Verify independently
Find the provider in the regulator or licensing register for your jurisdiction. Use contact details from that register, not from an unexpected message.
Protect money and credentials
Do not send gift cards, cryptocurrency, wire transfers, passwords, or one-time codes to unlock a promised loan.
Keep evidence
Save messages, receipts, account details, and URLs. Contact the payment provider and the appropriate local fraud-reporting service promptly.