete or report the message as phishing.
- Report the message to the company's official fraud or abuse reporting address if available.
- If you already clicked a link and entered information, change that password immediately.
When to call a pro
If you're unsure whether a notice is real, most companies have a dedicated phishing-report email address you can forward the message to for confirmation.
Safety
Generally low risk
Generally low risk for a careful person. Stop if anything looks different from what this guide describes.