Modern scams often look professional; context and verification matter more than spelling mistakes.
Treat urgency as a signal to pause
Attackers create pressure by claiming an account, payment or delivery needs immediate action. Stop and open the official service independently instead of using the message link.
Verify through another channel
A familiar name or logo can be copied. Contact the person using a known number, inspect the actual sender address and confirm unusual payment or password requests separately.
Report without embarrassment
Fast reporting helps an organization block links, warn colleagues and protect accounts. If credentials were entered, change the password from a trusted device and review active sessions immediately.