Most scams work because they get you to act before you think. A text says your package cannot be delivered. An email says your bank account is locked. A popup says your computer is infected. In every case, the message creates urgency that pushes you to click a link or call a number without stopping to think.

Here is a simple mental checklist. Five questions. Takes about 30 seconds. If you ask these five questions every time you receive an unexpected message, you will stop the vast majority of scams before they start.

Print this list. Tape it to your computer monitor. Share it with your parents. It works.

Question 1: Did I Expect This?

This is the single most powerful question you can ask. Did you expect to receive this message? Were you waiting for a package? Did you recently contact your bank? Were you expecting a call from this person?

If the answer is no, that is your first red flag. Most scams arrive completely unsolicited. You were not expecting a message from the IRS. You were not waiting for a call from Microsoft. You did not enter a sweepstakes.

Unexpected messages are not always scams, but they always deserve extra scrutiny. Slow down and ask the next four questions before you do anything.

Question 2: Is There Urgency or a Threat?

Scammers create urgency because urgency bypasses critical thinking. Look for phrases like:

Real companies rarely create this kind of pressure. Your bank will not close your account because you did not click a link within 24 hours. The IRS does not call you threatening arrest. Medicare does not cancel your benefits over the phone.

When you feel urgency or fear, that is exactly when you should slow down the most. The urgency itself is the red flag.

The urgency is manufactured. Scammers know that if you stop and think, you will see through the scam. So they create time pressure to prevent you from thinking. Any message that demands immediate action deserves the opposite: a pause.

Question 3: Does the Sender Actually Match Who They Claim to Be?

Look closely at who sent the message. Scammers disguise themselves as trusted organizations, but the disguise is often imperfect if you look carefully.

For emails, check the actual email address, not just the display name. A scam email might show "Bank of America" as the name but come from something like service@bnk-ofamerica-alert.com. The real Bank of America sends emails from bankofamerica.com.

For texts, be skeptical of any message from a number you do not recognize, especially short codes or numbers that look unusual.

For phone calls, remember that caller ID can be faked. Just because your phone says "Social Security Administration" does not mean it is actually the SSA calling. Scammers use technology called spoofing to make any name or number appear on your caller ID.

Question 4: Where Does the Link Actually Go?

Before you click any link, look at where it goes. On a computer, hover your mouse over the link without clicking. The actual URL will appear in the bottom corner of your browser. On a phone, press and hold the link (do not tap) and a preview of the URL will appear.

What to look for:

If you are not sure whether a link is legitimate, do not click it. Instead, open your browser and type the company's website address directly. If there is really a problem with your account, you will see it when you log in normally.

When in doubt, go direct. Never click a link in a suspicious message. Instead, go directly to the company's website by typing the address yourself, or call the phone number on the back of your card or on your statement. This one habit prevents most phishing scams.

Question 5: Would I Tell My Family About This Before Responding?

This is the gut-check question. If you received a message asking you to send money, click a link, or provide personal information, would you feel comfortable telling your spouse, your child, or your best friend about it before responding?

If your instinct is to keep it quiet, something is wrong. Scammers deliberately create situations where victims feel embarrassed or compelled to act secretly. Romance scammers say "do not tell your family, they will not understand." Tech support scammers say "do not hang up or your computer will be permanently damaged."

Any situation where you feel pressure to hide what you are doing is a scam until proven otherwise.

Make a simple rule: before you send money, share personal information, or click an unexpected link, tell someone. Say it out loud. "I got a call saying I owe back taxes and I need to pay with gift cards." Hearing it out loud often reveals how absurd the scam is.

The 30-Second Checklist

Here it is in summary. Ask these five questions before you click, call, or respond to any unexpected message:

  1. Did I expect this? If no, be suspicious.
  2. Is there urgency or a threat? If yes, slow down.
  3. Does the sender match who they claim to be? If not sure, verify independently.
  4. Where does the link actually go? If it looks wrong, do not click.
  5. Would I tell my family before responding? If no, stop immediately.

These five questions will not catch every scam. But they will catch most of them. And the habit of pausing to ask takes only 30 seconds, a tiny investment that could save you thousands of dollars and months of stress.

Share this checklist with someone you care about. Tape it to the computer. Make it a family habit. The scammers are counting on you to act fast. The best defense is to slow down.

Not sure about a message? Paste it into NoScamForMe.com and get an instant answer. It is free and takes seconds.