Security
How to Spot an Online Scam Before You Lose Money
Scams are not clever. They are repetitive, and they work through volume and emotional pressure rather than technical sophistication. Once you can recognise the handful of underlying scripts, the specific story stops mattering. This guide catalogues the patterns currently in wide circulation, explains the psychology each one exploits, and gives a verification routine short enough that you will actually use it.
Every scam needs urgency
The common structure is a deadline that prevents you from checking. Your account will be suspended today, the offer closes in an hour, the delivery returns to the warehouse this evening, the case will be filed unless you speak now.
Urgency is engineered because verification is fatal to the scam. Any legitimate organisation can wait ten minutes while you call them back on a number you looked up yourself. Every scam collapses at that step, without exception.
This gives you a rule that requires no expertise: pressure to act immediately is itself the warning sign, independent of how plausible the story sounds.
The scripts in current circulation
Different stories, same three moves
Task and commission jobs. You are paid small amounts for trivial tasks, then invited into a group where a larger deposit unlocks higher earnings. Early withdrawals succeed to build trust. The larger deposit never comes back.
Investment groups with a mentor. A friendly contact, often after a wrong-number message that turns into weeks of conversation, introduces a trading platform showing rising balances. The platform is a display; there are no trades. Withdrawal requests trigger a tax or fee demand.
Delivery and customs notices. A small fee is requested to release a parcel. The purpose is not the fee; it is capturing card details on a convincing payment page.
Support and law enforcement calls. Someone claims your device is infected or your identity is implicated in a crime, and requests remote access or a transfer to a safe account. No such thing as a safe account exists.
- Payment required before you receive anything
- A platform that shows profits but blocks withdrawal
- A request for remote access to your device
- A move from a public app to a private chat
Why intelligent people fall for these
The targeting is not random. Scripts are refined against thousands of attempts, and the ones you receive are the survivors of that selection. They are tuned to be persuasive.
They also arrive at bad moments. A delivery notice during a week you ordered three parcels, a job offer during a job search, a bank alert while travelling. Context does most of the work.
The final factor is sunk cost. Once someone has deposited, the pressure to recover it by depositing again is enormous, and the scam is designed around exactly that. This is why recovery scams targeting previous victims are so effective.
The thirty-second routine
Stop and breathe. The deadline is fabricated; treating it as real is the whole trap.
Verify through a channel you chose. Close the message, open the official app or type the address yourself, or call the number printed on your card. Never use a link, number or address supplied by the person contacting you.
Ask what money is moving and in which direction. If you are being asked to send money to receive money, it is a scam every single time, with no legitimate exception.
Tell one other person out loud before acting. Saying the story to another human breaks the isolation the script depends on, and it is astonishingly effective.
If it already happened
Speed decides recovery
Report to your bank immediately and in writing, and to the national cybercrime helpline. Money is far more recoverable while it sits in the first receiving account, which is usually a window measured in hours.
Freeze cards, revoke any remote access application installed, change the passwords for email and banking from a different, clean device, and check for new mandates or beneficiaries added to your accounts.
Then be alert for the second wave. Victim lists circulate, and a call offering to recover your lost funds for a fee is the same operation returning.
Protecting people who are targeted most
Older relatives and new smartphone users receive disproportionate volumes. The useful intervention is not a lecture about specific scams, which change monthly, but a standing agreement: any request for money or codes gets a call to you first, no matter who it appears to come from.
Set that agreement up in advance and make it unembarrassing to use. A five-second call has stopped more losses than any awareness campaign.
