{"site":{"name":"ScamEncyclopedia","url":"https://scamencyclopedia.org"},"note":"Full scam Q&A from ScamEncyclopedia. Educational; verify reporting routes on the official site for your country. Attribution appreciated.","total":1609,"questions":[{"slug":"can-a-bank-ask-me-to-move-money-to-a-safe-account","url":"https://scamencyclopedia.org/questions/can-a-bank-ask-me-to-move-money-to-a-safe-account","question":"Can a bank ask me to move money to a 'safe account'?","shortAnswer":"No. A genuine bank will never ask you to move your money to a 'safe account'. This is one of the clearest signs of a scam.","explanation":"The 'safe account' tactic is used by scammers impersonating your bank, the police, or fraud investigators. The call usually opens with an alarming story: fraudulent payments on your account, a corrupt member of branch staff, or an investigation that needs your help. Because the caller may spoof your bank's real number and quote personal details taken from data breaches, the story can feel very convincing — and the pressure to act 'before the money is gone' is deliberate, designed to stop you pausing to think.\n\nThe request itself is what gives the scam away. If your account were genuinely compromised, your bank could freeze it, block cards, and stop payments without your money going anywhere. Moving funds to a new account only ever benefits the person receiving them. Scammers often add two further tells: they insist on secrecy, and they coach you on what to say if branch staff or your banking app question the transfer — a genuine investigator would never ask you to lie to your own bank.\n\nIf you get this call, hang up without explaining yourself. Wait a few minutes or use a different phone, then call your bank on the number printed on your card and report what happened.","redFlags":["Being told to move money to a 'safe' or 'holding' account","Pressure, urgency, and secrecy","Instruction not to tell branch staff or family","Caller ID that looks like your bank (it can be spoofed)"],"whatToDoNow":["Do not move any money","Hang up and call your bank using the number on your card (or 159 in the UK)","Report it to your national fraud service"],"faq":[{"question":"What if they already know my account details?","answer":"Scammers often have some of your details from breaches, which they use to sound convincing. Knowing your details doesn't make them genuine — a real bank still won't ask you to move money to a 'safe account'."},{"question":"What if the caller says they're from the police, not my bank?","answer":"The script is the same scam. Police never ask members of the public to move money as part of an investigation, and they never ask you to keep a transfer secret from your bank. Hang up and verify through the police non-emergency number."},{"question":"I already moved money — what should I do now?","answer":"Call your bank immediately on the number on your card. Speed matters, because banks can sometimes recall or freeze recent transfers. Then report it to your national fraud service and keep a record of everything the caller told you."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-whatsapp-job-offer-a-scam","url":"https://scamencyclopedia.org/questions/is-a-whatsapp-job-offer-a-scam","question":"Is a WhatsApp job offer a scam?","shortAnswer":"An unsolicited job offer arriving by WhatsApp from an unknown number is almost always a scam, usually a task scam or fee scam.","explanation":"Legitimate employers and recruiters don't recruit by messaging random WhatsApp numbers with promises of easy daily pay — real hiring goes through applications you made, named companies you can verify, and offers you can check by calling the employer directly. An unsolicited WhatsApp offer usually leads one of three places: a task scam, where a polished dashboard shows 'earnings' that can only be withdrawn after you deposit your own money; a fee scam, where the job exists only to collect training, equipment, or visa charges; or money-mule recruitment, where the 'work' is moving stolen funds through your bank account — something that can leave you facing a frozen account or criminal investigation. The friendly tone, flexible hours, and screenshots of other workers' payouts are all part of the script. If you didn't apply, treat the offer as hostile: don't send money, documents, or bank details, and block and report the number.","redFlags":["Unsolicited WhatsApp message about a job you didn't apply for","Vague 'recruitment agency' or company","Easy tasks with high daily pay","Any requirement to deposit money or share bank/ID details"],"whatToDoNow":["Don't deposit money or share personal details","Block and report the number","If you paid, contact your bank and report it"],"faq":[{"question":"How did they get my number?","answer":"From data breaches, leaked lists, or random generation. A job offer from an unknown number you never contacted is a strong scam signal."},{"question":"The recruiter names a well-known company. Could it still be fake?","answer":"Yes — scammers borrow real company names and logos precisely because they are recognisable. If the company interests you, find its official careers page yourself and apply there. A genuine role will exist on it, and a genuine recruiter won't mind you checking."},{"question":"Is it safe to reply just to see what they say?","answer":"It's better not to. Replying confirms your number is active and monitored, which invites more targeted attempts. Block and report the number instead."}],"lastReviewed":"2026-08-01"},{"slug":"can-police-ask-for-payment-by-crypto","url":"https://scamencyclopedia.org/questions/can-police-ask-for-payment-by-crypto","question":"Can police ask for payment by crypto?","shortAnswer":"No. Police and government agencies never demand payment in cryptocurrency, gift cards, or by transfer to a 'safe account'.","explanation":"No — this single fact defeats the entire scam. No police force, court, tax office, or government agency anywhere collects fines, fees, or 'bail' through cryptocurrency, gift cards, prepaid vouchers, or urgent transfers to a 'safe account'. Scammers impersonate police because fear works: they spoof official phone numbers, quote real badge numbers or case references, and threaten immediate arrest, deportation, or account seizure unless you pay while they keep you on the line. Real police do none of this — they don't demand payment by phone, don't insist on secrecy, and don't direct you to a crypto ATM. The unusual payment method is chosen deliberately, because crypto and gift cards move instantly and can't be recalled. If you get such a call, hang up without arguing, wait a few minutes (scammers can hold a landline open), then call the police yourself on their published non-emergency number to verify and report it.","redFlags":["'Police' demanding crypto, gift cards, or transfers","Threats of immediate arrest","Pressure to stay on the line and keep it secret","Instruction to move money to a 'safe account'"],"whatToDoNow":["Hang up and do not pay","Contact the police via their official non-emergency number to verify","Report the scam"],"faq":[{"question":"What if the caller ID shows a real police number?","answer":"Caller ID can be spoofed to display any number. A genuine-looking number doesn't make the call real — hang up and verify through official channels."},{"question":"What if they threaten to arrest me for hanging up?","answer":"The threat is itself the tell. Real police do not arrest people for ending a phone call, and genuine legal matters are handled through documented, verifiable processes — never through on-the-spot payments. Hang up and verify via the published non-emergency number."}],"lastReviewed":"2026-08-01"},{"slug":"is-it-normal-for-a-hotel-to-ask-for-card-verification-by-whatsapp","url":"https://scamencyclopedia.org/questions/is-it-normal-for-a-hotel-to-ask-for-card-verification-by-whatsapp","question":"Is it normal for a hotel to ask for card verification by WhatsApp?","shortAnswer":"No. A genuine hotel won't ask you to 're-verify' full card details or codes via WhatsApp, SMS, or email links.","explanation":"No. This is a known phishing pattern that surged after scammers began compromising hotels' accounts on major booking platforms: because the message arrives through the platform's own chat or quotes your real booking reference, dates, and price, it looks far more credible than ordinary phishing. The story is always a payment problem — your card 'failed verification', the booking 'will be cancelled tonight' — and the fix is always a link where you re-enter your full card number, CVV, or a one-time code. Genuine hotels and booking platforms never do this; payment issues are handled inside the platform's secure payment flow, and no legitimate process needs your CVV or a code sent to your phone via a chat link. If you get such a message, don't click the link — open the official app or website directly, check whether your booking actually shows a problem, and contact the hotel through the number on the platform. If you already entered card details, call your bank immediately to block the card.","redFlags":["Requests to 're-verify' full card details or CVV via a link","Real booking details used to seem genuine","Urgent 'verify now or lose your booking' pressure","Links to non-official domains"],"whatToDoNow":["Don't click or enter details","Verify your booking via the official app or phone number","Call your bank if you already entered card details"],"faq":[{"question":"Why does the message know my booking reference?","answer":"Scammers exploit breached booking-platform data. A real reference doesn't prove a message is genuine — verify through the official app or phone number."},{"question":"The message came through the booking platform's own chat. Doesn't that make it real?","answer":"No — it usually means the hotel's account on the platform was compromised. The chat channel is only as trustworthy as the accounts using it. Treat any payment link sent through chat as suspect and check your booking's status in the app directly instead."}],"lastReviewed":"2026-08-01"},{"slug":"can-a-recruiter-ask-me-to-pay-before-starting-work","url":"https://scamencyclopedia.org/questions/can-a-recruiter-ask-me-to-pay-before-starting-work","question":"Can a recruiter ask me to pay before starting work?","shortAnswer":"No. Legitimate recruiters and employers never require you to pay fees, deposits, or 'equipment' costs to get hired.","explanation":"No. The direction of money in legitimate employment only ever runs one way: the employer pays you. Any request to pay before starting work — for training materials, a laptop or 'equipment kit', a background check, visa processing, uniform, or an 'onboarding' or 'registration' fee — is a defining mark of a job scam, whatever plausible-sounding reason is attached. Real employers absorb these costs as part of hiring, and licensed recruiters are paid by the companies they recruit for, not by candidates. The fee-based version simply takes your money for a job that never existed, often returning with a second 'unexpected' charge if you pay the first. The task-scam version is subtler: you 'earn' commissions on a dashboard, then must deposit your own money to unlock withdrawals that never come. If you've been asked to pay, stop contact, report the listing to the job platform, and if you already paid, contact your bank straight away — and don't be embarrassed; these listings are professionally produced and fool a lot of careful people.","redFlags":["Upfront fees, deposits, or equipment costs to start","Pay-to-withdraw 'earnings'","Pressure to pay quickly to secure the role","Unverifiable employer"],"whatToDoNow":["Don't pay anything to get a job","Verify the employer through official channels","Report the listing; contact your bank if you paid"],"faq":[{"question":"What about paying for my own certification?","answer":"Choosing to get a qualification is different from an employer requiring you to pay them to start a specific job. Mandatory upfront payments to a 'hirer' are a scam."},{"question":"The employer says the fee is refundable after I start. Is that OK?","answer":"No. The 'refundable' promise is part of the script — the refund never arrives, and a second 'unexpected' charge often follows the first. Legitimate employers do not take deposits from new hires at all."}],"lastReviewed":"2026-08-01"},{"slug":"can-i-recover-crypto-sent-to-a-scammer","url":"https://scamencyclopedia.org/questions/can-i-recover-crypto-sent-to-a-scammer","question":"Can I recover crypto sent to a scammer?","shortAnswer":"Usually not. Crypto transactions are typically irreversible, and anyone guaranteeing recovery for an upfront fee is almost certainly a second scammer.","explanation":"Usually not, and it helps to be realistic from the start. Once a cryptocurrency transaction is confirmed on the blockchain, it generally cannot be reversed by you, your wallet provider, or the police; no central authority can claw the coins back. Reporting quickly is still worthwhile: exchanges can sometimes freeze funds if the scammer cashes out through a regulated platform, and reports help investigators connect cases. Record every wallet address, transaction hash, date, and amount, then report to the exchange you sent from and to your national fraud service, and tell your bank if any card payment or transfer was involved. Be very wary of anyone offering to recover your crypto for an upfront fee. 'Recovery experts' who guarantee results are almost always a second scam targeting people who have already lost money; being contacted this way is common and nothing to be ashamed of. Realistic expectations now protect you from losing a second time.","redFlags":["'Recovery experts' contacting you unsolicited","Guaranteed recovery for an upfront fee","Claims of special access to 'frozen' or 'reversible' funds","Pressure and secrecy"],"whatToDoNow":["Report to your exchange and national fraud service","Record all wallet addresses and transaction hashes","Never pay an upfront fee to recover crypto"],"faq":[{"question":"Are any crypto recovery services legitimate?","answer":"Genuine help comes from your exchange, your bank (for the fiat leg), and official fraud services — none of which guarantee recovery or demand upfront crypto fees. Treat unsolicited recovery offers as scams."},{"question":"Is reporting worth it if the money can't be recovered?","answer":"Yes. Reports help exchanges freeze linked accounts, help investigators map scam networks, and create the paper trail you'll need if any recovery does become possible later. Report to the exchange you sent from and to your national fraud service."}],"lastReviewed":"2026-08-01"},{"slug":"what-should-i-do-if-i-gave-a-scammer-remote-access","url":"https://scamencyclopedia.org/questions/what-should-i-do-if-i-gave-a-scammer-remote-access","question":"What should I do if I gave a scammer remote access?","shortAnswer":"Disconnect the device from the internet immediately, then secure your banking and passwords from a different, clean device.","explanation":"Act in this order, and quickly. First, disconnect the device from the internet — turn off Wi-Fi or pull the network cable — which severs the scammer's session immediately; closing the window is not enough, because tools like AnyDesk or TeamViewer can reconnect or be set to run unattended. Second, from a different, clean device (your phone on mobile data is fine), change your online-banking password, then your email password, and turn on two-factor authentication — email matters because it can reset everything else. Third, call your bank: tell them a scammer had remote access, ask them to check for transactions and new payees, and freeze anything suspicious — banks treat this as urgent. Only then clean the affected device: uninstall the remote-access software, run a full security scan, and if you're not confident it's clean, back up your files and reset it. Expect follow-up calls from the same crew posing as your bank's fraud team or 'refund' agents — hang up on all of them.","redFlags":["You installed screen-share/remote-control software for a caller","You were asked to log into your bank while connected","Your screen was dimmed or you were told 'don't touch anything'"],"whatToDoNow":["Disconnect the device from the internet and uninstall the remote software","From a clean device, change your banking password and key passwords; enable 2FA","Contact your bank about any transactions; run a security scan or reset the device"],"faq":[{"question":"Is my device safe to use again?","answer":"Not until it's cleaned. Uninstall the remote tool, scan for malware, and if unsure, back up and reset the device. Do banking from a different device in the meantime."},{"question":"They only had access for a minute. Am I still at risk?","answer":"Treat it as if they had full access. A minute is enough to install software that keeps running after the call, or to note details visible on screen. Follow the full cleanup: disconnect, change key passwords from a clean device, and tell your bank."}],"lastReviewed":"2026-08-01"},{"slug":"should-i-pay-a-recovery-agent","url":"https://scamencyclopedia.org/questions/should-i-pay-a-recovery-agent","question":"Should I pay a recovery agent to get my money back?","shortAnswer":"No. Legitimate recovery never requires an upfront fee. Unsolicited 'recovery agents' who guarantee results are almost always scammers targeting victims a second time.","explanation":"No. Legitimate organisations never charge an upfront fee to recover your money. After a scam, victims are often contacted by people posing as recovery agents, lawyers, regulators, or police who claim they can retrieve the funds for a fee, sometimes quoting details from the original scam to sound convincing. These offers are follow-up scams, and paying typically means losing more money to the same network. Genuine help is free to start: your bank or card provider can attempt a recall or chargeback, and your national fraud service can log the case for investigators. Pressure, secrecy, or guaranteed results are themselves proof an offer is not legitimate. Block and report the contact, and if you have already paid a recovery agent, tell your bank straight away. None of this is your fault; these operations deliberately target people who have already been scammed, precisely because they know you are motivated and searching for help.","redFlags":["Unsolicited contact offering to recover your losses","Guaranteed recovery for an upfront fee","Claims to be an official body but contacts you privately","Pressure and secrecy"],"whatToDoNow":["Don't pay any upfront fee","Work only with your bank and official fraud services","Block and report the recovery agent"],"faq":[{"question":"How did the recovery agent know I was scammed?","answer":"Scammers trade lists of previous victims and monitor public complaints. If you've been scammed or posted about it, expect recovery-scam attempts."},{"question":"What does legitimate recovery help look like?","answer":"It starts free and comes from organisations you contact — your bank or card provider (recalls and chargebacks), your national fraud service, and the platform involved. None of them guarantee results, demand secrecy, or ask for fees in crypto or gift cards."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-guaranteed-investment-return-a-scam","url":"https://scamencyclopedia.org/questions/is-a-guaranteed-investment-return-a-scam","question":"Is a guaranteed investment return a scam?","shortAnswer":"Almost always. All real investments carry risk. 'Guaranteed' or 'risk-free' high returns are a hallmark of investment fraud.","explanation":"Almost always, and the reasoning is worth internalising because it filters out whole categories of fraud at once: in real markets, return is payment for risk, so nobody can promise high returns with none — anyone who genuinely could would have no reason to recruit strangers online. 'Guaranteed', 'risk-free', and 'fixed daily profit' language shows up in fake trading platforms whose dashboards simply display numbers the operator types in, in Ponzi schemes where early 'returns' are paid out of later victims' deposits to build trust before the collapse, and in 'AI bot' or 'expert trader' schemes pushed through social media and messaging groups. The dashboard showing steady growth proves nothing — it's the bait for the next, larger deposit, and the trap closes when withdrawals suddenly require 'taxes' or 'fees'. Before investing anywhere, check the firm against your financial regulator's official register (and its warning list). If you've already deposited, stop sending money regardless of what the platform threatens, contact your bank, and report it.","redFlags":["Guaranteed, risk-free, or fixed high returns","Pressure to deposit quickly","Unregistered firm or platform you can't verify","Withdrawals blocked behind fees"],"whatToDoNow":["Don't invest under pressure or on guarantees","Check the firm on your financial regulator's register","If you've deposited, stop and contact your bank; report it"],"faq":[{"question":"Aren't some products low-risk?","answer":"Some products are lower risk (like insured deposits), but they offer modest returns, not high 'guaranteed' profits. High returns marketed as guaranteed or risk-free are a scam signal."},{"question":"My dashboard shows my investment growing. Doesn't that prove it's real?","answer":"No. On a fake platform the dashboard is just numbers the operator controls, and it is deliberately generous to encourage bigger deposits. The only meaningful test is withdrawing — and on scam platforms, withdrawal is exactly where the 'fees' and excuses begin."}],"lastReviewed":"2026-08-01"},{"slug":"what-if-a-scammer-has-my-passport-or-id","url":"https://scamencyclopedia.org/questions/what-if-a-scammer-has-my-passport-or-id","question":"What if a scammer has my passport or ID?","shortAnswer":"Treat it as potential identity theft: secure your accounts, set up fraud alerts, consider replacing the document, and report it.","explanation":"Treat it as identity theft waiting to happen, not a lost cause. With clear images of a passport or ID card, a fraudster can try to open bank accounts and credit lines, register for loans or crypto exchanges, pass 'know your customer' checks, or take over your phone number via a SIM swap — and the attempt often comes months later, when you've stopped watching. Your defence is to make your identity hard to use and to create a paper trail now. Set up fraud alerts or a credit freeze with the credit reference agencies in your country so new applications in your name trigger checks. Tell your bank your identity documents are compromised. Report it to your national identity-theft or fraud service — that report is your evidence if a debt ever appears in your name. Consider replacing the document, since a new number invalidates the old one for many checks. Then watch your credit reports and post for accounts you don't recognise, and treat unexpected 'verification' calls with suspicion — you're now on a target list.","redFlags":["You sent ID images during a 'job', 'verification', or 'investment'","Requests for ID before the other party proved who they were","Unexpected accounts or credit checks in your name"],"whatToDoNow":["Set up fraud alerts or a freeze with credit reference agencies","Tell your bank your identity data may be compromised","Consider replacing the document; report to your national identity-theft service"],"faq":[{"question":"Should I replace my passport or ID?","answer":"It can be worth replacing a compromised document through official channels, especially if you see signs of misuse. At minimum, set up fraud monitoring and alerts and report the incident."},{"question":"How long do I need to stay alert?","answer":"Long-term. Stolen identity documents are traded and reused, and misuse often starts months after the theft. Keep fraud alerts or a credit freeze in place and review your credit reports periodically, not just for the first few weeks."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-cash-app-payment-request-a-scam","url":"https://scamencyclopedia.org/questions/is-a-cash-app-payment-request-a-scam","question":"Is a Cash App payment request a scam?","shortAnswer":"Unsolicited Cash App requests or 'accidental payment' refund requests are very commonly scams. Verify before sending anything.","explanation":"Cash App and similar peer-to-peer payment apps are popular scam tools because payments are instant and difficult to reverse. Common tactics include: sending you a fake 'accidental' payment and then asking for a refund (the original payment bounces later); requesting payment for goods that are never delivered; or sending a fraudulent 'Cash App support' message claiming your account is at risk.\n\nThe 'accidental payment' trick deserves particular attention because refunding it feels like simple politeness. The payment you received was typically funded with a stolen card or hacked account; when that fraud is discovered, the platform claws the money back from your balance. If you have already 'refunded' the stranger from your own funds, you lose that amount — and you may face questions about having handled stolen money. The correct response to a payment you don't recognise is to leave it untouched and report it in the app, so the platform can reverse it properly.\n\nCash App payments work like cash — once sent, they are generally gone. Sending a 'refund' for an accidental payment means you are handing over your own money. Only send money to people you know and trust, and verify any claimed issue directly through the app's official support channels, not through a number or link provided in a message.","redFlags":["A stranger claims to have accidentally sent you money and asks for it back","Requests to send money before receiving promised goods or services","Messages claiming your Cash App account is frozen or at risk","Offers of 'money flipping' where a small amount turns into a large one","Pressure to act quickly before you can verify","A 'support' contact that reaches out to you first"],"whatToDoNow":["Do not send money to strangers or refund apparent 'accidents' immediately","Check your actual account balance before acting on any refund request","Contact Cash App support only through the official app","Report suspicious requests in the app and to your bank","If you already sent money, report it as a scam through the app immediately"],"faq":[{"question":"Can Cash App reverse a payment if I was scammed?","answer":"Cash App may investigate disputes for unauthorised transactions, but payments you authorised yourself are generally not reversible. Report it immediately through the app and contact your bank if the funding source was a debit or credit card."},{"question":"Is 'money flipping' on Cash App real?","answer":"No. There is no legitimate mechanism to 'flip' money — send a small amount and receive back a larger one. These offers are always scams."},{"question":"What if someone I know sent the request?","answer":"Their account may have been hacked. Call or message the person through a separate channel to verify before sending anything."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-zelle-request-from-my-bank-a-scam","url":"https://scamencyclopedia.org/questions/is-a-zelle-request-from-my-bank-a-scam","question":"Is a Zelle request from my bank a scam?","shortAnswer":"If a caller urges you to send money via Zelle to 'protect your account', that is a scam — your real bank will never do this.","explanation":"A common fraud involves scammers calling or texting, claiming to be your bank's fraud team. They say your account has been compromised and instruct you to transfer money via Zelle to a 'safe' account or to yourself to 'reverse' a fraudulent payment. In reality, the receiving Zelle account belongs to the scammer.\n\nReal banks may contact you about suspicious activity, but they will never direct you to send money via Zelle as a security measure. Zelle is designed for sending money to people you know and trust, and transfers are typically instant and final. The 'send it to yourself' framing is specifically designed to make the action feel safe — it isn't.\n\nScammers push Zelle specifically because of how it settles: transfers arrive in minutes, and there is no merchant, escrow, or delivery to dispute, so the traditional chargeback playbook doesn't apply. That is also why the caller keeps you on the line, walks you through each screen, and supplies ready-made answers for the app's own scam warnings. If anyone is coaching you through a Zelle transfer in real time, the coaching is itself the red flag. Hang up, wait a few minutes, and call the number on the back of your card — a genuine fraud team will have a record of any real issue.","redFlags":["Caller claims to be your bank and asks you to send money via Zelle","Told to send money 'to yourself' or to a 'safe account'","Urgent warnings about fraudulent activity requiring immediate action","You are told not to mention the transaction to bank staff","Spoofed caller ID showing your bank's real number","Pressure to act before you can think or verify"],"whatToDoNow":["Hang up and call your bank using the number on the back of your card","Do not send any Zelle transfers at a caller's instruction","Tell your bank immediately if you already sent money","Report the incident to your national fraud reporting service","Keep records of all communications"],"faq":[{"question":"Can my bank refund a Zelle payment I was tricked into sending?","answer":"Banks are increasingly reviewing cases where customers were deceived into authorising transfers, but refunds are not guaranteed. Report it to your bank as soon as possible — speed matters."},{"question":"My bank's real phone number showed on my screen. How?","answer":"Caller ID can be spoofed to display any number. A familiar number on screen does not confirm the caller is genuine. Always hang up and call back using the number on your card."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-paypal-invoice-i-didnt-expect-a-scam","url":"https://scamencyclopedia.org/questions/is-a-paypal-invoice-i-didnt-expect-a-scam","question":"Is a PayPal invoice I didn't expect a scam?","shortAnswer":"Yes, most likely. Scammers send fake PayPal invoices to trick you into calling a fake support number or into paying for something you didn't buy.","explanation":"Anyone with a PayPal account can send an invoice to any email address. Fraudsters exploit this by sending authentic-looking PayPal invoices for large amounts — often for a purchase you don't recognise — hoping you will panic and call a phone number included in the invoice memo. That number connects to a scammer, not PayPal.\n\nOther variants include invoices where the memo contains a 'call to cancel' phone number, leading to remote-access or bank-transfer scams. A real, unexpected PayPal invoice does not mean money has been taken; you must actively approve payment. Do not call any number in the invoice — go directly to PayPal.com to check your account.\n\nThe scheme works because the email genuinely comes from PayPal's own systems — the fraud is in the invoice itself, not in a forged email — which is why it sails past spam filters and looks authentic. Since nothing is charged unless you approve it, the danger sits almost entirely in that phone number: calling it connects you to a practised 'support agent' who will push you to install remote-access software or to 'refund an overcharge' by bank transfer or gift cards. Decline and report the invoice from inside your PayPal account, and the episode ends there.","redFlags":["An invoice for a purchase you don't recognise","A phone number in the invoice memo telling you to call to cancel","High-value invoice creating urgency","Email address the invoice was sent from looks unofficial (though it may appear to come from PayPal's domain)","Instructions to call a number before PayPal charges your account"],"whatToDoNow":["Do not call any phone number listed in the invoice","Log in to PayPal.com directly to check your account status","Report and decline the invoice through your PayPal account","Do not provide your bank or card details to anyone who contacts you about it","Report the scam to PayPal and your national fraud service"],"faq":[{"question":"Does receiving the invoice mean money was already taken?","answer":"No. An invoice is a request — you must approve it for money to leave your account. Check your PayPal balance directly to confirm nothing has been charged."},{"question":"Can I just ignore the invoice?","answer":"You can decline and report it through your PayPal account. Ignoring without declining is generally fine too, but reporting helps protect others."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-delivery-text-from-usps-or-dhl-a-scam","url":"https://scamencyclopedia.org/questions/is-a-delivery-text-from-usps-or-dhl-a-scam","question":"Is a delivery text from USPS, DHL, or Royal Mail a scam?","shortAnswer":"Unsolicited delivery texts asking you to pay a fee or click a link to reschedule are very often phishing scams, even if they look official.","explanation":"Fake delivery texts — sometimes called 'smishing' — impersonate postal and courier services. They typically claim a package is held and requires a small fee or updated address to be released, then direct you to a convincing fake website that harvests your card details or installs malware.\n\nLegitimate carriers do send delivery notifications, but they will not ask for card payments via an unsolicited text link for a package you aren't expecting. The fee demanded is usually small enough to seem plausible — this is intentional. Even entering your card details on the fake site to pay a trivial amount gives scammers your full card information.\n\nThese campaigns are sent in enormous bulk to generated number lists, which is why one can land on a day you genuinely are awaiting a parcel — the coincidence is statistical, not evidence the message is real. Harvested card details are typically used within hours or sold on, and some operations follow up with a call from your 'bank' that quotes the details you just entered to build credibility for a larger theft. If you paid a small 'fee' on such a site, treat the card as fully compromised: cancel it, and be sceptical of any follow-up caller who seems to know your details.","redFlags":["You weren't expecting a delivery but receive a fee-request text","Link goes to a domain that isn't the carrier's official website","Small fee required ('customs charge', 'redelivery fee') via a text link","Text asks for full card details including CVV","No tracking number, or the number doesn't match the carrier's real system","Urgency — 'your parcel will be returned in 24 hours'"],"whatToDoNow":["Do not click the link or enter payment details","Go directly to the carrier's official website and enter any tracking number manually","Report the text to your mobile provider (forward to 7726 in the UK/US)","If you already entered card details, contact your bank immediately","Report to your national fraud service"],"faq":[{"question":"What if I am actually expecting a delivery?","answer":"Go to the carrier's official website directly — never via the link in the text. Enter your tracking number there. If the issue is genuine, it will show up on the official site."},{"question":"How do scammers know I might be expecting a package?","answer":"They don't — they send these messages in bulk, knowing many recipients will be expecting something. The timing often feels coincidental."}],"lastReviewed":"2026-08-01"},{"slug":"why-did-i-get-a-verification-code-i-didnt-request","url":"https://scamencyclopedia.org/questions/why-did-i-get-a-verification-code-i-didnt-request","question":"Why did I get a verification code I didn't request?","shortAnswer":"Someone is trying to log into your account or reset your password. Do not share the code with anyone — this is how account takeovers happen.","explanation":"A one-time verification code you didn't request usually means someone is trying to access one of your accounts. They may have obtained your username and password from a data breach and now need only the code to complete login. In many scams, this is followed almost immediately by a call or message claiming to be your bank, a platform's support team, or even a friend — asking you to read back the code.\n\nSharing the code hands over full access to your account. No legitimate organisation will ever call you to ask for a code that was just sent to your phone. The code is a security check for you, not for the caller.\n\nOne further scenario is worth knowing: some scammers trigger codes deliberately as the opening move, not because they already hold your password. The unexpected code creates alarm, the follow-up call supplies the explanation, and the 'helpful' agent resolves a crisis you never actually had — using the code you read out. Whatever the story, the rule holds without exception: a code delivered to your phone exists to prove that you are you, and reading it to anyone else hands that proof to them.","redFlags":["A code arrives without you requesting it","Immediately followed by a call or message asking you to read it out","The caller claims to be verifying your account for security reasons","Urgency — 'your account will be locked if you don't share the code'","The caller already knows some of your personal details"],"whatToDoNow":["Do not share the code with anyone","Change the password for the account the code was sent for","Enable two-factor authentication if it isn't already on","Check your account for any recent login activity or changes","Report to the platform and your national fraud service if you believe an attempt was made"],"faq":[{"question":"What if I already shared the code?","answer":"Act immediately: change your password for that account, sign out all other sessions if the platform allows it, and contact support. If the account is linked to banking or email, secure those too."},{"question":"Could it be a mistake — someone typing their number wrong?","answer":"It's possible, but the risk of sharing the code is high and the downside of not sharing it is zero. Never share the code regardless of the explanation."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-job-that-pays-by-cheque-in-advance-a-scam","url":"https://scamencyclopedia.org/questions/is-a-job-that-pays-by-cheque-in-advance-a-scam","question":"Is a job that pays by cheque in advance a scam?","shortAnswer":"Almost always. The 'overpayment cheque' is a classic fraud — the cheque bounces days later and you've already sent back real money.","explanation":"In an overpayment cheque scam, you receive a cheque for more than your agreed pay and are asked to wire back the difference. Banks often make funds available before a cheque fully clears, so the money appears in your account — but the cheque later bounces, and you are liable for the full amount you wired. By then the scammer is gone.\n\nVariations include mystery-shopper roles, work-from-home data-entry positions, and personal-assistant jobs. The key tell is always the same: a payment arrives first, you are instructed to forward most of it, and the original cheque turns out to be fraudulent.\n\nThe scam relies on the gap between 'available' and 'cleared'. Your bank can only be certain a cheque is good once it has fully cleared through the issuing bank, which can take days — far longer than the provisional credit suggests, and longer still for foreign cheques. Any 'job' whose first act is sending you money and asking you to pass most of it on is using you either to cash fraudulent cheques or to move stolen funds. If you have already deposited such a cheque, don't spend or forward anything from it, and speak to your bank before it bounces rather than after.","redFlags":["You receive a cheque before doing any work","Asked to wire back the 'overpayment' portion","Job found through an unsolicited message or low-quality ad","The role is vague and requires little skill or experience","Pressure to deposit and forward the money quickly","Employer can't be verified through official channels"],"whatToDoNow":["Do not deposit the cheque or forward any money","Contact your bank before depositing if you've already received a cheque","Report the job listing or contact to the platform and your national fraud service","If you already wired money, contact your bank immediately","Keep all correspondence as evidence"],"faq":[{"question":"The money showed in my account — isn't the cheque real?","answer":"Banks provisionally credit funds before a cheque fully clears, sometimes within hours. The cheque can still bounce days later, leaving you responsible for any money you spent or wired."},{"question":"Can the bank help if I already wired the money?","answer":"Contact your bank immediately. Wire transfers are hard to reverse, but your bank can document the fraud and may be able to contact the receiving bank. Speed is important."}],"lastReviewed":"2026-08-01"},{"slug":"can-someone-hack-my-phone-with-a-sim-swap","url":"https://scamencyclopedia.org/questions/can-someone-hack-my-phone-with-a-sim-swap","question":"Can someone hack my phone with a SIM swap?","shortAnswer":"Yes. SIM swapping moves your number to a scammer's SIM, letting them intercept your calls, texts, and authentication codes.","explanation":"In a SIM-swap attack, a fraudster contacts your mobile carrier — usually with personal information gathered from data breaches or social media — and convinces them to transfer your phone number to a new SIM card. Once they control your number, they can receive SMS verification codes and use them to reset passwords on your email, banking, and other accounts.\n\nSigns of a SIM swap include your phone suddenly losing all signal, being unable to make calls, or receiving unexpected messages about account changes. If this happens, contact your carrier immediately. Using an authentication app rather than SMS for two-factor authentication significantly reduces your exposure.\n\nTo make the swap harder in the first place, ask your carrier to add a PIN, password, or port-freeze to your account — most offer one, and it forces an extra check before a number can be moved. Be sparing with the personal details you post publicly, since birthdays, addresses, and answers to common security questions are exactly what an attacker needs to impersonate you to a call-centre agent. If a swap does happen, the priority order is: carrier first to reclaim the number, then email, then bank — because whoever holds your number can keep resetting whatever you fix.","redFlags":["Your phone suddenly loses signal for no apparent reason","You stop receiving calls or texts unexpectedly","You receive alerts about account changes you didn't make","You can't log into accounts that were working previously","Your mobile carrier sends a confirmation of changes you didn't request"],"whatToDoNow":["Contact your mobile carrier immediately and report unauthorised SIM activity","Change passwords for email, banking, and key accounts from a different device","Switch two-factor authentication from SMS to an authenticator app where possible","Alert your bank that your number may be compromised","Report to your national fraud service and keep records"],"faq":[{"question":"How do scammers get enough personal information to convince my carrier?","answer":"Personal details — date of birth, address, partial account numbers — are often available from data breaches, social media, or phishing attacks. Carriers are also sometimes targeted with social engineering."},{"question":"Does a SIM swap affect my physical SIM or eSIM?","answer":"Both physical SIMs and eSIMs can be targeted, because the attack exploits the carrier's account management process rather than the physical card itself."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-crypto-giveaway-on-social-media-real","url":"https://scamencyclopedia.org/questions/is-a-crypto-giveaway-on-social-media-real","question":"Is a crypto giveaway on social media real?","shortAnswer":"No. All 'send crypto to receive more back' giveaways are scams, regardless of which celebrity or brand appears to endorse them.","explanation":"Crypto giveaway scams promise to return double or more of any cryptocurrency you send to a specified wallet — claiming to be run by a famous investor, tech company, or exchange. They use hacked or impersonator accounts, deepfake video, and real logos to appear legitimate.\n\nNo genuine giveaway works this way. Sending cryptocurrency to receive more back is economically nonsensical and always a fraud. Once you send crypto, the transaction is on the blockchain and virtually impossible to reverse. The celebrity or brand appearing to endorse the giveaway has not authorised it — they are almost always being impersonated.\n\nThese campaigns spike around real news events — a product launch, a market rally, a televised interview — because a plausible context makes the fake announcement land better. Livestreams pairing re-broadcast or deepfaked interview footage with a QR code are a common format, and hijacked verified accounts lend the post a borrowed air of authenticity: the badge belongs to the stolen account, not to the offer. If you want to test any giveaway, one question settles it — does it require you to send funds first? If yes, it is a scam, every time.","redFlags":["Any 'send crypto and get double back' offer","A verified-looking social media account promoting the giveaway","Urgency — 'limited time', 'only 100 spots left'","Comments and replies that all appear enthusiastic and positive (often fake)","A QR code or wallet address to send to","Livestream or video showing a celebrity apparently endorsing it"],"whatToDoNow":["Do not send any cryptocurrency to the wallet","Report the post or account to the platform","If you already sent funds, report to your exchange and national fraud service","Warn others by reporting the post rather than sharing it"],"faq":[{"question":"What if the account promoting it has a blue tick or verified badge?","answer":"Verified accounts are routinely hacked or renamed. A verification badge does not confirm the account is genuinely operated by the person it claims to be, especially for giveaway posts."},{"question":"I saw people in the comments saying they received funds. Are those real?","answer":"Those comments are almost always fake accounts created by the scammer to build false credibility. Real positive experiences for this type of offer do not exist."}],"lastReviewed":"2026-08-01"},{"slug":"are-recovery-dms-after-a-scam-legitimate","url":"https://scamencyclopedia.org/questions/are-recovery-dms-after-a-scam-legitimate","question":"Are recovery DMs after a scam legitimate?","shortAnswer":"No. Unsolicited direct messages offering to recover your lost money are a second scam targeting people who have already been victimised.","explanation":"After a scam — especially if you mentioned it publicly online — you may receive direct messages from people claiming to be recovery experts, lawyers, or former law-enforcement officers who can retrieve your funds. They often know details of what happened, which makes them seem credible.\n\nThis is a recovery scam. Fraudsters monitor public complaints, scam-victim forums, and social media for targets. They will ask for an upfront fee, taxes, or legal costs — and then either disappear or invent more charges. No upfront-fee service can genuinely recover funds from a scam, and none should be trusted based on an unsolicited message.\n\nThe details they quote prove nothing: your own public posts, plus victim lists traded between fraud networks, supply everything needed to sound informed. Some pose as blockchain analysts with screenshots 'tracing' your funds; others claim to be from a regulator or law firm — real authorities do not solicit casework through social-media direct messages. Treat every unsolicited recovery offer as an extension of the original scam: don't engage, report the account to the platform, and if you want to pursue recovery, start with your bank, your exchange, and your national fraud service, all of which are free to contact.","redFlags":["Unsolicited DM offering to recover your lost money","They seem to know details about the original scam","Claims to be affiliated with a regulator, law-enforcement, or a known firm","Upfront payment required before any work begins","Guarantee of full or partial recovery","Pressure to act quickly before the opportunity is gone"],"whatToDoNow":["Do not pay any upfront fee","Block and report the account","Seek help only from your bank and official fraud services","Report the recovery scam to your national fraud service","Be cautious about discussing your situation publicly where scammers may monitor"],"faq":[{"question":"How did they know I was scammed?","answer":"Scammers actively search social media, complaint boards, and forums for people discussing losses. Lists of known victims are also bought and sold between fraud groups."},{"question":"Is there any legitimate recovery help available?","answer":"Your bank can dispute unauthorised transactions. Official fraud services can log reports and may assist with investigations. Neither charges upfront fees or guarantees recovery."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-rental-that-wont-let-me-view-it-a-scam","url":"https://scamencyclopedia.org/questions/is-a-rental-that-wont-let-me-view-it-a-scam","question":"Is a rental that won't let me view it a scam?","shortAnswer":"This is a major red flag. Landlords who refuse or are unable to let you view a property before paying are a very common scam pattern.","explanation":"Rental scams typically involve a property that is listed at an attractive price, often scraped from a legitimate listing or fabricated entirely. The 'landlord' provides a reason why viewings aren't possible — they are abroad, the property is occupied, or keys will be provided after a deposit. They then request a deposit or first month's rent via bank transfer, cash app, or wire.\n\nOnce payment is made, the landlord becomes uncontactable or explains away delays until you realise no tenancy exists. Never pay any deposit, holding fee, or rent for a property you have not personally visited and confirmed is genuinely available to rent.\n\nThe refusal to allow a viewing is the load-bearing part of the scam, which is why the excuse always sounds reasonable — work abroad, a sitting tenant, an agency 'handling the keys'. Some operations add fake agency branding, tenancy agreements, and reference checks to make the process feel official; paperwork is cheap to fabricate and proves nothing about who actually controls the property. Cross-check the listing: search the photos and the address to see whether the property appears elsewhere at a different price or under a different landlord, and be especially wary when the rent undercuts every comparable listing in the area.","redFlags":["Viewing is refused or indefinitely postponed","Price is noticeably below market rate","Landlord says they are overseas and will post or courier the keys","Requests for deposits before any contracts are signed","Payment via wire transfer, cash app, or gift cards rather than standard methods","No verifiable connection between the landlord and the property","High pressure to secure the property before others take it"],"whatToDoNow":["Do not pay any money before physically viewing the property","Verify ownership through land-registry records where possible","Search the listing images online to check if they appear elsewhere","Report the listing to the platform and your national fraud service","If you already paid, contact your bank immediately"],"faq":[{"question":"What if the landlord offers a video call tour?","answer":"A video call doesn't confirm the landlord is in the property or has access to it. Only a physical visit — where you see the property, meet someone with legitimate access, and confirm the address — is reliable."},{"question":"Are all below-market rentals scams?","answer":"Not automatically, but a price significantly below comparable properties is a common tactic to generate interest quickly. Combine it with a viewing refusal and payment pressure and the risk is very high."}],"lastReviewed":"2026-08-01"},{"slug":"can-a-charity-ask-for-gift-cards-as-donations","url":"https://scamencyclopedia.org/questions/can-a-charity-ask-for-gift-cards-as-donations","question":"Can a charity ask for gift cards as donations?","shortAnswer":"No. Legitimate charities accept standard payment methods. Any request for gift card donations is a scam.","explanation":"Gift card scams use the guise of charitable giving, disaster relief, or community fundraising to convince people to buy and share gift card codes. Scammers prefer gift cards because the codes are redeemable immediately and the transactions are almost impossible to reverse or trace.\n\nReal registered charities accept bank transfers, credit/debit card payments, cheques, and other traceable methods. No genuine charity will instruct you to buy iTunes, Google Play, Amazon, or other retail gift cards and read out the codes. This applies to charities, churches, community funds, and any other organisation.\n\nThe request is usually wrapped in urgency and emotion — disaster relief, a sick child, help for a congregation member — because the story is doing the work the payment method can't survive on its own. A common variation impersonates someone you know, such as a pastor, colleague, or club organiser, asking members to buy cards on their behalf; the account or number has been spoofed or compromised. Whoever appears to be asking, the payment method is the verdict: gift cards are the currency of scams, not of charity. If you want to help a cause, donate through the charity's own website in a traceable way.","redFlags":["Request for gift card codes as payment or donation","Pressure to act quickly — usually tied to an emergency or deadline","The organisation cannot be verified through official charity registries","Contact arrives via social media, text, or phone rather than official channels","You are asked to keep the donation private","Instructions to photograph or type out the gift card numbers and PINs"],"whatToDoNow":["Do not purchase gift cards at anyone's request","Verify charities through your country's official charity register","Donate directly through a charity's verified official website","Report the request to the platform and your national fraud service","If you already bought cards, contact the card issuer immediately to report fraud"],"faq":[{"question":"What if a friend or family member is asking me to buy gift cards for a charity?","answer":"Their account may have been hacked, or they may also be a victim of the scam. Contact them directly through a separate channel — a phone call, not a message — to verify before doing anything."},{"question":"Are there any legitimate uses for gift cards as payment?","answer":"Gift cards are a legitimate consumer product for gifts, but they are not a payment method used by charities, businesses, banks, government bodies, or utilities. Any instruction to use them for these purposes is a scam."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-extended-car-warranty-call-a-scam","url":"https://scamencyclopedia.org/questions/is-an-extended-car-warranty-call-a-scam","question":"Is an extended car warranty call a scam?","shortAnswer":"Unsolicited calls about your car's warranty — especially claiming it has 'expired' or is 'about to expire' — are very frequently scams.","explanation":"Extended warranty robocalls and live calls are among the most common unsolicited phone scams. They typically claim your vehicle warranty has expired or is about to, and pressure you into purchasing extended coverage immediately. The 'plan' sold may be nearly worthless — full of exclusions, backed by a company with no intention of honouring claims, or simply a pretext to obtain your card details.\n\nSome callers will ask you to confirm your vehicle make, model, or VIN to 'look up your file', and then use those details to appear more credible. A genuine warranty renewal would come from your vehicle manufacturer or dealership, not from an unsolicited call.\n\nIf you stay on the line, the script moves quickly to card details and a first payment, often with a 'discount' that expires during the call — a manufactured deadline designed to prevent comparison shopping. Even where a policy document eventually arrives, coverage sold this way is routinely riddled with exclusions that make claims practically impossible. If you actually want extended coverage, price it directly with your manufacturer, dealership, or an established provider you approached yourself, and check any unfamiliar company's complaints record first. The numbers behind these calls are spoofed and rotated constantly, so blocking helps less than simply hanging up.","redFlags":["Unsolicited call claiming your warranty is expiring urgently","Pressure to pay by card or bank transfer immediately on the call","Caller cannot clearly name the company or provide verifiable details","Request for your VIN, personal details, or card number during the call","Plan with very low monthly cost and implausible coverage promises","Threats that your protection will lapse if you hang up"],"whatToDoNow":["Hang up — do not provide card or personal details","Do not call back numbers left in voicemails","Register with your national telephone preference / do-not-call service","Report the call to your telecommunications regulator and fraud service","If you already paid, contact your bank and report the transaction"],"faq":[{"question":"How do they know I own a car?","answer":"Most do not — these calls go out to millions of numbers without any prior knowledge of who owns a vehicle. If you seem to have one, they adjust the pitch."