Open the provider through your saved address or app, not the message’s link, and check the issue there.

Keep the evidence, avoid the trap
Do not send passwords or verification codes in reply. Compare the message with your actual account activity and contact verified support if needed. If you already disclosed information or opened a suspicious attachment, follow the provider’s and appropriate security authority’s response guidance.
The FTC describes fake account problems and invoices as common phishing tactics. [1]
Forward the concern to the person responsible for the account without encouraging them to click. Do not dismiss a message solely for bad grammar—or trust it solely because the writing is polished.
Sources
This article was generated by AI using the sources below. Editorial standards.
- How To Recognize and Avoid Phishing Scams — FTCSupports the attributed passage: The FTC describes fake account problems and invoices as common phishing tactics. The practical workflow and labeled examples are the publication’s own applications, not source-reported cases. Source checked Sep 8, 2026.
Have a correction? See our editorial policy and correction process.