Deception online.
WHAT TO BE ALERT TO
Messages about accounts, asking you to sign in Unexpected attachments Urgent requests Anything asking for a code Offers that are unusually good
WHAT NO LONGER IDENTIFIES A FAKE
Spelling and grammar. Those are gone.
WHAT DOES
The request itself.
Legitimate organisations do not ask for passwords or verification codes.
THE CODE POINT
A verification code is for you alone.
Anyone asking for it is trying to take your account.
WHAT TO DO WITH ANY MESSAGE ABOUT AN ACCOUNT
Do not use its links.
Go to the site the way you normally do.
That single habit defeats most of these.
WHAT TO CHECK ON A WEBSITE
The address itself, carefully.
Fraudulent sites use addresses that look almost right.
WHAT THE PADLOCK MEANS
The connection is encrypted. Not that the site is honest.
WHAT TO DO IF UNSURE
Ask someone. Being wrong costs nothing.
WHAT TO DO IF YOU ENTERED DETAILS SOMEWHERE
Change that password immediately, from a different device.
