Note: Phishing scams trick users into sharing sensitive information by posing as trusted entities. Red flags include urgent language, suspicious links (e.g., bit.ly instead of official domains), and unsolicited messages. Never click links or share personal details without verifying the sender through official channels (e.g., your bank’s website or verified phone number).
Another approach is to ask: Why wasn’t this sent via email? Can you provide an official contact? Why is the link shortened?

FAQ: How can you identify a phishing scam?
- Look for urgent or threatening language pushing quick action.
- Check for suspicious links (e.g., shortened URLs or non-official domains).
- Verify messages through official channels, not the provided contact.
Was the user’s response effective?
- Yes, refusing to click the link and verifying with the bank was correct. Reporting the scam helps protect others.
What would you do in this situation?