Suspicious messages should be reported instead of answered. Anything asking for private payment details, off-site payment, passwords in public, or unusual links should be treated carefully.

Keeping reports specific helps admins review faster.

What warning signs do you watch for?