Scammers use email or text messages to try and steal your passwords, account numbers, or Social Security numbers. If they get that information, they could get access to your email, bank, or other accounts. Or they could sell your information to other scammers. Scammers launch thousands of phishing attacks like these every day — and they’re often successful.

If you get an email or a text message that asks you to click on a link or open an attachment, answer this question:

Do I have an account with the company or know the person who contacted me?

If the answer is “NO,” it could be a phishing scam.

If the answer is “YES,” contact the company using a phone number or website that you know is real — not the information in the email. Attachments and links might install harmful malware.