A message arrives while you are doing something else: a delivery problem, an account warning or a caller who says a relative needs help.

The first useful response is to create a little space between the message and your next action.

You do not have to solve an unexpected problem on an unexpected caller’s timetable.

This guide offers a practical routine for checking a claim and finding official help if something has already happened.

Notice the pressure before judging the story

The Federal Trade Commission identifies recurring warning signs: impersonation, a claimed problem or prize, pressure to act and demands for particular payment methods.

A familiar organization’s name does not establish who is contacting you.

An urgent demand for gift cards or cryptocurrency deserves a stop, not a faster payment.

Consider this invented example: a caller says your account is in danger and insists that you stay on the line while moving money.

Instead of debating the story, end the call and contact the institution through a number you already trust.

The important decision is leaving the caller’s instructions long enough to check independently.

Use a separate route to verify

A number on your bank card or an address you previously bookmarked is a better starting point than contact details supplied in the suspicious message.

Do not rely on a displayed caller name as proof of identity.

If the claim concerns a family member, contact that person through your usual number, or check with another trusted person who knows them.

The FTC’s phishing guidance recommends contacting a company through a website or number you know is genuine rather than a message’s link.

A polished logo, familiar colors or convincing writing can still accompany a deceptive message.

Keep passwords, verification codes and account-recovery codes out of an unsolicited conversation.

If you are unsure what a code is for, stop and ask the organization through your independently chosen channel.

If you already clicked, separate what happened

Clicking a link, entering a password and sending a payment are different events.

Write down which actions you took so you can explain the situation clearly.

Save the message, payment details and relevant screenshots without continuing the conversation.

For payment-specific steps, use the FTC’s What To Do if You Were Scammed guide.

Contact the payment provider promptly, report the fraud and ask whether the transaction can be reversed.

A refund is not guaranteed, and delay can reduce the options available.

If you shared a password, change it and any reused passwords through the genuine service.

If someone accessed your device remotely, use the FTC’s device guidance and seek trusted technical help.

Report the incident through the official channels linked in the FTC guide, including ReportFraud.ftc.gov.

Make a plan before the next message arrives

Choose one person you can call when a message leaves you unsettled.

You might agree on a simple sentence: “I have an unexpected request and want a second look before I act.”

Keep a small list of trusted account contact details where you can find it easily.

Practice opening an account through its normal app or saved website, without using a link in a message.

These habits are useful at any age; they are not a test of intelligence or confidence.

If someone tells you they have been targeted, listen first.

A supportive response can make it easier to preserve details, contact the right organization and take the next practical step.

Official resources checked October 19, 2026. The people shown in this article are illustrative stock-photo subjects, not identified victims or suspects.

Looking for work? Our guide to flexible work after 55 also explains how to check a job opportunity.