Inspect before entering details
Read the full domain and be cautious with urgent messages, shortened links and unexpected document requests. Search advertisements can also lead to unrelated destinations. Verify through an independent route rather than asking the sender whether their own link is genuine.
Act carefully after a mistaken submission
If you entered credentials on a suspicious page, stop using that page and secure the affected account through a verified route. Review other accounts where the password was reused, inspect sessions and preserve relevant evidence. Do not send additional documents to a contact claiming they can undo the mistake.
Use evidence rather than appearances
A logo, testimonial, familiar name or polished interface is not independent evidence of identity or safety. Check who operates the destination and how support, privacy and complaints are handled.
Know what should stay private
Passwords, OTPs, payment PINs and recovery codes belong to you. Check available two-factor authentication options. If someone requests a private code through a message, stop and verify the request using a separate contact route you already trust.
Take control early
If you see activity you do not recognise, secure the relevant accounts, review active sessions and contact verified support. Keep a record of what happened while avoiding further interaction with a suspicious link.
Keep the next step clear.
Check current provider information, protect your personal details and use the route that matches your question.