1. Key points

  • Common hooks: a problem with your account, a package delivery, a prize or an unpaid invoice.
  • Links may lead to fake login pages that look real.
  • Go to the company's site or app directly instead of clicking.
  • Report phishing to the FTC and forward spam texts to 7726 (SPAM).

2. If you clicked

Change the password for that account (and anywhere you reused it), turn on multi-factor authentication and run a security scan.