An Urgent Message Can Wait: 3 Checks Before You Click, Pay, or Reply

The message says “now.” Can we choose where to check before we choose what to do?

You might be on a matatu ride home in Nairobi when your phone lights up with an unexpected alert.

It says there is a problem with an account, a payment has failed, a parcel needs attention, or someone from work needs something quickly.

The message also gives you the next step: tap this link, call this number, send this detail, reply now.

That neat path can make the message feel more trustworthy than it has proved itself to be.

So we can use a different rule:

Move the decision outside the message.

A safer way to respond

• Let’s notice the pressure before we follow the instruction.
• Let’s verify the sender through a route we choose ourselves.
• Let’s confirm the problem independently before we click, pay, send information, or reply.

1. Separate the urgent story from the action it wants

An urgent message often gives you two things at once.

The story might be, “Your account will be restricted.”

The action might be, “Verify now.”

The story grabs your attention. The action is what can change your situation.

So ask:

What is this message trying to make me do quickly?

It may want you to open a link, send a password or verification code, share card details, pay someone, download a file, or call a number supplied in the message.

Phishing is a form of deception in which someone pretends to be trustworthy so that you reveal information or take an unsafe action. The U.S. Cybersecurity and Infrastructure Security Agency, or CISA, warns that urgent or emotional language and requests for personal or financial information can be signs of phishing. (CISA)

That does not mean every urgent message is false.

A real bank can send an important alert. A real employer can need a fast reply. A real delivery can have a problem.

Urgency is therefore not proof of fraud. It is a reason to slow the decision down enough to check it.

The scale of impersonation scams shows why this pause matters. The U.S. Federal Trade Commission reported in June 2026 that people reported losing $3.5 billion to imposter scams during 2025, and nearly one in three fraud reports received by the agency that year involved imposter scams. These figures describe reports made to a U.S. agency, not all fraud in Kenya or worldwide. (FTC)

An imposter scam is a scam in which someone pretends to be a person or organisation you may trust.

Imagine that you are standing outside a shop after work when a message says your account will be blocked unless you act within ten minutes.

You do not need to prove the message is fake before you pause.

You only need to notice that the sender is trying to turn its deadline into your deadline.

That is enough reason to stop using the route it prepared for you.

2. Check the sender through a route the message did not give you

Now suppose the message says it came from your bank or from someone you work with.

If you tap the link inside that message to check whether the message is real, the message still controls the test.

The same problem appears if you call the number inside it or reply, “Is this really you?”

A stronger check starts somewhere else.

CISA advises people who receive a suspicious message not to use its link, attachment, or phone number to verify it. Instead, its guidance recommends contacting the company or person through another route, such as an official website or a number you already know. (CISA)

The U.S. Federal Trade Commission gives similar advice for unexpected messages. It recommends contacting the company through a phone number or website you know is real, or contacting the person through a separate conversation. (FTC)

That gives us a practical rule:

Begin verification somewhere the suspicious message did not choose for you.

If a message claims to be from your bank, open the banking app you normally use or enter the official website yourself.

If a colleague suddenly writes from a new number asking for an unusual file or payment, reach that person through the work channel or number you already use.

If a company appears to be contacting you, use a saved account page, a familiar official app, or contact details you found independently.

Picture the difference:

Route chosen by the message: message → link → page chosen for you

Route chosen by you: message → pause → familiar app, official site, or known contact

You may be checking this while standing in a queue, sitting in an office, or waiting for a ride home.

You do not have to solve the whole mystery from the message screen. You only need to leave that screen before deciding whom to trust.

3. Confirm that the problem exists outside the message

There is one more check after you reach a trusted channel.

Do not stop at, “Yes, this bank, company, or person is real.”

Ask whether the event described in the message is real too.

Imagine that you are expecting a parcel in Nairobi or Mombasa and a text suddenly says the delivery has failed.

Instead of using the link in the text, you open the order page or delivery service through the route you normally use and look for the same problem there.

The same method works for a supposed security alert, failed payment, or unusual request from work.

The FTC reported in 2026 that some of the costliest impersonation scams begin with fake security alerts, often pretending to come from banks. People can then be told to move money to “protect” it. (FTC)

So a trusted route has two jobs.

It helps you check who is contacting you, and it gives you a separate place to check whether the claimed event actually happened.

The message claims	Leave the message and use	What you are checking
Your account has a security problem	The normal account app or official site	Is there really an alert or restriction?
A parcel needs urgent action	The order page or delivery route you already trust	Is there really a problem with that parcel?
A colleague needs an unusual payment or file	Your normal work channel	Did that person actually make the request?
A payment failed	The service or account opened separately	Is there really an unpaid balance or failed payment?

The useful question changes from:

“Does this message look genuine?”

to:

“Can I find the same problem somewhere this message does not control?”

If the problem is real, you can continue through the verified route.

If there is no matching problem, the message no longer gets to choose your next move.

For suspected phishing, CISA recommends reporting the message and deleting it rather than following its links or attachments. (CISA)

The aim is not to recognise every scam from its appearance.

It is to move an important decision away from a place where an unknown sender controls the story, the urgency, and the next button.

Put the three checks in the right order

Each check removes a different kind of uncertainty.

First, notice pressure so that urgency does not become proof. Next, check identity through a route you chose. Finally, check reality by finding out whether the claimed account issue, payment, delivery problem, or work request actually exists.

The order matters because one check cannot replace the others.

A calm message can still be false. A familiar name can still lead to a false page. A real organisation can exist even when the problem described in the message does not.

So the whole method can fit into one line:

Notice the pressure → choose your own route → confirm the event.

You do not need to label every unexpected message as a scam.

You only need to stop an unverified message from controlling how you verify it.

Move closer to the person you want to become

• Let’s name the exact action an urgent message wants from us before we touch its link, button, or number.
• Let’s move to an app, website, phone number, or work channel we already trust.
• Let’s look for the same problem there before we send money, information, files, or a reply.

Coursera guide

If you want to understand the ideas behind these checks, structured cybersecurity learning can help you explore phishing, account protection, sign-in security, networks, and other parts of digital safety in a clear order.

You do not need a course to use the method in this article. Structured learning becomes useful when you want a deeper foundation and a guided path through the subject.

Continue reading

← Previous: [Same-country, same-language previous article]

Next: [Same-country, same-language next article] →