Showing 1–9 of 9 articles
How a support desk should handle a caller who sounds legitimate
Knowing an employee’s name, manager, or urgent problem does not prove identity. Use an approved verification process before resetting access or changing recovery details.
Read the visual guide
What to do when a familiar voice asks you for money
A familiar-sounding voice is not enough to confirm identity. When a call asks for money or secrecy, verify the situation through another known contact route.
Read the visual guide
How to give after a disaster without paying a copycat
An urgent appeal can impersonate a real charity. Find the organization independently and confirm the donation route before entering payment details.
Read the visual guide
How to check a job offer before you pay or send documents
A convincing recruitment message can be a way to collect payments or identity documents. Confirm the vacancy and recruiter through the employer’s independently found contact details.
Read the visual guide
When someone you met online asks you for money
A relationship built through messages can still involve a false identity. Requests for urgent transfers, investments, or secrecy deserve an independent pause and check.
Read the visual guide
What to do when a message says a relative is in trouble
A frightening message can make verification feel like a delay. Contact the relative through a number or channel you already know before sending money or sharing an authentication code.
Read the visual guide
Business email compromise: verify bank changes before paying
A convincing invoice can arrive from a real but compromised mailbox. Protect the payment decision with independent verification of changes to the beneficiary or account details.
Read the visual guide
Phishing beyond the email filter: verify the request, not the badge
An email that passes technical checks can still ask you to do something harmful. A trusted sender’s account may be compromised, and a plausible message may lead to an unsafe action.
Read the visual guide
MFA push fatigue: what to do with unexpected approval requests
Repeated sign-in prompts can pressure someone into approving access they did not start. Treat an unexpected approval request as a signal to stop, verify, and investigate.
Read the visual guide