Check who sent a brand inquiry and what they are asking for before sharing documents or clicking through to an account. A familiar logo alone does not verify a sender.
Separate the message from the business
Read the sender address and the actual request.
Confirm the person and project
Use an independently found business contact to ask whether the person represents the brand and whether the project exists.
Limit what you send
Start with public portfolio information or a business contact response.
Separate the message from the business
Read the sender address and the actual request. Look up the business through a route you already trust, such as its official website, instead of relying only on links in the message. An agency may legitimately use a different domain, but that relationship still needs clarification. An unfamiliar address is a question to resolve, not proof of wrongdoing.
Confirm the person and project
Use an independently found business contact to ask whether the person represents the brand and whether the project exists. Request a plain description of the work, dates and compensation before sending private information. A legitimate discussion should be understandable without first paying a fee or surrendering an account password. Keep the message while you verify it.
Limit what you send
Start with public portfolio information or a business contact response. Do not send identity documents, banking details, login codes or passwords through an unverified conversation. If a later legitimate process needs sensitive information, verify the destination and the reason separately. For minors, involve a parent or guardian before moving from an inquiry to onboarding.
Worked example
Fictional example: A soccer athlete gets a message using a familiar shoe brand’s logo. The sender asks the athlete to pay a shipping charge through an unfamiliar page. The family contacts the brand through its official website to ask about the campaign. Until the relationship is confirmed, they do not enter payment details. They record the inquiry as unverified rather than publicly accusing the sender.
Your working sheet
Copy these prompts into your own project notes. Keep private details in your records, and leave unanswered questions marked as unresolved.
- Sender: exact address and claimed organization.
- Project: requested work, dates and payment terms.
- Independent contact: where you found it.
- Verification: who confirmed the person and campaign?
- Information requested: why is it necessary at this stage?
- Decision: verified discussion, clarification needed or stop.
Before your next step
No checklist guarantees that an offer is safe. If you already shared a password or payment information, use the affected provider’s official support and security process promptly. Do not continue through the suspicious message to fix the problem. Save relevant records and seek help from a trusted adult or appropriate professional.
Continue with the offer-review checklist and the family contact plan.