PUSHED in Action — Examples
Practice Identifying PUSHED Tactics
Let’s walk through several real-world examples and identify the PUSHED tactics in each. This is exactly what you’ll do in your head when you receive suspicious messages.
Example 1: The “Boss” Email
Hey,
I'm in a meeting and can't talk. I need you to purchase some gift cards for a client appreciation event. Get 5x $200 Amazon cards and send me the codes ASAP. Will reimburse you today.
Don't mention this to anyone yet — it's a surprise.
Thanks,
Sarah
PUSHED Analysis:
Key red flags:
- Gift cards are almost never used for legitimate business purposes
- “Don’t mention this to anyone” is an isolation tactic
- “Can’t talk” prevents you from calling to verify
- The email domain doesn’t match the company’s real domain
What you should do: Call or text Sarah directly using contact info you already have (not from this email). If this were real, she’d appreciate you checking.
Example 2: The Package Delivery Text
PUSHED Analysis:
Key red flags:
- The domain is NOT usps.com (it’s usps-delivery-update.com)
- USPS doesn’t typically send SMS about failed deliveries
- Were you actually expecting a package?
What you should do: Go directly to usps.com and use the tracking number from your original order confirmation. Never click links in unexpected delivery texts.
Example 3: The Dream Job Offer
Hi!
I'm a recruiter and your profile really impressed us. We have a remote position paying $150k-200k with flexible hours and immediate start.
The role is perfect for your background. Are you interested?
We need to fill this quickly, so please respond today if you'd like to discuss.
PUSHED Analysis:
Key red flags:
- Too-good-to-be-true salary range
- Domain is “linked-in-recruiting.com” not linkedin.com
- Vague about the actual company and role
- Creates urgency around responding
What you should do: Look up the recruiter on the actual LinkedIn website. Verify the company exists and is hiring. Real recruiters won’t pressure you to respond immediately.
Example 4: The Bank Fraud Alert
PUSHED Analysis:
This one is tricky: Banks DO send fraud alerts like this. So how do you tell?
Key verification step: Do NOT call the number in the text. Instead:
- Call the number on the back of your Chase card
- Log in to the official Chase app or website
- Check your recent transactions there
If it’s real fraud, your bank will have a record when you contact them directly. If it’s a scam, calling their fake number gives them access to you.
Example 5: The “Hi Mom” Text
PUSHED Analysis:
Key red flags:
- “Don’t call my old number” prevents verification
- Zelle payments are instant and non-reversible
- Vague about the actual problem
- Playing on parental instinct to help
What you should do: Call your actual child at their known number. If you can’t reach them, try another family member who might know where they are. NEVER send money based on a text from an unknown number.
Interactive Exercise
Look at the following message and identify all the PUSHED tactics present:
See Answer
Key Takeaways
- Real attacks usually combine multiple PUSHED tactics
- Practice identifying tactics by asking: “What emotions is this trying to trigger?”
- The strongest attacks combine authority (P), urgency (U), and high-stakes (H)
- When you feel PUSHED, verify through a channel the attacker doesn’t control
- “Don’t tell anyone” and “Don’t call them back” are major red flags