Pause. Check. Protect.
Practical digital safety lessons for small businesses, sole traders, and local teams.
Build the habit of pausing, checking the source and choosing a safer response. Start with the example below.
The Core Habit
Read this fictional email, then work through the checks before taking action.
From Alex | Accounts
Subject
Hi,
I’m in a meeting and need you to sort this before the supplier closes our account. Their bank details have changed; use the details on the attached invoice instead of the saved ones.
Please pay today and reply once it’s done. I’ll explain afterwards.
Your response
Take a breath.
Before you click, reply, pay or share anything, give yourself time to think. A message’s urgency does not remove the need to check.
Use a trusted contact.
Read the full sender address and consider what you’re being asked to do. Contact the person or organisation using details you already trust. For changed payment details, verify directly with the supplier before paying.
Protect yourself and others.
Hold off until the request is verified. If it looks suspicious, flag it to the people affected so they can check too. Your decision protects more than your own account.
The Challenge
Scam messages often arrive with pressure: an overdue invoice, a locked account, a failed delivery, or changed bank details. The goal is not just to fool your knowledge. The goal is to rush your calm.
That is why Sentinel Check teaches one repeatable habit: Pause. Check. Protect.
Pressure, urgency, and fear make people act before they think.
Most advice is either too technical or too alarmist for busy people.
A calm, practical habit you can use at work and at home.
Featured Toolkit
Ghost Protocol is a practical privacy and digital self-defence toolkit for reducing exposure, securing accounts, cleaning up old risks, and building safer online habits.
Use it when you are ready to go deeper than the basic Sense Check lessons and apply stronger privacy habits step by step.
Interactive simulation
See a visual representation of how your data moves through a simulated network, from everyday browsing to profile building, broker trading and potential leaks.
Visual guide · 12 illustrated steps
How contactless cards receive power, communicate with card readers and complete payments. Includes documented security threats and practical ways to protect your payments.
Resource Library
Start with the situation you are facing. Search by topic or filter by the type of help you need.
See a visual representation of how your data moves through a simulated network, from everyday browsing to profile building, broker trading and potential leaks.
Explore the Data TrailA 12-step illustrated guide to contactless payments, NFC technology, payment security and documented fraud methods.
Explore the GuideA deeper toolkit for reducing exposure, securing accounts, cleaning up old risks, and building safer online habits.
Open toolkitLearn why urgency, fear, and pressure are often the biggest warning signs of a scam.
Read lessonA simple three-step habit for safer decisions before you click, pay, reply, or share.
Read lessonHow small businesses can reduce fake invoice and changed-bank-details fraud.
Read lessonWhat to do when a supplier suddenly sends new payment instructions.
Read lessonA quick Sense Check for parcel texts, missed delivery messages, and payment links.
Read lessonWhat to remember if you clicked, replied, paid, or shared details under pressure.
Read lessonA short example of how a five-second pause can prevent a costly business mistake.
Read lessonWhy multi-factor authentication matters and where small businesses should enable it first.
Read lessonSimple password habits that reduce risk without making daily work harder.
Read lessonA short checklist for unexpected emails, attachments, links, and urgent requests.
Read lessonNo matching lessons yet. Try a broader word like “email”, “invoice”, “password”, or “scam”.
Lesson 1
Many scam messages are designed to make your heart beat faster. They mention overdue invoices, failed deliveries, locked accounts, emergency payments, or consequences if you do not act immediately.
That pressure is not random. It is the tactic. When a message demands instant action, treat that as your signal to slow down.
Is this message trying to make me act before I have had time to verify it?
Lesson 2
Pause before you click, pay, reply, or share details. Check using a trusted route, not the route given in the suspicious message. Protect by taking the safer action.
This habit is deliberately simple because it needs to work when you are busy, tired, pressured, or distracted.
Lesson 3
Fake invoices and changed bank details often rely on rushed trust. The email may look familiar, the supplier name may be real, and the timing may feel believable.
Before paying a new invoice or accepting changed bank details, verify the request through a second trusted channel. Do not reply to the same email thread. Call the supplier using a known number from their official website or your existing records.
New bank details should never be accepted from one email alone.
Lesson 4
A sudden change in payment details should always be treated as a verification moment, even when the sender appears familiar. Attackers often compromise or imitate trusted conversations.
Lesson 5
Parcel scams work because many people are genuinely waiting for deliveries. The message creates urgency with a small fee, failed delivery warning, or threat that the item will be returned.
Do not use the link in the text. Open the official delivery company website or app yourself and check the tracking number there.
Lesson 6
Being scammed does not mean you are stupid. It means someone used pressure, timing, trust, or fear against you. Scammers are professionals at creating confusion.
The way forward is not embarrassment. The way forward is recovery, learning, and checking again. Smart people get rushed too.
Case Study
Sarah received an urgent invoice that claimed a supplier portal was down and included new bank details. Instead of replying to the email, she paused and called the supplier using the number from their official website.
The supplier confirmed the invoice was fake. The defence was not complicated. It was a five-second pause followed by a proper check.
Accounts
Multi-factor authentication adds a second check when someone tries to log in. It helps protect accounts even when a password is guessed, reused, leaked, or stolen.
Prioritise email accounts, banking, cloud storage, website admin panels, accounting tools, and social media pages connected to your business.
Accounts
The biggest password improvement is avoiding reuse. One leaked password should not open your email, banking, website, and social media accounts.
Use unique passwords, enable MFA, and consider a reputable password manager so secure habits become easier to maintain.
Before opening attachments, clicking links, or replying with information, check the sender, the request, the pressure, the destination, and whether the request makes sense for your normal business process.
Quick Checklist
Use this as a quick desk-side Sense Check. Tick each warning sign that applies. The more boxes ticked, the more cautious you should be.
Low concern
No obvious pressure signs detected. Still verify before acting.
The Real Metric
That is the point of this Learning Hub. Not fear. Not jargon. Not making people feel ashamed. The goal is to help people feel calmer, more capable, and more willing to check before acting.
Professional Sense Check
A free Cyber MOT gives you a plain-English view of common risks across accounts, devices, Wi-Fi, exposed services, and everyday business habits.