Loading…
Loading…
Clear, direct answers to the questions people ask when something feels off.
No. A genuine bank will never ask you to move your money to a 'safe account'. This is one of the clearest signs of a scam.
An unsolicited job offer arriving by WhatsApp from an unknown number is almost always a scam, usually a task scam or fee scam.
No. Police and government agencies never demand payment in cryptocurrency, gift cards, or by transfer to a 'safe account'.
No. A genuine hotel won't ask you to 're-verify' full card details or codes via WhatsApp, SMS, or email links.
No. Legitimate recruiters and employers never require you to pay fees, deposits, or 'equipment' costs to get hired.
Usually not. Crypto transactions are typically irreversible, and anyone guaranteeing recovery for an upfront fee is almost certainly a second scammer.
Disconnect the device from the internet immediately, then secure your banking and passwords from a different, clean device.
No. Legitimate recovery never requires an upfront fee. Unsolicited 'recovery agents' who guarantee results are almost always scammers targeting victims a second time.
Almost always. All real investments carry risk. 'Guaranteed' or 'risk-free' high returns are a hallmark of investment fraud.
Treat it as potential identity theft: secure your accounts, set up fraud alerts, consider replacing the document, and report it.
Unsolicited Cash App requests or 'accidental payment' refund requests are very commonly scams. Verify before sending anything.
If a caller urges you to send money via Zelle to 'protect your account', that is a scam — your real bank will never do this.
Yes, most likely. Scammers send fake PayPal invoices to trick you into calling a fake support number or into paying for something you didn't buy.
Unsolicited delivery texts asking you to pay a fee or click a link to reschedule are very often phishing scams, even if they look official.
Someone is trying to log into your account or reset your password. Do not share the code with anyone — this is how account takeovers happen.
Almost always. The 'overpayment cheque' is a classic fraud — the cheque bounces days later and you've already sent back real money.
Yes. SIM swapping moves your number to a scammer's SIM, letting them intercept your calls, texts, and authentication codes.
No. All 'send crypto to receive more back' giveaways are scams, regardless of which celebrity or brand appears to endorse them.
No. Unsolicited direct messages offering to recover your lost money are a second scam targeting people who have already been victimised.
This is a major red flag. Landlords who refuse or are unable to let you view a property before paying are a very common scam pattern.
No. Legitimate charities accept standard payment methods. Any request for gift card donations is a scam.
Unsolicited calls about your car's warranty — especially claiming it has 'expired' or is 'about to expire' — are very frequently scams.
Pig butchering is a long-running investment fraud where scammers build a trusting relationship before persuading victims to invest in a fake platform and draining their funds.
It is a significant red flag. Genuine romantic connections online should be able to video call; repeated excuses are a common scammer pattern.
Sometimes. Report to your bank immediately — speed greatly improves your chances, and in many countries authorised push-payment fraud now has formal reimbursement rules.
Treat it with caution. Unexpected customs-fee texts with payment links are a well-known phishing method — verify through official channels only.
Yes. Microsoft, Apple, and other tech companies do not make unsolicited calls about viruses or problems on your device.
Almost certainly. Offering to pay more than the listed price and asking you to refund the difference is a classic overpayment scam.
No. You cannot win a lottery or prize draw you didn't enter. Messages claiming otherwise are scams designed to collect fees or your personal details.
Almost always not. Genuine government grants require an application process — unsolicited messages claiming you've automatically been approved are a scam.
Yes. Allowing your bank account to be used to move criminal money is a serious crime, even if you did not commit the original fraud.
Approach with serious caution. Social media ads for investment platforms are a leading route for investment fraud and are not vetted for legitimacy.
There is a real risk of fake, invalid, or already-used tickets. Buy only from official sources or reputable authorised resellers.
Pet purchase scams are extremely common online. Before paying, always visit and see the animal in person at the seller's premises.
No. Tax authorities do not threaten arrest by text or phone. This is a government-impersonation scam.
No. Any CAPTCHA or 'human verification' step that asks you to paste something into a Run dialog or terminal is a malware delivery technique, not a real CAPTCHA.
Almost always. Unsolicited payment requests or transfers from people you don't know are a well-known fraud method — do not send money.
Not automatically. Fake QR code stickers placed over legitimate ones are a known fraud — always verify the URL before entering payment details.
It may be. These emails often impersonate real services to panic you into calling a fake number or clicking a link — check your actual account before doing anything.
Yes. Caller ID can be set to display any number or name, so a familiar-looking number on your screen does not confirm who is calling.
It may be. Legitimate debt collectors follow rules about verification and acceptable payment methods. Demands for immediate payment by gift card, wire, or crypto are scam signals.
Often yes. Unexpected refund notifications are used to trick you into sharing bank details or clicking a link to a phishing page.
Very likely. Legitimate employers supply necessary equipment or reimburse verified costs — paying upfront for equipment to get a job is a well-known scam pattern.
No. Any airdrop or promotion that requires your seed phrase or private key is a scam — entering it will drain your entire wallet.
Almost certainly. Requests for gift cards from an online romantic partner — with any explanation — are one of the most reliable signs of romance fraud.
No. A cheque appearing to clear is not a guarantee of payment — it can still bounce days later, leaving you responsible for any money you spent.
Yes. Legitimate lenders deduct fees from the loan — they never ask you to pay an upfront fee before releasing funds.
Usually not. Unsolicited texts claiming you owe a toll and asking you to click a link are a widespread phishing scam — verify through the official toll operator only.
Almost always. These impersonation emails are one of the most common tech-support scam formats — do not call the number or click any link.
Be cautious. QR codes in unsolicited emails are increasingly used to bypass email security filters and direct you to phishing pages.
Treat it as suspicious. The 'grandparent scam' and variants convince people a relative is in trouble and needs emergency money — verify directly before sending anything.
Yes. Fake recruiter profiles on LinkedIn are used to deliver job scams, phishing links, pig-butchering investment fraud, and corporate espionage.
Almost certainly. An unusually cheap rental combined with a request for deposit before viewing is the clearest pattern of rental fraud.
Treat it with caution. These texts are a common phishing method — verify by calling your bank directly using the number on your card, not a number in the text.
Not directly — but your phone number is a starting point for SIM-swap attacks, phishing calls, and account-takeover attempts that can lead to financial loss.
Approach with serious caution. Unsolicited invitations to investment groups on messaging apps are one of the most common routes into investment and pig-butchering fraud.
They may be, but it is worth checking. Fraudulent collectors exist alongside legitimate ones — verifying the charity before donating protects you and your money.
No. You cannot win a lottery you didn't enter. Letters, emails, or calls claiming otherwise are prize-notification scams designed to collect fees or your personal details.
Treat it as suspicious. Fake 'undeliverable package' texts are among the most common smishing scams — verify only through USPS's official website.
Many mystery-shopper offers circulating by email or social media are scams. Genuine mystery-shopping exists but never requires you to send money or wire a portion of your pay.
Treat it with caution. Unsolicited voicemails about a missed delivery — especially ones that ask you to call back or pay a fee — are frequently smishing or vishing scams.
Yes. Identity documents in the wrong hands can be used to open bank accounts, take loans, or apply for credit in your name — sometimes months after the theft.
Almost certainly. This is the CEO or boss impersonation scam — a scammer pretends to be your manager and asks you to buy gift cards on their behalf.
It is a strong red flag. Legitimate employers use professional platforms or phone for interviews — Telegram-only hiring processes are associated with job and task scams.
Saying 'yes' alone is unlikely to authorise a transaction, but scammers may record your voice to use in fraudulent 'voice signature' claims — it is safer to hang up on suspicious calls.
Treat it with caution. Customs-fee phishing emails are extremely common — verify any duty claim only through the official carrier or customs authority website.
No. A cheque arriving before you have done any work is a classic sign of an overpayment or advance-fee job scam — do not deposit it or spend the funds.
No. Telegram groups offering to recover lost cryptocurrency are almost always a second scam targeting people who have already been defrauded.
Treat it with caution. Banks do sometimes send verification emails, but phishing emails that mimic them perfectly are extremely common — always verify through the bank's official app or website.
A QR code itself doesn't steal data, but it can direct you to a phishing website or prompt a malicious download — the risk lies in what you do after scanning.
Yes. Being asked to receive money and pass it on is money-mule recruitment — it is illegal and you could face criminal liability, regardless of your feelings for the person.
Treat it with caution. Fake payment-failed texts impersonating streaming services are a common phishing method — verify only through the official app or website.
Yes. Caller ID spoofing lets scammers display any number they choose, including your bank's official number.
Possibly. Urgent wire-transfer emails or messages appearing to come from senior executives are a major fraud category called Business Email Compromise.
Almost never. Asking someone to pay a debt, fee, tax, or fine with gift cards is a near-universal scam signal.
It may be. Smishing texts imitating couriers like UPS, FedEx, DHL, or Royal Mail are extremely common and often lead to credential or card-detail theft.
Yes. Fraudsters can clone someone's voice using a short audio sample and then call you pretending to be a family member or colleague in distress.
Often yes. Fake online shops advertise popular products at extreme discounts, take payment, and either send counterfeits or nothing at all.
Yes. Zelle payments are nearly instant and generally irreversible, making it a frequent tool in bank-impersonation, marketplace, and romance scams.
No. The IRS does not initiate contact by text message. Any text claiming to be from the IRS about a refund or penalty is a scam.
No. Celebrity-endorsed crypto investment videos circulating on social media are almost always deepfake scams designed to steal money.
It depends. Legitimate companies do offer card-backed free trials, but some use them to trap people in expensive subscriptions that are very hard to cancel.
Crypto-only payment for a service is a significant red flag. Legitimate service providers rarely require cryptocurrency as the sole payment method.
Almost certainly yes. Fabricated screenshots of profits are trivially easy to produce and are a standard tool of investment fraud groups on Telegram.
Quite possibly. Older adults are disproportionately targeted by phone fraud, including grandparent scams, tech-support fraud, and Medicare impersonation.
It is very likely a scam. Unsolicited scholarship or visa emails asking for fees or personal documents are a well-known category of education fraud.
Often yes. Urgent disconnection calls demanding immediate payment by gift card, wire, or crypto are a very common utility impersonation scam.
Yes, in several ways — including account takeover, fake payment scams, and tricking you into sending money voluntarily.
This is a major red flag. Asking for cryptocurrency is one of the clearest signs of a romance scam, often linked to pig-butchering fraud.
A QR code itself cannot run code, but it can direct your phone to a malicious website that tries to download malware or phish your credentials.
Yes. Cash App flipping — where someone claims to multiply your money in minutes — is always a scam. No such investment exists.
No. Immigration authorities do not call people demanding immediate payment to avoid deportation. These calls are scams targeting immigrant communities.
Many are scams. Genuine remote data-entry work exists, but a large proportion of online postings are fee scams, task scams, or money-mule recruitment.
Not entirely. While PayPal's buyer protection is strong, sellers face risks from fraudulent chargeback claims and overpayment scams.
No. Paying a fee to receive a prize is the defining feature of an advance-fee lottery scam — genuine prizes never work this way.
It may not be. Fake charity appeals surge after major disasters — always verify a charity's registration before donating.
Not always, but it depends heavily on context. A legitimate employer needs bank details to set up payroll — but asking for full account credentials or requesting you receive and forward payments is a scam.
If it threatens immediate suspension unless you call a number or pay a fee, it is a scam. Social Security is never suspended by phone call.
Yes. Email spoofing lets criminals send messages that appear to come from your address without ever accessing your account.
Quite possibly. Unlicensed online casinos that block withdrawals and demand extra fees or wagering requirements are a recognised form of gambling fraud.
Be cautious. Your friend may genuinely believe in it, or may themselves be a victim trying to recoup losses, or — rarely — may be an unwitting recruiter for a fraud ring.
Yes. A photo of your ID can be used for identity theft, fraudulent account openings, loan applications, and SIM-swap attacks.
It may not be an outright scam, but deliberately difficult cancellation is deceptive practice — and in some jurisdictions, illegal under consumer protection law.
Often yes, especially in the US. Medicare and health insurance fraud involving unsolicited calls offering free or discounted equipment is widespread.
Only if you have verified the landlord's identity and physically viewed the property. Paying a deposit on an unverified rental is a major scam risk.
Yes. Caller ID spoofing allows anyone to display any number, including official government helpline numbers.
It may not be. Fake Amazon account-suspension texts are a common phishing attack designed to steal your login and payment credentials.
Having your email alone gives scammers limited but real power — including phishing, credential stuffing, and spam — though not direct account access.
High risk. Trading valuable in-game items outside official platforms removes all buyer protections and is a common route to theft and fraud.
Treat with caution. Many payday loan ads on social media lead to unlicensed lenders, clone firms, or fee-upfront loan scams.
Yes. Granting remote access to a scammer is one of the most direct routes to bank account takeover and large financial losses.
Almost certainly not. Steep discount ads for luxury brands on social media almost always lead to fake goods, no delivery, or card theft.
In most jurisdictions, binary options trading platforms targeting retail customers are either banned or heavily restricted, and many are outright scams.
No. Crypto giveaways broadcast on TikTok Live or any other platform, whether hosted by a real or impersonated account, are invariably scams.
In rare cases yes — through zero-click exploits targeting unpatched OS vulnerabilities — but the far more common risk is phishing links within texts.
Often yes. Vehicles listed well below market value by sellers who insist on deposit or full payment before viewing are a classic advance-payment fraud.
Treat with scepticism. Many Instagram weight-loss ads promote unproven products, misleading before-and-after images, or free-trial subscription traps.
Yes. Card-not-present fraud allows criminals to use your card number, expiry date, and CVV to make online purchases without ever holding the physical card.
Almost certainly yes. Transport fee requests for pets you have not seen in person are a signature element of online pet fraud.
Almost never. These are mass-sent sextortion scripts designed to exploit fear — the sender almost certainly does not have your browsing history or webcam footage.
Not always, but doorstep energy sales are a common route for high-pressure selling, slamming (switching without consent), and outright fraud.
Not if the bank account details have changed. Invoice fraud and payment diversion scams intercept supplier communications to redirect funds.
Probably not. Fake customs-fee texts are a widely used phishing method that impersonates national postal services or border agencies.
Contactless card skimming is technically possible but rare in practice. The more common fraud risks involve tampered ATMs and point-of-sale terminals.
Yes. Salary paid before any work is completed is a hallmark of money-mule recruitment and cheque fraud — not a genuine employment benefit.
Almost never. Unsolicited holiday or cruise prize notifications are a classic advance-fee and timeshare-sales scam.
It may be, but impersonation of mobile carriers is common. Verify through your provider's official app or website before clicking any link.
Government insulation and solar grant schemes are real, but cold calls or door-knockers offering them are frequently used to set up fraud or high-pressure selling.
Very likely yes. Strangers on Instagram who befriend you then introduce cryptocurrency investments are running a well-documented romance or investment fraud.
Yes. PayPal Friends and Family offers no buyer protection, making it a favoured tool for fraudulent sellers who want to prevent chargebacks.
No investment can legally offer guaranteed returns. Free investment seminars are often high-pressure sales events for dubious or unlicensed products.
Yes. Photo theft and profile cloning are used to defraud your contacts, conduct romance scams using your identity, or harass you.
Most are not. Paid forex signal groups are frequently either entirely fraudulent, wildly inaccurate, or a funnel into a regulated or unregulated brokerage that pays the operator a commission on your losses.
Many are. Legitimate paid review opportunities exist, but schemes requiring upfront fees, purchases, or personal financial details are scams.
Probably not. Apple ID lock texts are a widespread phishing tactic designed to steal your Apple credentials and personal information.
Yes. Even trusted marketplaces have fraud risks, particularly off-platform payment requests, fake escrow, and SNAD (significantly not as described) fraud.
Very likely. NFT projects marketed with passive income promises, staking rewards, or guaranteed price appreciation are almost uniformly a rug pull or Ponzi structure.
Small advance booking fees from verified tutors are common practice; large deposits to an unverified contact found via social media are a significant risk.
Yes, in some cases. Routing and account numbers can be used to initiate ACH transfers or set up fraudulent direct debits if other verification steps are bypassed.
It may be. Medical bill collection scams impersonate hospitals and debt collectors to pressure patients into paying fabricated or inflated debts.
It could be — fraudsters send fake bank alerts to trick you into calling a spoofed number or clicking a phishing link. Always verify through your bank's official app or card-back number.
Possibly — many banks now reimburse authorised push-payment fraud, but you must report it quickly. Refund rules and amounts vary by bank and jurisdiction.
Treat any unexpected NFC tag or link that launches a payment app with extreme caution — scammers plant these to redirect payments to their own accounts.
Asking for a cash deposit — especially into a random bank account — is a major warning sign. Legitimate sellers on established platforms use the platform's payment system.
Unsolicited payday loan texts are almost always either phishing attempts or lead-generator fraud. Never click the link or call the number provided.
These texts are almost always phishing scams. Genuine couriers rarely charge a small fee by SMS link for redelivery, and the link leads to a fake payment page.
No. Genuine immigration authorities do not call to demand immediate payment or threaten same-day arrest. This is a government impersonation scam.
It may be genuine, but fake debt letters are also used to extort payment. Always verify directly with the council before paying, not by contacting the bailiff listed.
Government benefits agencies almost never contact you about overpayments by SMS with a payment link. Verify any overpayment claim directly through official channels.
Unsolicited tax refund emails are almost always phishing. Real tax agencies communicate through official post or verified online portals, not by asking you to click a link to claim a refund.
Most 'Google account suspended' emails are phishing. Google communicates through your account's official security centre, not by asking you to click an external link to re-verify.
Yes. Microsoft does not charge for Windows operating system upgrades through browser pop-ups or unexpected calls. Pop-ups asking for payment are scams.
Domain expiry scam emails try to trick website owners into transferring their domain to a new, often expensive registrar. Always renew through your current registrar directly.
An unsolicited password reset email usually means someone is trying to take over your account or test whether it exists. Do not click the reset link — just ignore it or secure your account.
If the 'tech support' contacted you — by pop-up, cold call, or email — the request for remote access is almost certainly a scam. Legitimate support only uses remote tools when you have initiated the contact.
Almost certainly yes. Requesting money for travel to meet you is one of the most common romance scam scripts, regardless of how real and genuine the relationship has seemed.
A stranger who follows you, builds rapport, and then mentions a lucrative investment opportunity is almost certainly running a romance or pig-butchering investment scam.
Yes. Scammers who receive intimate or personal photos often use them to threaten you with exposure (sextortion) unless you pay money. Stop contact and do not pay.
Almost certainly yes. Military romance scams are extremely common — scammers use stolen photos of soldiers and claim deployment prevents them from meeting until they receive financial help.
It is a major red flag. Scammers want to move off dating platforms quickly to avoid being reported and to use a channel with fewer scam-detection tools.
Yes. Paid task or app-review jobs requiring daily quotas and deposits to 'unlock' higher earnings are task scams — there is no legitimate employment at the end.
Any job offer that requires you to pay a training, registration, or onboarding fee upfront is almost certainly a scam. Legitimate employers pay you, not the other way around.
Unsolicited influencer management or 'brand ambassador' offers frequently lead to task scams, upfront-fee fraud, or money-mule recruitment. Research any company carefully before agreeing.
If a bookkeeping job requires you to receive money into your personal account and forward it on, you are being recruited as a money mule — which is a criminal offence even if you did not know the funds were stolen.
Yes. Legitimate grant-writing employment or freelance contracts never require the worker to pay a finder's fee to secure the role.
Accepting only bank transfer is a major risk factor for rental scams. Legitimate holiday rentals on established platforms use platform-managed payments with built-in protection.
Selling a vehicle with a duplicate, salvage, or unclear title is a serious legal and financial risk for buyers — it may mean the car is stolen, financed, or legally undriveable.
Facebook Marketplace has no rental protection mechanisms, making it a common venue for fake apartment listings. Always verify the landlord's ownership before paying anything.
Asking for unusually large upfront payments — particularly from people with poor credit or who cannot view the property first — is a common rental scam tactic.
Paying before receiving any item from a private seller carries real risk. Use platforms with buyer protection and avoid bank transfers to strangers for high-value items.
Platforms promising fixed daily crypto returns are almost always Ponzi schemes or exit-scam platforms. Genuine staking returns are variable and far lower.
Always. No genuine government agency, court, utility company, or law enforcement body requests payment through a Bitcoin ATM. This is a signature scam tactic.
Yes. Legitimate investment platforms allow you to withdraw your funds subject to standard terms. A platform that blocks all withdrawals or demands fees to release money is fraudulent.
No. Celebrity crypto giveaway livestreams on YouTube are always scams using deepfake or cloned video footage. The celebrity has not endorsed anything.
Yes. Malicious 'connect wallet' buttons can prompt you to approve a transaction that grants the scammer unlimited access to your tokens.
Many are genuine, but fake campaigns exploiting disasters appear within hours of major events. Verify the campaign's connection to a real victim and prefer established organisations.
Genuine smart meter schemes exist in many countries, but cold callers asking for access to your home or upfront payment are often scammers impersonating energy companies.
No. Genuine prize draws do not require your credit card details to claim a win. A request for card information is a subscription trap or outright theft.
No. Any scratch card 'prize' requiring further purchases before you can claim is a scam. Legitimate prize redemption never requires buying additional products.
Legitimate charities do use telephone fundraising, but cold calls requesting direct debit details are also used by fraudulent organisations. Always verify before donating.
Yes. Current AI voice-synthesis tools can create a convincing clone of your voice from a few seconds of audio, which scammers use to call family members and request emergency money.
This is an emerging, high-impact scam. Deepfake video calls impersonating executives have been used to authorise large fraudulent bank transfers. Always verify payment requests through a separate, confirmed channel.
Usually yes, but fraudsters sometimes place fake QR stickers over legitimate menu codes. Check that the sticker looks original and verify the URL before entering any personal details.
QR codes in unsolicited emails from financial institutions are a growing phishing technique. Banks and payroll providers rarely need you to scan a QR code by email — verify first.
Public Wi-Fi QR codes can be cloned or faked by attackers to intercept your traffic. Verify with staff and use a VPN on any public network.
Some charges are legitimate subscription terms that were disclosed in small print. Others are subscription traps with deliberately hidden terms. Learn how to tell the difference and how to cancel.
Grandparent scams are extremely common. A caller pretends to be a grandchild (or their lawyer) in an emergency and asks for money urgently before the family finds out.
Unsolicited student loan forgiveness offers are almost always scams. Genuine forgiveness programmes are administered through official government portals — never by cold call.
Almost certainly. Legitimate employers sponsoring a work visa bear the sponsorship costs themselves. Any employer asking you to pay a fee to be sponsored is exploiting your immigration aspirations.
Yes. International students — often searching for housing remotely from abroad before arriving — are prime targets for fake rental listings and advance-fee property fraud.
No. Free V-Bucks, Robux, gems, or other game-currency generators are always scams designed to steal your account credentials, personal data, or money.
Almost certainly yes. Overly generous Steam trade offers are used to trick you into accepting deals that steal your valuable items through API hijacking or social engineering.
Account boosting services are against the terms of service of most games and carry real risks: your account may be banned, and services offering boosts often steal accounts.
Most influencer skin giveaways are genuine promotional activities, but fake giveaways impersonating popular streamers are common and designed to steal your account or personal data.
Almost certainly. Romance scams frequently begin inside online games, where players build emotional connections before requesting real-world money or gift cards.
Some comparison sites are legitimate intermediaries, but fake insurance websites sell ghost policies that leave you uninsured. Always verify the insurer is authorised before paying.
Offers of health coverage with no waiting periods and prices far below the market should be verified carefully — they may be fake policies or heavily restricted plans that do not provide real coverage.
After a SIM swap, scammers intercept your SMS codes and access accounts that use your phone number for two-factor authentication. Act immediately to regain control.
Genuine upgrade notifications do come from carriers, but smishing texts mimicking carrier brands are also common — designed to steal your details or redirect you to a fake upgrade site.
Yes. Scammers spoof your own number to try to confuse you or trick you into answering. Never trust any caller simply because the display matches your own number.
Genuine new-payee confirmation texts do exist, but fraudulent texts designed to confirm a payee the scammer already set up are also sent. Never use a number or link in the text — call your bank's official number.
