Why you should never tap links in messages

Cartoon

Meet Kate. She is 38, an accountant, and always busy. Kate is waiting for a package from her sister: a jar of honey and some warm socks.

Ding! A text message arrives. It seems to be from the delivery service.

Kate: Oh, that must be my honey! It is only two dollars, and the deadline is six. I will just pay it quickly…

Let’s pause. Crooks write so that you hurry ("by 6 PM") and don’t mind a tiny amount. When people rush, they don’t check.

Kate: The site looks real: the logo, the colors. Now, the card number…

Max: Mom, wait! Don’t type anything! That is not SwiftPost, it is a fake.

Max: Look at the address. The real service has just one, and crooks make look-alikes: they add a word or change a letter. Even I find it hard to tell. That is why I never open links from messages at all.

If Kate had typed in her card details and the code, the crook would have them. And he would take not two dollars, but everything on the card.

Kate: I opened the SwiftPost app myself, like I always do, and the package is simply on its way. Nothing to pay!

Let’s remember this rule. Now let’s practice!

Exercise: dangerous or not?

Kate got six messages. For each one, decide: is it dangerous or not?

• Harvest Bank: «Your card has been locked after a suspicious payment. To unlock it, follow the link within one hour.» (harvest-bank-help.top) — Dangerous. Banks don’t send links to "unlock" a card. Call your bank at the number on the back of your card.
• Daisy Pharmacy: «Your order #2817 is ready. Pick it up at our store on Maple Street by Friday.» — Safe. There is no link, and nobody asks you for anything: no money, no card details. It is just a reminder.
• Linda, next door: «Kate, is this you in the photo?? 😱 Take a look» (photo-album-view.top/v/38) — Dangerous. Even from a friend. Linda’s account may have been broken into and is sending this to everyone. Call her and ask if she sent it.
• Lucky Tuesday Giveaway: «Congratulations! You won a TV. To claim your prize, pay the $4.99 shipping fee.» (lucky-tuesday-prize.top) — Dangerous. You never entered any giveaway, so you could not have won. "Just pay the shipping" is a common trick.
• Harvest Bank: «Your sign-in code is 4821. Never share this code with anyone, not even bank staff.» — Safe. The code came because you asked for it yourself. Type it only into your own app and never read it out to anyone.
• City Utilities: «You are owed a $240 refund for an overpaid utility bill. Fill out the claim form today or the refund will be lost.» (utility-refund-online.top/form) — Dangerous. Refunds are not "lost" in a day, and nobody sends links to claim them. Check for yourself: in your account on the official website you type in yourself, or by the phone number on your bill.

What to remember

• Don’t tap links in text messages, emails or chats, even when the message looks real.
• Check for yourself: open the app, type the website address yourself or call the number on the back of your card.
• Rushing, threats or a "prize" in a message are signs of a scam.
• Never share codes from text messages or your card details with anyone.

Questions

You get a text: "Package on hold, pay a $1.99 delivery fee at this link". What should you do?

• Tap and pay: it’s only a small amount
• Reply to the text and ask which package it is
• Don’t tap. Open the delivery service’s app yourself and check there

Check for yourself: in the app or on a website whose address you typed in yourself.

Why do crooks write "by 6 PM" or "within one hour"?

• So you rush and don’t have time to check or ask your family
• Because the law requires it
• To help you not be late

Rushing stops you from thinking. If someone hurries you, that’s a reason to stop.

A friend sends you "Is this you in the photo?" and a link in a chat. What do you do?

• Open it: it’s my friend
• Call her and ask if she sent it
• Forward it to others so they can see too

Your friend’s account may have been broken into. A short call clears it up.

You opened a link, and the page asks for your card number, the security code on the back and the code from a text message. What does that mean?

• It’s a normal payment, go ahead
• It’s a trap: with these details they will empty your card. Close the page
• Typing the card number is fine, just not the codes

Close the page, and if you already typed something in, call your bank right away at the number on your card.