Scan the sender address, not just the display name. Hover links to preview destinations. Watch for mismatched logos, odd spacing, and urgent countdowns. When unsure, forward to security or yourself as plain text. Never open attachments from unexpected invoices; contact the claimed sender via a trusted channel.
Smishing campaigns exploit delivery updates, bank alerts, or tax refunds to rush you onto fake portals. Do not tap shortened links. Call the organization using the number on your card or website. Report spam messages, then block. Screenshots help family learn the patterns without reliving the panic.