Bank detail change requests by email are a top vector for business payment fraud. Always verify any bank detail change by calling your supplier on a known number before making any payment.
Facebook ads featuring doctor endorsements for weight-loss products are frequently fraudulent. The doctor may not exist, the endorsement may be fabricated, and the product rarely delivers its claims.
Yes. Invoice fraud involves sending convincing fake invoices using legitimate company names and branding, counting on busy accounts teams to pay without checking.
Cheap OBD diagnostic tools from unknown sellers may be counterfeit, non-functional, or in rare cases designed to harvest data from your vehicle's systems via a paired app.
You may be able to chargeback the payment if you paid by credit or debit card. Act quickly — contact your card issuer within days of realising the store is fake.
No. Fraudsters purchase Google Ads using brand names that closely resemble legitimate banks, investment platforms, or brokers. Always verify the URL before entering any details.
Unsolicited partnership emails can be advance-fee fraud, a pretext for data harvesting, or fake business opportunity scams. Verify independently before engaging.
Yes — texts about Amazon orders you did not place are phishing attempts designed to get you to click a link or call a number and hand over your account credentials.
Almost certainly yes. 'Accidental' transfers to strangers are a well-known scam opener: the money comes from a stolen account, and when you refund it, you are out of pocket.
Fake eBay emails are a major phishing category. They aim to trick sellers into shipping goods before payment is confirmed or buyers into entering credentials on a fake login page.
Unsolicited doorstep quotes for home improvements often use high-pressure selling, inflated prices, or upfront deposits that disappear. Always get multiple written quotes and check contractor credentials.
No trading bot can guarantee profit. Any service promising guaranteed positive returns from an automated crypto bot is either lying about its performance or is an outright scam.
Permanent absence from in-person meetings is one of the most consistent red flags in romance scams. Legitimate partners find ways to meet or at minimum do live, verifiable video calls.
Yes — 'wangiri' or one-ring scams use numbers in premium-rate ranges. Calling back can result in a large charge appearing on your phone bill.
Social media ticket sellers are a high-risk category — fake pages proliferate ahead of popular events. Always buy from the official venue, promoter, or a recognised secondary ticketing platform.
Some data removal services genuinely submit opt-out requests to data brokers, but many are ineffective, overpriced, or outright scams. Understand what you are buying before paying.
Many online psychic platforms exploit vulnerable people with vague 'personalised' readings, subscription traps, and escalating offers that extract large amounts of money over time.
Many unofficial websites charge facilitation fees to process applications you could submit directly to the government for free or at the official fee. Always use your national government's official passport portal.
Full upfront payment for coaching with no contract or trial period is a risk. Ghost coaching scams — where payment is collected and the coach disappears — are increasingly common online.
Seed phrase recovery services are almost exclusively scams. Anyone asking for your seed phrase will use it to steal your entire wallet — no legitimate service needs it.
Toll authority smishing texts are among the most reported fraud types. Genuine toll agencies send notices by post, not by unsolicited text with a payment link.
Cold call debt consolidation loan offers are a significant fraud risk — advance-fee fraud and phishing for financial details are both common in this category.
Genuine charities do use SMS donation campaigns, but disaster phishing texts impersonating charities appear within hours of major events. Always donate through the charity's verified official channels.
Unexpected negative balance notifications are often phishing attempts. Log in directly to your account to verify any real balance issue — do not act on a text or email link.
Most legitimate cashback sites are free to join. Portals charging an upfront membership fee should be researched carefully — some are pyramid-style schemes or simply collect fees with minimal real cashback.
Microsoft 365 payment and billing emails are heavily cloned by phishers. Always verify billing issues by logging in to your Microsoft account directly — never through a link in an email.
Phishing emails impersonating crypto exchanges with KYC (know your customer) verification requests are very common. Always log in to the exchange directly — never upload documents via an email link.
Yes — receiving an unexpected 2FA code means someone has your username and password and is actively trying to log in to your account. Change your password immediately.
Work-from-home medical billing jobs are frequently used as a vehicle for advance-fee fraud or to recruit money mules. Verify any offer through a credentialed healthcare staffing agency.
A random money transfer from an unknown person is almost always the first step in a scam — usually an overpayment or money-mule scheme.
Legitimate landlords communicate by various means, but a landlord who refuses any phone or video call and pushes for a deposit before you view the property is a major warning sign.
Fake DocuSign and Adobe Sign emails are a common phishing method. Verify the sender domain and log in directly — do not click the email link.
Texts prompting delivery feedback that include a link to claim a reward are often phishing attempts designed to steal card details.
Yes. No UK government body will call you to say your National Insurance number is compromised and demand you verify it or make a payment.
No. Celebrities do not contact members of the public directly on WhatsApp to give away prizes. This is a scam.
Texts claiming a benefits payment is waiting and asking you to click a link or confirm details are phishing scams imitating government benefit agencies.
Yes — receiving a second friend request from someone already on your friends list almost always means a scammer has cloned that person's account.
Unsolicited tutor job offers via email are frequently scams involving upfront fees, fake cheques, or money-mule recruitment.
Unofficial ticket resale sites vary widely in legitimacy. Some are licensed secondary marketplaces; others are outright scams that sell fake or non-existent tickets.
Most Instagram DMs claiming you won a brand giveaway are scams run from fake accounts imitating genuine brands.
Yes. This is the classic structure of pig-butchering — a romance relationship engineered to introduce you to a fake investment platform.
Legitimate lenders always conduct some creditworthiness checks. A 'no credit check' loan offer — especially one requiring an upfront fee — is almost always a scam.
Yes. QR codes on printed flyers can point to phishing pages, fake payment portals, or malware downloads just like digital QR codes.
No. Legitimate antivirus software and operating systems never display phone numbers to call. This is a tech-support scam pop-up.
In most countries it is illegal for a recruitment agency to charge job seekers fees. Any agency asking for payment upfront is a major red flag.
The password was obtained from a data breach. It does not mean your device is hacked — but you should change that password immediately.
Cold calls promising to cut your energy bill are often scams or high-pressure sales for overpriced switching services. Genuine tariff switching is done through regulated comparison sites.
Some vehicle history check sites are legitimate but charge per report. However, fake or misleading sites exist — verify the provider's credentials before paying.
Probably not. This is a variant of the grandparent scam using spoofed or cloned numbers. Verify directly before sending any money.
Not necessarily. An exclusively positive review profile — especially on a newly launched site — is a common feature of fake online stores.
Only if you initiated the action it authorises. One-time passcodes you did not trigger indicate someone else is trying to access your account.
Not always a fraud, but high-pressure door-to-door sales tactics are common and in some countries heavily regulated. Never feel obliged to buy on the spot.
Income-replacement claims attached to online courses are almost universally misleading marketing. Genuine education providers do not make financial guarantees.
Only use Facebook's built-in checkout for Marketplace purchases. External payment links sent by sellers are a common fraud vector.
Yes. Texts with voicemail notification links are a widespread phishing method — the link leads to a credential-stealing page or malware download.
Unsolicited emails claiming a distant relative named you in a will are an advance-fee fraud. Legitimate estate solicitors do not contact beneficiaries by cold email.
Yes. Sharing that code allows the scammer to create a Google Voice number linked to your phone, which they then use for fraud.
Not until verified independently. Fraudulent invoice redirection — also called BEC or APP fraud — is one of the most costly scams targeting businesses.
Possibly — but charity impersonation and crowdfunding fraud are common. Verify any charity's registration before donating.
It could be real but is more likely a scam. Always hang up and call your bank back using the number on your card — never use a number from the call.
Ads for crypto exchanges deserve extra scrutiny — fake or unregulated exchanges are advertised widely and can disappear with your funds.
Legitimate housing assistance is applied for through government agencies — not through social media ads, private websites, or individuals selling 'slots'.
Clicking alone is usually low risk if your device is updated, but some links can deliver malware silently. Check your device and monitor your accounts.
No. Pharmacies that supply prescription medication without a valid prescription are operating illegally and the products may be counterfeit or dangerous.
Yes. LinkedIn job listings are not all verified and fake postings are used to harvest personal data, collect fees, or recruit money mules.
Free home security system offers are almost always a high-pressure sales tactic involving long-term monitoring contracts or are outright scams.
No. HMRC does not send texts about council tax. Council tax is administered by local councils, and neither body initiates rebates by text with a link.
Almost certainly yes. Escalating transport and insurance fee requests for a pet that has not arrived are the signature of an online puppy scam.
No legitimate automated trading system is distributed through Telegram bots with profit guarantees. These are almost always investment fraud.
Emails claiming you have won a mystery prize from a major retailer are almost always phishing or lead-generation fraud using the brand's name without permission.
Almost certainly yes if it was unsolicited. Genuine broadband providers notify you by email or letter, not automated calls threatening immediate disconnection.
Free online competitions frequently collect email addresses to sell to marketers, enter you into subscriptions, or send phishing emails — read the terms carefully.
No. Allowing someone to use your account to receive or hold funds makes you a money mule — which is a criminal offence in most countries.
No. Cashier's checks can be convincing fakes that appear to clear initially but are later reversed, leaving you responsible for any funds you withdrew or forwarded.
Resale and arbitrage job offers that ask you to use your own money and accounts are usually fronts for money laundering or advance-fee schemes.
No. Bank employees are prohibited from sharing investment tips through private messaging groups. This is a common set-up for insider-tip investment fraud.
If you were not expecting a payment, treat it with caution — it may be a phishing email impersonating PayPal, or the start of an overpayment scheme.
Texts about traffic fines demanding immediate online payment via a link are almost always phishing scams. Genuine fines arrive by post.
Almost certainly not. Legitimate government grant programmes are not advertised through social media ads and never require upfront fees to apply.
Guaranteed debt clearance claims are false — no company can legally guarantee debt write-off. Many debt relief companies are scams that take fees while resolving nothing.
Almost always yes. Sending money to a new match is a recruitment technique — the money may be stolen and your account used to launder it.
Unsolicited scholarship offer emails are almost always scams designed to collect personal data or advance fees.
No. Legitimate exchanges deduct fees from your balance — they never require you to pay a separate tax or fee from outside the platform before withdrawing.
Texts about health-related government payments are frequently used as phishing lures. Verify any payment claim through official government portals only.
New coin launches carry extremely high fraud risk — rug pulls and pump-and-dump schemes are common and most new tokens fail or disappear.
No. Deepfake videos of news anchors promoting cryptocurrencies are AI-fabricated fraud — no legitimate investment is marketed this way.
Yes. No legitimate private seller or dealer requires a deposit before you view a car. This is a standard vehicle fraud tactic.
Likely yes. Student loan servicers are assigned by your loan authority — calls from unknown companies claiming to manage or refinance your student debt are often fraud.
Yes. No legitimate landlord requires cryptocurrency as a tenancy deposit. This is always a fraud.
Very likely yes. Domain renewal scams send invoices mimicking the look of official notices to trick website owners into paying an unknown registrar.
Almost certainly yes. Amazon does not make unsolicited calls about account issues. These calls are impersonation scams designed to steal your credentials or payment details.
Not necessarily. Fraudsters run sponsored ads on Facebook using cloned bank branding. Always verify investment offers directly through the bank's official website.
Unexpected tax refund texts are almost always phishing scams. Tax authorities communicate through your tax account or by post — not via SMS links.
Cold calls about urgent meter upgrades are often scams using utility company names to gain access to your home or financial details.
Paid tournaments exist on legitimate platforms, but many tournament scams collect fees and cancel the event or disappear with the prize pool.
No. Genuine delivery companies do not ask for card details by text. This is a delivery phishing scam.
Unsolicited emails advertising above-market savings rates from unfamiliar banks deserve verification before any deposit. Some are fraudulent clone firms.
No — accepting payment outside the platform's checkout removes all seller protection and is against the platforms' terms of service.
Not always, but many guest post outreach emails are link-buying operations or content spam campaigns that may harm your site's search reputation.
No. The NHS and Medicare do not contact patients to gather details for card replacement — this is an impersonation scam.
Yes. Pooled trading funds promising consistent daily returns on Telegram are unregulated investment fraud or Ponzi schemes.
No. Legitimate PayPal account verification is done inside your PayPal account — not by phone call. This is a vishing set-up.
Legitimate programmes exist (such as the Affordable Connectivity Program in the US), but many ads exploit the programme's name to collect personal data or fees.
No. Legitimate mining pools do not charge joining fees — they take a small percentage of mined rewards. Any upfront joining fee is a fraud signal.
This profile description is a very common cover story in romance fraud. Be very cautious before developing trust with someone fitting this description.
No. Gift cards are never a legitimate payment method for anything outside their intended app stores. Any request to pay using them is a scam.
These posts are almost always engagement-farming scams that have nothing to do with a real lost pet or a genuine prize.
Requiring an NDA before disclosing any investment details is a manipulation tactic, not a standard practice. It creates pressure and discourages you from seeking advice.
Move-to-earn apps exist, but many are short-lived crypto schemes that lose value quickly. Verify the app before investing time or money.
Claims management calls about PPI or car finance may be legitimate or may be fee-charging scams. Genuine claims do not require upfront fees.
No. Parcel forwarding jobs are one of the most common forms of reshipping fraud, used to launder goods bought with stolen payment cards.
Not necessarily. Many people unknowingly promote fraudulent platforms after being convinced by fake early returns. Verify independently before depositing anything.
Legitimate immigration professionals accept traceable payments. Cash-only requests are a significant fraud indicator in immigration services.
No. Websites cannot scan your device. Pop-up scan results showing virus detections are fake alerts designed to frighten you into downloading malware or calling a scam number.
Genuine couriers do not request ID copies sent by email or messaging app. Signature confirmation is the standard — anything beyond this is suspicious.
No. Forex and trading signal groups guaranteeing profits are almost universally fraudulent or deceptive marketing for unregulated brokers.
No. Supplements are not approved as cures for diseases. Health claims implying a product cures, treats, or prevents a medical condition are illegal in most countries.
Yes. An app requesting permissions beyond what its function requires is a significant privacy and security red flag.
Equity crowdfunding carries high risk of total loss. Platforms must be regulated, but that does not mean the businesses listed will succeed.
Bank drafts and money orders can be counterfeited convincingly. Never spend or forward funds until your bank confirms full and final clearance.
Genuine customs charges are possible but are communicated officially. Email links requesting card details for customs fees are almost always phishing.
Overpayment refund calls and texts from energy companies are frequently phishing attempts. Verify by logging into your account directly.
Third-party account recovery services carry significant risk of account theft. Use only the official account recovery tools provided by the game developer.
Streaming service payment failure texts are a very common phishing method. Verify any issue by logging into the service's official app or website.
Reputable breach-check tools are safe. Only use well-known, established services — fake equivalents harvest the very credentials you are trying to protect.
Reputable private sellers do not need to see your government ID for a standard cash sale. This is an unusual request that warrants caution.
Yes. Gift exchange chain messages on WhatsApp and social media are pyramid schemes. Participants almost always lose their gift and their money.
Search ads for financial services are heavily targeted by fraudsters. Always navigate to the financial institution's official website directly rather than via ads.
Use the same caution you would with any stranger. In-person approaches with business proposals are used in confidence tricks and advance-fee fraud.
It could be. Unsolicited parcel locker codes are sometimes sent by scammers to manipulate you into visiting a location or revealing personal details.
Not necessarily. Fake BNPL services harvest payment details upfront and never deliver goods or credit.
Almost always yes. Requests to handle refunds off-platform remove all the protections the marketplace offers you as a seller.
Be very cautious. Your friend's account may have been hacked, or they may unknowingly be promoting a scam platform.
Probably not. Cold calls offering to find unclaimed government benefits are usually data-harvesting or advance-fee scams.
Full upfront payment before any service is delivered is a red flag for visa-agency fraud, especially if the agency cannot be independently verified.
Deliberately hard-to-cancel subscriptions may not always be scams, but hiding cancellation routes is deceptive and often illegal under consumer protection law.
Certificates from unaccredited or fake platforms have no recognised value and are sometimes sold purely to extract money from job seekers.
Free seminars used as a funnel to sell high-priced mentorship programmes or courses are a well-documented scam format — the 'free' event is the sales pitch.
Not necessarily. Your friend may have been misled themselves, or their account could be compromised — always verify the employer independently.
Unusual messaging patterns can indicate someone operating across time zones as part of a scripted romance scam operation.
Yes. No legitimate private seller accepts gift cards as payment for goods. This is a defining sign of a scam.
No. Verification badges confirm identity at the time of approval but do not prevent accounts from being sold, compromised, or used deceptively after verification.
Legitimate gig platforms cover background check costs themselves or use trusted third-party services at no charge to workers.
Yes. Social media platforms do not phone users to warn of account closure, and legitimate suspension notices never demand immediate action via a call.
Generally yes if the app is legitimate, but some apps use misleading dark patterns, unexpected recurring charges, or prey on children making accidental purchases.
No legitimate debt collector requires payment by prepaid card or wire transfer. This is a hallmark of phantom debt scams.
Such claims require serious independent verification. Most retail investors cannot check the underlying assets, making these projects highly susceptible to fraud.
Cold-call pet insurance sales are rarely from genuine insurers — many are fake policies that take your premium but provide no real cover.
Many are fake. Engagement-farming competitions collect followers and shares but never award prizes, or they build audiences for later scam promotions.
Yes. Unsolicited refund calls that ask you to open your banking app are a well-known fraud format used to steal money.
No. Advance fee loan fraud is one of the most common financial scams — any loan that requires upfront fees before funds are released is fraudulent.
Yes. AI voice synthesis can produce convincing copies of real voices and is increasingly used to impersonate trusted callers.
Yes. Any earnings platform that requires a fee to unlock withdrawals is a task scam — the displayed balance is fictional.
No. Unreviewed ticket resale sites are a major source of counterfeit and non-existent ticket fraud, especially for high-demand events.
Be cautious. Genuine storage warnings come through the app's own settings interface, not through unexpected texts or pop-ups with payment links.
Older adults are disproportionately targeted by scammers. Protective conversations, call-blocking tools, and clear safe-word agreements are among the most effective defences.
Very unlikely. Abnormally high interest rates on a new or unknown crypto platform are a hallmark of fraud or a platform doomed to collapse.
Some are genuine, but door-to-door collection fraud is common. Always verify the collector's identity and the charity's registration before donating.
Very likely. Fake escrow services are one of the most common tools used in online vehicle purchase fraud.
Usually yes if it is an official sign, but scammers sometimes place fake QR code stickers over legitimate venue codes to redirect you to phishing pages.
Almost certainly yes. A landlord who refuses to provide a written lease is either operating illegally or, more commonly, collecting a deposit with no intention of providing a tenancy.
Account sales violate the terms of service of most games and platforms, and many third-party sales are fraudulent — the original account holder often reclaims the account after payment.
Yes. This request is designed to close your buyer protection window before any problem with the item is discovered.
Major verified student discount platforms are generally safe, but lesser-known sites may collect university credentials or sell your data.
A professional website alone is not enough to verify legitimacy — immigration consultants must be registered with a recognised regulatory body in your country.
Yes. This is a classic tech-support scam — no legitimate company monitors your computer remotely and calls you unsolicited about a virus.
In competitive rental markets some landlords do request proof of income, but the timing and method matter greatly — asking for full bank statements before any viewing is a major red flag.
Not always. Fake wallet apps do occasionally appear in official stores, and can drain your funds or steal your seed phrase.
Extreme caution is warranted. Celebrity and influencer crypto promotions have frequently preceded sudden collapses, leaving investors with near-worthless tokens.
Yes. This is money-mule recruitment, which is illegal even if you did not know the underlying source of the funds was criminal.
Only if it is regulated as a medical device and provided by a licensed clinical service. Many commercial health apps overstate their screening capabilities.
Be very cautious. Unsolicited messages about unclaimed pensions are frequently pension liberation fraud or cold-call pension scams.
Possibly yes. Repeated small requests are a deliberate tactic to build financial dependency gradually, making it harder to recognise the overall pattern.
No. Fake delivery notifications are one of the most widely distributed phishing methods used to steal card details and login credentials.
Almost always yes. Timeshare resale fraud specifically targets people who are already struggling to exit their contracts.
Be very cautious. Government digital ID communications are issued through official portals and pre-announced — unsolicited texts asking you to verify are almost always phishing.
Some are genuine, but fundraising fraud on crowdfunding platforms is common, and social sharing makes fraudulent campaigns appear more trustworthy than they are.
Treat it with caution. While genuine bank fraud alerts exist, scammers use the same approach to get you to a branch where a courier awaits to collect your card and PIN.
Only established regulated credit reference agencies are safe. Many lookalike 'free score' sites are data-harvesting tools or funnel you into hidden subscriptions.
Yes. No betting tipster can genuinely guarantee consistent profits — this claim is the defining hallmark of subscription fraud in the tipster industry.
Only if the site is a regulated, established service. This type of verification is genuine for financial services but is also exploited by fraudsters to steal your identity.
No. Private individuals cannot legally sell or arrange car insurance — this is a regulated activity. Any such offer is either a scam or a form of illegal 'ghost broking'.
Sometimes yes, but also a common phishing format. Verify the law firm and case independently before clicking anything or providing information.
It may be real, but this is also one of the most commonly spoofed phishing messages. Always update payment details by logging in directly, never via the link.
No. Shared premium accounts are either stolen, part of a credential-harvesting scam, or will be used to infect your device.
A small holding deposit to take a property off the market during referencing can be legitimate, but the rules on how much and when vary by country, and fraud is common.
Many are scams. Fake survey emails harvest personal data, redirect you to subscription sign-ups, or lead to phishing pages disguised as reward claim forms.
Yes. Internet service providers do not call customers to report router hacks and then request remote access — this is a well-known variant of tech-support fraud.
Yes. This is a reshipping mule scam, which typically involves handling stolen goods and can result in criminal liability.
Frequently yes. Insisting on a specific shipping company is a classic element of online purchase fraud, particularly for high-value items.
Some doorstep energy switching is legitimate, but the sector has a documented history of high-pressure mis-selling, forged consent, and sometimes outright fraud.
Yes. This is account takeover fraud — your contact's account has already been hijacked and scammers are now targeting yours.
Requesting a company registration number is normal in B2B transactions, but asking for director personal details or internal login credentials is not.
Yes. Free computer fix pop-ups are tech-support bait — they lead to malware installs, unnecessary software purchases, or remote access fraud.
Treat this with great caution. Bank account change requests in rental relationships are a common entry point for payment diversion fraud.
No. Genuine paid surveys and micro-tasks pay modest amounts — promises of high daily income are the starting point for task scams.
Not automatically. Advisers and accountants can themselves be defrauded or may recommend unregulated products that are not suitable or lawful to advise on.
Partly misleading and potentially fraudulent. Scammers use fake PayPal payment links to steal credentials or argue that a 'Friends and Family' payment grants no buyer protection.
No. Neither the IRS, HMRC, nor any other tax authority leaves threatening arrest voicemails. This is a widely known impersonation scam.
Only if the pharmacy is licensed by your national medicines regulator. Many discount online pharmacies sell counterfeit, substandard, or incorrectly dosed medication.
Treat with caution. While genuine claims management companies exist, the cold call format is heavily exploited for fee fraud and data harvesting.
No. Unsolicited pension transfer recommendations are one of the most financially devastating scam types. Never transfer a pension based on a cold call.
Almost certainly. Legitimate employers provide tools and training at their own cost — requiring workers to purchase starter kits is a defining sign of a scam.
No. Instagram and TikTok do not provide this data to third-party apps, so such apps are either harvesting your credentials or selling a fictional service.
Static charity tins in shops are usually genuine, but loose tins or collectors holding them outside can be fraudulent — always check for official permission.
Be very cautious. Most paid app review jobs found through unsolicited messages are task scams or money-mule operations.
No. Pop-up antivirus offers are among the most common methods of distributing malware and adware under the guise of protection software.
Genuine workplace syndicates exist, but online or social media syndicate invitations are often advance fee fraud.
Very likely. Legitimate overseas employers sponsoring foreign workers cover travel costs or sign a contract before any travel is undertaken.
In many jurisdictions cryptocurrency mixing is illegal or severely restricted because it is primarily used to obscure the origin of criminally obtained funds.
Very likely. Delivery fee texts are one of the most widely distributed phishing formats — the small amount makes victims less suspicious.
