“If you’re suspicious about an unexpected message, call or request for personal information, such as your email address, phone number, password, security code or money, it’s safer to presume that it’s ...