Cyber Tips

Five calm checks before you trust a security alert

A security alert can be genuine, misleading, or a phishing lure. These five checks keep the decision small and safe.

1. Pause before clicking. Urgency is useful to attackers and rarely changes the safest first step.
2. Open the real app or site yourself. Use a bookmark, saved app, or address you already know.
3. Check account activity. Compare the device, location, and time with your own use.
4. Protect the account if anything is wrong. Change the password, sign out unknown sessions, and enable multifactor authentication.
5. Report the message. Use the provider’s phishing controls and delete it after reporting.

For the full recovery path, read Unexpected sign-in alert? Check this before you click.

Primary source

FTC: How to recognize and avoid phishing scams

Reviewed September 27, 2026.