How to verify a call, email or text from your insurer in ten minutes

You can check whether a message about your life insurance is real in about ten minutes, and you can do it the same way every time. Do not click, call back or reply. Match the message to what you actually own, find the insurer's real contact details yourself, ask about the message through that channel, check who really sent it, and confirm any account action through the insurer's own site or app. If the message survives all that, it was probably real. If it does not, you have lost ten minutes instead of your savings or your identity.

This post is a walkthrough of the routine, with the time each step takes, what to look for and a few invented examples. Because it works for calls, emails and texts alike, it is worth practicing once while nothing is at stake. The general landscape is in phishing and impersonation scams using insurer names; the focus here is the repeatable method.

Why a routine beats good instincts

Scam messages are designed to work on careful, intelligent people. The Federal Trade Commission reported on June 15, 2026 that people reported losing $3.5 billion to imposter scams in 2025, the most-reported fraud category. Messages are now polished: spelling mistakes are a weaker clue than they used to be, logos are copied and callers sound professional. Instincts also fail under pressure, which is the scammer's main tool.

A fixed routine removes the need to judge each message from scratch. You do not need to decide whether the message sounds right. You only need to follow the steps. A routine also works when you are tired, rushed or grieving, which is exactly when scammers send their messages.

Step 1: Stop (first minute)

The first step is what you do not do.

• Do not click any link, button or attachment.
• Do not call the number in the message or the number that called you.
• Do not reply, even to say no. A reply confirms that your number or address is active.
• Do not give any information, including a "yes" on a recorded call.
• Do not take the urgency at face value. A message that says your policy ends today, a claim will be cancelled or legal action will follow is following a script. A real lapse comes after a grace period and written notices, not a text at 4 p.m.

If it is a call, you can say, "I will call you back through the number on my policy," and end it. If it is a text or an email, leave it open on the screen so you can examine it, or take a screenshot.

Step 2: Match it to your records (minutes 1 to 3)

Ask whether the message could be true.

1. Do you own a policy with that company? Check where you keep your documents. If you have never heard of the insurer, the message is almost certainly not about your policy. where to keep your policy and who to tell about it describes a simple system.
2. Does the policy number or detail match? Messages sometimes include a number or a premium amount. Compare it with your policy. A wrong amount is a red flag, but a correct one is not proof, since scammers use information from old mailings and data breaches.
3. Does the topic make sense? A late-premium notice for a policy paid by automatic draft, a "claim ready for release" when no one you know has died, or a request to "update your beneficiary" you never mentioned does not fit the facts.
4. Are you the right audience? If you are a beneficiary rather than the owner, the insurer would not normally message you about premiums.

If nothing matches, you can stop here, delete the message and report it. If something might be true, go on.

Step 3: Find the insurer's real contact details (minutes 3 to 5)

You need a channel that does not run through the message. In order of reliability:

1. A paper statement or the policy itself. Look for the customer service number printed on a document you received from the insurer in the past.
2. The insurer's website, typed by you. Type the address into the browser yourself instead of clicking a search ad. Search results sometimes include copied sites that look the same. If you are not sure of the address, your state insurance department's records of licensed insurers can help.
3. The insurer's app, if you installed it from an official app store before.
4. Your agent, if you already have one, reached at a number you already had. If someone new claims to be your agent, check the license with the steps in how to check that an insurance agent is licensed.

Write the number down before you dial so you are not tempted to use a number from the message.

Step 4: Ask, and get a reference (minutes 5 to 8)

Call the real number. Say you received a message and want to know whether it came from the company and whether anything needs to be done on your policy. Then ask for four things.

• Did the company send this message? Describe it: the date, the sender name or number and what it said.
• Is there any action required on my account? Premium status, address, banking details or anything else.
• A reference. Ask for the representative's name and a call or case reference number.
• A written confirmation, by letter or through the online account, of whatever they told you.

Representatives hear about scams often. Many insurers will tell you plainly whether a message is genuine, and some will ask for a copy so they can report it. If you are the policy owner, you should be able to get your own policy information. If you are not the owner, the insurer may be limited in what it can say; see privacy and your life insurance data: who sees it and your rights.

Write down the date, the name and what you were told. If the insurer has no record of the message and no action is needed, you have your answer.

Step 5: Check the sender (while you wait or after you hang up)

Even before you reach the insurer, you can look at the sender. Each channel has its own clues.

To read a sender's domain, take the part of the email address after the @ sign, or the part of a web address before the first single slash, and read it from the right. In an invented address such as [email protected], the real domain is "examplelife-help.com", not "examplelife.com". A hypothetical insurer named "ExampleLife" would use its own domain, and anything extra attached to it is a different site. These examples are invented for illustration and do not describe any real company.

