10 Common Online Scams and How to Recognize Them

Online scams are designed to make you trust a person, message, website, offer, or payment request that isn’t what it appears to be. Scammers don’t need to be technically sophisticated to succeed — they just need you to act before you stop and think.

The good news is that most online scams follow recognizable patterns: urgency, fear, unrealistic offers, requests for sensitive information, unusual payment methods, impersonation of a trusted brand or authority, and pressure to act quickly. Once you know what to look for, a lot of scams become much easier to spot — even the well-crafted ones.

This isn’t about becoming paranoid of every email or message you receive. It’s about knowing the common categories, recognizing the warning signs, and having a clear plan if something goes wrong.

 

 

Black farmers in the US’s South— faced with continued failure their efforts to run successful farms their launched a lawsuit claiming that “white racism” is to blame for their inability to the produce crop yields and on equivalent to that switched seeds.

People find waiting more tolerable when they can see the work being done on their behalf

“Labor Illusion” insight

What Is an Online Scam?

An online scam is a deceptive scheme, carried out over the internet, designed to trick someone into giving up money, personal information, account access, or something else of value. Scammers rely on social engineering — manipulating human psychology rather than exploiting a technical vulnerability. That’s why scams can succeed even against people who are careful with their devices and accounts: the target is the person’s judgment, not their software.

Scams often look legitimate because scammers copy real branding, real company language, and real-looking websites. A scam email can use the same logo, color scheme, and tone as a bank’s actual communications. A scam website can look nearly identical to a legitimate retailer. This is exactly why appearance alone isn’t a reliable way to judge whether something is real.

Scammers create urgency deliberately, because urgency short-circuits the instinct to slow down and verify. “Your account will be suspended in 24 hours,” “this offer expires tonight,” and “you must respond immediately” are all designed to get you to act before you check.

It’s worth being clear about how these related terms differ, since they often get used interchangeably:

• Scam — a deceptive scheme intended to obtain money, information, access, or another benefit.
• Fraud — the broader legal term for intentional deception for financial or personal gain; most scams are a form of fraud.
• Phishing — a deceptive communication (email, text, or call) designed to trick someone into revealing information or taking an unsafe action.
• Identity theft — the unauthorized use of someone’s personal information, often to commit fraud in their name.
• Malware — malicious software designed to damage, disrupt, or gain unauthorized access to a device or network.
• Cyberattack — a broader technical attack on a system or network, which may or may not involve deceiving a person directly.

These categories overlap constantly. A phishing email might be the first step toward identity theft; a tech support scam might involve installing malware.

10 Common Online Scams

1. Phishing Scams

Phishing is one of the most common — and most effective — online scams because it directly targets your login credentials and personal information.

How it works: you receive an email, text (sometimes called “smishing”), or even a phone call (“vishing”) that appears to come from a legitimate company — a bank, an email provider, a delivery service, or your employer. The message usually claims there’s a problem with your account and includes a link to a fake login page designed to capture your username and password the moment you type them in.

Warning signs:

• The message creates urgency about your account, payment, or security.
• The sender’s email address doesn’t quite match the real company’s domain (e.g., “support@amaz0n-security.com”).
• The link, when you hover over it without clicking, points to an unfamiliar domain.
• The message asks you to “verify,” “confirm,” or “update” account information.

Fictional example: An email claims to be from your bank: “We’ve detected unusual activity on your account. Click here to verify your identity within 24 hours or your account will be locked.” The link leads to a page that looks like your bank’s login screen but isn’t.

How to verify: Don’t click the link. Open your browser separately and type in your bank’s known web address, or call the number on the back of your card — never a number provided in the suspicious message itself.

How to protect yourself: Enable multi-factor authentication (MFA) on important accounts, so even a stolen password isn’t enough for a scammer to get in. Be skeptical of any message that both creates urgency and asks you to click a link.

2. Online Shopping Scams

Fake ecommerce sites and fraudulent online sellers are especially common around holidays and big sales events, often promoted through social media ads.

