An Urgent Message Just Arrived: 3 Checks Before You Click, Pay, or Reply

Your phone buzzes on the ride home and the message says “act now.” Can we move the decision somewhere safer first?

You glance at your phone while riding home after work or school.

The message says there is a problem with an account, a parcel cannot be delivered, or someone from work needs something urgently.

It also gives you the next move: tap this link, call this number, send this detail, or pay now.

That ready-made path is the part worth slowing down.

A useful safety rule is not “never trust a message.”

It is: move the decision outside the message.

The short version

• Let’s notice what the urgency is trying to make us do.
• Let’s reach the sender through a route we already trust instead of the route inside the message.
• Let’s confirm that the claimed problem is real before we give the message money, information, or a reply.

1. Look at the action the message is rushing you toward

An urgent message often gives you a worrying story first.

It might say that your account is at risk, a payment has failed, or a delivery needs attention.

Then comes the action: open a link, send a code, call a number, share a document, or make a payment.

The story creates pressure. The action is what can change your situation.

So before deciding whether the message looks real, ask:

What is this message trying to make me do quickly?

Phishing is a kind of trick in which someone pretends to be trustworthy so that you reveal information or take an unsafe action. The U.S. Cybersecurity and Infrastructure Security Agency, or CISA, warns that urgent or emotional language and requests for personal or financial information can be signs of phishing. (CISA)

That does not mean every urgent message is false.

A real bank alert can matter. A genuine delivery can have a problem. A colleague can truly need a quick answer.

Urgency is therefore not proof. It is a reason to change how you check.

The scale of impersonation scams shows why a short pause can matter. The U.S. Federal Trade Commission reported in June 2026 that it received reports of $3.5 billion in losses from imposter scams during 2025. Nearly one in three fraud reports received by the FTC that year involved imposter scams. These are reported losses and reports received by a U.S. agency, not a measure of all fraud in the Philippines or worldwide. (FTC)

An imposter scam is a scam in which someone pretends to be a person or organisation you may trust.

Picture your phone buzzing while you are on a jeepney or bus ride home. The message says your bank account will be restricted unless you confirm something within ten minutes.

You do not need to prove that the warning is fake while you are still staring at the screen.

You only need to notice that the message is trying to turn its deadline into your deadline.

That is enough reason to stop following the path it prepared.

2. Check who is contacting you through a route you chose

Now imagine that you are having lunch at a carinderia when a message from a new number says it is from someone at work and asks for an unusual file or payment.

Replying “Is this really you?” inside the same conversation still keeps the check inside a route chosen by the message.

The same problem appears if a bank-looking message gives you a phone number and you call that number to ask whether the message is genuine.

The thing you are questioning is still choosing how you verify it.

A stronger check changes the route completely.

CISA advises that if a message looks suspicious, you should not use its link, attachment, or phone number to check it. Instead, its guidance says to find another way to contact the company or person directly, such as a company website or a number you already know. (CISA)

The FTC gives similar advice. For an unexpected email or text that might be real, it says to contact the company through a phone number or website you know is real, or contact the person through a separate conversation. (FTC)

That gives us a useful rule:

Begin verification somewhere the suspicious message did not choose for you.

If the message claims to be from your bank, close it and open the banking app or official website you normally use.

If a person using a new number says they are your colleague, move to the work channel or saved contact you already use with that person.

If a company seems to be contacting you, use an account page, official app, or contact route you found independently.

The two routes now look different:

Message-controlled route: message → link or number → place chosen by the message

Independent route: message → stop → familiar app, official site, or known contact

You do not need to become an expert at judging every logo, sender name, or writing style.

You can change the route before deciding what to believe.

3. Check whether the problem itself actually exists

Suppose you are at home expecting a parcel from an online order when a new message says there is a delivery problem and asks you to act immediately.

You leave that message and open the order or delivery account through a route you already know.

You are now checking something more useful than whether the message looks convincing:

Is there really a problem with this parcel?

The same idea applies to a bank alert or an unusual request from someone at work.

There are two separate questions:

Is this really the person or organisation named in the message?

and

Is the event described in the message actually happening?

The second question matters because a trusted contact route is useful for more than checking a name. It gives you an independent place to check the event itself.

The FTC reported in 2026 that some of the costliest impersonation scams begin with fake security alerts, often pretending to come from banks. People can then be told to move money to “protect” it. (FTC)

The same check works across ordinary situations:

The message claims	Leave the message and use	What you are checking
Your account has a security problem	The normal account app or official site	Is there really an alert or issue?
A parcel needs action	A delivery route you already know is real	Is there really a problem with your parcel?
A colleague needs an unusual payment or file	Your normal work channel	Did this person actually make the request?
A payment failed	The service or account opened separately	Is there really an unpaid balance or failed payment?

The better question is no longer:

“Does this message look convincing?”

It becomes:

“Can I confirm this situation without depending on this message?”

Sometimes the claimed problem will be real.

You can then continue through the route you independently verified.

Sometimes there will be no matching problem.

In that case, the urgent message no longer gets to choose your next step.

For suspected phishing, CISA recommends reporting the message and deleting it rather than following its links or attachments. (CISA)

The goal is not to recognise every scam perfectly.

The goal is to move an important decision away from the place where an unknown sender controls the story, the pressure, and the next button.

Step outside the message before you decide

These three checks solve different parts of the same problem.

The first check notices pressure. It stops urgency from becoming evidence.

The second checks identity. It moves you from a route chosen by the message to a route you already trust.

The third checks reality. It asks whether the account problem, payment, parcel issue, request, or emergency actually exists before you act on it.

The order matters because one check cannot replace the others.

A calm message can still be false. A familiar name can still send you toward a bad route. A real organisation can exist even when the problem described in the message does not.

So we can keep one short rule:

Notice the pressure → leave the message → confirm the problem.

You do not need to decide whether every strange message is definitely fraudulent.

You only need to keep an unverified message from choosing the path to your decision.

Move closer to the person you want to become

• Let’s name the action the next urgent message is asking for: click, call, pay, send, or reply.
• Let’s leave that message and reach the person or organisation through a route we already trust.
• Let’s check that the claimed problem really exists before we give the message anything it asks for.

Coursera guide

If you want to understand more than warning signs, structured cybersecurity learning can help you see how phishing, account protection, sign-in checks, networks, and other parts of digital security fit together.

You do not need a course to use the three checks in this article. Structured learning becomes useful when you want a deeper foundation and a guided path through the subject.

Continue reading

← Previous: [Same-country, same-language previous article]

Next: [Same-country, same-language next article] →