How to verify a suspicious message without replying
The safest first move is to stop the conversation from controlling your next step. You can inspect the request and verify the sender without replying, clicking or calling a number inside the message.
Separate the claim from the channel
Write down what the sender wants you to do, when they want it done and who they claim to be. Urgency, secrecy and a new payment route matter more together than any one phrase on its own.
Inspect what is actually present
Look at the full sender address, Reply-To address, link destination and payment recipient. For email, original headers can show the route and authentication results that the visible sender name hides.
- Do not open attachments to investigate them.
- Expand shortened links before visiting them.
- Keep unavailable evidence marked as unavailable.
Verify through an independent route
Open the organization’s official app or type its known website yourself. Call a saved number or a number from a trusted statement. Ask whether the request is real without using any new details supplied in the message.