},{"question":"Is there such a thing as a legitimate extended warranty?","answer":"Legitimate extended warranties exist and are sold by manufacturers, dealerships, and some insurers through established channels. They are not sold through unsolicited robocalls."}],"lastReviewed":"2026-08-01"},{"slug":"what-is-pig-butchering","url":"https://scamencyclopedia.org/questions/what-is-pig-butchering","question":"What is pig butchering?","shortAnswer":"Pig butchering is a long-running investment fraud where scammers build a trusting relationship before persuading victims to invest in a fake platform and draining their funds.","explanation":"The term describes a method where fraudsters 'fatten up' a victim over weeks or months — through friendly conversation, romance, or friendship — before guiding them to invest in a cryptocurrency or trading platform that appears legitimate but is entirely controlled by the scammers.\n\nEarly small withdrawals are permitted to build trust. Victims are encouraged to invest progressively more. When they try to withdraw a significant amount, they find it blocked by invented 'tax' or 'fee' requirements. Every additional payment goes to the scammers. The platform has no real funds — it is a front designed to show convincing-looking balance figures.\n\nPig-butchering operations are often run by organised criminal groups. Victims can lose very large sums of money before realising what has happened.\n\nThe contact usually begins innocuously — a 'wrong number' text, a dating-app match, a friendly comment on social media — and the fraudster may spend weeks talking about everyday life before money is ever mentioned. That patience is the point: by the time investing comes up, it feels like a tip from a friend rather than a pitch from a stranger. Warning signs include a new contact who quickly moves the conversation to a private messaging app, appears unusually successful at trading, and eventually offers to 'teach' you.","redFlags":["A new online contact introduces you to an investment platform unprompted","The platform is not listed on any major financial regulator's register","Returns appear unusually high and consistent","Small early withdrawals are permitted but larger ones are blocked","New fees or taxes appear when you try to withdraw","The relationship with the contact feels unusually close for how recently you met","You are encouraged to keep the investment private"],"whatToDoNow":["Stop depositing immediately","Do not pay additional 'fees' or 'taxes' to release funds — they don't exist","Report to your bank and national fraud service","Preserve all communications, wallet addresses, and transaction records","Seek support — the emotional manipulation involved can be significant"],"faq":[{"question":"Can I recover money lost to a pig-butchering scam?","answer":"Recovery is difficult. Report to your bank and fraud authorities immediately, preserve all records, and be very cautious of any unsolicited recovery service — these often target pig-butchering victims specifically."},{"question":"Why do pig-butchering scammers invest so much time?","answer":"Because the returns are much higher. A victim who trusts the scammer is likely to invest far more and resist warnings from friends and family for longer."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-romance-partner-who-wont-video-call-a-scammer","url":"https://scamencyclopedia.org/questions/is-a-romance-partner-who-wont-video-call-a-scammer","question":"Is a romance partner who won't video call a scammer?","shortAnswer":"It is a significant red flag. Genuine romantic connections online should be able to video call; repeated excuses are a common scammer pattern.","explanation":"Romance scammers build emotional connections over weeks or months through messaging apps and dating platforms, but systematically avoid live video calls because their profile photos don't match their real appearance. Common excuses include broken cameras, poor internet, working overseas in areas with limited connectivity, or 'not being ready' for video.\n\nThe absence of video calls combined with escalating emotional closeness and — eventually — a request for money or investment advice is one of the clearest patterns of romance fraud. AI-generated profile photos and deepfake technology are increasingly used, but a live, unscripted video call remains difficult to fake convincingly.\n\nRefusing video is rarely conclusive on its own — some genuine people are camera-shy — which is why the pattern matters more than any single excuse. Watch for the combination: intense affection unusually early, life circumstances that conveniently prevent meeting (military deployment, oil rigs, overseas contracts), and conversation that keeps drifting toward money, hardship, or investment opportunities. A reverse image search of the profile photos can reveal them attached to someone else's name. And if a person you have never verified asks for money, the question answers itself — decline, and expect an emotional escalation designed to change your mind.","redFlags":["Consistent refusal or failure to video call despite weeks of communication","Profile photos appear too polished or return results on reverse image search","Rapid emotional escalation — declarations of love within days","Claims of working abroad (military, medical, offshore, construction)","A financial request or investment suggestion after emotional closeness is established","Stories that change or contradict earlier details","Requests for secrecy or to move communication to a less visible platform"],"whatToDoNow":["Request a live, spontaneous video call before any emotional or financial commitment","Reverse-image-search their profile photos","Do not send money, gift cards, or crypto to an online contact you have never met in person","Tell someone you trust about the relationship — outside perspective matters","Report to the platform and your national fraud service"],"faq":[{"question":"What if they did video call once?","answer":"A single call — especially a short or low-quality one — isn't definitive. Regular, spontaneous video contact over time is more meaningful. Brief or heavily filtered calls can still be staged."},{"question":"I know it sounds like a scam but I genuinely feel we have a connection. What should I do?","answer":"Emotional investment is exactly what romance scammers work to create. Speak to a friend or family member you trust before sending any money. The feelings you have are real; the question is whether the other person is who they claim to be."}],"lastReviewed":"2026-08-01"},{"slug":"can-i-get-my-money-back-after-a-bank-transfer-scam","url":"https://scamencyclopedia.org/questions/can-i-get-my-money-back-after-a-bank-transfer-scam","question":"Can I get my money back after a bank transfer scam?","shortAnswer":"Sometimes. Report to your bank immediately — speed greatly improves your chances, and in many countries authorised push-payment fraud now has formal reimbursement rules.","explanation":"If you were deceived into authorising a bank transfer to a scammer, contact your bank the moment you realise what has happened. Banks can attempt to recall the funds from the receiving bank, and some have internal reimbursement policies for Authorised Push Payment (APP) fraud.\n\nIn the UK, mandatory reimbursement rules now apply for most APP scams under a certain threshold. In other countries, policies vary. The key factors are speed (some money may still be sitting in the receiving account), whether you can show you were deceived, and whether the bank's safeguards were adequate. Keep all evidence — messages, receipts, and records of how you were persuaded — as this supports your case.\n\nWhatever your country's rules, do not let embarrassment slow you down: bank fraud teams handle these cases constantly, and the first hours matter most because recalled funds must still be sitting in the receiving account. Report the scam to your national fraud service as well — a report reference strengthens your claim with the bank. And be prepared for the follow-up wave: victims of transfer scams are routinely re-targeted by fake 'recovery agents' claiming they can get the money back for a fee. Genuine recovery only ever runs through your bank and official channels, and it never starts with an upfront payment.","redFlags":["You were urged to transfer money quickly, often to a 'safe account'","The payee was someone you had only recently met online or by phone","A caller claimed to be from your bank, the police, or a government agency","You were asked to keep the transfer secret"],"whatToDoNow":["Call your bank immediately — time is critical","Ask the bank to contact the receiving bank and attempt a recall","Report the scam to your national fraud service and keep the reference number","Gather and preserve all messages, call logs, and payment records","Ask your bank about their APP fraud reimbursement policy in writing"],"faq":[{"question":"Does it matter whether I transferred by faster payment, CHAPS, or BACS?","answer":"Faster payments move quickly and the window for recall is narrow; CHAPS transfers are high-value and banks treat them seriously. In all cases, call your bank immediately regardless of method."},{"question":"What if my bank says I authorised the payment so I'm not eligible?","answer":"If you were deceived into authorising the payment, you may still have a case. Ask about APP fraud policy specifically, escalate to your bank's complaints process, and in the UK you can refer disputes to the Financial Ombudsman Service."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-text-saying-my-package-is-held-in-customs-real","url":"https://scamencyclopedia.org/questions/is-a-text-saying-my-package-is-held-in-customs-real","question":"Is a text saying my package is held in customs real?","shortAnswer":"Treat it with caution. Unexpected customs-fee texts with payment links are a well-known phishing method — verify through official channels only.","explanation":"Customs-fee scam texts claim that a parcel cannot be delivered until a fee is paid, and include a link to a fake payment page. The fee is typically small and plausible, but entering your card details on the page gives the scammer your full card information.\n\nGenuine customs or import duty notices from official agencies or carriers are usually sent by post or through the carrier's official app. If you are genuinely expecting an international parcel, go directly to the carrier's website and enter the tracking number there — never follow a link from a text.\n\nThe 'small fee' framing is deliberate on two levels: it is low enough that paying feels easier than investigating, and the payment page harvests far more than the fee — your full card number, expiry, and security code, sometimes followed by a call from your 'bank' using those details as proof of legitimacy. Real customs charges on international parcels do exist, which is exactly what gives the scam its plausibility; the difference is the channel. If a fee is genuinely owed, it will appear against your tracking number on the carrier's own website.","redFlags":["Unexpected text about a customs or import fee you didn't anticipate","Link in the text leads to a domain that isn't the official carrier or customs authority","Small fee demanded — often under £5 or $10 — to seem plausible","Urgency such as 'your parcel will be destroyed or returned'","No tracking number, or one that doesn't match the carrier's records"],"whatToDoNow":["Do not click the link or enter payment details","Check the carrier's official website directly using any tracking number you have","Contact the carrier's official customer service if uncertain","Report the text to your mobile provider (forward to 7726 in the UK/US)","If you entered card details, call your bank immediately"],"faq":[{"question":"I am expecting an international package. Should I pay?","answer":"Only through official channels. Go directly to the carrier's website, enter the tracking number, and pay any duty there. Never pay via a link in a text."},{"question":"How do I tell a real customs notice from a fake one?","answer":"Real notices usually arrive by post or through the carrier's verified app and direct you to the carrier's own website. A text link to an unfamiliar domain is the main tell."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-microsoft-or-apple-support-call-about-my-computer-a-scam","url":"https://scamencyclopedia.org/questions/is-a-microsoft-or-apple-support-call-about-my-computer-a-scam","question":"Is a Microsoft or Apple support call about my computer a scam?","shortAnswer":"Yes. Microsoft, Apple, and other tech companies do not make unsolicited calls about viruses or problems on your device.","explanation":"Tech-support scammers call claiming to be from Microsoft, Apple, or a security company, saying they have detected a virus, hack, or suspicious activity on your computer. Their goal is to get you to install remote-access software, pay for fake 'support', or hand over bank details.\n\nMicrosoft and Apple have no mechanism to monitor individual customers' devices and proactively call them. If there were a genuine issue with your device, it would manifest locally — not arrive as a cold call. These calls are easy to fake because caller ID can show any name.\n\nOnce connected, the script escalates in stages: the 'technician' has you open system logs that look alarming to anyone unfamiliar with them (ordinary warning entries are presented as infections), installs remote-access software 'to fix it', and then charges for the repair, sells a worthless support contract, or — while controlling your screen — steers toward your online banking to 'process a refund'. Each step is designed to feel like help. The safe response costs nothing: hang up. If you are worried about your device, run your own security scan or contact the company through its official support page.","redFlags":["Unsolicited call claiming your computer has a virus or been hacked","Caller identifies as Microsoft, Apple, BT, or a security company you didn't contact","Request to install software like TeamViewer, AnyDesk, or a browser plugin","Urgency — 'your device will be locked/wiped if you don't act now'","Request for payment by gift card, wire transfer, or crypto for 'support'","Caller tells you to stay on the line while you take the steps"],"whatToDoNow":["Hang up immediately","Do not install any software the caller suggested","If you already granted access, disconnect from the internet and follow remote-access scam steps","Change passwords for banking and key accounts from a clean device","Report the call to your national fraud service"],"faq":[{"question":"What if my screen showed a warning pop-up with a number to call?","answer":"Browser-based pop-ups claiming your computer is infected and giving a number to call are also a scam tactic. Close the browser (use Task Manager if needed) and run a scan with legitimate security software."},{"question":"I already let them access my computer. What should I do?","answer":"Disconnect from the internet immediately, uninstall any software they installed, change your passwords from a different device, and contact your bank. See our remote-access scam guide for full steps."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-facebook-marketplace-buyer-who-wants-to-overpay-a-scam","url":"https://scamencyclopedia.org/questions/is-a-facebook-marketplace-buyer-who-wants-to-overpay-a-scam","question":"Is a Facebook Marketplace buyer who wants to overpay a scam?","shortAnswer":"Almost certainly. Offering to pay more than the listed price and asking you to refund the difference is a classic overpayment scam.","explanation":"On Facebook Marketplace and similar platforms, scammers pose as buyers who offer more than the asking price — usually with a plausible explanation like including shipping costs. They send a fake payment confirmation or a cheque that initially appears to clear, then ask you to forward the excess amount before the original payment bounces or is reversed.\n\nOther variants involve sending a fake PayPal or bank notification screenshot and asking you to ship the item immediately. By the time the payment failure is discovered, the item has been sent and any 'refund' already paid. Cash or verified payment received in person before handing over goods is the safest approach for marketplace sales.\n\nThe overpayment itself is the tell, because no honest buyer benefits from sending a stranger more than the asking price. Screenshots of payment confirmations are trivially faked, and emails announcing a payment 'on hold until you send a shipping fee' come from the scammer, not the platform. Treat any pressure to ship quickly, use a courier the buyer chose, or move the conversation off-platform as part of the same script. Money you have not confirmed inside your own banking or payment app — by logging in yourself, not via anything the buyer sent — has not arrived, whatever the messages say.","redFlags":["Buyer offers more than the listed price unprompted","Explanation involves shipping agents or complicated logistics","Payment appears to arrive before you've agreed terms","Request to forward the excess amount to a third party","Urgency to ship before the payment is confirmed by your bank","Communication moves off-platform to WhatsApp or email"],"whatToDoNow":["Do not send any money back as a 'refund' before full payment has cleared","Verify payments in your bank account directly — not from a screenshot or email notification","For high-value items, insist on cash or in-person verified payment","Report the buyer to Facebook Marketplace","If you already sent money, contact your bank immediately"],"faq":[{"question":"The PayPal confirmation email looks genuine. Is it safe?","answer":"Scammers send convincing fake PayPal emails. Verify all payments by logging into your PayPal account directly — never trust an email or screenshot alone."},{"question":"Is it ever legitimate to receive an overpayment?","answer":"Genuine buyers don't overpay and ask for refunds. If payment exceeds the agreed amount, decline or return it in full through the original payment method, and treat any explanation with suspicion."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-lottery-or-prize-i-didnt-enter-real","url":"https://scamencyclopedia.org/questions/is-a-lottery-or-prize-i-didnt-enter-real","question":"Is a lottery or prize I didn't enter real?","shortAnswer":"No. You cannot win a lottery or prize draw you didn't enter. Messages claiming otherwise are scams designed to collect fees or your personal details.","explanation":"Prize or lottery scams notify you — by email, post, text, or social media — that you have won a large sum, a vehicle, or valuable goods in a draw you have no memory of entering. To claim the prize, you are asked to pay fees, taxes, or admin costs upfront, or to provide personal and banking information for 'transfer processing'.\n\nNo legitimate lottery or competition requires winners to pay fees to receive their prize. These upfront costs are the scam — you pay, no prize arrives, and the request for more fees continues until you stop. The personal information gathered can also be used for identity theft.\n\nThe simplest test cuts through every variation: you cannot win a draw you never entered. Beyond that, the mechanics give it away — genuine prize promoters deduct nothing upfront and never need your online banking credentials to pay you. Responses to these messages are traded between fraud operations, so replying at all tends to invite a stream of follow-up 'prizes' and, later, fake recovery offers referencing what you lost. Delete the message, and warn relatives who may be less familiar with the pattern — prize scams disproportionately target older people, sometimes cultivating them by post over months.","redFlags":["You won a lottery or prize you didn't enter","Fees, taxes, or legal costs required before you can receive the prize","Request for your banking details to 'transfer' winnings","Urgency — 'claim within 48 hours or the prize is forfeited'","Sender cannot be verified through official channels","The prize value seems very high relative to any stated organisation"],"whatToDoNow":["Do not pay any fees or provide banking details","Verify any organisation through official registries before engaging","Report the message to your email provider or platform and national fraud service","Delete the message and block the sender","If you already paid fees, contact your bank and report it"],"faq":[{"question":"It mentions a real lottery brand — could it still be real?","answer":"Scammers routinely use the names of real lotteries to appear credible. Contact the lottery directly through its official website to verify — do not use any contact details provided in the notification."},{"question":"I did enter a competition recently. Could this be related?","answer":"Check the original competition details through the organiser's verified website. Legitimate wins are communicated through official channels, not unexpected emails asking for fees."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-government-grant-i-qualify-for-automatically-real","url":"https://scamencyclopedia.org/questions/is-a-government-grant-i-qualify-for-automatically-real","question":"Is a government grant I automatically qualify for real?","shortAnswer":"Almost always not. Genuine government grants require an application process — unsolicited messages claiming you've automatically been approved are a scam.","explanation":"Government-grant scams tell targets they have been pre-selected or automatically approved for a grant, stimulus payment, or benefit, and that they only need to pay a small processing fee or provide bank details to receive it. These messages can impersonate genuine government agencies and use convincing logos and language.\n\nReal government grants and benefits require formal applications with supporting documentation. No government programme deposits money into your account based on an unsolicited notification — and no legitimate programme requires a fee to release a payment. If you think you may be eligible for a real benefit, check only through your government's official website.\n\nThe 'automatic approval' framing is what should stop you: governments do not award money to people who never applied, and they do not notify recipients through social media messages, texts, or out-of-the-blue calls. Many of these approaches arrive through hacked social-media accounts, so the recommendation may appear to come from a friend who 'just received theirs' — their account is compromised, not their judgement. Anything paid to 'release' the grant is lost, and bank details shared for the 'deposit' get used for fraud. Check eligibility for real programmes only on your government's official site, reached by typing the address yourself.","redFlags":["Unsolicited message saying you have been pre-approved for a government grant","Processing fee or tax required before funds are released","Request for your bank details to 'transfer' the grant","Urgency — offer expires soon or funds are limited","Communication comes via social media, text, or unofficial email","The grant amount is suspiciously large with no clear basis for eligibility"],"whatToDoNow":["Do not pay any fees or provide banking details","Visit your government's official website to check real benefit eligibility","Report the message to your national fraud service","Block and report the sender","If you already paid, contact your bank immediately"],"faq":[{"question":"What if the message uses my real name and address?","answer":"Personal details are available from data breaches and public records. Using your name doesn't make the message legitimate — verify through official channels only."},{"question":"How do I find out about real grants I may be eligible for?","answer":"Check your national or local government's official website, or speak to a registered financial adviser or benefits adviser. Do not rely on unsolicited messages or social media ads."}],"lastReviewed":"2026-08-01"},{"slug":"is-someone-asking-me-to-be-a-money-mule-illegal","url":"https://scamencyclopedia.org/questions/is-someone-asking-me-to-be-a-money-mule-illegal","question":"Is someone asking me to be a money mule illegal?","shortAnswer":"Yes. Allowing your bank account to be used to move criminal money is a serious crime, even if you did not commit the original fraud.","explanation":"A money mule is someone who transfers or allows the transfer of stolen money through their personal bank account, often in exchange for a commission. Mule recruiters operate through job ads promising easy remote work, social media offers, or romance relationships. They frame the activity as processing payments, currency conversion, or international transfers for a business.\n\nAllowing your account to be used this way is money laundering — a criminal offence in most countries, carrying significant penalties including imprisonment. Being deceived or unaware of the full picture does not automatically remove liability, though it is relevant to any investigation. Banks that identify money-mule behaviour typically freeze accounts and may report you to law enforcement.\n\nRecruiters target people unlikely to suspect the framing — students, job-seekers, newcomers to a country, and people in online relationships — and the pitch always minimises the act: 'just receive and forward, keep a percentage'. The percentage is the red flag; legitimate businesses have bank accounts and payment processors, and no lawful reason to route funds through a private individual. Consequences can include closed accounts, difficulty opening new ones, and criminal investigation. If you think you may already be involved, stop moving money immediately and talk to your bank — coming forward early, before the bank finds it first, materially improves your position.","redFlags":["Asked to receive money into your account and forward it on, keeping a cut","A job that involves moving funds between accounts with no clear business purpose","New contact online asks to use your bank account for 'business transfers'","Instructions to use cryptocurrency ATMs to convert and send funds","Requests to open a new bank account for the purpose","The person is vague about who the money belongs to or why it can't go directly"],"whatToDoNow":["Refuse the request immediately","Do not move any money already received — contact your bank","Report the recruitment attempt to your national fraud service","If your account has already been used, speak to your bank honestly about what happened","Keep records of any communications for your own protection"],"faq":[{"question":"I already forwarded money. What should I do?","answer":"Contact your bank immediately and be honest about what happened. Voluntary disclosure and cooperation are important. Seek independent legal advice if you are concerned about your position."},{"question":"What if I was told it was a legitimate business?","answer":"The 'legitimate business' framing is the standard cover story used to recruit mules. If you acted in good faith, that is relevant context, but the legal exposure is still real. Act now to limit further involvement."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-social-media-ad-for-an-investment-platform-safe","url":"https://scamencyclopedia.org/questions/is-a-social-media-ad-for-an-investment-platform-safe","question":"Is a social media ad for an investment platform safe?","shortAnswer":"Approach with serious caution. Social media ads for investment platforms are a leading route for investment fraud and are not vetted for legitimacy.","explanation":"Social media platforms carry advertising from unregulated or outright fraudulent investment platforms. These ads may use celebrity endorsements (real or deepfaked), promise high guaranteed returns, and link to professional-looking websites. The ease of placing targeted digital ads means fraudulent operators can reach large audiences quickly and cheaply.\n\nBefore depositing any money with an investment platform you found through an ad, check that it is registered with your country's financial regulator, read independent reviews from verifiable sources, and be cautious of any guarantee of returns. A polished website and social-media presence do not indicate legitimacy.\n\nAd platforms review campaigns at a scale that fraudulent advertisers have learned to slip through — ads run under cloned brands, switch their landing pages after approval, or use celebrity images without consent — so the fact that an ad was 'allowed' says nothing about its safety. The regulator check is the one that matters, and it must be done on the regulator's own website rather than through links or certificates the platform shows you, since fake platforms display fake licences. Treat any platform that contacts you first, or was recommended by a stranger online, as unverified until proven otherwise.","redFlags":["Ad promises high or guaranteed returns","Platform cannot be found on your financial regulator's register","Celebrity appears to endorse the platform — especially if you only see it in ads","Pressure to deposit quickly to 'lock in' a rate or offer","No clear information about who runs the company or where it is regulated","Withdrawals require additional fees or verification steps"],"whatToDoNow":["Check the platform against your financial regulator's authorised-firms register","Search for independent reviews on sites not linked from the ad","Do not deposit money based on a social media ad alone","Report suspicious ads to the platform","If you already deposited, stop and contact your bank"],"faq":[{"question":"I saw a famous person recommend the platform in an ad. Is that trustworthy?","answer":"Celebrities are routinely impersonated or deepfaked in investment ads without their knowledge. Verify through the celebrity's own verified social accounts, not through the ad."},{"question":"What does 'regulated' mean and how do I check?","answer":"Regulated means authorised to offer financial products by a government body — such as the FCA in the UK, ASIC in Australia, or the SEC in the US. Each publishes a searchable register of authorised firms online."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-ticket-seller-outside-a-venue-selling-real-tickets","url":"https://scamencyclopedia.org/questions/is-a-ticket-seller-outside-a-venue-selling-real-tickets","question":"Is a ticket seller outside a venue selling real tickets?","shortAnswer":"There is a real risk of fake, invalid, or already-used tickets. Buy only from official sources or reputable authorised resellers.","explanation":"Tickets bought from touts or informal sellers outside a venue carry no guarantee of authenticity. Fake printed tickets, duplicated barcodes, cancelled tickets, or tickets for the wrong seating area are all risks. Scammers also operate online, posing as private sellers on social media or classified sites, taking payment and never delivering.\n\nFor online purchases, the risk is higher still: a ticket listed on a non-authorised platform may have already been sold multiple times, with the first person through the gate gaining access and subsequent tickets being rejected. Only the first scan of a valid barcode gains entry.\n\nPayment method decides how much protection you keep: bank transfer, gift cards, or crypto to a private seller remove every safeguard, while a credit card payment through an authorised seller preserves chargeback rights if something goes wrong. For sold-out events, the pressure to gamble on an informal seller is exactly what the scam prices in — listings appear at plausible, even generous prices to move fast. Buy only from the venue, the official ticketing partner, or an authorised resale platform that reissues tickets in your name, and treat a screenshot of a ticket as no proof at all.","redFlags":["Tickets offered via social media direct messages rather than an established platform","Price significantly above or below face value without clear explanation","Seller is unwilling to use a tracked or protected payment method","You are asked to pay by bank transfer, cash app, or gift card","Seller pressures you to buy quickly before others take them","No official receipt or confirmation is provided"],"whatToDoNow":["Buy only from the venue's official box office or authorised resellers","For resale, use platforms that offer buyer guarantees","If you suspect you have a fake ticket, contact the venue before the event","Report the seller to the platform and your national fraud service","If you paid and received nothing or a fake, contact your bank"],"faq":[{"question":"The ticket looks completely real — how would I know it's fake?","answer":"You may not know until the barcode is scanned at the gate. Prevention is the only reliable protection — buy only through official channels."},{"question":"Are all ticket resellers fraudulent?","answer":"No. Authorised resale platforms provide guarantees and seller accountability. The risk is with unverified individual sellers, social media listings, and classified sites with no buyer protection."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-online-puppy-or-pet-seller-a-scam","url":"https://scamencyclopedia.org/questions/is-an-online-puppy-or-pet-seller-a-scam","question":"Is an online puppy or pet seller a scam?","shortAnswer":"Pet purchase scams are extremely common online. Before paying, always visit and see the animal in person at the seller's premises.","explanation":"Pet scams typically involve listings for puppies, kittens, or other animals advertised at attractive prices on classifieds, social media, or fake breeder websites. The seller always has an excuse for why you can't visit — the animal is being held by a transport company, is with a carer, or is abroad. Once a deposit is paid, further fees emerge: cages, insurance, veterinary certificates, customs clearance.\n\nThe animal usually doesn't exist. Photos are stolen from genuine breeders or sourced from the internet. The seller continues extracting money until the buyer stops paying. Always visit the animal in its current home, with its mother if possible, before paying anything.\n\nThe transport stage is where the scam extracts the most money: a fake courier — often with its own professional-looking website — takes over communication and invents refundable 'insurance', a 'climate-controlled crate', or border paperwork, each urgent because the animal is 'waiting in a depot'. Emotional pressure is the engine, which is why listings pair appealing photos with below-market prices. Reverse-search the photos, ask for a live video call showing the animal, and treat any seller who cannot show you the animal in its home as a listing to walk away from, however convincing the paperwork looks.","redFlags":["You cannot visit the animal before purchase","Price is unusually low for the breed","Seller is overseas or gives a remote location as an excuse for no visit","Additional fees appear after initial deposit — transport, insurance, health checks","Photos appear elsewhere online when reverse-image-searched","Communication only via messaging apps, not verifiable phone or address","Pressure to pay quickly before 'another buyer' takes the animal"],"whatToDoNow":["Do not pay any deposit without visiting the animal in person","Reverse-image-search all photos provided by the seller","Verify the breeder through official registries or breed-society databases","Report the listing to the platform and your national fraud service","If you already paid, contact your bank immediately"],"faq":[{"question":"The seller sent me a video of the puppy with today's newspaper. Is that proof?","answer":"Videos can be staged or requested from genuine third parties. A visit to see the animal with its mother in its current home is the only reliable proof of existence."},{"question":"What if the seller asks for a small deposit to 'hold' the animal?","answer":"Don't pay it without first visiting. A legitimate seller will allow a visit before any money changes hands."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-text-from-hmrc-or-the-irs-threatening-arrest-real","url":"https://scamencyclopedia.org/questions/is-a-text-from-hmrc-or-the-irs-threatening-arrest-real","question":"Is a text from HMRC or the IRS threatening arrest real?","shortAnswer":"No. Tax authorities do not threaten arrest by text or phone. This is a government-impersonation scam.","explanation":"Tax-authority impersonation scams — posing as HMRC, the IRS, the ATO, or similar bodies — use fear of arrest, prosecution, or account seizure to pressure victims into paying fictitious tax debts immediately via phone, gift card, or wire transfer. Real tax agencies communicate primarily by post, follow structured legal processes, and never demand immediate payment by gift card or cryptocurrency.\n\nThe urgency and threat of immediate arrest are deliberate psychological tools. Legitimate tax investigations involve formal notices, the right to legal representation, and appeals processes. If you receive such a message, contact the real tax authority directly using a number from their official website.\n\nA useful mental model: real tax authorities are slow and documented, scammers are fast and verbal. Genuine tax matters arrive as posted letters with reference numbers you can check, offer payment plans, and allow time to respond or appeal — none of which survives contact with a script demanding gift cards while you are kept on the phone. These campaigns also spike around filing deadlines, when a tax-related message feels most plausible. If a message worries you, look up the authority's number independently and ask; they can see your actual account status, and no genuine case is prejudiced by hanging up to verify.","redFlags":["Threatening arrest, prosecution, or account seizure via text or an automated call","Demand for immediate payment — often by gift card, crypto, or wire","Caller ID appears to show the tax authority's real number (can be spoofed)","Instruction not to tell anyone or hang up","Offer to 'settle' immediately for a smaller amount","You are asked to stay on the line while you go to the shop to buy gift cards"],"whatToDoNow":["Hang up or delete the message","Contact your real tax authority using a number from their official website","Do not pay anything via gift card, crypto, or wire on the basis of such a call","Report the scam to your tax authority and national fraud service","If you already paid, contact your bank immediately"],"faq":[{"question":"What if I do owe tax? Could this be real?","answer":"Even if you have outstanding tax, the real authority will not contact you by automated call threatening immediate arrest and demanding gift cards. Contact your tax authority independently to check your account status."},{"question":"The caller knows my name and partial National Insurance / SSN number. Is that proof?","answer":"No. Personal details are widely available from data breaches. Knowing your details does not make a caller genuine."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-fake-captcha-that-asks-me-to-paste-a-command-safe","url":"https://scamencyclopedia.org/questions/is-a-fake-captcha-that-asks-me-to-paste-a-command-safe","question":"Is a 'verify you are human' page that asks me to paste a command safe?","shortAnswer":"No. Any CAPTCHA or 'human verification' step that asks you to paste something into a Run dialog or terminal is a malware delivery technique, not a real CAPTCHA.","explanation":"A scam technique known as 'ClickFix' or 'paste-to-run' shows a fake CAPTCHA page telling you to press Windows + R (or open Terminal) and paste a command to 'prove you are human'. Real CAPTCHAs — such as clicking images or typing distorted text — take place entirely within the browser and never ask you to run anything on your computer.\n\nThe command being pasted is malicious code. Once run, it can download malware, steal saved passwords, install a keylogger, or give an attacker remote access to your machine. These fake pages are often placed inside malicious ads, phishing emails, or compromised websites. The instruction to paste into a command prompt is the clearest possible signal that something harmful is happening — stop immediately.\n\nIf you have already pasted and run the command, treat your device as compromised: disconnect from the internet, change passwords from a clean device, and run a full malware scan.","redFlags":["CAPTCHA step asks you to open a Run dialog, PowerShell, or Terminal","You are told to press Windows + R and paste something","The command is long and not human-readable","Page insists this is a 'one-time security check'","Urgency — page says access will be blocked unless you complete the step","The instruction appears on a site you don't normally visit"],"whatToDoNow":["Close the tab immediately — do not paste or run anything","If you already ran the command, disconnect from the internet at once","From a clean device, change your most important passwords","Run a full malware scan on the affected device","Report the URL to your browser's phishing-report tool"],"faq":[{"question":"Can a real website ever ask me to run a command?","answer":"Legitimate websites — including Google's reCAPTCHA and hCaptcha — never ask you to run commands outside the browser. Developer documentation may show commands you choose to run, but a prompt that pastes one automatically into your clipboard is malicious."},{"question":"My antivirus didn't alert me. Does that mean it was safe?","answer":"Antivirus tools can miss novel or obfuscated scripts. The absence of an alert does not confirm safety — treat the device as potentially compromised and scan thoroughly."},{"question":"Is this the same as a normal phishing email?","answer":"It shares the same goal — compromising your device or accounts — but uses a social-engineering step that bypasses browser security by tricking you into running the code yourself."}],"lastReviewed":"2026-06-01"},{"slug":"is-a-venmo-or-apple-pay-request-from-a-stranger-a-scam","url":"https://scamencyclopedia.org/questions/is-a-venmo-or-apple-pay-request-from-a-stranger-a-scam","question":"Is a Venmo or Apple Pay request from a stranger a scam?","shortAnswer":"Almost always. Unsolicited payment requests or transfers from people you don't know are a well-known fraud method — do not send money.","explanation":"Payment apps such as Venmo, Apple Pay, and similar services allow anyone with your username, phone number, or email to send or request money. Scammers use this in several ways: they send a fake 'accidental' transfer and then ask for it back (the original payment later bounces or is reversed); they send a payment request with a note that sounds like a bill you might owe; or they contact you claiming a mutual friend sent you their payment details.\n\nTransfers made through these apps are generally treated as authorised and are hard to reverse. Before sending anything, verify the request through a direct call to the person you believe sent it — using a number you already have, not one provided in the message. If someone you don't know requests money, decline and block.\n\nAs with other instant-payment scams, an 'accidental' transfer you receive was usually funded by a stolen card or hacked account, and it will be reversed once the theft is reported — pulling the money back out of your balance after you have 'returned' your own. Leave unexpected payments untouched and report them in the app instead, so the platform can unwind them properly.","redFlags":["Stranger sends you money and immediately asks for a refund","Payment request with a note implying you owe something you don't recognise","Someone contacts you via a separate channel saying they 'accidentally' sent to you","Request to send money quickly to avoid a 'problem'","The profile is new, has no photo, or was created recently","Pressure to act before you verify with anyone"],"whatToDoNow":["Do not send money to or accept money from strangers on payment apps","If you received an 'accidental' payment, contact the app's support — do not send your own money back directly","Decline and report any unexpected request","Verify through a direct call using a number you already have before doing anything","Contact your bank or the app's support if you already sent funds"],"faq":[{"question":"What if the request note mentions someone I know?","answer":"That person's account may have been compromised, or the scammer may have found their name from social media. Call the friend directly before sending anything."},{"question":"Can the app reverse a payment I was tricked into sending?","answer":"Most peer-to-peer payment apps treat payments as final once sent. Report immediately through the app and contact your bank if the funding source was a linked card or bank account."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-qr-code-on-a-parking-meter-safe","url":"https://scamencyclopedia.org/questions/is-a-qr-code-on-a-parking-meter-safe","question":"Is a QR code on a parking meter safe?","shortAnswer":"Not automatically. Fake QR code stickers placed over legitimate ones are a known fraud — always verify the URL before entering payment details.","explanation":"QR code fraud ('quishing') on parking meters involves scammers placing a sticker with their own QR code over the official one. Scanning it takes you to a convincing fake payment page that captures your card details or redirects to a different parking app.\n\nBefore scanning, inspect the meter: look for a sticker that appears to be placed on top of printed material, check that the URL shown in your camera app matches the official operator, and look for signs on the meter or nearby that confirm the correct payment method. Many parking operators also print the official website and a phone number directly on the machine.\n\nIf you have already entered card details on a parking payment page that looked unusual, contact your bank to check for unauthorised transactions and consider replacing your card.\n\nQuishing works because a parking meter is exactly the place people expect to be told to scan a code, and because a phone's browser makes the resulting page look native and trustworthy. Where you have the choice, the operator's own app — installed from the app store rather than reached through a scanned link — is the safer way to pay.","redFlags":["QR code appears to be a sticker placed over the original surface","URL shown in your camera app is unusual or doesn't match the known operator","Payment page looks different from what you've used at this location before","Page asks for more information than a standard parking payment requires","The meter has no other identifying information about the official payment method"],"whatToDoNow":["Inspect the QR code for signs it is a sticker over the original","Check the URL your camera shows before tapping","Use the meter's phone number or official app instead of the QR code if in doubt","If you entered card details on a suspicious page, contact your bank","Report any suspicious QR stickers to the parking operator and local council"],"faq":[{"question":"How can I tell if a QR code is a sticker?","answer":"Look for raised edges, a slightly different texture or colour to the surrounding surface, or a label that overlaps the original printed information. Peeling at a corner may reveal another QR code beneath."},{"question":"Is it safer to type the URL manually than to scan a QR code?","answer":"Yes. Typing the known official URL directly into your browser removes the risk of a fraudulent redirect, though you must be careful to type it correctly."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-subscription-auto-renewal-email-a-scam","url":"https://scamencyclopedia.org/questions/is-a-subscription-auto-renewal-email-a-scam","question":"Is a 'your subscription has auto-renewed' email a scam?","shortAnswer":"It may be. These emails often impersonate real services to panic you into calling a fake number or clicking a link — check your actual account before doing anything.","explanation":"A very common scam sends emails claiming your subscription to a software product, streaming service, or security tool has automatically renewed for a large amount. The email includes a phone number to call to cancel or a link to request a refund. Calling the number connects you to scammers who will attempt remote access to your device or try to collect your banking details. Clicking the link may lead to a phishing page.\n\nBefore reacting, log in to the service directly via its official website — not through any link in the email — to see whether a charge actually occurred. Check your bank statement. Genuine renewal emails from legitimate services do not include urgent 'call this number to cancel' instructions.\n\nThe amounts named are chosen carefully — large enough that you call immediately, small enough to be believable — and the 'refund' is where the real theft happens: the scammer, connected to your computer, fakes an over-refund on screen and pressures you to return the difference by bank transfer or gift cards. Nothing about the email proves a charge exists; only your own bank statement and the service's own website do.","redFlags":["Large renewal amount for a service you may or may not use","Phone number in the email to call to cancel or get a refund","Urgency — 'call within 24 hours to reverse the charge'","Sender email address doesn't match the real company's domain","Link in the email goes to an unfamiliar domain","You don't recall subscribing to this service"],"whatToDoNow":["Do not call any number or click any link in the email","Log in to the service directly through its official website to check your account","Check your bank or card statement to see if a charge actually occurred","If you already called and gave access, disconnect and follow remote-access scam steps","Report the email as phishing to your email provider"],"faq":[{"question":"What if I don't have an account with the named service?","answer":"That's fine — the charge has not actually happened. Do not call the number or click the link. Mark the email as spam and delete it."},{"question":"What if I do have a subscription and am unsure if it renewed?","answer":"Check your account and billing history by going to the official website directly, and check your bank statement. If in doubt, call the service's official support number found on its website."}],"lastReviewed":"2026-08-01"},{"slug":"can-scammers-fake-a-caller-id","url":"https://scamencyclopedia.org/questions/can-scammers-fake-a-caller-id","question":"Can scammers fake a caller ID?","shortAnswer":"Yes. Caller ID can be set to display any number or name, so a familiar-looking number on your screen does not confirm who is calling.","explanation":"Caller ID spoofing allows anyone with the right software to display any phone number they choose when making a call. This means a call can appear to come from your bank, the police, HMRC, the IRS, a hospital, or a family member's phone — while actually originating from a scammer anywhere in the world.\n\nSpoofing is used to make impersonation scams more convincing. If you receive an unexpected call from a number you recognise but the caller makes unusual requests — moving money, sharing codes, installing software, or paying a fine — hang up and call back using a number you know is correct, such as the one printed on your bank card or from the official website. Never rely on a caller ID display alone as proof of identity.\n\nSpoofing also explains why returning a missed call to the displayed number can reach a genuine organisation that never called you — the number was borrowed, not used. The practical rule is directional: numbers you dial from a trusted source (your card, the official website, a saved contact) are meaningful; numbers that appear on an incoming call are not. Treat caller ID as a label anyone can print, and let no request for money, codes, or software installation survive a hang-up-and-call-back check.","redFlags":["A trusted number calls and immediately asks for money, codes, or access","Caller claims to be your bank, police, or a government body","Urgency combined with a request to keep the call secret","The request would be unusual even if the caller were genuine","Caller discourages you from hanging up and calling back independently"],"whatToDoNow":["Hang up and call the organisation back using a number from its official website or your card","Never share one-time codes, passwords, or banking details over the phone","Do not move money at a caller's instruction, regardless of what number they appear to call from","Report suspicious calls to your national fraud service","Let friends and family know that caller ID can be faked"],"faq":[{"question":"If I call back the number that called me, will I reach the real organisation?","answer":"Not necessarily — some spoofed setups route callbacks to the scammer too. Always use a number you find independently, such as the number on the back of your bank card or on the official website."},{"question":"Is caller ID spoofing illegal?","answer":"Using spoofing to deceive or defraud is illegal in most countries. However, law enforcement alone cannot prevent it — protecting yourself means not relying on caller ID as verification."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-debt-collection-call-demanding-immediate-payment-a-scam","url":"https://scamencyclopedia.org/questions/is-a-debt-collection-call-demanding-immediate-payment-a-scam","question":"Is a debt-collection call demanding immediate payment a scam?","shortAnswer":"It may be. Legitimate debt collectors follow rules about verification and acceptable payment methods. Demands for immediate payment by gift card, wire, or crypto are scam signals.","explanation":"Real debt-collection agencies operate under legal frameworks that require them to provide written verification of the debt, identify themselves clearly, and accept standard payment methods. Scam 'debt collectors' create urgency with threats of immediate legal action, arrest, or wage garnishment to pressure payment before you can verify anything.\n\nKey warning signs of a fraudulent call include demands for gift cards, cryptocurrency, or wire transfers; refusal to provide a written notice or the name of the original creditor; threats of same-day arrest; and calls from spoofed numbers. Before paying anything, request verification in writing and check the debt against your own records.\n\nLegitimate collectors can afford to follow process because a real debt doesn't evaporate while you verify it — a scammer's 'debt' does, which is why every version of the script fights the pause. Ask for the collector's company name, the original creditor, and written validation, then check independently: your own records, your credit report, and the original creditor's customer service. If the debt turns out to be real but the caller isn't, you will have protected yourself twice over; payments made to a fake collector don't reduce a genuine balance.","redFlags":["Demands for immediate payment by gift card, crypto, or wire transfer","Threats of same-day arrest or seizure","Refuses to provide written notice or the name of the original creditor","Caller becomes aggressive or threatening","Debt you have no knowledge of","Instruction not to consult a lawyer or tell anyone"],"whatToDoNow":["Request written verification of the debt — genuine collectors must provide this","Do not pay by gift card, crypto, or wire based on a phone call","Check your own records and credit file for the alleged debt","Look up the agency independently and call their official number to verify","Report threatening or fraudulent calls to your national fraud service and consumer regulator"],"faq":[{"question":"Do I have to pay a debt if a collector calls?","answer":"Not on the basis of a call alone. You have the right to request written verification. If the debt is real, you can arrange payment directly with the original creditor or a verified agency."},{"question":"Can I be arrested for an unpaid debt?","answer":"In most countries, civil debt does not lead to arrest. Threats of immediate arrest for an unpaid consumer debt are a pressure tactic used by scammers, not a legal reality."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-refund-waiting-message-a-scam","url":"https://scamencyclopedia.org/questions/is-a-refund-waiting-message-a-scam","question":"Is a 'you have a refund waiting' message a scam?","shortAnswer":"Often yes. Unexpected refund notifications are used to trick you into sharing bank details or clicking a link to a phishing page.","explanation":"Refund scam messages claim that a government agency, utility, retailer, or subscription service owes you money and that you must click a link or call a number to claim it. The link leads to a page designed to harvest your bank or card details, or the call connects to scammers who ask for your account number to 'process the refund'.\n\nLegitimate refunds from retailers or utilities are typically processed automatically back to the original payment method, or you are directed to a clearly identified claims process on the company's official website. If you believe a refund is genuinely owed, navigate to the organisation's website independently rather than using any link or number in the message.\n\nThe refund premise works because it inverts the usual alarm: instead of threatening you, it offers found money, which lowers suspicion while producing the same result — your bank details on a scammer's page. Some versions escalate to a remote-access call in which the 'agent' fakes an over-refund on your screen and asks you to return the difference. No genuine refund process requires your online banking password, a code from your phone, or remote control of your device.","redFlags":["Unexpected message claiming you are owed money","Link to claim the refund goes to an unfamiliar domain","Phone number provided to 'process' the refund","Request for your bank sort code, account number, or card details","Urgency — 'claim within 48 hours or the refund will expire'","The amount is unusually precise to seem credible"],"whatToDoNow":["Do not click any link or call any number in the message","If you think a refund may be genuine, go to the organisation's official website directly","Check your bank statements to see whether any unusual charges from that organisation appear","Report the message to your email provider or forward SMS to 7726","If you already entered card details, call your bank immediately"],"faq":[{"question":"The message mentions a real company I use. Could it be genuine?","answer":"Possibly, but scammers routinely use the names of real companies. Verify by going to the company's website directly — not via any link in the message."