Common tactics:

• Websites offering popular products at prices dramatically lower than anywhere else.
• Ads on social media leading to unfamiliar storefronts.
• Product listings with photos that look professional but reviews that seem generic, repetitive, or overly positive.
• Non-delivery — you pay, but the item never arrives, or a cheap counterfeit shows up instead.

Checklist for whether an online shopping site is legitimate:

• Search the exact business name plus the word “scam” or “reviews” before buying.
• Check for a physical business address and a working customer service contact.
• Look for a clear return and refund policy.
• Be cautious of sites that only accept payment via wire transfer, cryptocurrency, or gift cards — legitimate retailers offer standard card or platform payment options.
• Check how long the domain has been registered (very new domains selling heavily discounted goods are a red flag, though a new domain alone doesn’t prove fraud).
• Compare the price to other retailers — if it’s dramatically lower, be suspicious.

3. Tech Support Scams

These scams exploit fear about viruses, hacking, or device problems to gain remote access to your computer or extract payment.

How it typically starts: a pop-up appears on your screen claiming your computer is infected, often with a phone number to call. Alternatively, you may receive an unsolicited call from someone claiming to be from Microsoft, Apple, Google, or your internet provider, saying they’ve detected a problem with your device.

What legitimate tech support does not do:

• Legitimate companies like Microsoft, Apple, and Google do not make unsolicited phone calls to tell you your device is infected.
• Legitimate support will not ask you to install remote-access software so a stranger can control your computer.
• Legitimate support will not ask for payment via gift cards, wire transfer, or cryptocurrency.
• Legitimate support will not ask for your password or a one-time passcode (OTP) sent to your phone.

Safer response: Close the pop-up without calling any number it displays. If you’re worried about your device, contact the manufacturer or provider directly using contact information from their official website — not anything provided by the alert itself.

4. Online Job and Employment Scams

Job scams have grown alongside the rise of remote work, often targeting job seekers through email, text, or messaging apps like WhatsApp or Telegram.

Common patterns:

• A “recruiter” reaches out unprompted, often via text or a messaging app rather than a professional platform, offering a high-paying, low-effort remote job.
• The employer sends you a check to deposit and asks you to send part of it back or use it to buy equipment — the check later bounces, leaving you liable for the full amount (an “advance-fee” or “fake check” scam).
• You’re asked to pay for training materials, background checks, or equipment upfront.
• You’re asked for sensitive personal documents (like a Social Security number or bank details) very early in the process, before any real vetting.
• Payment for a supposed job is requested in cryptocurrency.

How to recognize a fake job offer: Be cautious of offers that arrive without you having applied, interviews conducted entirely over text or chat with no video or phone call, any request to pay money to receive a job, and unusually high pay for minimal, vague work (often described as “product testing,” “data entry,” or “task-based” remote work).

5. Romance and Relationship Scams

Romance scams typically develop over weeks or months, which is part of what makes them effective — trust is built gradually before money is ever requested.

How it works: a scammer creates a fake profile on a dating app or social media, builds an emotional connection with the victim (often citing reasons they can’t video chat or meet in person — working overseas, in the military, on an oil rig), and eventually introduces a financial “emergency” or investment “opportunity.”

Common financial requests:

• Money for a medical emergency, travel costs, or a legal problem.
• An “investment opportunity,” frequently in cryptocurrency, that the scammer claims to have inside knowledge about.
• Payment via gift cards or wire transfer — both are difficult to reverse.

This is a genuinely difficult category, because the manipulation is emotional rather than purely transactional, and anyone can be targeted regardless of how careful or experienced they are. If a long-distance online relationship consistently avoids video calls or in-person meetings and eventually involves a request for money, that combination is a serious warning sign worth pausing on — not a reason for self-blame if it’s already happened.

6. Investment and Cryptocurrency Scams

These scams promise unrealistic returns and often use fabricated legitimacy — fake trading platforms, fake “verified” experts, or impersonated real financial professionals.

