Phishing messages often create urgency, claim an account will be closed, or ask for credentials and one-time codes. Pause and verify through an official app or a manually typed website address.
- Check the full sender address.
- Do not share passwords or one-time codes.
- Be cautious with unexpected attachments.
- Report suspicious messages to the impersonated organization.