The PAUSE rule

The one idea

Every scam needs speed. Nobody transfers savings to a "safe account" after a good night of sleep — they do it in the ninety seconds a caller keeps shouting that money is leaving right now. PAUSE is a pre-decided script for exactly that moment:

• P — Pressure check. Name what they are doing: "This person is rushing me."
• A — Ask what action they want. Click, pay, share, approve, install? The ask is the scam.
• U — Use a trusted route. Hang up. Open the official app or call the number on your card.
• S — Separate proof from story. A name, an accent, a reference number is a story. A balance you check yourself is proof.
• E — Escalate. Tell the bank through official channels; tell someone you trust.

Compare:

Caller: "Your account is compromised, we must move your funds NOW." You: reads out OTP.

versus

Caller: same script. You: "If this is real it will survive a pause. I am hanging up and calling the fraud line on my card."

Why it works

A real request survives verification. Only fraud collapses when you slow down — the entire attack is built on not giving you time to think. That asymmetry is the whole lesson: delay costs a real bank nothing and costs a fraudster everything.

Try it now

Take this real script: "SARS here. Your refund fails unless you confirm your banking details in the next 10 minutes." Write your PAUSE response, one line per letter. Name the pressure, name the ask, name the trusted route you would use instead.

Your win today

You have a five-step script that turns panic into procedure. A real request can survive a pause.