Stop before clicking on a recall text or email. Verify the claim elsewhere: search the exact model, lot, or serial number in an official recall database, or open the manufacturer's website yourself.

A complaint or screenshot can describe a concern. It cannot show, by itself, that an agency or manufacturer issued a recall. Promised money proves nothing.

Use the message as a lead, not as evidence.

What a credible product recall notice should contain

Search results often blend genuine recalls with safety reports and fraud warnings. Look for the record, not the headline.

A credible notice gives you enough detail to identify the affected item and follow the stated remedy. It may be published by the CPSC, FDA, manufacturer, retailer, or a recall administrator. Some remedies ask for limited proof, such as a receipt or product photo.

Match more than the brand name. A broad product category or blurry agency logo leaves the key question unanswered.

Which official source controls the check?

For U.S. consumers, the right source depends on the product. Many household products, toys, appliances, and electronics appear on the CPSC Recalls and Product Safety Warnings page. Use the FDA's recall information for FDA-regulated products, and check the separate FDA drug recalls page for medicines.

Manufacturers can be the first source of a genuine recall. The CPSC recall guidance describes a process that lets a firm report a defect and move quickly on a voluntary recall. A real notice doesn't have to arrive from a government email address.

Turns out, the displayed sender is weak evidence. A fake can imitate a government name, while a real manufacturer or retailer may contact customers from its own domain. Check the notice through a separate source.

Red flags in recall complaints, emails, and websites

One warning sign may have an innocent explanation. Several together mean you should stop and verify.

• Urgency: A countdown, threat, or 24-hour deadline tries to rush you.
• Money: Processing fees, shipping charges, gift cards, cryptocurrency, or wire transfers are serious warning signs.
• Sensitive data: A recall should not need your password, one-time code, bank login, or full Social Security number.
• Thin product details: The notice names a broad product category but gives no model, lot, date, or hazard.
• Link problems: Shortened links, misspelled domains, unexpected QR codes, and attachments can lead to fake pages or malware.
• Compensation bait: "Claim $500 now" or "your lawsuit payment expires today" is not proof that you qualify for a recall remedy.
• Software demands: A recall doesn't require remote access, a browser extension, or a command pasted into your device.
• Conflicting details: The product photo, model, recall date, or remedy doesn't match the official listing.
• Social-only claims: A video or screenshot has no link to a government, manufacturer, or retailer page.

Typos can expose a fake, but grammar is a weak test. Clean branding isn't proof, and neither is HTTPS.

How to verify a product recall notice

Don't use a suspicious message to verify itself. Open a fresh browser tab or the retailer's official app.

1. Save the evidence safely. Take a screenshot and save the message, sender, date, phone number, QR code, and displayed web address. Don't open an attachment just to preserve it.
2. Open the appropriate database. For a CPSC or FDA search, type the agency address yourself. Search for the exact product name, model, serial number, or lot code.
3. Read the full listing. Compare the hazard, affected units, sale period, recall date, and remedy. A brand-name match proves very little.
4. Contact the manufacturer separately. Use the website or phone number on the packaging, an earlier order record, or a trusted search result. Ask whether the specific message and remedy are genuine.
5. Send only the proof the confirmed remedy requires. A receipt, shipping address, or product photo may be reasonable. Never provide a password, one-time code, or bank login.
6. Report the attempt. The FTC's phishing guidance explains common traps. You can also submit a report through ReportFraud.ftc.gov.

To be honest, a missing database result doesn't prove fraud. A notice may be new or limited to a manufacturer or retailer, so confirm it directly before taking action.

If you clicked, shared information, or paid

Your next step depends on what you did. Act promptly.

• You only opened the link: Close the page, deny unexpected permissions, and don't download anything. Install security updates and run a trusted device scan.
• You entered a password or one-time code: Change the password through the real website or app, sign out of other sessions, and turn on multifactor authentication.
• You shared card or bank details: Call the issuer using the number on your card or in its official app. Ask what account protection or account change is appropriate, then watch for unauthorized transactions.
• You gave away identity information: Consider a credit freeze with the major credit bureaus and review your accounts for unfamiliar activity.
• You sent money: Contact the bank, card issuer, or payment service immediately. Say the payment was connected to fraud, and save the transaction records and communications.

The FTC's general scam guidance can help with reporting and recovery steps. Speed matters most after a login or payment disclosure.

When an unusual recall remedy is still legitimate

Some official recalls ask consumers to cut a power cord, take apart a toy, destroy an item, or send a photo before receiving a replacement. The CPSC recall page includes examples of these instructions.

Thing is, an unusual request still doesn't prove that a message is genuine. Confirm the exact product, remedy, and contact method in the official listing before changing or destroying anything. Never follow a destructive instruction that appears only in an unverified text or email.

A recall remedy and legal compensation are separate matters. A listing may offer a refund, replacement, repair, or another corrective action, but it doesn't by itself promise damages or establish a class-action payment. Treat any fee for a supposed payout as a major warning sign.

Common ways recall scams appear

A QR code on a notice. The FTC warns that a scam QR code can send you to a fake site designed to steal your money, personal information, or both. Scan only after checking the notice through a source you opened independently.

A marketplace message. An alert inside a shopping account still deserves a separate check through the platform's official app or website. Don't move the conversation to a personal email address or pay outside the platform's normal process.

A call from "CPSC" or a law firm. Hang up and find the organization yourself. A caller who demands a wire transfer, gift card, password, or immediate legal fee isn't giving you a safe way to verify the claim.

Questions consumers often ask

Do real recalls ever ask for a photo?

Yes. Some remedies require proof that a product was destroyed or disabled. Follow that instruction only when it matches the official recall record or a manufacturer page you verified independently.

Do official recall notices always come from a government email address?

No. Manufacturers, retailers, and recall administrators may contact affected customers. A government-looking sender can still be forged, so the official listing matters more than the displayed address.

What if I cannot find the product in a recall database?

Don't pay, reply with sensitive information, or follow destructive instructions. Contact the manufacturer through a separate channel and ask whether the notice is genuine.

Is HTTPS proof that a recall website is real?

No. HTTPS encrypts the connection, but it doesn't prove who operates the site or what the site will do with your information.

Open a new tab now. Search the exact model on the CPSC or FDA site, compare the hazard and remedy, and contact the manufacturer independently if anything is missing. Report a suspicious notice to the FTC.