Phishing
A scam where fake messages impersonate trusted brands to trick you into entering passwords, OTPs, or card details on a fake login page.
What Is This Scam?
A scam where fake messages impersonate trusted brands to trick you into entering passwords, OTPs, or card details on a fake login page.
How This Scam Usually Works
- •You get a text, email, or call claiming your account is 'suspended' or 'compromised'.
- •It includes a link to a fake page that looks like the real brand.
- •You enter your password, OTP, or card details.
- •Scammers capture your credentials and use them to access your account.
- •They may follow up with a 'verification' call to get more.
Common Warning Signs
- •Urgent account alert
- •Link to 'verify' account
- •Misspelled domain
- •Asks for OTP or password
What Scammers Commonly Say
- “'Your account will be suspended — verify now.'
- “'Unusual activity detected — click here to secure your account.'
- “'Confirm your password to continue.'
- “'We sent you a code — please share it to verify.'
Before You Act
Pause and check these before sending money, sharing details, or clicking anything.
- •Check the sender's email or phone number carefully for misspellings.
- •Hover over links to preview the URL before clicking.
- •Never enter a password or OTP on a page reached from a link in a message.
- •Go to the official site by typing the address yourself.
Questions to Ask Yourself
- ?Did this message create urgency or fear?
- ?Is the sender's address exactly the real brand's domain?
- ?Am I being asked to click a link and 'verify' my account?
- ?Would the real brand really contact me this way?
What You Should NOT Do
- ✕Do not enter your password or OTP on a page you reached from a link in a message.
- ✕Do not share any OTP or verification code with anyone.
- ✕Do not reuse the compromised password anywhere.
- ✕Do not assume the message is real because it looks official.
What You Should Do Immediately
- •Change the password for the affected account right now, from the official app or site (typed, not via a link).
- •Enable two-factor authentication (2FA) on that account.
- •Log out of all sessions and review recent login activity.
- •If you shared card details, contact your bank to freeze the card.
- •Report the phishing message to the brand and your country's authority.
What Evidence You Should Preserve
- •The original message (email or SMS)
- •The sender's email or phone number
- •The phishing URL (copy it, don't visit it)
- •Screenshots of the fake page if safe
- •Which account and details were exposed
Never upload passwords, OTPs, PINs, CVVs, seed phrases, or full banking credentials.
Payment / Account Protection Steps
- •Freeze or replace any card you entered on the fake page.
- •Change passwords for any account using the same password.
- •Enable 2FA on important accounts.
Reporting Options
Report phishing messages to the brand being impersonated, to your email provider's abuse address, and to your country's cybercrime authority. If you entered credentials, also report to the affected service. Include the original message and sender details.
View Country Reporting GuideRecovery Considerations
If you acted quickly before money was moved, you may prevent loss. If funds were taken, contact your bank immediately to dispute. Recovery is never guaranteed.
High Risk of Recovery Scam
Scam victims are often targeted again by fake “recovery agents.”
- Anyone claiming “We can recover your money for a small upfront fee” is almost certainly a scammer.
- Recovery is never guaranteed. No legitimate service charges an upfront fee to retrieve stolen funds.
- Scammers buy victim lists — expect fake “hackers”, “officials”, and “lawyers” to contact you.
How GoCheckAI Can Help
GoCheckAI gives you a fast, prioritized account-security plan and points you to the right official channel for your country.
GoCheckAI does not guarantee recovery, does not act as a recovery agent, and will never ask you to pay someone to recover funds.
Related Scam Types
Frequently Asked Questions
Affected by this scam?
Get a personalized, country-adapted response plan in minutes.