Know Phishing

How to Tell if Someone Is Trying to Scam You

Scams take many forms, but the tactics behind them are often surprisingly similar. Learn how pressure, secrecy, unusual payments, unexpected contact, and requests for sensitive information can reveal a scam.

Scams come through email, text messages, phone calls, social media, dating apps, websites, advertisements, and even ordinary mail. The stories change constantly, but the methods scammers use are surprisingly consistent.

You do not need to recognize the name of every new scam. Learn to recognize the behavior behind the scam: unexpected contact, emotional pressure, secrecy, unusual payment, sensitive-information requests, and attempts to control how you verify the story.

What is the clearest sign someone may be trying to scam you?

No single warning sign proves fraud. The risk becomes much greater when several warning signs appear together—especially when an unexpected person creates urgency and then asks for money, account access, personal information, or secrecy.

1. The contact is unexpected

A surprise message from a bank, government agency, employer, retailer, technology company, romantic interest, or family member should be verified before you act on it.

2. They create fear or urgency

Scammers want to reduce the time you have to think. They may threaten account closure, arrest, financial loss, missed delivery, computer damage, or harm to a relative. Others use excitement instead, such as a prize or investment opportunity that supposedly disappears if you wait.

3. They ask you to keep the situation secret

Be suspicious when someone says you cannot tell your family, bank, employer, police, store employee, or another trusted person. Outside opinions make scams harder to maintain.

4. They request unusual or irreversible payment

Gift cards, cryptocurrency, wire transfers, cash shipments, and other difficult-to-reverse methods are common in scams. A payment method does not prove fraud by itself, but an unexpected demand for one deserves serious caution.

5. They ask for passwords or security codes

Never give an unexpected contact your password, PIN, or one-time authentication code. A criminal may already have your username and be asking for the final piece needed to enter your account.

6. They control the verification process

A scammer may provide a phone number, website, email address, or another person who supposedly confirms the story. That is not independent verification because the suspicious person chose the method.

Instead, find contact information yourself.

7. They want access to your phone or computer

Be cautious if an unexpected caller tells you to install remote-access software, share your screen, change security settings, or move money to a “safe” account.

8. The opportunity is unusually profitable or easy

Guaranteed investment returns, effortless jobs, surprise prizes, and unusually profitable opportunities deserve careful independent research. A professional-looking website or testimonial does not remove the risk.

9. The story changes when you question it

A legitimate organization should be able to tolerate reasonable verification. Anger, threats, increased pressure, or explanations that keep changing are reasons to end the conversation.

Your 30-second scam check

How to verify someone safely

Stop the conversation temporarily. Do not use links, phone numbers, or contact information supplied by the suspicious person. Open the organization's official app, type a known website yourself, use a number from a statement or card, or contact the person through contact information you already had.

What if the person claims to be a relative or friend?

Contact the person directly using a number you already know. If you cannot reach them, contact another family member or mutual acquaintance. Do not let claims of secrecy or embarrassment prevent verification.

What if you already sent money?

Contact the bank, card issuer, payment service, or other financial institution involved as quickly as possible. Explain that you may have been scammed and ask what options are available. Keep transaction records and communications.

Be cautious of “recovery” scammers who later promise to retrieve lost money for an upfront fee.

What if you already gave away account information?

Change exposed passwords through the legitimate service, starting with email and financial accounts. Enable two-factor authentication, review sign-in activity, and sign out unknown sessions when the service provides that option.

What not to do

How do you know you are safer?

You are safer when you can interrupt an unexpected request without fear of losing control of the situation. A legitimate issue can usually be independently verified after you stop the original conversation.

The Know Phishing takeaway

Unexpected contact plus pressure, secrecy, sensitive information, or unusual payment is your signal to stop. Verify the story through a method you choose—not one provided by the person asking you to act.

Related Know Phishing Guides