← Cyber Security Awareness Fundamentals
Module 1: See the Attack Before It Wins
Your Ordinary Day Is the Attack Surface How Scams Borrow Trust Pause, Leave the Path, and Verify
Module 2: Protect Accounts and Devices
Passwords, Passkeys, MFA, and Recovery Updates, Apps, and Permissions Links, QR Codes, Browsers, and Public Networks
Module 3: Protect Information and Recover
Personal Information Has a Long Shadow Backups You Can Actually Restore When Something Goes Wrong
Module 1: See the Attack Before It Wins

Pause, Leave the Path, and Verify

Turn vague suspicion into a repeatable verification routine that works under urgency.

In this lesson, you will learn to:

  • Use an independent route to verify a consequential request.
  • Explain why replying or calling supplied contact details is not independent verification.

Pause, Leave the Path, and Verify

Teaches independent verification for payments, password resets, account warnings, invitations, and requests from people you know.

Urgency is a tool for controlling your tempo

Scammers frequently create a shrinking window: an account will close, a parcel will be returned, a boss is waiting, a family member is in trouble, or an opportunity will disappear. Urgency is not evidence that the story is false, but it is evidence that you need control of the pace. A legitimate situation can usually tolerate a short, reasonable verification step.

Do not debate the sender inside the channel they chose. Stop, avoid further clicks, and describe the requested action in one sentence. If the action affects money, credentials, sensitive information, software, or account recovery, leave that path. The attacker’s greatest advantage is keeping you inside a sequence they designed. Your advantage is choosing where the next interaction happens.

Take back control of the tempoA pressure gauge shows the shift from urgency to a deliberate independent check.LEARN IT VISUALLYTake back control of the tempoCalmHigh pressureChoose your pace
Take back control of the tempo — A pressure gauge shows the shift from urgency to a deliberate independent check.

Independent means the attacker did not supply it

To verify a bank alert, open the bank’s saved app or type a known address. To verify a colleague’s unusual request, use a directory entry or contact method you already had. To verify a friend’s emergency, call a familiar number and ask something specific. To investigate a password-reset email, open the account directly and review its security activity.

Replying to the suspicious message is not independent. Calling the number printed in it is not independent. Searching for a phone number can also lead to fraudulent advertisements, so prefer saved statements, official apps, bookmarks, or trusted directories. Verification does not mean asking “Is this really you?” on a potentially stolen account; it means obtaining evidence through a route the attacker is less likely to control.

Leave the attacker’s routeA fork shows the supplied path continuing toward risk while a known route detours to verification.LEARN IT VISUALLYLeave the attacker’s routeSupplied pathKnown contactStay in the storyPAUSE
Leave the attacker’s route — A fork shows the supplied path continuing toward risk while a known route detours to verification.

Know what to report

A useful report does not require proving an attack. Capture the time, channel, claimed sender, requested action, and what you already did. Preserve the message or take a screenshot if safe. Do not forward a suspicious attachment to friends or repeatedly reopen a harmful page. At work or school, use the available reporting method. For personal scams, the relevant service, bank, national reporting center, or consumer-protection authority may help.

Reporting quickly protects other people and improves recovery options. If you disclosed a password, payment information, or a code, say so plainly; responders need the truth, not a perfect story. Mistakes become more damaging when embarrassment causes delay. The successful habit is not “never make a mistake.” It is “notice, stop, and recover early.”

Resources

← Previous: How Scams Borrow Trust Next: Passwords, Passkeys, MFA, and Recovery →