How to Identify a Scam

A scam is any deceptive act that attempts to steal your money or sensitive information. Scammers often pose as an institution or individual you know, like a financial company or a friend or family member, to convince you to send them cash or perform an action that lets them access your personal data. 

Phishing attacks are one of the most common scam methods. With a phishing attack, scammers will pretend to be a person or organization who the victim trusts using a fraudulent email, text, phone call, or website. They’ll try to trick their target into downloading malware, sharing sensitive information, or otherwise exposing themselves to cybercrimes. 

Victims of cybercrimes may experience identity theft, credit card fraud, ransomware, and financial losses. 

Now you’re probably asking yourself: how do I avoid a scam? It’s not difficult once you know these four red flags.

Our four scammer signs also apply to phishing attacks. These are common tactics scammers will use in an email scam: 

• Claiming there’s a problem with your account or payment information 
• Saying there’s been suspicious account activity or log-in attempts 
• Asking you to confirm personal or financial information 
• Including an unknown invoice 
• Wanting you to click a link to make a payment 
• Saying you’re eligible to register for a government refund 
• Offering a coupon for free stuff 

Details that indicate these messages are fake include a general email greeting, misspellings or grammar mistakes, and email addresses that don’t match the organization’s official address. You should also avoid clicking links in suspicious emails, as these may send you to fraudulent websites. 

Emails and websites aren’t the only methods scammers use. Phone calls and text messages are home to similar scams with different details to watch out for. 

To avoid scam calls, register your number with the National Do Not Call Registry. Legitimate telemarketers will avoid calling numbers on the list. You should also use call blocking tools and password-protected voicemail to help block unwanted calls. 

Different scam methods have different methods of reporting. 

• Phishing emails should be forwarded to the Anti-Phishing Working Group at reportphishing@apwg.org. If you received the phishing email through a work email, report it so your company’s IT team remains aware of active threats. 
• Phishing text messages should be forwarded to SPAM (7726). 
• Phishing phone calls should be reported to your robocall-blocking technology to help the company block the number from reaching you or other people. 

If you believe you’ve fallen victim to a scam, it’s critical to act urgently to minimize any financial damage. 

• Report the crime to your local police or sheriff’s office and state attorney general 
• Contact your bank and credit card companies to cancel any cards exposed to the scam 
• Reach out to the credit bureaus to freeze your credit and place a fraud alert on your credit reports 
• Change your online passwords to prevent scammers from accessing your accounts