What should you do if you receive an email asking for sensitive information?

When faced with an email requesting sensitive information, verifying the request's legitimacy and avoiding direct replies is essential. This practice reflects a fundamental principle of cyber security, which is to be cautious with unsolicited requests for personal or confidential information.

Phishing attacks often disguise themselves as legitimate communications from trusted entities, aiming to trick recipients into divulging sensitive data. By taking the time to verify the request—such as contacting the organization directly through official channels or checking for signs of phishing—you are protecting yourself from potential scams.

This approach ensures that you do not accidentally provide sensitive information to a malicious actor. Simply replying with the information, clicking links, or deleting the email without proper verification can lead to data breaches or identity theft. Thus, verifying the legitimacy of the request is the most prudent course of action.