New scam formats appear constantly: a fake package delivery text this month, a cloned-voice phone call the next. Memorizing each one is a losing strategy. The underlying structure barely changes, and learning it defeats most variations at once.
The pattern underneath almost every scam
Three ingredients, present in nearly every scam that succeeds:
- Contact you did not initiate — a call, text, email or message arrives out of nowhere.
- Manufactured urgency — you must act in minutes, before you can think it through or check with anyone.
- A payment method that cannot be reversed — gift cards, wire transfers, cryptocurrency, or a peer-to-peer payment app.
Remove urgency from the equation and nearly every scam collapses, because the pressure is what stops people verifying. Remove the irreversible payment method and even a successful manipulation cannot extract money.
What legitimate organizations do not do
- Demand immediate payment over the phone
- Threaten arrest, deportation or account suspension unless you pay right now
- Ask for payment by gift card, wire transfer or cryptocurrency
- Ask you to buy gift cards and read the numbers over the phone
- Pressure you to keep the interaction secret from family or your bank
Any one of these is a strong signal of fraud, not a border case.
Common formats, organized by mechanism rather than story
Impersonation. A caller or message claims to be a bank, government agency, tech company or delivery service. Caller ID can be faked, and a voice can be cloned, so identity claimed over the phone or in a text is not verification.
Urgency-driven financial requests. A message claims your account is compromised, a package is stuck, or a family member is in trouble, and asks you to act, click, or pay before you can check.
Too-good offers. Prize winnings, investment returns far above market rates, or a job requiring no real interview. If the upside looks disconnected from any normal risk, that disconnect is the tell.
Relationship-based fraud. A stranger builds rapport over weeks or months before requesting money, often for a manufactured emergency or travel cost.
Marketplace fraud. A buyer or seller pushes payment off the platform's protected system, onto a peer-to-peer app with no buyer protection.
Verification defeats nearly all of it
The single habit that matters most: hang up, and call back on a number you find yourself — from the back of your card, a past statement, or the organization's official website. Never the number the caller gave you, never the number in the text message.
This one habit works regardless of how convincing the caller sounds, because it removes their control of the channel. A legitimate representative will never object to you verifying this way; persistent objection is itself a sign of fraud.
The link-click channel
For scams delivered by email or text:
- Do not click links in unexpected messages. Navigate to the site yourself, or use the official app.
- Hover over a link, where your device allows it, to preview the actual destination before tapping.
- Be suspicious of urgency plus a login request together, which is the standard phishing shape.
- Watch for near-miss domains: a single added letter or hyphen in an otherwise familiar address.
What to do if you are targeted
Do not engage further. Do not argue, do not explain your suspicions to the scammer, simply stop responding.
Verify independently using the callback method above if there is any chance the message could be real.
Report it. File a report at ReportFraud.ftc.gov, and for online crime, at IC3.gov, the FBI's Internet Crime Complaint Center. Reports help build the pattern data that gets scam operations shut down, even when your individual case is not investigated.
If you already sent money or information
Speed matters. Contact your bank or payment provider immediately — some wire transfers and card payments can still be reversed or flagged within a short window. If you shared account numbers or a Social Security number, follow the response steps in what to do after a data breach. If you suspect an account has already been taken over, the warning signs are listed in how to know if your identity has been stolen.
For scams that specifically target children, teenagers or older relatives, see how to protect your family from online scams, which covers the household habits that catch these attempts before money moves.
Frequently asked questions
How can I tell a scam call from a real one?
Hang up and call back on a number you find yourself, from your card, a statement or the organization's official site. Never use the number the caller provided, since caller ID can be faked.
Why do scammers always ask for gift cards or wire transfers?
Because those payment methods cannot be reversed once sent. A request for gift cards, wire transfers, cryptocurrency or a payment app is one of the strongest single indicators of fraud.
What should I do if I already sent money to a scammer?
Contact your bank or payment provider immediately, since some transfers can still be stopped or flagged. Then report it at ReportFraud.ftc.gov and, for online crime, at IC3.gov.
Are older adults really targeted more by scams?
Certain scam types, such as grandparent scams and tech-support scams, are disproportionately aimed at older adults, though anyone can be targeted. Family agreements like a code word for emergencies help across age groups.