It could be. Fake hotel booking sites take payment and either provide no booking confirmation or generate a reservation that the hotel never received.
These are known as penny auctions. They are legal in some jurisdictions but are designed so that most bidders lose money — and some are outright fraudulent.
No. Private Facebook groups are a common distribution channel for investment fraud because the closed nature creates false credibility.
Proceed with caution. Many free trials that require a card automatically charge you after a short period, and some sites use the card details for unauthorised charges immediately.
Possibly. Account compromise and clone account scams use your friend's identity to send convincing emergency messages to their contact list.
Legitimate small business grants exist, but they are applied for — they do not arrive unsolicited by email or DM. Unsolicited grant messages are almost always fee fraud.
Only if the site uses Steam's official OAuth login. Many fake skin trading sites steal your Steam credentials via a convincing fake login page.
Do not act on it without calling your solicitor directly first. Conveyancing fraud is a major risk — scammers intercept emails and impersonate solicitors to divert completion funds.
Almost always no. Account recovery services for social media are typically scams that take payment without delivering results or steal your remaining account credentials.
Almost certainly not. Profit screenshots are trivially easy to fabricate or cherry-pick, and 'coaching' accounts primarily serve as funnels for investment platform fraud.
Smart meter rollouts are genuine government-backed programmes, but scammers impersonate energy companies in this context to gain access to homes or collect bank details.
If you did not change it, treat this as an urgent security incident — someone may have accessed your account and changed the credentials.
Almost certainly yes. This is one of the oldest and most consistent classifieds fraud patterns.
Almost always yes. Ecommerce automation services that promise passive income from managed stores are a well-documented investment fraud format.
Treat with caution. Government energy efficiency and home improvement grants exist, but the cold call format is heavily exploited by rogue traders and advance fee fraudsters.
It carries more risk than a secure private connection, but is generally safe if you connect to the bank's official app or HTTPS website — the main danger is connecting to a fake hotspot.
This exact profile — overseas military or professional who cannot video call freely — is one of the most consistent romance scam personas.
Illegal lending is a criminal offence in most countries. You have the right to protection and support, and your debt to a loan shark is not legally enforceable.
Very likely. Unsolicited invoices — sometimes called invoice fraud or billing scams — are sent hoping a busy accounts team will pay without checking.
No. You cannot win a lottery you did not enter. This is one of the longest-running advance fee fraud formats.
Rarely. Brand impersonation voucher posts are widely used to harvest personal data, spread malware, or grow fake pages.
No legitimate credit repair service can guarantee to improve your score. Services that make this promise are often scams that charge fees for work you can do yourself for free.
Often yes. Unsolicited rebate contacts are frequently used to harvest bank details or trick you into paying a small fee to receive a fictional refund.
Be very sceptical. LinkedIn is increasingly used to run professional-looking romance scams and investment fraud targeting high-earning professionals.
Yes. This is a variant of government impersonation and tech-support fraud. No legitimate authority contacts citizens this way.
Yes. This is a classic street-based confidence fraud known as the pigeon drop or found money scam.
Treat with serious caution. Cash-only car rental is highly unusual for legitimate operators and removes all your payment protection and fraud recourse.
No. AI chatbots are not regulated financial advisers and should never be relied upon for specific investment or financial decisions — doing so could cause serious harm.
Very likely. Requests to move off-platform remove all buyer and seller protections that the app provides.
No. Bitcoin ATMs are a leading cash collection tool for scammers. Once money is inserted, it cannot be recovered.
Treat it carefully. Legitimate product seeding exists, but cold email review-for-cash offers frequently lead to advance-fee or data harvesting scams.
Only share with the recipient. Screenshots of payments can be edited to show false amounts or statuses, and some contain financial data.
Cash-in-person is actually safer for high-value items — but be alert to robbery setups and counterfeit currency risks.
Yes. Being added without your consent to a WhatsApp investment group is the setup for a classic group investment fraud.
Yes. Unsolicited payment requests from people you don't know on Cash App, Venmo, or PayPal are either direct fraud attempts or money mule setups.
Often not. Many online certificate sellers have no accreditation and their qualifications carry no weight with employers or licensing bodies.
Almost certainly yes. Account-disabling threats sent by message are phishing attacks designed to steal your social media credentials.
No. Printed prize letters that say you have won a car, cash, or holiday are scams that require a fee to claim the non-existent prize.
No. Scammers routinely copy company branding to make fake job listings look legitimate.
Not unless it comes from a verified, well-known retailer. Free offers requiring card entry are frequent subscription traps or data theft operations.
These channels are almost always scams. They take payment for services they cannot deliver, or the 'service' itself is illegal.
It is a major warning sign. Rapid emotional bonding — 'love bombing' — is a deliberate technique used in romance scams.
No. Unsolicited bursary or grant emails targeting students are phishing attacks or advance-fee scams.
No. Legitimate debt collectors must provide written validation of any debt on request — if they refuse, it is likely a scam.
Yes. Requesting friends-and-family payment for tickets removes all buyer protection and is a classic scam signal.
It could be. Scammers send fake bank texts to trick you into approving a payee they control — your bank will never rush this decision.
Yes. Paid review jobs are a common cover for task scams that eventually demand you deposit money to unlock earnings.
Frequently yes. Fake car listings on social marketplaces are designed to extract a deposit before you ever see the vehicle.
It depends on the platform. Authorised fan-to-fan resale sites offer buyer guarantees; unofficial sites and social media resellers frequently deliver invalid or non-existent tickets.
Yes. Free will-writing cold calls are lead-generation tools designed to upsell expensive and sometimes unnecessary legal or financial products to older adults.
It may be a dark pattern. Some subscription boxes make billing terms clear; others bury auto-renewal in hard-to-find small print.
Yes in the vast majority of cases. Real estate seminars promising guaranteed returns or 'insider' methods charge large fees for generic or worthless information.
No. Tax authorities send formal written notices by post and do not threaten immediate prosecution in an email with a payment link.
Not necessarily a scam, but it is a serious legal violation — and in rental fraud, missing documentation is also used to pressure tenants into substandard arrangements.
Yes. An unexpected utility bill in your name is a strong indicator that your identity has been used to open accounts fraudulently.
Not necessarily. Professional website design is cheap and easy — it does not verify regulatory compliance or the safety of your funds.
Usually not. Cold calls about free solar panels through a government scheme are frequently sales calls or scams harvesting your personal data and a deposit.
Yes. Refund scams impersonate tech companies to trick you into giving remote access and then steal money from your bank account.
Yes, without exception. Western Union is irreversible and untraceable — requesting it for a rental deposit is a guaranteed red flag.
Yes. AI-written phishing emails have no spelling errors, mimic writing styles accurately, and are increasingly hard to distinguish from genuine messages.
It depends. Scammers impersonate landlords to intercept rent payments — always verify any change in payment instructions directly.
Yes in most cases. Pre-approved business loan emails sent out of the blue are almost always advance-fee or credential phishing scams.
Likely not. Official parking fines arrive by post to the registered keeper — not by text with a payment link.
Yes. Scammers use cheap internet calling services to impersonate banks from anywhere in the world.
Almost certainly yes. Legitimate couriers do not hold parcels for storage fees payable by text link.
Very often. Doorstep roofers and pavers who say they have leftover materials and offer a large discount are frequently running cowboy trader scams.
Not necessarily. Some romance scammers operate over months without any financial request, building trust before a large single ask or a more elaborate scheme.
No. Fake crypto wallet apps make it through both platforms' review processes and steal funds from users who install them.
Yes. This is the classic Microsoft tech support scam. Microsoft does not monitor individual computers and will never call you about errors.
No. Guaranteed-approval loan advertisements are advance-fee scams that collect upfront fees and never release funds.
Yes. QR codes can link to any URL — including fake login pages designed to steal your credentials.
Treat it as suspicious. LinkedIn is heavily targeted by investment and romance-investment scammers who use professional profiles to build credibility.
In a business context, a sudden switch to crypto payment is a major red flag and often indicates fraud.
No. Legitimate insurers provide a full policy schedule and certificate before or immediately after payment — any that refuse are likely ghost brokers.
Treat it as suspicious. Flash sale urgency is a common tactic used by fake online stores to rush you into payment before you can verify the site.
Yes. Fraudulent invoices sent by post are common scams targeting older adults, using official-looking formats to demand payment for services never ordered.
Almost certainly not. Official driving licence renewal notices arrive by post and direct you to the official government website — not a payment link in a text.
No. Envelope stuffing and parcel packing jobs are classic advance-fee or reshipping scams — there is no legitimate version.
Almost always. Accounts selling luxury brands at a fraction of retail price are selling fakes, or will take your money and send nothing.
Yes. This is a sextortion or extortion scam. The threat is a bluff designed to create panic.
Yes. A legitimate landlord will always provide a written tenancy agreement before you pay or move in.
Yes. A platform that shows impressive balance growth but blocks withdrawals is a classic investment fraud.
Yes. With enough personal data, criminals can apply for credit cards, loans, and other financial products in your name.
Almost always yes. This is a variant of the grandparent or family emergency scam, now increasingly delivered by text or WhatsApp.
Treat it with caution. Doorstep cash payment requests can be legitimate customs charges but are also used in delivery scams and distraction burglaries.
No. Connect-to-claim airdrop sites are a common wallet drainer attack that empties your crypto holdings in seconds.
Yes. Sellers claiming to be abroad who offer a special escrow service for vehicle payment are running a well-known car scam.
Yes. Scammers deliberately target newly arrived workers with fake job offers and overpriced or non-existent accommodation.
It may be a scam. Utility companies send formal overdue notices by post — text messages with payment links are frequently phishing attacks.
Proceed carefully. Pet care jobs on classifieds sites are frequently overpayment scams or personal-data harvesting operations.
No. This is a government impersonation scam. Your number has not been suspended, and no agency will call you threatening arrest.
Extremely often yes. New token launches advertised through social media ads are frequently pump-and-dump schemes or outright rug pulls.
Often not. Unofficial mod files and cheat tools are a primary delivery method for malware, keyloggers, and account stealers.
Yes if unsolicited. Government health agencies do not cold-call you to request your health number or personal details.
In some cases yes. With account number and sort code, a fraudster can attempt to set up unauthorised direct debits in the UK.
It may be. Scammers impersonate telecoms providers to get banking details or remote access under the guise of processing a renewal.
No. Online quiz prize giveaways are data harvesting tools or subscription traps — the prize is not real.
Treat it with extreme caution. Very few registered charities accept crypto, and most such requests are outright fraud.
Almost always yes. This is the opening move of a romance scam, task scam, or investment fraud.
Yes. Mobile money fraud is widespread across Africa and Asia, with scammers exploiting reversals, SIM swaps, and fake agent networks.
Very likely yes. Unsolicited payment requests on Philippine mobile wallets are almost always scams.
Requests you receive are payment demands, not incoming money. Accepting a UPI request causes money to leave your account.
Yes. Scammers exploit Pix's speed by using fake screenshots and social engineering to get victims to send money before they realise the fraud.
Very often yes. Unlicensed practitioners pose as immigration attorneys and take large fees for applications that are never filed or are filed incorrectly.
No. This is a government impersonation scam. Real immigration agencies do not threaten deportation by phone and demand immediate payment.
Almost certainly not. The only official DV Lottery notification is through the government's own website — never by email, phone, or postal mail.
In many cases it is, but consumer protection laws in most countries require clear disclosure of post-trial charges. You may have rights to a refund.
Negative option billing assumes your consent to pay unless you actively cancel. In many countries it is heavily regulated and you may be entitled to a refund.
Many MLMs operate as de facto pyramid schemes where the majority of participants lose money. Income primarily from recruiting, not retail sales, is the key warning sign.
Yes, always. No legitimate wallet provider, exchange, or support agent will ever ask for your seed phrase.
No. Hardware wallets must be bought directly from the manufacturer. Third-party resellers may sell pre-seeded or tampered devices that drain your funds.
Yes. Phishing links sent via Instagram DM are the most common way accounts are hijacked and sold or used to scam your followers.
Quizzes and games that request Facebook login permissions can harvest your personal data. Some are also fronts for phishing credential theft.
Almost certainly yes. Refusing visits and insisting on bank transfer are the two clearest red flags of a pet scam.
Yes. 'Free pet, just pay transport' is the standard opener for a pet shipping scam where no animal exists.
It may be brushing fraud, where sellers send cheap items to real addresses to post fake reviews, or a preparatory step in a package redirection scam.
Yes. Fraudsters redirect your mail to intercept bank cards, account statements, and sensitive documents to take over your financial accounts.
Yes. With enough personal information, fraudsters can apply for loans, credit cards, and finance agreements in your name.
Act immediately: alert your bank, place a fraud alert with credit agencies, report to police, and notify any organisations where accounts were opened fraudulently.
Not necessarily. Review counts on newer marketplaces can be inflated and do not guarantee product quality or genuine fulfilment.
Often not. Sponsored Instagram shop ads frequently lead to counterfeit goods sites that never deliver or deliver poor-quality fakes.
Treat with caution. Fake Asian beauty storefronts are a common scam format, selling counterfeit or non-existent products.
Yes. Scammers specifically target diaspora communities using shared language, cultural trust, and community network access.
Yes. This is account takeover fraud — the code belongs to your friend's WhatsApp, and sending it hands their account to a scammer.
These channels are either criminal operations selling genuine stolen data, or fraud themselves — selling fake data to people trying to use it illegally.
Yes. Buying counterfeit goods is illegal in most countries and funds criminal networks. The buyer may also bear legal risk.
Yes. Requiring payment before viewing a vehicle or property is the defining characteristic of an auction scam.
Almost never. Legitimate cryptocurrency mining requires specialised hardware. Phone mining apps are overwhelmingly data-harvesting tools, malware, or misrepresented schemes.
Very often yes. Unsolicited calls about data breach claims are lead generation for unregulated claims companies or outright fraud.
Yes. Legitimate mystery shopping pays modest amounts and never involves wire transfers. Scams use the mystery shopper label to recruit money mules.
Only if it is offered by a regulated bank or building society. Unregulated high-yield accounts advertised on social media are frequently fraud.
Almost certainly yes. Jobs that involve receiving and forwarding money are money mule operations, which are illegal.
Yes. Legitimate foreign employers bear the cost of visas and relocation. Requiring advance payment from a candidate is a strong scam indicator.
Yes. AI-generated phishing emails are better written, more personalised, and lack the spelling errors that were once reliable red flags.
Yes. Publicly available photos and videos can be used to generate convincing deepfake content for fraud, extortion, or impersonation.
Yes. Account takeover fraud on rental platforms allows scammers to hijack established listings with genuine reviews.
Yes. This is a modern variation of the advance fee fraud, one of the oldest and most persistent scam types.
Almost always yes. Unsolicited robocalls about vehicle warranties are a well-documented mass-scam targeting vehicle owners.
Not automatically. The G&S offer can itself be part of a scam involving fake PayPal emails and overpayment or chargeback fraud.
It may be a scam phishing email designed to look like an Apple security alert. Check your actual account directly, not through the email link.
Some are legitimate, but unregulated will-writing services can produce invalid documents. Verify regulation and use a solicitor for complex estates.
Almost never. Solar grant cold calls are typically lead generation for pushy salespeople or outright fraud collecting deposits for undelivered installations.
Registration in low-regulation jurisdictions is a significant risk indicator. Many scam exchanges use offshore incorporation to avoid meaningful oversight.
No. Crypto recovery services are themselves scams that re-victimise people who have already lost money.
No. Fake news websites with fabricated celebrity endorsements are a standard front for fraudulent supplement and health product sales.
Not necessarily illegal, but cash-only rent is a significant risk indicator that offers you no payment record or consumer protection.
Almost certainly yes. Binary options are banned in many countries, and automated Forex robots consistently underperform their marketing claims.
Very often yes. Account takeover and emergency impersonation scams frequently target contacts of hacked accounts with urgent bail or travel requests.
Yes. International students who need housing before arriving in a country are prime targets for rental fraud.
Often yes. Many discount membership clubs use pyramid-like referral structures, provide illusory savings, and make cancellation deliberately difficult.
Almost always no. Sextortion emails are mass-sent bluffs. No video exists in the overwhelming majority of cases.
Often yes. Timeshare exit companies frequently take large upfront fees and fail to cancel contracts, leaving owners in the same or worse position.
No. This is a delivery phishing text — one of the most commonly reported scam types in the UK and US.
The plan itself may be legitimate, but it can be used by unregulated clinics to lock you into debt for procedures that go wrong.
No. You cannot win a lottery you never entered. This is an advance fee fraud using a lottery as cover.
Voice authorisation is rarely used for major transactions, but voice cloning from recorded samples is a growing and more serious threat.
No. Video call verification is no longer reliable — deepfake and pre-recorded video tools allow scammers to appear on camera convincingly.
This is brand impersonation fraud and is a crime in most jurisdictions. You can report it to email platforms, domain registrars, and law enforcement.
Yes. Fraudulent Google Business Profile listings redirect customers to scammers posing as legitimate businesses.
No. An app that shows consistent growing profits automatically is a scam display — the numbers are fabricated to encourage larger deposits.
Almost certainly yes. Family emergency scams exploit fear and urgency to prevent you from verifying before sending money.
No. Prescription medication sold without a valid prescription is illegal and potentially dangerous.
Almost never. Membership fees for exclusive auction access are a common fraud — the auction is fake or the goods non-existent.
If income depends primarily on recruiting rather than on the app's genuine product or service, it has pyramid scheme characteristics.
Yes in almost all cases. Legitimate employers never ask candidates to pay for assessments or background checks — this is standard employer cost.
Yes. CEO gift card impersonation is one of the most common and consistently effective business email scams.
Very likely yes. Insurance impersonation calls use fear of driving illegally to collect card details or upfront premiums.
Yes. Legitimate do-not-call registries do not call you to verify or update your registration. Any such call is data harvesting or fraud.
Only use DVLA-authorised resellers. Many unlicensed private plate sellers take payment for registrations that are already sold or do not exist.
Clone phishing exactly copies a real email you may have received before, replacing links or attachments with malicious ones. It is one of the hardest phishing types to spot.
It depends. Some legitimate property services charge upfront fees, but fee-collection without service delivery is a common property fraud.
No-credit-check loan offers are either unlicensed lenders or fee advance scams — both cause serious financial harm.
It depends on the provider. Established vehicle history check services provide accurate DVLA-linked data, but copycat sites sell outdated or fabricated reports.
Almost certainly yes. Unexpected NFT airdrops are a common technique used to drain wallets when recipients try to interact with the assets.
It may be genuine but verify carefully. Scammers send fake enforcement notices to collect non-existent debts.
Some are legitimate but many work-from-home transcription and data entry jobs are either underpaid labour or outright scams.
It may be genuine or it may be medical bill fraud — verify carefully before making any payment.
Yes. This is a distraction scam where someone creates a false claim to initiate a conversation that ends in theft or a fake repair payment.
No. Discounted Telegram Premium accounts are purchased with stolen payment cards and deactivated shortly after sale — you lose your money.
It is difficult but not impossible. Cross-border collaboration between agencies does occur, though prosecutions are rare and depend on jurisdiction and resources.
Only if the app is regulated and uses an FCA-authorised open banking connection. Unregulated apps that store your login credentials pose a serious security risk.
Treat with extreme caution. Conveyancing fraud is a devastating scam where criminals intercept emails and redirect completion funds.
Often not. Fake donation matching posts harvest small payments or click-through data without any real corporate matching scheme behind them.
Almost certainly not. Package rerouting smishing texts lead to credential-theft pages and card detail harvesting.
Genuine government broadband schemes exist but are not offered through unsolicited cold calls. Cold-call versions are scams.
No. Legitimate government and charitable business grants never require an upfront payment to access funding.
Yes. No trading system can guarantee daily profits. Crypto arbitrage bot platforms are almost universally fraudulent.
Almost certainly not from your real registrar. Domain renewal scam letters collect payment to transfer your domain to an overpriced service.
Very often yes. High-paying, no-experience social media jobs are a common cover for task scams, data harvesting, or money mule recruitment.
Zelle payments are designed to be instant and final, so recovery is difficult — but report to your bank immediately, as authorized-push-payment rules may apply in some cases. Visit /recovery for a step-by-step action plan.
Gift card payments are almost impossible to reverse — once the PIN is shared, the funds are gone. However, report to the issuer immediately; some retailers can freeze unredeemed cards.
Wire transfers can sometimes be recalled within the first few hours if the bank acts quickly — call your bank immediately. After 24 hours the chance drops sharply.
Yes — credit card chargebacks are one of the strongest consumer protections available. File a dispute with your card issuer promptly, citing fraud or non-delivery.
Cryptocurrency payments are largely irreversible once confirmed on-chain. Focus on reporting to the FTC, FBI, and your exchange — and be wary of 'recovery scams' that target crypto victims.
Act immediately: call your bank's fraud line right now, change your password, and ask them to lock your account. Every minute counts when your login is compromised.
Contact your bank or the relevant service immediately — the scammer may have just used that code to access or change your account. Change your password right away.
Call your bank first if money is still in transit or your account is at risk — the bank can freeze funds while police reports take time. Then file the police report.
Cash App payments are generally instant and non-reversible, but you can report the transaction inside the app and contact Cash App Support — some cases qualify for reimbursement under their fraud policy.
Disconnect from the internet immediately, then run antivirus software, change all passwords from a different device, and check your bank accounts for unauthorized activity.
Stop all contact immediately, secure your accounts, and report to the FTC and FBI. While financial recovery is difficult, reporting helps investigators and may protect others.
Contact your bank immediately and ask for a payment recall — the sooner you act, the better the chance of recovery. Report to the FTC and, if needed, your country's banking regulator.
Report to the FTC's IdentityTheft.gov immediately, place a fraud alert on your credit file, and notify relevant agencies. Document fraud may take months to surface.
File a chargeback with your credit or debit card issuer if you paid by card — this is usually your strongest option. If you paid via PayPal or a similar service, open a dispute there first.
Report to the FTC and FBI right away and contact your payment provider immediately to attempt a reversal. Fake job scams often involve upfront fees or equipment scams — recovery depends on how you paid.
Yes — PayPal Buyer Protection covers most goods and services purchases. Open a dispute in the Resolution Center within 180 days of the transaction date.
Your report is added to the FTC's Consumer Sentinel Network, shared with over 3,000 law enforcement partners, and used to identify scam trends — individual recovery is not guaranteed but reporting is still valuable.
Report to the SEC, CFTC, or your country's financial regulator immediately. Recovery is possible in some cases through regulatory proceedings, but beware of recovery scams targeting investment fraud victims.
If you paid by credit card or PayPal, file a dispute immediately. For wire or bank transfer, contact your bank for a recall. Report the listing to the platform and local police.
Credit card donations can be disputed; bank transfers are harder. Report to your state attorney general and the FTC — fake charities are heavily prosecuted at the state level.
A recovery scam targets people who have already lost money to fraud, promising to get their money back for an upfront fee — and then stealing that fee too. Never pay anyone upfront to recover lost funds.
For credit cards in the U.S., you generally have 60 days from the statement date, but many issuers extend this. Debit card windows are narrower — report within 2 business days for the strongest protection.
Disconnect from the internet, run antivirus from a trusted tool, change passwords from a different device, and contact your bank if money was paid. Report to the FTC.
Lottery and prize fees are almost never recoverable — the scam's design is to collect fees endlessly. Report to the FTC and stop paying immediately to cut your losses.
Report to your bank and Adult Protective Services immediately, then help them through the financial dispute process. Emotional support matters as much as the financial steps.
Report the seller directly to Facebook, dispute any card or PayPal payment, and file with the FTC. Facebook Marketplace has limited buyer protection compared to platforms like eBay.
Venmo payments between individuals are generally final. If paid for goods via Venmo's purchase protection, open a dispute. For personal payments, report to Venmo and your bank.
Report to the IRS's dedicated impersonation reporting portal, file with the FTC, and contact your payment provider about a potential reversal. The IRS never demands immediate payment by gift card or wire.
Place a credit freeze and fraud alert with all three bureaus, report to the Social Security Administration OIG, and visit IdentityTheft.gov for a personalized recovery plan.
