← All guides
Safety guide

Who is really writing to you? Check an email or a message

How to tell whether you can trust a message

Almost every scam starts with a message — an email, an SMS, a WhatsApp message. The good news: you don’t need to be an expert to tell when something is off. It’s enough to look at a few simple things before you react. The most important of them is one single question: did I start this conversation?

Good signs — look for these

  • You started the conversation (you wrote first or actually requested something).
  • The sender's real address matches the institution, not just the displayed name.
  • You are not being asked for passwords, card details or codes.
  • The message doesn't rush you and doesn't scare you.

Warning signs

  • You did not start the conversation — the message appears out of nowhere.
  • The displayed name says "Bank X", but the real address is odd (for example @something-random.com).
  • You are asked for your password, your card details, a code received by SMS, or money.
  • Urgency and fear: "your account will be blocked", "pay now".
  • An unexpected attachment (especially a file ending in .zip or .exe, or a document that asks you to "enable editing").

How to check, in 4 steps

  1. Ask yourself: did I start this conversation? If the message comes out of nowhere, treat it with distrust.
  2. Check the sender's real address, not just the displayed name (tap or click the name to see the full address).
  3. Don't click links and don't open attachments from unexpected messages.
  4. On any doubt, check for yourself through the official channel: open the app yourself or call the institution at the number on its website — never through what the message sent you.
Already happened? I clicked on a fake link or text message. What do I do? See what to do →

Sources

Last reviewed: . Spotted something outdated? Tell us.