Think before you click.

That email from your bank, vendor, or company executive might not be what it appears to be.

Phishing scams use deceptive emails, text messages, phone calls, and websites to trick people into sharing sensitive information, clicking malicious links, or opening harmful attachments.

These scams can lead to stolen credentials, financial losses, and disruptions to business operations.

Watch for These Warning Signs

• Unexpected requests: A message asks you to provide credentials, disclose sensitive information, or make a payment.

• Urgency or pressure: You're told to act immediately to avoid a penalty, resolve an issue, or meet a deadline.

• Suspicious links: A link contains an unfamiliar or slightly altered website address.

• Unusual attachments: You're asked to open a file you weren't expecting.

• Unverified senders: The message appears to come from someone you know, but the address, request, or communication seems unusual.

Remember, professional-looking messages can still be fraudulent. Spelling mistakes aren't the only warning sign.

What Should You Do?

1. Pause. Don't click links, open attachments, or respond to suspicious messages.

2. Verify. Contact the supposed sender using a known, trusted phone number or another established communication channel.

3. Report. Follow your company's process for reporting suspicious emails, texts, or calls.

4. Delete. Once the message has been appropriately reported and reviewed, remove it as directed by your company's procedures.

Concierge Insight

When something feels unusual, take a moment to verify it. A few seconds of caution can help prevent a much bigger problem.