Learn how scam messages try to rush you into acting, the warning signs to watch for, and what to do with one before you click, reply, or download anything.
Pause before you click, check the request through a phone number or app you already trust, and tell whoever handles tech where you are.
Last reviewed 2026-06-17 by the IT Lunchroom Editorial Team. General guidance, not professional security or legal advice.
I can recognize suspicious message patterns and choose a safe report route before clicking, replying, or downloading.
You'll be able to spot the rush tactics behind scam messages and lean on one calm habit: pause, check the request using a number or app you already trust, and pass it on to whoever handles tech where you are, without clicking, replying, or downloading.
A phishing message — a scam message dressed up to look real — is built to make you follow a link, open an attachment, hand over a password, or send money. It's part of a bigger trick people call social engineering, which just means fooling a person instead of breaking into a computer. The message pretends to come from someone you trust, so you react before you stop to think.
These messages work by piling on pressure so you skip the checks you'd normally do. The sender pretends to be your boss, a company you buy from, your bank, or your tech support, then adds a deadline, a scare, or a reward to rush you. They want a fast reaction: one click, one reply, one download. Slowing down takes away the pressure the whole trick relies on.
Watch for a sudden rush, a threat, or an offer that seems too good to be true. Other signs: someone asking for passwords, codes, payments, or gift cards; a sender address or web link that's slightly misspelled; a vague greeting like 'Dear customer'; or a reply going somewhere other than the person you'd normally talk to. Any one of these is reason enough to slow down and check.
Three steps, every time. Pause before you click, reply, or download anything. Check the request using something you already trust — a phone number you've saved or a person you already know — never the contact details in the message itself. Then pass the message on to whoever handles tech where you are, and don't forward it to other people.
An email says your account will be locked in one hour and gives a link to confirm your password. Pause: that one-hour deadline is the pressure. Check: instead of clicking, you open the site yourself from a saved bookmark, and everything's fine. Pass it on: you send the message to whoever handles tech where you are, then delete it. No link clicked, no password given.
Checking on your own, through something you already trust, is what beats the trick — because a convincing message can fake every detail except the answer you get by reaching out yourself. If a message claims to be from your bank or your manager, contact them using a number or email you already had, not one the message gave you. A real request will hold up to a quick check.
Practice lets you sort safe messages from scam ones using made-up examples, so you can rehearse the pause, check, and pass-it-on habit without touching a real inbox or a live link.
Write yourself a short note describing the warning signs you watch for and who you'd tell about a scam message, without copying in the message, the links, or any personal details from it.
Pause before clicking, replying, or downloading. Pausing removes the urgency the message relies on and gives you time to verify before taking any action.
Check it using a number or app you already trust, not the one in the message. A fake message can give you fake contact details, so a check only counts when you use a number or app you already had.
Unexpected urgency paired with a request for passwords, codes, or payment. A rush combined with a request for passwords, codes, or money is a classic scam, and a good reason to slow down.
Pause, check with your manager using a number you already trust, and pass the message on to whoever handles tech where you are. A rush plus a gift-card or payment request is a classic scam trick, and checking on your own is what stops it.
Don't use the link in the message; open the site yourself from a saved bookmark to check, and pass the email on to whoever handles tech where you are. A countdown and a password request are there to rush you; opening the site yourself and passing the message on keeps your password safe.
Do the hands-on version of this lesson, then create a free account to save your progress. Finish a whole track and you earn a shareable certificate you can add to a résumé or job application. No payment, no catch.
We use cookies for basic analytics to improve these free lessons. See our Privacy Policy.