Common tactics:

• Guaranteed or “risk-free” high returns — legitimate investments always carry risk, and no legitimate advisor guarantees profits.
• A fake trading app or platform that shows your “investment” growing, but won’t let you withdraw funds without paying additional “fees” or “taxes” first.
• Someone impersonating a well-known financial figure, licensed advisor, or brokerage on social media.
• Ponzi-style structures where early “investors” are paid using new investors’ money, rather than real returns.
• Heavy pressure to invest quickly, often citing a limited-time opportunity.

Why guaranteed profits and urgency are major red flags: legitimate investing always involves uncertainty, and legitimate financial professionals don’t need to pressure you into moving quickly. Anyone claiming otherwise is asking you to skip the due diligence that would normally protect you.

7. Social Media Scams

Social media platforms are used both to run scams directly and to drive traffic to scams hosted elsewhere.

Common forms:

• Fake profiles impersonating people you know, or impersonating real brands and celebrities.
• “Hacked” accounts of real friends sending unusual messages or links — because the account itself has been compromised.
• Fake giveaways (“Comment and share to win an iPhone!”) that collect personal information or drive traffic to a scam site.
• Fake customer support accounts that reply to public complaints directed at real companies, then move the conversation to direct messages to request personal or payment information.
• Fake investment or trading “groups” promising insider tips.

How to verify independently: If a friend’s account sends you an unusual message or link, contact them through a different channel (text or call) to confirm it’s really them before clicking anything. For brand giveaways or customer support, check the company’s official, verified account rather than trusting a reply in your inbox.

8. Bank, Payment, and Account Scams

These scams target your financial accounts directly, often by impersonating your bank or a payment app.

Common tactics:

• A text or call claiming to be your bank’s fraud department, asking you to “verify” a transaction by reading back a one-time passcode (OTP) that was just sent to your phone — in reality, the scammer is using that code to log into your account in real time.
• A fake “refund” notification claiming you’re owed money, directing you to a page that asks for banking details.
• Impersonation of payment apps (like Venmo, PayPal, Zelle, or Cash App) claiming there’s a problem with a transaction.

Why you should never share OTPs or passwords: a legitimate bank or payment provider will never call, text, or email you asking you to read back a one-time code or provide your password. The entire purpose of an OTP is to confirm that only you can approve a specific action — sharing it with anyone who contacted you unexpectedly defeats that protection completely.

9. Government, Delivery, and Authority Impersonation Scams

These scams borrow the authority of a government agency, law enforcement, or a familiar delivery company to create fear or urgency.

Common forms:

• A message claiming to be from a tax agency, threatening legal action or arrest unless you pay immediately (often via gift cards or wire transfer — a major red flag, since real government agencies do not accept payment this way).
• A fake message claiming a package couldn’t be delivered because of an unpaid customs fee or address issue, with a link to “resolve” it.
• Threats of account suspension from a utility company unless you pay immediately.
• Messages impersonating police or legal authorities, threatening consequences unless you cooperate right away.

Why this works: these scams combine fear and authority — two of the most powerful psychological levers — to short-circuit careful thinking. Real government agencies and law enforcement generally communicate through official mail and formal processes, not urgent texts demanding immediate payment.

10. Fake Giveaways, Prizes, and Free Offers

“You’ve won!” scams are designed to exploit excitement and the appeal of something for nothing.

Common forms:

• A message claiming you’ve won a lottery or sweepstakes you never entered.
• A “free” high-value product (like a phone or gift card) that only requires you to pay a small “shipping fee” — which is really just a way to collect your payment card details.
• Surveys promising rewards in exchange for extensive personal information.
• Fake promotional campaigns impersonating well-known brands.

Why independent verification matters: legitimate contests require you to have entered, and legitimate companies don’t ask winners to pay a fee to receive a prize. If you’re unsure whether a promotion is real, check the company’s official website or verified social media directly, rather than relying on the message itself.