},{"question":"Why would a scammer ask for my details to send me money?","answer":"The promise of receiving money is used to lower your guard. In reality, your details are being collected for fraud, not to send you a refund."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-job-that-asks-me-to-buy-my-own-equipment-a-scam","url":"https://scamencyclopedia.org/questions/is-a-job-that-asks-me-to-buy-my-own-equipment-a-scam","question":"Is a job that asks me to buy my own equipment a scam?","shortAnswer":"Very likely. Legitimate employers supply necessary equipment or reimburse verified costs — paying upfront for equipment to get a job is a well-known scam pattern.","explanation":"Equipment scams present as remote work opportunities — usually data entry, virtual assistance, or customer service roles — and instruct new hires to purchase a laptop, phone, headset, or 'proprietary software' before starting. The company sends a cheque to cover the cost, which later bounces, or asks you to buy through a specific supplier who is actually run by the scammers.\n\nIn the cheque variant, you buy the equipment with your own money after depositing the fake cheque, then the cheque bounces and you have lost both the equipment cost and any forwarded funds. A genuine employer will either provide equipment directly or have a structured, verified reimbursement process through payroll — not ask you to purchase through an unknown vendor before your first day.\n\nThe 'specific supplier' requirement is the heart of the fraud — the supplier is the scammer, and your 'equipment purchase' is simply a transfer dressed up as onboarding. Verify any remote employer independently before spending anything: look up the company's registration, find its official website yourself, and contact its HR through channels you found rather than links you were given.","redFlags":["Told to buy equipment from a specific vendor before starting","A cheque is sent to cover costs before you have done any work","Employer is vague about what the role involves or can't be verified","Communication is only via personal email accounts, not a company domain","Urgency to buy equipment immediately to 'secure the role'","The equipment supplier is someone you were only told about by the 'employer'"],"whatToDoNow":["Do not purchase equipment at an employer's request before your first day","Verify the employer independently through official company registration records","Do not deposit any cheque you received without speaking to your bank first","Report the job listing to the platform and your national fraud service","If you already paid, contact your bank immediately"],"faq":[{"question":"What if the employer sends the money first to cover the equipment?","answer":"This is the overpayment cheque variant. The cheque or transfer often reverses days later. Do not spend money you received from an unknown employer until it has fully cleared — and ideally not at all until you have verified the organisation."},{"question":"Do any genuine jobs require you to have your own equipment?","answer":"Some freelance or bring-your-own-device roles exist, but even then you are not sent money to buy from a specified supplier. A genuine BYOD policy means using equipment you already own."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-crypto-airdrop-that-needs-my-seed-phrase-real","url":"https://scamencyclopedia.org/questions/is-a-crypto-airdrop-that-needs-my-seed-phrase-real","question":"Is a crypto airdrop that needs my seed phrase real?","shortAnswer":"No. Any airdrop or promotion that requires your seed phrase or private key is a scam — entering it will drain your entire wallet.","explanation":"Legitimate crypto airdrops distribute tokens directly to wallet addresses and never need your seed phrase, private key, or password. Your seed phrase is the master key to your entire wallet: anyone who has it has complete, irreversible control of every asset inside.\n\nScam airdrops circulate through social media, Discord servers, and direct messages. They often impersonate real projects and create a convincing-looking claim portal that asks you to 'connect your wallet' and then enter your seed phrase to 'verify eligibility'. Some variants ask you to sign a transaction that grants them unlimited spending permission on your assets — which is equally dangerous.\n\nIf an airdrop opportunity asks for your seed phrase, private key, or has you approve a suspicious transaction, stop immediately. A legitimate project will never ask for this.\n\nThe rule generalises beyond airdrops: support agents, wallet apps, and exchanges never need your seed phrase either, and every context in which someone asks for it — 'validation', 'synchronisation', 'migration' — is an attack. Store the phrase offline, and if you have entered it anywhere, move your assets to a brand-new wallet immediately; a compromised phrase stays compromised forever.","redFlags":["Any page or form asking for your seed phrase or private key","Airdrop promoted via unsolicited DM or in a Discord server","Wallet-connect request followed by a large approval transaction","Urgency — 'claim expires in 2 hours'","Project cannot be verified through official channels","Unusually large token amounts promised for minimal action"],"whatToDoNow":["Never enter your seed phrase or private key anywhere other than your hardware wallet or official wallet software","If you connected your wallet, revoke approvals immediately using a trusted token-approval checker","If you entered your seed phrase, move all remaining assets to a new wallet immediately","Report the scam to the platform and your national fraud service","Warn others in the community about the scam link"],"faq":[{"question":"What is a seed phrase and why is it so sensitive?","answer":"A seed phrase is a sequence of words (usually 12 or 24) that can regenerate your entire crypto wallet on any device. Anyone with your seed phrase can access and empty your wallet without needing your password or device."},{"question":"Can I get tokens back if I was scammed?","answer":"Blockchain transactions are generally irreversible. Report the incident to your exchange and fraud authorities, but recovery of tokens directly sent to a scammer's wallet is rarely possible."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-romance-partner-who-only-wants-gift-cards-a-scammer","url":"https://scamencyclopedia.org/questions/is-a-romance-partner-who-only-wants-gift-cards-a-scammer","question":"Is a romance partner who only wants gift cards a scammer?","shortAnswer":"Almost certainly. Requests for gift cards from an online romantic partner — with any explanation — are one of the most reliable signs of romance fraud.","explanation":"Gift cards are a preferred payment method for scammers because they are fast, irreversible, and anonymous. In romance fraud, a scammer builds a relationship over weeks or months before a crisis emerges — a medical bill, a stranded traveller, a business problem — that requires money urgently. Gift cards are requested because they can be redeemed instantly from anywhere in the world.\n\nCommon cover stories include emergency surgery, a business deal requiring a bridge loan, customs fees to release a gift, or legal trouble. The specific story changes but the pattern is consistent: emotional investment is built first, then a financial request follows. Paying once typically leads to repeated requests with escalating urgency.\n\nNo matter how convincing the story or how strong the connection feels, sending gift cards to someone you have never met in person is sending money you will not get back.\n\nIf this is happening to you, tell someone you trust before sending anything — scammers isolate their victims precisely because the story rarely survives being said out loud to a third person.","redFlags":["Online partner who has never met you in person asks for gift cards","An emergency or crisis arises that only you can help with financially","Requests are repeated and increase over time","Partner always has a reason why bank transfers or direct help are impossible","They insist on secrecy — 'don't tell your family'","Profile photos are stock images or return results in a reverse image search"],"whatToDoNow":["Stop sending money or cards immediately","Tell a trusted friend or family member — outside perspective is important","Do not send more money to 'recover' what you've already sent","Report the profile to the platform","Contact your bank if bank transfers were also involved"],"faq":[{"question":"I've been talking to this person for months. Can they still be a scammer?","answer":"Yes. Romance scammers invest weeks or months specifically to build trust before making financial requests. The length of the relationship is not proof of the person's identity."},{"question":"What if I've already sent several payments?","answer":"Stop now. Sending more money to recover previous losses is a common psychological trap the scammer encourages. Report what has happened and seek support — this kind of fraud has a significant emotional as well as financial impact."}],"lastReviewed":"2026-08-01"},{"slug":"can-i-trust-a-check-that-clears-then-bounces","url":"https://scamencyclopedia.org/questions/can-i-trust-a-check-that-clears-then-bounces","question":"Can I trust a cheque that clears then bounces later?","shortAnswer":"No. A cheque appearing to clear is not a guarantee of payment — it can still bounce days later, leaving you responsible for any money you spent.","explanation":"Banks often make funds available from a deposited cheque before it has fully cleared through the banking system. This provisional credit can appear within hours or a day, giving the impression the cheque is genuine. However, the cheque can still be returned — due to a closed account, insufficient funds, or forgery — up to several days later, sometimes longer for foreign cheques.\n\nScammers exploit this window by sending overpayment cheques in jobs or sales, asking you to forward the excess before it bounces. By the time the cheque is reversed, the money you forwarded is gone. The rule is simple: do not spend or forward money from a deposited cheque until your bank confirms it has fully and finally cleared — and ideally, be very cautious about cheques from people you don't know personally.\n\n'Available' and 'cleared' are different promises: availability is your bank advancing you money as a courtesy, clearance is the issuing bank actually honouring the cheque. When a cheque is returned, the courtesy is withdrawn and the shortfall is yours. If you need certainty, ask your bank explicitly whether the item has finally settled and can no longer be returned — and until the answer is yes, treat the balance as provisional.","redFlags":["A cheque from someone you don't know arrives unexpectedly","You are asked to forward a portion of the funds quickly","The cheque is for more than the agreed amount","The sender has a complicated explanation for why the extra funds need forwarding","There is urgency to move the money before you have time to verify"],"whatToDoNow":["Do not forward any funds from a cheque until your bank confirms final clearance","Ask your bank explicitly how long full clearance takes for that cheque","If you received a cheque in relation to a job offer or sale, contact your bank before depositing","Report unexpected cheques associated with job offers to your national fraud service","If you already forwarded funds, contact your bank immediately"],"faq":[{"question":"If the money is available in my account, isn't the bank guaranteeing it?","answer":"No. Provisional credit is the bank making funds temporarily available, not a guarantee that the cheque is good. The bank can reclaim the amount if the cheque is dishonoured."},{"question":"How long does a cheque take to fully clear?","answer":"Domestic cheques typically clear in a few business days, but this varies by country and bank. Foreign cheques can take weeks. Ask your bank for the specific clearance timeline before acting."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-loan-pre-approved-pay-a-fee-offer-a-scam","url":"https://scamencyclopedia.org/questions/is-a-loan-pre-approved-pay-a-fee-offer-a-scam","question":"Is a 'loan pre-approved, pay a fee' offer a scam?","shortAnswer":"Yes. Legitimate lenders deduct fees from the loan — they never ask you to pay an upfront fee before releasing funds.","explanation":"Advance-fee loan scams contact people — often those with poor credit or financial pressure — claiming they have been pre-approved for a loan. To receive the funds, the target must first pay a processing fee, insurance premium, or government tax. Once the fee is paid, the 'lender' disappears or invents further fees, and no loan ever arrives.\n\nA genuine lender assesses your application and either approves or declines it. Any fees charged by reputable lenders are deducted from the loan proceeds or added to the repayment schedule — they are never collected upfront before the money is disbursed. Being 'pre-approved without a credit check' for a large loan is also not how legitimate lending works.\n\nThese operations often buy or trade lead lists from loan-comparison and payday-lending sites, which is why the offer can arrive just when you are searching for credit — timing that feels like luck but is targeting. Check any lender against your financial regulator's register before applying, and remember that paying one 'fee' marks you as responsive: refusing a second fee is typically met with threats or the disappearance of everything already paid.","redFlags":["Upfront fee required before the loan can be released","Guaranteed approval regardless of credit history","Lender cannot be verified through official financial authority registers","Communication comes via text, WhatsApp, or social media rather than official channels","Urgency to pay the fee before 'the offer expires'","Fee is described as insurance, government tax, or processing charge"],"whatToDoNow":["Do not pay any upfront fee to receive a loan","Check the lender against your financial regulator's authorised-firms register","Report the offer to your national fraud service","If you already paid a fee, contact your bank immediately","Block and delete contact from the fraudulent lender"],"faq":[{"question":"Do any legitimate loans have upfront fees?","answer":"Some mortgage products involve arrangement fees, but these are disclosed clearly and are typically added to the loan or deducted from proceeds — never paid in cash before the loan is issued to get it 'released'."},{"question":"What if the company has a professional-looking website?","answer":"A polished website can be created very cheaply. Check the company name against your financial regulator's register — if it isn't listed, do not proceed."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-unpaid-toll-text-real","url":"https://scamencyclopedia.org/questions/is-an-unpaid-toll-text-real","question":"Is an 'unpaid toll' text a real notice?","shortAnswer":"Usually not. Unsolicited texts claiming you owe a toll and asking you to click a link are a widespread phishing scam — verify through the official toll operator only.","explanation":"Toll-fee phishing texts (sometimes called 'smishing') claim you have an outstanding toll balance and threaten fines or licence suspension if you don't pay immediately via a link. The link leads to a convincing fake payment page that captures your card details.\n\nGenuine toll notices are issued by recognised highway authorities or toll operators and typically arrive by post or through a registered account you signed up to. If you do drive roads with electronic tolling, check your balance by going directly to the toll operator's official website — not via any link in a text. In the United States, the FBI and FTC have both issued warnings about a large wave of toll-fee smishing attacks.\n\nToll smishing also harvests more than card numbers — the fake page usually asks for your name, address, and date of birth, packaging a full identity-theft kit alongside the payment details. The texts are sent blind to bulk number lists, which is why people who don't drive, or who live nowhere near toll roads, receive them too; a demand that doesn't match your actual travel is a tell in itself.","redFlags":["Text about an unpaid toll you don't recognise","Link in the text goes to a domain that isn't the official toll operator","Threats of immediate fines, licence suspension, or legal action","Small amount owed — designed to seem plausible and not worth questioning","No account number or vehicle registration matching your records","Urgency — 'pay within 24 hours to avoid additional charges'"],"whatToDoNow":["Do not click the link or enter payment details","Go to the official toll operator's website directly to check your account","Forward the text to 7726 (UK/US spam reporting) and report to your national fraud service","If you entered card details, contact your bank immediately","Delete the message after reporting it"],"faq":[{"question":"I did drive on a toll road recently. Could the text be genuine?","answer":"Even if you did use a toll road, verify only through the operator's official website — not through the link in the text. The coincidence of timing is not proof the text is real."},{"question":"How do scammers know I might have used a toll road?","answer":"They typically don't — these messages are sent in bulk to millions of numbers. Many recipients will have driven on a road recently and assume the text must be for them."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-geek-squad-or-norton-auto-renewal-email-a-scam","url":"https://scamencyclopedia.org/questions/is-a-geek-squad-or-norton-auto-renewal-email-a-scam","question":"Is a 'Geek Squad' or 'Norton auto-renewal' email a scam?","shortAnswer":"Almost always. These impersonation emails are one of the most common tech-support scam formats — do not call the number or click any link.","explanation":"Emails impersonating Geek Squad, Norton, McAfee, or similar tech-brand names are sent in enormous volumes. They typically claim a subscription has auto-renewed for a substantial amount and instruct you to call a customer-service number to cancel. That number connects to scammers who either attempt to access your computer remotely or convince you to make a bank transfer to 'receive a refund'.\n\nNeither the charge nor the renewal is real — it is a pretext to get you on the phone. Once there, the scammers may walk you through installing remote-access software, showing you 'virus infections' on your computer to scare you further, and ultimately extracting money or bank details.\n\nIf you have a subscription with any of these companies, log in to your account through their official website to check your billing history. Do not use any contact information in the email.\n\nIf you did call, and especially if anything was installed on your computer, treat the device as compromised: disconnect it, uninstall the remote-access tool, change key passwords from another device, and tell your bank what happened.","redFlags":["Unexpected large renewal charge for a security or tech-support service","Phone number in the email to cancel the charge","Urgent language — 'call within 48 hours'","Sender email address doesn't match the real company domain","No corresponding charge in your actual bank or card statement","Attached invoice or PDF that looks official but contains only a phone number"],"whatToDoNow":["Do not call the number in the email","Check your actual bank and card statements — is there a real charge?","Log in to your account at the company's official website if you have one","Report the email as phishing to your email provider","If you already called and gave remote access, follow our remote-access scam guidance immediately"],"faq":[{"question":"I don't have a subscription with this company. Can I just ignore it?","answer":"Yes — there is no real charge. Mark it as spam and delete it. Do not call the number even to tell them to stop contacting you."},{"question":"What if I do have a subscription and the renewal amount matches?","answer":"Check your account by going directly to the company's official website. If the renewal is real, you can manage it there without calling any number provided in an email."}],"lastReviewed":"2026-08-01"},{"slug":"should-i-scan-a-qr-code-sent-to-me-by-email","url":"https://scamencyclopedia.org/questions/should-i-scan-a-qr-code-sent-to-me-by-email","question":"Should I scan a QR code sent to me by email?","shortAnswer":"Be cautious. QR codes in unsolicited emails are increasingly used to bypass email security filters and direct you to phishing pages.","explanation":"A QR code in an email is just a link in a different format — it takes you to a URL, which may be a phishing page, a malware download, or a fake login page. Scammers send QR codes in emails specifically because many corporate email-security systems do not scan image-based QR codes as thoroughly as clickable text links.\n\nBefore scanning, consider: do you recognise the sender and did you expect this email? Does the surrounding context make sense? After scanning, check the URL your phone shows before opening the page — look for misspellings or unusual domains.\n\nIf you received an unsolicited QR-code email claiming to be from your bank, a parcel service, or a tech company, treat it with the same caution you would treat a suspicious link.\n\nThe email context adds one more wrinkle: attackers favour QR codes for 'urgent' themes — password expiry, payroll updates, missed voicemails — because moving you from a monitored work computer to your personal phone strips away corporate security filters. That switch of device is part of the design, not a convenience.","redFlags":["QR code in an unsolicited or unexpected email","Email creates urgency — 'scan now to verify your account'","The URL shown after scanning is unfamiliar or misspelled","Email is from a sender you don't recognise","QR code is the only content, with little or no explanatory text","Claimed sender is a bank, delivery company, or tech firm"],"whatToDoNow":["Preview the URL your phone shows before opening the scanned page","If the URL looks unfamiliar, do not open it","Navigate to the company's website directly if you want to check your account","Report the suspicious email to your email provider","If you entered credentials on the scanned page, change your password immediately and enable 2FA"],"faq":[{"question":"Is it safe to scan a QR code if my email came from a company I use?","answer":"Email sender addresses and display names can be spoofed. If the email was unexpected or asks you to scan urgently, go to the company's website directly rather than using the QR code."},{"question":"Can scanning a QR code alone install malware?","answer":"Scanning a code and viewing the URL in your camera app is generally safe. The risk comes from opening the resulting page or downloading anything from it."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-family-member-stranded-abroad-call-real","url":"https://scamencyclopedia.org/questions/is-a-family-member-stranded-abroad-call-real","question":"Is a 'family member stranded abroad' call real?","shortAnswer":"Treat it as suspicious. The 'grandparent scam' and variants convince people a relative is in trouble and needs emergency money — verify directly before sending anything.","explanation":"In this scam, a caller claims to be a grandchild, child, or other family member who is stranded, arrested, hospitalised, or in trouble abroad and urgently needs money. The scammer may have found enough information about your family online to sound convincing, or may coach you to fill in details yourself by asking vague leading questions.\n\nThe call may also involve a second 'authority figure' — a lawyer, police officer, or embassy official — who reinforces the story and explains how to send money. Wire transfer, cryptocurrency, or gift cards are typically requested because they are fast and hard to reverse.\n\nBefore sending anything, hang up and call the family member directly on a number you already have. If you can't reach them, call another relative who could verify their whereabouts.\n\nAI voice cloning has sharpened this scam: a few seconds of audio from social media can produce a convincing imitation of a relative's voice, so 'it sounded exactly like them' is no longer strong evidence. Agreeing a family code word in advance, and always verifying through a number you already hold, defeats both the cloned and the conventional version.","redFlags":["Unexpected call from a 'relative' who sounds distressed and different from usual","Caller provides few specific details and encourages you to guess or fill in the story","Request for money via wire transfer, crypto, or gift cards","A second caller ('lawyer', 'police officer') backs up the story","Instructions to keep the matter secret from other family members","Urgency — 'they'll be held overnight if you don't pay within the hour'"],"whatToDoNow":["Hang up and call the family member directly on a number you already have","Contact another family member to verify the story before sending anything","Do not send money via wire, crypto, or gift cards based on a phone call","Report the call to your national fraud service","Alert elderly relatives to this type of scam"],"faq":[{"question":"The caller sounded exactly like my grandchild. Could it really be them?","answer":"AI voice-cloning technology can produce convincing imitations from a short audio clip. Sounding like someone is not proof of identity — call them back on a number you already know."},{"question":"What if I can't reach the family member to verify?","answer":"Contact another relative or trusted person who might know their whereabouts. Do not send money until you have independently confirmed the situation."}],"lastReviewed":"2026-08-01"},{"slug":"can-a-recruiter-on-linkedin-be-fake","url":"https://scamencyclopedia.org/questions/can-a-recruiter-on-linkedin-be-fake","question":"Can a recruiter on LinkedIn be fake?","shortAnswer":"Yes. Fake recruiter profiles on LinkedIn are used to deliver job scams, phishing links, pig-butchering investment fraud, and corporate espionage.","explanation":"LinkedIn's professional context makes users more trusting, which scammers exploit. Fake recruiter profiles are often well-constructed with profile photos, work histories, and connections — some use AI-generated faces or photos stolen from real people online.\n\nOnce contact is established, the fake recruiter may direct you to a phishing job application that harvests your personal details; lead you to a fraudulent investment platform; ask you to click a link that downloads malware; or attempt to gather information about your employer. As with any unsolicited outreach, verify the recruiter's identity independently before clicking links, sharing personal information, or following investment advice.\n\nChecks that take two minutes: does the recruiter's company have a real website, a registration you can find, and other employees whose profiles predate the approach? Does the same face appear elsewhere under a different name in a reverse image search? Is the offer unusually generous for vague requirements, or does the conversation drift toward crypto and trading? Genuine recruiters expect scrutiny and will happily move to a verifiable company email or a scheduled video call; evasion on those simple steps is an answer in itself.","redFlags":["Recruiter profile has few connections, a recent join date, or a generic profile photo","Reverse-image search of their photo returns unrelated results","They move communication off LinkedIn quickly — to WhatsApp or email","The job offer requires you to click a link to apply on an unfamiliar site","They mention investment opportunities alongside or instead of the job","The role description is vague, pays unusually well, and requires little explanation"],"whatToDoNow":["Search for the recruiter's employer independently to verify the company exists","Reverse-image-search their profile photo","Apply for jobs through the company's official careers page, not via a recruiter link","Never follow investment advice from someone who reached out to you on LinkedIn","Report suspicious profiles to LinkedIn"],"faq":[{"question":"What if the recruiter has hundreds of connections?","answer":"Connections can be built gradually or bought in bulk. A large connection count reduces but does not eliminate the risk. Verify the employer independently before acting on any offer."},{"question":"Is it safe to click a LinkedIn 'Easy Apply' link from a recruiter message?","answer":"LinkedIn's internal Easy Apply feature applies within the platform and is generally safe. However, if a recruiter directs you to an external link to apply, verify the destination URL carefully before entering personal details."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-too-cheap-rental-that-wants-a-deposit-before-viewing-a-scam","url":"https://scamencyclopedia.org/questions/is-a-too-cheap-rental-that-wants-a-deposit-before-viewing-a-scam","question":"Is a rental that's much cheaper than others and wants a deposit before viewing a scam?","shortAnswer":"Almost certainly. An unusually cheap rental combined with a request for deposit before viewing is the clearest pattern of rental fraud.","explanation":"Rental scams advertise properties at prices noticeably below the local market to generate quick interest. The low price creates urgency — 'at this rate it won't last' — and an upfront deposit is requested to 'hold' the property or prove you are a serious tenant. The landlord always has an explanation for why a viewing isn't immediately possible.\n\nThe property often exists but is listed without the real owner's knowledge, or the photos are taken from a legitimate listing elsewhere. Once the deposit is paid, the scammer delays, invents more fees, or disappears entirely. Never pay a deposit, holding fee, or advance rent for a property you haven't visited in person and confirmed is genuinely available.\n\nDeposits paid by bank transfer to an individual you have never met carry none of the protections of a formal tenancy process. In many markets, legitimate agents and landlords use referencing checks and deposit-protection arrangements that exist specifically to make this moment safe; a 'landlord' who wants speed, secrecy, and an untraceable payment is opting out of every one of them.","redFlags":["Rent is noticeably lower than comparable properties in the area","Deposit or holding fee required before a viewing can be arranged","Landlord is overseas or has an explanation for why a viewing is delayed","Payment requested by wire transfer, cash app, or gift cards","Photos reverse-image-searched appear on multiple other listings or property sites","Pressure to pay quickly before another applicant takes it","No verifiable link between the landlord and the property"],"whatToDoNow":["Never pay any money before visiting the property in person","Reverse-image-search the listing photos","Verify the landlord's ownership through land registry records where available","Report the listing to the platform and your national fraud service","If you already paid, contact your bank immediately"],"faq":[{"question":"What if the landlord offers a virtual or video tour instead of a physical viewing?","answer":"A video doesn't confirm the landlord has access to the property or that it's available to rent. Only a physical visit where you meet someone with legitimate access counts as verification."},{"question":"Can I find cheaper rentals legitimately?","answer":"Yes, but genuine bargains below market rate are rare and rarely require urgency. If the price is a significant outlier and pressure is applied, treat it with caution regardless of how professional the listing appears."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-your-account-will-be-closed-bank-text-real","url":"https://scamencyclopedia.org/questions/is-a-your-account-will-be-closed-bank-text-real","question":"Is a 'your account will be closed' bank text real?","shortAnswer":"Treat it with caution. These texts are a common phishing method — verify by calling your bank directly using the number on your card, not a number in the text.","explanation":"Texts claiming your account will be suspended or closed unless you verify your details or click a link are a widely-used phishing technique. The urgency is designed to make you act before thinking critically. The link typically leads to a convincing fake banking login page that captures your username, password, and possibly a one-time code.\n\nYour real bank will contact you if there is a genuine problem with your account, but will not ask you to click a link in a text to resolve it. If you receive such a message and are genuinely concerned, call your bank using the number on the back of your debit or credit card — not any number provided in the text.\n\nTwo details make these texts unusually effective: sender-ID spoofing can make the message appear in the same thread as genuine bank texts, and modern fake login pages can relay your one-time passcode to the real site in real time — so even 'entering a code' proves nothing about a page's legitimacy. The channel rule is what protects you: banks resolve account problems inside the app and through the number on your card, not through links in messages.","redFlags":["Text threatens account closure or suspension unless you act immediately","Link in the text goes to a domain that isn't your bank's official address","Request to enter your full login credentials, card number, or one-time code via a link","Urgency — 'act within 24 hours to avoid closure'","Sender number is unusual or appears as a long string rather than a short code","The message mentions your bank but contains spelling errors or unusual phrasing"],"whatToDoNow":["Do not click the link or enter any details","Call your bank directly using the number on your card to verify whether there is a real issue","If you already entered your credentials, call your bank immediately and change your password","Forward the text to your bank's fraud team and to 7726","Report to your national fraud service"],"faq":[{"question":"What if the text arrives in the same thread as genuine bank messages?","answer":"SMS sender names can be spoofed, so scam messages can appear in the same thread as real ones. This does not confirm the message is from your bank. Call the number on your card to verify."},{"question":"If I clicked but didn't enter anything, am I safe?","answer":"Possibly. Some phishing pages install tracking or attempt drive-by downloads on vulnerable browsers. Run a security scan and monitor your accounts as a precaution."}],"lastReviewed":"2026-08-01"},{"slug":"can-someone-steal-my-money-with-just-my-phone-number","url":"https://scamencyclopedia.org/questions/can-someone-steal-my-money-with-just-my-phone-number","question":"Can someone steal my money with just my phone number?","shortAnswer":"Not directly — but your phone number is a starting point for SIM-swap attacks, phishing calls, and account-takeover attempts that can lead to financial loss.","explanation":"Your phone number alone does not give anyone access to your bank account. However, it enables several attack routes. Scammers can use it to attempt a SIM swap, transferring your number to their SIM so they can intercept the authentication codes your bank sends by text. They can also use it to call you in targeted vishing (voice phishing) attacks, or to send convincing smishing messages.\n\nCombined with other details — available from data breaches or social media — a phone number becomes a powerful tool for impersonation and account takeover. Reduce your exposure by using an authenticator app rather than SMS for two-factor authentication, limiting who you share your number with, and being cautious of unsolicited calls.\n\nThe number is best understood as an index key: on its own it moves no money, but it links together everything else an attacker can find about you and gives them a channel to reach you. That is why the practical defences are about de-linking — an authenticator app instead of SMS codes, a PIN or port-freeze on your carrier account against SIM swaps, and scepticism toward any inbound call or text, however much it appears to know about you.","redFlags":["Unsolicited calls or texts from people who know your name and seem to know your situation","Your phone suddenly loses all signal unexpectedly (possible SIM swap)","Login alerts or password-reset codes arriving without your request","Texts claiming to verify accounts you didn't try to access"],"whatToDoNow":["Switch two-factor authentication from SMS to an authenticator app where possible","Ask your mobile carrier to add a PIN or verbal password to prevent unauthorised SIM changes","Avoid listing your phone number publicly on social media","If your phone loses signal unexpectedly, contact your carrier immediately","Report suspicious calls or texts to your national fraud service"],"faq":[{"question":"Is it worth setting up a carrier PIN?","answer":"Yes. Adding a PIN or passphrase to your mobile account makes it harder for someone to impersonate you to your carrier and request a SIM transfer."},{"question":"My number was in a data breach. What should I do?","answer":"Stay alert for targeted scam calls and texts, consider switching to an authenticator app for 2FA on important accounts, and monitor your accounts for unexpected activity."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-investment-group-on-telegram-or-whatsapp-legitimate","url":"https://scamencyclopedia.org/questions/is-an-investment-group-on-telegram-or-whatsapp-legitimate","question":"Is an investment group on Telegram or WhatsApp legitimate?","shortAnswer":"Approach with serious caution. Unsolicited invitations to investment groups on messaging apps are one of the most common routes into investment and pig-butchering fraud.","explanation":"Investment groups on Telegram and WhatsApp range from legitimate communities sharing market information to highly organised fraud operations. The fraudulent kind — often called 'pump and dump' groups, fake 'VIP signal' channels, or pig-butchering operations — create the appearance of a successful community with fake members posting fake profits. New members are gradually encouraged to invest more.\n\nIf you were invited by a stranger, a recent online acquaintance, or through a dating or social platform, the risk is very high. Legitimate investment communities don't operate by adding you without consent, and they don't manage your funds or direct you to specific platforms. If a group is encouraging you to deposit money into a particular website, treat it as a scam until proven otherwise by independent verification.\n\nScreenshots of profits, gratitude messages from 'members', and even the group's size are all manufactured — operators run many accounts per group, and you may be one of only a handful of real people present. The 'analyst' or 'mentor' who directs you to a specific platform completes the trap, because the platform is the scam: deposits show up as balances on a dashboard the operators control, and withdrawal requests are where the 'taxes' and 'fees' begin.","redFlags":["Added to the group without your consent or by a stranger","Members regularly post impressive-looking profit screenshots","A 'mentor' or 'analyst' privately messages you with exclusive tips","You are directed to deposit on a specific platform not listed with regulators","Early small withdrawals are allowed but larger ones require fees","Pressure to invest more to 'not miss the next big move'"],"whatToDoNow":["Leave the group and do not follow its investment recommendations","Do not deposit on any platform recommended exclusively through a messaging group","Check any mentioned platforms against your financial regulator's register","If you already deposited, stop and do not pay additional 'withdrawal fees'","Report the group to Telegram/WhatsApp and your national fraud service"],"faq":[{"question":"The group has thousands of members — doesn't that mean it's real?","answer":"Fake accounts can be created in bulk or purchased to inflate group membership. A high member count is not evidence of legitimacy."},{"question":"What if I've already made a small profit from the group's tips?","answer":"Early, small profits are a deliberate tactic to build trust before asking for larger deposits. This is a classic pattern in pump-and-dump and pig-butchering operations."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-charity-street-collector-legitimate","url":"https://scamencyclopedia.org/questions/is-a-charity-street-collector-legitimate","question":"Is a charity street collector legitimate?","shortAnswer":"They may be, but it is worth checking. Fraudulent collectors exist alongside legitimate ones — verifying the charity before donating protects you and your money.","explanation":"In many countries, authorised street fundraisers working on behalf of registered charities are required to carry identification and be able to direct you to the charity's official registration. However, fraudulent collectors also operate, particularly around busy areas or after high-profile disasters, using collection tins or card readers with unofficial charity names or convincing branding.\n\nYou have no obligation to donate on the spot. A legitimate charity will be registered and verifiable. If you want to give, it is safer to donate directly through the charity's official website, which also ensures your payment reaches the organisation without a commission being taken by a third-party agency.\n\nIf you do want to give on the spot, a moment of verification is reasonable and any genuine fundraiser will expect it: ask to see their ID badge, note the charity's registered name and number, and check it against your country's charity register later. Be most careful in the wake of disasters, when improvised collections multiply and generosity is at its least guarded — timing that fraudulent collectors deliberately exploit.","redFlags":["Collector is unable or unwilling to show identification or a permit","Charity name is very similar to a well-known organisation but slightly different","Requests for cash and no official receipt is offered","High pressure — collector follows you or blocks your path","Collection appears immediately after a major news event but the charity cannot be traced","Card reader provided with no official organisation name or registered number"],"whatToDoNow":["Ask to see the collector's identification and charity permit","Check the charity's registration number against your country's official charity register","Consider donating directly through the charity's verified website instead","Report suspicious collectors to the local authority or charity regulator","Do not feel pressured to donate on the spot if anything seems wrong"],"faq":[{"question":"Are all street collectors fraudulent?","answer":"No. Many are legitimate fundraisers for registered charities. Checking identification and the charity's registration number takes seconds and confirms you are donating to a real cause."},{"question":"What is the safest way to donate to charity?","answer":"Go directly to the charity's verified official website and donate through its secure payment page. This guarantees your money reaches the organisation and often allows you to track the donation."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-winning-lottery-letter-for-a-lottery-i-didnt-enter-real","url":"https://scamencyclopedia.org/questions/is-a-winning-lottery-letter-for-a-lottery-i-didnt-enter-real","question":"Is a winning lottery letter for a lottery I didn't enter real?","shortAnswer":"No. You cannot win a lottery you didn't enter. Letters, emails, or calls claiming otherwise are prize-notification scams designed to collect fees or your personal details.","explanation":"Prize-notification scams arrive by post, email, text, or phone and inform you that you have won a large cash prize, car, or holiday in a lottery or sweepstake you have no memory of entering. To claim, you are asked to pay taxes, legal fees, or administration costs upfront — or to provide your bank details for 'transfer processing'.\n\nThe prize does not exist. Every payment made produces another invented fee, and the process continues until you stop engaging. In addition to financial loss, providing personal details can lead to identity theft. No legitimate lottery requires winners to pay fees before receiving a prize, and all genuine lotteries require you to have purchased a ticket.\n\nPostal versions often arrive with official-looking seals, cheque-like enclosures, and a named 'claims agent' with a phone number — production values that cost little and prove nothing. Some enclose a small 'advance cheque' to deposit, which later bounces after you have wired the 'fees' back. The letter's demand for confidentiality ('do not discuss your win') is not etiquette; it is insulation against the friend or bank teller who would recognise the scam instantly.","redFlags":["You are told you have won a lottery or sweepstake you didn't enter","Upfront fee required to release your winnings","Request for banking details to 'transfer' the prize","Urgency — 'claim within 72 hours or forfeit the prize'","Notice arrives by email, text, or social media rather than through the official lottery","Lottery or organisation name cannot be independently verified"],"whatToDoNow":["Do not pay any fee or provide banking details","Verify any named organisation through official registries independently","Report the notice to your national fraud service and delete or discard it","Block and report the sender","If you already paid, contact your bank and report the fraud"],"faq":[{"question":"Could I have been entered into a lottery without knowing?","answer":"Some promotional sweepstakes enter participants automatically when they use a product or service. However, legitimate wins are communicated through official channels and never require upfront fees to claim a prize."},{"question":"The letter looks very official and uses a real organisation's name. How do I verify?","answer":"Contact the named organisation directly using a phone number or email from its official website — not from the letter. Any genuine prize will be verifiable through that channel."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-package-undeliverable-text-from-usps-real","url":"https://scamencyclopedia.org/questions/is-a-package-undeliverable-text-from-usps-real","question":"Is a 'package undeliverable' text from USPS real?","shortAnswer":"Treat it as suspicious. Fake 'undeliverable package' texts are among the most common smishing scams — verify only through USPS's official website.","explanation":"Fraudulent texts impersonating USPS, Royal Mail, FedEx, UPS, and other carriers claim a delivery attempt failed and that you need to click a link to reschedule or pay a redelivery fee. The link leads to a convincing fake website that captures your card details, personal information, or login credentials.\n\nGenuine missed-delivery notices from carriers are typically left as physical cards at your door or available through the carrier's official app or website. They do not ask for card payments via a text link for redelivery. If you are expecting a parcel, go directly to the carrier's official website and enter your tracking number to check its status — never via a link sent in an unsolicited text.\n\nIf you receive several of these texts in a week, that is bulk targeting, not persistence about a real parcel — carriers reference a specific, checkable tracking number, while scam texts stay vague or invent one that fails on the official site. Report the message through your carrier's spam-reporting channel and delete it; if you clicked and entered details, contact your bank now rather than waiting for a charge to appear.","redFlags":["Unexpected 'failed delivery' text about a parcel you weren't expecting","Link goes to a domain that doesn't match the carrier's official website","Small fee required to reschedule delivery — designed to seem plausible","Urgency — 'parcel returned to sender after 24 hours'","No tracking number provided, or it doesn't match the carrier's records","Text asks for card details including CVV or billing address"],"whatToDoNow":["Do not click the link or enter any payment or personal details","Go directly to the carrier's official website and check your tracking number","Forward the text to 7726 to report it to your mobile provider","Report the scam to your national fraud service","If you already entered card details, call your bank immediately"],"faq":[{"question":"I am expecting a package from USPS — could the text still be fake?","answer":"Yes. Scammers send these in large volumes knowing many recipients will be expecting something. Even if you are expecting a parcel, verify only through the USPS website directly using your tracking number."},{"question":"What does the official USPS website address look like?","answer":"The official US Postal Service website is usps.com. Any text link going to a different domain — even one with 'usps' in the URL — should be treated with caution."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-mystery-shopper-job-a-scam","url":"https://scamencyclopedia.org/questions/is-a-mystery-shopper-job-a-scam","question":"Is a mystery shopper job a scam?","shortAnswer":"Many mystery-shopper offers circulating by email or social media are scams. Genuine mystery-shopping exists but never requires you to send money or wire a portion of your pay.","explanation":"Legitimate mystery shopping involves visiting a store, evaluating service, and filing a report — you are paid a modest fee and any approved expenses afterwards, through a reputable agency. Scam mystery-shopper jobs arrive unsolicited by email or text and almost always include a cheque as an 'advance' that you are instructed to use to buy gift cards, wire funds, or test a money-transfer service, then forward most of it to a third party while keeping a commission.\n\nThe cheque bounces days later, leaving you liable for all the money you sent. The gift-card version follows the same pattern: you buy the cards, share the codes, and the scammer redeems them before the fraud is discovered. A real mystery-shopping assignment never requires you to send money or purchase gift cards on behalf of your employer.\n\nThe 'evaluate a money-transfer service' assignment deserves special mention because the wire is the entire scam — you are not testing the service, you are moving your own soon-to-be-lost money. Real agencies pay modest fees after the work, never send large advances, and can be checked through mystery-shopping industry associations before you accept anything.","redFlags":["Unsolicited email or text offering mystery-shopper work","A cheque arrives before you have done any work","You are instructed to buy gift cards or wire money and keep only a small commission","The task specifically involves testing a money-transfer or cryptocurrency service","Employer cannot be verified through established mystery-shopping associations","Urgency — complete the task today and report back immediately","Instructions to keep the assignment confidential"],"whatToDoNow":["Do not deposit the cheque or forward any funds","Do not purchase gift cards at an employer's instruction","Verify any mystery-shopping company through industry associations (MSPA Americas, MSPA Europe)","Report the offer to your national fraud service","If you already forwarded money, contact your bank immediately"],"faq":[{"question":"Are all mystery-shopper jobs fake?","answer":"No. Legitimate mystery shopping exists and is organised through registered agencies. The key difference is that genuine assignments never involve handling or forwarding money — you evaluate service, not process payments."},{"question":"The cheque cleared in my account. Is it safe to use?","answer":"No. Banks often make funds available before a cheque fully clears. A cheque that appears to clear can still be reversed days later, leaving you responsible for any money you spent or forwarded."},{"question":"How do I find legitimate mystery-shopping work?","answer":"Look for companies registered with recognised industry associations such as MSPA Americas or MSPA Europe. Legitimate agencies post assignments through their own platforms — they do not recruit by unsolicited email with an advance cheque."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-we-tried-to-deliver-your-package-voicemail-real","url":"https://scamencyclopedia.org/questions/is-a-we-tried-to-deliver-your-package-voicemail-real","question":"Is a 'we tried to deliver your package' voicemail real?","shortAnswer":"Treat it with caution. Unsolicited voicemails about a missed delivery — especially ones that ask you to call back or pay a fee — are frequently smishing or vishing scams.","explanation":"Fraudsters leave automated or recorded voicemails claiming that a delivery attempt failed and that you must call back a number or visit a link to reschedule or pay a redelivery fee. The callback number connects to scammers, not a real carrier, and may lead to requests for card details, personal information, or remote access to your device.\n\nLegitimate couriers do leave missed-delivery notifications, but genuine ones typically leave a physical card at your door or use the carrier's own app and official website to show delivery status. A voicemail that only provides a phone number to call — with no tracking number you can independently verify — is a significant red flag. If you are expecting a parcel, go directly to the carrier's official website and enter your tracking number to confirm its status. Never call back a number from a voicemail you didn't initiate.\n\nCallback numbers in these campaigns rotate constantly, so a number that searches clean online is not evidence of legitimacy — verify the parcel, not the phone number.","redFlags":["Voicemail about a delivery you weren't expecting","The only action required is to call back a number or click a link","No tracking number provided, or the number doesn't match the carrier's records","Urgency — 'your parcel will be returned within 24 hours'","The callback number is a premium-rate or unusual number","Voicemail is automated or robocalled with no carrier branding"],"whatToDoNow":["Do not call back the number in the voicemail","Go directly to the carrier's official website and check your tracking number","If you were expecting a parcel, check your front door for a physical delivery card","Report the number to your national fraud service","If you called back and gave card or personal details, contact your bank immediately"],"faq":[{"question":"The voicemail mentioned a specific carrier I use. Could it be genuine?","answer":"Carrier names are easy to include in a script. Verify by going to the carrier's official website directly and checking your tracking number — not by calling the number in the voicemail."},{"question":"Is calling back a voicemail number always risky?","answer":"Calling back an unverified number from an unsolicited voicemail can connect you to a scammer. Look up the carrier's official number independently before calling anyone about a parcel."},{"question":"What if the voicemail includes the last four digits of my address?","answer":"Partial address or postcode details can be obtained from data breaches or public records. Knowing some of your details doesn't confirm the caller is genuine."}],"lastReviewed":"2026-08-01"},{"slug":"can-a-scammer-use-my-stolen-id-to-open-accounts","url":"https://scamencyclopedia.org/questions/can-a-scammer-use-my-stolen-id-to-open-accounts","question":"Can a scammer use my stolen ID to open accounts?","shortAnswer":"Yes. Identity documents in the wrong hands can be used to open bank accounts, take loans, or apply for credit in your name — sometimes months after the theft.","explanation":"If a scammer has obtained your identity documents — whether through a data breach, a fake job application, a romance scam, or physical theft — they may attempt to open financial accounts, take out loans, apply for credit cards, or register mobile phone contracts in your name. This type of identity fraud can appear on your credit file without you ever noticing until a lender contacts you about a debt.\n\nActing quickly limits the damage. Placing a fraud alert or credit freeze with the main credit reference agencies means lenders must take extra steps before opening new accounts in your name. Keeping an eye on your credit report regularly — many services now offer free monitoring — lets you spot unexpected entries early. If your documents were used in a specific scam, report it to your national identity-fraud service and provide as much detail as possible to create a formal record.","redFlags":["You sent ID images during a 'job application', 'verification', or 'investment'","A request for your ID came before the other party provided any verifiable details about themselves","Unexpected credit searches appearing on your credit file","Bills, letters, or collection notices for accounts you didn't open","Lenders or debt agencies contacting you about debts you don't recognise"],"whatToDoNow":["Place a fraud alert or credit freeze with your national credit reference agencies","Check your credit report for unexpected accounts or searches","Tell your bank that your identity documents may have been compromised","Report the theft to your national fraud or identity-theft service","Consider replacing the compromised document through official channels"],"faq":[{"question":"How quickly could a scammer use my ID?","answer":"Misuse can happen within days or may not occur for months. Scammers sometimes sell identity data in batches, which means your details can be used long after the original theft."