When to use it
Use for unexpected sign-in requests, prizes, payment instructions, account warnings, attachments, and urgent messages asking for private information.
How to use it
Pause before opening an attachment, following a link, replying, or entering information. Identify the requested action and why the message claims it must happen immediately.
Inspect the full sender address and the claimed organization. Look for a mismatch with a known address, but remember that a familiar display name alone proves nothing. A legitimate-looking message can still be deceptive.
Check the actual destination only through the device’s safe preview features. Do not open a suspicious link merely to investigate it. If the destination is unclear or hidden, stop and use a separate route.
Open a known bookmark, type a previously verified official address, or contact the organization using contact details obtained independently. Do not use the phone number or reply address supplied in the suspicious message as the verification channel.
Ask whether the independently reached organization confirms the request. A password or payment should not be provided just because the message has a padlock symbol. HTTPS concerns the connection, not whether the site’s operator is honest.
Show uncertainty to a trusted adult or the relevant support team. Use the organization’s reporting route. If information was already entered, promptly tell that support team what happened through a verified channel so appropriate recovery steps can be taken.
A worked example
A practical illustration of the method.
Invented example: An email claims a school account will close in ten minutes. The student leaves its link alone and opens the school portal using a saved bookmark. No notice appears. A parent contacts the school through its known office number, and the suspicious message is reported rather than answered.
Use it thoughtfully
Assuming spelling errors are required for a scam.
Treating HTTPS or a familiar logo as identity verification.
Using the suspicious message’s own contact details to verify it.
The companion clarifies the manuscript’s security-indicator advice:encryption and polished presentation do not verify legitimacy.
From the book
A set of specific techniques for verifying whether online sources, especially emails and websites, are legitimate and trustworthy.
The Hero’s Expanding World · Chapter 4: The Email Trap — Hero Tool: Deep Source Check
Excerpt from the author’s current manuscript; page numbers vary by edition. The practical instructions on this page are companion guidance, not additional quoted text.
Book references and related versions
- Chapter 4: The Email Trap — Hero Tool: Deep Source Check
Additional guidance
An original practical companion to the book’s approach. Reflection and planning aid; not a validated psychological assessment or a guarantee of an outcome.
Put it into practice
Your next step
Use these prompts for a real situation or a made-up example. Younger readers can work with a trusted adult.
This worksheet does not submit your responses. Entries remain on this page until you leave or reload it. Save a text copy if you want to keep them.
Check your preparation
0 of 6 steps checked