You receive an email that appears to be from your crypto exchange. It says your account has been flagged for unusual activity and asks you to log in through a link in the email to confirm your identity. What is the right response?

Email addresses can be spoofed to look genuine, and links in emails can be disguised to show a familiar address while pointing somewhere else entirely. Neither the sender's address nor the appearance of the link confirms the message is real. The only safe response is to go directly to the real website yourself, using an address you already know or a bookmark you previously saved. This applies to every version of this message: a text, an email, a social media notification. The link the sender provides is the one thing you should never use. This is the U in PAUSE: use official channels, found by you.