← Back to blog

Spotting a fake appointment message before clicking

Verify urgent payment or account-confirmation requests through a route independent of the message.

Your name or a familiar logo in a message does not prove the sender is genuine. “Your appointment will be cancelled” may be designed to trigger a quick response. You do not need to open the included link to investigate.

Verify independently

Type the known address yourself or use the official app you already trust. Is the same alert present in your account? Use contact details from the official website rather than a number supplied in the message. Familiar branding and correct spelling are not proof of authenticity.

Interrupt the pressure

Be especially cautious about requests for immediate payment, passwords, verification codes or remote access. Confirming an appointment should not require installing random software. Do not begin an action you do not understand. Asking questions is nothing to be embarrassed about.

If you shared information by mistake

Access the account through its official route rather than returning to the suspicious sender. Change an exposed password from a safe device and review active sessions. Address other accounts where the same password was used. If payment details are involved, contact your bank through a known channel.

Build a household habit

You could agree: “We verify urgent messages independently first.” Avoid unnecessarily forwarding clickable suspicious links, and use appropriate reporting tools. This cannot prevent every scam, but it creates space between pressure and action.

Sources and further reading

CISA — Recognize and Report Phishing

https://www.cisa.gov/secure-our-world/recognize-and-report-phishing