A servicing message can be genuine and still deserve a careful check. Payment reminders, document requests and changes in account administration all involve information that impersonators can copy. Judge the requested action through an account channel you already know, rather than through the appearance of the message.
Start with your own account record
Open the servicer's site from a saved bookmark or an address taken from an established statement. Check the secure inbox and recent notices. If the message concerns a payment, compare the amount and date with the account's own record.
The FTC's phishing guidance explains that fraudulent messages can impersonate familiar companies. A logo and a plausible account detail do not establish authenticity. Avoid using the message's link or phone number as the only route for checking it.
Match the specific request
Ask the verified servicer whether it requested this exact action. “Did you send me anything?” can produce a vague answer. “Did you ask me today to change my payment destination to this account?” is more useful. Keep the sensitive account numbers within the secure conversation.
A genuine company may send routine email while handling documents inside its portal. If an email asks you to reply with a full Social Security number or a password, pause and ask for the established secure process. A one-time code should not become a way for an unknown caller to enter your account.
Treat payment changes as a separate verification
Imagine a message says your usual monthly payment must now be wired to a different recipient. Before sending money, confirm the new instructions through the servicer you know. Ask when the change becomes effective and where its written notice appears. Retain both the notice and confirmation.
Do not assume a suspicious message cancels an actual payment obligation. Check the legitimate account for the real due date and available payment methods while the suspicious request is investigated. That keeps the verification task separate from the ordinary account task.
Record the outcome without keeping unsafe links in use
Save the message and your verification note privately. If the servicer confirms an impersonation, ask where it wants the evidence submitted. Use the reporting route it provides through the verified channel.
Caller identification can also be falsified, as the FTC explains in its scam guidance. Returning a call through an established contact route gives you a stronger basis for action than trusting the number displayed during an incoming call.
