We worked through examples of urgent account warnings and unexpected requests. The exercise was to identify the demand, pause, and decide how to verify it without continuing the suspicious conversation.

Check with the organization through a known website or phone number. Do not rely on links or contact details in the message itself. If information has already been shared, use the organization's official support route to secure the account.

In practice

  • Do not let a countdown replace verification.
  • Treat requests for passwords or sign-in codes with caution.