An email says your bank account will be frozen. A tax notice threatens penalties unless you respond today. A family member claims to need emergency money. The message feels urgent because the sender wants you to act before you think.
Treat unexpected urgency as a warning sign, not a deadline. Do not automatically disregard every urgent message, because legitimate organizations sometimes send time-sensitive notices. Instead, pause and verify the request through a trusted channel you find independently.
Why do scammers make emails sound urgent?
Scammers use urgency to interrupt careful decision-making. They may combine fear, authority, secrecy, or concern for someone you care about with a demand for immediate action.
The Cybersecurity and Infrastructure Security Agency warns in its phishing-prevention guidance that attackers use urgent language, unexpected requests, and suspicious links to steal credentials or install malware. CISA recommends verifying suspicious messages without replying or using the contact details provided in them.
Common pressure tactics include:
- “Your account will be closed today.”
- “A warrant has been issued.”
- “Your payment failed. Update it now.”
- “Keep this confidential.”
- “Send money before the deadline.”
- “Your relative is in an emergency.”
- “Move your money to protect it.”
- “Share the verification code immediately.”
The urgency is designed to keep you from checking whether the story is true.
What is an imposter scam?
An imposter scam occurs when a criminal pretends to represent someone you trust, such as:
- A bank or credit card company
- The IRS or another government agency
- A technology-support company
- A utility provider
- An employer or executive
- A family member or friend
- A delivery company
- A charity
These scams arrive through email, text, phone calls, social media, search results, and fake websites. According to the Federal Trade Commission, consumers reported losing $3.5 billion to imposter scams in 2025, nearly three times the reported amount in 2020. Imposter schemes accounted for almost one in three fraud reports that year, as detailed in the FTC’s 2025 imposter-scam data release.
How can you tell if an urgent email is a scam?
Do not rely only on spelling mistakes. Modern phishing messages may use polished writing, copied branding, personal details, and realistic email threads.
Check for these warning signs:
- The message arrived unexpectedly.
- The sender demands immediate action.
- The email asks you to bypass normal procedures.
- The sender requests secrecy.
- A link leads to a different domain than the visible text suggests.
- An attachment was unexpected.
- The sender asks for passwords or one-time codes.
- Payment must be made through gift cards, cryptocurrency, or a wire transfer.
- The displayed sender name looks familiar, but the email address does not.
- The message asks you to move money for “protection.”
The U.S. Department of State explains in its phishing guidance that criminals create fear and urgency to interfere with critical thinking. The agency recommends validating suspicious requests through an alternate communication channel rather than replying directly.
What should you do when an email demands immediate action?
Follow this five-step process:
1. Stop
Do not click, reply, download an attachment, call the listed number, or send money. Give yourself time to assess the message.
2. Inspect
Look at the full sender address, destination of any link, wording, attachment type, and requested action. A familiar logo does not prove authenticity.
3. Verify independently
Open the organization’s official app or type its known website address into your browser. Call a number printed on your bank card, statement, or official government website.
If the message claims to come from a relative, contact that person through a phone number you already know. Consider creating a family verification phrase for emergencies.
4. Protect your information
Never send any of the following in response to an unexpected message:
- Passwords
- Multifactor authentication codes
- Bank account credentials
- Social Security numbers
- Credit or debit card details
- Recovery codes
- Remote access to a device
The FBI Internet Crime Complaint Center warns that criminals impersonating financial institutions may request login credentials and one-time codes, then use them to take control of legitimate accounts. Since January 2025, the IC3 received more than 5,100 complaints about this account-takeover fraud, with losses exceeding $262 million.
5. Report and delete
Use your email provider’s phishing-reporting feature. Forward suspicious messages according to the impersonated organization’s published instructions, then delete them.
How should you verify tax or banking warnings?
For a tax message, navigate directly to the official government website or contact the appropriate agency using a verified number. Do not trust phone numbers or links inside an unsolicited email.
For a banking alert:
- Close the message.
- Open the bank’s official app independently.
- Check recent transactions and account notifications.
- Call the number printed on the back of your card if needed.
- Never move money because an unexpected caller or email tells you it is necessary for protection.
The FTC says some of the costliest imposter scams begin with fake bank-security alerts that convince consumers to transfer money to supposedly protect it. In reality, the money goes to the criminal.
What if the urgent request comes from someone you know?
A familiar name does not guarantee a genuine message. The person’s email account may have been compromised, or the sender address may have been spoofed.
Verify unusual requests through another channel, especially when the sender asks for:
- Gift cards
- A wire transfer
- Banking information
- A confidential payment
- A password reset
- A document containing personal data
- A change to payment instructions
Call the person using a saved number or speak with the person directly. Do not use contact information supplied in the suspicious message.
What should you do if you already responded?
Act immediately:
- Change exposed passwords from a trusted device.
- Replace the password anywhere else you reused it.
- Enable multifactor authentication.
- Contact your bank or card issuer if money was involved.
- Ask whether a payment can be stopped or reversed.
- Review your accounts for unauthorized changes.
- Run a security scan if you opened an attachment.
- Report the incident to the FTC or FBI.
- Save the original message, receipts, numbers, and transaction details.
The FBI recommends documenting the scammer’s name, contact method, payment route, dates, and interaction details when reporting suspected fraud.
How does pausing make someone safer online?
Pausing breaks the scammer’s control over the situation. Instead of following the criminal’s link, phone number, instructions, and deadline, you independently decide where to go and whom to contact.
This habit helps someone become safer online by:
- Preventing rushed financial transfers
- Reducing phishing-link clicks
- Protecting passwords and verification codes
- Limiting malware downloads
- Exposing fake emergencies before money is lost
- Making independent verification automatic
- Protecting friends and family from compromised accounts
Urgent email safety checklist
Before acting on an alarming message:
- Pause and reread the request.
- Inspect the complete sender address.
- Avoid links and unexpected attachments.
- Navigate to the official website yourself.
- Call a trusted, independently verified number.
- Never share authentication codes.
- Refuse unusual payment methods.
- Report phishing through your email provider.
- Delete the message after reporting it.
Urgency is one of a scammer’s strongest tools. An email may look official, mention a real organization, and include accurate personal details, but none of those elements proves the request is legitimate.
Do not automatically obey or automatically dismiss the message. Pause, leave the email, and verify the situation independently. That short delay can prevent an urgent-looking notice from becoming account theft, identity fraud, or a devastating financial loss.
