Practice noticing patterns

Fictional Examples, With the Warning Signs Marked

These deliberately incomplete examples illustrate general patterns. They are not real TIAA communications, contain no working destinations and cannot be used to authenticate any message you received.

Independent guideTeamjieletric is an independent educational publisher. It is not affiliated with, endorsed by, or acting on behalf of TIAA. We do not verify messages, investigate incidents, recover accounts or provide technical support.

Fictional email: urgency plus an attachment

Example fragment: “[Unfamiliar sender] says a document must be opened immediately. [Attachment omitted].”

What to notice: the sender is not confirmed, the attachment is unexpected and the demand discourages a pause. None of these details alone establishes what the attachment contains. The practical response is to leave it unopened and locate a confirmed source separately.

Do not compare the fragment's wording with a real message as an authenticity test. A real attempt might use different wording or have no obvious grammar problems. The educational point is the combination of an unconfirmed request and pressure to act.

Fictional text: a threat attached to an easy action

Example fragment: “[Unknown number] threatens an immediate consequence and points to [link omitted].”

What to notice: the link is supplied by the same source making the threat. Using that link to ask whether the message is genuine would not provide an independent check. A short message can make the next action seem simple while leaving the source uncertain.

Safer next step: stop interacting and find a confirmed route yourself. Do not reply with a password, a code or a request for reassurance. The fact that a text names a familiar organization does not establish who sent it.

Fictional call: a code request described as protection

Example fragment: “[Unconfirmed caller] asks the listener to read out a security code and remain on the line.”

What to notice: the requested disclosure concerns access information, and staying connected can keep the caller in control of the conversation. A familiar caller-ID label or a professional voice would not settle the caller's identity.

Safer next step: keep the code private, end the call and obtain a confirmed contact route independently. A transfer arranged by the same caller should not be mistaken for independent confirmation.

Fictional search result: appearance used as authority

Example fragment: “[Search placement] leads to a familiar-looking page that requests sensitive information.”

What to notice: placement and visual resemblance do not establish who operates the page. Leave the uncertain destination rather than entering information to see the next screen. Choose a separately confirmed source.

Use examples as practice, not a verdict

These fragments omit branding, addresses, phone numbers, links and complete scripts on purpose. They teach warning signs without reproducing real correspondence or providing usable impersonation material. Teamjieletric does not accept real messages for comparison, investigation or verification.

Keep this in mind

Look for the pattern of an unconfirmed request, then move to independent confirmation.

Two people talking while seated on a staircase
Illustrative photograph; no person pictured is identified as a staff member or an incident subject.

Related reading

Source Reference

Sources reviewed November 4, 2026. External references are informational, with no referral tracking or partnership implied. Confirm current instructions at the source.