Short answer: Most scams share the same four ingredients: someone pretends to be from an organisation you trust, tells you there’s a problem or a prize, pressures you to act fast, and asks you to pay or share information in an unusual way. If a message or call has even one of these, stop and check it yourself through an official website or phone number you already know.
Scams don’t look like scams anymore. They look like a text from your bank, a parcel delivery update, an email from your boss, or a call from a family member in trouble. Scammers are good at sounding normal — and they’re counting on you being busy.
The good news is that almost every scam follows the same playbook. Once you know the warning signs, you’ll start spotting them everywhere.
This guide covers the 10 warning signs to look for, how they show up in texts, emails and phone calls, and exactly what to do if you think you’ve been caught out.
The 4 ingredients of almost every scam
Before the full list, here’s the simple version. The US Federal Trade Commission (FTC) describes four things nearly every scam has in common:
- They pretend to be someone you trust — a bank, a government agency, a delivery company, a tech company, or even a family member.
- They say there’s a problem or a prize — an unpaid bill, a locked account, a missed parcel, or money you’ve “won”.
- They pressure you to act immediately — before you have time to think or ask someone.
- They want you to pay or share information in a specific way — gift cards, crypto, bank transfers, payment apps, or your login details.
Keep these four in mind. Every warning sign below is a version of one of them.
10 warning signs of a scam
1. You weren’t expecting it
A message about a parcel you didn’t order, a refund you didn’t ask for, or a problem with an account you don’t remember using is the most common starting point for a scam. Unexpected doesn’t always mean fake — but it always means “check before you click.”
2. It creates urgency or fear
“Your account will be closed in 24 hours.” “Final notice.” “Act now or pay a fine.” Scammers use time pressure because panic stops careful thinking. Real organisations give you time to respond.
3. It claims to be from someone you know or trust
Scammers copy logos, email layouts and even the sender name. Phone numbers can be faked too, so the name on your screen isn’t proof of who’s really calling or texting.
4. It asks you to click a link or open an attachment
Links in scam messages lead to fake websites built to steal your passwords or card details. Attachments can contain malware. When in doubt, don’t click — go to the website by typing the address yourself.
5. The link or email address looks slightly wrong
Look closely. Scam addresses often add extra words, swap letters, or use unusual endings — like paypa1-security.com instead of paypal.com. On a phone, press and hold a link to preview where it really goes.
6. It asks for personal or financial information
Your bank will never text or email you asking for your full password, PIN or one-time verification code. If a message asks for any of these, it’s a scam — no exceptions.
7. It asks you to pay in an unusual way
Gift cards, cryptocurrency, wire transfers and payment apps are scammers’ favourites because the money is hard to trace and almost impossible to get back. No real business or government agency will insist you pay with a gift card.
8. It’s too good to be true
You’ve won a prize you never entered. An investment promises guaranteed high returns. A job pays a lot for very little work. If it sounds too good to be true, it almost always is.
9. It asks you to keep it secret
“Don’t tell anyone.” “Don’t talk to your bank.” Scammers want to stop you from getting a second opinion, because one conversation with a friend or family member often reveals the scam.
10. Something just feels off
Odd spelling, a strange greeting, a slightly different tone from someone you know, or a request that doesn’t make sense. Trust that feeling. Pausing for two minutes costs you nothing.
How scams show up in texts, emails and calls
Text message scams (smishing)
Scam texts are short, urgent and almost always include a link. Common examples include fake parcel delivery notices, “unusual activity” alerts from a bank, and messages about unpaid tolls or fines.
👉 Example: Got a Text About an Unpaid Toll? It’s Probably a Scam
Quick check: Don’t click the link. Open the company’s official app or type its website address yourself.
Email scams (phishing)
Phishing emails try to look official — logos, footers, even “unsubscribe” links. They often say your account has a problem, a payment failed, or a document is waiting for you.
Quick check: Look at the actual sender address (not just the name), hover over links before clicking, and be very wary of unexpected attachments.
Phone call scams (vishing)
Scam callers may pretend to be your bank’s fraud team, a tech support agent, the police or a tax office. Some now use AI to imitate a family member’s voice, asking for urgent help.
Quick check: Hang up and call back using a number you find yourself — for example, the number on the back of your bank card. With family, call the person directly or ask a question only they would know.
What to do if you think it’s a scam
- Stop. Don’t click, reply, pay or share anything.
- Check independently. Contact the organisation using a website or phone number you already trust — never the details in the message.
- Talk to someone. A quick chat with a friend or family member is one of the best scam filters there is.
- Report it. Forward scam texts to 7726 (SPAM). In the US, you can also report scams at ReportFraud.ftc.gov. In the UK, forward suspicious emails to report@phishing.gov.uk.
- Delete it once reported.
What to do if you’ve already clicked, paid or shared details
Don’t panic, and don’t feel embarrassed — scams fool smart, careful people every day. What matters is acting quickly.
- You paid by card or bank transfer: Call your bank immediately using the number on your card or their official website. The sooner you call, the better the chance of stopping or recovering the payment.
- You paid with a gift card: Contact the gift card company straight away and tell them it was used in a scam. Keep the card and receipt.
- You entered a password: Change it right away — and anywhere else you use the same password. Then turn on two-factor authentication.
- You shared personal information: Watch your accounts closely for unusual activity and consider a credit freeze if your country offers one.
- You installed an app or gave someone remote access: Disconnect from the internet, remove the app, and run a security scan or ask a trusted technician to check the device.
Then report it. Your report helps authorities warn others and stop the people behind it.
Simple habits that stop most scams
- Pause before you act. Most scams fall apart with a two-minute pause.
- Never use contact details from a suspicious message. Find them yourself.
- Use unique passwords and a password manager, so one leaked password can’t unlock everything.
- Turn on two-factor authentication on your email, bank and social media accounts.
- Keep your phone and computer updated. Updates fix security holes scammers use.
- Agree on a family “safe word” to check that an urgent call or message really is from a loved one.
Frequently asked questions
What is the most common type of scam? Impersonation scams — where someone pretends to be a trusted organisation or person — are the most reported type of fraud in the US, according to the FTC. They often arrive by text, email or phone.
Can I get scammed just by opening a text or email? Opening a message is usually safe. The danger comes from clicking links, opening attachments, replying, or sharing information.
How can I tell if a website is fake? Check the address carefully for misspellings or extra words, be wary of sites you reached through a link in a message, and when in doubt, type the official address yourself. A padlock icon alone doesn’t prove a site is safe.
Will my bank ever ask for my one-time code? No. A real bank will never ask you to read out or forward a one-time verification code. Anyone asking for one is trying to get into your account.
Is it my fault if I get scammed? No. Scams are designed by professionals to fool people. Reporting it quickly is the most useful thing you can do.
The bottom line
You don’t need to be a tech expert to spot a scam. Remember the four ingredients — a trusted name, a problem or prize, pressure, and an unusual request — and pause whenever you see them. When in doubt, check it yourself through an official channel. That one habit will protect you from the vast majority of scams.
Stay one step ahead of scammers. Get simple, jargon-free cyber safety tips in your inbox. Subscribe to Johnny’s Cybersecurity Newsletter →
Want to spot every kind of scam, not just this one? Read our complete guide:
Leave a Reply