Serpent Intelligence Systems shieldSERPENTINTELLIGENCE SYSTEMS
Sign in
GUIDE // PHISHING

Phishing Protection Tips

A calm, practical checklist for suspicious email, text messages, calls, and social messages.

Recognize the warning signs

Urgent or emotional pressure telling you to act immediately.

Unexpected requests for passwords, verification codes, money, or financial details.

A sender address or destination that only resembles the real organization.

An unexpected attachment, shortened link, invoice, refund, or account warning.

Good spelling does not prove a message is genuine. Modern phishing messages may look polished.

Before you click or reply

  1. Pause. Do not use the message's link, attachment, phone number, or unsubscribe button.
  2. Open the organization's official app, use a saved bookmark, or type its known address yourself.
  3. Contact the person or company through a phone number or channel you already trust.
  4. Use Link Check without opening the suspicious address. A “not listed” result is not proof of safety.
  5. Report the message using your email or messaging service's spam or phishing control, then delete it.

If you clicked or shared information

// ACCOUNT RESPONSE
  • Change the affected password using the real service, and change reused passwords elsewhere.
  • Turn on two-factor authentication; prefer a security key or passkey when available.
  • Review recent sign-ins, recovery details, payment activity, and forwarding rules.
  • Contact your bank immediately if money or payment details were involved.
// DEVICE RESPONSE
  • Update your device, browser, and security software.
  • Run a scan with trusted security software installed on the device.
  • Tell your workplace security team if a work account or device was involved.
  • Save relevant messages and transaction details before deleting anything needed as evidence.

Report phishing

In the United States, report scams to the FTC. CISA also recommends using the report-phishing control in your email or messaging service.

Report to the FTC Read CISA guidance

Sources: CISA, “Recognize and Report Phishing”; Federal Trade Commission, “How To Recognize and Avoid Phishing Scams.” Last reviewed October 3, 2026. Guidance reduces risk but cannot guarantee protection.