To avoid phishing scams, do not click on links in suspicious emails or messages. Instead, type the website address directly into your browser. If you are unsure if a message is legitimate, contact the organization directly through a phone number or email address you know to be valid.