A genuine Credda request names a person you know and one specific job, and asks you whether it happened. If it asks you for anything else, it is not us.
What a real request looks like
It comes from a credda.io address.
The subject line names the person and the job, for example: Did Sam Okafor deliver "Chiller install, back room"?
Every link in it opens a page on credda.io.
It says the link expires in 30 days.
It says you do not need a Credda account.
It names one record you should recognize, or a short list of them.
What a real request never does
It never asks for a password. Not yours, not anyone's.
It never asks for card details, bank details or payment of any kind.
It never asks for your passport, driving license, National Insurance or Social Security number, or a photo of any document.
It never requires you to create an account before you can answer.
It never asks you to move to WhatsApp, to phone a number in the email to "verify your identity", or to install anything.
There is no fee for confirming, at any point, for anybody.
Clicking the link does not answer for you
The yes and no buttons in the email do not record anything. They open a page on credda.io with your answer pre-selected, and nothing is written until you press the button on that page.
This is built that way on purpose, because corporate mail scanners and inbox preview tools open every link in a message the moment it arrives. If the button in the email had recorded your answer, a scanner would have confirmed things on your behalf.
So if a message tells you your answer has already been recorded because you opened it, that is not how Credda works.
Why you got it, and why that is the check that matters
Credda does not cold-email people. Every message you get about somebody else is there because that person entered your address against a specific record.
That gives you a simple test: do you recognize the person and the job? A care agency coordinator who reads "Did Dawn Fletcher cover the Tuesday evening round, 14 July" and remembers Dawn covering that round has all the confirmation she needs. A dentist who reads a name she has never heard of, about work she never commissioned, has her answer too.
If you are not sure
Do not use the links in the message. Instead, contact the person it claims to be from, using a number or address you already had for them, and ask whether they sent it. Or forward the message to support@credda.io and ask.
Neither costs you anything and neither is treated as an answer.
If you genuinely do not recognize it
The decline options include "I do not recognize this work or the person who sent it" and "I am not the right person to ask about this". Both are complete answers, both need no explanation, and both stop the chasing for that record.
Nothing is recorded against anyone when you decline, so declining something you do not recognize costs the sender nothing except an unconfirmed record. If somebody is trying to build a record on your name, declining is exactly the right response.