Suspicious messages typically first ask you to take an action
Suspicious messages may resemble customer service notifications, friend requests for help, investment invitations, account warnings, prize notifications, or security verifications. When assessing, do not simply look at whether the tone is natural; instead, check if it asks you to click links, input data, transfer payments, provide verification codes, or download files.
First confirm the source, but do not only trust the profile picture and name
Fake customer service often includes terms like support, security, verify, or help center in the name; friends' accounts may also have been compromised. If an account was just created, lacks normal interaction history, or if an acquaintance suddenly asks for votes, transfers, verification codes, or investments, confirm via other channels.
A sense of urgency is the most common pressure tool
Messages stating that your account is about to be suspended, requiring verification within 24 hours, claiming violations of platform rules, or indicating only a few spots left, are usually intended to prompt quick action. The more they urge you to act immediately, the more you should return to the official app or website for verification.
Never give verification codes, backup codes, or payment details to the message sender
Passwords, SMS verification codes, two-factor authentication codes, backup codes, identity documents, bank information, cryptocurrency wallet data, and payment screenshots are all highly sensitive information. Genuine platform customer service typically will not request these through direct messages.
Handle links, investments, and file downloads separately
Links that look official do not guarantee the main domain is correct. Investments, part-time jobs, quick profits, and guaranteed returns generally require checking whether the payment leaves a trusted platform. Unknown files, remote assistance tools, compressed files, or instructions that ask you to disable protection should be stopped immediately.
If you have already clicked or entered data
If you only clicked but did not input data, you can close the page and check your account status. If you have entered your password or verification code, you should immediately change your password, log out from other devices, enable or reset two-factor authentication, and check if your recovery email, phone number, and login history have been altered.
When facing messages, the most useful action is not guessing if the sender is real or not, but rather returning to secure channels: do not click unknown links, do not share verification codes, do not download files, and always confirm important matters through official access.