Look for pressure, not only spelling mistakes
Modern scam messages can have perfect spelling, familiar branding and personal details. The stronger warning sign is a request that pushes you to act before verifying: pay immediately, keep the request secret, move the conversation off-platform, scan a QR code or sign in to prevent an account closure.
Pause when a message changes normal procedure. An apparently genuine supplier asking for payment to a new bank account should be verified using a known phone number—not the number inside the suspicious message.
Check the destination before signing in
A link’s visible text can differ from its destination. On a computer, hover over it; on a phone, press and hold without opening. Look for misspelled domains, extra words before the real domain, unusual shortened links and login pages opened from unexpected attachments.
The padlock icon only means the connection is encrypted; it does not prove the website belongs to the company you expect. Open important services from your saved bookmark or type the known address yourself.
Do not trust a payment screenshot
A screenshot, SMS or emailed proof of payment can be edited or recalled. Confirm funds inside your own banking app or merchant dashboard. Do not release a phone, provide a courier parcel or refund an alleged overpayment until the transaction is independently verified and settled according to your bank’s guidance.
Marketplace scams often use a fake courier collection notice, a request for an insurance fee or a link that asks the seller to enter card details to receive money. Legitimate buyers do not need your card PIN or one-time password to pay you.
If you clicked or shared information
Act quickly from a clean device. Change the affected password and any reused passwords, revoke unknown sessions, enable multi-factor authentication and contact the bank through its official fraud channel if payment information was exposed.
If software was installed, disconnect the device from networks and obtain technical help before using it for sensitive work. Preserve the message, sender details, URL, payment information and timeline. Report the account or advert to the platform and consider a police or fraud report where money or identity documents are involved.