},{"question":"Does replacing my passport or driving licence stop the misuse?","answer":"Replacement helps because the old document number becomes invalid, but the personal information — name, date of birth, address — remains the same. A credit freeze provides ongoing protection regardless."},{"question":"What is a fraud alert and how does it help?","answer":"A fraud alert placed with credit reference agencies flags your file so that lenders must take additional steps to verify your identity before opening new credit in your name. In many countries this is free to set up."}],"lastReviewed":"2026-06-01"},{"slug":"is-a-whatsapp-message-from-my-boss-asking-for-gift-cards-a-scam","url":"https://scamencyclopedia.org/questions/is-a-whatsapp-message-from-my-boss-asking-for-gift-cards-a-scam","question":"Is a WhatsApp message from my 'boss' asking for gift cards a scam?","shortAnswer":"Almost certainly. This is the CEO or boss impersonation scam — a scammer pretends to be your manager and asks you to buy gift cards on their behalf.","explanation":"In boss-impersonation fraud, a scammer creates a WhatsApp profile with your manager's name and photo — often copied from LinkedIn or a company website — and messages you claiming they are tied up in a meeting or overseas and urgently need you to purchase gift cards (often iTunes, Google Play, or Amazon) and send the codes. They promise to reimburse you later.\n\nThe scenario is designed to exploit workplace dynamics where employees feel uncomfortable questioning a senior colleague. The request is always urgent and confidential. No legitimate manager asks employees to buy gift cards as a business expense via a personal messaging app — this is always a scam. If you receive such a message, verify by calling or emailing your actual manager through a channel you know is genuine.\n\nThe scam scales through publicly available staff information: new joiners are favourite targets because they are eager to help and least likely to know how their manager actually communicates. Checking is not insubordination — any real manager would far rather field a confirming call than discover an employee out of pocket. If codes have already been sent, tell your employer and your bank at once, and report the cards to the issuing retailer; unredeemed balances can sometimes be frozen.","redFlags":["Unexpected WhatsApp message from someone claiming to be your manager","Request to buy gift cards urgently and send the codes","Instruction to keep the request confidential","Manager claims to be unavailable by normal channels — in a meeting, abroad, or on a call","The phone number is different from the one you have on file for your manager","Pressure to act before verifying — 'I need this in the next 30 minutes'"],"whatToDoNow":["Do not buy any gift cards","Call or email your actual manager through a channel you already have — not through WhatsApp","Report the impersonation to your company's IT or security team","Report the fake profile to WhatsApp","If you already bought cards and shared codes, report it to your national fraud service immediately"],"faq":[{"question":"My manager does sometimes message me on WhatsApp. How can I tell if it's really them?","answer":"Check the phone number against the one you already have saved. If it's different, or if the request is unusual — especially involving gift cards or secrecy — call your manager on the number you know to verify before doing anything."},{"question":"What if I've already shared the gift card codes?","answer":"Report to your national fraud service and to your employer immediately. The codes will likely have been redeemed already, but reporting creates a record and may help if the scam is part of a larger pattern."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-job-interview-conducted-only-over-telegram-a-scam","url":"https://scamencyclopedia.org/questions/is-a-job-interview-conducted-only-over-telegram-a-scam","question":"Is a job interview conducted only over Telegram a scam?","shortAnswer":"It is a strong red flag. Legitimate employers use professional platforms or phone for interviews — Telegram-only hiring processes are associated with job and task scams.","explanation":"Legitimate companies conduct job interviews by phone, video call (Teams, Zoom, Google Meet), or in person. Conducting an entire interview and hiring process exclusively through Telegram — a messaging app not designed for professional use — is unusual and frequently associated with scam operations.\n\nCommon patterns include fake job ads on job boards or social media that direct applicants to Telegram, where the 'interview' is a brief text exchange, followed by an immediate 'job offer'. Victims are then asked to pay fees, buy equipment, provide ID documents, or receive and forward money — all signs of fee scams, task scams, or money-mule recruitment.\n\nBefore engaging with any Telegram-based employer, verify the company independently through official channels such as company registration databases, their official website (not the link they provided), or professional networks.\n\nThe channel choice is strategic: Telegram offers anonymity, easy account disposal, and none of the identity friction of a corporate video call — everything a fake employer needs and a real one doesn't. A legitimate company will always survive the request to speak on a video platform or through an official company email address; a scam never does.","redFlags":["The entire interview and onboarding process happens only on Telegram","Job offer is made after a very brief text exchange","You are asked to pay fees, buy equipment, or provide ID before starting","The company cannot be verified through independent official sources","The role sounds unusually well-paid for minimal qualifications","You are asked to receive and forward money as part of the job"],"whatToDoNow":["Verify the employer through official company registration records and their verified website","Refuse any request to pay fees, buy equipment, or share ID before starting work","Do not receive or forward money on behalf of an unverified employer","Report the contact to the job board and your national fraud service","If you already shared personal details, monitor your accounts for unusual activity"],"faq":[{"question":"Are there any legitimate employers who use Telegram?","answer":"Some informal or international businesses may use it for general communication, but no legitimate employer conducts its entire hiring process — including the interview — solely through Telegram with no other verifiable contact."},{"question":"What if the job offer includes a contract document?","answer":"Scam contracts can be created easily. A document does not verify the employer is real. Check the company independently through official registration records before signing or sharing any personal information."}],"lastReviewed":"2026-08-01"},{"slug":"can-i-get-scammed-by-answering-yes-on-a-phone-call","url":"https://scamencyclopedia.org/questions/can-i-get-scammed-by-answering-yes-on-a-phone-call","question":"Can I get scammed by answering 'yes' on a phone call?","shortAnswer":"Saying 'yes' alone is unlikely to authorise a transaction, but scammers may record your voice to use in fraudulent 'voice signature' claims — it is safer to hang up on suspicious calls.","explanation":"A long-running concern is that answering 'yes' to a robocall question — such as 'Can you hear me?' — could be used as a recorded voice authorisation for a purchase or contract. In practice, a voice recording alone is rarely sufficient authorisation under consumer-protection law in most countries, and financial institutions require far more than a single word before processing a transaction.\n\nHowever, the underlying concern is not entirely without basis: recorded responses can be edited or misrepresented. More importantly, engaging with a suspicious robocall at all — pressing buttons, speaking, or staying on the line — can confirm that your number is live and increase the volume of scam calls you receive. The safest approach is to hang up on any unsolicited robocall rather than engaging, regardless of the question asked.\n\nThe bigger risk of these calls is downstream: your response is logged, your number is flagged as answered-by-a-human, and the list is resold — so the calls multiply. If your phone or carrier offers call-screening or spam-filtering tools, enable them; and treat any robocall that opens with a question designed to elicit an immediate answer as a call to end, not a puzzle to solve.","redFlags":["Robocall opens with 'Can you hear me?' or similar leading question","Caller encourages you to say 'yes' or give a verbal confirmation","Call is from an unknown or spoofed number","No clear purpose or organisation identified at the start of the call","You are asked to confirm personal details to 'verify' your identity"],"whatToDoNow":["Hang up on unsolicited robocalls rather than engaging","Do not press any buttons or say anything on a suspicious robocall","Register with your national telephone preference or do-not-call service","Report persistent numbers to your telecommunications regulator","If you believe you were recorded and a fraudulent charge appears, contest it with your bank"],"faq":[{"question":"Has anyone actually been billed because they said 'yes' on a call?","answer":"There have been reports of scammers using recorded responses in disputes with carriers or to claim verbal consent. However, robust consumer protections mean that a recorded 'yes' alone is rarely upheld as authorisation for a charge. Contest any such charge with your bank immediately."},{"question":"Is it safer to say 'no' instead of hanging up?","answer":"Hanging up is better than engaging at all. Any response — yes or no — confirms your number is active, which can lead to more calls."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-your-parcel-has-a-customs-fee-email-real","url":"https://scamencyclopedia.org/questions/is-a-your-parcel-has-a-customs-fee-email-real","question":"Is a 'your parcel has a customs fee' email real?","shortAnswer":"Treat it with caution. Customs-fee phishing emails are extremely common — verify any duty claim only through the official carrier or customs authority website.","explanation":"Emails claiming that an international parcel is being held and requires a customs or import duty payment before release are one of the most widely circulated phishing formats. They typically include a link to a convincing fake payment page that captures your card details or personal information.\n\nGenuine customs duty notices are issued by official agencies or carriers and generally arrive by post or through the carrier's verified app and website. While genuine import fees do exist, the key signal is the payment method: a legitimate duty notice will direct you to the carrier's or customs authority's own verified site — not to a link in an email. If you are expecting an international parcel, check your order confirmation for tracking details and verify the status directly on the carrier's official website.\n\nChecking takes less time than worrying: your order confirmation holds the tracking number, and the carrier's own site will show any genuine hold, fee, or customs status against it. A real fee will still be there after you verify; a fake one exists only inside the email's link.","redFlags":["Unexpected email about a customs fee for a parcel you are unsure about","Link in the email goes to a domain that isn't the official carrier or customs authority","Small fee requested — typically under £5 or $10 — designed to seem routine","Urgency such as 'parcel will be returned or destroyed if unpaid within 48 hours'","No tracking number, or one that doesn't appear on the carrier's official site","Email asks for full card details including the CVV"],"whatToDoNow":["Do not click the link or enter any payment details","Go directly to the carrier's official website and check your tracking number","Contact the carrier's official customer service if you genuinely expect a parcel","Report the email as phishing to your email provider","If you entered card details, call your bank immediately"],"faq":[{"question":"I am definitely expecting an international parcel. Could the email be genuine?","answer":"Even so, verify only through the carrier's official website using the tracking number from your order confirmation. Do not pay through a link in an email."},{"question":"How do genuine customs fees get communicated?","answer":"Official notices usually arrive by post, or through the carrier's own app or verified website. Some carriers do send emails, but they will direct you to their own domain — which you should type directly rather than clicking a link."}],"lastReviewed":"2026-08-01"},{"slug":"should-i-trust-a-check-sent-before-i-start-a-job","url":"https://scamencyclopedia.org/questions/should-i-trust-a-check-sent-before-i-start-a-job","question":"Should I trust a cheque sent before I start a job?","shortAnswer":"No. A cheque arriving before you have done any work is a classic sign of an overpayment or advance-fee job scam — do not deposit it or spend the funds.","explanation":"Receiving a cheque before starting a job is a hallmark of overpayment fraud. The cheque is typically for more than your agreed pay, and you are asked to forward the excess to a third party — a 'supplier', 'training provider', or 'equipment vendor'. Banks often make funds provisionally available before a cheque fully clears, so it appears to have gone through. Days later it bounces, and you are liable for all the money you forwarded.\n\nLegitimate employers pay after work is completed, through payroll, and through verifiable company processes. No genuine employer sends money before your first day and asks you to forward a portion elsewhere. If a cheque arrives in connection with a job you found through an unsolicited message, a low-effort online ad, or a role that requires little skill, treat it as fraudulent until proven otherwise — and speak to your bank before depositing it.\n\nIf the cheque has already been deposited, tell your bank before spending anything from it — that conversation is far easier at that point than after the money has been forwarded.","redFlags":["Cheque arrives before you have started or done any work","Cheque amount is higher than your agreed pay","You are asked to forward the excess to a third party","Job was found through an unsolicited message or vague online ad","Employer cannot be independently verified","Urgency to deposit and forward the money quickly"],"whatToDoNow":["Do not deposit the cheque without speaking to your bank first","Do not forward any portion of the funds to anyone","Verify the employer independently through official company records","Report the job offer to the platform and your national fraud service","If you have already forwarded money, contact your bank immediately"],"faq":[{"question":"The cheque showed as cleared in my account. Is it safe now?","answer":"No. Banks provisionally credit funds before a cheque fully clears through the banking system. The cheque can still be returned several days later, and you will be responsible for any money you already spent or forwarded."},{"question":"What if the employer says the extra money is for equipment I need to buy?","answer":"This is the equipment variant of the same scam. A genuine employer will not send money for equipment through a personal cheque and ask you to purchase through a specific supplier. Stop and report it."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-crypto-recovery-group-on-telegram-legitimate","url":"https://scamencyclopedia.org/questions/is-a-crypto-recovery-group-on-telegram-legitimate","question":"Is a crypto 'recovery group' on Telegram legitimate?","shortAnswer":"No. Telegram groups offering to recover lost cryptocurrency are almost always a second scam targeting people who have already been defrauded.","explanation":"After losing money to a crypto scam, victims are frequently targeted by 'recovery groups' on Telegram that claim specialist expertise in tracing and retrieving stolen funds. These groups know details of common scams and may even know you were a victim — because lists of scam victims are traded between fraud networks.\n\nThe recovery group will typically ask for an upfront fee, a 'trust deposit', or a percentage of the funds to be recovered. Once paid, further fees appear — taxes, regulatory clearances, network fees — until the victim stops paying. No funds are ever returned because no genuine recovery is taking place. Legitimate help after a crypto loss comes from your exchange, your bank (for the fiat portion), and official fraud services — none of which require upfront fees or contact you through Telegram.\n\nSome groups bolster the illusion with fake 'success stories', screenshots of recovered balances, and shills posing as satisfied clients — the same theatrical machinery that ran the original scam. The moment to be most on guard is right after a loss, when hope is strongest and judgement most stretched; scammers time their approach for exactly that window.","redFlags":["Unsolicited invitation or message from a 'crypto recovery' group or expert","The group or member seems to know details of your specific loss","Upfront fee, deposit, or percentage required before any work begins","Guarantees of full or partial recovery","Claims of special tools, blockchain contacts, or law-enforcement access","Pressure to act quickly before 'the trail goes cold'"],"whatToDoNow":["Do not pay any upfront fee to a recovery group","Report the group to Telegram and your national fraud service","Seek help only from your exchange and official fraud reporting channels","Preserve records of the original scam and the recovery approach","Be cautious about discussing losses publicly where further scammers may find you"],"faq":[{"question":"Is it ever possible to recover stolen crypto?","answer":"Blockchain transactions are generally irreversible. Your exchange may be able to freeze a receiving address in some circumstances, and official fraud services can investigate. However, recovery is rare and no legitimate service guarantees it or charges upfront fees."},{"question":"How did the recovery group know I was scammed?","answer":"Scammers trade and sell lists of known victims, monitor fraud-victim forums and social media, and sometimes operate the original scam and the recovery scam as part of the same network."},{"question":"What if the group shares convincing testimonials and screenshots?","answer":"Testimonials and screenshots are easily fabricated. They are a standard part of the recovery-scam playbook and are not evidence that any funds have ever been retrieved."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-verify-your-account-email-from-my-bank-real","url":"https://scamencyclopedia.org/questions/is-a-verify-your-account-email-from-my-bank-real","question":"Is a 'verify your account' email from my bank real?","shortAnswer":"Treat it with caution. Banks do sometimes send verification emails, but phishing emails that mimic them perfectly are extremely common — always verify through the bank's official app or website.","explanation":"Phishing emails impersonating banks are among the most convincing scam messages circulating. They typically claim your account needs verification due to unusual activity, a security upgrade, or a policy change, and include a link to a page that looks identical to your bank's login portal. Entering your credentials on that page hands them directly to the scammer.\n\nA genuine verification email from your bank will not ask you to enter your full password, PIN, or one-time code via a link. If your bank genuinely needs to verify something, you can almost always complete it by logging in through the official app or website directly — not through the link in the email. When in doubt, call your bank using the number on the back of your card.\n\nHover before you trust: on a computer the real destination of a link shows when you hover over it, and on a phone a long-press previews it — domains that resemble but don't exactly match your bank's are the giveaway. Better still, make it a personal policy never to reach your bank through email links at all; the app and the typed address cover every genuine need.","redFlags":["Email asks you to click a link and log in to 'verify' or 'confirm' your account","Link goes to a domain that doesn't exactly match your bank's official address","Request for your full password, PIN, or one-time code via a web form","Urgency — 'your account will be restricted within 24 hours'","Email address the message came from looks unusual or uses a free provider","Spelling errors or slightly off branding compared to genuine bank communications"],"whatToDoNow":["Do not click the link or enter any credentials","Log in to your bank through its official app or website to check for any genuine alerts","Call your bank using the number on the back of your card if you are concerned","Forward the email to your bank's phishing-report address","If you already entered credentials, call your bank immediately and change your password"],"faq":[{"question":"What if the email appears in the same thread as real bank emails?","answer":"Email sender display names and even sender domains can be spoofed in some cases, and phishing emails can be crafted to appear in existing threads. The safest test is always to go to the bank's website directly, not through the email link."},{"question":"My bank's logo and colours look exactly right. Could it still be fake?","answer":"Logos and branding are publicly available and trivial to copy. Visual accuracy is not a reliable indicator — check the link destination and verify through official channels."}],"lastReviewed":"2026-08-01"},{"slug":"can-a-qr-code-steal-my-information","url":"https://scamencyclopedia.org/questions/can-a-qr-code-steal-my-information","question":"Can a QR code steal my information?","shortAnswer":"A QR code itself doesn't steal data, but it can direct you to a phishing website or prompt a malicious download — the risk lies in what you do after scanning.","explanation":"QR codes are simply machine-readable links. Scanning one is similar to clicking a URL: the code redirects your device to a website, app, or action. A malicious QR code can take you to a phishing page designed to steal login credentials, a fake payment portal that captures your card details, a site that attempts to install malware, or a prompt to download a malicious app.\n\nThe risk is not from scanning alone — it is from interacting with what the code opens. Before tapping or entering any information after scanning, check the URL your phone camera displays. Does it match a known, legitimate domain? If the code was in an unexpected location — a sticker over a printed sign, an unsolicited email, or a social media post — treat the destination with extra caution.\n\nMost phones also preview the destination address before opening it — use that pause. The same judgement you apply to links applies here: a QR code is no more trustworthy than the place you found it, and a printed sticker in a public place is about as anonymous as a message from an unknown number.","redFlags":["QR code arrives in an unsolicited email, text, or social media post","The URL shown after scanning is unfamiliar, misspelled, or uses an unusual domain","The scanned page asks you to log in or enter payment details urgently","QR code sticker appears to be placed over original printed material","Scanning leads to a download prompt you didn't expect"],"whatToDoNow":["Preview the URL your camera shows before opening the scanned page","If the URL looks unfamiliar, do not proceed — close the camera app","Verify the intended destination by typing the official website address directly","Report suspicious QR codes — in emails to your provider, in public to the premises or local authority","If you entered credentials or payment details on a suspicious page, act immediately: change passwords and call your bank"],"faq":[{"question":"Is it safe to scan QR codes at restaurants and shops?","answer":"Generally yes, if the code is printed directly on an official menu or sign with no sticker applied over it. Inspect for stickers, and check the URL matches the business's known domain before entering any details."},{"question":"Can malware be installed just by scanning a code?","answer":"On a fully patched device, scanning alone is very unlikely to install anything. The real risk comes from visiting the resulting page, downloading a file, or entering details there."},{"question":"What is 'quishing'?","answer":"Quishing is phishing carried out through QR codes. It is increasingly used because many email security systems are better at detecting malicious text links than image-based QR codes."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-romance-partner-asking-me-to-receive-and-forward-money-a-scam","url":"https://scamencyclopedia.org/questions/is-a-romance-partner-asking-me-to-receive-and-forward-money-a-scam","question":"Is a romance partner asking me to receive and forward money a scam?","shortAnswer":"Yes. Being asked to receive money and pass it on is money-mule recruitment — it is illegal and you could face criminal liability, regardless of your feelings for the person.","explanation":"A common pattern in romance fraud involves a scammer building a relationship over weeks or months, then asking you to help them with a 'business problem' or 'emergency'. You are asked to receive a transfer into your account and forward it on — minus a small commission — to another person or account. You may be told it is for a business deal, a stranded relative, or a financial complication.\n\nThis is money-mule recruitment. The money being transferred is almost certainly the proceeds of crime — stolen from other fraud victims. By accepting and forwarding it, you are participating in money laundering, which is a serious criminal offence in most countries. Your bank may freeze your account and report you to authorities. Being deceived by a romantic partner is deeply relevant context, but it does not automatically remove legal liability. If this has happened, seek legal advice and speak to your bank honestly about what occurred.","redFlags":["Online romantic partner asks you to receive money and forward it","Explanation involves a business deal, emergency, or complication that prevents direct transfer","You are offered a commission to keep","Requests are framed as a favour or test of trust in the relationship","Partner discourages you from telling family or friends","You have never met this person in person"],"whatToDoNow":["Refuse the request immediately and do not move any money already received","Contact your bank if money has arrived in your account","Report the romance contact to the platform and your national fraud service","Seek independent legal advice if your account has already been used","Tell a trusted person — the emotional manipulation involved can make it hard to act alone"],"faq":[{"question":"I genuinely care about this person. Could they have a legitimate reason?","answer":"Scammers invest heavily in building emotional connection precisely to reach this point. The request itself — receive money and forward it — is the defining signal. A genuine partner does not need you to launder money for them."},{"question":"I already forwarded the money. What should I do?","answer":"Contact your bank immediately and be honest about what happened. Voluntary disclosure and cooperation matter. Seek independent legal advice about your position, and report the romance scam to the relevant fraud service."},{"question":"Will my bank close my account?","answer":"Banks that identify money-mule activity typically freeze accounts and may report to law enforcement. Speaking to your bank proactively about being deceived is important — it shows cooperation and provides important context."}],"lastReviewed":"2026-06-01"},{"slug":"is-a-your-netflix-payment-failed-text-real","url":"https://scamencyclopedia.org/questions/is-a-your-netflix-payment-failed-text-real","question":"Is a 'your Netflix payment failed' text real?","shortAnswer":"Treat it with caution. Fake payment-failed texts impersonating streaming services are a common phishing method — verify only through the official app or website.","explanation":"Phishing texts claiming that your subscription payment has failed — and that your account will be suspended unless you update your details — are sent in large volumes impersonating Netflix, Disney+, Amazon Prime, and similar services. The link in the text leads to a convincing fake login and payment page that collects your credentials and card information.\n\nGenuine services do send payment-failure notifications, but they will not resolve the issue through a link in an unsolicited text. If you are concerned about your subscription, open the official app or go to the service's website by typing the address directly — not through the text link — and check your account and payment settings there. Look out for the URL in the text: a domain that is not exactly the service's official address is a strong tell.\n\nSubscription phishing thrives on volume and coincidence — send enough messages and some will land on a day a real payment issue exists. That coincidence is not confirmation. The service's own app knows the truth about your account; the text does not.","redFlags":["Unexpected text claiming your streaming subscription payment failed","Link in the text goes to a domain that isn't the official service address","Urgency — 'update your details within 24 hours to avoid cancellation'","Page asks for your full card number, expiry, and CVV","Sender number is unusual or not a short-code associated with the real service","Text arrives at a time you have no reason to expect a billing issue"],"whatToDoNow":["Do not click the link or enter any details","Open the official app or go to the service's website directly to check your account","If a genuine payment problem exists, update your card details there — not via the text","Forward the text to 7726 and report it to your national fraud service","If you already entered card details, call your bank immediately"],"faq":[{"question":"I do have a Netflix subscription. Could this be a real notification?","answer":"Netflix and similar services do send payment alerts, but they direct you to their own verified app or website — not to a link in an SMS. Check your account directly to see whether there is a real issue."},{"question":"What if the link in the text shows 'netflix' in the URL?","answer":"Scammers include brand names in subdomain or path strings — for example, 'netflix.billing-update.com' — which are not the official domain. The official Netflix website is netflix.com. If anything comes before 'netflix.com' in the main domain, treat it as fraudulent."}],"lastReviewed":"2026-08-01"},{"slug":"can-scammers-fake-my-banks-phone-number","url":"https://scamencyclopedia.org/questions/can-scammers-fake-my-banks-phone-number","question":"Can scammers fake my bank's phone number?","shortAnswer":"Yes. Caller ID spoofing lets scammers display any number they choose, including your bank's official number.","explanation":"Caller ID spoofing is a technique that replaces the real originating number with a number of the caller's choice. Fraudsters use cheap online tools to make their call appear to come from your bank, the police, or any trusted institution. Because the number looks legitimate, victims often assume the call is safe. The only way to be certain is to hang up and dial the number printed on the back of your card — using a different phone or after waiting several minutes, since some landline scammers hold the line open. Your bank will never be offended if you hang up and call back; legitimate staff expect it.\n\nSpoofing matters because it inverts the trust most people place in their phone: the display is an unauthenticated label chosen by the caller, while everything else that makes a call feel real — a confident manner, personal details from data breaches, background call-centre noise — can be assembled cheaply. That is why banks build their processes around what they will never ask for: full passwords, PINs, complete one-time passcodes, or transfers to 'safe accounts'. Any caller who wants one of those has told you what they are, whatever number is on the screen.","redFlags":["Call appears to come from the number printed on your bank card","Caller knows some of your personal details and uses them to build trust","Urgency, secrecy, or pressure to act without verifying","Request to transfer money, share a one-time passcode, or install an app","Reluctance to let you hang up and call back"],"whatToDoNow":["Hang up immediately","Wait a few minutes or use a different phone, then call your bank on the number from your card","Never share a one-time passcode or PIN in response to an inbound call","Report the attempt to your bank's fraud team"],"faq":[{"question":"Will my bank ever call me and ask for my full password?","answer":"No. Banks never ask for your full password, PIN, or complete one-time passcode over the phone. They may ask for selected characters from a security answer, but never the full secret."},{"question":"Why can't phone networks just block spoofed numbers?","answer":"Anti-spoofing standards are improving in some countries, but calls that cross networks and borders can still carry a forged display number. Treat caller ID as unverified, and rely on calling back on a number you sourced yourself."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-wire-transfer-request-from-a-ceo-a-scam","url":"https://scamencyclopedia.org/questions/is-a-wire-transfer-request-from-a-ceo-a-scam","question":"Is a wire transfer request from my CEO a scam?","shortAnswer":"Possibly. Urgent wire-transfer emails or messages appearing to come from senior executives are a major fraud category called Business Email Compromise.","explanation":"Business Email Compromise (BEC) scams involve fraudsters impersonating a CEO, CFO, or trusted manager to pressure an employee into making an urgent wire transfer. The email address may be spoofed or the attacker may have genuinely compromised the executive's email account. The request is usually framed as confidential, time-sensitive, and outside normal approval channels. Billions of dollars are lost to BEC each year. Any out-of-channel payment request from leadership — especially one that bypasses standard approvals — should be verified by calling the executive directly on a known number, not replying to the same email thread.\n\nBEC succeeds through authority and plausibility rather than technical sophistication: attackers often study a company's suppliers, invoicing rhythms, and staff names first, then time the request for maximum pressure — end of quarter, during the executive's travel, or late on a Friday. Finance teams are the primary target, but anyone with payment authority can be picked. The controls that defeat it are procedural: a fixed rule that new or changed bank details are always verified by phone on a known number, and a workplace culture where checking is expected rather than treated as questioning a superior.","redFlags":["Urgent wire transfer requested by email from a senior person","Instruction to keep the transfer confidential and bypass normal approval","Email address that looks slightly different from the real one","Request to use a new or unfamiliar bank account","Contact made outside business hours or from a personal email"],"whatToDoNow":["Do not wire any funds until you verbally verify with the requester using a known phone number","Report the email to your IT or security team immediately","Alert your bank if a transfer has already been initiated — quick action may allow a recall","Document and preserve the email as evidence"],"faq":[{"question":"What if the email came from my CEO's real address?","answer":"Email accounts can be hacked. Even if the address looks genuine, always verify large or unusual payment requests by phone or in person before acting."},{"question":"We already sent the wire. Is it too late?","answer":"Act immediately — contact your bank and ask for a recall, and report it through your national fraud reporting channel and to law enforcement. Recovery is time-sensitive and most likely in the first hours, before the funds are moved on."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-gift-card-payment-request-ever-legitimate","url":"https://scamencyclopedia.org/questions/is-a-gift-card-payment-request-ever-legitimate","question":"Is a gift card payment request ever legitimate?","shortAnswer":"Almost never. Asking someone to pay a debt, fee, tax, or fine with gift cards is a near-universal scam signal.","explanation":"Gift cards — from retailers such as Apple, Google Play, Amazon, or eBay — are designed for personal gifting, not payments. Scammers love them because once the code is read out, the money is gone and essentially untraceable. Fraudsters impersonating the IRS, Social Security Administration, police, utility companies, or tech-support firms routinely demand payment in gift cards and ask for the card number and PIN over the phone. No government agency, legitimate business, or real utility company will ever accept a gift card as payment for a debt, fine, or fee.\n\nThe psychology is straightforward: gift cards keep the victim inside a rehearsed script — buy the cards, stay on the phone, read out the numbers — while the threat of arrest, disconnection, or a compromised account supplies the urgency. Store staff are often the last line of defence, which is why callers coach victims to invent a cover story at the till; many retailers now train cashiers to question large gift-card purchases precisely because of this fraud. If you find yourself rehearsing an explanation for a stranger on the phone, that rehearsal is the scam announcing itself.","redFlags":["Any official-sounding caller who asks for payment by gift card","Instruction to buy multiple cards and read out the numbers","Threat of arrest, disconnection, or lawsuit if you don't pay immediately","Request to photograph the card and send the image","Being told not to tell the shop assistant why you are buying the cards"],"whatToDoNow":["Refuse and end the call","Report to the FTC at reportfraud.ftc.gov or your national equivalent","If cards have already been purchased, contact the retailer immediately — some can freeze unused balances","Warn elderly relatives who may be targeted"],"faq":[{"question":"Can the retailer refund me if I was scammed into buying gift cards?","answer":"Retailers are not obliged to refund, but many major chains have protocols to flag suspected scam purchases and may freeze unredeemed balances. Act and contact them within minutes if possible."},{"question":"Why do scammers want the card numbers instead of the physical cards?","answer":"The value lives in the code. Once you read out the number and PIN, the scammer redeems or resells the balance within minutes, often from another country — the plastic card in your hand is worthless from that moment."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-text-about-a-failed-delivery-attempt-a-scam","url":"https://scamencyclopedia.org/questions/is-a-text-about-a-failed-delivery-attempt-a-scam","question":"Is a text about a failed delivery attempt a scam?","shortAnswer":"It may be. Smishing texts imitating couriers like UPS, FedEx, DHL, or Royal Mail are extremely common and often lead to credential or card-detail theft.","explanation":"Parcel-delivery smishing texts typically claim that a delivery failed and ask you to click a link to reschedule or pay a small redelivery fee. The link leads to a convincing fake site that harvests your name, address, card number, or account login. Because so many people are genuinely waiting for deliveries, these texts have a high success rate. Legitimate couriers do send delivery notifications, but they will never ask for card payment via an SMS link for a redelivery fee that wasn't agreed at purchase. If you are expecting a parcel, track it directly through the carrier's official website or app by typing the address manually.\n\nWhat makes these texts effective is the follow-up. Entering card details on the fake page often does more than lose you a small fee — it hands over everything needed for card-not-present fraud, and in many cases it is followed within days by a phone call from a fake bank fraud team who reference the payment you just made to sound credible. The small initial charge is bait; the real losses usually come later.\n\nA reliable habit protects you here: treat every delivery text as unverified until you have checked the tracking reference yourself on the carrier's official site or app. If the message contains no tracking number you can independently confirm, or mentions a fee that was never part of your original purchase, there is nothing legitimate in it to act on.","redFlags":["Text from an unknown number about a missed delivery","Link in the text that doesn't match the official carrier domain","Request for a small fee — often under £2 or $2 — by card","Vague sender name such as 'Parcel', 'Post', or 'Delivery'","No specific parcel reference number or it matches nothing you ordered"],"whatToDoNow":["Do not click the link","Go directly to the courier's official website or app to track any real parcel","Report the text to your national spam-reporting service (e.g., 7726 in the UK or US)","Delete the message"],"faq":[{"question":"What if I already clicked the link?","answer":"Change passwords for any accounts you logged into via the link, contact your bank if you entered card details, and run a security scan on your device."},{"question":"How do scammers know I'm expecting a delivery?","answer":"Usually they don't. These texts are sent in bulk to enormous lists of phone numbers, and enough recipients happen to be waiting for a parcel that the scam pays off. Receiving one does not mean a retailer leaked your data."}],"lastReviewed":"2026-08-01"},{"slug":"can-ai-voice-cloning-be-used-to-scam-me","url":"https://scamencyclopedia.org/questions/can-ai-voice-cloning-be-used-to-scam-me","question":"Can AI voice cloning be used to scam me?","shortAnswer":"Yes. Fraudsters can clone someone's voice using a short audio sample and then call you pretending to be a family member or colleague in distress.","explanation":"AI voice-cloning tools can now replicate a person's voice from just a few seconds of publicly available audio — a social media clip, a video, or a voicemail. Scammers use this technology to impersonate a son, daughter, grandchild, or colleague, claiming to be in an emergency and needing immediate money. The call sounds convincingly real. If you receive an urgent call from someone you know asking for money, hang up and call that person back on their real number before doing anything. Sharing less audio of yourself and your family on public social media reduces the risk.\n\nTwo details make these calls unusually persuasive. First, caller ID can itself be spoofed to display the real family member's number, so the screen appears to confirm the voice. Second, the script always pairs urgency with secrecy — a car accident, an arrest, a hospital bill — plus a reason not to contact anyone else. That combination exists precisely to stop you doing the one thing that defeats the scam: reaching the real person through a channel you control.\n\nFamilies can prepare in advance. Agree a simple code word, or a question only the real person could answer, and treat any emergency money request that arrives by phone as unverified until you have spoken to the person directly. A genuine relative in trouble is never harmed by a two-minute delay while you call them back; a scammer's story collapses under it.","redFlags":["Unexpected call claiming a family member is in danger or has been arrested","Caller sounds slightly 'off' — robotic pauses or unnatural phrasing","Immediate request for money via wire, crypto, or gift cards","Request not to tell other family members","Unable to answer simple personal verification questions"],"whatToDoNow":["Hang up and call the supposed family member or colleague directly on their known number","Agree a family code word in advance that can be used to verify real emergencies","Report the call to local police and your national consumer protection agency","Reduce publicly available voice samples of yourself and loved ones"],"faq":[{"question":"Can I detect a cloned voice on a phone call?","answer":"It is very difficult in real time. The most reliable defence is to hang up and independently call the person back — not to rely on voice quality alone."},{"question":"Does the scammer need a long recording of someone's voice?","answer":"No. Modern cloning tools can produce a usable imitation from a very short sample, which is why public videos and voicemail greetings are enough. Limiting public audio helps, but verification habits — hanging up and calling back — matter more than prevention."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-too-good-to-be-true-online-store-a-scam","url":"https://scamencyclopedia.org/questions/is-a-too-good-to-be-true-online-store-a-scam","question":"Is a too-good-to-be-true online store a scam?","shortAnswer":"Often yes. Fake online shops advertise popular products at extreme discounts, take payment, and either send counterfeits or nothing at all.","explanation":"Fake online stores are built quickly, often as near-copies of legitimate retailer websites, and promoted heavily through social media ads. They lure buyers with prices 70-90% below retail, countdown timers, and artificial 'limited stock' warnings. After payment — usually by card or PayPal — buyers receive a cheap counterfeit, an unrelated item, or nothing. The website often disappears within weeks. Signs of a fake store include no verifiable address or phone number, a very recent domain registration, spelling errors, and reviews only on the site itself with no independent verification.\n\nThe economics of these operations explain the pattern. Building a storefront from a template costs almost nothing, and paid social ads can put it in front of thousands of shoppers within hours, so the operator only needs a small fraction of visitors to pay before abandoning the domain and launching the next one. That is why the same product photos, layouts, and glowing reviews reappear across waves of apparently different shops.\n\nA few minutes of checking defeats most of them. Look for an established, independent review footprint, confirm a real contact route exists before you order, and be wary of any store whose only presence is the advert that brought you there. If the discount is deep enough that no legitimate business could sustain it, that alone answers the question.","redFlags":["Prices drastically lower than any legitimate retailer","No working customer service phone number or physical address","Domain registered very recently (check free WHOIS tools)","Only positive reviews hosted on the site with no external verification","Payment only via bank transfer, crypto, or obscure method"],"whatToDoNow":["Check the domain age using a WHOIS lookup before buying","Search for the store name plus 'scam' or 'review' before purchasing","Pay by credit card where possible for chargeback protection","Report fake sites to your national consumer protection body and the platform that ran the ad"],"faq":[{"question":"Can I get a refund if I paid by credit card to a fake store?","answer":"In many cases yes — credit card chargeback processes exist specifically for non-delivery or counterfeit goods. Contact your card issuer promptly."},{"question":"Why do fake stores sometimes actually ship something?","answer":"Sending a cheap counterfeit or an unrelated trinket creates a tracking number, which slows chargebacks and platform disputes because the seller can 'prove' delivery. Photograph what arrives and dispute the charge as significantly not as described."}],"lastReviewed":"2026-08-01"},{"slug":"can-someone-scam-me-through-zelle","url":"https://scamencyclopedia.org/questions/can-someone-scam-me-through-zelle","question":"Can someone scam me through Zelle?","shortAnswer":"Yes. Zelle payments are nearly instant and generally irreversible, making it a frequent tool in bank-impersonation, marketplace, and romance scams.","explanation":"Zelle is a peer-to-peer payment network built into many US bank apps. Because transfers settle within seconds and are treated as authorised transactions, scammers actively direct victims to use Zelle before they have time to think. Common scenarios include a fake bank fraud alert that asks you to 'verify' a transaction by sending money to yourself (which actually goes to the scammer), marketplace sellers who disappear after receiving a Zelle payment, and romance partners who request rent or emergency help via Zelle. Banks are under increasing regulatory pressure to reimburse scam victims, but recovery is not guaranteed.\n\nThe common thread in Zelle fraud is that the victim authorises the payment personally, which has historically placed it outside the protections that cover stolen cards. That distinction is exactly what scammers exploit: if they can talk you into pressing send, the money moves instantly and the network treats it as a legitimate transfer. It is also why the fake 'bank fraud department' script is so dangerous — it uses the fear of fraud to manufacture an authorised payment.\n\nTreat Zelle like handing over cash. It is well suited to paying people you know personally and completely unsuited to paying strangers, securing purchases from unfamiliar sellers, or 'moving money to safety' at the instruction of a caller. No genuine bank employee will ever ask you to transfer money to protect it.","redFlags":["Anyone asking for Zelle payment before meeting in person or receiving goods","Bank 'fraud team' instructing you to transfer money to stop a fraud","Urgent pressure to send before you have time to think","Seller who accepts only Zelle, not card or cash","New romance contact who needs money urgently via Zelle"],"whatToDoNow":["Contact your bank immediately if you sent money to a scammer — speed matters","File a report with your bank and request a fraud review","Report to the FTC and CFPB","Use Zelle only with people you know and trust personally"],"faq":[{"question":"Is Zelle safer than Venmo or Cash App?","answer":"All three are peer-to-peer payment apps with limited fraud recovery. None are designed to pay strangers for goods or services. Use them only with people you personally know."},{"question":"Will my bank refund a Zelle payment I was tricked into sending?","answer":"Policies vary and continue to evolve. Some banks reimburse victims of impersonation scams; others decline because the transfer was authorised. Report immediately either way — a fast report improves both recovery odds and your position in any later dispute."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-tax-refund-text-from-the-irs-real","url":"https://scamencyclopedia.org/questions/is-a-tax-refund-text-from-the-irs-real","question":"Is a tax refund text from the IRS real?","shortAnswer":"No. The IRS does not initiate contact by text message. Any text claiming to be from the IRS about a refund or penalty is a scam.","explanation":"The US Internal Revenue Service communicates primarily by postal mail and, in limited circumstances, by phone for ongoing cases. It never sends unsolicited text messages about refunds, rebates, stimulus payments, or tax penalties. Texts or emails that appear to come from the IRS and ask you to click a link, provide personal information, or claim a refund are phishing attempts. They may direct you to a convincing fake website designed to steal your Social Security number, bank account details, or login credentials. The same principle applies to equivalent agencies in other countries, such as HMRC in the UK or the ATO in Australia.\n\nThese campaigns spike around filing deadlines and refund season, when a message about your taxes feels plausible. The link typically leads to a form requesting exactly the data needed for identity theft — Social Security number, date of birth, bank details — and a stolen tax identity can be used to file fraudulent returns in your name, which takes far longer to untangle than a stolen card.\n\nThe verification rule is simple and universal: never act on a tax communication through the channel it arrived in. Log in to the tax authority's official website by typing the address yourself, or call a number you found independently. A genuine refund will still be there after you verify; a scam depends entirely on you not doing so.","redFlags":["Text or email claiming to be from the IRS, HMRC, or a tax authority","Promise of a refund you weren't expecting","Link in the message asking for personal or financial information","Threat of legal action unless you click or call immediately","Request for a fee to release your refund"],"whatToDoNow":["Do not click any links or call the number in the message","Report the text to phishing@irs.gov (or your country's equivalent)","Verify your actual refund status at irs.gov directly","Delete the message"],"faq":[{"question":"The text knows my name and the last four digits of my Social Security number — is it real?","answer":"No. Scammers obtain partial personal details from data breaches to appear legitimate. The IRS still will not contact you by text regardless of how much information the sender appears to have."},{"question":"What should I do if I entered my Social Security number on a fake IRS page?","answer":"Treat it as identity theft, not just phishing. Place a fraud alert or credit freeze with the credit bureaus, monitor your accounts, and follow your country's official identity-theft reporting process so a recovery record exists."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-deepfake-video-of-a-celebrity-promoting-crypto-real","url":"https://scamencyclopedia.org/questions/is-a-deepfake-video-of-a-celebrity-promoting-crypto-real","question":"Is a deepfake video of a celebrity promoting a cryptocurrency real?","shortAnswer":"No. Celebrity-endorsed crypto investment videos circulating on social media are almost always deepfake scams designed to steal money.","explanation":"Scammers use deepfake AI technology to create convincing video clips of well-known figures — business leaders, politicians, or entertainment celebrities — appearing to endorse a new cryptocurrency, trading platform, or investment opportunity. These videos are then distributed through paid social media ads or via messaging apps. The fabricated celebrity 'endorsement' lends false credibility to an investment that either does not exist or will be abandoned once sufficient funds have been collected. Real celebrities do not endorse investment schemes via unsolicited social media videos, and endorsements of any kind do not make an investment safe.\n\nThe production quality of these videos keeps improving, so the old advice to look for glitchy lip-sync is becoming less reliable. What does not change is the underlying logic: a genuine investment opportunity gains nothing from being promoted through paid ads by a celebrity, and no credible public figure announces exclusive trading platforms through social media clips. The claim itself, not the video quality, is the giveaway.\n\nIf the pitch has already drawn you in, apply the standard tests before any money moves: check whether the platform is registered with your financial regulator, search for the platform name alongside words like 'scam' and 'withdrawal', and be alert to the classic escalation where a small deposit shows quick on-screen profits followed by pressure to invest more. Fabricated dashboards showing gains are part of the same production as the fake video.","redFlags":["Unsolicited video of a famous person urging you to invest in crypto","Facial movement or lip sync that looks slightly unnatural","Claim that the investment is time-limited or exclusive","Pressure to deposit a minimum amount quickly","Website with no verifiable address, team, or regulatory registration"],"whatToDoNow":["Do not click any links or deposit any funds","Report the video to the platform where you saw it","Search the celebrity's verified social media accounts to see whether they have addressed the fake video","Report to your financial regulator's scam-reporting portal"],"faq":[{"question":"Can I tell if a video is a deepfake?","answer":"Signs include unnatural blinking, skin that looks too smooth, hair that blurs at the edges, and audio that doesn't quite match the mouth movement. When in doubt, verify the claim through the celebrity's official channels."},{"question":"Why do platforms keep showing me these ads?","answer":"Scammers constantly create new advertiser accounts and swap out video assets to evade moderation, so takedowns lag behind uploads. Reporting each ad you see still helps — platform enforcement is driven partly by user reports."