Phishing messages
For urgency, reward or closure threats, verify through a known route without opening the link.
Unexpected codes, altered addresses and demands for money to fix access are warning signs. Match each symptom with a specific response.

Reused passwords let one leak affect other accounts. Use a separate strong password for each service. Email security is especially important because recovery messages may arrive there.
A one time code remains secret even though it expires. Do not share it with someone claiming to help. If a code arrives without your request, check the associated account's security.
An unfamiliar link may closely resemble an expected address. Small spelling changes matter. Return through a known bookmark or a manually entered address to check.
These distinctions answer different parts of the subject; read them alongside the detailed conditions.
For urgency, reward or closure threats, verify through a known route without opening the link.
Avoid granting screen sharing, remote control or unknown software access for support.
For unrecognised contact or password changes, secure email and begin verified recovery.

If a secret is exposed, consider other services using it. Change to distinct new passwords from a trusted device.
Retain message time and source without forwarding harmful links. Redact private details from screenshots sent for help.
Do not send more details to the suspicious contact.
Check password and recovery contacts.
Follow verified recovery methods only.
Provide time and symptoms rather than secrets.
No, keep one time codes private too.
No, the address and service identity also matter.
Do not give an unfamiliar person control of your device.
Contact the financial service promptly through its verified dispute route.