Imagine you’re going about your day when you receive a surprising text from your CEO. The message explains that they’re visiting clients, and there’s been a mix-up—someone forgot to buy gift cards. They’re counting on you to fix the issue by purchasing six $200 gift cards and sending the codes immediately. The CEO assures you that you’ll be reimbursed by the end of the day but warns they won’t be reachable by phone for the next two hours because of back-to-back meetings. They stress how urgent this is, and they’re relying on you to handle it.

Would you pause to question this unusual request, or would you quickly grab your credit card and take action? Unfortunately, many employees fall victim to scams like this, which are often designed to create a sense of urgency and pressure people into acting without thinking.

These schemes come in many forms. For instance, the supposed CEO might claim they’re stranded without gas money or in another urgent situation that only you can resolve. Without proper training, employees are often caught off guard. Studies show that nearly a third of people—32.4%—are likely to fall for a phishing scam. One such scam targeted a woman in Palos Hills, Illinois, who lost over $6,000 after receiving what appeared to be an email from her CEO requesting gift cards for staff.

Phishing scams like these are alarmingly common and can result in significant financial losses, not only for individuals but also for businesses. Knowing how to identify and respond to suspicious messages can protect you and your organization from falling victim.

Here’s how to stay vigilant:

• Always verify unusual requests. Even if the sender claims they’re unreachable, try calling or checking with them in person. It’s worth taking the extra time to confirm any request that seems out of the ordinary, especially if it involves money.
• Don’t let urgency cloud your judgment. Scammers often create a sense of panic to push you into acting without thinking. Take a moment to step back and assess whether the request makes sense. If it feels unusual or out of character, it probably is.
• When in doubt, seek advice. Show the message to a colleague or consult your company’s IT team or service provider. A second opinion can help you spot red flags you might have missed and prevent costly mistakes.

Staying cautious and informed is your best defense against phishing scams. When something doesn’t feel right, it’s always better to double-check.