Impostor scams are on the rise—with bad actors pretending to be reputable companies to try and scam folks into sharing personal information, including passwords, account numbers and banking details.

These tips and best practices below will help keep you and your accounts information safe.

Identifying Impostors

Scammers often create emails or public websites that look like they come from reputable companies, but in actuality are fake. You may be prompted to provide account information, like your email and password. But these fake emails and websites can steal your information, which is then used fraudulently.

If an email from a reputable source comes to your inbox, check that it’s being sent from that source’s email address. For example, if you receive an email claiming to be from Costco, make sure its email ends with “@costco.com.”

When you’re logging onto a legitimate website, double-check that its name is what appears in the address bar.

Tips to Protect Yourself

Check return email addresses and website address bars to determine if they’re legitimate.

Use the customer service numbers or email addresses listed in invoices, account statements, or legitimate websites to confirm if the business is actually trying to reach you.

Don’t provide sensitive information over the phone unless you’re sure you’re talking to a legitimate organization. It’s always better to err on the side of caution vs assume.

Don’t make payments or send money to someone whose identity you’re not able to verify.

These were among the tips I received in an email from gusto.com and thought they were good enough to share.

Be safe out there.