Cancel through your bank or card issuer (block future charges), then dispute past charges as unauthorized. Report to the FTC — subscription trap schemes are an enforcement priority.
Report the profile to the dating app, stop all contact, and secure any accounts whose credentials were shared. If money was lost, report to the FTC and FBI.
Call your bank immediately and ask for a wire recall — real estate wire fraud has a narrow recovery window. Also contact the FBI, which has a specific rapid-response process for these cases.
Forward the text to 7726 (SPAM) — this is the universal short code for all major carriers. Also report to the FTC at ReportFraud.ftc.gov.
Dispute the charge with your card issuer, report to the FDA and FTC, and monitor your bank for further unauthorized charges if you signed up for a 'free trial.'
Report to your state attorney general and immigration authorities. If money was paid by card, dispute the charge. You may also need to take corrective legal action on any bad paperwork filed.
Refunds from MLM schemes are rarely given voluntarily, but many companies have buy-back policies under FTC guidelines. Pyramid scheme victims may receive restitution in regulatory enforcement actions.
Stop sending money immediately, verify your grandchild is safe by calling them directly, and report to the FTC and local police. If money was sent recently, contact your bank.
Call your bank's wire department immediately to initiate a recall, then report to the FBI's IC3 within the same business day for the best chance of asset recovery.
Recovery depends on how you paid — credit card chargebacks are possible; wire or cash is nearly unrecoverable. Report to the FTC, your state DMV, and the platform where the listing appeared.
Report to the FBI's IC3 and FTC, secure any compromised accounts, and contact your bank if money was transferred. AI-assisted fraud is an enforcement priority.
Report to the FTC at ReportFraud.ftc.gov and to the FCC at fcc.gov. You can also report to the Do Not Call Registry if applicable. Keep notes on the caller's number and what was said.
Dispute the charge with your credit card or travel platform immediately. Report to the FTC and your state attorney general — travel fraud is a regulated industry in most states.
Open a case through eBay's Resolution Center — eBay Money Back Guarantee covers most transactions if the item was not received or was not as described. Escalate to your payment method if eBay does not resolve it.
Regain control of your account immediately, notify your contacts, and report to the email provider. Change all passwords that used the same credentials.
Contact the game platform's support team first — most have policies against scamming and may reverse in-game transactions. For real-money purchases, dispute through your card issuer.
Call your real utility company to verify your account status, report the scam to the FTC, and contact your payment provider about a reversal if payment was recent.
Once collected by the recipient, Western Union and MoneyGram payments cannot be reversed. If the transfer has not been picked up yet, call immediately to attempt a cancellation.
Report to your bank within 2 business days of discovering the fraud for maximum protection. The Electronic Funds Transfer Act limits your liability based on how quickly you report.
Contact each of the three major credit bureaus separately — Equifax, Experian, and TransUnion — to place a free security freeze. This is one of the strongest identity theft protections available.
Do not pay. Contact the FBI's IC3, report to the platform where contact occurred, and if sexual images are involved, report to the NCMEC CyberTipline. Payment almost always escalates demands.
Dispute the charge with your credit card immediately. Report to the FTC and the Internet Crime Complaint Center. Puppy scams are a consistently high-volume fraud category.
Report to your state Department of Insurance immediately. State regulators actively pursue unlicensed insurers. Dispute premium payments with your card issuer and get legitimate coverage right away.
Report to the FTC and CFPB. Cancel any power of attorney you signed and dispute fees charged by the company with your card issuer. Change your FSA ID credentials immediately.
Enable 2FA on key accounts, set up bank transaction alerts, place a fraud alert, and review your digital footprint. Knowledge and concrete security steps are your best protection.
File at consumerfinance.gov/complaint. The CFPB routes complaints directly to the financial company, which must respond within 15 days — it is most effective when your bank or payment company is not cooperating.
Stop paying immediately — no additional fees will release any promised funds, because they do not exist. Report to the FTC, FBI, and the U.S. Secret Service if significant funds were lost.
Contact your bank or payment app immediately — the faster you act, the better the chance of recovery. Accidental transfers are treated differently from scam transfers and some platforms have direct reversal options.
Yes — the FTC and FBI's IC3 accept anonymous reports. Some detail helps investigators but you are not required to provide your name or contact information.
Almost certainly yes. Legitimate couriers do not send unsolicited texts demanding payment to release a package, and this is one of the most common smishing (SMS phishing) scams in circulation.
Most likely yes. Unsolicited job offers promising unusually high daily pay for easy remote work are a classic advance-fee or money-mule recruitment scam.
Yes, without exception. No legitimate person or organisation has ever run a crypto giveaway that genuinely doubles coins sent to them. Every single one is a theft.
Yes. These are tech support scam pop-ups. No legitimate antivirus or operating system company sends browser pop-ups telling you to call a phone number.
It could be. Unexpected deposits are a hallmark of the overpayment scam, where the money will later be reclaimed — leaving you out of pocket if you spent it or sent any of it back.
Yes, almost certainly. Someone you have never met in person asking for money — regardless of the reason given — is the defining behaviour of a romance scam.
Almost never. Websites offering branded goods at 70-90% off retail are typically selling counterfeits, or will take your money and ship nothing at all.
Yes. Tax authorities in every country communicate via official post, not surprise phone calls or texts threatening immediate arrest. This is one of the most common government impersonation scams.
Likely not. Legitimate recruiters do not need your Social Security number, passport details, or bank information before an initial interview has even taken place.
Yes, always. You cannot win a lottery or competition you never entered, and any 'prize' that requires you to pay fees or provide financial details first is a scam.
It carries significant risk. Bank transfers to unknown private sellers offer little buyer protection, and Marketplace scams requesting transfers before delivery are common.
No legitimate investment can guarantee high returns with no risk. This promise is the defining characteristic of a Ponzi scheme or investment fraud.
It may be a legitimate bank call or it may be bank impersonation fraud — sometimes called authorised push payment fraud. You should always hang up and call your bank back using the official number.
It may not be. Fake charity solicitations surge immediately after major disasters, mimicking real organisations to divert donations. Always verify before giving.
Many are legitimate, but 'free trial' offers that bury subscription charges in fine print or make cancellation difficult are a form of billing scam. Know the terms before you enter your card.
Almost certainly yes. Requiring a deposit before a viewing is a near-universal signal of rental fraud. You should never pay money to see a property you have not yet inspected in person.
Yes. This is a pig-butchering or crypto trading scam. Your displayed profits do not exist, and any further deposit you make will also be stolen.
Yes. Social Security numbers cannot be suspended, and the Social Security Administration does not call people to report criminal activity linked to their SSN.
Almost certainly yes. This is a business email compromise scam, sometimes called a CEO fraud. No legitimate company uses gift cards for business payments.
Treat it with strong caution. Absence of reviews and a missing or vague contact page are among the clearest signals that a shopping site is either brand-new and unproven or actively fraudulent.
Almost certainly not. Recovery fraud, also called a reload scam, specifically targets people who have already been scammed by offering fake recovery services — and then taking more money.
Very likely. Urgent account-closure threats sent by email are a classic phishing technique designed to make you hand over login credentials or personal data.
Most of these are scams. Legitimate gig work does exist, but apps promising easy money for social media tasks are almost always designed to eventually steal deposits from you.
Yes. This is the classic setup for a pig-butchering scam, one of the most lucrative fraud types in operation today. The romantic relationship is entirely manufactured to set up the investment theft.
Yes, without exception. This is an advance-fee fraud, one of the oldest scam formats still operating. No fortune exists, and any fees you pay will simply be stolen.
Yes. Legitimate lenders deduct fees from loan proceeds — they never require an upfront cash payment before releasing funds. This is a loan fee scam.
Yes, always. Your seed phrase is the master key to your wallet. Any request for it is an attempt to steal all your funds instantly.
Very likely yes. Utility disconnection scams impersonate power and gas companies and demand immediate payment to avoid same-day service termination.
It is a significant warning sign. Below-market vehicle listings are frequently fraudulent, particularly when the seller is unavailable in person or requests payment before delivery.
Extremely risky. Social media ticket resellers have no accountability, and bank transfer gives you no recourse if the tickets turn out to be fake or never arrive.
Yes. Tax authorities do not notify refunds via text message with a link to click. These are phishing texts designed to steal your bank or personal details.
Very likely yes. Online pet fraud is widespread, particularly for puppies and kittens. Payment before seeing the animal in person is the single clearest warning sign.
Many are not. Fake brand collaboration offers on Instagram are used to harvest personal details, sell you products at a discount you must buy first, or steal login credentials.
No. Sites selling prescription drugs without a prescription are operating illegally and the products may be counterfeit, contaminated, or entirely different to what is labelled.
Yes, always. This is the classic cheque overpayment or money mule scam. The cheque will bounce after you have already sent real money.
It could be a legal MLM or an illegal pyramid scheme. The key question is whether income comes primarily from real product sales or from recruiting new participants.
Yes. Border force and customs agencies do not telephone members of the public to warn them about suspicious packages and demand immediate payment or personal details.
Yes. Legitimate government student loan forgiveness programmes are free to apply for. Any service charging a fee to apply on your behalf is taking your money for something you can do yourself at no cost.
Yes. This is called sextortion or webcam blackmail email fraud. In the vast majority of cases, the sender has no video and is bluffing entirely.
Possibly not. Fraudulent travel booking sites take payment for reservations that do not exist, leaving travellers stranded with no booking and no refund.
It is likely a phishing message. These are sent to millions of people hoping to catch genuine subscribers off guard and steal their payment card details.
QR codes can be tampered with to redirect to fraudulent sites. Always verify the URL before entering any credentials or payment details after scanning.
No. Social media ad systems can be exploited by fraudulent advertisers using stolen brand imagery. Sponsored ads do not guarantee the seller is the real brand.
Yes. This is a variant of romance or advance-fee fraud using a military or humanitarian cover story. No genuine soldier or aid worker needs a stranger to receive packages or funds.
Yes, without exception. Sending money to receive more money from a stranger is the core mechanic of advance-fee fraud. No legitimate windfall works this way.
Treat with caution. Legitimate charities do use door-to-door fundraisers, but so do fraudsters pretending to represent charities. Never give cash — always donate through verified channels.
Almost certainly yes. This is a family emergency impersonation scam and it is one of the fastest growing fraud types targeting parents and grandparents.
Almost certainly yes. No algorithm — AI-powered or otherwise — can guarantee stock market returns. This is a fraudulent investment platform using technology buzzwords to add credibility.
Yes. Requesting gift cards to continue a gaming interaction is a scam regardless of the cover story. Gift cards are used because they are untraceable and non-refundable.
Most unsolicited mystery shopper emails are scams. They lead into cheque overpayment fraud where you deposit a fake cheque, buy gift cards, and send the codes — leaving you with a bounced cheque and lost money.
It may be a scam. Immigration fraud involves large upfront payments for services that are never delivered or for applications that are not submitted properly.
No. Regulated medicines require clinical trial evidence and regulatory approval. Supplements making disease cure claims are either illegal or unproven, and they can be dangerous.
It has strong scam indicators. Most new token launches targeting retail investors with guaranteed returns are either rug pulls or pump-and-dump schemes.
Very likely yes. Unsolicited messages claiming you have been selected for a grant or business fund are a common advance-fee fraud delivered through professional networking platforms.
Very likely yes. AI-generated deepfake videos impersonating celebrities to promote fraudulent investments are a rapidly growing scam type.
Treat with serious caution. Ghost insurance scams sell fake policies that provide no coverage, and extremely low prices may indicate stripped-down coverage or outright fraud.
Not always. Google Business listings can be edited by third parties through a process called listing hijacking, replacing real contact details with scammer numbers.
Very likely yes. Hacked social media and email accounts are used to send convincing emergency money requests to the victim's real contacts.
Most high-priced online courses making specific income promises are questionable at best. The business models they teach are real, but the promised earnings are typically not achievable by the vast majority of students.
Very likely a scam. Internet providers follow formal disconnection processes with written notices. Calls demanding immediate payment to prevent same-day disconnection are impersonation fraud.
It is likely a PayPal invoice scam. Fraudsters can send real PayPal invoices for purchases you never made, hoping you will call the number in the invoice and be manipulated into sending money.
No. The IRS and equivalent tax agencies in other countries never accept gift cards as payment and will never call demanding immediate payment this way.
No. Police officers do not collect cash or valuables from members of the public as a fraud-protection measure. This request is a scam known as a police impersonation fraud.
No. Courts communicate through formal written summons and due process. Unsolicited calls demanding instant payment to cancel an arrest warrant are always fraudulent.
No. Legitimate utility providers follow regulated disconnection procedures that require written notice and allow time to dispute or pay. A same-day shutoff threat by phone is a scam tactic.
No. Legitimate employers pay you — they never charge fees for hiring, training materials, background checks, or equipment before you start work.
No legitimate landlord requires a financial deposit before an in-person viewing. Any request for money before you have seen the property is a strong indicator of a rental scam.
Legitimate couriers may collect genuine customs duties at the door, but unexpected 'release fees' demanded by text or email — especially when you are not expecting a parcel — are almost always a scam.
No. Immigration authorities communicate through official case portals and written correspondence. Unexpected calls demanding urgent fees to save a visa are always scams.
No. Banks and financial services never ask you to read back an OTP they sent you. If someone calls asking for your OTP, they are attempting to access your account.
Only if you initiated the support call through an official channel. Unsolicited calls claiming to detect viruses on your computer and asking you to install remote-access tools are always scams.
No. Legitimate refunds from banks or financial institutions are credited directly to your account. Any request to pay a fee to receive money owed to you is a scam.
No. HMRC does not threaten arrest on a first contact, and certainly not by phone. Immediate arrest threats for tax debt are a hallmark of impersonation scams.
No. Social Security numbers cannot be suspended or deactivated. Calls claiming your SSN has been suspended are an impersonation scam.
No. Payroll direct deposit requires only your bank account number and routing number — never your online banking username or password.
No. Legitimate government grants are applied for through official portals at no upfront cost to you. Any fee to claim or activate a grant is a scam.
Legitimate landlords rarely insist on wire transfer or cryptocurrency as the only accepted method. This restriction — especially before you have met in person — is a red flag for rental fraud.
Legitimate pension providers do not cold-call you urging immediate transfers. Unsolicited contact pressuring you to move your pension quickly is a pension liberation or pension scam.
No legitimate seller on a reputable marketplace needs you to pay outside its protected checkout. Off-platform payment requests are a hallmark of marketplace fraud.
No. Legitimate charities never require donors to pay a fee before a donation is processed. Processing fees on a real donation platform are deducted from the donation itself.
No. This is a common courier fraud script. Bank fraud teams do not send agents to collect cash from customers as part of any test or investigation.
No. Debt collectors cannot have you arrested for unpaid civil debts. Threats of immediate arrest to pressure payment are illegal in most jurisdictions and a common debt collection scam tactic.
No. Legitimate lottery and prize winnings are paid in full with no upfront fee. Any notification that requires payment before you receive your prize is a scam.
No. Banks will never instruct you to convert money to cryptocurrency. This instruction is a fraud tactic used to move your funds into an untraceable form.
Legitimate employers verify identity documents after a job offer is accepted, not before an initial interview. Requests for identity documents at the application stage are a red flag.
No. Legitimate utility companies do not cold-call customers asking for full bank details. If you need to update payment details, call the number on your bill or log into your account online.
No. Medicare cards are issued free of charge. Any call asking you to pay for a new card is impersonating Medicare.
No. Mobile and phone carriers do not charge spontaneous activation fees to keep existing numbers active. This is a billing scam or impersonation tactic.
No. Legitimate insurers do not require additional premium payments as a condition of paying a valid claim. This demand is a sign of fraud or a disreputable company.
Legitimate universities collect enrolment deposits through verified official portals after an offer is formally issued. Unsolicited calls or emails requesting a fee to secure your place are a student scam tactic.
People you genuinely know might ask for help with travel costs, but someone you have only met online who asks for money before you have ever met in person is almost certainly running a romance scam.
Genuine regulators do not proactively contact scam victims to offer personal recovery services. Unsolicited offers to recover your scam losses are almost always a secondary scam called a recovery or refund scam.
No. No legitimate tax authority anywhere accepts retail vouchers or gift cards as payment. This demand is universally fraudulent.
No. Banks do not recruit mystery shoppers through unsolicited calls or emails to test branches by handling real money. Mystery shopper banking scams are a form of advance-fee and money mule fraud.
No. Government benefit payments are never conditional on recipients paying a cash fee. Any such demand is impersonation fraud.
No. Legitimate energy companies credit refunds to your account or send a cheque. Calls asking for card details to process a refund are phishing attempts.
No. Customs PINs or release codes sent by a courier and then requested back are a form of OTP phishing — the code is designed to give someone else access to your account or payment, not to release a parcel.
No. This is the defining feature of a money mule arrangement, which is illegal and can result in your bank account being closed and your facing criminal charges.
No visa agent or immigration lawyer can guarantee a visa approval — visa decisions rest solely with the government authority. Any guarantee of approval is either false advertising or a scam.
No. A genuine bank security team would never ask you to delete your banking app. This instruction is designed to remove the secure channel you could use to verify the caller's identity.
Collecting a security deposit and first and last month's rent before lease signing is a legitimate and common practice in many markets, but only after an in-person viewing and with a formal, signed agreement.
No. Couriers confirm delivery through package signatures, photo evidence, or app confirmations — not by collecting card details. Any delivery requiring card data entry at the door is fraudulent.
No. Tax authorities do not email links to click for refund collection. Refund notification emails containing links are phishing attempts regardless of how official they appear.
No legitimate government official solicits bribes. Any contact requesting an unofficial payment to expedite your application is either corruption or, more commonly, an impersonation scam.
No. Medical co-pays and appointment fees are collected at reception or through verified billing portals — never by gift card before the appointment.
Signing a lease and paying before any viewing is a serious red flag for rental fraud. No legitimate rental transaction should require financial commitment before you inspect the property.
No legitimate tech company recruits random members of the public to test payment systems using real money. This is a money mule recruitment tactic.
Legitimate regulated casinos do not charge upfront fees to release winnings. Fee demands before withdrawals are a gambling scam tactic and may also indicate the site is unlicensed.
No. Banks never ask for your full password. Legitimate security verification asks for specific characters from a memorable word — not the complete password.
No legitimate employer sends money in advance and then asks you to purchase and forward equipment or supplies. This is a cheque fraud or money mule pattern.
No legitimate investment platform withholds your funds pending an upfront tax payment from you. This is a standard exit barrier used in investment and crypto fraud.
Governments do charge registration fees, but only through official portals. Unsolicited calls or emails charging for business registration are impersonation scams targeting new entrepreneurs.
No legitimate crypto exchange withholds your funds pending an upfront tax payment. This is a standard exit barrier in crypto investment fraud.
Legitimate landlords accept standard bank transfers to business or personal accounts associated with the property. Insistence on a specific wire service to a name you cannot verify is a red flag.
No. Legitimate employers collect Social Security numbers for payroll and tax purposes after a job offer is accepted and during formal onboarding — not in the first outreach message.
No. Legitimate free trials either convert to a paid subscription or end without charge. A fee to cancel a free trial is deceptive billing practice and in many countries is illegal.
No. Police do not ask members of the public to send cryptocurrency to assist law enforcement operations. This is a law enforcement impersonation scam.
Legitimate direct sales companies do not require significant upfront purchases or fees as a condition of participation. Mandatory large buy-ins are a hallmark of pyramid schemes.
No. Any instruction to deceive bank staff is a definitive sign of fraud. Genuine fraud investigations do not require customers to mislead employees.
Official verification badges are applied through the platform's own process — never through a direct payment to someone contacting you. Anyone charging a fee to verify or restore your account is impersonating the platform.
Fake bank texts create false urgency about account problems and ask you to click a link or call a number — your real bank never needs you to verify details by text.
Fake parcel texts claim a delivery failed and ask you to pay a small fee or update your address via a link — real carriers do not charge re-delivery fees by text.
Fake IRS letters use urgent threats about arrest or immediate payment that the real IRS never makes — the IRS always allows time to question a notice and never demands gift cards.
Fake HMRC contacts threaten immediate arrest or promise a surprise tax refund and ask you to click a link or call a number — HMRC never demands same-day payment or sends refunds via text link.
Fake invoices insert fraudulent bank details into legitimate-looking bills or charge for goods and services never ordered — always verify new payment details by phone before paying any invoice.
Fake login pages copy the look of real websites but sit on different domains — always check the full URL in your browser bar before entering any password.
Fake QR codes redirect you to phishing sites or prompt app installs — always preview the URL before opening it and be suspicious of QR codes stuck over the top of official ones.
Fake apps mimic popular ones with near-identical icons and names to steal credentials or charge hidden subscriptions — check the developer name, review count, and publish date before installing.
Fake online stores lure you with prices far below market value and either never ship, send counterfeits, or steal your card details — check domain age, returns policy, and contact details before buying.
Fake charity appeals spring up after disasters and use emotional images and vague names to divert donations — verify the charity's registration number before giving.
Fake recruiters offer jobs with unusually high pay for minimal qualifications and eventually ask for fees or personal documents — legitimate employers never charge candidates to apply or onboard.
Fake romance profiles use stolen photos, claim to be abroad, quickly move to private messaging, and eventually ask for money — no legitimate partner needs funds before meeting you.
Fake crypto exchange emails mimic real platforms to steal your login or trick you into sending funds to a 'verification wallet' — legitimate exchanges never ask you to send crypto to prove ownership.
Fake PayPal emails mimic payment notifications or security alerts to steal your login — check that the sender is @paypal.com and log in directly rather than through any link.
Fake Microsoft contacts claim your computer is infected or your account is blocked and push you to install remote-access software or buy gift cards — Microsoft never contacts you unsolicited about device problems.
Fake Amazon emails claim your account is suspended or an order was placed in your name — always check your actual Amazon account rather than clicking any link in the email.
The SSA never suspends your Social Security number by phone or email — any contact claiming your number has been deactivated is a scam.
Phishing emails create false urgency, impersonate trusted brands, and contain links or attachments designed to steal your credentials or install malware — slowing down and checking the sender address protects you.
Fake energy and utility emails threaten supply disconnection unless you pay immediately through a link — real suppliers send paper bills and never cut supply without proper written notice.
Fake job offer emails promise remote roles with high pay and ask for personal data or fees before employment — a real job offer comes after an interview and never requires an upfront payment.
Fake tech support pop-ups display alarming security warnings with a phone number — legitimate security software never asks you to call a number to resolve a threat.
You cannot win a lottery you never entered — any email claiming you have won a prize and asking for fees or bank details to release it is a scam.
Fake investments promise guaranteed above-market returns with no risk — no legitimate investment can guarantee profits, and any platform demanding secrecy or speed is a scam.
Fake airdrops and NFT giveaways ask you to connect your wallet and sign a transaction that drains your funds — no legitimate airdrop asks you to pay gas fees or approve outgoing transfers.
Fake rental listings use photos from real properties, offer below-market rents, and ask for a deposit before you have viewed the property in person — never pay before an in-person viewing.
Fake immigration agents promise guaranteed visas, charge high fees, and either disappear or file applications that were never valid — use only lawyers or advisers registered with the relevant authority.
Fake health supplement sites sell counterfeit or unregulated products with exaggerated medical claims — verify that supplements are properly registered and sold by a licensed retailer before buying.
Fake insurance policies accept your premium but issue worthless documents — verify that your insurer is authorised by the FCA (UK) or state regulator (US) before paying.
Fake pet listings show adorable photos and low prices but require upfront deposits before you have seen the animal in person — never pay for a pet you have not met.
Fake loan relief companies charge upfront fees to access forgiveness programmes that are free to apply for directly — never pay a third party to lower or discharge your federal student loans.
Fake giveaways impersonate celebrities or brands, ask you to share, follow, and enter personal details, then harvest data or charge a 'shipping fee' for the prize — real brand giveaways never require payment.
Fake subscription emails claim a large auto-renewal is about to charge and ask you to call or click to cancel — they are phishing for your card details or bank login.
Fake gaming item stores steal your account credentials or take payment for items that never arrive — only buy in-game items through official in-game stores or verified marketplace platforms.
Fake travel sites offer extremely cheap flights or hotels, charge your card, and issue worthless or non-existent booking confirmations — use ATOL-protected agencies or book directly with carriers.