Scam Types at a Glance

Scam Type	Typical Approach	Common Warning Sign	What Scammers Want	Safer Response
Phishing	Fake message imitating a trusted company	Urgent account/security warning with a link	Login credentials	Don’t click; go to the site directly
Shopping scam	Fake or fraudulent online store	Prices far below market rate	Payment for goods that don’t exist	Research the seller before buying
Tech support scam	Fake virus alert or unsolicited call	Request for remote access or payment	Device access, money, credentials	Hang up; contact vendor directly
Job scam	Unsolicited “recruiter” message	Payment required to get the job	Money, personal documents	Verify the employer independently
Romance scam	Long-term fake relationship	Avoids video calls; asks for money	Money, gift cards, crypto	Never send money to someone you haven’t met
Investment scam	Fake platform or expert	Guaranteed returns, urgency	Money, sometimes ongoing “fees”	Research independently; be wary of guarantees
Social media scam	Fake profile or hacked account	Unusual message or “giveaway” link	Personal info, account access	Verify through a separate channel
Bank/payment scam	Fake fraud alert or refund notice	Request for OTP or password	Account access, money	Never share codes or passwords
Impersonation scam	Fake government/delivery message	Threats or urgent fees	Money, personal info	Contact the agency directly
Giveaway scam	“You’ve won” message	Fee required to claim a prize	Payment info, personal data	Verify with the official source

 

15 Warning Signs of an Online Scam

1. Unexpected contact — you didn’t initiate the interaction, but someone is reaching out about your account, a prize, or an opportunity.
2. Extreme urgency — pressure to act “right now” or within a very short window.
3. Threats or fear — warnings about legal action, account suspension, or arrest.
4. Guaranteed profits — any promise of certain returns on an investment.
5. Offers that seem too good to be true — because they usually are.
6. Requests for passwords — no legitimate service needs your actual password.
7. Requests for OTP/security codes — these exist specifically to prevent unauthorized access; sharing them defeats that purpose.
8. Requests for unusual payment methods — gift cards, wire transfers, and cryptocurrency are hard to trace or reverse.
9. Requests for cryptocurrency — increasingly common across many scam types precisely because crypto transactions are difficult to reverse.
10. Pressure to keep the conversation secret — legitimate businesses and banks don’t ask you to hide a transaction from family or your bank.
11. Suspicious URLs — misspelled domains, extra words, or unfamiliar extensions.
12. Poor spelling or unusual language — not always present, but still a common tell in lower-effort scams.
13. Fake caller ID or sender information — phone numbers and email addresses can both be spoofed to look legitimate.
14. Requests for remote computer access — a major red flag outside of support sessions you initiated yourself.
15. Refusal to allow independent verification — a legitimate person or company won’t object to you calling them back through a number you looked up yourself.

How to Check if an Online Message, Website, or Offer Is a Scam

Step 1: Stop. Don’t click, pay, reply, or provide information immediately, no matter how urgent the message seems.

Step 2: Check the sender. Look closely at the actual email address, phone number, or website domain — not just the displayed name, which can be faked.

Step 3: Verify independently. Contact the company or person using contact information you find yourself — through an official website or a number on a card — not anything provided in the suspicious message.

Step 4: Inspect the website. Look for a legitimate “About” or contact page, consistent branding, and a real return/refund policy. A padlock icon and “https” mean your connection to the site is encrypted — they say nothing about whether the business behind the site is trustworthy. Scammers can and do use HTTPS on fraudulent sites.

Step 5: Check the offer. Look for unrealistic promises, artificial urgency, or unusual payment requirements.

Step 6: Search for independent information. Search the company name, phone number, or website address along with words like “scam” or “review” to see what others have reported.

Step 7: Ask before paying. Slow down whenever money or sensitive information is on the table — a short delay to verify costs you nothing; skipping it can cost a lot.