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-free-trial-that-requires-my-card-details-safe","url":"https://scamencyclopedia.org/questions/is-a-free-trial-that-requires-my-card-details-safe","question":"Is a free trial that requires my card details safe?","shortAnswer":"It depends. Legitimate companies do offer card-backed free trials, but some use them to trap people in expensive subscriptions that are very hard to cancel.","explanation":"Providing card details for a free trial is not automatically a scam, but it is a high-risk situation. Some businesses — particularly those running negative-option billing — obscure their subscription terms in small print or pre-ticked boxes, then charge a high monthly fee the moment the trial ends. A more extreme version involves companies that are essentially fraudulent from the start: they have no intention of honouring the trial and begin charging immediately. Before entering card details for any free trial, verify the company's legitimacy, read the cancellation terms, set a calendar reminder to cancel, and check how easy it is to reach their customer service.\n\nThe business model behind abusive trials relies on friction and forgetfulness: sign-up takes seconds, while cancellation requires finding a buried settings page, emailing support, or calling during limited hours. Every day of delay is revenue. Some operations also bundle hidden extras — a second subscription, a 'premium' tier, a partner offer — authorised through pre-ticked boxes you never noticed. Reading the payment page as carefully as the headline offer is where most of the protection lies.\n\nIt also helps to control the payment side rather than trusting the merchant. A virtual or single-use card number, where your bank offers one, caps the damage; a calendar reminder set for two days before the trial ends preserves your choice; and screenshots of the offer terms taken at sign-up give you evidence if you later need to dispute a charge.","redFlags":["Trial terms hidden in small print or behind a link","No easy cancellation method stated upfront","Pre-ticked boxes for additional products or subscriptions","Extremely short trial window (e.g. 3 days)","No publicly verifiable company address or customer service contact"],"whatToDoNow":["Screenshot the trial terms before signing up","Set a calendar reminder to cancel before the trial ends","Use a virtual card number where your bank offers one, to limit exposure","If you are being charged unexpectedly, contact your bank and request a chargeback"],"faq":[{"question":"Can I cancel a subscription I was tricked into?","answer":"Yes. If you were not clearly informed of ongoing charges, your card issuer may be able to issue a chargeback. You can also dispute the charge with your consumer protection agency."},{"question":"Why do free trials ask for card details at all?","answer":"Legitimate services use a card to deter repeat free-trial abuse and to make conversion seamless. That is lawful when the terms are clear. The problem is services that rely on unclear terms and difficult cancellation to convert forgetfulness into revenue."}],"lastReviewed":"2026-08-01"},{"slug":"is-someone-asking-for-crypto-payment-for-a-service-a-scam","url":"https://scamencyclopedia.org/questions/is-someone-asking-for-crypto-payment-for-a-service-a-scam","question":"Is someone asking for crypto payment for a service a scam?","shortAnswer":"Crypto-only payment for a service is a significant red flag. Legitimate service providers rarely require cryptocurrency as the sole payment method.","explanation":"While some legitimate businesses accept cryptocurrency as one of several payment options, insisting on crypto as the only method is commonly associated with fraud. Scammers prefer crypto because transfers are irreversible, pseudonymous, and cross borders instantly. Scenarios where this commonly appears include fake freelancers who demand crypto upfront, fake tech-support agents requesting a Bitcoin wallet address, rental landlords who want a deposit in crypto before you view a property, and online sellers who refuse all other payment types. If a service provider cannot or will not accept a traceable payment method, treat that as a serious warning.\n\nThe reason this rule works is structural. Card networks, banks, and regulated payment processors all provide dispute mechanisms precisely because commerce involves things going wrong; a provider who deliberately routes around every one of those mechanisms is choosing to remove your recourse. Legitimate businesses want repeat customers and accept the small cost of refundable payment methods. A fraudster's entire plan depends on the payment being final the moment it is sent.\n\nIf you genuinely want to deal with a business that happens to accept crypto among other options, that is a different situation — the flag is exclusivity, not the technology. Even then, complete the same checks you would for any online seller: verifiable identity, an independent review footprint, and a payment route you could contest if the service never materialises.","redFlags":["Crypto is the only accepted payment method","You have never met the provider in person","Payment is required before any service or goods are provided","Provider discourages you from discussing the payment with others","Pressure to pay to a specific wallet address immediately"],"whatToDoNow":["Refuse and seek a provider who accepts verifiable payment methods","Verify the provider's identity and business address independently","Report suspicious service providers to your consumer protection agency"],"faq":[{"question":"Can I get my crypto back if I was scammed?","answer":"Recovering crypto sent to a scammer is extremely difficult. Transactions are irreversible on most blockchains. Reporting quickly gives the best chance of tracing via exchanges that may cooperate with law enforcement."},{"question":"What excuses do scammers give for demanding crypto?","answer":"Common scripts include avoiding card fees, faster international settlement, privacy, or claiming their bank account is temporarily frozen. The explanation varies; the effect is always the same — an irreversible payment with no dispute mechanism."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-telegram-investment-group-with-verified-profits-a-scam","url":"https://scamencyclopedia.org/questions/is-a-telegram-investment-group-with-verified-profits-a-scam","question":"Is a Telegram investment group showing verified profits a scam?","shortAnswer":"Almost certainly yes. Fabricated screenshots of profits are trivially easy to produce and are a standard tool of investment fraud groups on Telegram.","explanation":"Telegram investment groups typically begin by adding new members to a channel full of fabricated success stories and falsified profit screenshots. A 'mentor' or 'analyst' gradually gains trust before recommending a specific trading platform or crypto exchange. When victims deposit, their dashboard shows impressive gains — but the platform is fake and the balance cannot be withdrawn. Any withdrawal attempt triggers a 'tax', 'fee', or 'verification' charge. After those payments are made, communication ceases. This format — sometimes called a recovery scam or advance-fee investment scam — is one of the fastest-growing forms of online fraud globally.\n\nIt helps to understand who else is in the group. In many of these channels the 'other members' celebrating wins are accomplice accounts or bots, and the entire environment is staged for one purpose: to make depositing feel like joining a crowd rather than sending money to a stranger. The mentor's charts, the trading terminology, and the professional-looking platform are set dressing around a single transaction — your transfer in.\n\nThe most dangerous moment is often after you realise something is wrong. Victims who try to withdraw are strung along with fees, and those who go quiet are frequently approached later by 'recovery agents' who claim they can retrieve the funds for an upfront charge. That second approach is usually run by the same network. Treat any unsolicited recovery offer as a continuation of the original fraud.","redFlags":["Unsolicited invitation to a Telegram investment group","Constant stream of profit screenshots from other members","Recommendation to use a specific obscure trading platform","Withdrawal requests triggering additional fees","Group admin or mentor who cannot be independently verified"],"whatToDoNow":["Leave the group and do not deposit any funds","Report the group to Telegram via the in-app reporting tool","Check whether the trading platform is regulated by searching your country's financial regulator register","If you have already deposited, contact your bank and report to your national financial crime authority"],"faq":[{"question":"How can I check whether a trading platform is regulated?","answer":"Search the platform name on your country's financial regulator website (e.g., FCA in the UK, SEC or FINRA in the US, ASIC in Australia). Unregistered platforms should be avoided entirely."},{"question":"Why was I added to the group without asking?","answer":"Fraud networks mass-add numbers from leaked contact lists and previous scam campaigns. Being added means your number is on a circulated list, not that you were individually chosen. Leave, report, and consider restricting who can add you in your app's privacy settings."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-elderly-parent-being-targeted-by-phone-scammers","url":"https://scamencyclopedia.org/questions/is-an-elderly-parent-being-targeted-by-phone-scammers","question":"Is my elderly parent being targeted by phone scammers?","shortAnswer":"Quite possibly. Older adults are disproportionately targeted by phone fraud, including grandparent scams, tech-support fraud, and Medicare impersonation.","explanation":"Scammers specifically target older adults because they may be more trusting of phone calls, less familiar with digital fraud tactics, and more likely to have retirement savings. Common schemes include grandparent scams (a fake grandchild is in trouble), Medicare or pension fraud (claiming benefit changes require personal details), tech-support calls (claiming the computer has a virus), and fake prize notifications. Signs a loved one may be targeted include unexplained gift card purchases, unusual bank withdrawals, secrecy about a new 'friend' or 'helper', or multiple calls from unfamiliar numbers. Gentle, non-judgmental conversations about fraud go a long way toward prevention.\n\nShame is the scammer's strongest ally in this demographic. Many older victims stay silent because they fear losing independence or being seen as incapable, which lets the fraud continue and deepen. Framing matters: these are professionally engineered crimes that succeed against people of every age and background, and saying so explicitly makes disclosure far more likely. Ask open questions about calls and new contacts rather than interrogating specific transactions.\n\nPractical safeguards can be layered on gently. Call-screening or call-blocking features on the phone, a standing family agreement that no money moves the same day a request arrives, and involving a second trusted person before any unusual withdrawal all interrupt the isolation and urgency scammers depend on. If the bank offers trusted-contact or account-alert features, setting them up together turns protection into a shared routine rather than a loss of control.","redFlags":["Unexplained gift card, wire transfer, or large cash withdrawals","Secrecy about a new phone contact or 'friend'","Multiple calls from unknown numbers","Fear or anxiety about something they won't discuss","Being talked into expensive computer repairs or account 'security' work"],"whatToDoNow":["Have an open, non-judgmental conversation about common phone scams","Set up a family code word for genuine emergencies","Register their number with your national do-not-call list","Contact Adult Protective Services or local police if you believe they are being actively defrauded"],"faq":[{"question":"What if my parent has already sent money?","answer":"Contact the bank or payment service immediately. Report to the FTC or your national fraud authority, and consider involving Adult Protective Services if ongoing exploitation is suspected."},{"question":"Why do scammers keep calling the same person?","answer":"Once someone responds or pays, their details are added to so-called sucker lists that are sold between fraud groups, so contact attempts increase rather than stop. A sudden surge of calls after one incident is a sign the person is on such a list."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-student-visa-or-scholarship-offer-by-email-a-scam","url":"https://scamencyclopedia.org/questions/is-a-student-visa-or-scholarship-offer-by-email-a-scam","question":"Is a student visa or scholarship offer sent by email a scam?","shortAnswer":"It is very likely a scam. Unsolicited scholarship or visa emails asking for fees or personal documents are a well-known category of education fraud.","explanation":"International students are frequently targeted by fraudsters who pose as universities, scholarship foundations, visa agents, or government immigration officials. The emails promise fully funded scholarships, guaranteed visa approvals, or guaranteed university placements — often without any formal application. Victims are asked to pay processing fees, courier fees, or insurance deposits and to share passport scans or other documents. After payment, the sender either disappears or creates further fee demands. Legitimate universities and scholarship bodies do not offer placements by cold email, and no official visa process requires payment through an unofficial agent.\n\nThe document requests deserve as much caution as the fee demands. A passport scan, transcripts, and personal details handed to a fraudulent 'admissions officer' can be reused for identity fraud, visa fraud committed in your name, or resale — harms that outlast the lost fee. Some operations also string applicants along for months, extracting a courier fee here and an insurance deposit there, precisely because a hopeful student has a strong incentive to keep the process alive.\n\nVerification is straightforward when done in the right direction. Find the institution's website through an independent search, locate its admissions or scholarship pages, and contact the office using details published there. If the offer is real, the institution will know about it; if the sender resists that route, insists on their own portal, or warns that verifying will forfeit the offer, the answer is already clear.","redFlags":["Scholarship or university placement offered without applying","Urgency to respond within 24-48 hours","Request for a processing or insurance fee before enrolment","Poor grammar or vague institution name","Email from a free service address rather than an institutional domain"],"whatToDoNow":["Verify the institution directly via its official website — search it independently, do not use links in the email","Never send money or documents to an unverified sender","Report to your national immigration authority or education ministry","Warn peers in student communities who may receive the same message"],"faq":[{"question":"What if the email has official-looking logos and letterheads?","answer":"Logos and letterheads can be easily copied. Always verify by contacting the institution through contact details you find independently on their official website."},{"question":"I already sent my passport scan — what should I do?","answer":"Stop all contact, keep the correspondence as evidence, and report to your national fraud authority. Monitor for accounts or applications opened in your name, and notify your passport-issuing authority if you see signs your identity is being misused."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-utility-company-calling-to-warn-of-disconnection-a-scam","url":"https://scamencyclopedia.org/questions/is-a-utility-company-calling-to-warn-of-disconnection-a-scam","question":"Is a utility company calling to warn of immediate disconnection a scam?","shortAnswer":"Often yes. Urgent disconnection calls demanding immediate payment by gift card, wire, or crypto are a very common utility impersonation scam.","explanation":"Scammers impersonate gas, electricity, and water companies, warning that service will be cut off within hours unless a payment is made immediately. The call creates panic, especially for households that genuinely have unpaid bills. Victims are often directed to pay via gift card codes read over the phone, prepaid debit cards, or cryptocurrency kiosks. Real utility companies send written notices before any disconnection, they accept standard payment through their normal billing portals, and they do not demand payment exclusively by gift card. If you receive such a call, hang up and contact your utility provider using the number on your most recent bill.\n\nTiming is part of the manipulation. These calls cluster during extreme weather, at month-end when budgets are tight, and during business hours for small firms — a restaurant threatened with a power cut in the middle of service is far more likely to pay first and think later. The script is built so that the cost of pausing feels higher than the cost of paying, which is exactly backwards: a genuine disconnection process never turns on a single phone call.\n\nThe payment method is the cleanest tell. Gift card codes, prepaid cards, and crypto kiosks have no place in utility billing anywhere; they are chosen because they convert to untraceable value the moment you read out a code or scan a QR. Any caller who names one of those methods has identified themselves, regardless of what your caller ID shows or how much account detail they recite.","redFlags":["Threat of disconnection within hours unless you pay immediately","Demand for payment by gift card, prepaid card, or crypto","Caller ID shows your utility provider's name","Agent who discourages you from calling back on the official number","Request to visit a Bitcoin kiosk or buy cards at a specific store"],"whatToDoNow":["Hang up and call your utility provider on the number printed on your bill","Never pay by gift card, crypto, or wire for a utility bill","Report the call to your national consumer protection authority","Alert neighbours, especially elderly ones who may receive the same call"],"faq":[{"question":"My bill is overdue — could the call be genuine?","answer":"Even if you have a genuine outstanding balance, no utility company will demand gift card payment to prevent disconnection. Call your provider directly on the number from your bill to sort out any real debt safely."},{"question":"How did the caller know my utility provider's name?","answer":"Often they didn't — in many regions one or two suppliers dominate, so guessing works. In other cases the detail comes from data breaches or public records. Knowing your provider proves nothing about who is calling."}],"lastReviewed":"2026-08-01"},{"slug":"can-a-scammer-take-money-from-my-venmo-account","url":"https://scamencyclopedia.org/questions/can-a-scammer-take-money-from-my-venmo-account","question":"Can a scammer take money from my Venmo account?","shortAnswer":"Yes, in several ways — including account takeover, fake payment scams, and tricking you into sending money voluntarily.","explanation":"Venmo fraud takes multiple forms. In account takeover attacks, criminals obtain your login credentials through phishing or credential stuffing and then transfer your balance or linked bank funds to themselves. In payment-reversal scams, someone sends you money and asks you to forward some of it, then reverses the original payment — leaving you out of pocket. Scammers also send fake Venmo email notifications to trick you into believing you received money before asking you to ship goods. Additionally, strangers posing as buyers overpay and request a refund of the difference. Always verify money is truly in your balance before sending anything, and use a strong unique password and two-factor authentication.\n\nThe app's social design adds a risk many users overlook: public transaction feeds and searchable usernames make it easy for fraudsters to identify active users, mimic the names of people you actually pay, or send an unexpected payment as the opening move of a refund con. Setting your transactions to private and double-checking the recipient's handle before every send removes most of that exposure at no cost.\n\nIf something does go wrong, the order of your response matters. Report inside the app first so the platform has a fraud record, then contact your bank if a linked card or account was charged, and change your password from a device you trust. Money sent to a stranger is difficult to claw back on any peer-to-peer network, which is why the durable protection is a rule rather than a remedy: use the app only with people you know.","redFlags":["Unexpected payment from a stranger followed by a refund request","Email claiming a Venmo payment is 'pending' unless you send funds first","Request to forward or split money from a stranger","Login alert from an unfamiliar device or location","Buyer who overpays and asks for the excess to be returned"],"whatToDoNow":["Enable two-factor authentication on your Venmo account","Verify your actual balance in-app before sending any money","Do not use Venmo for transactions with people you don't know personally","Report suspected fraud to Venmo support and your bank"],"faq":[{"question":"Does Venmo protect me from scams the way PayPal does?","answer":"Venmo's buyer and seller protections are limited compared to PayPal. For purchases from strangers, PayPal Goods & Services offers stronger recourse. Venmo is safest used between people you already know."},{"question":"A stranger sent me money by mistake and wants it back — what should I do?","answer":"Do not send anything. The 'accidental' payment is often made with a stolen card or hijacked account, and it will later be reversed — leaving you out of pocket for whatever you returned. Report it in-app and let the platform resolve it."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-romance-partner-who-asks-for-crypto-a-scammer","url":"https://scamencyclopedia.org/questions/is-a-romance-partner-who-asks-for-crypto-a-scammer","question":"Is a romance partner who asks for cryptocurrency a scammer?","shortAnswer":"This is a major red flag. Asking for cryptocurrency is one of the clearest signs of a romance scam, often linked to pig-butchering fraud.","explanation":"In romance scams, a fraudster builds an intimate relationship online — often over weeks or months — before introducing a financial need. Cryptocurrency is the preferred payment method because it is fast, international, and irreversible. The request is often framed as a business investment opportunity, a medical emergency, a stuck shipment, or a chance to share in trading profits. Victims who send crypto often face escalating demands. The romantic persona is entirely fabricated, and photos are typically stolen from real people's social media profiles. These scams cause enormous emotional and financial harm.\n\nThe request rarely arrives cold. It is preceded by weeks of daily attention, future plans, and small tests of compliance — a favour here, a secret kept there — so that by the time crypto is mentioned, refusing feels like betraying the relationship rather than declining a stranger's demand. That emotional architecture is the product; the investment story is just the delivery mechanism. Many victims describe knowing something was wrong and sending money anyway, which is exactly what the grooming is designed to achieve.\n\nBreaking the spell usually requires outside input. Describe the situation to a friend, family member, or fraud helpline in plain terms — 'someone I have never met wants me to buy cryptocurrency' — and notice how different it sounds outside the relationship. Genuine partners do not need your money routed through irreversible channels, and they do not coach you on what to tell your bank.","redFlags":["Online partner you have never met in person asks for crypto","Relationship progressed unusually fast with declarations of love","Partner always has an excuse not to video call or meet","Financial request follows a period of emotional bonding","Reverse image search of their photo shows a different identity"],"whatToDoNow":["Stop sending money immediately","Reverse image search their profile photos using Google Images or TinEye","Talk to a trusted friend or family member — outside perspective helps","Report the profile to the platform and to your national fraud authority"],"faq":[{"question":"I sent crypto already. Can I get it back?","answer":"Crypto transactions are generally irreversible. Report to the FBI's Internet Crime Complaint Center (IC3) in the US, or your equivalent national authority. Some exchanges cooperate with law enforcement if funds are still on the platform."},{"question":"What if they showed me their own trading profits first?","answer":"Screenshots and screen-shares of trading dashboards are trivial to fabricate, and in pig-butchering operations the 'profits' are numbers on a platform the scammer controls. Evidence only counts if it exists outside their ecosystem — and even then, no genuine partner needs you to invest."}],"lastReviewed":"2026-08-01"},{"slug":"can-a-qr-code-install-malware-on-my-phone","url":"https://scamencyclopedia.org/questions/can-a-qr-code-install-malware-on-my-phone","question":"Can a QR code install malware on my phone?","shortAnswer":"A QR code itself cannot run code, but it can direct your phone to a malicious website that tries to download malware or phish your credentials.","explanation":"QR codes are simply machine-readable links. When you scan one, your phone opens the encoded URL. If that URL leads to a site that exploits a browser vulnerability, mimics a login page to steal credentials, or prompts you to download a malicious app outside your official app store, your device or accounts can be compromised. Scammers place fake QR codes over legitimate ones in public places such as parking meters, restaurant tables, posters, and delivery notices. The risk is especially high if your phone OS or browser is not updated. Always preview the URL before opening it, and be cautious about scanning codes in unexpected places.\n\nContext is the most useful filter. A QR code on a restaurant menu you asked for carries a different risk profile from one on an unsolicited letter, a windscreen flyer, or a sticker at a payment machine — the latter are exactly where 'quishing' thrives, because the situation pressures you to act (pay for parking, release a parcel) before inspecting anything. Codes in printed emails deserve particular suspicion: they exist mainly to route you around link-scanning security filters.\n\nAfter scanning, the same rules apply as for any link. Check the full domain before interacting, never enter credentials or card details on a page you reached via a code in a public place, and prefer typing the organisation's address yourself when money or logins are involved. The code is only a shortcut; you always have the option of taking the long way, and with payments you usually should.","redFlags":["QR code on a sticker placed over an existing code in a public place","URL shown after scanning looks unfamiliar or misspelled","Code arrives unsolicited by text, email, or post","Page asks you to log in to an account after scanning","Page prompts you to download an app from an unofficial source"],"whatToDoNow":["Preview the URL before opening — most phone cameras show a preview","Keep your phone OS and browser updated to patch vulnerabilities","If you visited a suspicious site, change relevant passwords and run a security check","Report fake QR codes to the venue or local authority responsible for that location"],"faq":[{"question":"Is it safer to scan QR codes with a dedicated app rather than my camera?","answer":"Using a reputable QR scanner that shows a URL preview before loading it adds a layer of protection. However, the risk lies in the destination website, not the scanning method itself."},{"question":"I scanned a suspicious QR code but didn't enter anything. Am I at risk?","answer":"For an up-to-date phone, simply loading a page is rarely enough to cause harm — the danger lies in what you do next: logging in, paying, or installing an app. Close the page, don't revisit it, and make sure your OS and browser are current."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-cash-app-flip-investment-a-scam","url":"https://scamencyclopedia.org/questions/is-a-cash-app-flip-investment-a-scam","question":"Is a Cash App 'flip' investment a scam?","shortAnswer":"Yes. Cash App flipping — where someone claims to multiply your money in minutes — is always a scam. No such investment exists.","explanation":"Cash App flipping scams promise to turn a small amount of money into a larger sum within hours by exploiting an alleged 'glitch', 'hack', or investment trick. Victims send money and either receive nothing back, are told they need to send more to unlock their profits, or become recruited into promoting the scam to others. The promoters often post convincing screenshots of large payouts and use testimonials from accomplices. Cash App itself does not have any feature that multiplies funds, and the company has no connection to these schemes. The only person making money is the scammer.\n\nThe recruitment layer is what keeps flipping scams alive. Compromised or paid social accounts post the payout screenshots, and victims are sometimes offered a way to 'earn back' their loss by promoting the scheme to their own followers — turning each victim into a distributor and lending the scam the credibility of a familiar face. If a flip offer reaches you through a friend's account, the most likely explanations are that the account is hacked or that your friend is being used.\n\nThe underlying logic never changes: money does not multiply because it passed through a payment app, and anyone who could genuinely turn small sums into large ones instantly would have no reason to solicit strangers for their capital. Every flip, blessing loom, money circle, and 'glitch' variant reduces to the same advance-fee structure with new packaging.","redFlags":["Promise to double or multiply your Cash App balance","Testimonial screenshots of large withdrawals","Requirement to send a small amount first to receive a larger return","Contact via DM on Instagram, TikTok, or Twitter","Recruiter encourages you to bring in friends for a commission"],"whatToDoNow":["Do not send any money","Report the account to Cash App and the social media platform","Report to the FTC at reportfraud.ftc.gov","Warn friends if the scammer is using your social circle to spread the scheme"],"faq":[{"question":"What if I already sent money and was promised more back?","answer":"Stop immediately. Any further payments are almost certainly an advance-fee escalation. Contact Cash App support and report the fraud, though recovery is unlikely once peer-to-peer funds are sent."},{"question":"My friend's account posted about a flip that 'worked' — is that proof?","answer":"No. Accounts promoting flips are very often hacked, and the payout screenshots are fabricated. Contact your friend through another channel to warn them their account may be compromised, and report the post."}],"lastReviewed":"2026-08-01"},{"slug":"can-an-immigrant-be-deported-if-they-dont-pay-a-phone-fine","url":"https://scamencyclopedia.org/questions/can-an-immigrant-be-deported-if-they-dont-pay-a-phone-fine","question":"Can an immigrant be deported if they don't pay a fine over the phone?","shortAnswer":"No. Immigration authorities do not call people demanding immediate payment to avoid deportation. These calls are scams targeting immigrant communities.","explanation":"Scammers impersonating immigration authorities such as USCIS, ICE, the UK Home Office, or similar agencies target immigrants with threats that arrest or deportation will follow unless an immediate fee is paid by phone. The callers may know personal details, speak the victim's language, and sound official. These threats are false. Real immigration enforcement does not work this way — genuine notices are sent in writing, and official fees are paid through government portals, not by phone to an unknown person. The fear of deportation makes these calls especially effective and psychologically harmful.\n\nThese operations are deliberately engineered around isolation. Callers often insist the matter is confidential, warn that telling a lawyer or family member will trigger immediate enforcement, and keep victims on the phone while payments are made. Each of those instructions is the opposite of how any legitimate legal process works — real proceedings create paper trails, allow representation, and never depend on you staying on a call. The demand for secrecy is not a procedural detail; it is the mechanism that prevents the one conversation that would end the scam.\n\nIt is equally important to know that your immigration status does not change your right to refuse these demands or to report the crime. In many countries fraud can be reported without immigration consequences, and community legal organisations can verify any genuine case issue through official channels. Hanging up on a fraudster cannot harm a lawful application; paying one protects nothing.","redFlags":["Phone call threatening deportation or arrest unless you pay immediately","Caller identifies as ICE, USCIS, Home Office, or a similar agency","Payment demanded by gift card, wire, or MoneyGram","Caller insists you must not speak to a lawyer or family member","Call escalates with each payment, demanding more"],"whatToDoNow":["Hang up immediately and do not pay","Contact an accredited immigration lawyer or legitimate immigration advocacy group","Report the call to the FTC (US) or Report Fraud (UK, formerly Action Fraud)","Share information with community organisations that can warn others"],"faq":[{"question":"What if the caller has my visa or case number?","answer":"Case numbers can be obtained from various sources and do not confirm the caller is legitimate. Always verify by contacting the official agency through its published website — not the number provided by the caller."},{"question":"Will reporting the scam call affect my immigration case?","answer":"Reporting fraud you were targeted by is not an admission of wrongdoing, and in many countries it carries no immigration consequences. If you are unsure, an accredited immigration lawyer or community legal clinic can advise on the safest reporting route."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-work-from-home-data-entry-job-legitimate","url":"https://scamencyclopedia.org/questions/is-a-work-from-home-data-entry-job-legitimate","question":"Is a work-from-home data entry job legitimate?","shortAnswer":"Many are scams. Genuine remote data-entry work exists, but a large proportion of online postings are fee scams, task scams, or money-mule recruitment.","explanation":"Fraudulent data-entry job postings are among the most common job scams because the role sounds simple and accessible. The warning signs vary: some require an upfront registration fee, software purchase, or training payment. Others turn out to be task scams where victims see fake earnings they must deposit to unlock. A third category recruits people as unwitting money mules. Legitimate employers never charge candidates to apply or begin work, don't pay via wire transfer to unknown accounts, and can be verified through official company websites and business registries. Low pay, vague job descriptions, and pressure to start within hours are all red flags.\n\nThe interview process itself is a reliable filter. Scam operations 'hire' within minutes over chat apps, skip any real assessment, and shower applicants with praise — because their goal is your fee, your bank details, or your account access, not your labour. Legitimate employers, even for entry-level remote roles, have a verifiable hiring contact, a company domain email, and a process that takes longer than a single messaging session.\n\nIf you are actively job hunting, assume your CV details are circulating: scammers scrape job boards and approach candidates with tailored offers that reference real applications. That is why the direction of contact matters less than verification — whether you applied or they approached you, confirm the role exists on the company's own careers page and that the person you are speaking to can be reached through the company's official channels before sharing anything sensitive.","redFlags":["Upfront fee required for registration, software, or training","Job was found via social media DM rather than a reputable jobs board","Unrealistically high pay per hour for simple tasks","Employer cannot be found through an independent search","Payment structure involves receiving and forwarding money"],"whatToDoNow":["Never pay any fee to start a job","Search the company name on a business registry before responding","Verify the job posting on the company's official website","Report suspicious job ads to the platform and your national jobs authority"],"faq":[{"question":"How do I find genuine remote data-entry work?","answer":"Use established platforms with employer verification such as LinkedIn, Indeed, or specialist remote-work boards. Check employer reviews on independent sites and never pay to apply."},{"question":"The 'employer' sent me a cheque to buy equipment. Is that normal?","answer":"No — this is the classic fake-cheque setup. The cheque will bounce after you have forwarded money to their 'supplier', leaving you liable for the full amount. Legitimate employers provision equipment themselves or reimburse documented purchases after you start."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-paypal-goods-and-services-payment-always-safe","url":"https://scamencyclopedia.org/questions/is-a-paypal-goods-and-services-payment-always-safe","question":"Is a PayPal Goods and Services payment always safe for sellers?","shortAnswer":"Not entirely. While PayPal's buyer protection is strong, sellers face risks from fraudulent chargeback claims and overpayment scams.","explanation":"PayPal's Goods and Services feature offers genuine buyer protection, making it safer than PayPal Friends and Family for buyers. However, sellers face a different set of risks. A fraudulent buyer may falsely claim they never received an item or that it was significantly different from described, triggering a chargeback that removes funds even after delivery. Sellers are also targeted by overpayment scams where a buyer sends too much and asks for a refund of the excess before a chargeback reverses the original payment. Protect yourself by shipping only to confirmed addresses, keeping proof of delivery, and never refunding more than the original transaction outside of PayPal's resolution system.\n\nHigh-value, easily resold categories — electronics, collectibles, event tickets, designer goods — attract the most sophisticated versions of these plays, including buyers who return a box of the wrong contents or dispute months after delivery. Documentation is your main defence as a seller: photograph the item and serial numbers before packing, record the packing process for expensive items, use tracked and signed-for shipping, and keep every message inside the platform where the dispute team can see it.\n\nThe overpayment pattern deserves special emphasis because it feels like a windfall rather than a threat. Any buyer who sends more than the price and asks you to refund the difference — by any method — is running the same script: their original payment will fail or be reversed, and your 'refund' is the theft. Cancel the transaction entirely rather than trying to fix it with a partial refund.","redFlags":["Buyer sends more than the agreed amount and asks for a partial refund","Buyer asks you to ship to an address different from their PayPal-confirmed address","Unusual urgency to ship before payment fully clears","Buyer offers to pay more in exchange for a gift card refund","Contact made outside of the official PayPal messaging system"],"whatToDoNow":["Only ship to the confirmed PayPal address","Keep proof of postage, delivery confirmation, and all communications","Never issue refunds outside PayPal's resolution centre","Report suspicious transactions to PayPal before fulfilling them"],"faq":[{"question":"Is PayPal Friends and Family safe for buying from strangers?","answer":"No. Friends and Family payments carry no buyer protection. Using it with strangers is always risky; a legitimate private seller will accept Goods and Services."},{"question":"How should I respond to a false 'item not received' claim?","answer":"Respond inside the resolution process with your tracking number, delivery confirmation, and photos. Tracked, signed-for delivery to the buyer's registered address is the evidence the dispute system is built around — without it, sellers usually lose."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-prize-notification-that-requires-a-fee-real","url":"https://scamencyclopedia.org/questions/is-a-prize-notification-that-requires-a-fee-real","question":"Is a prize notification that requires a fee to claim real?","shortAnswer":"No. Paying a fee to receive a prize is the defining feature of an advance-fee lottery scam — genuine prizes never work this way.","explanation":"Advance-fee prize scams arrive by email, letter, text, or social media. They claim you have won a lottery, contest, or sweepstake — often one you never entered — and that you can collect your winnings after paying a small tax, processing fee, legal fee, or customs charge. Every payment unlocks another requirement, and the prize never materialises. The money collected in fees is the entire goal. Real prize promoters deduct taxes and fees from the winnings themselves; they never ask the winner to pay upfront. If you didn't enter a competition, you cannot have won it.\n\nThe psychology is worth understanding because it explains why intelligent people pay. The first fee is deliberately small relative to the promised prize, making refusal feel irrational. Once paid, each subsequent demand exploits sunk cost — stopping now means admitting the earlier payments were wasted — and the scammer actively nurtures that feeling with congratulations, official-looking certificates, and 'so close now' reassurances. The structure is designed so that the deeper in you are, the harder it is to walk away.\n\nVariants of the same scheme wear many costumes: inheritance from an unknown relative, an unclaimed compensation fund, a sweepstakes run by a real-sounding brand, or a package of winnings held at customs. Whatever the story, the diagnostic never changes — genuine windfalls pay out without you paying in, and anyone who reverses that order is running an advance-fee fraud.","redFlags":["Prize for a competition you never entered","Requirement to pay any fee before receiving winnings","Notification by anonymous email or text rather than a verifiable organisation","Request for personal details such as your bank account or ID","Escalating fee demands after initial payment"],"whatToDoNow":["Do not pay any fee","Report to your national consumer protection or fraud authority","If the message claims to be from a real organisation, contact that organisation directly to verify","Delete the message"],"faq":[{"question":"What if I already paid one fee — should I pay more to get my money back?","answer":"No. Each additional fee is another stage of the same scam. Paying more will not recover previous losses. Stop all contact and report."},{"question":"The notification names a real lottery or brand — does that change anything?","answer":"No. Scammers routinely borrow real names because it costs nothing and adds plausibility. Real promoters contact winners through the entry route used, publish clear terms, and never require payment to release winnings."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-charity-asking-for-disaster-relief-donations-legitimate","url":"https://scamencyclopedia.org/questions/is-a-charity-asking-for-disaster-relief-donations-legitimate","question":"Is a charity asking for disaster-relief donations online legitimate?","shortAnswer":"It may not be. Fake charity appeals surge after major disasters — always verify a charity's registration before donating.","explanation":"After earthquakes, floods, or conflict events, scammers quickly launch fake charity websites, crowdfunding campaigns, and social media appeals that mimic real humanitarian organisations. Donations sent to these fakes fund the scammer, not victims. Even well-intentioned crowdfunding campaigns may misuse funds. Legitimate charities are registered with a regulatory body in their country — for example, the Charity Commission in England and Wales, the IRS 501(c)(3) register in the US, or equivalent national authorities. Verifying registration takes only a few seconds and protects your donation. Prefer established, well-known organisations with a long track record in the relevant region.\n\nSpeed is the scammer's edge after a disaster: fake appeals go live within hours, while your emotional response is strongest and before fact-checkers catch up. That urgency is precisely why pausing works. A legitimate charity will still need your donation tomorrow; only a fraudulent appeal loses if you take ten minutes to verify. Be especially careful with appeals that arrive through forwarded messages or that feature graphic imagery and a payment link in the same breath — emotional intensity plus an immediate payment mechanism is the signature combination.\n\nHow you pay matters as much as who you pay. Card payments through a charity's own website leave a dispute trail; wire transfers, gift cards, and crypto do not. And if you want your money to reach a specific crisis, established organisations publish how funds are allocated — a level of transparency that pop-up appeals structurally cannot offer.","redFlags":["Appeal arrives by unsolicited email, text, or social media message","Charity name is very similar to but not quite the same as a known organisation","No charity registration number provided","Payment only by wire, crypto, or gift card rather than secure card portal","Website was registered very recently — check with a WHOIS tool"],"whatToDoNow":["Verify the charity's registration on your national charity register","Donate directly through the official website you navigate to independently","Avoid donating in response to unsolicited social media posts","Report fake appeals to your national fraud authority and the platform"],"faq":[{"question":"Are GoFundMe campaigns safe to donate to?","answer":"GoFundMe offers some refund guarantees, but individual campaigns vary greatly in legitimacy. Verify the campaigner's identity and look for coverage by reputable news sources before donating to individuals you don't know personally."},{"question":"What if the appeal comes from someone I know who shared it?","answer":"Well-meaning people share fake appeals constantly — a share is a sign of sympathy, not verification. Check the underlying organisation's registration yourself before donating, regardless of who passed it along."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-job-offer-that-needs-my-bank-details-before-i-start-a-scam","url":"https://scamencyclopedia.org/questions/is-a-job-offer-that-needs-my-bank-details-before-i-start-a-scam","question":"Is a job offer that needs my bank details before I start a scam?","shortAnswer":"Not always, but it depends heavily on context. A legitimate employer needs bank details to set up payroll — but asking for full account credentials or requesting you receive and forward payments is a scam.","explanation":"Genuine employers ask for bank account and sort/routing numbers for payroll before your first pay date. This is normal and safe. The red flags are different: a scam job will ask for your online banking login credentials, instruct you to receive large payments and forward them (money mule recruitment), or ask for account details before you have signed a formal contract or been through a verifiable hiring process. If you found the job through a suspicious channel, can't verify the employer independently, or the job description involves handling third-party funds, treat any bank-detail request with caution and verify the employer's legitimacy first.\n\nSequence is the clearest signal. In a genuine hiring process, bank details come after an interview, a written offer, and usually a signed contract — collected through a payroll form or an HR system, not a chat message. A 'job' that asks for financial information in the first exchanges has inverted that order because the information is the point. The same applies to requests for copies of your ID before any verifiable offer exists: identity documents plus bank details are the raw material of account fraud committed in your name.\n\nMoney-mule recruitment deserves the sharpest line because the consequences fall on you. Any role described as payment processing, funds handling, or receiving transfers into your personal account is asking you to launder money, whatever the job title says. Banks close accounts used this way and the legal exposure is yours — decline, keep the messages, and report the recruiter.","redFlags":["Employer asks for your online banking username and password","Job involves receiving and forwarding payments to third parties","No formal contract or verifiable company details provided","Job was offered without a verifiable interview or hiring process","Request comes before any verifiable offer letter"],"whatToDoNow":["Verify the employer exists through independent business registry searches","Never share online banking credentials with any employer","If the role involves forwarding payments, it is very likely money mule recruitment — decline","Report suspicious job offers to your national fraud or employment authority"],"faq":[{"question":"What is money mule recruitment?","answer":"Money mule recruitment involves criminals recruiting unwitting workers to receive stolen funds and forward them on, usually keeping a 'commission'. This is illegal regardless of whether you knew the money was stolen."},{"question":"What bank information is safe to give a verified employer?","answer":"Account number and sort or routing code for payroll deposits — the same details on any invoice or cheque — are normal. Online banking usernames, passwords, one-time codes, and card CVVs are never needed for payroll and should never be shared."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-social-security-suspension-letter-or-call-real","url":"https://scamencyclopedia.org/questions/is-a-social-security-suspension-letter-or-call-real","question":"Is a Social Security suspension letter or call real?","shortAnswer":"If it threatens immediate suspension unless you call a number or pay a fee, it is a scam. Social Security is never suspended by phone call.","explanation":"Social Security impersonation is one of the top fraud types reported to the FTC. Callers or letter senders claim that your Social Security number has been suspended, linked to criminal activity, or involved in a drug trafficking investigation, and that you must confirm your identity or pay a fee to reinstate it. Real Social Security Administration (SSA) communications may arrive by post about benefits, but the SSA will never call and demand immediate payment, ask for gift cards, threaten arrest, or insist you stay on the line. If you have concerns about your actual Social Security record, call the SSA directly at 1-800-772-1213.\n\nA core fact defuses the entire script: a Social Security number cannot be 'suspended'. The number exists as a permanent identifier, and no criminal investigation works by phoning the subject and demanding same-day payment. The scam's power comes from stacking authority (a government agency), fear (arrest, frozen benefits), and isolation (stay on the line, tell no one) — the same three-part structure used in police, court, and tax impersonation calls worldwide. Recognising the structure protects you even when the agency name changes.\n\nSome versions escalate by transferring you between 'officers' or 'departments', complete with badge numbers and case files, to simulate bureaucracy. Others follow up a robocall with a live agent. None of that stagecraft changes the test: government bodies do not take gift cards, do not demand payment during a phone call, and do not object to you hanging up and verifying independently.","redFlags":["Call or letter claims your SSN is suspended or flagged for criminal activity","Threat of arrest unless you act immediately","Demand for payment by gift card, wire, or crypto","Request to confirm your full SSN, date of birth, or bank account","Caller insists you stay on the phone and not tell anyone"],"whatToDoNow":["Hang up and do not call back the number provided","Call the real SSA at 1-800-772-1213 to check your account status","Report the scam to the SSA's Office of the Inspector General","File a report with the FTC at reportfraud.ftc.gov"],"faq":[{"question":"Could a real government letter about my SSN be legitimate?","answer":"The SSA does send letters about benefit changes, Medicare enrollment, and similar matters. Legitimate letters include a return address of a real SSA office and do not demand immediate payment or threaten arrest."},{"question":"I gave the caller my Social Security number — what now?","answer":"Act as if identity theft is likely: place a fraud alert or credit freeze with the credit bureaus, monitor your credit reports and benefit statements, and file an identity-theft report so you have a documented record for disputing anything opened in your name."}],"lastReviewed":"2026-08-01"},{"slug":"can-scammers-use-my-email-address-without-hacking-my-account","url":"https://scamencyclopedia.org/questions/can-scammers-use-my-email-address-without-hacking-my-account","question":"Can scammers use my email address without hacking my account?","shortAnswer":"Yes. Email spoofing lets criminals send messages that appear to come from your address without ever accessing your account.","explanation":"Email spoofing exploits weaknesses in email protocols to substitute any sender address in the 'From' field. Criminals use this to impersonate executives, friends, or institutions — or to make phishing emails appear to come from a victim's own address in 'you have been hacked' extortion emails. Receiving a message from your own address does not mean your account has been compromised. Modern email authentication standards (SPF, DKIM, DMARC) reduce but don't eliminate spoofing. If people are receiving spam that looks like it came from you, run a reputable antivirus scan and change your email password as a precaution, but the most likely explanation is spoofing rather than a full account breach.\n\nThe practical distinction between spoofing and compromise is worth knowing because the responses differ. Spoofing leaves no trace inside your account: your Sent folder is clean, there are no unfamiliar logins in your account's security activity, and no forwarding rules or recovery addresses you didn't set. A genuine breach usually shows at least one of those. Checking your account's security dashboard — sign-in history, connected devices, forwarding rules, and app passwords — gives you a factual answer in minutes instead of anxiety.\n\nIf spoofing is the verdict, understand that you cannot stop it directly, because the fake mail never touches your systems — it is assembled elsewhere with your address pasted in. What you can do is make it less effective: warn contacts so they treat oddly-worded messages from 'you' with suspicion, and keep your account itself hardened with a unique password and two-factor authentication so the impersonation never becomes a takeover.","redFlags":["Emails from your address that you did not send","Extortion email claiming your account is hacked and containing your password","Contacts receiving suspicious messages attributed to you","Message references compromising material and demands payment to suppress it"],"whatToDoNow":["Change your email password and enable two-factor authentication","Check your Sent folder for messages you didn't write","Run a reputable antivirus scan to rule out device compromise","Inform contacts that your address is being spoofed if they are receiving fake emails from you"],"faq":[{"question":"An extortion email says it has footage of me from my own camera. Is it real?","answer":"Almost certainly not. This is a standard sextortion script. The claim about camera access is fabricated to cause fear. The password it quotes is typically from an old data breach. Do not pay."},{"question":"How can I tell spoofing apart from a real account breach?","answer":"Check inside your account: sign-in history, Sent folder, forwarding rules, and recovery details. Spoofing leaves all of those untouched because the fake mail is created outside your account. Anything unfamiliar in those places points to a breach — change your password immediately."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-online-casino-that-wont-let-me-withdraw-a-scam","url":"https://scamencyclopedia.org/questions/is-an-online-casino-that-wont-let-me-withdraw-a-scam","question":"Is an online casino that won't let me withdraw my winnings a scam?","shortAnswer":"Quite possibly. Unlicensed online casinos that block withdrawals and demand extra fees or wagering requirements are a recognised form of gambling fraud.","explanation":"Fraudulent online casinos allow players to deposit easily but create barriers when withdrawal is requested. These include impossible wagering requirements buried in terms, demands for additional verification fees, or simply ignoring or delaying withdrawal requests indefinitely. Some fake casinos display large winning amounts on a fabricated dashboard to encourage larger deposits before the platform disappears. To protect yourself, play only with casinos licensed by recognised gambling authorities such as the UKGC (UK), MGA (Malta), or equivalent, and check for the regulator's verification seal independently. Licensed casinos have legal obligations to process withdrawals within set timeframes.