If you suspect phishing, which action is recommended?

If you suspect phishing, which action is recommended?

• A. Verify the sender through official channels
• B. Click the link to confirm
• C. Provide your password if asked
• D. Ignore the message

Answer: (A)

When you suspect phishing, verify the sender through official channels before taking any action. Phishing relies on pretending to be someone you trust, so the safest move is to confirm who sent the message using a method you know is legitimate—such as contacting the organization with a phone number or website you’ve used before, or signing into your account through the official app or site rather than the links in the message. In practice, don’t click any links or open attachments, and don’t enter passwords or other sensitive information in response to the message. If you’re unsure, reach out through a trusted channel, or navigate to the official site by typing the address yourself. If you determine the message is suspicious, report it to IT/security and delete it. Choosing to verify instead of acting on the message protects you from credential theft and malware, and it’s safer than simply ignoring, which could cause you to miss important legitimate communications.

When you suspect phishing, verify the sender through official channels before taking any action. Phishing relies on pretending to be someone you trust, so the safest move is to confirm who sent the message using a method you know is legitimate—such as contacting the organization with a phone number or website you’ve used before, or signing into your account through the official app or site rather than the links in the message.

In practice, don’t click any links or open attachments, and don’t enter passwords or other sensitive information in response to the message. If you’re unsure, reach out through a trusted channel, or navigate to the official site by typing the address yourself. If you determine the message is suspicious, report it to IT/security and delete it.

Choosing to verify instead of acting on the message protects you from credential theft and malware, and it’s safer than simply ignoring, which could cause you to miss important legitimate communications.