Fake ticket sellers offer sold-out or premium tickets that turn out to be counterfeit, duplicated, or non-existent — only buy from official box offices or verified secondary market platforms.
Pyramid and MLM scams promise income primarily through recruiting others rather than selling products — if the money flows from recruitment not sales, it is not a legitimate business.
Governments do not issue tax refunds by asking you to click an email link and enter your bank details — real refunds are credited automatically or by cheque to your registered details.
Fake coupon sites harvest your email and personal data, install browser extensions that track your shopping, or charge for 'membership' to access codes that do not work.
Fake government grant emails promise free money you must claim by entering your bank details — governments do not distribute grants or benefits through unsolicited emails requiring a link to claim.
Fake recovery services ask for your seed phrase to 'recover' lost crypto — sharing your seed phrase gives complete control of your wallet to the fraudster immediately.
Fake auction listings use stock photos, push buyers to pay outside the platform, and then vanish — never pay for an auction item through bank transfer or gift card outside the auction site.
Fake AI investment tools promise algorithmic profits with no risk — they display fabricated dashboard numbers and prevent withdrawals once you have deposited.
Fraudsters impersonate bank fraud teams and create urgency to move your money to a 'safe account' — your real bank will never ask you to transfer your own money for safety reasons.
Fake police calls demand immediate payment of a fine or threaten arrest — real police do not collect fines by phone and do not demand cryptocurrency or gift cards.
Fraudulent payslips and reference letters are used in mortgage and rental applications — verify employment directly with the listed employer using a number you find independently, not one provided by the applicant.
Fake escrow sites are created by scammers to simulate a neutral third party — they collect your payment and hand nothing to the seller or the buyer.
Fake prize sites tell you that you have won through a survey, scratch card, or loyalty programme and ask for a processing fee or card details — real prizes do not require payment to release.
Fake account verification emails create urgency about account suspension and link to credential-harvesting pages — verify your account status by typing the site address directly, never via a link.
Fake customs notices ask you to pay import duties via a link before a parcel is released — real customs authorities send official paper notices and process fees through official government portals.
Fraudsters posing as friends or WhatsApp support ask for your six-digit verification code to take over your account — never share a verification code sent to your phone with anyone.
Fake mortgage brokers collect upfront arrangement fees for loans that never materialise — legitimate FCA-authorised brokers take fees at completion, not before a decision in principle.
Fake car listings use genuine photos at below-market prices and push for deposit payments before viewing — never pay for a vehicle you have not physically inspected and test driven.
CEO fraud emails impersonate senior executives asking for urgent bank transfers or gift card purchases — verify any financial request by calling the requester directly on a known number.
AI-generated deepfake videos are used to impersonate celebrities, executives, and family members in investment and emergency scams — unnatural facial movement, audio sync issues, and requests verifiable by other channels are key tells.
Fake degree mills sell worthless diplomas from invented or unaccredited institutions — verify any qualification by checking the institution's accreditation with the relevant national body.
Fake cashback emails claim your points are about to expire and ask you to click a link to redeem them — real loyalty programmes show your balance in your account and do not expire points through email links.
Fake LinkedIn recruiters use sparse profiles with stock photos, offer vague well-paid roles, and eventually request personal data or fees — verify recruiter profiles and company listings before sharing any information.
Fake virus warning emails claim malware was detected on your device and offer a one-click removal link — real antivirus software never notifies you by email asking you to click an external link to clean your device.
Banking trojans display a fake login overlay on top of your real banking app to steal credentials — keep your device updated, only install apps from official stores, and use your bank's official app rather than browser login where possible.
Inheritance and windfall emails claim a distant relative or anonymous benefactor left you a large sum and ask for fees to release it — this is the classic advance-fee fraud and no such inheritance exists.
Bank transfers offer almost no fraud protection — once the money leaves your account, it is extremely difficult to recover. Use a payment method with buyer protection whenever possible.
Delivery text scams are among the most common phishing methods in use today. Unless you initiated a tracked delivery and the link matches the carrier's official domain, do not click it.
Using public Wi-Fi for banking carries real risk. An attacker on the same network can potentially intercept your session or redirect your traffic. Use mobile data or a VPN instead.
QR codes on parking meters and other public fixtures are frequently tampered with by fraudsters. Criminals place stickers over the genuine code, redirecting you to a fake payment page that steals your card details.
Legitimate platforms that require identity verification — such as financial services, regulated marketplaces, and age-gated services — do have lawful reasons to collect ID. However, many fake platforms request ID as a pretext for identity theft. Know the difference before uploading anything.
Sending a deposit before viewing a property in person is one of the clearest warning signs of rental fraud. Legitimate landlords and agents will always allow viewing before taking a financial commitment.
Social media ads receive minimal vetting on most platforms, making them a common vehicle for fake stores, counterfeit goods, and non-delivery scams. Treat any ad for an unknown retailer with the same caution you would apply to a cold email.
Clicking a phishing link does not automatically mean your accounts are compromised, but the risk depends on whether the site loaded, whether you entered any information, and whether malware was installed. Act quickly to assess the damage.
Replying to a scam text primarily signals that your number is active, which can lead to more contact attempts. It does not in itself cause financial loss, but further engagement increases your risk significantly.
Sharing your phone number with a scammer primarily enables follow-up contact and may result in your number being sold to other fraudsters. In some cases it can also be used in SIM-swapping attacks against your accounts.
Installing a remote-access app at a scammer's request gives them full visibility and control of your device. This is one of the most dangerous outcomes in tech support and banking scams — act immediately to stop access.
Gift cards are never a legitimate payment method for any bill, fine, tax, or service from a business or government agency. Any request to pay this way is a scam without exception.
No bank, regulator, or financial authority will ever ask for your full online banking password over the phone. Any caller requesting it is attempting fraud.
Overpayment scams are a well-established fraud. A buyer sends more than the asking price and asks you to refund the difference — but the original payment is fraudulent and will be reversed, leaving you out of pocket.
You should never enter payment details or personal information on a website without HTTPS (indicated by a padlock and 'https://' in the address bar). Your data travels unencrypted and can be intercepted.
Sending money to someone you have only met online — regardless of how close you feel — is extremely high risk. This is the defining action in romance scams and pig-butchering investment fraud.
VPNs advertised through pop-ups or aggressive ads are frequently fraudulent, privacy-invading, or outright malware. Only use VPNs from reputable providers with independently audited privacy policies.
Paying via Zelle or Venmo Friends and Family on Facebook Marketplace provides virtually no buyer protection. If you do not receive the goods, recovering your money is very difficult. Use cash in person or a buyer-protected payment method.
Legitimate employers do not ask for full bank account details during initial application stages, and never before you have signed a contract and completed ID verification. Early requests for banking information are a hallmark of employment scams and money mule recruitment.
Once your credit card details reach a fraudulent site, criminals will typically attempt to use them within hours — for purchases, cash advances, or selling the data to other fraudsters. Immediate card blocking is essential.
You should never install an app from a link sent by someone you do not know. Legitimate apps are distributed through official app stores, and direct installation links almost always lead to malware.
Genuine competitions do not require a credit card to enter. Any prize draw requesting payment or card details is almost certainly a subscription trap, a fake lottery, or a data-harvesting operation.
Landlords have limited legitimate reasons to request your full National Insurance or Social Security number before a tenancy is agreed. Fraudulent rental listings often use this request as a pretext for identity theft.
Cryptocurrency exchanges found through unsolicited ads — particularly on social media — are a major source of investment fraud. Always verify registration with the relevant financial regulator before depositing anything.
Using another person's card is technically a breach of most card issuers' terms and conditions, even with permission. It also creates legal exposure if the transaction is later disputed. Always use your own card or request a transfer instead.
Cryptocurrency payments are irreversible and carry no buyer or seller protection. As a seller, once you ship an item, the crypto cannot be charged back — but you also cannot easily verify a payment is genuinely confirmed without blockchain knowledge.
Using your primary email for all sign-ups increases your exposure to data breaches, phishing, and spam significantly. Using a separate or masked email for low-trust services materially reduces your risk.
Search ads can be purchased by fraudsters to impersonate legitimate businesses. Always verify the URL in the address bar before entering any payment information, even if the ad appeared at the top of search results.
Many social media giveaways are data-harvesting exercises or outright scams. Genuine brand giveaways rarely require more than a follow and a comment. Any request for personal information, card details, or payment is a red flag.
Sharing your screen with a verified, trusted IT professional is normal practice. Sharing it with someone who contacted you unsolicited — especially claiming your computer has a problem — is extremely dangerous.
Ticket fraud via social media is widespread, particularly for sold-out events. There is no guarantee that tickets sold by social media strangers are genuine, transferable, or even real. Always prefer official channels.
Military romance scams are one of the most common and emotionally damaging fraud types. People claiming to be military personnel deployed overseas and requesting money are almost never who they claim to be.
Reusing passwords is one of the highest-risk security habits online. When any one service suffers a data breach, criminals test the stolen credentials on hundreds of other services — a technique called credential stuffing.
Calling a fake tech-support number typically leads to a remote-access request, payment demand, or data theft. The harm depends on what happened during the call — act quickly to assess and limit damage.
Sharing precise real-time location with anyone you have not met in person and do not fully trust carries safety risks beyond financial fraud. Start with general area only and meet in a public place first.
Full upfront payment to a contractor you have not worked with before is strongly inadvisable. A small deposit to cover materials is common practice, but full payment before completion creates significant risk of non-performance or disappearance.
An unexpected password-reset email you did not request may indicate someone is trying to access your account. Do not click the link — instead, log in directly through the official site and change your password from there.
Billing update requests sent via email are a common phishing technique. Never follow links in such emails — go directly to the service's official website and update payment information from there.
Unsolicited investment calls — also known as boiler room fraud — are a significant source of financial loss. Legitimate regulated advisers do not cold-call members of the public with investment opportunities.
Email attachments from unknown senders are one of the primary methods for delivering malware. You should not open them unless you are certain of the sender's identity and were expecting the file.
Suspicious links on WhatsApp — even from contacts whose accounts may be compromised — can lead to phishing sites, malware, or account-takeover attempts. Do not click without verifying the sender through another channel.
Immigration service scams target vulnerable people with fake visa applications, fraudulent legal advice, and fabricated government fees. Only use services from registered immigration lawyers or authorised advisers.
Inheritance scams are a classic advance-fee fraud pattern. No legitimate inheritance process requires a fee paid to a stranger before the inheritance is released — this is always a fraud.
Unregulated online pharmacies may supply counterfeit, substandard, or incorrectly labelled medicines. Only buy from pharmacies verified by the relevant national regulatory authority.
Money transfer services like Western Union and MoneyGram are nearly impossible to reverse once collected. Sending to online contacts you have not met in person is very high risk and is the payment method of choice for many scam operations.
Vehicle inspection scams use fake inspection services or fabricated reports to pressure buyers into purchasing vehicles without a genuine independent check. Always arrange your own inspection independently.
Your utility account number alone poses limited risk, but callers claiming to be from your energy supplier may be attempting to switch your service, harvest personal data, or conduct social engineering. Always verify calls independently.
Sharing card details over the phone is appropriate only when you initiated the call to a verified, trusted business. Giving card details to someone who called you carries significant risk.
Social media investment promotions from friends often involve hijacked accounts, affiliate incentives, or genuine victims promoting what they do not know is a scam. Verify any investment independently before acting.
Traditional security questions use information that is often publicly available, guessable from your social media, or shared with other family members. Where possible, use random answers stored in a password manager instead.
Debit cards are generally less protected than credit cards for online purchases. Credit cards offer stronger chargeback rights in most jurisdictions, and crucially, fraud comes out of a credit limit rather than your actual bank balance.
Most online mystery shopper job offers are either money mule recruitment or cheque fraud schemes. Legitimate mystery shopping companies are few and typically recruited through established industry bodies.
Date of birth combined with name is a useful identity data point. Where age verification is genuinely required, the purpose and the site's data handling should be clear. Never provide it to sites you cannot verify or trust.
Pet scams are widespread and involve fake listings, deposits paid for animals that do not exist, and additional fees invented after payment. Always see the animal in person before paying.
Pension scams cause catastrophic, often irreversible financial harm. An unsolicited approach about your pension — by any channel — should be treated as a major warning sign. Legitimate pension services do not cold-contact.
Screen-scraping financial aggregators require your login credentials, which carries real security risk. Regulated 'open banking' services use a safer, token-based approach instead. Understand the difference before sharing login details.
Bank impersonation SMS messages are extremely common. Even if the message appears in the same thread as previous genuine bank texts, you should not click the link — navigate to your banking app or official website directly instead.
Your email account is the master key to your online life. Giving any access to a stranger — including a 'support agent' — is extremely dangerous and is almost certainly a pretext for account takeover or wider fraud.
Public USB charging ports carry a small but real risk of 'juice jacking' — malware installation or data theft via the USB connection. Using your own charger with an AC outlet or a USB data blocker is safer.
Bank statement screenshots contain sensitive financial data. Even a partially redacted statement can reveal account numbers, sort codes, transaction patterns, and merchant names that assist identity fraud or social engineering.
Pig butchering is a long-con fraud where criminals build a trusting relationship over weeks before steering victims into a fake cryptocurrency investment platform, eventually draining everything they deposit.
Romance scammers create fake profiles on dating sites or social media, spend weeks or months building emotional intimacy, then manufacture a crisis that requires money — and keep fabricating new ones.
In a SIM swap, a fraudster convinces your mobile carrier to transfer your phone number to a SIM they control, which lets them intercept SMS one-time codes and take over your accounts.
In BEC fraud, criminals compromise or impersonate a business email account and intercept payment instructions, swapping real bank details for their own so funds are wired directly to them.
Task scams promise easy pay-per-task online work but require victims to make upfront crypto deposits to 'unlock' tasks, resulting in escalating losses with no real income ever paid.
Tech support scams use alarming fake alerts or cold calls to convince victims their device is infected, then gain remote access to steal data or money while charging for nonexistent fixes.
Advance-fee scams promise a large payout — an inheritance, lottery win, or business deal — that can only be released after the victim pays a series of ever-growing 'fees', none of which ever unlock real money.
An overpayment scam involves a fraudulent cheque or payment for more than the agreed amount, with a request to refund the difference before the original payment bounces — leaving the victim out of pocket.
Triangulation fraud places victims between a fake online shop and a real retailer: you pay the fraudster, they buy the product for you with a stolen card, and the cardholder disputes the charge — leaving you with a potential fraud investigation.
Pump-and-dump schemes artificially inflate the price of a cheap asset through coordinated hype, then organise insiders dump their holdings onto retail buyers, causing the price to collapse.
A Ponzi scheme pays early investors using money from newer investors rather than genuine returns, creating an illusion of a profitable business that inevitably collapses when new money stops flowing in.
Recovery scams target people who have already lost money to fraud, posing as recovery specialists or law enforcement, then charge upfront fees for a service that never recovers anything.
Lottery scams falsely inform victims they have won a prize in a draw they never entered, then charge escalating fees to claim a payout that never arrives.
Charity scams create fake organisations or impersonate real ones to solicit donations, particularly after disasters, diverting funds away from genuine relief efforts.
Rental scams post attractive properties at below-market prices, collect deposits from multiple victims, and disappear before any viewing takes place — leaving everyone without accommodation or money.
Fake job offer scams either charge upfront fees for placement, training, or equipment that never materialises, or use the hire to recruit money mules without their knowledge.
Phishing emails impersonate trusted organisations to trick recipients into clicking a malicious link, entering credentials on a fake site, or downloading malware — all to steal accounts or data.
Grandparent scams involve a fraudster impersonating a grandchild in distress — arrested, in hospital, or abroad — and urgently requesting cash or gift cards before the family can verify the story.
Government impersonation scams use fear of arrest, deportation, or legal action to pressure victims into making immediate payments to fake officials via untraceable methods.
Deepfake CEO fraud uses AI-generated audio or video of an executive to instruct a finance employee to make an urgent wire transfer, bypassing the normal verification that would catch a text-only request.
High-yield investment frauds promise returns far above market rates through exclusive or proprietary strategies, collecting funds into accounts the fraudster controls with no intention of investing.
Subscription traps offer a 'free' trial that automatically converts to a recurring charge — using buried terms, deliberately complicated cancellation, and multiple product tiers to maximise billing.
Impersonators clone or hack real accounts to request emergency money from friends and followers, or to promote fake giveaways and fraudulent investment schemes using a trusted identity.
Fake parcel notifications impersonate delivery companies to harvest card details or install malware, using the universal expectation of online deliveries to bypass scepticism.
Fraudulent crypto exchanges mimic legitimate platforms, let users deposit real funds, show fabricated portfolio growth, and then block all withdrawals once a target amount is reached.
Pyramid scheme MLMs make most of their money from recruitment fees and inventory purchases by new participants rather than genuine product sales, ensuring the majority of members lose money.
Health scams sell unproven treatments, fake cures, or dangerous supplements using fabricated testimonials and pseudo-scientific marketing, targeting people with serious conditions who are desperate for relief.
Student loan scams charge upfront fees to apply for forgiveness or reduced payments — services that are free through official government programmes — or fabricate loan relief that leaves victims deeper in debt.
Insurance scams either sell fake policies that pay nothing at claim time, or claim-pad and stage incidents to extract fraudulent payouts — with consumers sometimes victimised and sometimes unknowingly implicated.
Gaming scams steal high-value skins or in-game items through phishing, fake trading platforms, or hijacked Steam or Discord accounts — often targeting items worth real money on secondary markets.
Car scams either advertise vehicles that do not exist and collect deposits, or use overpayment or stolen-check schemes when selling, leaving buyers without a car or sellers without genuine funds.
Pet scams advertise desirable animals at low prices, collect deposits, then manufacture transport and quarantine fees until the victim has paid far more than the pet would cost from a legitimate source.
Utility impersonation scams threaten immediate disconnection unless payment is made within hours by gift card or wire transfer, exploiting fear of losing electricity, gas, or water.
Travel scams sell fake hotels, flights, or holiday packages — collecting full payment before victims discover the booking does not exist or the accommodation bears no resemblance to the advertised property.
Sha zhu pan combines long-term romantic relationship building with a fake investment platform, using the emotional bond to lower financial defences before extracting maximum deposits.
SSN scams claim your Social Security number has been linked to criminal activity and will be suspended — pressuring you into confirming personal details or making payments to fake officials.
IRS impersonation scams threaten arrest or asset seizure for alleged unpaid taxes, demanding immediate payment by untraceable method while the victim is kept on the phone.
Inheritance scams inform victims of a large unclaimed estate supposedly linked to their family name, requiring fees to process a claim that will never materialise.
Immigration scams charge fees to process visas, residency, or work permits that are either fake or obtainable cheaply through official channels — exploiting the complexity of immigration law and the stakes of relocation.
AI voice cloning scams synthesise a convincing imitation of a known person's voice from publicly available audio, then use it to make emergency requests or authorise transactions in calls to family members or colleagues.
Money mule schemes recruit ordinary people to receive and forward fraudulent payments through their own bank accounts, unknowingly laundering criminal proceeds and exposing themselves to criminal liability.
Account takeover fraud combines stolen credentials, social engineering, and real-time interception of security codes to permanently seize control of email, banking, or social media accounts.
Fraudsters monitor obituaries to target grieving families with fake bills from suppliers, fake debt collectors claiming the deceased owed money, or fraudulent bereavement support services.
QR code scams replace legitimate codes with fraudulent ones that redirect to phishing pages, fake payment portals, or malware downloads — exploiting the user's inability to read a QR code before scanning.
Bank impersonators use spoofed phone numbers and insider-level personal detail to convince victims their account is under attack, then direct them to move money to a 'safe account' controlled by the fraudsters.
Scholarship scams guarantee awards that require an application fee, or notify victims of a grant they won without applying, then charge processing fees that accumulate before the money never arrives.
Copycat websites mirror legitimate government, banking, or retail sites to harvest login credentials, collect payment for services available free elsewhere, or sell counterfeit goods under a credible brand.
Energy switching scams collect sign-up fees or personal data under the pretence of switching your utility to a cheaper tariff, without actually completing any switch or using a legitimate comparison service.
Survey scams promise gift cards or cash for completing questionnaires but require shipping fees, credit card details, or app installations before any reward is delivered — and the reward never arrives.
NFT scams create artificial hype around low-value or nonexistent digital assets using fake celebrity endorsements, wash trading, and rug pulls — leaving buyers with worthless tokens.
Credit repair scams charge upfront fees to 'fix' credit reports using methods that are either ineffective, illegal, or available for free directly from the credit bureau.
Fake giveaway posts impersonate celebrities, brands, or official accounts to collect entry fees, personal data, or platform permissions — with no prize ever awarded.
Elder financial abuse via scams systematically targets older adults using psychological manipulation, isolation, and manufactured urgency — exploiting cognitive vulnerability, loneliness, and greater accumulated wealth.
A charity-romance combo scam uses an emotional relationship to build trust, then requests donations to a fake charitable cause the scammer claims to run — layering the romance and charity fraud mechanics for larger yields.
Fake loan companies collect processing fees or insurance payments from people in financial need, then disappear without ever issuing any loan.
Crypto giveaway scams impersonate celebrities or platforms promising to double or multiply any amount of crypto sent to a specified address — but send nothing back.
Fake check cashing scams exploit the banking system's provisional crediting policy: a fraudulent check appears to clear before your bank confirms it is bogus, and any cash sent against it comes out of your own account.
Free investment seminars use high-energy presentations and social pressure to sell expensive courses, software subscriptions, or investment opportunities of dubious value to attendees who arrive expecting free education.
Ticket scams sell counterfeit, invalid, or nonexistent tickets to popular events, collecting payment through channels with limited buyer protection and delivering nothing valid at the venue.
Housing deposit scams collect reservation fees or full deposits for new-build properties or buy-to-let investments that are either nonexistent or never intended for legitimate sale.
Romance scammers target anyone seeking connection, but they actively seek out people who appear lonely, recently bereaved, divorced, or who post publicly about wanting a relationship.
Investment scammers most often target people with accessible savings, those worried about retirement income, and anyone who has recently expressed interest in financial growth online.
Grandparent scammers target older adults, typically over 60, because they are more likely to have accessible savings, answer their phones, and respond instinctively to a family emergency.
Gift cards are irreversible, anonymous, and widely available, making them the ideal payment tool for scammers who want to disappear with funds before any report can be made.
Cryptocurrency transactions are irreversible, difficult to trace to a real-world identity, and can cross borders instantly, making crypto the preferred payment channel for fraud.
Wire transfers move money quickly between bank accounts with limited ability to recall funds once sent, and scammers can receive them in overseas accounts that are difficult to freeze in time.
Scammers obtain phone numbers from data breaches, purchased data lists, public directories, social media profiles, and automated diallers that call every number in a sequence.
Email addresses are harvested from data breaches, scraped from public websites, sold by data brokers, and gathered through phishing sites and compromised mailing lists.
Bank details are most commonly obtained through phishing attacks, data breaches at companies that stored your payment information, and malware installed on devices used for online banking.
Scam money is hard to recover because it is moved quickly through multiple accounts, often across borders, and payment methods like gift cards and crypto have no reversal mechanism.
Yes. Organised scam call centres operate in several countries, employing dozens or even hundreds of people who follow scripted approaches to defraud victims, typically in wealthier English-speaking countries.
Lottery scammers target people who have expressed interest in sweepstakes, those who have previously entered competitions, and older adults who are more likely to engage with unsolicited mail or phone calls.
Tech support scammers primarily target older and less tech-confident adults, but anyone can be caught by a convincing browser popup or cold call claiming their device has a serious problem.
Pig-butchering scams build a weeks-long false relationship — romantic or friendly — before steering the target into a fake investment platform where deposits grow on screen but cannot actually be withdrawn.
Bank transfers are fast, widely trusted, and — once authorised by the account holder — treated as legitimate transactions that banks are not always obligated to reverse.
Scammers use spoofed phone numbers that display real government caller IDs, forged official-looking documents, and scripted calls that mimic real government language and processes.
Moving off a platform removes the scammer from oversight, reporting tools, and message monitoring that the original platform can use to detect and shut down fraud.