How to Tell If a Website Is a Scam

• Domain spelling — look closely for extra letters, numbers replacing letters, or unusual extensions.
• Lookalike domains — a domain that resembles a real company’s name but isn’t quite right.
• Recently created websites — a very new domain selling deeply discounted goods is worth extra scrutiny, though a new domain by itself doesn’t prove fraud — plenty of legitimate small businesses launch new sites too.
• Missing company information — no physical address, no working phone number, or a generic contact form only.
• Suspicious contact details — an email address using a free provider (like Gmail) representing itself as a large company.
• Unrealistic prices — significantly below the going rate across other retailers.
• Poor-quality content — inconsistent formatting, low-resolution images, or awkward phrasing throughout the site.
• Fake reviews — reviews that are generic, all posted around the same time, or overwhelmingly five-star with no detail.
• Suspicious payment methods — sites that only accept wire transfer, cryptocurrency, or gift cards.
• Return/refund policies — vague, missing, or unusually restrictive policies.
• Independent reviews — check third-party review sites and forums, not just testimonials on the site itself.
• Official company websites — if a site claims to represent a known brand, compare it against the brand’s official site found through a separate search.
• Secure browsing and browser warnings — take browser security warnings seriously, but remember HTTPS alone isn’t proof of legitimacy.

How Scammers Use Social Engineering

Scammers rely on well-understood psychological patterns rather than technical tricks alone:

• Urgency — rushing you past careful thinking.
• Fear — threats of legal trouble, account loss, or financial harm.
• Authority — impersonating banks, government agencies, or tech companies to reduce skepticism.
• Greed — appealing to the desire for an unusually good deal or return.
• Curiosity — enticing subject lines or messages that make you want to click to find out more.
• Trust — impersonating someone you already know or a brand you already use.
• Reciprocity — offering something small first (a “free” gift) to make you feel obligated to respond.
• Emotional attachment — especially central to romance scams, where a real emotional bond is built before any financial request.
• Scarcity — “only 3 left” or “offer ends tonight” pressure.
• Isolation — encouraging secrecy, discouraging you from discussing the situation with family, friends, or your bank.

Understanding these techniques isn’t about assigning blame to victims — these are deliberately engineered psychological pressures, and recognizing them is a skill anyone can build, regardless of how the scam was constructed.

How to Protect Yourself From Online Scams

• Use strong, unique passwords for every account — ideally generated and stored with a password manager.
• Enable multi-factor authentication (MFA/2FA) wherever it’s offered, especially for email, banking, and financial accounts.
• Keep your device’s operating system and apps updated.
• Avoid clicking links in unexpected messages — go directly to the official website instead.
• Verify unexpected requests independently, using contact information you find yourself.
• Never share OTPs or security codes with anyone who contacts you.
• Be cautious with any request for remote access to your device.
• Review your bank and credit card transactions regularly.
• Set up account alerts for logins and transactions where available.
• Limit how much personal information you share publicly online — scammers use it to make impersonation attempts more convincing.
• Be cautious using public Wi-Fi for anything involving logins or payments.
• Back up important data regularly.
• Keep security/antivirus software updated on your devices.
• Talk to family members, especially those less familiar with these tactics, about common scam patterns.

What to Do If You Have Been Scammed

If you’ve already been targeted, the priority is acting quickly and methodically — not blaming yourself.

1. Stop communicating with the scammer
2. Contact your bank or payment provider right away if you sent money — the window to potentially stop or reverse a transaction, especially a wire transfer, closes fast.
3. Secure affected accounts — this includes any account where you used the same or a similar password.
4. Change compromised passwords on the affected account and anywhere you reused it.
5. Enable MFA on the affected accounts if it isn’t already active.
6. Check for unauthorized transactions across your bank, credit card, and payment app statements.
7. Preserve evidence — screenshots, emails, transaction records, and any account or contact details for the scammer.
8. Report the scam to the appropriate authority or platform (see below).
9. Monitor your accounts and credit going forward, especially if personal information (like a Social Security number) was exposed.
10. Warn affected contacts if your account was compromised, since scammers often use a hijacked account to target your contacts next.

