Direct answer
Do not rely on the sender name or urgency of an unexpected text or notification. Open the service using a trusted app or known address, verify the request independently and follow the appropriate incident process if you supplied information.
Pause the requested action
A message may claim that a parcel, bank account or workplace login needs immediate attention. Do not use its embedded link or phone number as proof. Open the provider's app yourself or contact a previously known support channel.
Reference: CISA: Recognize and report phishing.
Document interaction
If you already interacted, distinguish a notification preview, page visit, password entry, payment submission and application installation. Tell the security team or affected provider what actually happened; do not repeat the interaction to take a screenshot.
- Preserve the message through an approved reporting method.
- Do not send passwords or one-time codes to the reporter.
- Record the time and affected account or device.
Secure affected accounts
If credentials were supplied, change the affected and reused passwords through a trusted route and enable multifactor authentication where available. Contact the card issuer if payment information was disclosed. Follow workplace device procedures if software was installed.
Reference: FTC: Responding to a data breach notice.
Use link analysis carefully
A URL checker can highlight structural clues but cannot guarantee the safety of a destination. Optional external checks may share domain information as disclosed by the tool. An unflagged address does not replace independent verification.
Assessment limits
Mobile platform behavior and response depend on the device and interaction. A message's appearance or a URL pattern alone cannot establish compromise or safety.
Frequently asked questions
Does a familiar sender name make a text genuine?
No. Sender information can be imitated or an account can be compromised. Verify through a known channel.
What if I only previewed the notification?
Record exactly what happened and follow device or workplace guidance; avoid assuming every interaction has the same impact.
Primary sources and further reading
These guides combine published security guidance with practical assessment planning. Adapt checks to the owner's policy, environment, and authorized scope.
This guide was prepared with AI assistance using the linked sources and illustrative examples. Check current vendor guidance and your environment before making changes.