\n\nA useful test is to look at the friction gradient. On a fraudulent casino, depositing takes one tap while withdrawing spawns identity checks, minimum-turnover conditions, and support tickets that go nowhere; on a licensed operator, verification happens up front — before or shortly after your first deposit — precisely so that withdrawals can be routine. A site that only becomes interested in 'verifying' you when you try to take money out has told you which kind it is.\n\nBe cautious, too, about where the casino found you. Unlicensed operations recruit heavily through social media tipsters, streaming personalities, and referral bonuses that require deposits, and they often rebrand under a new name once complaints accumulate — same games, same scripts, new domain. Chasing a blocked balance with further deposits never releases the money; it is the mechanism by which the loss grows.","redFlags":["Casino requires a deposit to 'unlock' winnings","Withdrawal requests trigger new verification or fee demands","Casino cannot show a verifiable licence from a recognised gambling authority","Customer service becomes unresponsive when withdrawal is requested","Very high wagering requirements that were not prominently disclosed"],"whatToDoNow":["Stop depositing immediately","File a complaint with the licensing authority if the casino claims to be regulated","Report unlicensed operations to your national gambling authority","Contact your bank to dispute charges if payments were taken under misleading conditions"],"faq":[{"question":"How do I verify whether an online casino is legitimately licensed?","answer":"Go to the regulator's official website (e.g., gamblingcommission.gov.uk for the UKGC) and search for the casino in their published list of licensed operators."},{"question":"The casino says I must deposit more to 'unlock' my withdrawal. Should I?","answer":"No. A pay-to-withdraw demand is a defining advance-fee pattern — each payment produces a new condition, never the payout. Stop depositing, gather screenshots of your balance and the demands, and take the evidence to your bank and regulator."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-friend-who-asks-me-to-invest-in-a-crypto-platform-trustworthy","url":"https://scamencyclopedia.org/questions/is-a-friend-who-asks-me-to-invest-in-a-crypto-platform-trustworthy","question":"Is a friend who asks me to invest in a crypto platform trustworthy?","shortAnswer":"Be cautious. Your friend may genuinely believe in it, or may themselves be a victim trying to recoup losses, or — rarely — may be an unwitting recruiter for a fraud ring.","explanation":"One of the most painful aspects of investment fraud is that the referral often comes from someone genuinely trusted — a family member, old friend, or colleague. In some cases the referrer truly believes in the platform. In others, they are participating in a multi-level recruitment structure and only make money if they recruit others. In pig-butchering and Ponzi schemes, early participants can appear to withdraw profits (seeded by scammer funds) and show this as evidence the platform works. Before investing based on a personal recommendation, verify the platform independently with your financial regulator and consider whether the recommender has actually withdrawn real profits into their bank account.\n\nThe distinction between on-platform numbers and off-platform money is the single most useful question you can ask. A dashboard balance, a screenshot of gains, even a small successful withdrawal early on — all of these can be manufactured by whoever controls the platform. What cannot be faked is a pattern of meaningful withdrawals landing in a real bank account over time. If your friend's evidence is entirely inside the platform's own interface, they have not yet proven anything, including to themselves.\n\nHandle the conversation with care, because your friend may be emotionally and financially committed. Rather than declaring the platform a fraud, suggest a neutral test you can do together: check the regulator's register, search the platform name alongside 'withdrawal problems', and try withdrawing a meaningful portion of their balance. A legitimate platform passes all three without friction; resistance to the test tells you both what you need to know.","redFlags":["Friend was introduced to the platform by someone they met online","Returns sound unusually consistent or guaranteed","Platform is not registered with any financial regulator","Friend encourages you to recruit others to earn more","Friend has not actually withdrawn and spent profits in the real world"],"whatToDoNow":["Check the platform on your country's financial regulator register before investing anything","Ask your friend whether they have physically withdrawn and used profits","Invest only amounts you can afford to lose entirely","If you believe your friend is being defrauded, share resources on investment fraud recovery"],"faq":[{"question":"Is it my fault if my friend loses money after I recommend a platform?","answer":"If you acted in good faith and genuinely believed in the platform, you are not legally liable. However, recommending unregistered investments can damage relationships. Always verify before recommending."},{"question":"How do I talk to a friend I think is caught in an investment scam?","answer":"Avoid confrontation — victims double down when they feel judged. Ask curious questions, suggest a joint withdrawal test, and share general resources about pig-butchering fraud rather than accusations. Keep the door open; victims often need several conversations before acting."}],"lastReviewed":"2026-08-01"},{"slug":"can-i-be-scammed-by-sending-a-photo-of-my-id","url":"https://scamencyclopedia.org/questions/can-i-be-scammed-by-sending-a-photo-of-my-id","question":"Can I be scammed by sending a photo of my ID?","shortAnswer":"Yes. A photo of your ID can be used for identity theft, fraudulent account openings, loan applications, and SIM-swap attacks.","explanation":"Identity documents — passports, driving licences, national ID cards — contain enough information to impersonate you in financial and government systems. Scammers posing as landlords, employers, lenders, or marketplace buyers routinely request ID photos as a seeming legitimacy check, then use them to open bank accounts, apply for credit, register SIM cards, or sell your details on criminal marketplaces. You should share ID photos only through verified, encrypted channels with regulated businesses that have a legal obligation to protect your data. If you have already shared ID with an unknown party, consider placing a fraud alert on your credit file and monitoring your accounts closely.\n\nContext determines whether an ID request is reasonable. Banks, employers completing right-to-work checks, letting agents running referencing, and regulated platforms performing know-your-customer verification all have lawful reasons to see identification — and they collect it through secure portals with stated retention policies, not through chat apps. The suspicious pattern is an ID request that arrives early, through an informal channel, from a party whose own identity you cannot verify, especially when it is framed as proving you are 'serious' about a deal.\n\nWhen sharing is genuinely necessary, you can still reduce the blast radius. Ask how the document will be stored and when it will be deleted, send it through the organisation's official upload system rather than email where possible, and consider a visible watermark stating the purpose and date across the image. None of this eliminates risk, but it makes your document far less attractive for reuse.","redFlags":["Marketplace buyer or private landlord asks for ID before meeting or completing a deal","Job recruiter requests passport photos in the first contact","Request comes via messaging app rather than a verified business portal","No explanation of why ID is needed or how it will be stored","Party cannot be independently verified as a legitimate business"],"whatToDoNow":["Do not share ID with unverified parties","If already shared, place a fraud alert with credit reference agencies","Monitor your bank accounts and credit report for unexpected applications","Report identity theft to your national fraud authority"],"faq":[{"question":"Can I watermark my ID photo to make it safer to share?","answer":"Adding a watermark (e.g., 'For [Company] use only — [date]') makes the image harder to misuse, but does not eliminate the risk. Only share with verified regulated entities that have a stated, lawful reason to collect it."},{"question":"What can a scammer actually do with just my ID photo?","answer":"Combined with details from data breaches, an ID image can support fraudulent account openings, SIM swaps, loan applications, and identity checks on marketplaces. It also sells on criminal forums as part of identity packages, which is why exposure can surface as fraud months later."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-subscription-box-that-is-hard-to-cancel-a-scam","url":"https://scamencyclopedia.org/questions/is-a-subscription-box-that-is-hard-to-cancel-a-scam","question":"Is a subscription box that is hard to cancel a scam?","shortAnswer":"It may not be an outright scam, but deliberately difficult cancellation is deceptive practice — and in some jurisdictions, illegal under consumer protection law.","explanation":"Some subscription box companies make signing up frictionless but cancellation deliberately complex — hiding the cancel option, requiring a phone call during limited hours, or sending multiple retention offers that delay the process. Others operate on a 'free trial to paid subscription' model that charges before the customer realises. While these practices sit on a spectrum from aggressive marketing to outright fraud, consumers have rights. In the UK, the FCA and Trading Standards regulate misleading subscription terms. In the US, the FTC's 'click to cancel' rule requires businesses to make cancellation as easy as sign-up. Document every cancellation attempt and initiate a chargeback if charges continue after confirmed cancellation.\n\nThe pattern to watch for is asymmetry: one-click sign-up against multi-step cancellation. Retention flows that guilt-trip, hide the final confirm button, offer sudden discounts, or route you to a phone queue are designed to convert a decision you have already made back into revenue. You are under no obligation to accept a retention offer or explain your reasons — repeating 'cancel the subscription and confirm by email' is a complete response to every screen and script.\n\nYour bank is the second lever when the merchant will not cooperate. A written record of cancellation attempts transforms continuing charges from a billing disagreement into unauthorised transactions, which is the framing card issuers act on. You can also instruct your bank to block future payments to the merchant — a continuous payment authority can be revoked from the bank's side regardless of what the company's own cancellation flow does.","redFlags":["Cancellation requires a phone call rather than an online option","Multiple retention screens that delay the cancellation process","Charges continue after you believe you have cancelled","Terms about charges were in very small or hard-to-find text at sign-up","No acknowledgement email after cancellation requests"],"whatToDoNow":["Screenshot every step of your cancellation attempt as evidence","Email the company to create a written cancellation record","Contact your bank to block further charges if cancellation is refused","Report the company to your consumer protection authority"],"faq":[{"question":"Can I do a chargeback for a subscription I couldn't cancel?","answer":"If you made documented cancellation attempts and charges continued, most card issuers will consider a chargeback for unauthorised recurring charges. Contact your card provider with evidence."},{"question":"Can I just cancel my card to stop the charges?","answer":"Recurring authorities can sometimes follow a replacement card, so cancellation alone may not work. Tell your bank explicitly to block the merchant's recurring payment authority and dispute post-cancellation charges — that instruction is more reliable than a new card number."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-medical-equipment-discount-offer-by-phone-a-scam","url":"https://scamencyclopedia.org/questions/is-a-medical-equipment-discount-offer-by-phone-a-scam","question":"Is a medical equipment discount offer by phone a scam?","shortAnswer":"Often yes, especially in the US. Medicare and health insurance fraud involving unsolicited calls offering free or discounted equipment is widespread.","explanation":"Fraudsters contact people — particularly older adults on Medicare — claiming they are eligible for free or heavily discounted medical equipment such as braces, CPAP machines, or glucose monitors. They ask for Medicare, insurance, or payment details to 'process the claim'. In reality, they either bill government health programmes for equipment never delivered, sell the personal details, or both. Legitimate medical suppliers do not cold-call patients. Equipment is prescribed by a doctor and arranged through verified suppliers, not via an unsolicited phone offer. Never give Medicare, Medicaid, or insurance details to an inbound caller you did not contact first.\n\nThe harm here extends beyond the individual. When fraudsters bill health programmes for phantom braces and monitors, the claims attach to your record — which can complicate genuine equipment approvals later, since programmes may show you as already supplied. That is why reviewing benefit statements matters even when no money left your pocket: you are checking what was billed in your name, not just what you paid.\n\nThese operations also recycle contact lists, so one response tends to invite more calls — about different equipment, 'updated cards', or supposed refunds for the previous scam. The clean rule holds across every variant: eligibility for medical equipment starts with your own doctor, moves through a prescription, and ends with a supplier you or your clinician chose. Any offer that runs in the opposite direction — from an unknown caller toward your insurance details — is not a healthcare pathway.","redFlags":["Unsolicited call offering free or discounted medical equipment","Request for Medicare, Medicaid, or insurance details over the phone","Claim you are automatically eligible without a doctor's referral","Pressure to act quickly before an offer expires","Caller claims to represent a government health programme"],"whatToDoNow":["Hang up and do not provide any insurance or Medicare details","Report the call to the HHS OIG hotline (1-800-HHS-TIPS in the US)","Check your Medicare Summary Notice for unauthorised billings","Alert your doctor if you are concerned about your real equipment needs"],"faq":[{"question":"How do I check whether my Medicare account has been used fraudulently?","answer":"Review your Medicare Summary Notice, which lists all claims submitted under your number. You can also call 1-800-MEDICARE to report suspicious activity or request a claims history."},{"question":"Why would scammers send equipment I never asked for?","answer":"Unordered braces or monitors are sometimes shipped to create a paper trail supporting fraudulent insurance claims billed in your name. Keep the packaging, don't pay any invoice that follows, and report the billing to your insurer or health programme."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-rental-deposit-paid-by-bank-transfer-safe","url":"https://scamencyclopedia.org/questions/is-a-rental-deposit-paid-by-bank-transfer-safe","question":"Is a rental deposit paid by bank transfer safe?","shortAnswer":"Only if you have verified the landlord's identity and physically viewed the property. Paying a deposit on an unverified rental is a major scam risk.","explanation":"Rental fraud targets people searching for homes, particularly in competitive markets. Scammers copy genuine property listings and advertise them at below-market rent. After the victim expresses interest, they are told the landlord is abroad, unable to show the property, or that demand is so high a deposit is needed to hold it. Once the deposit is transferred, the fraudster disappears. Sometimes a fake viewing is arranged using a property the scammer doesn't own. Always physically view a property before paying any money, verify the landlord's identity against land registry records where available, and be suspicious of any rental that requires payment before a viewing.\n\nCompetitive markets are the accelerant. When genuine listings receive dozens of enquiries within hours, renters learn that hesitation loses homes — and scammers weaponise exactly that reflex with 'first deposit secures it' pressure. The below-market price does double duty: it attracts a flood of applicants and simultaneously explains the urgency. If a listing is priced noticeably under everything comparable in the area, treat the discount itself as the first red flag rather than the opportunity.\n\nViewings can also be staged, so a walk-through alone is not full verification for large sums. Fraudsters sometimes gain short-term access to a property — through a short-let booking or a copied key — and 'show' it to multiple victims in one weekend, collecting deposits from each. Cross-check that the person you are dealing with actually controls the property: ownership records where available, a letting agent's verifiable office, or documents matching the landlord's identity all raise the cost of impersonation sharply.","redFlags":["Landlord says they are abroad and cannot show the property personally","Rent is noticeably below market rate for the area","Request for deposit or holding fee before a physical viewing","Landlord found only via a messaging app with no verifiable identity","Pressure to pay quickly because others are interested"],"whatToDoNow":["Never pay before viewing the property in person","Verify the landlord or letting agent's identity and ownership through official channels","Use a card or protected payment method rather than bank transfer where possible","Report rental scams to your national fraud authority and the platform used"],"faq":[{"question":"Can a landlord legitimately hold a property with a fee before I view it?","answer":"Holding deposits exist but are regulated in many countries (e.g., capped at one week's rent in England). Any holding deposit should come with a written receipt and clear terms. Never pay for a property you have not seen."},{"question":"I viewed the property in person — does that prove the listing is genuine?","answer":"It helps but is not conclusive. Scammers occasionally show properties they accessed through short lets or copied keys, taking deposits from several applicants at once. Verify that the landlord or agent controls the property before transferring money, not just that the door opened."}],"lastReviewed":"2026-08-01"},{"slug":"can-a-phone-number-be-spoofed-to-look-like-a-government-agency","url":"https://scamencyclopedia.org/questions/can-a-phone-number-be-spoofed-to-look-like-a-government-agency","question":"Can a phone number be spoofed to look like a government agency?","shortAnswer":"Yes. Caller ID spoofing allows anyone to display any number, including official government helpline numbers.","explanation":"Caller ID is not a verified identity system. Any phone number — including those belonging to the IRS, Social Security Administration, FBI, police non-emergency lines, or other government agencies — can be spoofed using widely available online services. This means seeing a government number on your screen is not evidence the call is genuine. Government agencies have published guidance emphasising that they will never demand immediate payment, threaten immediate arrest without prior notice, or request payment by unconventional means. If you receive a call from what appears to be a government number, hang up and call the agency back using a number you find on its official website.\n\nThe reason spoofing persists is architectural: caller ID was designed as a courtesy label, not an authentication system, and the displayed number is asserted by the originating side of the call. Anti-spoofing standards adopted by carriers have reduced some abuse, but they are unevenly deployed and can be circumvented, so the display can never carry the weight people instinctively give it. The safe mental model is to treat caller ID the way you would treat the name written on an envelope — useful, but proof of nothing.\n\nOne procedural detail matters when you verify: make the return call yourself, ideally from a different phone or after confirming the line has fully disconnected, and dial a number you sourced independently. Some fraud operations keep the original line open or provide their own 'verification' number, so victims believe they called back and reached the real agency when they never left the scammer's system.","redFlags":["Call from what appears to be an official government number demanding payment","Caller threatens immediate consequences if you hang up","Payment demanded by gift card, wire, or crypto","Caller instructs you not to tell family or an attorney","Sense of extreme urgency — minutes to comply"],"whatToDoNow":["Hang up","Look up the agency's number on its official website and call back to verify","Report the spoof call to the FTC, FCC (US), or Ofcom (UK)","Share the experience with people who might be similarly targeted"],"faq":[{"question":"Does my phone carrier protect me from spoofed calls?","answer":"Most major carriers use STIR/SHAKEN call authentication technology that can flag some spoofed calls, but it is not foolproof. Treat any call demanding money or personal information with scepticism regardless of the caller ID."},{"question":"If I call the number back and reach the real agency, what does that prove?","answer":"Calling back a number you found independently proves who you reached — it does not prove who originally called you. Use the return call to ask whether the agency actually contacted you; in impersonation scams the answer is almost always no."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-text-from-amazon-about-a-suspended-account-real","url":"https://scamencyclopedia.org/questions/is-a-text-from-amazon-about-a-suspended-account-real","question":"Is a text from Amazon about a suspended account real?","shortAnswer":"It may not be. Fake Amazon account-suspension texts are a common phishing attack designed to steal your login and payment credentials.","explanation":"Scammers send texts or emails impersonating Amazon, warning that your account has been suspended, a purchase was declined, or unusual activity has been detected. The message contains a link to a fake Amazon login page that harvests your credentials and sometimes your payment card details. Real Amazon account notifications appear inside the Amazon app and on your account dashboard. Amazon does send emails, but it never includes a link and asks you to enter your full payment details in response to an unsolicited message. If you are concerned about your account, open the Amazon app directly or type amazon.com in your browser — never use a link from a text.\n\nThe credentials are usually only the first objective. A harvested account login opens saved payment methods, gift card balances, and order history — and because so many people reuse passwords, the same combination is immediately tried against email, banking, and other retail accounts in automated credential-stuffing runs. Some campaigns follow the fake login with a fake 'security call' from the retailer, using the details you just entered to sound authoritative. One phished password can therefore cascade across your digital life within hours.\n\nThe defence is procedural rather than perceptual, because the fakes are visually excellent. Decide once that account problems are only ever checked by opening the app or typing the address yourself, and the quality of the forgery stops mattering. Adding two-factor authentication and unique passwords per account means that even a successful phish captures something that cannot be reused elsewhere.","redFlags":["Text or email claiming your Amazon account is suspended","Link in the message leads to a site that looks like Amazon but has a different URL","Request to enter your password and payment details immediately","Message creates urgency — account will be permanently deleted unless you act now","Sender number is unknown or doesn't match Amazon's official communication"],"whatToDoNow":["Do not click the link — go directly to amazon.com or open the app","Check your actual account status from within the verified app or website","Change your Amazon password if you entered credentials on a suspicious site","Report the phishing message to stop-spoofing@amazon.com"],"faq":[{"question":"How can I tell if an Amazon email is real?","answer":"Genuine Amazon emails come from @amazon.com addresses. Check for your name (not 'Dear Customer'), verify any order numbers exist in your account, and go directly to amazon.com rather than clicking links."},{"question":"I entered my password on the fake page — what should I do first?","answer":"Change the password on the real site immediately, then change it anywhere else you reused it, starting with your email account. Check recent orders and saved payment methods for changes, and enable two-factor authentication before the attacker does."}],"lastReviewed":"2026-08-01"},{"slug":"can-someone-scam-me-just-by-knowing-my-email-address","url":"https://scamencyclopedia.org/questions/can-someone-scam-me-just-by-knowing-my-email-address","question":"Can someone scam me just by knowing my email address?","shortAnswer":"Having your email alone gives scammers limited but real power — including phishing, credential stuffing, and spam — though not direct account access.","explanation":"Your email address is effectively your online identity. While knowing it alone doesn't give a scammer access to your accounts, they can use it to: send targeted phishing emails that appear personalised; try it against leaked password databases in credential-stuffing attacks; enroll it in spam campaigns; register it on services to trigger verification emails; and impersonate you to your contacts using spoofing. If your email address appears in a data breach (check free services like HaveIBeenPwned), change the password for that account and any accounts where you reused the same password. Use a unique password for every account and enable two-factor authentication.\n\nThe email account itself deserves the strongest protection you have, because it is the master key to everything else: password resets for banking, shopping, and social accounts all flow through your inbox. An attacker who gets into the email doesn't need your other passwords — they can reset them. That is why the priority order is clear: your email password should be unique and strong, two-factor authentication should be enabled there first, and recovery details (backup email, phone number) should be checked periodically for anything you didn't add.\n\nExposure also accumulates quietly over time. Every service you register with becomes another place your address can leak from, which is why segmenting — one address for important accounts, another for shopping and newsletters, or aliasing features where your provider offers them — pays off. It limits how much of your digital life any single breach can map, and makes phishing easier to spot when a 'bank' email arrives at your shopping-only address.","redFlags":["Receiving phishing emails addressed to your exact name and email","Login alerts from services you didn't access","Contacts receiving emails that appear to come from you","Password reset emails you didn't initiate","Your email appears in a data breach notification"],"whatToDoNow":["Check haveibeenpwned.com to see if your email is in any known breach","Change passwords for all affected accounts and use unique passwords everywhere","Enable two-factor authentication on your email and key accounts","Consider using a password manager to maintain strong, unique credentials"],"faq":[{"question":"Should I give out a different email address for online shopping?","answer":"Yes — using a secondary or disposable email address for shopping, newsletters, and non-critical accounts helps contain the blast radius of any breach."},{"question":"My email was in a breach — do I need a new address?","answer":"Usually not. Change the password for the breached service and anywhere it was reused, enable two-factor authentication, and expect more phishing to that address. A new email is only worth the disruption if the account itself was taken over or spam becomes unmanageable."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-online-gaming-item-seller-a-scam","url":"https://scamencyclopedia.org/questions/is-an-online-gaming-item-seller-a-scam","question":"Is someone offering to sell me rare gaming items outside the official marketplace a scam?","shortAnswer":"High risk. Trading valuable in-game items outside official platforms removes all buyer protections and is a common route to theft and fraud.","explanation":"Scammers target gamers by offering rare skins, accounts, in-game currency, or items at attractive prices through Discord, Reddit, or social media rather than the game's official marketplace. Common fraud patterns include the seller disappearing after receiving payment, sending a different item or lower-value skin, or — in account trades — recovering the sold account using linked email and personal details after the buyer pays. Some scammers also use phishing links disguised as trade verification portals. Games with valuable item economies such as CS2, Dota 2, and Roblox are particularly affected. Use only official in-game trading systems or platform-verified third-party marketplaces with escrow.\n\nYounger players are targeted deliberately, because in-game wealth is often the first valuable property a teenager controls and the embarrassment of being tricked keeps losses unreported. The phishing side is frequently more damaging than the trade itself: a fake 'trade verification' or 'tournament sign-up' page captures platform credentials, and a hijacked account with years of items and progress becomes both the loot and a tool to scam the victim's friends list.\n\nThe discounts follow the same law as every other market: someone selling valuable items far below market price either doesn't own them, obtained them with stolen payment methods, or is using the offer as bait. Purchases made with stolen cards are routinely reversed later, and platforms may remove items or suspend accounts that received them — meaning even a 'successful' off-platform deal can unwind weeks afterwards, with the buyer bearing the loss.","redFlags":["Offer made through DM rather than an official trading platform","Price is significantly below the item's market value","Seller insists on payment first before item transfer","Seller sends a link to an 'authentication' or 'verification' site","Account seller provides recovery email that isn't yours"],"whatToDoNow":["Use only official trading features or platform-escrow marketplaces","Report suspicious traders to the game's support team","If you lost an item, report to the game developer and your payment provider","Warn your gaming community of known scammer accounts"],"faq":[{"question":"Is it safe to buy a gaming account from another player?","answer":"Most games' terms of service prohibit account selling, and there is no safe way to prevent the original owner recovering it later. The risk is high even from seemingly reputable sellers."},{"question":"A trader sent me a link to 'verify' the trade — is that normal?","answer":"No. Verification links are the most common phishing vector in gaming trades — the page mimics the platform's login and captures your credentials. Real trades complete entirely inside the game or platform interface without any external sign-in."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-payday-loan-advertisement-on-social-media-legitimate","url":"https://scamencyclopedia.org/questions/is-a-payday-loan-advertisement-on-social-media-legitimate","question":"Is a payday loan advertisement on social media legitimate?","shortAnswer":"Treat with caution. Many payday loan ads on social media lead to unlicensed lenders, clone firms, or fee-upfront loan scams.","explanation":"Social media payday loan fraud takes several forms. In advance-fee loan scams, an unlicensed 'lender' approves your application quickly but requires you to pay a fee, insurance, or tax upfront before the loan is released — the loan never arrives. Clone firm scams copy the name and registration details of real regulated lenders and advertise with similar branding. Loan fraud also targets people who have previously been declined, offering 'guaranteed approval' regardless of credit history — a promise no legitimate lender can make. Check that any lender is registered with your national financial regulator before proceeding, and never pay a fee before receiving a loan.\n\nThese ads work because they arrive at moments of financial stress, when the normal instinct to verify competes with the need for money this week. Fraudsters understand that dynamic and design for it: instant approval, no credit check, funds 'released' the same day — each promise removes a reason to pause. But the sequence of a legitimate loan never changes: assessment first, then agreement, then money flows to you. Any process where money flows from you before the loan exists has reversed that order because the fee is the product.\n\nEven when the lender is real, social media loan ads deserve scrutiny for a second reason: data harvesting. 'Pre-approval' forms that collect income, employer, bank, and ID details generate leads that are sold onward, which is why one application is often followed by a wave of calls and texts from other 'lenders'. Apply only through a lender's own verified website after confirming its registration — never through a form embedded in or linked from an advert.","redFlags":["Upfront fee required before loan is released","Guarantee of approval regardless of credit history","Lender is not listed on your financial regulator's register","Contact only via social media with no verified phone number or address","Loan approved without a credit check"],"whatToDoNow":["Verify the lender on your national financial regulator's register before applying","Never pay a fee to receive a loan","Report suspicious lenders to your financial regulator and advertising platform","Seek debt advice from a free, non-profit financial counselling service"],"faq":[{"question":"Is a guaranteed loan approval offer ever real?","answer":"No regulated lender can guarantee approval before assessing your creditworthiness and identity. Any claim of guaranteed approval regardless of credit history is a scam signal."},{"question":"What is a clone firm and how do I spot one?","answer":"A clone firm copies the name, registration number, and branding of a genuinely authorised lender. Spot it by finding the firm on the regulator's register yourself and using only the contact details listed there — a clone's website and phone numbers will differ from the register's."}],"lastReviewed":"2026-08-01"},{"slug":"can-a-scammer-access-my-bank-through-remote-desktop-software","url":"https://scamencyclopedia.org/questions/can-a-scammer-access-my-bank-through-remote-desktop-software","question":"Can a scammer access my bank through remote desktop software?","shortAnswer":"Yes. Granting remote access to a scammer is one of the most direct routes to bank account takeover and large financial losses.","explanation":"Remote desktop tools such as AnyDesk, TeamViewer, and Quick Assist allow one person to view and control another's computer. Tech-support scammers, fake bank fraud teams, and fake IT personnel persuade victims to install and grant access to these tools under the pretence of fixing a problem or investigating fraud. Once connected, the scammer can access banking sites, transfer funds, change security settings, read stored passwords, and install persistent malware. They often ask you to 'look away' during the session. No legitimate bank, Microsoft employee, or tech-support agent from a reputable company will ever ask you to install remote access software in response to an inbound call.\n\nThe tools themselves are legitimate — IT departments and genuine support desks use them daily — which is exactly what makes the scam work. The software carries real branding, installs cleanly, and behaves professionally, so nothing about the technical experience feels fraudulent. The deception is entirely in the context: who initiated the contact and why. Remote access requested by someone who called you is a fundamentally different transaction from remote access you arranged with a provider you chose.\n\nVictims often report that the session included convincing theatre — scrolling system logs presented as evidence of hacking, a 'refund' that appears to overpay because the scammer edited the on-screen HTML of the banking page, then a plea to return the difference. That overpayment moment is the heart of many remote-access scams: the money that appears in your account was moved from your own savings or is simply a doctored display, and the 'refund' you send back is the theft. If any remote session ends with you being asked to move money, the session was the scam.","redFlags":["Inbound caller asks you to download AnyDesk, TeamViewer, or similar software","Caller claims to be from your bank, Microsoft, Apple, or HMRC","You are asked to open your bank account while they 'monitor' for fraud","Caller asks you not to watch the screen during the session","Urgency — your computer has a virus, your account is under attack, act now"],"whatToDoNow":["End the remote session immediately by closing the software or restarting your computer","Change all passwords from a clean device","Call your bank from the number on your card to flag potential access","Run a reputable antivirus scan to check for installed malware"],"faq":[{"question":"I gave remote access — how much damage could have been done?","answer":"Potentially significant. A connected scammer can install malware, read browser-saved passwords, initiate bank transfers, and set up persistent access. Change all passwords, alert your bank, and run a full security scan."},{"question":"Is it ever safe to allow remote access to my computer?","answer":"Yes — when you initiated the contact with a provider you chose and verified, such as your employer's IT desk or a support service you called through official channels. The rule is about direction: access you arranged is a service; access requested by an inbound caller is an attack."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-facebook-ad-for-a-designer-brand-at-90-percent-off-real","url":"https://scamencyclopedia.org/questions/is-a-facebook-ad-for-a-designer-brand-at-90-percent-off-real","question":"Is a Facebook ad for a designer brand at 90% off real?","shortAnswer":"Almost certainly not. Steep discount ads for luxury brands on social media almost always lead to fake goods, no delivery, or card theft.","explanation":"Counterfeit and fraudulent brand ads are among the most reported scams on social media. Fraudsters create pages that closely mimic official brand accounts, run targeted ads, and direct shoppers to convincing fake websites. Victims either receive a cheap counterfeit, receive nothing at all, or have their card details harvested for further fraud. Legitimate luxury brands almost never discount their products by more than a modest percentage, and they never sell through unofficial Facebook pages. Before purchasing, check the seller's page age (new pages are suspect), the website's domain, and whether the URL matches the official brand domain.\n\nThe ad targeting makes these campaigns feel personal when they are anything but. Fraud operations buy audiences interested in fashion and luxury goods, rotate through hundreds of disposable pages, and relaunch under new names as fast as reports take them down. 'Closing down sale' and 'warehouse clearance' framings are especially common because they explain the impossible price and add a deadline in one stroke. The same mechanics apply across platforms — the Facebook version of this scam runs identically on other social networks and search ads.\n\nWhere you land matters as much as where you started. Check the actual domain in the address bar rather than the name shown in the ad, and be alert to lookalike spellings and unusual endings. Then apply the retail logic: genuine luxury brands protect their pricing as part of their identity, and authorised discount channels (outlets, seasonal sales) are announced on the brand's own site. A tenth-of-retail price on an unfamiliar domain is not a loophole you found — it is the entire pitch.","redFlags":["Ad price is 70-90% below the brand's retail price","Facebook page was created recently or has very few followers","Website URL does not match the official brand domain","Payment only via PayPal Friends and Family or bank transfer","No contact information, return policy, or business address on the website"],"whatToDoNow":["Verify the website domain against the official brand website before buying","Check the Facebook page creation date and review history","Report the ad to Facebook using the 'Report Ad' option","If you have already paid, dispute the charge with your card provider"],"faq":[{"question":"What if the website has a padlock icon in the browser?","answer":"The padlock (HTTPS) only means the connection is encrypted — it does not mean the site is legitimate or that the seller is trustworthy. Scam sites routinely use HTTPS."},{"question":"The item arrived but it's clearly fake — what are my options?","answer":"Dispute the card charge as counterfeit or significantly not as described, keeping photos of the item, packaging, and listing. Report the shop to the platform that ran the ad. Be aware that knowingly importing counterfeits can itself cause customs problems in some countries."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-binary-options-trading-platform-legitimate","url":"https://scamencyclopedia.org/questions/is-a-binary-options-trading-platform-legitimate","question":"Is a binary options trading platform legitimate?","shortAnswer":"In most jurisdictions, binary options trading platforms targeting retail customers are either banned or heavily restricted, and many are outright scams.","explanation":"Binary options platforms present themselves as simple financial products where you bet whether an asset will go up or down within a short time frame. Regulators in the UK, EU, Canada, Australia, and many other countries have banned retail binary options because they function more like gambling than investment and because the industry has been rife with manipulation. On fraudulent platforms, the software is rigged so that the house always wins, withdrawal requests are refused, and customer service vanishes after deposits are made. Even on platforms that appear to operate, the model is structured so that the platform profits when customers lose. Regulated financial advisers do not recommend binary options.\n\nThe 'account manager' is the feature that distinguishes these operations from ordinary bad investments. Victims are assigned a personal broker who calls regularly, celebrates early wins, and coaches ever-larger deposits — sometimes even 'lending' bonus funds that come with withdrawal-blocking conditions buried in the terms. The relationship is the product: it manufactures trust, discourages independent advice, and provides a human voice to explain away every withdrawal failure. Real regulated brokers do not operate through high-pressure personal phone campaigns.\n\nBecause retail bans exist in so many jurisdictions, these platforms typically operate from offshore locations beyond your regulator's practical reach, which is why prevention matters far more than recovery. If you have already deposited, stop all further payments regardless of what the account manager promises, keep every communication as evidence, and be ready for the follow-up wave: victims of binary options fraud are heavily targeted by recovery-fee scammers who buy lists of previous victims.","redFlags":["Platform claims to offer easy guaranteed profits from binary options","High-pressure sales calls from account managers","Withdrawal requests are delayed, blocked, or subject to additional fees","Platform is not listed on any recognised financial regulator's register","Broker was recommended by a social media influencer or online group"],"whatToDoNow":["Do not deposit any funds","Check your financial regulator's warning list for the platform name","Report to your national financial conduct authority","If money is already deposited, contact your bank and the regulator immediately"],"faq":[{"question":"Can I recover money lost on a binary options platform?","answer":"Recovery is difficult but not impossible. Regulatory bodies sometimes pursue fraudulent operators. Beware of recovery scams that promise to retrieve your lost funds for an upfront fee — these are almost always a second fraud."},{"question":"My account shows profits — doesn't that mean the platform works?","answer":"Not necessarily. On fraudulent platforms the displayed balance is just a number the operator controls, inflated to encourage bigger deposits. The only meaningful test is withdrawing to your bank account — and on scam platforms that is exactly the step that fails."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-tiktok-live-crypto-giveaway-real","url":"https://scamencyclopedia.org/questions/is-a-tiktok-live-crypto-giveaway-real","question":"Is a TikTok Live crypto giveaway real?","shortAnswer":"No. Crypto giveaways broadcast on TikTok Live or any other platform, whether hosted by a real or impersonated account, are invariably scams.","explanation":"Crypto giveaway scams have migrated across every major platform including TikTok, YouTube, and X (formerly Twitter). They typically involve a live stream where a well-known figure — real or deepfake — appears to host an event promising to double any crypto sent to a specified wallet address. The 'send to receive back double' promise is always false: there is no mechanism by which this could work, and no legitimate organisation has ever run such a promotion. Scammers also hijack high-follower accounts to lend credibility to these streams. Never send cryptocurrency to any address shown in a giveaway live stream under any circumstances.\n\nIt helps to see why the 'double your crypto' framing is chosen over any other lie: it converts a payment into what feels like a transaction. Victims do not experience themselves as giving money away — they believe they are participating in a promotion with a defined return, often justified on-screen as a celebration, an adoption push, or a marketing budget being 'given back'. The countdown timer and live chat full of fake thank-you messages complete the illusion that others are being paid out in real time.\n\nThe format also exploits how platforms surface live content: streams can be boosted to huge audiences before moderation reviews them, and hijacked verified accounts inherit years of accumulated trust in seconds. Treat the medium itself as the warning. Any live broadcast whose call to action is sending cryptocurrency to a wallet address is a scam in progress, regardless of whose face, logo, or checkmark appears on it.","redFlags":["Live stream promises to double your cryptocurrency","Famous or credible figure appears to endorse the giveaway","Wallet address displayed on screen with urgent countdown","Comments are disabled or flooded with fake positive reactions","Stream quality is unusually perfect or editing inconsistencies suggest AI generation"],"whatToDoNow":["Do not send any cryptocurrency","Report the live stream to TikTok using the in-app reporting feature","Report to your national financial regulator","Warn others in comments or communities if you see the stream"],"faq":[{"question":"What if the giveaway looks like it is from a verified account?","answer":"Verified accounts can be hacked or impersonated with similar usernames. A platform's verification badge does not confirm the legitimacy of a specific promotion. No legitimate person or company sends back double the crypto you send them."},{"question":"I sent crypto to a giveaway address — is there any way to get it back?","answer":"The transaction itself cannot be reversed. Report the wallet address to the platform and your national fraud authority, and notify any exchange you sent from — if the funds pass through a cooperative exchange, law enforcement occasionally freezes them. Ignore anyone offering guaranteed recovery for a fee."}],"lastReviewed":"2026-08-01"},{"slug":"can-someone-hack-my-phone-by-sending-a-text","url":"https://scamencyclopedia.org/questions/can-someone-hack-my-phone-by-sending-a-text","question":"Can someone hack my phone by sending a text message?","shortAnswer":"In rare cases yes — through zero-click exploits targeting unpatched OS vulnerabilities — but the far more common risk is phishing links within texts.","explanation":"Highly sophisticated attacks known as zero-click exploits can compromise certain phones when a specially crafted message is received, without the user clicking anything. These attacks generally target specific individuals using expensive commercial spyware and are not used in typical mass fraud. For most people, the real risk from text messages is smishing: a text that contains a link leading to a phishing site or malware download, requiring the user to take an action. Keeping your phone's operating system and apps fully updated is the best protection against both categories of attack, as updates patch known vulnerabilities. Be cautious about any link in an unexpected text, even from a number you recognise.\n\nSeparating the two threat levels prevents both panic and complacency. Zero-click spyware is expensive, targeted at journalists, activists, executives, and officials, and burning such a capability on ordinary fraud makes no economic sense — so for most people it belongs off the worry list. Smishing, by contrast, is industrial: sent in millions, cheap to run, and profitable even at tiny response rates. Your defences should match the real threat, which means link discipline and updates rather than fear of the message itself.\n\nA middle category is worth knowing: texts that try to talk you into installing something. A message urging you to download an app from outside the official store — a 'tracking app', a 'security update', a 'video player' — is attempting to bypass the strongest protection your phone has. Sideloaded malware delivered this way can read messages and capture banking sessions. Simply reading a text remains essentially safe on an updated phone; installing what a text asks for is where compromise actually happens.","redFlags":["Unexpected text with a link from an unknown or spoofed number","Text claims to be from your bank, a parcel company, or a government agency","Unusual battery drain or data usage after receiving a strange message","Apps opening or closing on their own","Receiving unexpected one-time passcodes you didn't request"],"whatToDoNow":["Keep your phone OS and all apps updated at all times","Never click links in unexpected texts","If you suspect compromise, run a security scan and consider a factory reset","Report smishing texts to your carrier's spam number (7726 in the UK and US)"],"faq":[{"question":"Should I be worried about spyware on my phone?","answer":"For most people, the main risk is phishing rather than spyware. If you are concerned about targeted surveillance, organisations such as Access Now's Digital Security Helpline offer free assistance."},{"question":"Can just opening a text message infect my phone?","answer":"On an up-to-date phone, opening and reading a message is essentially safe. The practical risks require an action from you — tapping a link, entering credentials, or installing an app from outside the official store. Keep the OS updated and those actions disciplined."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-car-for-sale-online-at-a-very-low-price-a-scam","url":"https://scamencyclopedia.org/questions/is-a-car-for-sale-online-at-a-very-low-price-a-scam","question":"Is a car for sale online at a very low price a scam?","shortAnswer":"Often yes. Vehicles listed well below market value by sellers who insist on deposit or full payment before viewing are a classic advance-payment fraud.","explanation":"Fraudulent vehicle listings appear on classified ad sites, Facebook Marketplace, and dedicated car-sales platforms. The seller typically uses photos stolen from a real listing, prices the vehicle 20-40% below market value to attract urgent interest, and explains they are abroad, in the military, or unable to show the car due to circumstances. Payment is requested by bank transfer, PayPal Friends and Family, or crypto before a viewing. Once paid, the seller cannot be contacted. Never send any money for a vehicle before inspecting it in person and verifying the seller's identity and ownership documents. Legitimate private sellers welcome viewings.\n\nThe fake escrow layer is what catches careful buyers. Knowing that people distrust direct transfers, scammers offer a 'buyer protection programme', a shipping company that 'holds' the payment, or a checkout page dressed in a well-known marketplace's branding — arriving as a link in email or chat. These services do not exist; the page is controlled by the seller, and the reassuring hold-and-inspect terms are fiction. No mainstream vehicle marketplace operates by emailing payment links for cars you have not seen.\n\nThe backstory does consistent work across these listings and is worth reading as a system: military deployment, working overseas, a divorce or bereavement forcing a quick sale. Each explains three things at once — the low price, the unavailability for viewings, and the urgency. When one story element covers that many conveniences, the story is the product. A seller with a genuine car and a genuine reason to sell cheaply still has no reason to refuse a viewing or insist on untraceable payment.","redFlags":["Price is significantly below market value for the make, model, and year","Seller claims to be abroad or unable to show the vehicle","Request for deposit or full payment before viewing","Seller uses a transport company or escrow service to arrange delivery and 'secure' payment","Vehicle identification number (VIN) cannot be independently verified"],"whatToDoNow":["Never pay before physically inspecting the vehicle","Verify ownership using official vehicle history check services","Meet the seller in a public place and check their ID against ownership documents","Report fraudulent listings to the platform and your national consumer authority"],"faq":[{"question":"Can I get my money back if I paid by bank transfer for a car that doesn't exist?","answer":"Contact your bank immediately. In many countries, banks have a mandatory reimbursement scheme for authorised push payment fraud where no recovery is possible by other means. Speed matters."},{"question":"The seller offered an escrow service that holds my money — is that safe?","answer":"Only if you chose the escrow service yourself and verified it independently. Escrow suggested by the seller, reached via their link, is almost always a fake site they control. Real marketplaces never email payment links for vehicles you haven't inspected."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-weight-loss-product-ad-on-instagram-real","url":"https://scamencyclopedia.org/questions/is-a-weight-loss-product-ad-on-instagram-real","question":"Is a weight-loss product advertised on Instagram real?","shortAnswer":"Treat with scepticism. Many Instagram weight-loss ads promote unproven products, misleading before-and-after images, or free-trial subscription traps.","explanation":"Social media weight-loss ads frequently use stolen before-and-after photos, fake celebrity endorsements, and fabricated clinical study references to sell supplements, teas, patches, or devices with no credible evidence of effectiveness. Some operate as subscription traps where a free trial converts to recurring charges. Others sell products that may interact harmfully with medications or existing health conditions. Legitimate health products are regulated by agencies such as the FDA (US), MHRA (UK), or TGA (Australia), and cannot legally make unproven disease-cure or guaranteed-result claims. If a product promises dramatic weight loss without diet or exercise changes, the claim is almost certainly misleading.\n\nThe financial mechanics are often more damaging than the product itself. Many of these funnels are subscription traps: the 'free trial' or 'sample' enrolls you in recurring monthly shipments at a price disclosed only deep in the terms, and cancellation is deliberately difficult. Others harvest the card details for unrelated charges. Reading the checkout page for words like 'subscription', 'auto-ship', or 'membership' before paying catches most of these — the sales page shouts the discount while the billing terms whisper.