1. Key points
- Common hooks: a problem with your account, a package delivery, a prize or an unpaid invoice.
- Links may lead to fake login pages that look real.
- Go to the company's site or app directly instead of clicking.
- Report phishing to the FTC and forward spam texts to 7726 (SPAM).
2. If you clicked
Change the password for that account (and anywhere you reused it), turn on multi-factor authentication and run a security scan.