When a Message Pushes You to Act Fast: 3 Checks Before You Trust It

The message says “now” while you are already busy. Can we check somewhere else before it chooses the next step for us?

Maybe you are waiting for a ride home, paying for dinner, or checking a marketplace delivery when your phone lights up.

A message says there is a problem with your account. Another might say a payment failed, a parcel needs attention, or someone from work is contacting you from a new number.

The message also makes the next action easy: tap this link, call this number, send this detail, or make this payment.

That ready-made path is exactly what we need to step away from.

A useful safety rule is: move the decision outside the message.

The short version

• Let’s notice when urgency is trying to make the decision for us.
• Let’s reach the person or organisation through a route we choose ourselves.
• Let’s confirm that the claimed problem exists before we click, pay, send information, or reply.

1. Separate the urgent story from the action it wants

An urgent message often gives you two things at once: a worrying story and an immediate action.

The story might be, “Your account will be blocked.” The action might be, “Verify it here now.”

The story pulls your attention toward the possible danger. The action is the part that can change what happens next.

So one useful question is:

What is this message trying to make me do before I have time to check?

It may want you to open a link, share a password or verification code, send a document, make a payment, or call a number shown in the message.

Phishing means trying to deceive you by appearing trustworthy, with the aim of getting information from you or pushing you into an unsafe action. CISA, the U.S. Cybersecurity and Infrastructure Security Agency, lists urgent or emotional language and requests for personal or financial information among common phishing signs. (CISA)

That does not mean every urgent message is false.

A real bank alert can matter. A real delivery can have a problem. A real colleague can need a quick reply.

Urgency is not proof of a scam. It is a reason to change how you check.

The scale of impersonation scams shows why that pause matters. The U.S. Federal Trade Commission reported in June 2026 that people reported $3.5 billion in losses from imposter scams during 2025. Nearly one in three fraud reports received by the FTC that year involved imposter scams. These figures describe reports received by a U.S. agency, not all fraud in Indonesia or worldwide. (FTC)

An imposter scam is a scam in which someone pretends to be a person or organisation you may trust.

Picture this ordinary moment: you are about to complete a digital payment at a small shop when an SMS says your bank account will be restricted unless you confirm your details within ten minutes.

You do not have to work out whether the message is fake while people are waiting behind you.

You only need to notice that the message is trying to turn its deadline into your deadline.

That gives you enough room to stop following the path it prepared.

2. Reach the sender through a route the message did not choose

Now suppose a WhatsApp message says it comes from your bank or from someone at work.

If you use the link, phone number, or reply button inside that message to prove who sent it, the message is being allowed to prove itself.

That is a circular check.

A stronger check changes the route completely.

CISA advises people not to use a suspicious message’s link, attachment, or phone number to verify it. Its guidance recommends finding another way to contact the company or person directly, such as a company website or a number you already know. (CISA)

The FTC gives similar advice. If an unexpected email or text could be real, it recommends contacting the company through a phone number or website you know is genuine, or contacting the person through a separate conversation. (FTC)

The rule is simple:

Start verification somewhere the suspicious message did not choose for you.

If it claims to be from your bank, open the banking app you normally use or type the official website address yourself.

If a message from a new number says a supervisor needs an unusual transfer or document, move to the work chat, saved number, or other channel you already use with that person.

If a delivery message looks doubtful, check the order through the marketplace, courier page, or account route you normally use rather than through the link in the message.

You can picture the difference like this:

Message-controlled route: message → link → page chosen by the message

Your route: message → stop → familiar app, official site, or known contact

You do not need to become an expert at judging every profile picture, sender name, logo, or writing style.

You can remove the suspicious message from the job of proving itself.

3. Confirm that the claimed problem really exists

Imagine the message says, “Suspicious activity has been detected. Move your money immediately to keep it safe.”

You ignore its link and open the bank route you already trust.

Now there are two different questions:

Is this really my bank?

and

Is this problem actually happening?

The second question matters because reaching a real organisation does more than confirm a name. It gives you an independent place to check whether the event described in the message exists.

The FTC reported in 2026 that some of the costliest impersonation scams begin with fake security alerts, often pretending to come from banks. People may then be told to move money to “protect” it. (FTC)

The same check works in everyday situations in Indonesia:

The message claims	Leave the message and use	What you are checking
Your bank account has a security problem	The banking app or official site you normally use	Is there really an alert or account issue?
A digital payment failed	The payment or banking app opened separately	Is there actually a failed or pending payment?
A parcel needs action	The marketplace, courier, or order page you already use	Is there really a delivery problem?
A colleague needs an unusual payment or file	Your normal work channel	Did this person actually make the request?

Imagine you are already expecting a package and a text arrives saying the delivery needs one more step. The timing makes the message feel believable.

Instead of tapping it, you open the marketplace or delivery page you normally use and look for the same problem there.

The question has now changed from “Does this message look real?” to “Can I confirm this situation without depending on this message?”

Sometimes the problem will be genuine, and you can continue through the route you independently verified.

Sometimes there will be no matching problem, so the urgent message no longer gets to choose your next step.

For suspected phishing, CISA recommends reporting the message and deleting it rather than following its links or attachments. (CISA)

The aim is not to identify every scam perfectly.

The aim is to move an important decision away from the place where an unknown sender controls the story, the urgency, and the next button.

Put the decision on ground you already trust

These three checks handle three different risks, and the order helps them work together.

First, noticing the pressure keeps urgency from becoming evidence. Then, changing the route stops the message from proving its own identity. Finally, checking the claimed event tells you whether there is a real problem that needs action at all.

One check cannot replace the others.

A calm message can still be false. A familiar name can still lead to an unsafe route. A real company can exist even when the problem described in the message does not.

So we can keep one short sequence in mind:

Notice the pressure → leave the message → confirm the problem.

You do not need to decide whether every unexpected message is definitely fraudulent.

You only need to make sure an unverified message does not control the route to your decision.

Move closer to the person you want to become

• Let’s notice the action hidden inside the next urgent message: click, call, pay, send, or reply.
• Let’s step out of that message and reach the person or organisation through a route we already trust.
• Let’s confirm that the claimed problem exists before we give the message anything it asks for.

Coursera guide

If you want to understand more than warning signs, structured cybersecurity learning can help you see how phishing, account protection, sign-in checks, networks, and other parts of digital security fit together.

You do not need a course to use the three checks in this article. Structured learning may be useful when you want a deeper foundation and a guided path through the subject.

Continue reading

← Previous: [Same-country, same-language previous article]

Next: [Same-country, same-language next article] →