\n\nThe health dimension deserves equal weight. Unregulated products sold this way sometimes contain undeclared pharmaceutical ingredients, at unknown doses, which can interact with prescription medication or existing conditions. The absence of a full ingredient list, dosage information, or manufacturer contact details is not just a fraud signal — it means nobody accountable stands behind what is in the package. Anything you would swallow deserves a higher verification bar than anything you would merely waste money on.","redFlags":["Guaranteed dramatic weight loss in a short time","Before-and-after photos with no verifiable source","Endorsement by a celebrity who hasn't publicly promoted it","Free trial that requires card details","No ingredient list, dosage information, or manufacturer details"],"whatToDoNow":["Search the product name on your national health regulator's website for warnings","Consult your doctor before taking any supplement, especially if you take other medications","Report misleading ads to the advertising standards authority in your country","Dispute charges with your card provider if you were enrolled in a subscription without clear consent"],"faq":[{"question":"Are any weight-loss supplements genuinely effective?","answer":"A small number of prescription medications have regulatory approval for weight management, but these require a doctor's oversight. Over-the-counter supplements with dramatic weight-loss claims have not demonstrated the same level of evidence."},{"question":"I'm being billed monthly for a product I thought was a one-off — what now?","answer":"Contact your bank to block the recurring authority and dispute charges, citing unclear subscription disclosure. Email the merchant to cancel so a written record exists, and screenshot the original ad and checkout page if you still can — they support your dispute."}],"lastReviewed":"2026-08-01"},{"slug":"can-someone-use-my-stolen-debit-card-details-without-the-physical-card","url":"https://scamencyclopedia.org/questions/can-someone-use-my-stolen-debit-card-details-without-the-physical-card","question":"Can someone use my stolen debit card details without the physical card?","shortAnswer":"Yes. Card-not-present fraud allows criminals to use your card number, expiry date, and CVV to make online purchases without ever holding the physical card.","explanation":"Card-not-present (CNP) fraud occurs when a thief uses stolen card details to make transactions in environments where the physical card isn't required — primarily online shopping. They need only the card number, expiry date, and three-digit security code (CVV), all of which can be obtained through phishing sites, data breaches, or card-skimming devices. Some fraudsters also use card details to set up recurring charges or digital wallet registrations. Setting up transaction alerts, enabling two-factor authentication on your bank app, and monitoring statements regularly helps detect unauthorised use quickly. Debit cards typically have less fraud protection than credit cards, so consider using a credit card for online purchases where possible.\n\nThe small-transaction pattern is worth understanding because it is the earliest visible symptom. Stolen card details are typically validated with tiny purchases or donations — amounts chosen to slip beneath attention — before being used for larger fraud or sold on in bulk. A charge of a few cents or a couple of dollars from an unfamiliar merchant is not too small to matter; it is often the test run, and reporting it at that stage prevents the main event.\n\nModern banking tools shift the advantage toward you if you switch them on. Real-time notifications turn every transaction into something you see within seconds; card freezing lets you stop spending instantly from the app while you investigate; and virtual card numbers let you give each merchant a disposable identity, so a breach at one shop never exposes your real card. Fraudsters rely on the gap between transaction and discovery — these features close it to nearly zero.","redFlags":["Small test transactions on your statement you don't recognise","Purchases from unfamiliar online retailers","Subscription charges you didn't authorise","Bank alert for an unusual transaction location or amount","Your card details were entered on an unverified website recently"],"whatToDoNow":["Contact your bank immediately to report unauthorised transactions and block your card","Enable real-time transaction alerts on your banking app","Check your card statements weekly for unfamiliar small charges","Replace your card and update payment details saved in online accounts"],"faq":[{"question":"Is a debit card or credit card safer for online shopping?","answer":"Credit cards generally offer stronger fraud liability protection in most countries. With debit cards, stolen funds come directly from your bank account and recovery timelines can be longer."},{"question":"How did my card details get stolen if the card never left my wallet?","answer":"Card-not-present fraud rarely involves the physical card. Details leak through phishing pages, merchant data breaches, malware that skims online checkout forms, and resale on criminal markets — sometimes long after the original exposure."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-puppy-adoption-website-that-requires-an-air-transport-fee-a-scam","url":"https://scamencyclopedia.org/questions/is-a-puppy-adoption-website-that-requires-an-air-transport-fee-a-scam","question":"Is a puppy adoption website that requires an air transport fee a scam?","shortAnswer":"Almost certainly yes. Transport fee requests for pets you have not seen in person are a signature element of online pet fraud.","explanation":"Pet scammers build convincing websites with stolen photos of adorable puppies or kittens, often listing breeds that are in high demand and priced attractively. After contact, they claim the animal will be shipped by air and ask for payment of transportation, insurance, or customs fees. Once the initial fee is paid, follow-up demands appear — crate costs, veterinary health certificates, and so on. The pet never arrives because it does not exist. Victims can lose hundreds or thousands before realising. Only purchase or adopt pets from breeders you can visit in person, local shelters, or verified rescue organisations. Never pay for a pet you haven't physically seen.\n\nThe escalating-fee stage is engineered around emotional commitment. By the time the 'shipping insurance' demand arrives, the victim has named the puppy, told family, and prepared a home — and each new fee is framed as the last obstacle between them and an animal presented as already theirs. Some operations add manufactured distress, claiming the pet is stranded at an airport and will be surrendered or destroyed unless a charge is paid, converting affection into leverage. Recognising that script as theatre is easier before contact begins than after.\n\nVerification is fortunately concrete with animals. A genuine seller can put the specific animal on a live video call, show it responding in real time, and let you visit; a rescue organisation has a track record, premises or foster network, and a standard adoption process. Reverse image searching the photos catches many fakes in seconds, since the same litters are recycled across dozens of scam sites. Any seller whose animal can never be seen live has answered the only question that matters.","redFlags":["Pet must be delivered by air because the seller is abroad","Price is unusually low for a sought-after breed","Seller communicates only by email or messaging app","Multiple additional fees requested after initial payment","Photos reverse-search to stock images or other websites"],"whatToDoNow":["Reverse image search the pet photos before paying anything","Insist on a live video call showing the animal before committing","Only buy from breeders you can visit or from registered rescue organisations","Report the website to your consumer protection authority and domain registrar"],"faq":[{"question":"Are there legitimate online pet adoption services?","answer":"Yes. Rescue organisations and reputable breeders do list animals online, but they will facilitate in-person visits or verified video introductions and will not ask for unusual advance fees outside of standard adoption processes."},{"question":"The 'courier' emailed me about extra fees for a temperature-controlled crate. Is that real?","answer":"No. The fake courier is part of the same operation as the fake breeder — a second email address run by the same scammer. Real animal transport costs are agreed with the shipper up front, not invented mid-journey by escalating emails."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-we-have-your-browsing-history-extortion-email-real","url":"https://scamencyclopedia.org/questions/is-a-we-have-your-browsing-history-extortion-email-real","question":"Is a 'we have your browsing history' extortion email real?","shortAnswer":"Almost never. These are mass-sent sextortion scripts designed to exploit fear — the sender almost certainly does not have your browsing history or webcam footage.","explanation":"Sextortion emails follow a well-documented template: they claim the sender has installed malware on your device, recorded you via webcam, and will share the footage with your contacts unless you pay in Bitcoin within a short window. To appear credible, some versions include a real password you once used, sourced from a publicly available data breach database. The password inclusion is a psychological hook — it does not mean the sender has current access to your device or accounts. These emails are sent in bulk to millions of addresses with no actual surveillance behind them. Do not pay. Change any password referenced in the email if you still use it anywhere.\n\nA few details in these emails reliably expose the bluff. The threats are always generic — no actual screenshot, no named contact, no verifiable detail beyond the recycled password — because the sender has nothing. The 'malware' described often doesn't match how any real spyware behaves, and the same text, with the same Bitcoin address, lands in millions of inboxes with only the password field changed. Mass production is visible in the seams.\n\nEven knowing this, the emails can cause real distress, which is part of their design. If one lands, respond with process rather than emotion: don't reply (a reply confirms a live address and invites follow-ups), update the exposed password wherever it survives, turn on two-factor authentication, and delete the message. If you are a younger person, or the email arrives alongside any genuine compromising material or a real prior contact, that is a different and more serious situation — involve a trusted adult or the police rather than handling it alone.","redFlags":["Email claims to have webcam footage or compromising browsing data","Payment demand in Bitcoin or another cryptocurrency","Deadline of 24-72 hours to pay","Email includes an old password to appear credible","Sender threatens to contact all your email or social media contacts"],"whatToDoNow":["Do not pay — payment does not stop the extortion and may invite further demands","Change the password referenced in the email on any account still using it","Check haveibeenpwned.com to find which breach exposed that password","Report the email to your national fraud authority"],"faq":[{"question":"How did the sender get my old password?","answer":"Old passwords appear in data breach dumps that are freely traded on criminal forums. The inclusion of your real password in the email does not mean your current device has been compromised."},{"question":"Should I reply to tell them I know it's a scam?","answer":"No. Any reply confirms your address is active and monitored, which gets it promoted to higher-value target lists. The correct amount of engagement with a mass extortion email is none: secure the old password, report if you wish, and delete."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-doorstep-energy-switcher-a-scam","url":"https://scamencyclopedia.org/questions/is-a-doorstep-energy-switcher-a-scam","question":"Is a doorstep energy supplier salesperson a scam?","shortAnswer":"Not always, but doorstep energy sales are a common route for high-pressure selling, slamming (switching without consent), and outright fraud.","explanation":"Legitimate energy suppliers do employ door-to-door salespeople, but this channel also attracts fraudsters. 'Slamming' involves a salesperson switching your energy account without your proper consent, often by misrepresenting what you are agreeing to. In more extreme cases, fraudsters impersonate real energy companies to collect direct debit details. You are never obliged to agree to anything on the doorstep. Ask to see official ID, take the company's name, and verify independently before making any decisions. In many countries you have a 14-day cooling-off period to reverse a switch made at the door.\n\nThe doorstep setting is chosen because it strips away your usual verification tools. There is no email header to inspect, no domain to check, and a personable human standing on your step creates social pressure that a text message never could. Tactics lean on that: a tablet turned toward you with figures already filled in, claims that neighbours have signed up, or a request to 'just see a recent bill' — which, handed over, gives away your account details and current supplier in one move. Treat your bill like a bank statement; no legitimate salesperson needs to hold it.\n\nA simple script keeps control of the interaction: take the leaflet, take the salesperson's name and company, close the door, and verify at your own pace. Any offer that cannot survive overnight was not an offer worth having. If paperwork later shows a switch you never knowingly agreed to, act quickly — contact both suppliers, use the cooling-off period, and put your complaint in writing so the timeline is documented.","redFlags":["Salesperson insists you sign or agree on the spot","Caller pressures you by claiming your current contract is ending or prices are rising","Unable to provide official company ID or registration number","Asks for bank details before you have verified their identity","Promises savings that seem unusually large without showing the figures"],"whatToDoNow":["Do not sign or agree to anything on the doorstep under pressure","Ask for written documentation and check the company on the official regulator's register","Contact your current supplier if you suspect your account has been switched without consent","Report doorstep fraud to your energy regulator and consumer protection authority"],"faq":[{"question":"What is 'slamming' in energy sales?","answer":"Slamming is switching someone's energy account without their informed consent. If it has happened to you, contact your new and old supplier and complain to your energy regulator — you have the right to be switched back."},{"question":"Should I show a doorstep salesperson my energy bill?","answer":"No. A bill contains your account number, supplier, and usage details — enough in some cases to initiate a switch or set up payments. Legitimate comparisons can be done later with you in control; nobody needs to see the document on your doorstep."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-wire-transfer-request-from-a-supplier-always-safe","url":"https://scamencyclopedia.org/questions/is-a-wire-transfer-request-from-a-supplier-always-safe","question":"Is a wire transfer request from a known supplier always safe?","shortAnswer":"Not if the bank account details have changed. Invoice fraud and payment diversion scams intercept supplier communications to redirect funds.","explanation":"Invoice fraud — also known as payment diversion fraud or mandate fraud — involves a criminal intercepting or impersonating communications between a business and its supplier, then sending a fake invoice or bank-detail-change notification with the fraudster's account details. Finance teams that process the payment believe they are paying a genuine supplier. The fraud is often discovered only when the real supplier chases overdue payment. Before transferring any significant funds to a new or changed bank account, verify the change by calling the supplier on a previously verified phone number — not one included in the email requesting the change.\n\nThese attacks are researched, not sprayed. Criminals often compromise a mailbox on one side of the relationship weeks in advance, reading genuine correspondence to learn invoice cycles, project names, and the tone individuals use — then time the fake bank-change request for exactly when a real payment is due. The email that diverts the money can be a reply within an authentic thread, which is why 'it came from the address we always use' is not the reassurance it feels like: the address may be real and the mailbox occupied.\n\nBecause detection is so hard at the message level, protection has to live in process. A callback rule for every bank-detail change, using a number from your master vendor records; dual authorisation for first payments to any new account; and a norm that urgency never bypasses procedure — these controls cost minutes and defeat the attack regardless of how convincing the email is. The scam only works where a single person, reading a single message, can redirect funds on their own authority.","redFlags":["Email from a supplier requesting a change of bank account details","Invoice bank details differ from those on previous invoices","Urgent request to process payment immediately","Email address is slightly different from the normal supplier address","Supplier or client cannot be reached through previously used contact details"],"whatToDoNow":["Call the supplier on a verified number to confirm any bank detail changes before paying","Introduce a two-person authorisation requirement for first payments to new accounts","Report confirmed fraud to your bank immediately and to Report Fraud (UK, formerly Action Fraud) or the FBI IC3 (US)","Review email security to check for unauthorised forwarding rules that could allow interception"],"faq":[{"question":"Can I get a wire transfer refunded after invoice fraud?","answer":"Speed is critical. Contact your bank within hours of discovery — they can attempt to recall the payment. Recovery rates are low but highest when action is taken immediately."},{"question":"The email came from the supplier's real address — how is that possible?","answer":"Either the supplier's mailbox is compromised and the criminal is replying inside genuine threads, or the display name is forged over a lookalike address. Both are common, which is why bank-detail changes must be verified by phone on a known number, never by replying to the email."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-text-saying-i-owe-an-unpaid-customs-fee-real","url":"https://scamencyclopedia.org/questions/is-a-text-saying-i-owe-an-unpaid-customs-fee-real","question":"Is a text saying I owe an unpaid customs fee on a parcel real?","shortAnswer":"Probably not. Fake customs-fee texts are a widely used phishing method that impersonates national postal services or border agencies.","explanation":"Customs-fee smishing texts claim that a parcel you have ordered is being held because a small import duty or customs handling fee is outstanding. The link leads to a professional-looking fake page that captures your card details. While genuine customs charges do occur on international orders, official notifications arrive through the postal carrier's tracking system, official letters, or the carrier's verified app — not via a text with a payment link. Even if you have recently ordered something from abroad, verify any customs charge directly through the carrier's official website or the postal service's official platform before paying anything.\n\nThe deliberately small fee is the tell that repays attention. It is set low enough that paying feels easier than investigating — but the card details entered to pay it are the actual objective, and they are typically used or sold for much larger fraud within days. Some victims also receive a follow-up call from a fake bank 'fraud team' referencing the customs payment they just made, using the scam's own transaction as proof of credibility for a second, bigger scam.\n\nInternational shopping makes the lure plausible, so anchor on how genuine customs handling actually works: charges appear against a specific tracked consignment, are visible when you enter your tracking number on the carrier's own site, and are payable through that same official channel. If the charge is real, you will find it there; if it exists only in a text message, it never existed at all.","redFlags":["Text from an unfamiliar number mentioning a parcel customs fee","Link in the text leads to a site that isn't the official postal service domain","Urgency — parcel will be returned if not paid within 24 hours","Fee amount is oddly specific (e.g., £1.49 or $2.99)","No parcel tracking number you can independently verify"],"whatToDoNow":["Do not click the link — go to the carrier's official website or app directly","Check your actual order tracking using the carrier's official service","Report the smishing text to 7726 (UK and US) or your national reporting service","Delete the message"],"faq":[{"question":"How are real customs fees collected?","answer":"Genuine customs charges are typically shown in the carrier's tracking portal or notified by official letter. Your carrier will also have the charge visible in your account. They do not collect via unsolicited text links."},{"question":"I paid the small fee — is losing a couple of pounds the end of it?","answer":"Unfortunately not. The fee was bait; the card details you entered are the prize. Contact your bank now, ask for the card to be replaced, and watch for follow-up calls claiming to be your bank's fraud team — they are usually the same criminals."}],"lastReviewed":"2026-08-01"},{"slug":"can-someone-steal-from-me-using-a-contactless-card-reader","url":"https://scamencyclopedia.org/questions/can-someone-steal-from-me-using-a-contactless-card-reader","question":"Can someone steal from me using a fake contactless card reader?","shortAnswer":"Contactless card skimming is technically possible but rare in practice. The more common fraud risks involve tampered ATMs and point-of-sale terminals.","explanation":"Concerns about someone holding a covert contactless reader near your wallet are widespread but largely overstated. Actual contactless theft requires extremely close proximity (a few centimetres), is limited to small amounts, and generates a transaction record that triggers fraud alerts. Real-world card fraud is far more commonly linked to ATM skimming devices that record card details and PINs, compromised point-of-sale terminals in shops, and card-detail phishing. Contactless payments on mobile devices (Apple Pay, Google Pay) are generally more secure than physical cards because they use tokenisation and biometric authentication. Carrying cards in an RFID-blocking sleeve provides peace of mind but is unlikely to prevent the most common fraud types you actually face.\n\nThis is a useful case study in how fear gets misallocated. The contactless-theft scenario is vivid and physical — a stranger with a reader in a crowd — so it feels more threatening than an invisible phishing page, yet the economics run the other way: a criminal harvesting card details online can hit thousands of victims from anywhere, while covert tap-theft risks arrest for one small, flagged, traceable transaction at a time. Fraud flows toward scale and anonymity, which is why your inbox is more dangerous than your coat pocket.\n\nSpend the worry where it pays. The habits that actually reduce card fraud are unglamorous: glance at ATMs and payment terminals for tampering, shield your PIN, keep transaction alerts on, and treat unexpected 'bank' contact as unverified. If contactless still concerns you, most banks let you lower or disable the contactless limit on your card — a stronger measure than any blocking wallet, and free.","redFlags":["ATM card slot looks different from usual, feels loose, or has an unusual overlay","ATM has a different-coloured keypad or a camera-like object above the screen","Unexpected small transaction on your statement you cannot account for","Someone stands unusually close in a queue without an obvious reason"],"whatToDoNow":["Check ATMs for skimming overlays before inserting your card","Cover the keypad with your hand when entering your PIN","Enable transaction alerts on your banking app to catch unusual activity quickly","Report suspicious ATMs to your bank and the ATM operator immediately"],"faq":[{"question":"Should I buy an RFID-blocking wallet?","answer":"RFID wallets reduce an already small risk. They are unlikely to protect you from the more common fraud types such as phishing and ATM skimming, but are harmless to use."},{"question":"Are phone wallets like Apple Pay safer than tapping my physical card?","answer":"Generally yes. Mobile wallets substitute a one-time token for your real card number and require biometric or PIN approval per payment, so an intercepted transaction exposes nothing reusable. If contactless worries you, moving taps to your phone is the practical upgrade."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-job-offer-with-salary-paid-in-advance-a-scam","url":"https://scamencyclopedia.org/questions/is-a-job-offer-with-salary-paid-in-advance-a-scam","question":"Is a job offer where salary is paid in advance before I start a scam?","shortAnswer":"Yes. Salary paid before any work is completed is a hallmark of money-mule recruitment and cheque fraud — not a genuine employment benefit.","explanation":"Receiving a cheque, bank transfer, or payment before your first day of work sounds appealing, but it is a defining feature of two common scams. In cheque overpayment fraud, you receive a fraudulent cheque and are asked to deposit it and return a portion before it bounces — leaving you liable for the full amount. In money mule recruitment, real funds from other fraud victims are deposited into your account and you are asked to forward them on, making you part of a money laundering chain. No legitimate employer pays salary or expenses in advance of work completed, and being asked to forward any portion of received money to a third party is an immediate disqualifier.\n\nThe cheque timing gap is the mechanism that catches people, so it is worth spelling out: banks often make deposited funds available within days, but the underlying cheque can be returned as fraudulent weeks later. During that window the money looks real, spends real, and feels like proof the employer is genuine. When the cheque finally bounces, the bank reverses the deposit — and anything you forwarded came from your own pocket. 'The funds cleared' is therefore not the safety check it appears to be; availability and final settlement are different events.\n\nThe consequences of the mule variant extend beyond the lost money. Accounts used to receive and forward criminal funds are routinely closed and flagged across the banking system, which can make opening accounts, obtaining credit, or even receiving wages difficult for years. If money has already arrived, don't move it, don't spend it, and don't return it to the sender by any method they suggest — contact your bank, explain the situation, and let them handle the funds. Reporting early and voluntarily is also your strongest evidence of innocence.","redFlags":["Payment arrives before any work is completed","You are asked to forward part of the payment to another person or account","Cheque or transfer amount is larger than expected, with explanation that you should return the excess","Job role involves 'processing payments' or acting as a 'payment agent'","Employer cannot be verified through independent searches"],"whatToDoNow":["Do not forward any money received","Contact your bank if you have received funds in this way","Report the scam to your national fraud authority","Be aware that knowingly forwarding fraudulently obtained funds is a criminal offence"],"faq":[{"question":"Can I be prosecuted for being a money mule even if I didn't know the money was stolen?","answer":"Depending on the jurisdiction, prosecutors can consider whether you took reasonable steps to verify the legitimacy of the funds. Ignorance may reduce culpability but does not automatically provide immunity. Act cautiously and report suspicions early."},{"question":"The bank said the cheque cleared — doesn't that make it safe?","answer":"No. 'Cleared' usually means the funds are available to spend, not that the cheque is final. A fraudulent cheque can still be returned weeks later, and the bank will reverse the deposit — leaving you liable for anything you forwarded in the meantime."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-travel-competition-winner-notification-real","url":"https://scamencyclopedia.org/questions/is-a-travel-competition-winner-notification-real","question":"Is a notification saying I've won a free holiday or cruise real?","shortAnswer":"Almost never. Unsolicited holiday or cruise prize notifications are a classic advance-fee and timeshare-sales scam.","explanation":"Free holiday and cruise prize notifications arrive by phone, email, text, and social media. They claim you have been randomly selected for a free trip and need only attend a brief presentation or pay a small administration fee to claim it. In reality, the 'presentation' is a high-pressure timeshare or holiday club sales pitch that can last many hours, and the fees escalate. There is no genuine prize. Legitimate prize draws require you to enter, have clear terms published in advance, and do not require attendance at a sales event to claim. Be especially suspicious of cruises to Caribbean or Mediterranean destinations with no obligation but a short claims window.\n\nEven the versions that deliver 'something' are engineered to cost you. The free cruise turns out to carry mandatory port charges, resort fees, and upgrade pressure that exceed the market price of an equivalent trip; the presentation you must attend is staffed by professional closers trained to outlast your patience, and leaving early forfeits the prize. Whether the mechanism is a fee, a data harvest, or a sales marathon, the common thread is that 'winner' is simply the label that gets you in the door.\n\nThe filter costs nothing to apply: real prizes trace back to a competition you can name entering, with an operator you can identify and terms you can read. If you cannot recall entering, the notification is the beginning of a sales or fraud process, not the end of a draw. Responding 'just to see' is how these operations qualify their leads — silence is the answer that costs least.","redFlags":["You are told you have won a holiday you never entered","You must attend a 'brief presentation' to claim","An administration or booking fee is required upfront","Urgency to respond within 24-48 hours","Offer relates to a holiday club, timeshare, or membership product"],"whatToDoNow":["Decline and hang up or delete the notification","Report to your national consumer protection authority","If you attended a presentation and signed anything under pressure, check your country's cooling-off period rights","Warn friends and family, particularly older adults who may be targeted"],"faq":[{"question":"Are there ever genuine holiday prize draws?","answer":"Some legitimate competitions do award holidays, but they require you to enter, have transparent operators, do not charge fees to claim, and do not require attendance at a sales event."},{"question":"I attended the presentation and signed up under pressure — can I undo it?","answer":"Possibly. Many countries provide a cooling-off period for contracts signed at sales events, but the window is short. Send written cancellation immediately, keep proof of sending, and contact your card provider and consumer protection body without waiting for the company's response."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-text-from-my-phone-provider-about-an-account-problem-real","url":"https://scamencyclopedia.org/questions/is-a-text-from-my-phone-provider-about-an-account-problem-real","question":"Is a text from my phone provider about an account problem real?","shortAnswer":"It may be, but impersonation of mobile carriers is common. Verify through your provider's official app or website before clicking any link.","explanation":"Mobile carrier impersonation texts warn of account suspension, billing failures, or security issues and contain a link to resolve the problem. Genuine carriers do send account texts, but scammers mimic them closely, including using the same sender name that appears in your message thread with the real carrier. The fake link leads to a phishing site that harvests login credentials or payment details. Sometimes the goal is SIM-swap fraud — gaining access to your number to receive two-factor authentication codes and take over your other accounts. Any account issue can be verified in seconds through the official carrier app or by calling the number on your bill.\n\nThe thread-injection trick deserves particular respect: because SMS sender IDs can be forged, a fraudulent message can appear inside the same conversation history as years of genuine texts from your carrier. People reasonably treat message threads as identity, and this technique breaks that assumption completely. A message's position in a thread verifies nothing — only the destination of its link and the channel you use to respond do.\n\nWhat elevates carrier phishing above ordinary credential theft is what your phone number unlocks. With carrier account access, an attacker can order a SIM swap or eSIM transfer, and from that moment your number — and every one-time code sent to it — belongs to them. Banking, email, and social accounts fall in sequence. That is why it is worth asking your carrier to add a port-out PIN or security passcode to your account, and why sudden loss of mobile signal for no reason should be treated as an emergency worth a call to your carrier from another phone.","redFlags":["Text contains a link asking you to verify payment or account details","Message creates urgency — your service will be suspended in hours","Link URL does not match the carrier's official domain","No reference to your account name or number in the message","Request to confirm personal information to 'restore' service"],"whatToDoNow":["Do not click the link — open the carrier's official app or type their website address manually","Check your account status from within the verified app","Report the text to your carrier's fraud team","Forward smishing texts to 7726 in the UK and US"],"faq":[{"question":"What is SIM-swap fraud and how does it use my phone number?","answer":"In a SIM swap, a fraudster tricks your carrier into transferring your phone number to a SIM they control. They can then receive your two-factor authentication codes and access email, banking, and other accounts linked to that number."},{"question":"The text appeared in the same thread as real messages from my carrier. Doesn't that prove it's genuine?","answer":"No. Sender IDs can be spoofed so that fraudulent texts land inside your existing thread with the carrier. Thread position is not authentication — verify any account issue through the official app or the number on your bill."},{"question":"How do I protect my number against SIM-swap fraud?","answer":"Ask your carrier to add a port-out PIN or extra security passcode to your account, and treat unexplained loss of signal as urgent. Where possible, move important accounts from SMS codes to an authenticator app so a stolen number yields less."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-grant-for-home-insulation-or-solar-panels-a-scam","url":"https://scamencyclopedia.org/questions/is-a-grant-for-home-insulation-or-solar-panels-a-scam","question":"Is a grant for free home insulation or solar panels a scam?","shortAnswer":"Government insulation and solar grant schemes are real, but cold calls or door-knockers offering them are frequently used to set up fraud or high-pressure selling.","explanation":"Countries including the UK and US do operate legitimate energy-efficiency grant programmes (such as the UK's ECO scheme or the US Weatherization Assistance Program). However, this creates cover for fraudsters who cold-call or knock on doors claiming to access 'government grants' on your behalf. In some cases they are simply salespeople for expensive products that are not fully grant-funded. In others they charge upfront fees to apply for a grant that is actually free, or they conduct poor-quality installation work and disappear. Genuine grant applications are made through official government or energy-company portals and never require upfront cash payments. Always verify through the official government website for your country or region.\n\nThe grant framing is effective because it borrows the government's credibility while removing the government from the transaction. Everything then hinges on trusting the intermediary at your door or on the phone — and the harms range accordingly, from paying for 'free' applications, to expensive finance agreements dressed up as grant-funded installations, to substandard work that can damage the property it was meant to improve. Poorly installed insulation and rushed solar fittings create problems that cost far more to fix than the original work, and the installer is usually unreachable by then.\n\nThe safe sequence runs in one direction: start from the official scheme, confirm you qualify, and choose an installer from the scheme's own accredited list — rather than starting from whoever contacted you and trusting their account of the scheme. Get everything in writing before any work begins, including what is grant-funded and what you would owe, and be wary of anyone whose deadline pressure is doing the persuading.","redFlags":["Unsolicited call or door visit offering a government grant for your home","Offer requires an upfront payment or deposit","Pressure to decide immediately before the grant 'runs out'","Installer cannot provide verifiable trade credentials or insurance","Company name cannot be found on official trade or government installer registers"],"whatToDoNow":["Check the official government website for legitimate grant schemes in your area","Ask for written quotes and verify the installer's accreditation independently","Never pay cash upfront for work promised under a government scheme","Report aggressive or fraudulent approaches to your consumer protection body"],"faq":[{"question":"How do I find a legitimate home-insulation grant in the UK?","answer":"In the UK, check the official GOV.UK website for the Energy Company Obligation (ECO) scheme. Installers must be MCS-certified and are listed on the official MCS register."},{"question":"The caller says the grant deadline is this week — should I hurry?","answer":"No. Deadline pressure is a sales device. Genuine scheme dates are published on official government pages where you can check them calmly, and a legitimate installer's quote survives a week of thought. Anything that expires the moment you want to verify it was never real."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-new-friend-on-instagram-who-mentions-crypto-a-scammer","url":"https://scamencyclopedia.org/questions/is-a-new-friend-on-instagram-who-mentions-crypto-a-scammer","question":"Is a new friend on Instagram who mentions cryptocurrency a scammer?","shortAnswer":"Very likely yes. Strangers on Instagram who befriend you then introduce cryptocurrency investments are running a well-documented romance or investment fraud.","explanation":"Instagram-based investment fraud follows a predictable arc: a stranger sends a follow or like, initiates friendly conversation over days or weeks, builds rapport, and eventually introduces a cryptocurrency platform or trading opportunity. They may show screenshots of their own profits or offer to guide you personally through your first investment. The platform they recommend is either entirely fake or configured to show inflated balances you cannot withdraw. Any profits shown are a lure to encourage larger deposits. The emotional investment created during the 'friendship' phase is deliberate — it makes victims less likely to question the opportunity and less likely to seek outside advice before sending money.\n\nThe move off Instagram to WhatsApp or Telegram is an early, deliberate step worth reading correctly. It takes the conversation somewhere the original platform cannot see, so that when the Instagram profile is eventually reported and removed, the relationship — and the fraud — continues uninterrupted. The polished profile that first contacted you is disposable infrastructure; operations run many of them simultaneously, and the person messaging you may be working from a script through dozens of identical conversations.\n\nIt is also worth knowing who is sometimes on the other end: investigations worldwide have documented that many of these conversations are conducted from organised scam compounds whose workers are themselves trafficked and coerced. That does not change your response — do not send money, report the account, cut contact — but it explains the industrial patience of the approach and why appeals to the scammer's conscience do not work. You are not negotiating with an individual; you are interacting with a production line.","redFlags":["New Instagram contact with a professionally curated profile reaches out unprompted","Conversation quickly moves to WhatsApp or Telegram","Crypto investment opportunity is introduced after a period of rapport-building","Platform recommended is not on any regulator's approved list","Friend claims to have made exceptional returns in a short time"],"whatToDoNow":["Do not invest based on advice from someone you met online and have never met in person","Search the platform name on your financial regulator's register","Reverse image search the person's profile photos","Report the account to Instagram using the in-app report function"],"faq":[{"question":"What if the platform seems to have a working withdrawal feature initially?","answer":"Initial small withdrawals are sometimes permitted to build trust. They may be funded by the scammer to encourage larger deposits. This is called the 'fattening' phase of pig-butchering fraud."},{"question":"They never asked me for money directly — is it still a scam?","answer":"The best-run versions never ask; they let you ask to join. Showing off profits until you request access to the platform is the intended path, because a decision that feels self-directed bypasses your defences. Judge the situation by the destination — an unverifiable platform — not by who raised it first."}],"lastReviewed":"2026-08-01"},{"slug":"can-someone-scam-me-through-a-paypal-friends-and-family-payment","url":"https://scamencyclopedia.org/questions/can-someone-scam-me-through-a-paypal-friends-and-family-payment","question":"Can someone scam me through a PayPal Friends and Family payment?","shortAnswer":"Yes. PayPal Friends and Family offers no buyer protection, making it a favoured tool for fraudulent sellers who want to prevent chargebacks.","explanation":"PayPal's Friends and Family option is designed for personal payments between people who know each other — splitting dinner, paying back a friend — not for commerce. When a seller insists on Friends and Family payment for goods or services, they are removing your right to dispute the transaction through PayPal. If the item never arrives, is not as described, or the seller disappears, PayPal will decline a claim because you chose a non-protected payment type. Scammers often claim Friends and Family is required because Goods and Services 'costs them fees'. A legitimate seller accepts Goods and Services payment; insisting on Friends and Family for a commercial transaction is a red flag.\n\nThe fee argument is designed to make you complicit in removing your own protection. Framed as doing the seller a favour — or even shared as a discount, 'save the fees and I'll knock a bit off' — it recasts the safety mechanism as an unnecessary cost. That fee is the price of a dispute process; a legitimate seller treats it as a cost of doing business, while a fraudulent one needs it gone before the transaction happens. Anyone negotiating you out of buyer protection has told you why they want it removed.\n\nThe same logic travels across every payment method: the protected and unprotected routes both exist on most platforms, and scammers will always steer toward the unprotected one — friends-and-family options, bank transfers, gift cards, crypto. Making 'protected payment or no deal' your fixed policy ends these negotiations instantly, and the sellers who walk away at that point were the ones you needed to avoid.","redFlags":["Seller insists on PayPal Friends and Family for a commercial transaction","Claim that Goods and Services payment 'doesn't work' for their account","Seller cannot be verified through independent searches","Transaction for a high-value item with a seller you found recently","Pressure to pay quickly before the item is taken by someone else"],"whatToDoNow":["Use Goods and Services for all commercial PayPal transactions","If you have already paid via Friends and Family and been defrauded, report to your bank for a chargeback attempt","Report the seller to PayPal's fraud reporting system","Report to the FTC or your national consumer protection authority"],"faq":[{"question":"Does PayPal investigate Friends and Family fraud complaints?","answer":"PayPal will not reverse a Friends and Family payment as a buyer protection claim, but you can still report suspected fraud to PayPal and may be able to pursue a chargeback through your card issuer."},{"question":"The seller offered a discount if I pay by Friends and Family. Worth it?","answer":"No. The discount is the price the scammer pays to remove your dispute rights — it only makes sense for them if the goods never arrive. Paying the fee-inclusive protected price is the cheapest insurance available on the transaction."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-investment-seminar-offering-guaranteed-returns-legitimate","url":"https://scamencyclopedia.org/questions/is-an-investment-seminar-offering-guaranteed-returns-legitimate","question":"Is a free investment seminar offering guaranteed returns legitimate?","shortAnswer":"No investment can legally offer guaranteed returns. Free investment seminars are often high-pressure sales events for dubious or unlicensed products.","explanation":"Free investment seminars — marketed as 'wealth education' events or property investment masterclasses — typically use a celebrity-association format, motivational presentations, and free tickets to draw in audiences. After creating excitement about financial freedom, they introduce expensive courses, coaching programmes, or investment products, often with a limited-time discount to close sales on the night. Some also lead to outright fraud — unlicensed investment schemes or property deals that disappear with participants' money. No regulated investment product can offer guaranteed returns; any promise of guaranteed profit is a legal red flag as well as a practical one. Regulated financial advisers do not operate through free seminar sales funnels.\n\nThe room itself is part of the machinery. Free food, testimonial speakers introduced as ordinary people who got rich, staged applause, and 'only a few places left at this price' announcements are all standard conversion tools — and the audience often contains plants whose visible enthusiasm and rush to the sign-up table give permission to everyone else. Decisions made in that environment are made under engineered social pressure, which is precisely why the discounts expire the moment you leave the room: the offer cannot survive contact with a clear head.\n\nA reliable habit defuses the whole format: never sign or pay at the venue, full stop. Take the materials home, look up the presenter and company independently, check any investment product against your regulator's register, and price the 'exclusive' course against freely available education on the same topic. If the opportunity is genuine, it will still exist next week at a fair price; if it exists only tonight, it was never an investment — it was a close.","redFlags":["Seminar promises to teach the 'secret' to guaranteed wealth","High-pressure sales during or after the event","Exclusive discounts only available on the night","Coaches or promoters who cannot be verified as regulated advisers","Investment products with no Financial Conduct Authority or SEC registration"],"whatToDoNow":["Do not make any financial commitment on the night of a seminar","Verify any financial adviser or investment product with your national regulator before investing","Take time to research independently before parting with any money","Report seminars promoting unlicensed investment products to your financial regulator"],"faq":[{"question":"Is attending a free investment seminar harmful?","answer":"Attending is not inherently harmful, but committing money on the night is risky. The value of attending is limited if you cannot independently verify everything being sold before parting with funds."},{"question":"I paid for an expensive course at a seminar and regret it — what can I do?","answer":"Check whether a cooling-off period applies to contracts signed at sales events in your country, send written cancellation immediately, and contact your card provider about a dispute. Keep the marketing materials — claims of guaranteed returns strengthen both routes."}],"lastReviewed":"2026-08-01"},{"slug":"can-a-scammer-use-stolen-photos-to-pretend-to-be-me-online","url":"https://scamencyclopedia.org/questions/can-a-scammer-use-stolen-photos-to-pretend-to-be-me-online","question":"Can a scammer use stolen photos of me to pretend to be me online?","shortAnswer":"Yes. Photo theft and profile cloning are used to defraud your contacts, conduct romance scams using your identity, or harass you.","explanation":"Criminals steal publicly available photos from social media to build fake profiles under real people's names. These fake profiles are then used to ask your friends and family for money in a crisis, to run romance scams with strangers (using your real photos to appear credible), or for account cloning attacks where friends are contacted to reconnect on a 'new' account. Protecting yourself involves limiting who can see and download your social media photos, regularly reverse-searching your own images to check for misuse, and alerting contacts if you discover a fake profile. Report impersonating profiles to the platform promptly.\n\nIf a clone of your profile appears, understand what is actually happening: the target is usually not you but your social graph. The clone sends friend requests to your contacts, and every acceptance gives the scammer a trusted channel into someone who believes they are talking to you — the crisis-and-money-request message lands far harder from a familiar face. That is why speed matters more than embarrassment. A quick public post from your real account, plus direct messages to the most likely targets in your circle, collapses the clone's usefulness within hours.\n\nDiscovering your photos on a stranger's dating profile is a different variant with a different victim: someone else is being romanced under your face, and they may eventually contact you in confusion or anger. Keep evidence — screenshots with usernames and dates — both for platform reports and in case a defrauded stranger or their bank ever needs to establish that your identity was stolen rather than complicit. None of this is your fault, and treating it as an administrative problem rather than a shameful one makes every step easier.","redFlags":["Friends contact you asking why you are sending them unusual messages","A friend request from someone claiming to be you — a clone account","You discover your photos appearing on an unfamiliar dating or social profile","Someone contacts you claiming a profile using your photos asked them for money"],"whatToDoNow":["Report impersonating profiles to the relevant platform immediately","Warn your contacts so they don't send money to the fake account","Set your social media photos to friends-only where possible","Reverse-image search your own name and photos periodically"],"faq":[{"question":"Can I legally take action against someone using my photos?","answer":"In many countries, impersonation and identity fraud are criminal offences. You can report to local police, and platforms have legal obligations to remove impersonating content once reported."},{"question":"How do I find out if my photos are being used somewhere?","answer":"Run periodic reverse image searches on your most-used profile photos, and take seriously any messages from strangers claiming they've been talking to 'you'. Friends reporting duplicate friend requests are usually the earliest warning a clone exists."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-forex-trading-signal-group-legitimate","url":"https://scamencyclopedia.org/questions/is-a-forex-trading-signal-group-legitimate","question":"Is a forex trading signal group on Telegram or WhatsApp legitimate?","shortAnswer":"Most are not. Paid forex signal groups are frequently either entirely fraudulent, wildly inaccurate, or a funnel into a regulated or unregulated brokerage that pays the operator a commission on your losses.","explanation":"Forex signal groups sell or give away supposed tips on when to buy and sell currency pairs. Many are operated by people with no trading credentials who profit through affiliate arrangements with brokers — meaning they earn when you open an account and trade, regardless of whether you make money. In more fraudulent cases, the 'signals' are deliberately bad, and the operator has a financial incentive for you to lose. Groups that show consistent profit records almost always do so through cherry-picking or fabricated screenshots. Regulated financial advisers are not permitted to provide personalised trading advice in this format without the appropriate licence, so most of these groups operate outside the law.\n\nThe affiliate structure explains behaviour that otherwise looks irrational. Because the operator is paid per funded account or per volume traded, the signals exist to generate activity, not accuracy — and losses can be reframed as your fault for 'entering late' or 'not managing risk', keeping you trading while the commissions flow. Some groups run the even simpler counterparty model: the recommended broker is the operator's own unregulated platform, so every dollar you lose is a dollar they keep. In both designs, you are not the customer; you are the inventory.\n\nThe accuracy claims collapse under one question: anyone who could genuinely predict currency movements at the advertised hit rate would compound a private fortune in silence, not retail their edge to strangers for a subscription fee. Cherry-picked wins, deleted losing calls, and 'results' that exist only as the group's own screenshots are the standard evidence base. If you want market exposure, a regulated broker you chose yourself — without a tipster in the middle — removes the layer where this fraud lives.","redFlags":["Group claims consistent very high accuracy rates (e.g., 90%+)","Operator recommends a specific broker with a referral link","Signals are provided for free but access to a broker is required","No verifiable track record from an independent source","Operator cannot show a financial advisory licence from a relevant regulator"],"whatToDoNow":["Verify any recommended broker on your national financial regulator's register","Never deposit more than you can afford to lose on any forex or CFD platform","Report groups providing unlicensed financial advice to your regulator","Look for independently audited track records, not screenshots, before trusting any signals service"],"faq":[{"question":"Is forex trading itself a scam?","answer":"Currency trading is a legitimate regulated financial activity, but it carries high risk — the majority of retail traders lose money. Avoid any service that downplays this risk or promises consistent profits."},{"question":"Why does the group insist I use their specific broker?","answer":"Because that is where the operator gets paid — through affiliate commissions on your deposits and trading volume, or because the 'broker' is their own platform. A signals service that ties its advice to one mandatory broker has disclosed its business model."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-job-that-pays-to-review-products-at-home-a-scam","url":"https://scamencyclopedia.org/questions/is-a-job-that-pays-to-review-products-at-home-a-scam","question":"Is a job that pays you to review products at home a scam?","shortAnswer":"Many are. Legitimate paid review opportunities exist, but schemes requiring upfront fees, purchases, or personal financial details are scams.","explanation":"Genuine paid-review programs do exist — companies recruit verified purchasers or panel members for structured feedback, typically through established market research firms. However, a large number of 'review job' offers are either fee scams (charging you to access supposed assignments), task scams (showing fake earnings that require a deposit to withdraw), or identity-collection operations. Signs of a legitimate program include no upfront cost, connection to a verifiable research firm or retailer, and compensation of modest gift vouchers or small cash amounts rather than extravagant daily earnings. If the 'job' involves receiving products you must purchase yourself, or forwarding money, treat it as fraudulent.\n\nThe task-scam variant has become the dominant form and deserves a precise description, because its early stages are designed to feel like proof. You complete simple tasks — reviewing products, 'boosting' listings, rating apps — and a dashboard shows earnings accumulating; small early withdrawals may even succeed. Then come 'combo tasks' or 'premium orders' that require you to deposit your own money to unlock larger commissions, and the dashboard balance grows precisely so that walking away feels like abandoning your own earnings. The balance was never money; it was a number designed to justify the next deposit.