Employment scammers post attractive fake job listings on legitimate job boards, exploiting the hope and financial pressure that often accompanies job searching.
Scammers use a mix of purchased data lists, social media profiling, demographic targeting, and opportunistic scanning of people who have publicly indicated vulnerability or financial availability.
Emotional bonds override rational financial judgement. A person who believes they are in love will often rationalise payments that they would refuse from a stranger.
A money mule is someone whose bank account is used to receive and forward scam proceeds. They are often recruited through fake job ads, romantic manipulation, or social media promises of easy money.
Disasters generate widespread emotional urgency and immediate giving intent before verification infrastructure can catch up with the volume of appeals.
Subscription scams use free trial sign-ups, obscure terms that auto-charge after the trial ends, and billing amounts small enough to go unnoticed on bank statements for months.
Scammers use AI tools to generate convincing personalised messages at scale, create deepfake voices and images, and automate the early stages of relationship building.
Older adults are targeted due to a combination of accessible savings, more trusting telephone habits, potential social isolation, and the fact that age-specific life events create predictable targeting opportunities.
Scammers use keyword searches, profile filters, algorithm-driven discovery, and public post content to identify people showing signs of loneliness, grief, financial need, or recent life disruption.
International prosecution requires cooperation between law enforcement agencies across multiple jurisdictions, each with different legal standards, timelines, and practical capabilities.
Scammers use professional-looking websites, fabricated reviews, fake regulatory logos, social proof via social media, and stolen credentials from real organisations to appear trustworthy.
Social engineering is the use of psychological manipulation to bypass rational thinking and persuade people to take actions they would otherwise refuse, such as sharing sensitive information or sending money.
Rental scammers post fake property listings, often using photos taken from real listings, and ask for deposits or rent before any viewing, exploiting the urgency of housing searches.
Personal identification documents enable scammers to commit identity theft, open fraudulent accounts, apply for credit, and sell verified identity packages to other criminal actors.
Fake online shops offer popular products at dramatically reduced prices, charge real payment, and either ship nothing, ship counterfeit goods, or gather payment details for fraud.
MLM and pyramid schemes recruit through personal networks, aspirational income promises, and community belonging — making exit feel like social rejection and financial failure simultaneously.
Cash is untraceable, irreversible, and leaves no digital record — making it the payment method with the fewest mechanisms for recovery or investigation.
Insurance scams target policyholders through fake policies, ghost brokers, and claims manipulation, exploiting the complexity of insurance products and the urgency of renewal deadlines.
Bereaved people are targeted because grief creates temporary cognitive overwhelm, financial transition, and social isolation — all conditions that reduce the ability to identify and resist fraud.
Tourists are targeted because they are unfamiliar with local prices, processes, and legitimate services, making them more susceptible to overcharging, fake bookings, and distraction theft.
Utility scammers impersonate energy companies at the door or by phone, use price anxiety to create urgency, and either charge for fake services or harvest bank details for direct debit fraud.
Fake cheques are sent to create a fabricated obligation to repay part of the stated value, exploiting the delay between a cheque appearing to clear and the bank discovering it is fraudulent.
Medical scams target people managing illness, chronic conditions, or health anxiety by offering unregulated treatments, miracle cures, and fake supplements that prey on the desire for relief and control.
Education scams offer fake qualifications, diploma mills, and bogus tutoring services, exploiting the pressure to obtain credentials quickly and affordably.
Gaming scams exploit the desire for rare items, in-game currency, account upgrades, and competitive advantage — targeting players through fake trade offers, phishing, and social manipulation within gaming communities.
Account takeovers happen through phishing links, credential stuffing, fake support impersonation, and SIM-swap attacks — giving scammers access to a trusted identity they can exploit for fraud.
Pet scammers post fake listings for puppies, kittens, or exotic animals, collect a deposit or full payment, and then claim delivery problems requiring more money before the non-existent animal never arrives.
Parcel scams send fake delivery notifications claiming a fee or customs charge is needed to release a package, creating a plausible-sounding reason for a small payment or for sharing personal details.
Urgency bypasses the reflective thinking needed to identify a scam — it shifts a person into reactive mode where the instinct to resolve a threat overrides the impulse to verify it first.
Advance fee fraud promises a large reward in exchange for a sequence of upfront payments, using sunk cost psychology and maintained hope to keep victims paying long after the red flags are obvious.
Small businesses handle regular financial transactions, may lack dedicated fraud teams, and must respond quickly to supplier and client communications — all of which create exploitable opportunities.
Recovery scammers contact recent fraud victims offering to retrieve lost funds for a fee — exploiting desperation and the established pattern of paying for a promised result.
Caller ID spoofing lets scammers display any phone number they choose, including official government and bank numbers, making their calls appear to come from trusted sources.
Immigration scammers impersonate lawyers, visa agents, or government officials, exploiting the complexity of legal processes, language barriers, and the significant consequences of status errors.
Vehicle scams use fake listings for cars that do not exist, clocked or salvaged vehicles presented as sound, and title fraud — exploiting buyers who conduct limited in-person verification.
Spear phishing is a targeted attack using personalised information about the recipient — in contrast to mass phishing which sends the same generic message to millions.
Fake reviews, purchased followers, fabricated testimonials, and manufactured endorsements are used to create the appearance of public trust and activity that does not genuinely exist.
SIM swapping convinces a mobile carrier to transfer a victim's phone number to a SIM the scammer controls, giving them access to SMS-based authentication codes for financial and social media accounts.
Trust investment makes the eventual financial request seem out of character for the relationship, lowers the victim's guard, and creates emotional investment that makes saying no psychologically costly.
Scammers gravitate to platforms with large user bases, limited identity verification, easy account creation, and communities whose members are likely to be searching for the type of opportunity being offered.
Secrecy prevents verification and intervention during the scam; shame prevents reporting after it, creating a cycle that protects the scammer and extends the harm to the victim.
Scammers on Facebook Marketplace typically pose as buyers or sellers to steal money or goods, using fake payment screenshots, overpayment tricks, and pressure tactics to bypass safe transaction practices.
Facebook Marketplace can be safe if you follow cash-in-person or PayPal Goods and Services transactions, but it carries real risk when buyers or sellers push you toward unprotected payment methods or remote deals.
WhatsApp scams exploit the platform's end-to-end encryption and personal-messenger feel to run impersonation, investment, and romance fraud with a false sense of privacy and trust.
Telegram's large anonymous groups and bot ecosystem make it a hotspot for crypto pump-and-dump schemes, fake investment channels, and impersonation of customer-support staff from major brands.
Instagram scams center on fake influencer giveaways, impersonation of well-known accounts, counterfeit product shops, and romance profiles designed to eventually solicit money or investment.
TikTok scams exploit viral reach and the platform's young audience through fake giveaways, fraudulent shop links, investment promotion by impersonated creators, and gift-card livestream fraud.
Dating app scams build romantic trust over days or weeks before pivoting to financial requests — emergency loans, investment platforms, or gift-card payments — exploiting the emotional connection that has been created.
LinkedIn scams exploit the professional context to run fake job offers, investment schemes, and phishing attacks that feel credible because the platform is associated with career legitimacy.
Zelle scams exploit the app's instant, bank-linked transfers — which are nearly impossible to reverse — through impersonation of bank fraud departments, fake buyer schemes, and social engineering that rushes victims into sending money before they can think.
Cash App scams range from impersonation of Cash App customer support to fake "Cash App Friday" giveaways and money-flipping schemes that steal funds through irreversible peer-to-peer transfers.
PayPal scams typically involve getting victims to use the Friends and Family option (which has no buyer protection) rather than Goods and Services, or to act on fake payment notification emails that mimic PayPal's branding.
Venmo scams exploit the app's social feed and peer-to-peer payment design through fake payment screenshots, accidental-overpayment reversals, and social engineering attacks that leverage the public transaction history.
Crypto exchange scams range from impersonation of real exchange support staff and phishing to fake exchange platforms designed to trap deposits and fraudulent "account verification" fees that steal funds before any trade occurs.
WhatsApp Pay is a real feature in some countries, but using WhatsApp to arrange or request money transfers exposes you to social-engineering scams that exploit the personal trust the platform creates.
LinkedIn is a legitimate and widely used job-hunting platform, but fake recruiters, advance-fee employment scams, and phishing attacks require job seekers to verify every opportunity independently before sharing personal data or paying any fee.
Instagram shopping has legitimate uses but is also rife with counterfeit goods, fake storefronts, and sellers who take payment and disappear, especially for transactions arranged outside the platform's official checkout.
Dating apps can be safe environments for meeting people, but they require you to independently verify a match's identity before meeting in person, and to treat any financial request — however sympathetically framed — as a near-certain fraud.
Regulated, well-established crypto exchanges are significantly safer than unregulated or newly created platforms, but all cryptocurrency investment carries risk from market volatility, platform failure, phishing attacks, and scams that exploit the ecosystem.
Telegram is not a safe channel for investment activity — the vast majority of investment groups on Telegram are fraudulent, and the platform's anonymity makes it the preferred channel for pump-and-dump schemes and pig-butchering crypto scams.
TikTok has become a platform where recruiters share content and some job postings appear, but it carries significant risks from fake remote job schemes and task-based scams that collect money under the guise of employment.
PayPal Friends and Family scams exploit the no-fee, no-protection nature of that payment option to collect money for goods or services that never arrive, leaving victims with no recourse through PayPal's dispute system.
Facebook Dating scams mirror broader dating-app fraud, but the platform's integration with Facebook profiles gives fake accounts additional false credibility that can make romance scams and investment pitches more convincing.
Craigslist scams exploit the platform's anonymous, unverified listings to run fake buyer and seller schemes, rental deposit fraud, and job scams that rely on cash-equivalent payments and the difficulty of verifying anyone's identity.
Local selling apps like OfferUp, Letgo, and similar platforms are targeted by fake payment apps, impersonation of the platform's payment systems, and shipping scams that bypass the safety of in-person cash transactions.
Discord scams target gaming communities and crypto enthusiasts through fake NFT and crypto giveaways, malicious bot invites, impersonation of server administrators, and links that deliver credential-stealing malware.
Twitter/X scams exploit the platform's viral reach through fake celebrity giveaways, cryptocurrency promotion by impersonated accounts, and phishing attacks on account credentials via fake verification or suspension notices.
YouTube scams use live-stream hijacking of popular channels, fake investment ads, and comment-section impersonation to reach large audiences with crypto doubling schemes and fraudulent financial platforms.
PayPal Goods and Services provides meaningful buyer protection for online purchases, but protection has limits and does not cover all situations — particularly purchases from accounts that are themselves fraudulent or operating against PayPal's terms.
Etsy scams range from counterfeit sellers and dropshippers misrepresenting mass-produced goods as handmade to outside-platform payment requests and fake dispute emails targeting sellers.
eBay scams include off-platform payment requests to bypass buyer protection, second-chance offer fraud targeting auction losers, and SNAD (significantly not as described) return fraud exploiting sellers.
Amazon Marketplace scams involve third-party sellers sending counterfeit goods, brushing schemes that game the review system, and phishing attacks impersonating Amazon order notifications to steal account credentials.
Venmo is designed for payments between people who know each other and offers no buyer protection for peer-to-peer transactions — paying a stranger for goods or services creates significant risk with no recourse if something goes wrong.
Zelle is not appropriate for paying businesses you do not already have an established, trusted relationship with — it has no buyer protection and transfers are nearly impossible to reverse, making it a high-risk method for any commercial transaction.
Nextdoor scams exploit the neighbourhood trust model through fake service provider listings, virtual kidnapping calls that use resident data, and marketplace fraud that benefits from the false sense of local credibility.
Poshmark and similar resale platforms are targeted by counterfeit goods sellers, outside-platform payment requests that bypass protections, and account takeover attacks on sellers with established reputations.
Airbnb scams involve off-platform payment requests that bypass host guarantees, listings for properties that do not exist or are misrepresented, and phishing attacks impersonating Airbnb communication to steal account credentials.
Freelance platform scams target both clients and freelancers through fake job posts that harvest personal data, off-platform payment requests, and check-cashing schemes disguised as test assignments.
Bumble and Hinge face the same romance fraud patterns as other dating apps, but their user-verification features and profile-quality requirements are exploited by scammers as trust signals to lower victims' defences.
Cash App's in-app stock and bitcoin buying features are exploited by impersonators who claim to be Cash App support or certified advisors, promising guaranteed returns in exchange for depositing more funds into crypto.
Telegram is not a dating platform and using it for romantic communication with strangers carries significant risk — it is the preferred secondary channel for romance scammers who want to move off regulated dating apps where their activity might be monitored.
WhatsApp Business accounts are exploited by scammers who create fake brand accounts to impersonate real businesses, run phishing attacks, and collect payments from customers who believe they are communicating with a legitimate company.
Receiving legitimate payments on Cash App is safe, but accepting payments from strangers carries risk because fraudulent payments can be reversed after you have provided goods or services, leaving you at a loss.
LGBTQ+ dating apps face specific fraud risks including catfishing with fake profiles, hookup blackmail that exploits privacy concerns, robbery set-up attacks, and the same financial romance scams found on mainstream dating platforms.
Vehicle purchases on Facebook Marketplace carry significant fraud risk — sellers who do not own the car, salvage title concealment, and overseas-owner stories are all common tactics that can cost buyers thousands of dollars.
WhatsApp investment groups are almost always fraudulent — they use fabricated profit screenshots, manufactured social proof, and a fraudulent trading platform to collect deposits that can never be withdrawn.
TikTok's financial content ranges from genuinely educational to actively harmful — the platform's algorithm rewards engagement over accuracy, making it easy for misleading investment claims to reach far more people than careful, qualified advice.
Scammers send real PayPal invoices for products or services you never ordered, sometimes including a phone number to call, which connects to a fake support agent who attempts to steal account credentials or guide victims through a fraudulent refund process.
Cash App's bitcoin feature is a legitimate regulated service for buying and selling bitcoin, but users face significant risk from third-party impersonators, fake investment schemes promoted on social media, and account security threats.
Facebook Groups are exploited for buy-sell fraud, fake contest giveaways, investment scheme recruitment, and impersonation of group admins to collect payments or credentials from trusted community members.
Zelle can be appropriate for paying rent to a verified, established landlord you already have a lease with, but is completely inappropriate for sending a deposit to someone you have never met or verified, where rental scams routinely collect money and disappear.
Snapchat scams exploit the platform's disappearing-message format and young user base through drug offers that facilitate robberies, sextortion after explicit content exchanges, and financial scams targeting teens.
Google Pay and Apple Pay themselves are secure payment technologies, but scammers misuse them through social engineering — tricking victims into authorising payments to fraudulent accounts using the same convenience that makes the apps popular.
Instagram is not a safe channel for investing — the vast majority of investment promotions on the platform are either fraudulent or involve unregistered products, and its influencer culture creates an environment where fabricated profit claims spread rapidly.
Paid dating sites face the same romance fraud as free apps, but scammers exploit the belief that a paying membership means greater user quality — leading victims to be less cautious about the same red flags they might notice on a free platform.
Secondary ticketing scams range from entirely fake tickets to real tickets that have been sold multiple times, often using PDF or digital ticket codes that look authentic but are either invalid or have been already scanned at entry.
LinkedIn investment promotions range from legitimate regulated content to outright fraud — the platform's professional veneer makes fraudulent investment pitches appear more credible than they would on a consumer social network.
Pinterest scams involve fake product pins that link to fraudulent shops, counterfeit goods, phishing pages disguised as login prompts, and pyramid or network marketing recruitment dressed up as lifestyle and income content.
Reddit scams exploit community trust through fake moderator impersonation, subreddit-specific buy-sell fraud, pump-and-dump coordination for low-cap assets, and technical support impersonation in help communities.
WhatsApp Pay in supported countries provides a regulated payment layer, but the messaging platform remains a social engineering vector that scammers exploit to intercept or redirect business payments regardless of the payment mechanism used.
Gaming platform scams target players through fake trade offers for in-game items, phishing for account credentials to steal valuable game libraries, and fake tournament entry fees or prize claim requests.
Visit ReportFraud.ftc.gov and complete the online form. The FTC does not resolve individual complaints but uses reports to build cases and alert consumers.
File a complaint at IC3.gov, the FBI's Internet Crime Complaint Center. IC3 handles internet-facilitated fraud and shares reports with federal and local law enforcement.
Report to Action Fraud online at actionfraud.police.uk or by calling 0300 123 2040. They are the UK's national reporting centre for fraud and cybercrime.
Call the fraud number on the back of your card or in your banking app immediately. The sooner you call, the better the chance of stopping or reversing a fraudulent payment.
Use the platform's built-in 'Report' button on the profile, listing, or message, then follow up with a written complaint to their support team referencing fraud or impersonation.
For non-emergency scams, call your local police non-emergency line or file online. For ongoing crimes or physical danger, call 911 (US) or 999 (UK) immediately.
Visit your state attorney general's website, find the consumer protection or fraud complaint section, and complete the online form. Most states provide a direct link at naag.org.
Report at Scamwatch.gov.au, which is run by the Australian Competition and Consumer Commission (ACCC). You can also call 1300 795 995 for general consumer inquiries.
Most individual reports are logged and contribute to pattern analysis. Active investigations are rare for single complaints, but your report directly enables larger enforcement actions.
Reporting alone rarely recovers money. Your best chance is contacting your bank immediately to request a recall, chargeback, or reimbursement under fraud protection rules.
Yes. Reports from people who spotted and avoided a scam help agencies identify active fraud campaigns earlier and warn others before they become victims.
Forward the scam text to 7726 (SPAM) in the UK, Australia, and the US. Also report to the FTC, Scamwatch, or Action Fraud and block the sender.
Forward phishing emails to [email protected] (global), to [email protected] (UK), or to [email protected] (US FTC). Also use your email provider's built-in 'Report phishing' button.
Report to Google Safe Browsing, the NCSC (UK), or the FTC (US) and submit a takedown to the domain registrar. Sites can be removed within hours if you act quickly.
Report to the FTC at ReportFraud.ftc.gov (US), to Ofcom via ofcom.org.uk (UK), or to the ACCC via Scamwatch.gov.au (Australia), and register with the national Do Not Call list.
Report to your national securities regulator: the SEC and CFTC in the US, the FCA in the UK, or ASIC in Australia. Also report to the FTC or Action Fraud and your bank.
Report to the FBI IC3 at ic3.gov, the FTC at ReportFraud.ftc.gov, and the CFTC (US) or FCA (UK). Also report to the cryptocurrency exchange if you used one.
Report to the FTC at ReportFraud.ftc.gov, the FBI IC3 at ic3.gov, and the platform where you met the scammer. Also contact your bank immediately if money was sent.
Report to the FTC at ReportFraud.ftc.gov, to the job platform where the ad appeared, and to your state attorney general or the UK's Action Fraud if you lost money.
Report to Adult Protective Services (US), your local police, the FTC, and the National Elder Fraud Hotline at 1-833-FRAUD-11. In the UK, contact Adult Social Care and Action Fraud.
Report to the FTC (US), the Charity Commission (England and Wales), or OSCR (Scotland). Also check whether the charity is legitimately registered before donating.
Report to the FTC, the rental platform, and your state attorney general or Action Fraud. File a police report for a crime reference number and contact your bank if you paid a deposit.
Report to the FTC at ReportFraud.ftc.gov, the FBI IC3, and the US Postal Inspection Service if you were contacted by mail. In the UK, report to Action Fraud.
Report to the FTC at ReportFraud.ftc.gov and to the company being impersonated. If you gave remote access, change all passwords immediately and run a full security scan.
Report to the FTC at ReportFraud.ftc.gov and to the agency being impersonated. In the UK, report to Action Fraud and to HMRC's phishing team at [email protected].
Report to the FTC at IdentityTheft.gov (US), which generates a personalised recovery plan. In the UK, report to Action Fraud and contact the fraud teams at affected companies directly.
Report to the FTC at ReportFraud.ftc.gov, dispute the charges with your card issuer, and report to your state attorney general or the Competition and Markets Authority (UK).
Report to the FTC at ReportFraud.ftc.gov and to the FDA MedWatch (US) for bogus health products. In the UK, report to Action Fraud and to the MHRA's yellow card scheme.
Report to the FTC at ReportFraud.ftc.gov, to the marketplace or platform where you bought, and initiate a chargeback with your card issuer as soon as possible.
Use the platform's in-app 'Report' tool on the profile or post, then file with the FTC or Action Fraud if money was lost. Also report fake ads to the ad network.
Report to the FTC (US) or Action Fraud (UK), to the travel booking platform, and to ABTA or ATOL (UK) or your state attorney general (US). Initiate a chargeback for card payments.
Report to the FTC at ReportFraud.ftc.gov, to the platform where the listing appeared, and to your state attorney general. Initiate a chargeback with your card issuer.
Report to the FTC at ReportFraud.ftc.gov (US) or Trading Standards via Citizens Advice (UK). Your state attorney general also handles pyramid scheme complaints.
Report to the FTC at ReportFraud.ftc.gov and to the Consumer Financial Protection Bureau (CFPB). For UK student finance scams, report to Action Fraud and Student Loans Company.
Report to the FBI IC3 at ic3.gov immediately and contact your bank to request an emergency wire recall. BEC fraud is time-sensitive — every hour counts.
Report to the FTC at ReportFraud.ftc.gov, the US Postal Inspection Service if the cheque came by mail, and your bank. Never send money back for an overpayment before a deposited cheque fully clears.
Report to the FTC (US), your state public utilities commission, or Ofgem (UK). Also report to the supplier being impersonated and to Action Fraud if money was lost.
Report to the FTC, your state attorney general, and the platform where the vehicle was listed. Report VIN fraud or clocking to the DVLA (UK) or the National Motor Vehicle Title Information System (US).
Report to your state insurance commissioner (US) or the FCA (UK). For organised insurance fraud such as crash-for-cash, also report to the Insurance Fraud Bureau (UK) or the FBI (US).
Report to the game publisher or platform using their in-game or website reporting tool. For real-money losses, also report to the FTC and your card issuer.
Report to the FTC, the FBI IC3, and the platform hosting the content. For voice or video cloning of a real person, also notify that person and their legal representatives.
Report smishing parcel scam texts to 7726 and to the courier being impersonated. Report mail fraud in the US to the Postal Inspection Service at postalinspectors.uspis.gov.
Report to the FTC, the state bar association (if a fake lawyer was involved), and USCIS (US) or the Solicitors Regulation Authority (UK). For notario fraud, report to the Department of Justice.
There is no time limit for reporting to the FTC, Action Fraud, or Scamwatch. However, chargeback and bank fraud claim windows are typically 60 to 120 days, so act on financial disputes as fast as possible.
Gather dates, amounts, contact details used by the scammer, screenshots or records of communications, and any transaction references. The more detail you provide, the more useful your report.
Yes, prosecution is possible, especially when multiple reports point to the same operation. Overseas scammers face practical but not insurmountable obstacles through international cooperation.
Reporting is confidential and your identity is protected. Scammers are professionals exploiting human psychology — falling for a scam says nothing about your intelligence.
You can file a report on someone else's behalf with the FTC, Action Fraud, or Scamwatch. Describe your relationship to the victim and what you know about the fraud.
Use the ScamEncyclopedia risk checker at /risk-score/scam-risk-checker to assess a suspicious message, website, or contact, then report through the appropriate official channel based on the results.
Report to Trading Standards via the Citizens Advice consumer helpline at 0808 223 1133. Citizens Advice passes reports to Trading Standards and can advise on your consumer rights.
If your bank or financial firm has not resolved your fraud complaint within eight weeks, escalate to the Financial Ombudsman Service at financial-ombudsman.org.uk.
File a complaint at consumerfinance.gov/complaint. The CFPB handles complaints about banks, lenders, credit bureaus, and financial services companies — particularly useful for student loan, mortgage, and debt collection fraud.
Contact the exchange's fraud or security team immediately with wallet addresses and transaction IDs. Some exchanges can freeze funds or assist law enforcement if you act within hours.
Report to local police abroad for a crime reference, then file with your home country's agency (FTC, Action Fraud, ACCC) and contact your bank as soon as you return or have connectivity.
Yes. Scam reports directly lead to enforcement actions, consumer alerts, platform takedowns, and the statistical data that drives public policy and funding for fraud prevention.