None of these clues is decisive alone. A well-made scam can pass many of them, which is why the call in Step 4 matters most.

Step 6: Confirm through the account portal (minutes 8 to 10)

If the message asks you to do something with your policy, do it only through the insurer's own site or app, which you reach yourself.

• Log in by typing the address or using the official app. Do not follow a link from the message.
• Look at the policy summary: premium status, next due date, owner, beneficiary, address and payment method.
• Look for notices or alerts in the account's message center, where genuine requests usually appear.
• If the account shows nothing, no action is required.

If you have not registered for online access, consider doing so, using a unique password and multi-factor authentication where available. It gives you a place to confirm anything the insurer says it sent.

What legitimate insurers do not ask for

Memorize this short list. If a message asks for any of these, treat it as suspect, whatever else it says.

• A password or a PIN.
• A one-time code that was texted or emailed to you.
• Payment by gift card, cryptocurrency, wire to an individual or a payment app handle.
• A fee or "tax" before paying a death benefit or refund.
• Your full Social Security number or bank login in reply to a message you did not request.
• Secrecy: "do not tell your family" or "do not call the company."

Insurers do ask for identifying details when you contact them to make changes. That is normal when you started the contact, which is why who initiates matters so much.

Three hypothetical walk-throughs

The scenarios below are invented, and the times are rough.

A text about a lapse. Marisol, 44, receives a text saying her policy will lapse unless she pays $96 at a link. She does not click. She owns a policy with that company and pays by automatic draft. She finds the number on her last statement (minute 4), calls, and asks. The representative says her premium cleared last week and the company did not send the text. Total time: eight minutes. Cost: $0. She forwards the message to her state insurance department.

An email about a claim. Jamal, 61, gets an email saying a death benefit of $75,000 is ready for release after a $1,500 "verification fee." No one in his family has died, and he has never heard of the company. At Step 2 the message does not match his records and the request is for a fee, which is a scam signature. He deletes it and reports it. Total time: three minutes. He did not need to go further.

A call from "your agent." Ellen, 70, gets a call from a man who says he is her new agent and needs her bank details to "update billing." She says she will call him back and asks for his license number. She searches the state lookup and finds no match, and the insurer confirms no such person is attached to her policy. She reports the call. For routine guidance on that call itself, see mistakes people make when a caller claims to be their life insurer.

Messages about claims and beneficiary changes

Two kinds of message deserve extra care because the sums are large and the people receiving them are often under stress.

A message about a death claim. If someone has died and you are a beneficiary, you start the claim by contacting the insurer's claims department; the insurer does not normally begin by asking you for money. A message that arrives first, offers to "release" a benefit or asks for a fee should be checked with the routine above. The steps for a real claim are in how to file a life insurance claim.

A message about changing a beneficiary, owner or bank account. These changes can redirect the money to someone else, so treat any request that arrives through a call, email or text as unverified until you confirm it. If you want to make the change, start it yourself through the insurer's site or a number you found, and ask for written confirmation afterward. If you did not ask for a change and the insurer says one was requested, tell it at once that you did not make the request.

In both cases, the rule is the same as everywhere else in the routine: the contact that matters is the one you start.

What if I already clicked or answered

Act in this order: disconnect and secure your accounts, call the real insurer, contact your bank if you shared financial details, consider a credit freeze if you gave identity numbers, and report. The ordered steps, with the reasons, are in a recovery plan for after a scammer got your policy details. Quick action usually leaves more options. See also common life insurance scams and how to avoid them for the full list of patterns.

Making it a habit

• Practice once. Look up your insurer's contact details today, write them in your policy list and save them in your phone under the insurer's name.
• Keep the list where your family can find it. Tell a relative where it is.
• Forward suspect messages. Reporting costs a minute; see ReportFraud.ftc.gov and your state insurance department.
• Teach someone. A parent or grandparent who knows the first step, which is to stop, is much harder to trick.

Key takeaways

• The routine is the same for every channel: stop, match to your records, find the real contact yourself, ask and get a reference, check the sender, confirm in the account portal.
• Caller ID, logos, polished writing and correct-looking details prove nothing; the request itself is the test.
• Legitimate insurers do not ask for passwords, one-time codes, gift card or crypto payments, or fees to release a benefit.
• Reach the insurer through a statement, policy or a website you typed yourself, never through the message.
• Report suspicious messages even when you did not fall for them, and act fast if you shared anything.