Where to report an online scam (U.S.):

• ftc.gov — the Federal Trade Commission’s central reporting site for consumer fraud and scams of nearly any kind.
• gov (the FBI’s Internet Crime Complaint Center) — particularly important if money was lost, especially through a wire transfer or cryptocurrency; file the same day if possible.
• gov — if personal information like a Social Security number was exposed, this builds a personalized recovery plan.
• Your bank or card issuer — contact them immediately, before filing other reports, if money was sent.
• Local police — worth filing a report for documentation purposes, even if the scammer is located elsewhere.

The correct reporting authority depends on your country — readers outside the U.S. should look for their national consumer-protection or cybercrime-reporting agency (for example, Action Fraud in the UK, or the Canadian Anti-Fraud Centre in Canada). Be aware that scammers sometimes create fake versions of official reporting sites — always navigate to a reporting agency by typing the address directly into your browser rather than clicking a link from an unsolicited message.

It’s important to be honest here: reporting a scam is the right thing to do, and it feeds law-enforcement databases that help investigate patterns and, sometimes, freeze funds if you act within the first 24-72 hours of a wire transfer — but recovery of lost funds is not guaranteed, particularly once money has moved through cryptocurrency, gift cards, or wire transfers, which are all specifically favored by scammers because they’re difficult to reverse.

Online Scam vs Legitimate Offer — What’s the Difference?

Legitimate Interaction	Potential Scam
Allows independent verification	Discourages verification
Gives you time to decide	Creates extreme urgency
Uses normal payment methods	Demands unusual payment methods
Does not request passwords/OTP	Requests sensitive credentials
Provides verifiable contact information	Uses suspicious contact details
Makes realistic claims	Promises guaranteed results

 

One warning sign alone doesn’t necessarily prove something is a scam — a legitimate company might occasionally use urgent language for a real limited-time sale, for instance. What matters is the overall pattern, and whenever money or sensitive information is involved, independent verification costs you little and protects you a lot.

Common Online Scam Messages — Examples

All examples below are fictional and provided for educational purposes only.

Example: Fake bank alert “Alert: We noticed a login from a new device. If this wasn’t you, verify your identity now: [link]”

• Red flags: urgency, generic greeting, unfamiliar link.
• Safer response: Ignore the link; log in directly through your bank’s app or official website to check for real alerts.

Example: Fake package delivery message “Your package couldn’t be delivered due to an incomplete address. Update your details here: [link]. A small redelivery fee applies.”

• Red flags: unexpected message, request for payment, generic delivery company name.
• Safer response: Check tracking directly on the carrier’s official site using a tracking number you already have.

Example: Fake job offer “Congratulations! Based on your resume, you’ve been selected for a remote data-entry position paying $35/hour. To begin onboarding, please send a copy of your ID and a $50 training fee.”

• Red flags: unsolicited offer, payment required to start work, request for ID early in the process.
• Safer response: Research the company independently; legitimate employers don’t charge you to be hired.

Example: Fake investment opportunity “Our AI trading algorithm guarantees 20% weekly returns. Limited spots available — invest today to lock in your spot.”

• Red flags: guaranteed returns, urgency, vague description of how it actually works.
• Safer response: Walk away — guaranteed high returns are a hallmark of investment fraud.

Example: Fake tech support alert “WARNING: Your computer is infected with 5 viruses. Call Microsoft Support immediately at [number] to prevent data loss.”

• Red flags: alarming pop-up, urgency, unsolicited phone number.
• Safer response: Close the browser tab; don’t call the number. Contact the manufacturer directly if genuinely concerned.

Example: Fake social-media giveaway “We’re giving away 5 iPhones! Like, share, and comment your email and phone number to enter.”

• Red flags: unofficial account, no verified giveaway rules, request for contact information.
• Safer response: Check the brand’s verified account directly before assuming a giveaway is real.

