🛑 The “Don’t Click” Checklist

Before you click any link or download any attachment in an email, ask yourself these 5 questions:

[ ] 1. Is there a false sense of extreme urgency?

Scammers want you to panic. Does the email say your account will be deleted “within 24 hours,” or that you owe a massive fine “immediately”? If your heart rate goes up, stop. It is likely a scam.

[ ] 2. Does the sender’s email address perfectly match the company?

Don’t just look at the display name (e.g., “Apple Support”). Click on the name to see the actual raw email address.

• Fake: apple-support@help-desk-1234.com
• Real: support@apple.com

[ ] 3. Did I initiate this conversation?

Did you request a password reset? Did you recently order a package? If you are receiving a receipt for an iPhone you didn’t buy, or a password reset link you didn’t ask for, do not click the link.

[ ] 4. Does the link look suspicious when hovered?

On a computer, hover your mouse over the button (do not click it). Look at the bottom left corner of your screen to see where the link actually goes. If it doesn’t go exactly to the company’s real website, it is a trap.

[ ] 5. Are they asking for sensitive information?

No legitimate bank, government agency, or tech company will ever email or text you asking you to reply with your password, social security number, or MFA code.

The Golden Rule: If you are ever unsure, do not click the link in the email. Open your web browser, type the website address in yourself (e.g., www.paypal.com), and log in normally to check your account.