How to Spot a Phishing Message in 6 Quick Checks
Phishing tricks you into handing over passwords, OTPs, or money. Learn the six warning signs and what to do if you already clicked.
Phishing is when a criminal pretends to be someone you trust, such as a bank, a delivery company, or your boss, to get you to give up information or money. The message can arrive by email, SMS, WhatsApp, a phone call, or even a social media message.
Why it works
Phishing does not break into your computer. It tricks you. Messages are designed to create panic or excitement so you act before you think. "Your account will be blocked in 2 hours." "You have won a prize." "Pay this small fee to release your parcel."
6 checks before you tap or reply
Check the sender
Look at the actual email address or phone number, not just the display name. A message from "Your Bank" sent from a random address is a warning sign.
Notice the urgency
Real organisations rarely demand that you act within minutes. Pressure is the scammer's favourite tool.
Hover before you click
On a computer, point at a link without clicking to see where it really goes. On a phone, press and hold a link to preview it.
Look for odd details
Spelling mistakes, strange greetings like "Dear customer", logos that look blurry, or unusual requests.
Never share OTP, PIN, CVV, or passwords
No genuine bank or company will ask for these by call, message, or email.
Verify another way
Do not use the number or link in the message. Open the official app, or type the website address yourself, or call the number on your card.
Common scams to know
- Fake delivery or customs fees. A message asks you to pay a small fee for a parcel you did not order.
- KYC update scams. A message says your bank account will be blocked unless you update your details through a link.
- Fake job offers that ask for a registration fee.
- "Digital arrest" calls. Fraudsters pretend to be police or officials and claim you are in legal trouble, then demand money. Real agencies do not arrest people over video calls or ask for payment this way.
- Boss or family impersonation asking for urgent money or gift cards.
If you already clicked or shared something
Disconnect if you installed something
Turn off Wi-Fi and mobile data on the device.
Change passwords
Start with your email and banking, from a safe device.
Call your bank immediately
Ask them to block cards or accounts if you shared financial details.
Report it
In India, call the National Cyber Crime Helpline 1930 or report at cybercrime.gov.in. Quick reporting can help freeze fraudulent transfers.
Warn others
Tell friends and family so they do not fall for the same message.
What most people miss
- Anyone can fall for it. Scammers target tired, busy, and kind people, not only careless ones. There is no shame in reporting it.
- Caller ID can be faked, so a call that looks like it comes from your bank can still be fraud.
