Complete Guide to Checking Suspicious Messages, Links, Calls and QR Codes

A complete practical guide to slowing down suspicious contacts, checking warning signs, verifying independently, using trusted contacts and organising recovery if you have already acted.

Use the steps below to slow the situation down, separate the claim from the pressure around it and keep a clearer record of what you checked and what you decided to do next.

Pause before you do anything

Urgency is one of the easiest ways to bypass normal judgement. Before replying, clicking, paying or sharing information, stop and separate the request from the pressure around it. A genuine organisation should not need you to abandon basic checks.

Capture what you received

Keep the original message, screenshot, link, QR code, caller details or notes about the conversation. Record what was requested, what identity was claimed and whether the contact tried to create urgency, secrecy or fear.

Look for behaviour, not just spelling

Modern scams can look polished. Pay attention to unusual payment methods, requests for codes or passwords, pressure to move quickly, requests to keep the contact secret, threats, unexpected changes of bank details and links that ask you to sign in.

Verify independently

Do not rely only on the phone number, link or contact details inside the suspicious communication. Find the organisation using a route you already trust, such as its official app, a statement, a saved contact or an independently located website.

Use another person when confidence drops

A trusted person can break the pressure of the moment. Explain what happened in your own words and let them look at the request without the same urgency.

If you already acted, prioritise containment

If money, passwords, account access or identity details may have been exposed, focus first on stopping further loss. Use trusted contact channels for the relevant bank, account provider or organisation, change compromised credentials where appropriate and preserve evidence.

Keep a clear incident record

Store the original material, your notes, actions taken and any reference information together. A clean incident history makes it easier to explain what happened later without relying on memory.