Online Scam vs Phishing vs Identity Theft

These terms are related but distinct:

• Scam: A deceptive scheme intended to obtain money, information, access, or another benefit — the broadest of the three terms.
• Phishing: A deceptive communication designed to trick someone into revealing information or taking an unsafe action — usually the method used to set up a broader scam.
• Identity theft: The unauthorized use of someone’s personal information, often for fraud or other unlawful purposes — frequently the outcome of a successful phishing or data-breach-related scam.

In practice, these categories overlap: a phishing email might be the delivery mechanism, the scam is the overall deceptive scheme, and identity theft can be one of the consequences if personal information is stolen and misused.

Frequently Asked Questions About Online Scams

What are the most common online scams? Phishing, online shopping scams, tech support scams, job scams, romance scams, investment and cryptocurrency scams, social media scams, bank and payment scams, government/delivery impersonation scams, and fake giveaways are among the most commonly reported categories.

How can I tell if an online message is a scam? Look for unexpected contact, urgency, requests for passwords or codes, unusual payment demands, and pressure to act immediately. No single sign is definitive, but multiple signs together are a strong indicator.

How can I check if a website is legitimate? Search independently for reviews, check for a real physical address and contact information, look at the domain spelling closely, and be cautious of prices that seem too good to be true. HTTPS encrypts your connection but doesn’t prove the business is trustworthy.

What are the biggest warning signs of a scam? Extreme urgency, requests for passwords or one-time codes, guaranteed profits, and unusual payment methods (gift cards, wire transfers, cryptocurrency) are among the strongest red flags.

How do phishing scams work? A scammer sends a message impersonating a trusted company, directing you to a fake login page or asking you to click a malicious link, with the goal of stealing your credentials or installing malware.

Can scammers steal money through a text message? Yes — “smishing” (SMS phishing) can direct you to fake websites that steal payment information or login credentials, or trick you into sending money directly.

What should I do if I clicked a suspicious link? Don’t enter any information on the resulting page. Run a security scan on your device, change passwords for any accounts you’re concerned about, and monitor for unusual account activity.

What should I do if I gave a scammer my password? Change that password immediately, and change it anywhere else you reused it. Enable MFA if you haven’t already, and check the account for any unauthorized activity or changes.

What should I do if I sent money to a scammer? Contact your bank or payment provider immediately — the sooner you act, the better the chance (though not guarantee) of stopping or reversing the transaction. Then report the scam to the FTC and, if a wire transfer or cryptocurrency was involved, the FBI’s IC3.

Can a scammer use my phone number to steal my account? Yes — through tactics like SIM-swapping (transferring your number to a device they control) or by using your number for social engineering against your mobile carrier or other accounts. This is one reason app-based authentication can be more secure than SMS-based codes for high-value accounts.

How can I protect my bank account from online scams? Never share your password or one-time codes with anyone who contacts you, enable account alerts, review transactions regularly, and contact your bank directly using a number from your card or their official website if anything seems off.

Are online shopping websites with very low prices safe? Not necessarily — dramatically discounted prices are one of the most common tactics used by fraudulent shopping sites. Research the seller independently before buying.

How do I report an online scam? In the U.S., report to ReportFraud.ftc.gov and, if money was lost (especially via wire transfer or cryptocurrency), IC3.gov. Also contact your bank if a payment was involved. Reporting requirements and agencies vary by country.

Can scammers fake caller ID or email addresses? Yes — both caller ID and the “display name” on an email can be spoofed to look like a trusted contact or organization. This is why verifying independently matters more than trusting what’s displayed.

Is HTTPS enough to know that a website is safe? No. HTTPS means your connection to the site is encrypted, which protects data in transit, but it says nothing about whether the business behind the site is legitimate. Scam websites can and do use HTTPS.

 

This article is for general educational purposes and does not constitute legal, financial, or cybersecurity advice specific to your situation. If you’re dealing with an active scam or suspect your accounts or identity have been compromised, contact your bank and the appropriate reporting agency for your country as soon as possible.