Credential Harvesting scams

Warning signs

• fake login page
• non-HTTPS
• suspicious domains

Where it shows up

How to protect yourself

• Slow down. Urgency and pressure are the scammer's main tool — a real request survives a few minutes of checking.
• Never pay with gift cards, wire transfers, or crypto at someone's instruction — those are chosen because they can't be reversed.
• Don't click links or call numbers from an unexpected message. Reach the company using contact info from its official website.
• Never share a verification code, password, or remote access to your device with someone who contacted you.