How to Spot a Scam: Seven Signals That Show Up in Almost Every One

Most scam advice asks you to memorize a list: the IRS scam, the grandparent scam, the toll-road text, the tech support pop-up, the romance scam, the job offer that pays too well. The list never stops growing. By the time you have learned this year's list, next year's is already circulating.

Memorizing scams is the wrong strategy. The disguises change weekly. The machinery underneath almost never does.

Every scam has to accomplish the same four things: reach you, make you believe a false story, stop you from checking that story with anyone else, and get value out of your hands into theirs. Those requirements leave fingerprints. Learn the fingerprints and you no longer need the list.

The seven signals

1. The contact started with them

Almost every scam begins with an inbound message you did not ask for: a text, a call, an email, a pop-up, a direct message, a knock at the door. You were not looking for this company or this problem. It arrived.

That does not make inbound contact automatically fraudulent. Your pharmacy really does text you. But it flips the burden of proof. When someone else opens the conversation, nothing they tell you about who they are counts as evidence.

2. There is a deadline that does not make sense

Scammers need a decision before you get advice. So there is always a clock: your account closes today, the warrant is being issued this afternoon, the payment must clear in the next hour, the deal expires at midnight.

Real institutions move slowly and put things in writing. Banks send letters. Courts send summonses. Government agencies mail notices and give you the right to appeal. An organization that will not let you sleep on it is not an organization.

3. You are asked to keep it quiet

"Don't tell your son, he'll worry." "Do not discuss this with bank staff, the investigation is confidential." "This offer is only for you, please don't share it."

Isolation is not a side effect of these scripts. It is the point. The single most effective thing that stops a scam in progress is a second person hearing the story out loud. Anyone who works to prevent that is telling you exactly what they are.

4. The payment method is strange

Legitimate businesses and every government agency in the United States accept ordinary payment: a check, a card, a bill you can pay later. Scammers ask for value that moves fast and cannot be clawed back: gift cards, wire transfers, cryptocurrency, cash in an envelope, payment apps sent to a stranger.

Payment method is the single most reliable signal on this list, because it is the one part of the scam that cannot be faked. The story can be perfect and still end at a gift card rack. We covered each of these methods and why they are attractive to criminals in the payment methods scammers ask for.

5. They want a code, a password, or your screen

A one-time passcode is the last brick in your security wall. It exists so that a criminal who already stole your password still cannot get in. There is exactly one reason a stranger needs you to read that code aloud, and it is not to verify your identity.

The same logic covers remote access software. When a "technician" asks to see your screen to fix a problem you did not know you had, the fix is the attack.

6. The message is engineered to make you feel something first

Fear that you are about to be arrested. Panic that a grandchild is in jail. Relief that a refund is owed to you. Affection from someone who texts every morning. Excitement about a return no bank can match.

Strong emotion is not a byproduct of the pitch. It is the delivery mechanism. Under stress, people stop evaluating claims and start following instructions. If a message makes your heart rate change, that is the moment to do nothing at all for ten minutes. The most extreme version of this, a family member in fake trouble, is taken apart in why urgency is the whole trick.

7. They move you to another app

"Text me on WhatsApp." "Let's continue on Telegram." "Download this app to see your investment balance."

A channel switch moves the conversation somewhere with no fraud monitoring, no message screening, no employer, and no record. It is the digital equivalent of being asked to step into the alley.

Two signals is a stop, not a maybe

One signal can have an innocent explanation. Your credit union might really call you. A real deadline occasionally exists.

Two signals together almost never do. An unexpected call plus a deadline. A deadline plus a gift card. A gift card plus a request for secrecy. When you can name two, stop the interaction. Not "get more careful" or "ask a few more questions." Stop, hang up, and start over on your own terms.

The habit that beats all seven

You do not need to win the argument, spot the accent, or catch the scammer in a contradiction. You need one habit:

End the contact and reconnect through a number or address you looked up yourself.

Hang up. Close the message. Then find the organization independently: the number on the back of your card, the number on your printed statement, the agency's official website typed by hand. Call that. If the emergency was real, it will still be there. If it was not, the story evaporates the moment you leave the channel the scammer controls.

This works because it does not depend on you being right about anything. You do not have to judge whether the caller sounded legitimate. You only have to refuse to use their phone number. Why it holds even when the number on your screen looks correct is covered in caller ID is not evidence.

What legitimate organizations do not do

A short list worth keeping near the phone. No real bank, agency, or company will:

• Ask you to move your money to a "safe account" to protect it from fraud
• Ask for a one-time passcode, PIN, or password over the phone
• Threaten immediate arrest, deportation, or license suspension by phone
• Demand payment in gift cards, cryptocurrency, or wire transfer
• Ask you to install screen-sharing software to receive a refund
• Tell you to keep the conversation secret from your family or your bank

If any of these appear, you already have your answer, no matter how convincing everything before it was.

Try it on a real message

Here is a text of a kind that circulates constantly:

USPS: Your package is on hold due to an incomplete address. Update within 12 hours to avoid return: usps-delivery-track[.]com/verify

Run the list. Contact you did not start: yes. Deadline that does not make sense: yes, a mail carrier does not destroy your parcel after twelve hours. A link to a domain that is not the real one: yes. That is three signals in twenty-eight words, and you never had to know that this particular scam exists. Delete it, and if you are expecting a package, check tracking on the carrier's own site.

We take that specific format apart in how to read a smishing message. The email version of the same trick, including sender addresses and attachments, is in reading a suspicious email.

When you see one, report it

Reporting takes two minutes and feeds the databases that carriers, banks, and investigators use:

• Forward scam texts to 7726 (SPAM) to report them to your mobile carrier, then delete the message
• Report any scam attempt to the Federal Trade Commission at reportfraud.ftc.gov
• Report internet-based fraud to the FBI's Internet Crime Complaint Center at ic3.gov

If money already moved, speed matters much more than paperwork. Start with what to do in the first 24 hours.

Where our software fits

Vision exists to put a second opinion between you and the moment of decision: scam detection and a searchable scam database on iPhone, and link analysis in the browser through our Chrome extension. Vision is free to download on the App Store and the Chrome Web Store.

The seven signals still matter. Software catches what it recognizes; you catch what is new. Together they cover far more than either alone.

If you are reading this on behalf of a parent rather than yourself, start with how to protect an aging parent without taking over their life.