AI for Everyday Life: A Practical Guide to Using AI with Confidence · Module 7 · Lesson 2
Stop Impersonation and Pressure
Protect credentials and private information by recognizing pressure tactics and verifying people through a separate, trusted channel.
Your objective
By the end of this lesson, you will be able to stop an urgent request, protect sensitive information, and verify a person or organization without using the contact route they supplied.
The goal is not to identify every fake at a glance. The goal is to choose a response that stays safe even when a message is convincing.
m7-l2-objective
See It: A familiar voice asks for secrecy
Sam receives a voicemail that sounds exactly like a cousin: “I am in trouble. Please send money now, and do not tell anyone until I am safe.” A text arrives moments later with a payment link and a request for Sam's bank login to “confirm the transfer.”
The voice may be real, recorded, or cloned. The emergency may be real or invented. Either way, secrecy, urgency, and a request for money or credentials are reasons to stop before acting.
m7-l2-scenario
The emergency voicemail
How can Sam check on the cousin without replying to the caller or using the payment link?
Understand It: Protect the information that opens doors
Never casually provide passwords, passphrases, one-time verification codes, PINs, recovery codes, Social Security numbers, banking credentials, full card or account numbers, government ID numbers, private health details, or private documents in a general AI prompt or an unverified message.
Useful context tells AI what you need—for example, that a bill uses unfamiliar terms or that you need questions for a provider. Unnecessary personal data identifies you or opens an account, such as a full name paired with an ID number, a login, a code, or a complete statement. Replace such details with a placeholder like [account reference] when practicing.
A request can arrive by text, email, social media, a pop-up, a phone call, or a familiar-sounding voice. The format does not make it trustworthy. A genuine organization can be contacted through a known official route; an unexpected request does not get to choose the route for you.
Do not install remote-access software, share a screen, read out a one-time code, or move money because an unsolicited caller, pop-up, or message says it is urgent.
m7-l2-understand
A demand to act immediately or keep the matter secret
A request for a password, code, payment, gift card, cryptocurrency, remote access, or a new payee
A link, attachment, QR code, or phone number supplied in the unexpected message
A story designed to trigger fear, romance, relief, or embarrassment before you can check it
Try It: Use AI to prepare a safe response, not to authenticate a person
m7-l2-conversation
AI can help prepare calm wording. It cannot prove that a voice, profile, support agent, or link is genuine, and it should not receive the sensitive details you are protecting.
A redacted request for a verification plan
Learner: I got a voicemail that sounds like my cousin asking for urgent money and a text with a payment link. I will not paste the link, phone number, or any account details. What should I do first?
AI: Do not click the link or send money yet. Contact your cousin through a phone number you already have, a known family group, or another independent route. Ask a question that a stranger is unlikely to answer, and tell a trusted person what happened.
Learner: Help me write a brief message for the family group that checks on my cousin without repeating the emergency story or sharing private details.
AI: “Can someone please confirm that [Cousin's first name] is safe? I received an urgent message and am checking through our usual contacts. Please call me using the number you already have.”
Improve It: Use one response pattern across many scams
m7-l2-demonstration
Pause. Do not click, pay, download, share a code, or disclose details. Verify through an independent channel. Get a second person involved when emotion or urgency is high.
A browser pop-up says your computer is infected and offers technical support if you call now.
Close the pop-up without calling. Use support contact information from the product's official site or a service plan you already have.
A bank text says your account is frozen and demands a password or one-time code through its link.
Do not use the link or give a code. Open the official banking app yourself or call the number on the back of your card.
A new online romantic connection has an emergency and asks for money, gift cards, or cryptocurrency.
Do not send funds or private documents. Discuss the request with someone you trust and verify independently; pressure or secrecy is a reason to stop.
A family member's voice seems to ask for a secret emergency payment.
Use a known number or another relative to check directly. A familiar voice alone does not authenticate the request.
Use It in Real Life: Build your stop-and-verify plan
Decide now who you could contact for a second opinion when a request feels urgent: a family member, colleague, friend, financial institution, service provider, or local consumer-protection resource. Keep official contacts in a place you can reach without a suspicious message.
If you think you already shared a password, code, or bank information, act promptly through the official provider: change the password from a trusted device, contact the institution using a known number, and follow its account-security process. Do not rely on a search ad or a caller who offers to fix it.
m7-l2-real-life
Practice saying: “I do not make payments or share codes from an unexpected message. I will contact you through the number I already have.”
Key takeaway
m7-l2-key-takeaway
A request can sound personal and still be unsafe. Protect credentials and sensitive data, refuse urgency, and verify people and organizations through a separate channel you trust.
Check Your Judgment
Before you choose, pause and use the practical details in the situation. A useful next step is not always the quickest or most polished-sounding one.
Name the tactic: phishing
Phishing is a message that pretends to be from a trusted organization and tries to draw you to a link, sign-in page, or reply that collects information. The safest habit is the same whether the message mentions a delivery, account, invoice, or AI tool: pause and use an independently known route.
Try it
Write your stop-and-verify response
- State that you will not act through the unexpected request.
- Name a safe next step, such as opening an official app yourself or calling a number from a card or saved contact.
- Keep your response general; this is a practice plan, not a place to enter sensitive information.
Helpful feedback
“I do not share codes or send money from an unexpected request. I will contact the organization using the number on my card or check with my family through our usual contacts first.” The response pauses the transaction or disclosure. The response avoids sharing credentials or sensitive data. The response uses an independently known way to verify the request.
Use it in real life: Save your wording as a note or rehearse it once. Familiar language makes it easier to pause when a message tries to create fear or urgency.
Check your judgment
A message that looks like it came from a delivery company says your package is delayed and asks you to sign in through a link. What is the phishing-safe next step?
Why this matters
Choose an answer to receive feedback tailored to your result.