What is it?
Phishing is a deceptive message intended to obtain private information. The FTC recommends checking through a known real website or phone number.
Why would I need this?
Practice keeping a suspicious message separate from a real account check.
Show me.
- Notice whether the message was expected.
- Do not open its attachment or use its sign-in link to investigate.
- Open the organization through a saved address or another independently verified route.
- Check the account there or ask the organization about the message.
Try it.
Imagine an unexpected email says an account is locked. Choose how you would check it without using anything in the email.
Watch out for this.
If you already shared information, the linked FTC guide explains response steps for different situations. Do not enter the information into this lesson.
Explain this another way
Focus on one small task: check a suspicious link without opening it. You can practice aloud, on paper, or with someone you trust.
Show me an example
HAB practice example: Alex opens the familiar account app directly instead of using the email link.
What does that word mean?
Open the full glossaryYou did it.
You have practiced a useful next step. Repeat it if you want, or continue at your own pace.