When Something Doesn’t Feel Right: Stop. Think. Verify.

October 2026

Martha Ward, ISSMP, CISSP
SVP of Technology & Digital Experience

Scams aren’t new, but the technology behind them is changing quicker than ever.  We can check accounts from our phones, send money in seconds, shop online, and connect with people almost anywhere. Unfortunately, scammers have access to better technology too, making it easier and faster for them to create scams.

Fraudulent emails, text messages, phone calls, and websites are becoming increasingly convincing. Artificial intelligence can help create polished messages and even imitate familiar voices. That means some of the warning signs we learned to look for in the past may not be as obvious today.

So, what do you do when a scam doesn’t look, feel, or sound like a scam? 

Remember three simple words: Stop. Think. Verify.

Stop.

Scammers and cybercriminals often create a sense of urgency because they want you to act before you have time to question what’s happening. It might be a call saying there’s a problem with your account, a text warning that your account will be locked, or an email telling you to click a link to take care of an urgent problem.

Before you do anything, Stop.

Don’t click the link. Don’t provide personal information. Don’t send money. Don’t share a security code and never approve an authentication request you didn’t initiate.  Giving yourself a few seconds to pause can make all the difference.

Think.

Take a moment and ask yourself:

  • Was I expecting this?
  • Does the request make sense?
  • Why does this need to happen right now?
  • Why am I being asked for this information?
  • Is this normally how this person or organization communicates with me?

Be especially cautious when someone unexpectedly asks for a password, PIN, verification code, account information, gift card, money transfer, or other sensitive information. Remember, just because something looks or sounds familiar doesn’t mean it’s legitimate or coming from whom you think it is. With AI, it’s getting harder to rely on the clues we once used to tell whether something is real. A familiar voice, caller ID, photograph, or email address should not be the only reason you trust an unusual request.

Verify.

When something seems unusual, verify it before you act. Don’t use the phone number in a suspicious text or click the link in an unexpected email. Instead, contact the person or organization using a phone number, website, app, or other method you already know and trust.

If a family member calls unexpectedly asking for money, hang up and call them back at a number you already know. If you receive an unexpected message about your UCU account, open our Digital Banking app or go directly to our website instead of clicking the link in the message.  Yes, verifying takes an extra minute or two. Take the time.

Good security doesn’t have to be overly complicated.

Even though technology continues to change quickly, some of the best ways to protect yourself are still pretty simple:

  • Use a unique password for every account or use a passkey when available.
  • Turn on multi-factor authentication (MFA).
  • Never approve an authentication request you didn’t initiate.
  • Keep your phones, computers, browsers, and apps updated.
  • Review your financial accounts regularly and investigate transactions you don’t recognize.
  • Avoid sending sensitive information through ordinary email or text messages.

You are your own best defense.

Cybersecurity Awareness Month is a great reminder to check our digital habits, but cybersecurity isn’t something we should think about only in October. Technology will keep changing, and scammers will keep finding new ways to use it. But you don’t need to be a cybersecurity expert to protect yourself.  Slow down, trust your instincts, and when something doesn’t feel right, verify before you act.

Stop. Think. Verify.

If you believe your UCU account or personal information may have been compromised, contact UCU promptly at 800.696.8628 so we can help you protect your accounts.

A note about this post

I used artificial intelligence to help develop this post. I reviewed and edited the content before publishing it. AI can be a helpful tool, but I believe human review, editing and thinking still matter. Whether using AI to write a blog post, answer a question, or help us with our work, we must always take time to review what it produces and decide whether it makes sense.