An Urgent Message Wants an Answer Now: 3 Checks Before You Click, Pay, or Reply

The phone says we have only minutes. Can we check the situation before we follow its next step?

Imagine you are leaving work or sitting down after dinner when your phone buzzes.

A message says your bank account needs attention. Another might say a UPI payment failed, a parcel cannot be delivered, or a manager is contacting you from a new number.

The message also gives you the next move: tap this link, call this number, send this detail, or make this payment.

That ready-made path is the problem.

A useful safety rule is not simply “be more careful.” It is: move the decision outside the message.

The short version

• Let’s notice when urgency is pushing us to act before we have checked the facts.
• Let’s reach the person or organisation through a route we choose ourselves.
• Let’s confirm that the problem really exists before we click, pay, send information, or reply.

1. Separate the urgent story from the action it wants from you

An urgent message often gives you a worrying story and an immediate action.

The story might be, “Your account will be blocked.” The action might be, “Verify it here now.”

It is easy to spend all your attention on the story. The safer question is about the action:

What is this message trying to make me do before I have time to check?

It may want you to open a link, share a password or verification code, send a document, make a payment, or call a number shown in the message.

Phishing is a trick in which someone pretends to be trustworthy so that you reveal information or take an unsafe action. The U.S. Cybersecurity and Infrastructure Security Agency, or CISA, warns that urgent or emotional language and requests for personal or financial information can be signs of phishing. (CISA)

This does not mean that every urgent message is false.

A real bank alert can be urgent. A real delivery can have a problem. A real colleague can need a quick reply.

Urgency is therefore not proof of a scam. It is a reason to slow down the route to your decision.

The scale of impersonation scams shows why that pause matters. The U.S. Federal Trade Commission reported in June 2026 that people reported $3.5 billion in losses from imposter scams during 2025. Nearly one in three fraud reports received by the FTC that year involved imposter scams. These figures describe reports received by a U.S. agency, not all fraud in India or worldwide. (FTC)

An imposter scam is a scam in which someone pretends to be a person or organisation you may trust.

Picture an SMS arriving while you are about to make a UPI payment at a shop. It claims that your bank account will be restricted unless you confirm your details within ten minutes.

You do not need to prove that the message is fake while standing at the counter.

You only need to notice that the message is trying to turn its deadline into your deadline.

That gives you enough space to stop following the path it prepared.

2. Check the sender through a route the message did not give you

Suppose a WhatsApp message says it is from your bank or from someone at work.

If you use the link, phone number, or reply button inside that same message to prove who sent it, the message is being allowed to prove itself.

That is a circular check.

A stronger check changes the route completely.

CISA advises people not to use a suspicious message’s link, attachment, or phone number to verify it. Its guidance recommends finding another way to contact the company or person directly, such as a company website or a number you already know. (CISA)

The FTC gives similar advice. If an unexpected email or text could be real, it recommends contacting the company through a phone number or website you know is genuine, or contacting the person through a separate conversation. (FTC)

The useful rule is simple:

Start verification somewhere the suspicious message did not choose for you.

If it claims to be from your bank, open the banking app you normally use or type the official website address yourself.

If a person claiming to be your manager asks for an unusual payment over WhatsApp, move to the work channel or phone number you already use with that person.

If a delivery message looks doubtful, reach the courier through the app, order page, or website you normally use instead of following the message’s link.

The difference looks small on the screen but large in practice:

Message-controlled route: message → link → page chosen by the message

Your route: message → stop → familiar app, official site, or known contact

You do not have to become an expert at spotting every fake logo, sender name, or writing style.

You can remove the suspicious message from the verification process.

3. Check whether the claimed problem exists before you act on it

Now imagine the message says, “Suspicious activity has been detected. Move your money immediately to keep it safe.”

You ignore its link and open your usual banking route instead.

At that point, there are two separate questions:

Is this really my bank?

and

Is this problem actually happening?

The second question is necessary because reaching a real organisation does more than confirm a name. It gives you an independent place to check whether the event described in the message exists.

The FTC reported in 2026 that some of the costliest impersonation scams begin with fake security alerts, often pretending to come from banks. People may then be told to move money to “protect” it. (FTC)

The same check works in ordinary situations in India:

The message claims	Leave the message and use	What you are checking
Your bank account has a security problem	The banking app or official site you normally use	Is there really an alert or account issue?
A UPI payment failed	The payment or banking app opened separately	Is there actually a failed or pending payment?
A parcel needs action	The courier or shopping route you already know	Is there really a delivery problem?
A colleague needs an unusual payment or file	Your normal work channel	Did this person actually make the request?

Imagine you have just received a parcel-related text after ordering something online. The timing makes the message feel believable, but you still open the shopping app or courier page separately and check the order there.

The question changes from “Does this message look real?” to “Can I confirm this situation without depending on this message?”

Sometimes the answer will be yes. The alert was genuine, and you can continue through the verified route.

Sometimes there will be no matching problem. Then the message no longer gets to choose what you do next.

For suspected phishing, CISA recommends reporting the message and deleting it rather than following its links or attachments. (CISA)

The aim is not to identify every scam perfectly.

The aim is to move an important decision away from the place where an unknown sender controls the story, the urgency, and the next button.

Move the decision before the message moves you

The three checks deal with three different risks, and they work best in order.

First, noticing the pressure stops urgency from becoming evidence. Next, changing the route prevents the message from proving its own identity. Finally, checking the claimed event tells you whether there is a real problem that needs action at all.

None of these checks can replace the others.

A calm message can still be false. A familiar name can still lead to a bad route. A real bank or company can exist even when the problem described in the message does not.

So we can keep one short rule in mind:

Notice the pressure → leave the message → confirm the problem.

You do not need to decide whether every strange message is definitely fraudulent.

You only need to make sure an unverified message does not choose the path to your decision.

Move closer to the person you want to become

• Let’s pause at the action inside the next urgent message: click, call, pay, send, or reply.
• Let’s leave that message and reach the person or organisation through a route we already trust.
• Let’s confirm that the claimed problem exists before we give the message anything it asks for.

Coursera guide

If you want to understand more than warning signs, structured cybersecurity learning can help you see how phishing, account protection, sign-in checks, networks, and other parts of digital security fit together.

You do not need a course to use the three checks in this article. Structured learning may become useful when you want a deeper foundation and a guided path through the subject.

Continue reading

← Previous: [Same-country, same-language previous article]

Next: [Same-country, same-language next article] →