Phishing Email and SMS Safety: Spot Fake Links Before You Click

Phishing messages imitate banks, delivery companies, employers and government services. Their purpose is to make you click a link, open an attachment or reveal a password. A calm verification process can prevent many attacks.

Look for urgency and fear

Messages claiming that an account will close today, a parcel is held or a refund will expire are designed to stop careful thinking. Pause and verify through the official app or website instead of using the message link.

Inspect the sender and destination

Check the complete email address and the spelling of the domain. On a computer, hover over a link; on a phone, press and hold only when you understand the preview. Misspellings, shortened URLs and unrelated domains need caution.

Do not share authentication codes

Banks and legitimate services do not need your OTP, UPI PIN or password through a chat or phone call. If someone asks you to read a code aloud, end the conversation and contact the organisation independently.

Handle attachments carefully

Unexpected documents or APK files may install malware. Do not enable macros or install apps from message links. Keep security updates active and scan files when appropriate.

If you clicked a suspicious link

Close the page, do not enter information and update the affected password using the official site. Check account activity, enable multi-factor authentication and report the message to the relevant provider.

Final takeaway

Do not let a message choose your next action. Verify alerts independently, protect authentication details and treat unexpected links and attachments as untrusted until proven safe.