Report to the FTC at ReportFraud.ftc.gov and to the FBI IC3. Recovery scams are secondary frauds that target people who have already been victimised once.
Establish open communication, set up account alerts, and create a trusted-contact arrangement with their bank so unusual activity triggers a call before money moves.
Teenagers are targeted through gaming, social media, and fake job offers — open dialogue about what scams look like in their digital world is more effective than software restrictions alone.
Train staff to verify payment requests by phone before acting, implement dual-approval for wire transfers, and watch for invoice fraud and fake government compliance notices.
Use a unique strong password for every account, enable two-factor authentication (ideally with an authenticator app), and never click password-reset links you did not request.
Add a SIM-lock PIN or port-freeze to your mobile account, and switch important accounts to app-based two-factor authentication so your phone number is no longer the key to your finances.
Check the domain age, look for verifiable contact details, read third-party reviews, and trust your instincts — sites with prices far below market and no traceable business behind them are almost always fraudulent.
Beyond the basics of HTTPS and reviews, confirm the store has a traceable business registration, real customer-service contact, and a clear returns policy — and pay by credit card so you can dispute a non-delivery.
Search the charity's name on a charity navigator site and confirm its registration number with your country's official charity regulator — legitimate charities welcome this scrutiny.
Verify the business registration in an official company database, check for a physical address and working phone number, and look for independent reviews before signing a contract or sending money.
Verify the firm and any individual adviser are registered with your financial regulator, and be deeply sceptical of any investment promising guaranteed returns or pressure to decide quickly.
Change your password for the breached service immediately, check whether the same password was reused elsewhere, enable two-factor authentication, and monitor your credit for unusual activity.
A credit freeze prevents new credit lines from being opened in your name without your permission — it is free in the US, takes about 15 minutes, and is one of the most powerful identity-theft protections available.
Go to each account's security settings, choose two-factor authentication, and select an authenticator app rather than SMS — this single step dramatically reduces account-takeover risk.
Caller ID is not proof of identity — anyone can spoof any number. Hang up and call back using a number from an official source if you receive an unexpected call claiming to be from a bank, government agency, or utility.
Minimise public personal information, use strong unique passwords with 2FA on every account, freeze your credit proactively, and monitor for breaches regularly.
Verify ownership of the property through public records, insist on viewing the property in person before paying anything, and never wire a deposit to someone you have only communicated with online.
Verify the recruiter's LinkedIn profile and the company's official website independently, and reject any 'employer' that asks for upfront fees, personal financial details before a job offer, or payment to access work.
Hover over links before clicking, check the sender's full email domain character by character, and go directly to the organisation's website instead of following any link in an email about your account.
Real government agencies initiate contact by official mail, not unexpected phone calls demanding immediate payment — hang up and call the agency's official published number to verify any contact.
Video-call any online connection early and often, never send money or gifts to someone you have not met in person, and treat any request for financial help from an online-only relationship as a strong warning sign.
Verify any crypto platform with your financial regulator before depositing, never invest based on advice from an online contact, and remember that crypto transactions are irreversible.
Microsoft, Apple, and Google never call you unsolicited about a virus on your computer — close any alarming pop-up by force-quitting your browser, and never give remote access to an unsolicited caller.
Read the full terms before entering card details on any free trial, set a calendar reminder before the trial ends, and use a virtual card number for subscriptions you are uncertain about.
You cannot win a lottery you did not enter, and legitimate prizes never require an upfront fee to collect — any message saying you have won and must pay first is a scam.
Never buy prescription medication from an unverified online pharmacy, be deeply sceptical of any supplement or treatment promising to cure a serious condition, and verify any medical billing claim against your Explanation of Benefits.
Real utility companies do not demand same-day payment to avoid disconnection, never require gift cards, and will give you time to verify a bill — hang up and call the number on your statement.
Book through established platforms or directly with the accommodation, use a credit card for all travel purchases, and verify every booking confirmation through the supplier's official app or website before your trip.
Run a VIN check, have any used vehicle inspected by an independent mechanic, and never pay a deposit for a vehicle you have not seen in person — especially if the seller wants wire transfer or gift cards.
Never pay for a pet you have not seen in person, meet the animal at the breeder's or seller's location before any money changes hands, and be very cautious of online-only pet listings requiring shipping.
Verify any insurance agent's licence with your state insurance department, buy only from insurers with an AM Best or similar rating, and be cautious of unusually cheap policies that lack a documented insurer behind them.
Use a unique strong password with app-based two-factor authentication on every social account, and recognise that a hijacked account will be used to scam your followers while appearing to be you.
Evaluate any multi-level marketing opportunity purely on retail product sales to customers outside the organisation — if income primarily comes from recruiting others, it is a pyramid scheme regardless of what products are sold.
Establish a verbal code word with close family for emergency requests, and treat any call creating urgency around money with scepticism regardless of how authentic the voice sounds.
Buy in-game currency and items only through the game's official store, never share your login credentials for boosting services, and set spending controls on your child's gaming account.
Track any delivery through the carrier's official website using a tracking number you received from the sender — never pay a customs or re-delivery fee by clicking a link in an unexpected text message.
Federal student aid is managed exclusively through studentaid.gov — any third party charging fees to apply for aid, forgiveness, or scholarships is almost certainly a scam.
Only use licensed attorneys or accredited representatives for immigration help — notarios and notary publics have no authority to provide immigration advice in the US, regardless of what they claim.
View the property in person, confirm the landlord's ownership in public records, pay the deposit by traceable bank transfer with a signed lease in hand, and never pay in cash or via wire transfer before signing.
Give only to established organisations you can verify in a charity register, donate directly on their official website, and wait a few days after a disaster for vetted relief organisations to be publicised.
Use a combination of Google's Safe Browsing checker, your browser's built-in warnings, and the /risk-score/scam-risk-checker to assess unfamiliar URLs before you enter any personal or payment information.
Establish a family code word for genuine emergencies, and remind older relatives that no real grandchild or lawyer will ask them to keep an emergency secret from other family members.
Be deeply suspicious of any new online contact who eventually steers conversation toward investments, especially crypto platforms — the relationship is the setup, and the investment pitch is the scam.
If receiving money, an inheritance, a prize, or a business deal requires you to pay fees first, it is advance-fee fraud — there is no money, and every payment leads to a request for another.
Legitimate employers never charge fees for hiring, equipment, or training — any 'job' requiring upfront payment is a scam, and any cheque sent before you start work will bounce.
Business email compromise uses spoofed or hacked email accounts to impersonate executives and trick employees into wiring money — a verbal confirmation call on a known number defeats it every time.
Never click a link in an unexpected text about a bank account, delivery, or government benefit — go directly to the organisation's app or website instead to check any claimed issue.
File with the FTC at ReportFraud.ftc.gov as your primary report, then report to the specific relevant agency (FBI IC3 for cyber fraud, CFPB for financial institutions, state AG for consumer fraud), and report on the platform where the scam occurred.
Hang up on any unexpected call creating urgency, call back on a number you find independently, and remember that no legitimate organisation will ever demand payment via gift card.
Social engineering manipulates human psychology rather than computer systems — scepticism of urgency, authority claims, and information requests you did not initiate are the main defences.
Agree on a code word, a money-pause rule, and a designated person to call before any unusual financial request — these three elements cover most scam scenarios across all ages.
Meet locally in a public place for cash transactions, use the platform's payment system rather than Venmo or Zelle, and never accept a cheque for more than the agreed price.
The IRS contacts taxpayers by postal mail first, never demands immediate gift-card or wire-transfer payment, and never threatens immediate arrest — any call making these claims is a scam.
Account takeover occurs when a fraudster gains access to an existing account using stolen credentials — prevent it with unique passwords, two-factor authentication, and immediate action on any breach notification.
Real banks send secure messages through their official app and never ask for your full password, PIN, or card CVV — contact your bank on the number on the back of your card if you have any doubt.
Never transfer money received into your account onward to a third party at someone else's request — this is money-mule activity that carries serious criminal liability regardless of whether you knew it was fraud.
Buy directly from brand authorised sellers or the manufacturer's own website, be suspicious of prices significantly below the brand's RRP, and check for authentication features or serial number verification before purchasing.
Legitimate financial advisers do not cold-call with unsolicited investment opportunities — hang up, verify the firm on your regulator's register, and never invest based on an unsolicited call.
Minimise what you share publicly on social media, opt out of data broker sites, use privacy-focused email settings, and treat every unsolicited contact asking for 'verification' information as a potential phishing attempt.
You cannot win a competition you did not enter, and any prize requiring a fee, taxes, or personal details upfront is a scam — delete unsolicited prize notifications without responding.
Pause before acting on anything urgent or too good to be true, verify before paying, use strong unique passwords with 2FA, and know that gift cards are never a legitimate payment method for any real organisation.
Scammers target older adults through phone calls, mail, and online channels, exploiting trust, social isolation, and unfamiliarity with digital red flags to run grandparent, Medicare, and tech-support scams.
College students are targeted with fake job postings, scholarship scams, rental fraud, and student-loan phishing because they are financially stressed, digitally active, and often making major financial decisions for the first time.
New immigrants face immigration-services fraud, fake government notices, employment scams, and notario fraud because language barriers, unfamiliarity with U.S. systems, and fear of authorities make them especially vulnerable.
Job seekers face fake employment listings, reshipping and money-mule schemes, and upfront-fee traps because their urgency to find work and willingness to share personal information make them easy to exploit.
Military families are targeted with romance scams impersonating deployed soldiers, predatory lending, fake VA benefits services, and moving-and-relocation fraud because frequent moves, deployment separations, and financial pressures create specific vulnerabilities.
Small-business owners are targeted with fake invoices, directory and advertising scams, fraudulent government-compliance notices, and supplier fraud because they receive high volumes of financial requests and may lack dedicated fraud-detection staff.
First-time crypto investors are targeted with fake exchanges, pump-and-dump groups, romance investment scams (pig butchering), and rug pulls because enthusiasm for potential gains and limited technical knowledge make them easy to mislead.
Online daters are targeted with romance scams that build emotional dependency over weeks before requesting money, gifts, or crypto investment, exploiting loneliness and the trust formed through sustained personal communication.
New parents are targeted with counterfeit baby product listings, fake childcare job postings, birth-certificate and savings-account scams, and social media giveaway fraud because their emotional vulnerability, time pressure, and large new spending make them attractive targets.
The recently bereaved are targeted with estate and probate fraud, fake charity solicitations in the deceased's name, debt collection scams, and obituary-mining schemes because grief impairs judgment and creates urgent financial and administrative tasks.
Protecting a person with dementia requires a combination of legal safeguards, practical account controls, and social supports because cognitive decline removes the filters that help most people recognize manipulation.
Protecting a college student means having frank conversations about common campus-targeted scams, setting up lightweight financial monitoring, and establishing a standing permission for them to call you before making any unexpected financial decision.
Protecting a parent who is not a fluent English speaker means bridging the information gap: ensuring they know how official agencies actually communicate, setting up simple verification habits, and being a trusted first call for anything that feels urgent or threatening.
Older adults are more at risk because of a combination of social isolation, accumulated savings, trust-based communication styles, cognitive changes, and the fact that scammers specifically study and target them.
Immigrants face higher scam risk because unfamiliarity with the new country's legal and financial systems, language barriers, fear of authorities, and reliance on untrusted information sources combine to create multiple points of exploitation.
Job seekers are more vulnerable because financial pressure, urgency to find work, willingness to respond quickly to opportunities, and the broad sharing of personal information during the job search all create conditions that scammers exploit.
Gamers are targeted with fake item trading scams, account theft through phishing, game-currency fraud, and fake cheat-software that installs malware, exploiting both the financial value of in-game assets and the competitive desire to gain advantages.
Scammers on social media target older adults with fake grandchild emergencies, prize notifications, investment endorsements using stolen celebrity images, and fake friendship followed by financial requests.
Single parents face romance scams, fake childcare and housing deals, work-from-home fraud, and government-benefit impersonation because financial pressure, time constraints, and the desire to provide for their children create multiple vulnerabilities.
People with disabilities are targeted with benefits impersonation, medical-equipment fraud, fake charitable fundraisers, and exploitative caregiver arrangements because fixed incomes, reliance on external assistance, and limited access to consumer-protection information create multiple vulnerabilities.
Recent retirees are targeted with investment fraud, annuity scams, IRS impersonation, and reverse-mortgage exploitation because they typically have a lump sum from retirement accounts and are making complex financial decisions for the first time.
Low-income consumers are targeted with rent-to-own traps, predatory loans, fake government-assistance programs, and lottery scams because financial stress narrows options and makes modest amounts of money or benefits feel life-changing.
Healthcare workers are targeted with credential-renewal phishing, student-loan forgiveness fraud, PPE and supply scams, and investment pitches exploiting their high income and trust in professional communications.
The recently divorced face romance scams, financial-advisor exploitation, moving and housing fraud, and asset-transfer schemes because emotional distress, changed financial circumstances, and the rebuilding of a social life create multiple simultaneous vulnerabilities.
Gig and freelance workers face fake client projects, platform impersonation, overpayment check schemes, and false tax-debt threats because their income is variable, their client relationships are informal, and they often navigate complex tax situations independently.
People in debt are targeted with fake debt-relief programs, credit-repair scams, advance-fee loan fraud, and debt-collection impersonation because financial desperation makes them receptive to any offer of relief.
Online shoppers are targeted with fake storefronts, counterfeit product listings, non-delivery scams, and fake return portals because the frequency of purchases creates habits of quick action that scammers exploit.
First-time homebuyers face wire-fraud interception of closing funds, fake rental-to-own listings, title insurance scams, and mortgage-relief fraud because the transaction is large, unfamiliar, and involves extensive document exchange.
Disaster survivors face contractor fraud, fake charity solicitations, FEMA impersonation, and price gouging because urgent need, displacement, and information overload lower the defenses that normally filter out fraud.
LGBTQ+ individuals face sextortion exploiting fear of outing, romance scams on LGBTQ+ dating apps, fake conversion therapy referrals, and discrimination-themed fraud because privacy concerns, community trust dynamics, and specific platform behaviors create targeted vulnerabilities.
Older women living alone face intensified romance, grandparent, and caller-impersonation scams because loneliness, trust in social relationships, and the loss of a financial partner who might have provided a second opinion all combine to create heightened vulnerability.
People seeking medical care face fake treatment providers, unproven cure scams, medical-billing fraud, and pharmaceutical counterfeiting because health anxiety, financial pressure from medical costs, and urgency undermine the normal skepticism people would apply to other purchases.
People who receive large windfalls face investment fraud, tax impersonation, 'winner tax' scams, and predatory financial-services pitches because wealth in transition is more vulnerable than wealth that is already managed.
High-net-worth individuals face sophisticated investment fraud, business-email compromise, art and collectible fraud, and charity-exploitation schemes because larger available assets justify the significant effort and personalization scammers invest in each approach.
Homeowners in foreclosure face loan-modification fraud, deed-theft schemes, and fake rescue companies because desperation to save a home creates willingness to trust anyone who offers a plausible solution.
Veterans are targeted with VA benefits claim fraud, pension poaching, fraudulent educational institutions, and investment pitches because VA benefits represent a reliable income stream and veterans may trust institutional authority and uniformed appearances more than average.
Protecting teenagers means building scam literacy through specific examples, creating a trust relationship where they will report problems without shame, and establishing simple account-level controls that reduce financial exposure while preserving independence.
People with poor credit face guaranteed-approval loan fraud, credit-repair scams, fake secured cards, and predatory rent-to-own arrangements because limited access to mainstream financial products creates demand that scammers exploit with too-good-to-be-true offers.
Beginning investors are targeted with pump-and-dump stock promotions, fake trading courses, copy-trading platforms, and MLM investment schemes because they are building knowledge in public channels where scammers are positioned to intercept them.
People in recovery face fake rehabilitation center referrals, sober-living house fraud, insurance billing fraud, and exploitative 'patient brokering' because their vulnerability, limited support networks, and urgent need for treatment make them easy to manipulate.
International students face visa-status threats, fake housing listings, banking and money-transfer fraud, and diploma mills because their immigration status is tied to their enrollment and unfamiliarity with local financial systems creates multiple entry points for exploitation.
Pet seekers face fake online pet listings where a 'puppy' never exists, fraudulent shipping-fee escalations, and breed-specific scam websites because the emotional attachment formed before a purchase is complete makes buyers reluctant to abandon the transaction.
Scam victims are actively re-targeted through recovery scams because their details circulate on criminal networks, and because the desire to recover losses creates a new form of exploitable desperation.
A pig butchering scam is a long-con fraud where criminals build a fake romantic or friendly relationship with a victim over weeks or months, then lure them into a fraudulent cryptocurrency investment platform before draining all their money.
Sextortion is a form of online blackmail where a criminal threatens to share intimate images or videos of a victim unless they pay money or provide more images. The images may be real, stolen, or AI-generated.
A grandparent scam is a phone or messaging fraud targeting older adults, where a caller pretends to be a grandchild in urgent distress — arrested, hospitalised, or stranded abroad — and begs the target to send money secretly and quickly.
Quishing is phishing delivered through a QR code. Victims scan a malicious QR code that redirects them to a fake website designed to steal login credentials, financial details, or install malware on their device.
SIM swapping is a type of account takeover where a fraudster convinces your mobile carrier to transfer your phone number to a SIM card they control, giving them access to all SMS-based two-factor authentication codes sent to your number.
A brushing scam occurs when an online marketplace seller ships you unsolicited packages and then uses your name and address to post fake verified-purchase reviews for their own products, boosting their ratings fraudulently.
A refund scam is a fraud where criminals impersonate customer service or a utility company and claim you are owed a refund, then trick you into transferring money to them or giving them remote access to your device.
An overpayment scam is a fraud where a buyer sends you a cheque or payment for more than the agreed amount and asks you to return the difference, but the original payment later bounces or is reversed, leaving you out of pocket.
A man-in-the-middle (MITM) attack is when a criminal secretly intercepts and potentially alters communications between two parties who believe they are talking directly to each other — for example, between you and your bank.
A recovery scam targets people who have already lost money to fraud and promises to recover their funds for an upfront fee — but takes more money and delivers nothing.
An advance fee scam promises a large future reward — a lottery win, inheritance, business deal, or loan — but requires the victim to pay an upfront fee first. The promised reward never arrives and the fees keep escalating.
A Ponzi scheme pays early investors using money from new investors, with a central operator controlling everything and no real product. A pyramid scheme requires each participant to recruit others to earn, with recruitment itself forming the revenue model.
A money mule is a person who transfers illegally obtained money through their own bank account on behalf of criminals, usually in exchange for a payment or under false pretences. Even if unwitting, a mule can face serious legal consequences.
Business email compromise (BEC) is a sophisticated fraud where criminals impersonate a company executive, trusted supplier, or employee via email to trick staff into transferring money or sensitive data to fraudulent accounts.
A sweetheart scam (also called a romance scam) is a long-term fraud where a criminal builds a fake romantic relationship with a victim to emotionally manipulate them into sending money, gifts, or personal information.
Phishing is a cyber-fraud technique where criminals send deceptive messages — usually by email — that impersonate trusted organisations to trick recipients into revealing passwords, financial details, or downloading malware.
Vishing (voice phishing) is a phone-based fraud where criminals impersonate banks, government agencies, or tech companies to trick victims into revealing passwords, PINs, or sensitive account information over the phone.
Smishing is phishing conducted via SMS text message. Fraudulent texts impersonate delivery services, banks, or government agencies and contain links designed to steal your credentials or personal information.
A lottery scam notifies victims that they have won a prize in a lottery they never entered, then requests fees, taxes, or personal information before the 'winnings' can be released — which never actually arrive.
A charity scam uses the name of a real or fictitious charity to solicit donations that go directly to fraudsters rather than any legitimate cause, often exploiting recent disasters or humanitarian crises.
A job scam advertises fake employment opportunities to steal money, personal information, or labour from victims under the guise of a legitimate recruitment process.
A tech support scam tricks victims into believing their computer is infected or compromised, then charges them for unnecessary 'repairs' or gains remote access to steal data and money.
Catfishing is the practice of creating a fake online identity to deceive another person into a relationship, usually using stolen photos and a fabricated persona. When financial fraud is involved it overlaps with sweetheart and romance scams.
A rental scam tricks prospective tenants into paying a deposit or rent for a property the fraudster does not own or that does not exist, leaving the victim without accommodation or money.
Identity theft occurs when someone uses your personal information — such as your name, national insurance number, or financial details — without your permission to commit fraud, open accounts, or make purchases in your name.
A deepfake scam uses AI-generated audio or video to impersonate a real person — a family member, celebrity, CEO, or public official — to deceive victims into transferring money or sharing sensitive information.
Investment fraud involves deceptive schemes that promise high financial returns but are designed to steal money from investors, covering everything from fake trading platforms and crypto scams to unregulated securities and Ponzi schemes.
A subscription trap lures consumers with a free trial or low-cost offer, then automatically enrolls them in a recurring subscription with difficult cancellation terms, often with the ongoing charges buried in fine print.
A utility scam impersonates electricity, gas, water, or phone providers to threaten disconnection unless an immediate payment is made, often by gift card or wire transfer.
Travel scams deceive consumers into paying for non-existent or misrepresented holiday packages, flights, accommodation, or visa services, often resulting in people arriving at a destination with no valid booking.
A rug pull is a cryptocurrency exit scam where developers create a new token or project, attract investment, then drain the liquidity pool or sell all their holdings at once, abandoning the project and leaving investors with worthless tokens.
A government impersonation scam involves criminals posing as tax authorities, law enforcement, immigration officials, or other government agencies to frighten victims into making urgent payments or sharing personal information.
Healthcare scams sell fake, unproven, or dangerous medical products, exploit fear of illness to harvest personal information, or fraudulently bill insurance companies for services never provided.
Student loan scams target borrowers with fake offers to forgive, reduce, or consolidate their student debt in exchange for upfront fees or personal financial information, ultimately stealing money or enabling identity fraud.
A pet scam involves advertising puppies, kittens, or other animals for sale or adoption that do not exist, collecting deposits and delivery fees without ever providing an animal.
A social media impersonation scam creates a fake profile mimicking a real person — a celebrity, friend, or family member — to solicit money, extract personal information, or spread fraudulent promotions.
NFT scams exploit the non-fungible token market through fake marketplaces, counterfeit digital art, wash trading to inflate values, and rug pulls that abandon projects after collecting buyers' funds.
A prize notification scam informs victims they have won a prize and requests personal information or a payment to claim it. The prize does not exist and the purpose is either to steal money through advance fees or harvest personal details for fraud.
Insurance scams can target policyholders directly (fake policies, ghost brokers) or involve fraud against insurers (staged accidents, inflated claims) that ultimately raises premiums for all honest customers.
Gaming scams target players through fake in-game item trades, phishing for game account credentials, fraudulent marketplaces for virtual goods, and social engineering within gaming communities to steal money or account access.
A romance investment scam combines fake romantic relationship-building with fraudulent cryptocurrency or forex investment platforms, using emotional manipulation to persuade victims to invest growing sums before disappearing with all funds.
Account takeover (ATO) fraud occurs when a criminal gains unauthorised access to one of your online accounts and uses it to steal money, make purchases, or harvest personal information.
A fake invoice scam sends fraudulent payment requests to businesses or individuals, hoping that recipients will pay them without checking whether the goods or services billed were actually ordered or received.
A romance scam involves a criminal building a fake online romantic relationship with a victim to manipulate them into sending money, gifts, or personal information. The romantic partner is entirely fictitious.
Ransomware is malicious software that encrypts the victim's files or locks their device and demands payment — typically in cryptocurrency — for the decryption key needed to restore access.
A puppy mill scam involves breeders or sellers who misrepresent the health, breed purity, and conditions of puppies, selling sick or poorly-bred animals that quickly develop serious medical conditions at great emotional and financial cost.
A debt collection scam involves fraudsters impersonating debt collectors and threatening victims with arrest, lawsuits, or wage garnishment to coerce payment for debts that do not exist or have already been paid.
A courier parcel scam mimics delivery notifications from major logistics companies to trick recipients into paying fake customs fees, releasing personal information, or clicking malicious links.
