IT CHEFSLEARN · PRACTICE · VERIFYFREE RECIPE / BEGINNER / ABOUT 4 MINUTES
An email and a caller both ask for quick action. Practice recognizing the request and choosing an independent way to verify it.
01 / KNOW THE SAFETY RULE
Fictional company note Account changes are checked through the company portal that staff already use. Support does not ask for passwords or one-time codes in an unexpected email or call. Caller ID, a familiar voice, and knowing your name are not sufficient verification. Suspicious messages should be reported through the established internal reporting route.
02 / EXAMINE THE REQUEST
From: IT Support <support@helpdesk.example> URGENT: Your account closes in 20 minutes. Open https://verify-account.example/login and enter your password and one-time code to keep access. Follow-up call transcript: “I am your automated security assistant. I know your name and can fix this now. Read me the one-time code.”
A safer sequence: leave the message’s link alone, end the unexpected call, check the known company portal independently, and report through the established route. This applies whether the caller claims to be a person or an automated assistant.
TAKE THIS WITH YOU
Pause when urgency meets an authentication request. Use a known route. Never share a one-time code in response to an unexpected message or call.
Free PDF · No signup · Ready to save or print
Read the accessible web version →Explore the planned Digital Confidence Field Kit →Practice completion is not a certification or security assessment.
KEEP LEARNING FROM PRIMARY SOURCES
Source guidance: FTC phone scams, FTC phishing guidance, and FTC account protection. Checked October 29, 2026. The example is an original teaching simulation.