Guided path

I received a strange message

Fake parcel, fake bank, fake fine: the seven reflexes to check, react and report without being caught out.

7 steps

Who is it for?A parcel text, an e-mail from your bank, a cry for help from a relative, an unexpected invoice: you hesitate to click.
Your progress
Your ticks stay in this browser; nothing is sent.

Well done, path completed. Your ticks stay on this device; reset to start again.

  1. Do not click, do not reply

    WhyA genuine organisation never pushes you to click within the minute. Urgency is the first sign of a scam.

    To doClick no link, open no attachment, do not call back the number in the message. Nothing is lost as long as you have typed nothing.

  2. Check the link you received

    WhyThe address hidden behind a link says almost everything: fake “gov”, imitated brand, domain name created yesterday.

    To doCopy the whole message into the “Suspicious link” tool, without clicking the link. Read the verdict and the signs found.

    Suspicious link Tutorial

  3. Check who really sent the message

    WhyThe displayed name (“Customer service”) proves nothing. Only the domain after the @ counts, and it must be exactly the organisation's.

    To doShow the sender's full address. If in doubt, type its domain into the DNS lookup: a domain with no mail service or no SPF is not a bank's.

    DNS lookup Tutorial

  4. If it is a phone call

    WhyThe start of a number says a lot: a range reserved for telemarketing, a premium-rate number, a foreign code that rings only once. And since 11 August 2026, a sales call without your consent is forbidden in France.

    To doDo not call back. Type the number into the “Stop cold calls” tool: it tells you what kind of number it is and what to do. Never give a code received by text or a card number over the phone.

    Stop cold calls Tutorial

  5. If you clicked or typed something

    WhyA password typed on a fake page must be considered stolen: it will be tried on your other accounts within the hour.

    To doChange that password right away, starting with your mailbox, then everywhere it was reused. Card details typed: block the card and report the fraud. Tell the bank even if you only have a doubt.

    Password checker Tutorial Useful linksReport card fraud in France (Perceval)Cybermalveillance.gouv.fr: what to do

  6. Report the message

    WhyEvery report helps get scam sites shut down faster and protects the next people.

    To doText message: forward it to 33700 (France). E-mail: signal-spam.fr or your mail app's “Report phishing” button. Illegal content: Pharos. If you suffered a loss, cybermalveillance.gouv.fr guides you to filing a complaint.

    Useful links33700: report a text messageSignal SpamPharos: report illegal content

  7. Protect your own domain name

    WhyIf you have a site, your address can be imitated in turn. DMARC set to “quarantine” or “reject” blocks fake e-mails sent in your name.

    To doCheck your domain with the DNS lookup and switch DMARC to active mode at your host, after making sure your own mailings are properly aligned.

    DNS lookup Tutorial
What next?

Run the complete diagnosis again in six months, and keep the PDF report as a reference. A question along the way? A 30-minute call with a consultant is free.

Book a slot