Pause, check an unexpected email or text safely, verify it another way, and report it without using its links.
Why it matters: A short safety check can protect your accounts, personal information, and device from phishing.
Written guidance reviewed: 2026-10-03 · Sources and equipment assumptions are below.
Take this guide to another device
Steps, notes, supplies, setup choices, results and check dates save on this browser as you work. Plus can also keep an account copy. Account copies update only when you choose Save; loading one replaces the browser draft shown here.
Review all saved work. Saved account check dates appear in My Day. Clear the date and save again to finish a follow-up. Email settings stay separate; existing opted-in agenda or deadline emails can include these dated actions.
Understand the job before starting
A short safety check can protect your accounts, personal information, and device from phishing.
A common mistake to avoid
Do not click a link, open an attachment, reply, or call a number from the suspicious message. If you already shared a password or financial information, stop using the message and go directly to the real account or IdentityTheft.gov for recovery steps.
Words used in this guide
Phishing
A deceptive request designed to steal information or prompt an unsafe action. Read the example
Use what you already have. Check each item when it is ready.
Before you begin
Do not click a link, open an attachment, reply, or call a number from the suspicious message. If you already shared a password or financial information, stop using the message and go directly to the real account or IdentityTheft.gov for recovery steps.
0 of 4 steps checked0%
Guide progress and notes save on this browser; choose Save account copy above to carry them to another device with Plus. Downloads contain the complete blank checklist; print to include your current checks and notes.
Do it with me
Your step position saves on this browser. Use the picture when available, then check the written result.
STEP 1 OF 4
Pause before you tap
Start here: Pause before you tap
Illustration: Pause before you tap. Read the steps for your exact task.
Read-aloud is available in supported browsers; the written steps always remain available.
Leave every link and attachment unopened.
Slow down even if the message says something is urgent, a payment failed, or your account will close.
Do not reply or call a number shown in the message.
Before moving to the next step
Check this specific result: The message is still unopened beyond its preview, and you have not replied, downloaded anything, or used its contact details.
If that result is not true yet, leave the box unchecked. Write what is missing in your notes; use the official instructions below when the equipment or situation differs.
STEP 1 OF 4
Pause before you tap
Start here: Pause before you tap
Illustration: Pause before you tap. Read the steps for your exact task.
Leave every link and attachment unopened.
Slow down even if the message says something is urgent, a payment failed, or your account will close.
Do not reply or call a number shown in the message.
Before moving to the next step
Check this specific result: The message is still unopened beyond its preview, and you have not replied, downloaded anything, or used its contact details.
If that result is not true yet, leave the box unchecked. Write what is missing in your notes; use the official instructions below when the equipment or situation differs.
STEP 2 OF 4
Look for warning signs
Start here: Look for warning signs
Illustration: Look for warning signs. Read the steps for your exact task.
Check the full sender address or phone number.
Notice unexpected requests for passwords, money, account details, or immediate action.
Poor spelling can be a clue, but a polished message can still be fake.
Before moving to the next step
Check this specific result: You have identified what the message wants and checked the actual sender, not only the display name or logo.
If that result is not true yet, leave the box unchecked. Write what is missing in your notes; use the official instructions below when the equipment or situation differs.
STEP 3 OF 4
Verify another way
Start here: Verify another way
Illustration: Verify another way. Read the steps for your exact task.
Open a new browser window, use an official app you already installed, or call a phone number you already trust.
Sign in or contact the person there.
Ask whether the alert or request is real without using anything from the message.
Before moving to the next step
Check this specific result: You confirmed the request through a separate, trusted website, app, phone number, or conversation.
If that result is not true yet, leave the box unchecked. Write what is missing in your notes; use the official instructions below when the equipment or situation differs.
STEP 4 OF 4
Report, then delete
Start here: Report, then delete
Illustration: Report, then delete. Read the steps for your exact task.
Use your email or messaging app’s report phishing, spam, or junk control.
For a phishing text, you can also forward it to 7726.
After reporting, delete the message.
Do not forward it to friends as a warning.
Before moving to the next step
Check this specific result: The suspicious message is reported and removed, and no one else can accidentally use its link or attachment.
If that result is not true yet, leave the box unchecked. Write what is missing in your notes; use the official instructions below when the equipment or situation differs.
Pictures for this guide
Picture 1 of 4 · Pause before you tap
A young adult holds a phone with a warning and unopened attachment while keeping a finger away from the screen.
For: Pause before you tap
Illustrations show examples of the actions above. Follow your equipment’s instructions.
Notes about these pictures
Leave every link and attachment unopened. Slow down even if the message says something is urgent, a payment failed, or your account will close. Do not reply or call a number shown in the message.
Do not click a link, open an attachment, reply, or call a number from the suspicious message. If you already shared a password or financial information, stop using the message and go directly to the real account or IdentityTheft.gov for recovery steps.
Was this step clear?
Flag “Pause before you tap” for review. We save the guide and step identifiers with your account to limit duplicates, not your private notes.
Link details checked 2026-10-03. Video availability and equipment menus can change.
These YouTube videos belong to their respective creators. Life’s Checklists does not own them and is not affiliated with the creators. Links open on YouTube, where the videos are available independently of our membership.
How to use the video with this guide
Read “Before you begin” first. Watch the relevant part, pause, then return to the written step and its completion check. Use captions and playback speed if they help. A demonstration may cover only part of the task or show different equipment.
Your model’s instructions and current official guidance take priority. For urgent problems, follow the stop instructions without waiting to watch a video.
For this guide, the final result is: The suspicious message is reported and removed, and no one else can accidentally use its link or attachment.
A concrete way to approach this task
Choose one small part of this task and follow its first step before expanding the job.
What if I cannot complete a step?
Identify the exact step: “Pause before you tap.” Record what you tried, what happened, and which item or model you used. Ask for help with that specific problem rather than repeating an unsafe or unsuccessful action.
Do not click a link, open an attachment, reply, or call a number from the suspicious message. If you already shared a password or financial information, stop using the message and go directly to the real account or IdentityTheft.gov for recovery steps.
Connect this skill to everyday life
Choose one important account and verify its recovery options through the genuine service. Organize where your recovery information is stored securely.
A familiar logo or display name does not verify a sender. Account recovery codes and normal passwords have different purposes.
A useful record for this task: Record the result of “Report, then delete”: The suspicious message is reported and removed, and no one else can accidentally use its link or attachment.
When finished, record the result and any next check or follow-up date. Your original step checks and notes remain on this browser.
Keep the result of your work
Finish and check every step before recording completion. You can write a draft below now.
Result: Not recorded · Next check: Not chosen
Choose a date from your own manual or situation. No email is enabled by saving this record.