Every scam — new or old — pulls one of six levers. Name the lever and the script loses its grip.
The six levers
Urgency (‘within 24 hours’), authority (‘this is the bank / CBI / your MD’), fear (‘account blocked’, ‘arrest’), greed (‘prize’, ‘guaranteed returns’), secrecy (‘tell no one’) and helpfulness (‘I am from support, let me fix it’).
The universal response
Pause. Verify through a channel you choose (the official app, a number you already have, a person you can see). Never through the channel the message provides. Money asked for before money received is a scam. A code, PIN or OTP asked for by anyone is a scam.
Train the reflex
Run the phishing quiz with staff; put the poster on the wall; make ‘I'll call you back on your official number’ the normal answer to any surprising call.
Checklist
- ☐Six levers known by every staff member
- ☐‘Call back on the official number’ is the default
- ☐No OTP / PIN / code ever shared
- ☐Money before money = scam
- ☐Quarterly quiz done