Do not give unsolicited callers remote access, passwords, verification codes, or payment; contact the company through its known official channel.
Step by Step
- Use the official settings or website for the account, device, browser, or service involved.
- Do not give unsolicited callers remote access, passwords, verification codes, or payment; contact the company through its known official channel.
- Review security and recovery settings after making the change.
- Keep recovery information and backups somewhere you can access if the primary device is lost.
If That Doesn't Work
- Never give an unsolicited caller or message sender your password, recovery code, or one-time verification code.
- If money or a critical account is at risk, use a known official contact method rather than contact information supplied in the suspicious message.