A bank impersonation scam involves criminals posing as your bank's fraud or security team to trick you into moving your money to a 'safe account' or revealing your credentials, leading to complete loss of the transferred funds.
A fake escrow scam in a buyer/seller transaction proposes using a fraudulent escrow service controlled by the scammer, giving the victim false confidence that funds are protected while the fraudster simply steals the payment.
A scholarship scam charges students fees to apply for financial aid opportunities that either do not exist, are freely available without a middleman, or guarantee awards no legitimate scholarship could promise.
Apple Pay itself is technically secure, but you can absolutely be scammed if you use it to pay a fraudulent seller, because payments sent to individuals via Apple Cash are treated like cash and are not reversible.
Google Pay is secure for card-based purchases with buyer protection, but Google Wallet peer-to-peer transfers are treated as cash — once sent, they cannot be reversed by Google.
Wire transfer fraud is one of the most damaging scam types because wires are nearly impossible to reverse once processed — they are the payment method of choice for high-value scams.
Fake cashier's check fraud is extremely common: your bank makes funds available before the check clears, and when it bounces days later you are liable for the full amount you withdrew.
Money orders can be counterfeited, altered, or used in overpayment scams the same way fake cashier's checks are — always verify with the issuer before spending the money.
BNPL fraud happens in two ways: scammers use stolen identities to open BNPL accounts, and scam merchants accept BNPL then disappear — leaving you with a debt and no goods.
Credit cards offer the strongest buyer protection of any common payment method, but you can still be defrauded — the key difference is that you have a legal right to dispute fraudulent charges.
Debit cards carry more financial risk than credit cards in a scam because fraudulent charges come directly from your bank account — and while dispute rights exist, they are weaker and your cash is gone while the investigation proceeds.
Gift card transactions are very difficult to trace and almost never reversed — which is precisely why scammers demand them as payment above all other methods.
Cryptocurrency transactions are recorded permanently on a public blockchain and are technically traceable, but converting that trace into a real-world identity and recovering funds is difficult and often unsuccessful.
Crypto ATM transactions are essentially irreversible — the moment you feed cash into the machine and confirm the transaction, the funds leave on the blockchain and cannot be recalled.
Most payment apps — Venmo, Cash App, Zelle, PayPal Friends and Family — treat peer-to-peer transfers as final. Refunds are at the discretion of the recipient, not the platform.
A credit card through a platform with buyer protection is the safest way to pay an unknown person or seller — it gives you chargeback rights if the transaction goes wrong.
Use a credit card through the platform's official checkout, or PayPal Goods and Services — both provide dispute rights if the item never arrives or is not as described.
A bank-issued cashier's check, cash in person at a bank or police station exchange zone, or an in-person wire transfer arranged at your bank are the safest methods for a private car purchase.
Pay by cheque or credit card in milestone instalments tied to completed work — never pay the full amount upfront, and never pay in cash with no receipt.
Pay rent and deposits by cheque, bank transfer to a verified account, or through a reputable property management platform — always get a written receipt and verify the landlord's identity before sending any money.
Credit cards offer the strongest statutory protection through chargeback rights, but protection is not absolute — it applies to items not received or misrepresented, and you must dispute within 60 days of the statement date.
Zelle does not provide buyer protection for payments you voluntarily authorised — but if someone made an unauthorised transfer from your account without your knowledge, you may have recourse under your bank's fraud policies.
Venmo peer-to-peer payments are not protected if you voluntarily sent the money. Venmo's Purchase Protection applies only to transactions specifically marked as purchases from eligible sellers.
Cash App peer-to-peer payments are not refundable if you authorised them. Cash App does not mediate disputes between senders and recipients the way a bank or credit card issuer would.
PayPal Goods and Services purchases are protected by PayPal's buyer protection program. PayPal Friends and Family payments have no buyer protection — the choice of payment type is critical.
Wire transfers are designed to be final — reversal is possible only in a narrow window before the receiving bank releases funds, and success is not guaranteed.
Credit cards offer the strongest refund rights through chargebacks. Debit cards have weaker but present rights. Most peer-to-peer apps, wire transfers, gift cards, and crypto are not refundable after the fact.
Law enforcement can trace cryptocurrency transactions on public blockchains using blockchain analytics tools, and major exchanges comply with lawful subpoenas — but tracing does not always lead to recovery.
Most standard travel insurance policies do not cover financial fraud or scams — they cover trip cancellation, medical emergencies, and lost luggage, not being deceived by a scammer.
Paying an unknown online seller by direct bank transfer is high risk — unlike credit cards, bank transfers offer minimal buyer protection and are difficult to reverse once processed.
A payment you make to a scammer does not give them access to your bank account — but some payment methods can expose account details that scammers may attempt to exploit further.
Legitimate escrow services provide strong protection for high-value transactions, but fake escrow is a common scam — always verify the escrow company is licensed and independent before trusting it.
Sending money to the wrong person by mistake is different from being scammed — banks can attempt a recall if contacted quickly, but if the recipient refuses to return it, your recourse is through civil channels.
Rental deposit fraud is extremely common — fake landlords collect deposits for properties they do not own or control, then disappear. Always verify ownership and view the property in person before paying anything.
A bank account and routing number together can be used to initiate ACH withdrawals — so yes, this information can be misused, though most banks have protections against unauthorised transactions.
Refund scams claim to overpay you or process an erroneous refund, then ask you to return the 'excess' via a different method — allowing them to net a real payment from you while the original funding proves fake.
Contactless card skimming is technically possible but rare in practice — the far bigger risk is physical card theft, data breaches, and phishing rather than someone waving a reader near your wallet.
PayPal Friends and Family is safe to use with actual friends and family — but using it for purchases from strangers or businesses removes all buyer protection and is what scammers specifically request.
Gift card scams can use cards from any major retailer — Google Play, iTunes, Amazon, Steam, Walmart, and many others are all frequently demanded by scammers because they are universally available.
Cryptocurrency is not safer than cash for most consumer transactions — it is irreversible, volatile, and lacks consumer protection. For some business use cases it has advantages, but those come with significant caveats.
Act within hours, not days: contact your bank or payment platform immediately, report to the FTC and relevant agencies, and document everything — early action maximises your chance of any recovery.
Section 75 of the UK Consumer Credit Act gives you a joint liability claim against your credit card provider for purchases over £100 and up to £30,000 — it applies to online purchases if you paid by credit card.
UK banks are now required to reimburse most victims of Authorised Push Payment fraud under rules introduced by the Payment Systems Regulator in 2023 — but there are conditions and caps.
BNPL dispute rights vary by provider — some have good dispute processes, others are slow or difficult. Act quickly before instalments continue and document everything from the start.
For local pickup, pay cash at time of exchange. For shipped items, use Facebook's checkout with buyer protection or PayPal Goods and Services — never Zelle, Venmo, or wire transfer to a stranger.
Wire transfers leave a detailed paper trail through banking systems, but tracing the funds and actually recovering them from a scammer are two very different things.
Centralised cryptocurrency exchanges can freeze accounts and cooperate with law enforcement, but they cannot reverse on-chain transactions — once crypto leaves the exchange, the exchange cannot retrieve it.
A refund is the merchant voluntarily returning your money. A chargeback is a forced reversal initiated through your bank when the merchant will not cooperate — they are very different processes with different implications.
Ticket fraud is extremely common, particularly for sold-out events — fake or invalid tickets are sold through social media, classifieds, and lookalike websites. Pay by credit card through verified platforms only.
Pig-butchering scams build a fake romantic or friendship relationship over weeks, introduce a fraudulent crypto investment platform, and harvest increasingly large deposits — all via irreversible cryptocurrency transfers.
PayPal Goods and Services significantly reduces your risk but does not eliminate it — scammers can still attempt to win disputes by providing fake tracking information or by violating policies in ways that take time to prove.
For online services, pay by credit card with milestone billing tied to delivered work — never pay the full amount upfront to an unverified provider, and use contracts that specify deliverables.
Receiving a text alone is safe, but tapping a link in a malicious text can install malware or steal credentials if your phone is unpatched.
Your phone number alone is not enough to access your bank, but scammers can use it to intercept SMS authentication codes or to impersonate you, which can lead to account takeover.
SIM cloning is technically possible on older SIM cards but rare; SIM swapping — convincing your carrier to transfer your number to a new SIM — is far more common and effective.
Yes — if you installed a legitimate remote-access app at a scammer's request, they can see everything on your screen and control your device in real time.
Contactless skimming is theoretically possible but extremely difficult in practice; the far greater risk is scammers obtaining your card details through other means and using them in online transactions.
In most cases you are fine, but some pages can attempt drive-by exploits or track your device; checking your device and changing passwords on any site that was open is a sensible precaution.
Warning signs include unexplained battery drain, high data usage, unfamiliar apps, overheating, and accounts showing logins you don't recognise.
Key signs include login alerts from unknown locations, sent messages you didn't write, password reset emails you didn't request, and missing messages that may have been deleted.
Common signs include unfamiliar accounts on your credit report, bills or collection notices for debts you didn't incur, tax filing rejections, and unexplained benefit or benefit-application activity.
Contact your carrier immediately to reverse the port, then alert your bank and change passwords for accounts that use your number for authentication — acting within hours matters.
Uninstall the app immediately, revoke its permissions, change passwords for any accounts accessed on the device, and run a malware scan.
Your email address alone is not enough to break in, but it gives scammers a starting point for phishing, credential stuffing, and account recovery attacks.
Check each account's recent activity log, look for unrecognised login locations, and use breach-checking tools to see if your credentials appeared in a known data breach.
Name and address alone are rarely enough for full identity theft, but combined with other data points they can be used to open accounts, file fraudulent claims, or pass basic verification checks.
There is no credible evidence that mainstream smartphone apps listen to ambient audio for advertising; the more likely explanation for eerily relevant ads is the large amount of behavioral data already collected about you.
Yes — stalkerware apps, hidden AirTags, shared account settings, and social media check-ins can all reveal your location to someone without your awareness.
Yes — credential stuffing attacks automatically test leaked username-password pairs against hundreds of sites, so any account where you reused a breached password is at risk.
With your SSN a fraudster can open credit accounts, file false tax returns, claim government benefits, and gain employment in your name — the damage can take years to undo.
If someone accesses your Wi-Fi network, they can potentially intercept unencrypted traffic, but HTTPS protects the content of most web browsing; the main practical risks are bandwidth theft and being on the same network as a malicious device.
Yes — with enough personal data (name, SSN or national ID, date of birth, address) a fraudster can apply for accounts online, often passing identity checks at less rigorous institutions.
Yes — through phishing, password reuse from breaches, SIM swapping, or account recovery manipulation, social media accounts are taken over regularly and used to scam your contacts.
Stalkerware is software installed on a device without consent to secretly monitor calls, messages, location, and activity; it is often used in domestic abuse contexts and usually requires brief physical access to install.
A photo alone is unlikely to enable financial identity theft, but it can be used to create fake profiles for romance scams, impersonate you socially, or in some cases pass weak biometric verification.
Yes — and if they do, they potentially have access to your photos, messages, contacts, location, backups, and any services that sync through that account.
Phishing is a deceptive communication — usually an email, text, or fake website — designed to trick you into revealing credentials, financial details, or installing malware by impersonating a trusted entity.
Public Wi-Fi carries real risks including rogue access points and traffic interception, but HTTPS encryption protects most browsing; the biggest risks are unencrypted apps and account access on network operator-controlled routers.
Dark web markets sell full identity packages (name, SSN, DOB, address), banking credentials, credit card numbers, and email-password combos — each enabling a different type of fraud.
Bluetooth attacks are possible but require close physical proximity; keeping Bluetooth off or set to non-discoverable and applying OS updates closes the main attack windows.
Disconnect from the internet immediately, run a malware scan, change all passwords from a separate device, and consider reinstalling the operating system if you cannot be certain the machine is clean.
It is technically possible if your device is infected with remote-access malware, but it requires deliberate compromise; the most practical prevention is keeping software updated, using a camera cover, and watching for the camera indicator light.
Work systematically through your most critical accounts first: change passwords, enable two-factor authentication, revoke unexpected access, and monitor for any changes made during the period of compromise.
Weaponised charging cables exist and have been demonstrated by security researchers, but they require physical access to your cable or device; public USB charging ports carry a real but overstated 'juice jacking' risk.
Two-factor authentication (2FA) adds a second verification step beyond your password, and yes — it is one of the single most effective steps you can take to protect your accounts.
Yes — card-not-present fraud only requires the card number and expiry date, and often the CVV, all of which are obtainable through phishing, skimming, or data breaches.
Yes — account and routing numbers can be used to initiate ACH transfers or create fraudulent checks; however, receiving a direct deposit doesn't expose these numbers to your employer in a way that creates risk.
Passport and license details enable identity verification fraud — opening financial accounts, applying for loans, or verifying identities on platforms that accept government ID — making them among the most sensitive personal data you hold.
In targeted scenarios, SS7 network vulnerabilities and SIM swapping allow interception of SMS; for most people the risk is lower-tech: malware on your device or access to linked accounts that sync messages.
A money mule unknowingly or knowingly transfers stolen money through their own bank account; scammers recruit mules through fake job offers, romance relationships, or lottery wins — and being used as a mule can result in account freezes, credit damage, and criminal charges.
Yes — with enough personal data (name, SSN, DOB, address) fraudsters apply for credit and loans in your name; a credit freeze is the most reliable prevention.
Yes — malicious browser extensions can read everything you type in your browser, including passwords and payment details, and capture session cookies that allow account access without needing your password.
Smart speakers listen for wake words locally and may occasionally send clips to cloud servers; smart TVs can have microphones and cameras; both can be monitored if the associated account is compromised.
You can reduce your online footprint by submitting opt-out requests to data brokers, requesting removal from Google search results, deleting unused accounts, and tightening social media privacy settings — full removal is impossible but meaningful reduction is achievable.
Yes — AI voice cloning tools can produce convincing replicas of your voice from short recordings, and scammers use them in family emergency scams, business fraud, and audio deepfakes.
SIM swapping is when a fraudster convinces your mobile carrier to transfer your phone number to a SIM they control, giving them your calls and texts including banking OTPs; prevention centres on a carrier SIM-lock PIN and switching to authenticator-app 2FA.
Your date of birth alone is rarely enough, but combined with your name and other identifiers it significantly assists verification fraud, account recovery attacks, and social engineering of institutions.
A keylogger records every keystroke you make, capturing passwords and personal data; most keyloggers arrive via malware and can be detected through security software and careful monitoring of unusual device behaviour.
Yes — a reputable password manager is one of the most effective security tools available; after a scam it helps you replace all exposed credentials systematically with strong, unique passwords.
Yes — medical identity theft involves fraudsters using your insurance details to receive healthcare services or file false claims; it can corrupt your medical records and result in bills for treatment you never received.
Knowing your address enables mail fraud, physical threats, and combined identity attacks; monitor your mail, alert your household, and take steps to reduce public display of your address.
Yes, you can file a civil lawsuit against a scammer, but collecting a judgment is often very difficult if they are anonymous, overseas, or have no assets — this is general information, not personalised legal advice.
Small claims court is a simplified, low-cost legal process where you can sue for a set maximum amount without needing a lawyer — it is often the most practical civil option for scam victims with traceable defendants.
In most countries, banks are legally required to refund genuinely unauthorised transactions unless they can show you acted fraudulently or with gross negligence — if your bank refuses, you have escalation options including the financial ombudsman.
In the UK, new mandatory APP reimbursement rules require most banks and payment firms to reimburse victims of authorised push payment fraud up to £85,000 per claim, with limited exceptions — similar rules are developing in other countries.
If you paid by debit or credit card, chargeback lets you dispute a transaction with your card provider and potentially recover the funds — credit card purchases may also carry additional Section 75 protection in the UK.
Yes — sending fraudulent or deceptive text messages is illegal in virtually every jurisdiction, typically under fraud, computer misuse, and communications offences laws, carrying significant criminal penalties.
Unknowingly receiving and forwarding money for a fraudster can still carry criminal or civil consequences, though genuine unawareness is a defence — if you suspect you have been used as a money mule, stop immediately and report it.
Yes, embarrassment and shame are among the most commonly reported emotional responses after being scammed, but they are based on a misunderstanding — scammers are highly trained professionals, and being targeted is not a reflection of your intelligence.
Emotional recovery from fraud involves acknowledging the grief, reducing self-blame, seeking social support, and taking practical steps that restore a sense of control — many people fully recover with time and the right help.
Online fraud is a criminal offence in virtually all jurisdictions, not merely a civil matter — criminals can face imprisonment and fines, though civil remedies and criminal prosecution are separate processes and both may be pursued.
Identity theft victims have legal rights including the right to have fraudulent entries corrected on credit files, the right to dispute fraudulent debts, and access to specialist identity theft support services — acting quickly significantly limits the damage.
Romance scam victims have the same civil and criminal complaint options as other fraud victims, though recovery is often complicated by the scammer's overseas location and anonymity — emotional support should be prioritised alongside legal steps.
Police can recover scam proceeds in some cases — particularly where the scammer is domestic and identifiable — but recovery is far from guaranteed and is more likely through your bank than through a criminal investigation.
Legal recourse exists for crypto scam victims, but recovery is challenging due to the pseudonymous nature of blockchain transactions — your options depend heavily on whether the platform was a regulated entity.
Recovering money paid via gift cards is very difficult, but you should still contact the gift card issuer immediately, as a small number of cards are stopped before they are drained if you act within hours.
You can report investment scams to your national financial regulator — in the UK the FCA, in the US the SEC and CFTC — but regulatory complaints pursue the firm on behalf of the public rather than recovering your individual funds, so bank and legal remedies should be pursued in parallel.
Generally, liability depends on whether the employee followed established procedures and acted reasonably — if adequate controls were in place and the employee disregarded them, the employee may bear some responsibility; if controls were inadequate, the employer's exposure may be greater.
Section 75 of the UK Consumer Credit Act 1974 makes your credit card company jointly liable with the merchant for purchases between £100 and £30,000 — it is a powerful consumer right that applies even if only part of the price was on the credit card.
Pension scam victims may have redress through the Financial Ombudsman Service, the Pension Ombudsman, compensation schemes, and civil litigation — but transfers to unregulated vehicles typically have limited compensation cover, making reporting and acting quickly essential.
Yes — if a company failed to protect your personal data and that failure led to fraud against you, you may have a claim for damages under data protection law, depending on the nature of the breach and whether it caused you identifiable harm.
Your most effective recourse against a fake online shop is through your payment method — card chargeback, Section 75, or APP fraud claims — rather than through the shop itself, which will typically vanish or ignore communications.
Yes — financial fraud can cause clinically significant psychological distress including symptoms consistent with PTSD, anxiety disorders, and depression, particularly when the loss was large, involved betrayal of trust, or compromised financial security.
If you paid a deposit for a rental that did not exist or was not the landlord's to rent, you have civil claim rights against the fraudster and payment method recourse options — acting quickly to dispute the payment gives the best chance of recovery.
Fake job scams that require upfront payments for training, equipment, or DBS checks are fraud — you can pursue chargeback or APP fraud recovery through your bank and should report to the appropriate fraud and employment authorities.
The Financial Ombudsman Service (FOS) in the UK is a free, independent service that resolves disputes between consumers and financial businesses — it can order banks and other firms to reimburse victims in ways that court action cannot always achieve.
Telling trusted people about a scam has significant practical and emotional benefits — it provides support, protects them from similar scams, and breaks the cycle of silence that allows scam stigma to persist.
Yes — most national fraud authorities accept anonymous reports, though providing your details significantly increases the chance of an investigation and is required to pursue personal recovery claims.
Some insurance policies cover fraud losses — particularly home contents insurance with financial fraud extensions, standalone identity theft policies, and some bank accounts with packaged fraud cover — but many standard policies do not, so check your policy terms carefully.
Yes — banks, regulators, and financial ombudsman services recognise enhanced obligations when dealing with vulnerable consumers, and in serious cases involving abuse of a vulnerable person, criminal law provides additional protections.
Banks can attempt to recall a fraudulent transfer, and recalls sometimes succeed if the scammer's receiving account still holds the funds — speed is critical, as scammers typically move money within hours.
Government impersonation scams are serious criminal offences — victims have the same bank recovery and reporting options as for other fraud, and reporting specifically to the impersonated agency is important as they track and publicise such operations.
Gross negligence in the context of bank fraud refusals means conduct significantly below what a reasonable person would do — it is a high legal bar that simply being deceived does not meet, and banks must prove it rather than merely assert it.
Social media platforms currently have very limited direct legal liability for individual fraud in most jurisdictions, though online safety legislation in some countries is beginning to impose obligations on platforms to tackle fraud — reporting to the platform remains important.
Fake travel bookings — whether hotels, flights, or package holidays — trigger the same payment recourse options as other purchase scams, and ATOL and ABTA protections may apply if a regulated travel provider was involved.
Misuse of a power of attorney is a serious criminal and civil matter — victims can apply to the Court of Protection, report to the Office of the Public Guardian, and in serious cases have the power revoked and assets recovered through civil litigation.
Rebuilding trust after a scam is a gradual process that involves distinguishing healthy caution from excessive fear, re-engaging with social connections, and taking small positive steps that restore confidence in your own judgement.
Advance fee fraud victims can pursue bank recovery (chargeback, APP fraud), report to fraud authorities, and in limited cases pursue civil action — but since perpetrators are typically overseas and anonymous, bank recovery is usually the most practical route.
Health product scam victims have consumer rights including chargeback and Section 75, and can report to the Medicines and Healthcare products Regulatory Agency (MHRA in the UK) or FDA (US) — misrepresentation of health products is both a consumer fraud and a regulatory offence.
Keep all messages, photos, profile links, payment records, and email correspondence — then report to your national fraud authority, the dating platform, and your bank, providing as much identifying detail about the scammer as possible.
If a scam has caused both financial hardship and mental health difficulties, you can access practical financial help through debt charities and bank hardship programmes, and mental health support through your GP, NHS services, and specialist fraud victim support organisations.
Being enrolled in a subscription without clear informed consent — or through a misleading free trial — may constitute an unfair commercial practice, and you are entitled to a refund of charges taken without genuine authorisation under consumer protection and payment law.
In some countries and circumstances, scam losses may be deductible for tax purposes — particularly for business taxpayers or investors — but the rules are complex and jurisdiction-specific; always seek advice from a qualified tax professional.
Absolutely — anger is a natural, healthy response to being deliberately deceived and harmed, and it is a normal stage of recovery when channelled constructively rather than allowed to become consuming or harmful.
Fraudulent debts taken out in your name must be disputed with each lender, reported to the police and your credit reference agencies, and flagged to your national fraud prevention service — you are not liable for debts you did not take out.
If a regulated exchange account was hacked due to the platform's security failure, you may have a claim against the platform — but most crypto held in unhosted wallets has no equivalent to deposit protection, making prevention the main line of defence.
Several UK organisations provide free support to scam victims — including Action Fraud for reporting, Victim Support and Citizens Advice for practical help, and specialist services like Mind and the Samaritans for emotional and mental health support.
Multi-level marketing schemes occupy a legal grey area, but pyramid schemes (where income comes primarily from recruitment rather than product sales) are illegal — if you joined one, you may have claims for misrepresentation and should report to your trading standards authority.
Fake charity fraud and misrepresentation of how donations are used are criminal and regulatory offences — report to your national charity regulator, fraud authority, and consider payment recovery options for recent donations.
Fake parcel notifications that trick you into entering card details or paying a fake redelivery fee are phishing fraud — if you entered financial details, contact your bank immediately; if you paid a fee, card chargeback may apply.
Compensation for emotional distress arising from fraud is possible in civil litigation if the distress is a recognisable psychiatric condition caused by the defendant's wrongful act — general upset without diagnosed impact is harder to pursue as a standalone claim.
Ignoring a bank fraud warning is a factor that affects your claim but does not automatically disqualify you from reimbursement — the quality of the warning and the sophistication of the fraud are both relevant to whether you acted reasonably.
A fraud alert flags to lenders that your identity may have been compromised, prompting them to take extra steps to verify identity before extending credit in your name — in the UK, Cifas Protective Registration provides this function.
Nothing is wrong with you. Scammers are highly skilled psychological manipulators whose full-time profession is deception — research consistently shows that education and intelligence do not protect against sophisticated fraud.