\n\nKeep the employment logic front and centre: real work pays you, in real currency, on a schedule, without requiring your capital. The moment any 'job' asks you to put money in to get your pay out, it has stopped being employment and become an advance-fee scheme wearing a payroll costume. That test needs no research and survives every rebranding of the format.","redFlags":["Fee required to access product review assignments","Earnings dashboard shows impressive balances that require a deposit to withdraw","You must purchase the products yourself and will be 'reimbursed' later","Employer cannot be independently verified","Contacted via social media DM rather than a reputable jobs or research platform"],"whatToDoNow":["Never pay to access a paid review job","Verify the research or retail company through independent searches","Report fraudulent job ads to the platform and your national fraud authority","Use only verified platforms for legitimate survey and review income opportunities"],"faq":[{"question":"Are there genuine ways to earn money reviewing products?","answer":"Yes. Verified programs from companies like Amazon Vine, established survey platforms, and consumer research firms pay small amounts or vouchers. None require upfront fees or substantial personal financial commitments."},{"question":"My earnings dashboard shows money I can't withdraw without depositing more. Is it real?","answer":"No. The balance is a number on a site the operator controls, inflated to make leaving feel like losing your own money. Every deposit 'to unlock withdrawal' is gone the moment it is sent. Stop paying, keep screenshots, and report to your bank and fraud authority."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-text-claiming-my-apple-id-is-locked-real","url":"https://scamencyclopedia.org/questions/is-a-text-claiming-my-apple-id-is-locked-real","question":"Is a text claiming my Apple ID is locked real?","shortAnswer":"Probably not. Apple ID lock texts are a widespread phishing tactic designed to steal your Apple credentials and personal information.","explanation":"Phishing texts and emails impersonating Apple are among the most commonly reported. They claim your Apple ID has been locked, a new device has signed in, or suspicious activity has been detected, and direct you to click a link to verify your identity. The link leads to a convincing fake Apple sign-in page that captures your Apple ID, password, and sometimes payment or personal details. Apple does send genuine security notifications, but they direct you to appleid.apple.com — the domain you should type directly, not follow from a text. Real Apple security alerts also appear as trusted device push notifications in addition to email, and Apple never contacts you by SMS about account lockouts.\n\nThe value of an Apple ID explains the volume of these campaigns. One credential opens photos, messages, backups, saved passwords, and payment methods — and through device-tracking features, a hijacked account can even be used to remotely lock hardware and demand payment to release it. Phishing kits for this ecosystem are sold ready-made, complete with cloned sign-in pages and hosting, which is why the fakes are so uniform and so frequent.\n\nA related phone variant is worth knowing: calls claiming to be Apple support about a 'compromised account', sometimes with spoofed caller ID, asking you to read back a verification code or approve a sign-in prompt. Those codes and prompts exist to confirm that you are the one signing in — reading one to a caller, or approving a prompt you did not initiate, hands over the account with your own hands. No legitimate support process anywhere involves you sharing a one-time code that was sent to you.","redFlags":["Text about an Apple ID issue contains a link","Link does not go to apple.com or appleid.apple.com","Message creates urgency — your account will be permanently disabled","Page asks for Apple ID, password, and payment details","Sender number is unknown or looks like a regular mobile number"],"whatToDoNow":["Do not click the link — go to appleid.apple.com directly in your browser","Check your account status from within the verified Settings app on your device","Report the phishing text to reportphishing@apple.com","Enable two-factor authentication on your Apple ID if you have not already"],"faq":[{"question":"What if I already entered my Apple ID and password on a suspicious site?","answer":"Change your Apple ID password immediately at appleid.apple.com, sign out of all devices, and review any charges on your payment method linked to the account."},{"question":"I keep getting sign-in approval prompts I didn't request. What does that mean?","answer":"Someone has your password and is trying to get in — the prompt is your two-factor protection working. Deny the prompts, never approve one you didn't initiate, and change your password immediately from a device you trust."}],"lastReviewed":"2026-08-01"},{"slug":"can-i-get-scammed-on-a-legitimate-marketplace-like-ebay","url":"https://scamencyclopedia.org/questions/can-i-get-scammed-on-a-legitimate-marketplace-like-ebay","question":"Can I get scammed on a legitimate marketplace like eBay?","shortAnswer":"Yes. Even trusted marketplaces have fraud risks, particularly off-platform payment requests, fake escrow, and SNAD (significantly not as described) fraud.","explanation":"eBay and similar verified marketplaces have substantial fraud protections, but scammers exploit their edges. Common tactics include: convincing a buyer to communicate and pay outside eBay using cash, bank transfer, or crypto (removing all protections); providing counterfeit items or sending an empty box; listing a genuine item but swapping it for a lower-value one; and shill bidding to artificially inflate auction prices. As a seller, buyers may falsely claim an item was not as described to obtain a full refund while keeping the item. Understanding the platform's dispute resolution process and never leaving the platform's messaging and payment system are the strongest protections.\n\nEvery off-platform invitation is the same decision dressed differently: a discount for paying by bank transfer, a request to 'deal directly and save the fees', a phone number slipped into a listing photo, or an email that looks like the marketplace asking you to confirm payment elsewhere. The platform's fees fund the dispute system, the payment records, and the account history that makes the other party accountable. Stepping outside trades all of that for a small saving — which is why the party proposing the step is so often the one planning to need the anonymity.\n\nAccount hygiene closes the remaining gap. Long-standing accounts with clean histories are hijacked precisely because their feedback scores disarm buyers, so treat a sudden change in behaviour — a phone accessory seller suddenly listing ten luxury watches, or a request to communicate off-platform — as more meaningful than the star rating. And on the selling side, dispute outcomes follow documentation: photographs, serial numbers, tracked postage, and in-platform messages decide cases, not good intentions.","redFlags":["Seller or buyer asks you to continue the transaction outside eBay","Seller suggests an alternative payment service with no buyer protection","Item arrives clearly different from the listing without adequate photos for dispute","Buyer claims non-delivery or significant difference very shortly after the item was sent","Price is unusually low for a high-demand item"],"whatToDoNow":["Use eBay's official payment and messaging systems for all communications and payments","Never pay outside the platform even if offered a discount","Open a formal eBay dispute through the Resolution Centre if defrauded","Keep proof of postage and photograph items before shipping"],"faq":[{"question":"Does eBay's Money Back Guarantee cover me if I was scammed?","answer":"eBay's Money Back Guarantee covers most transactions where items don't arrive or are significantly not as described, provided you paid through eBay's checkout system. Off-platform transactions are not covered."},{"question":"A seller with excellent feedback asked me to pay by bank transfer. Safe?","answer":"No — this pattern usually means the account has been hijacked. The feedback history belongs to the original owner; the person messaging you is trading on it. Any payment outside the platform's checkout loses the protection that made the feedback relevant in the first place."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-nft-that-promises-passive-income-a-scam","url":"https://scamencyclopedia.org/questions/is-an-nft-that-promises-passive-income-a-scam","question":"Is an NFT project that promises passive income a scam?","shortAnswer":"Very likely. NFT projects marketed with passive income promises, staking rewards, or guaranteed price appreciation are almost uniformly a rug pull or Ponzi structure.","explanation":"Non-fungible tokens are speculative digital assets and, like all speculative assets, cannot legitimately guarantee passive income or price appreciation. NFT scam projects follow a recognisable playbook: create attractive artwork, promise utility (staking rewards, metaverse access, token airdrops), use social media influencers to build hype, collect funds through the initial mint, and then abandon the project — commonly known as a rug pull. Victims are left holding worthless tokens. Even well-intentioned projects frequently fail. Before minting or buying, verify the team's real identities, check whether smart contract code has been audited, and research the project beyond its own channels.\n\nThe passive-income promise also carries a structural implication buyers rarely consider: if a token's returns are marketed as coming from the efforts of the project team, it starts to resemble a security — the kind of offering that regulated markets surround with disclosure requirements, none of which apply here. The 'utility' roadmap (staking, games, exclusive access) serves mainly to justify the promise while deferring it; delivery is always one phase away, and each delay is explained inside a community channel where doubt is treated as disloyalty.\n\nThat community dynamic is the scam's maintenance system. Discord and social channels moderated by the team remove critical questions, meme culture reframes selling as weakness, and 'diamond hands' rhetoric keeps holders holding while insiders exit. Evaluate any project from outside its own spaces: what do independent analysts say, does the trading activity look organic, can the team be identified and held accountable? A project that only makes sense from inside its own echo chamber does not make sense.","redFlags":["Project promises passive income, staking rewards, or guaranteed returns","Team members are anonymous with no verifiable background","Smart contract has not been independently audited","Celebrity or influencer promotion without disclosed compensation","Mint price, supply, or roadmap details change without explanation"],"whatToDoNow":["Only invest amounts you can afford to lose entirely","Research the team's real identities and track record before minting","Check whether the smart contract has a verified audit from a reputable firm","Report suspected rug pulls to the platform and relevant financial authority"],"faq":[{"question":"Can I recover money from an NFT rug pull?","answer":"Recovery is very difficult given the pseudonymous nature of crypto and NFT transactions. In some high-profile cases, law enforcement has pursued identified organisers. Report to the FBI IC3 or equivalent national authority."},{"question":"The project has a big, active community — doesn't that show it's legitimate?","answer":"Community size is manufacturable: follower counts are bought, engagement is botted, and critical voices are banned from official channels. Judge legitimacy by identifiable accountable people, audited contracts, and independent analysis — not by the volume of enthusiasm inside spaces the team controls."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-online-tutor-asking-for-a-deposit-before-lessons-a-scam","url":"https://scamencyclopedia.org/questions/is-an-online-tutor-asking-for-a-deposit-before-lessons-a-scam","question":"Is an online tutor asking for a deposit before lessons a scam?","shortAnswer":"Small advance booking fees from verified tutors are common practice; large deposits to an unverified contact found via social media are a significant risk.","explanation":"Private tutoring is a legitimate profession, and requesting modest advance payment for booked sessions is standard. The risk arises when a tutor found via an unofficial channel — an Instagram DM, a Facebook group post, or a WhatsApp number — requests a large deposit, refuses any trial session, cannot be verified through a recognised tutoring platform, and disappears after payment. Students and parents seeking specialised tutoring for competitive exams are particularly targeted. Protect yourself by using established tutoring platforms that hold tutor funds in escrow or have refund policies, checking independent reviews, and avoiding large upfront payments for a tutor you have never spoken to.\n\nExam seasons concentrate the harm. In the weeks before entrance tests and final exams, demand for specialist tutors outstrips supply, and fraudsters exploit exactly that scarcity — claiming one remaining slot, examiner-level insight, or a track record with a specific school or test. Parents under deadline pressure skip the checks they would normally make, which is the entire design. A genuine specialist's scarcity shows up as a waiting list and verifiable reputation, not as a demand for a large deposit tonight.\n\nA short verification conversation filters out most fraud at zero cost. A real tutor can talk fluently about the syllabus, describe how they would assess your child's current level, and agree to a short paid trial before any block booking; an impostor resists live contact because the persona doesn't survive it. Insist on a video call before money moves, keep early payments small, and treat reluctance to be seen or questioned as the answer to your question.","redFlags":["Large advance payment requested before any contact or trial session","Tutor found via DM with no presence on a verifiable platform","No evidence of qualifications, reviews, or verifiable experience","Urgency — limited slots, sign up now","Payment to a personal account rather than a platform"],"whatToDoNow":["Use established tutoring platforms that vet tutors and hold payment in escrow","Request at least one free or low-cost trial session before committing","Verify qualifications and check independent reviews before paying any significant amount","Report fraudulent tutor listings to the platform and your consumer authority"],"faq":[{"question":"Is it safe to pay for tutoring through PayPal Friends and Family?","answer":"No. Use a payment method with buyer protection — PayPal Goods and Services, a card, or an escrow platform — so you can dispute if lessons are not delivered."},{"question":"What should a first conversation with a genuine tutor look like?","answer":"Expect questions about your child's level and goals, clear syllabus knowledge, a willingness to video call, and a small paid trial before any package. A 'tutor' who pushes a large block booking before any live conversation is selling urgency, not teaching."}],"lastReviewed":"2026-08-01"},{"slug":"can-someone-use-my-routing-number-to-steal-money","url":"https://scamencyclopedia.org/questions/can-someone-use-my-routing-number-to-steal-money","question":"Can someone steal money using my bank routing and account number?","shortAnswer":"Yes, in some cases. Routing and account numbers can be used to initiate ACH transfers or set up fraudulent direct debits if other verification steps are bypassed.","explanation":"In the US, ACH (Automated Clearing House) transactions require only a routing number and account number to initiate a payment. While banks and payment processors apply fraud filters, some fraudulent debits do succeed. Outside the US, sort codes and account numbers enable direct debit setup in several countries. The risk is higher when combined with other personal information. Your account number appears on the bottom of cheques and on direct debit authorisation forms, so it is not a secret in the same way a PIN is, but its misuse is possible. Monitor your account statements regularly, review active direct debits periodically, and report any unrecognised transactions to your bank promptly.\n\nThe practical risk calculus differs from card fraud in a way worth internalising: account numbers are semi-public by design — printed on every cheque you write and shared for every legitimate payment you receive — so the system's protection comes from reversal rights rather than secrecy. Unauthorised debits can generally be disputed and returned, but the process only works if you notice them, and fraudsters exploit exactly the gap between setup and discovery. A direct debit created quietly this month may not take a meaningful amount until next quarter.\n\nThat makes review cadence your main control. A monthly scan of active mandates and recent debits takes minutes and catches almost everything this fraud type can do; alerts on debits above a chosen threshold automate the rest. Where the risk concentrates is combination: an account number alone does little, but paired with your name, address, and a forged signature or phished verification, it supports more serious impersonation — which is why documents showing your account details deserve the same shredder treatment as anything bearing your signature.","redFlags":["Unrecognised direct debits or ACH withdrawals on your account statement","You shared your account details with an unverified party","Small test transactions you don't recognise — often a precursor to larger fraud","Notification of a new payee set up on your account that you didn't authorise"],"whatToDoNow":["Check your statement monthly for unrecognised direct debits or ACH transactions","Contact your bank immediately to dispute and reverse any unrecognised charges","Review and cancel any direct debit mandates you no longer recognise","Consider setting transaction alerts for all debits above a threshold"],"faq":[{"question":"Should I never give out my account number?","answer":"Giving your account number for legitimate payroll setup or bank transfers is normal. The risk comes from sharing it with unverified parties who could use it to authorise withdrawals. Always verify who you are sharing financial details with."},{"question":"How quickly do I need to report an unauthorised debit?","answer":"As soon as you see it. Dispute rights for unauthorised transactions are strong but often time-bound, and the clock generally runs from when the transaction appeared. Regular statement checks protect those rights; a debit discovered a year late is much harder to unwind."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-hospital-bill-collections-call-a-scam","url":"https://scamencyclopedia.org/questions/is-a-hospital-bill-collections-call-a-scam","question":"Is a hospital bill collections call a scam?","shortAnswer":"It may be. Medical bill collection scams impersonate hospitals and debt collectors to pressure patients into paying fabricated or inflated debts.","explanation":"Medical debt scams exploit the fear and confusion many people feel around hospital billing. A fraudulent caller claims to be from a hospital billing department or third-party collection agency and demands immediate payment — often threatening credit score damage, legal action, or arrest. Victims may be unsure whether the debt is real, particularly if they have had recent medical treatment. Real hospital billing departments send itemised invoices by post, allow time to review and dispute charges, and do not demand gift card or wire payment. Before paying any medical collection claim, request a written validation notice with an itemised bill and verify the amount with your healthcare provider directly.\n\nThe scam thrives on a true fact: medical billing genuinely is confusing, with charges arriving months after treatment, from entities whose names you may not recognise — an anaesthesiology group, a lab, an imaging provider. Fraudsters hide inside that ambiguity, betting you cannot say with certainty that you owe nothing. The answer is not to become a billing expert but to route everything through verification: any collector unwilling to send written validation, and any debt your own provider's billing office cannot confirm, fails the test regardless of how plausible the amount sounds.\n\nData breaches have sharpened the threat, because callers may recite genuine details — treatment dates, provider names, even procedures — lifted from stolen records. Accuracy about the past does not validate a demand in the present; it only proves the caller has data, not authority. Keep the two channels separate in your mind: information can come from anywhere, but payment should only ever flow through the billing route your provider or insurer confirms.","redFlags":["Call demands immediate payment or legal action will follow","Payment requested by gift card, wire, or prepaid card","Caller cannot provide a detailed itemised bill","Debt amount doesn't match any paperwork you have received","Collector refuses to put the debt notice in writing"],"whatToDoNow":["Request a written debt validation notice — in the US, collectors are legally required to provide one","Verify the debt directly with your hospital or healthcare provider using a number from your records","Never pay by gift card or wire for a medical debt","Report suspicious calls to the FTC and CFPB in the US, or your national consumer authority"],"faq":[{"question":"Am I legally protected from aggressive medical debt collection tactics?","answer":"In the US, the Fair Debt Collection Practices Act (FDCPA) restricts how collectors can contact you and requires them to verify debts on request. Similar protections exist in many countries."},{"question":"The caller knew my treatment details — doesn't that prove the debt is real?","answer":"No. Healthcare data breaches mean fraudsters may hold genuine records of your care. Knowing your history proves data access, not billing authority. Verify the debt through your provider's billing office or insurer before paying anything."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-bank-text-asking-me-to-confirm-a-payment-i-didnt-make-a-scam","url":"https://scamencyclopedia.org/questions/is-a-bank-text-asking-me-to-confirm-a-payment-i-didnt-make-a-scam","question":"Is a bank text asking me to confirm a payment I didn't make a scam?","shortAnswer":"It could be — fraudsters send fake bank alerts to trick you into calling a spoofed number or clicking a phishing link. Always verify through your bank's official app or card-back number.","explanation":"Scammers send texts that mimic your bank's genuine fraud-alert format. The message claims an unusual payment has been made and asks you to press a key, click a link, or call a number to confirm or cancel it. If you interact, you may be connected to a fake 'fraud team' that guides you into handing over your one-time passcode, or the link installs credential-harvesting malware. Genuine bank fraud alerts do exist, but they will never ask you to share a full password, PIN, or one-time code, and they will direct you to the number on the back of your card — not a number embedded in the text. The safest response is to ignore the text entirely and log in directly through your bank's official app or website to check for any real alerts.\n\nThe fake alert is usually stage one of a two-act play. The text softens you up with alarm; the follow-up call — from the 'fraud team', often on a spoofed number — does the extraction, walking you through 'securing' your account in ways that actually drain it: moving money to a 'safe account', reading out one-time passcodes, or approving transactions in your app 'to cancel them'. Each of those actions is something only a fraudster would ever request, and knowing that list cold is worth more than any ability to judge whether a message looks authentic.\n\nA fixed personal procedure removes the guesswork under pressure: never act through the message, always check the app, and if a caller follows up, hang up and dial the number on your card yourself. Banks design their genuine fraud processes to survive exactly this behaviour — a real fraud team loses nothing when you hang up and call back, because the alert will be waiting on your account. Only the scam depends on keeping you inside the channel it chose.","redFlags":["Text includes a phone number to call or a link to click","Message asks you to confirm or cancel a payment urgently","Caller asks for your one-time passcode or full PIN","The payment amount or merchant looks completely unfamiliar","Pressure to act within minutes or your account will be frozen"],"whatToDoNow":["Do not click any link or call any number in the text","Log in to your bank app directly and check your transactions","Call the number on the back of your debit or credit card if concerned","Report the suspicious text to your bank's fraud team"],"faq":[{"question":"What if the text uses my real name?","answer":"Scammers buy personal data from breaches, so knowing your name does not make a text genuine. Always verify through official channels regardless."},{"question":"What will a genuine bank fraud team never ask me to do?","answer":"Move money to a 'safe account', read out a full one-time passcode or PIN, approve app transactions to 'cancel' them, or install remote access software. Any one of those requests identifies the caller as a fraudster, whatever number the call came from."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-faster-payments-bank-transfer-refundable-if-scammed","url":"https://scamencyclopedia.org/questions/is-a-faster-payments-bank-transfer-refundable-if-scammed","question":"Is a faster-payments bank transfer refundable if I was scammed?","shortAnswer":"Possibly — many banks now reimburse authorised push-payment fraud, but you must report it quickly. Refund rules and amounts vary by bank and jurisdiction.","explanation":"When you are tricked into authorising a bank transfer to a scammer, it is called authorised push-payment (APP) fraud. Unlike card payments, bank transfers do not have automatic chargeback rights. However, many banks in the UK and other countries have voluntarily adopted reimbursement codes, and some jurisdictions have made partial reimbursement mandatory. Your chances of recovery are highest if you report to your bank on the same day, as banks can sometimes recall funds before they are moved onward. Even if full reimbursement is refused, you should still file a police report and a report with your national fraud body, because it creates a record and supports any later appeal. Keep all evidence: messages, screenshots, and transaction references.\n\nHow you tell the story to your bank affects the outcome, so tell it plainly and completely: you were deceived, here is the contact that started it, here is what you were told, here are the messages. Reimbursement assessments often turn on whether you acted reasonably and whether you ignored explicit warnings, so volunteering the full picture — including warnings you saw and why the deception overcame them — is stronger than a minimal account. If the first decision goes against you, ask for it in writing and use the bank's complaints process; many refusals are overturned on review or by a financial ombudsman where one exists.\n\nOne pattern to expect afterwards: reported victims are frequently recontacted by 'fund recovery' services claiming they can retrieve the money for an upfront fee. Legitimate recovery flows through your bank, the receiving bank, and law enforcement — none of whom charge victims fees to pursue it. Paying a recovery service turns one loss into two.","redFlags":["You transferred money after being convinced of an urgent reason","The recipient account details were provided by someone who contacted you","You were told to keep the transfer secret","The 'investment' or 'emergency' story now feels implausible"],"whatToDoNow":["Call your bank's fraud line immediately — every hour matters","File a report with your national fraud reporting body","Keep all messages and receipts as evidence","Ask your bank about APP fraud reimbursement policy in writing"],"faq":[{"question":"Does it matter if I authorised the transfer myself?","answer":"Yes, but many reimbursement schemes still cover authorised transfers where you were deceived. Being 'authorised' does not automatically disqualify you."},{"question":"My bank refused to reimburse me — is that the end of it?","answer":"Not necessarily. Ask for the refusal in writing, escalate through the bank's formal complaints process, and take the case to a financial ombudsman or equivalent dispute body where your country has one. Refusals are regularly overturned on review, especially with full evidence."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-contactless-payment-request-via-nfc-link-a-scam","url":"https://scamencyclopedia.org/questions/is-a-contactless-payment-request-via-nfc-link-a-scam","question":"Is a contactless payment request sent via a link or NFC tag a scam?","shortAnswer":"Treat any unexpected NFC tag or link that launches a payment app with extreme caution — scammers plant these to redirect payments to their own accounts.","explanation":"Near-field communication (NFC) stickers and QR codes can be programmed to open payment apps, pre-fill amounts, or redirect browser sessions. Fraudsters have placed fake NFC stickers over legitimate payment points in restaurants, car parks, and charity donation boxes, so that tapping a device sends money to a scammer rather than the intended recipient. Similarly, phishing links can open your phone's wallet app with a pre-populated fraudulent payee. Before tapping any NFC tag in a public space, check that the sticker looks original and has not been placed over another one. If a payment app opens unexpectedly, close it and report the location. Legitimate payment terminals do not ask you to scan a sticker on a piece of paper or a flyer.\n\nUnattended payment points are where this technique concentrates, because there is no staff member to notice the tampering and no one to ask when something looks off. Parking machines, EV chargers, vending equipment, and donation boxes all share the same profile: a hurried user, an expected payment, and a surface where one sticker can sit over another for days before anyone reports it. The scammer's version will often work smoothly — the payment goes through, a plausible confirmation appears — and the diversion is only discovered when a fine or a missing donation surfaces later.\n\nThe strongest habit is to match the payment channel to the setting. Machines with built-in card readers should take your card or phone tap directly at the reader; a sticker inviting you to pay through your browser instead of the machine's own hardware deserves suspicion by default. And when a wallet or payment app opens, the payee name on the confirmation screen is your last checkpoint — a car park operator's name should not be an individual, and a charity's name should match the tin it is attached to.","redFlags":["NFC sticker appears to be placed over another label or looks newly applied","Link in a message unexpectedly opens your mobile wallet","Pre-filled payee name does not match the business you are paying","Charity collection tin directs you to scan an NFC tag on a card"],"whatToDoNow":["Do not complete the payment if anything looks unusual","Report suspicious NFC stickers to the venue and local police","If you already paid, contact your bank or payment app support immediately","Check your bank statement for unexpected transactions"],"faq":[{"question":"Can an NFC tag steal my card details without me tapping it?","answer":"Passive card skimming over NFC has an extremely short range (a few centimetres) and modern chip-and-PIN cards limit what is readable. The main risk is being tricked into actively tapping a fraudulent tag."},{"question":"The payment went through normally — how would I even know it was diverted?","answer":"Often you don't until the consequence arrives: a parking fine despite paying, or a receipt naming an individual rather than the business. Check the payee name at confirmation, keep the receipt screen, and query anything where the name and the setting don't match."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-cash-deposit-request-from-an-online-seller-a-scam","url":"https://scamencyclopedia.org/questions/is-a-cash-deposit-request-from-an-online-seller-a-scam","question":"Is a cash deposit request from an online seller a scam?","shortAnswer":"Asking for a cash deposit — especially into a random bank account — is a major warning sign. Legitimate sellers on established platforms use the platform's payment system.","explanation":"Fraudulent online sellers, particularly those listing high-value goods such as vehicles, electronics, or concert tickets, frequently ask buyers to make a direct bank transfer or cash deposit to 'hold' the item. Once the deposit is paid, the seller disappears, the listing vanishes, and the goods never arrive. Cash deposits offer you no buyer protection: unlike card payments or platform-managed checkout, there is no chargeback mechanism. Scammers prefer direct deposits precisely because they are hard to reverse. Legitimate individual sellers may sometimes request bank transfer, but you should insist on viewing the item in person first and only paying at the point of safe handover.\n\nThe deposit request works because it mimics a real market behaviour: for genuinely scarce items, holding fees exist, and scammers borrow that familiarity while removing its safeguards. The difference is verifiability. A legitimate hold happens after you have seen the item or verified the seller, is documented, and is usually modest; the fraudulent version demands money as the precondition for everything else, from a seller whose existence you cannot confirm, for an item that may be photographed from someone else's listing.\n\nCompetition pressure is the lever, so blunt it deliberately: decide before you start shopping that you will lose some genuinely good deals rather than pay any unseen stranger to 'hold' anything. In practice you lose very little — real sellers with real items overwhelmingly accept viewing-then-payment, because it costs them nothing. The listings that evaporate when you refuse to pay in advance were the ones that were never real.","redFlags":["Seller insists on cash deposit or direct bank transfer before you see the item","Price is unusually low to attract quick payment","Seller is 'abroad' or 'deployed' and cannot meet in person","Urgency: another buyer is waiting, act now","Communication moves off the marketplace platform to email or WhatsApp"],"whatToDoNow":["Never pay a deposit before viewing the item in person","Use only the payment system provided by the platform","If you have already paid, report to your bank and the marketplace","File a report with your national fraud or consumer protection body"],"faq":[{"question":"What if the seller sends me a 'proof of ownership' document?","answer":"Documents are easy to forge. A convincing-looking document does not verify that the seller actually owns the item or that it exists."},{"question":"The seller says other buyers are waiting and I'll lose the item. What should I do?","answer":"Let it go. Manufactured competition is the standard pressure tool, and a genuine seller gains nothing by refusing a same-week viewing. Accepting that you may lose a few real bargains is the price of never paying an unverifiable stranger in advance — and it is a good trade."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-payday-loan-text-from-a-lender-i-never-contacted-a-scam","url":"https://scamencyclopedia.org/questions/is-a-payday-loan-text-from-a-lender-i-never-contacted-a-scam","question":"Is a payday loan text from a lender I never contacted a scam?","shortAnswer":"Unsolicited payday loan texts are almost always either phishing attempts or lead-generator fraud. Never click the link or call the number provided.","explanation":"Fraudulent loan texts claim you have been pre-approved for a payday loan and ask you to click a link to collect your money. The link leads to a fake application form that harvests your personal and banking details, which are then sold or used for identity theft. Some variants charge an upfront 'insurance' or 'processing' fee and disappear once paid. Legitimate lenders do not send unsolicited SMS to people who have not applied. Even if you have enquired about loans elsewhere, the text is more likely from a data broker who sold your details than from a genuine lender. Unsolicited financial promotions from unregulated sources are illegal in many countries.\n\nThese texts target moments of vulnerability by design: they cluster around the end of the month, holiday periods, and economic downturns, when the promise of same-day money reaches people with the least room to be cautious. The 'pre-approved' framing does psychological work too — it suggests a decision has already been made in your favour, so responding feels like collecting something rather than applying for it. No genuine credit decision precedes an application; pre-approval from a lender who has never assessed you is a contradiction in terms.\n\nThe details you enter on the fake form have a long afterlife. Identity and bank details harvested through loan phishing feed later fraud that can surface months on — accounts opened in your name, direct debits you never set up, or highly convincing follow-up calls from 'lenders' quoting the exact information you provided. If you completed such a form, treat it as full identity exposure rather than a single bad click: alert your bank, place a fraud alert with credit agencies, and monitor your credit file.","redFlags":["You never applied for a loan with this company","Message promises instant approval regardless of credit score","A fee is required before funds are released","Link goes to a website you cannot verify is licensed","Company name does not appear on your national financial regulator's register"],"whatToDoNow":["Do not click the link or call the number in the text","Report the text to your mobile carrier's spam reporting service","Check your national financial regulator's register before engaging with any lender","If you shared details, place a fraud alert with credit reference agencies"],"faq":[{"question":"Can a real lender text me about a loan I didn't apply for?","answer":"In most jurisdictions, unsolicited direct marketing for credit is strictly regulated. A text promising pre-approval to someone who never applied is almost certainly not from a legitimate regulated lender."},{"question":"I filled in the loan form but never paid anything — am I safe?","answer":"Not entirely. The form was the point: your identity and bank details are now in criminal hands and may be used or sold later. Alert your bank, place a fraud alert with credit reference agencies, and be sceptical of any follow-up contact quoting your own details back at you."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-royal-mail-or-fedex-redelivery-fee-text-a-scam","url":"https://scamencyclopedia.org/questions/is-a-royal-mail-or-fedex-redelivery-fee-text-a-scam","question":"Is a Royal Mail or FedEx redelivery fee text a scam?","shortAnswer":"These texts are almost always phishing scams. Genuine couriers rarely charge a small fee by SMS link for redelivery, and the link leads to a fake payment page.","explanation":"Parcel redelivery fee scams are among the most common phishing campaigns globally. A text arrives claiming to be from a major courier service, saying a small fee is needed to release your package. The link goes to a convincing fake website that collects your card details, which are then used for unauthorised transactions. Real courier companies do not typically send SMS messages requesting card payment via a link. If you are genuinely expecting a parcel and want to check on a fee, go directly to the courier's official website and enter your tracking number there. The fraudulent texts often arrive even when you have no package pending, relying on the fact that most people have online shopping deliveries at some point.\n\nThe branding rotates constantly — one week the texts wear one courier's colours, the next another's — because the template is shared infrastructure: phishing kits with ready-made fake pages for every major carrier are sold and rented in bulk. That is why the messages feel so polished and so interchangeable, and why blocking one sender number achieves little. The durable defence is a rule about behaviour, not recognition: parcels are checked on the carrier's site via your tracking number, never through a link that arrived by SMS.\n\nIf card details went into one of these pages, assume they are already being tested. Call your bank, have the card blocked and reissued, and review recent transactions — including tiny ones, which are often validation charges. Expect a possible second act as well: fraudsters who capture card details sometimes follow up with a phone call impersonating your bank's fraud team, using the very payment you made as their proof of legitimacy. Knowing that sequence in advance is what breaks it.","redFlags":["You are not expecting a parcel but receive a redelivery text","Text links to a website that is not the courier's official domain","The fee is a small amount (under a few dollars/pounds) to seem trivial","Website asks for full card details including CVV","There is no real tracking number or it does not match any order"],"whatToDoNow":["Do not click the link — go to the courier's official website directly","Enter any real tracking number there to check for genuine holds","If you entered card details, contact your bank immediately","Report the text to your national cyber crime reporting service"],"faq":[{"question":"Do couriers ever charge fees by text?","answer":"Some countries do have legitimate customs-duty payment SMS services, but they direct you to official government or courier portals — not to generic payment pages with no branding consistency."},{"question":"Why do these texts keep coming even after I block the numbers?","answer":"The messages are sent from constantly rotating numbers and spoofed sender IDs, so blocking has little effect. Reporting to your carrier's spam service helps network-level filtering, but the reliable protection is behavioural: never pay or log in through an SMS link."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-call-from-an-immigration-officer-threatening-arrest-real","url":"https://scamencyclopedia.org/questions/is-a-call-from-an-immigration-officer-threatening-arrest-real","question":"Is a call from an immigration officer threatening arrest real?","shortAnswer":"No. Genuine immigration authorities do not call to demand immediate payment or threaten same-day arrest. This is a government impersonation scam.","explanation":"Immigration arrest scams target non-citizens, students, and recent arrivals who may feel especially vulnerable. A caller claiming to be an immigration official, border force agent, or government inspector says there is a problem with your visa, work permit, or tax record and that you will be arrested or deported unless you pay a fine immediately — usually by wire transfer, gift card, or cryptocurrency. Real immigration enforcement does not operate this way. If authorities had a legal concern about your status, they would contact you in writing, through official channels, and you would have the right to legal advice before any action. These calls rely on fear and are designed to prevent you from pausing to verify.\n\nThe targeting is often community-shaped rather than individual: callers work through language groups, use callers fluent in the target community's language, and sometimes reference local temples, churches, or community organisations to build familiarity. Students on visas are pressured with threats to their enrolment; workers are threatened with employer notification. Each variant aims the fear at whatever the victim most needs to protect, which is why the calls feel personal even when they are dialled by the thousand.\n\nTwo facts are worth holding onto under that pressure. First, no genuine enforcement process anywhere concludes within a single phone call — real proceedings generate documents, case numbers you can independently verify, and time to seek advice. Second, paying does not close the matter; it marks you as responsive, and follow-up demands almost always escalate. The strongest move is the undramatic one: hang up, verify your actual status through official channels or a qualified adviser, and warn others in your community, because the same script is running on your neighbours.","redFlags":["Caller threatens immediate arrest or deportation unless you pay","Payment demanded by gift card, wire transfer, or crypto","Caller tells you not to speak to a lawyer or family member","Caller knows your name but not specific case details","You are told to stay on the line while purchasing gift cards"],"whatToDoNow":["Hang up — do not pay anything","Contact an immigration lawyer or legal aid service to check your actual status","Report the call to your national fraud reporting service","Warn community members who may also receive such calls"],"faq":[{"question":"What if the caller knows my address and visa details?","answer":"Scammers buy personal data. Knowing some details makes the call sound credible but does not confirm the caller is a real official. Always verify through official government websites."},{"question":"I paid the caller — does that put my immigration status at risk?","answer":"Being defrauded is not an immigration violation. Report the crime to your national fraud service, tell your bank immediately, and if you remain worried about your status, consult an accredited immigration adviser — not any number connected to the original call."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-council-tax-debt-letter-from-a-bailiff-i-dont-recognise-real","url":"https://scamencyclopedia.org/questions/is-a-council-tax-debt-letter-from-a-bailiff-i-dont-recognise-real","question":"Is a council tax debt letter from a bailiff I don't recognise real?","shortAnswer":"It may be genuine, but fake debt letters are also used to extort payment. Always verify directly with the council before paying, not by contacting the bailiff listed.","explanation":"Fraudsters send letters designed to look like official enforcement notices from councils or bailiff firms, demanding payment for alleged unpaid council tax, parking fines, or other local authority debts. The letters include reference numbers and look authentic. Some are entirely fabricated; others piggyback on real debt processes. The risk is that paying a fake notice gives you no legal protection and does not clear any real debt. You should always verify with your local council directly — using the contact details from the council's own website, not those on the letter — before making any payment. Real bailiffs are required to give advance notice and follow strict legal procedures before entering your property.\n\nThe format is chosen because enforcement letters short-circuit deliberation: official crests, legal terminology, and same-day consequences push recipients toward paying just to make the threat go away, especially when the sum is small enough to feel cheaper than the anxiety. Fraudsters price their demands with exactly that calculation in mind. Genuine enforcement, by contrast, is the end of a paper trail — a council tax debt arrives after bills, reminders, and court documentation, not as a first contact demanding payment within a day.\n\nVerification is quick because the authority is local and reachable: your council can confirm in one call whether any debt exists against your address, and genuine enforcement firms can be checked against official registers of certificated agents where your country maintains one. Do all of this through contact details you source yourself. If the letter proves fake, report it — and mention it to neighbours, because these campaigns are usually mailed by the street, and the most vulnerable recipients are the least likely to question an official-looking demand.","redFlags":["Letter demands urgent payment within 24 hours or face door entry","Payment methods include unusual options such as cryptocurrency or prepaid cards","You have no memory of receiving any prior council tax bill for the amount claimed","Letter contact details differ from those on your council's official website"],"whatToDoNow":["Do not call any number on the letter or pay immediately","Look up your council's phone number independently and verify the debt","Ask the council for a breakdown of what is allegedly owed","Report the letter to your council's fraud team if it appears fake"],"faq":[{"question":"Can a bailiff enter my home without warning?","answer":"In most jurisdictions, enforcement agents must follow legal steps including advance written notice. If a letter claims they will arrive the same day without prior correspondence, treat it as suspicious."},{"question":"What if I genuinely do owe council tax — could the letter still be fake?","answer":"Yes. Fraudsters sometimes target areas where arrears are common, and a real debt does not validate a particular letter. Verify the amount and any enforcement action directly with the council, and pay only through the council's own confirmed channels."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-benefits-overpayment-recovery-text-from-the-government-real","url":"https://scamencyclopedia.org/questions/is-a-benefits-overpayment-recovery-text-from-the-government-real","question":"Is a benefits overpayment recovery text from the government real?","shortAnswer":"Government benefits agencies almost never contact you about overpayments by SMS with a payment link. Verify any overpayment claim directly through official channels.","explanation":"Benefits overpayment scams send a text or email claiming you have been overpaid welfare, unemployment, or disability benefits and must repay a specific amount immediately via a link. The link leads to a payment page that steals your card or bank details. Real government benefits agencies send formal written letters if they believe you owe money, and they will direct you to official portals — not to standalone payment websites reached by a text link. If you have received a legitimate overpayment notice, you should call the benefits agency using the number on their official website to confirm the amount and arrange repayment through verified means.\n\nThese messages exploit a specific anxiety: many recipients genuinely rely on benefits and know that overpayment recovery is a real administrative process, so the demand lands as plausible rather than absurd. Some variants invert the lure — offering a 'cost of living payment', 'back-payment', or supplementary support instead of demanding money — but both directions funnel to the same harvesting page asking for bank details and identity information. Whether the message threatens or gives, the test is identical: real benefits business happens inside your official account portal and by letter, not through standalone links.\n\nThe stolen details have particular value here because they enable benefit hijacking — redirecting future payments to a fraudster's account — which victims often discover only when an expected payment fails to arrive. If you entered details on such a page, contact the benefits agency through its official number promptly to flag your account and check that your registered payment details are unchanged, alongside the usual bank notification and password changes.","redFlags":["Text or email demands immediate repayment via a link","Amount mentioned does not match any payment you received","No letter or prior correspondence about the alleged overpayment","Link goes to a website domain that differs from the official government domain"],"whatToDoNow":["Do not click the link or make any payment from the message","Look up the benefits agency number independently and call to verify","If you do owe money, ask for a formal written notice before paying","Report phishing texts to your national cyber crime reporting service"],"faq":[{"question":"What if the text mentions my national insurance or social security number?","answer":"Scammers can obtain partial personal data from breaches. A partial reference number in a text does not verify the sender is a genuine government agency."},{"question":"What about texts offering me an extra benefit payment rather than demanding money?","answer":"Same scam, reversed lure. 'Claim your support payment' links lead to the same detail-harvesting pages as repayment demands. Genuine entitlements appear in your official benefits account and arrive without you re-entering bank details through a message link."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-vat-or-sales-tax-refund-email-from-the-tax-authority-real","url":"https://scamencyclopedia.org/questions/is-a-vat-or-sales-tax-refund-email-from-the-tax-authority-real","question":"Is a VAT or sales tax refund email from the tax authority real?","shortAnswer":"Unsolicited tax refund emails are almost always phishing. Real tax agencies communicate through official post or verified online portals, not by asking you to click a link to claim a refund.","explanation":"Tax refund phishing emails are sent in waves, often timed around filing seasons. They claim you are owed a refund and ask you to click a link and enter your bank account or card details to receive the money. The page looks like an official tax authority website but is a fake designed to steal your credentials or payment details. In reality, tax authorities process refunds through the bank account you registered during your tax return submission. They do not email you a clickable link to collect money. If you believe you are owed a refund, log in to your tax authority's official website directly — never through a link in an email.\n\nThe refund is the perfect phishing lure because it reverses the usual emotional defence: threats put people on guard, but money owed to you invites engagement. The emails are timed to filing seasons when a refund is plausible, the amounts are specific enough to feel calculated rather than invented, and the fake page asks for card details under the reasonable-sounding pretext of knowing where to send your money. That pretext is the tell — a tax authority that owes you money already knows how to pay you, through the bank details in your registered account.\n\nBusiness owners see a parallel track of these campaigns around VAT and sales tax cycles, sometimes paired with follow-up calls impersonating tax officers to 'help process' the refund. The verification rule scales unchanged: any tax matter, personal or business, gets checked by logging into the official portal directly or calling the authority's published number. Forwarding the phishing email to your tax authority's reporting address takes seconds and feeds the takedown systems that protect people who would have clicked.","redFlags":["Email promises a refund and asks you to click a link to claim it","Link goes to a site with a domain slightly different from the official tax authority","Refund amount is very specific to seem credible but you filed no return","Email asks for full card details to 'transfer' the refund"],"whatToDoNow":["Do not click any link in the email","Log in to your tax authority's official portal directly to check your status","Forward the phishing email to your national tax authority's fraud reporting address","If you entered card details, call your bank immediately"],"faq":[{"question":"Can the tax authority ever email me about a refund?","answer":"Some authorities send notification emails telling you a refund has been processed, but they direct you to log in to your existing account — they never ask for bank or card details by email."},{"question":"Why would a scammer ask for my card details to send me money?","answer":"They wouldn't need them — that is the giveaway. Receiving a payment requires at most the account details your tax authority already holds. A form asking for your full card number, expiry, and security code is collecting what's needed to take money, not send it."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-google-account-suspended-email-real","url":"https://scamencyclopedia.org/questions/is-a-google-account-suspended-email-real","question":"Is a 'Google account suspended' email real?","shortAnswer":"Most 'Google account suspended' emails are phishing. Google communicates through your account's official security centre, not by asking you to click an external link to re-verify.","explanation":"Phishing emails mimicking Google are extremely common. They claim your Google or Gmail account has been suspended, flagged for unusual activity, or will be deleted unless you verify it immediately. The link in the email leads to a fake login page that captures your Google username and password. With those credentials, scammers can access any Google service you use, your contacts, and any accounts that use 'Sign in with Google'.\n\nThe damage from a compromised Google account goes well beyond email. Because so many other services rely on your inbox for password resets, a scammer who controls it can reset your logins elsewhere, read years of stored correspondence, and impersonate you to everyone in your contact list. That is why these campaigns are so persistent: one set of credentials opens many doors. It is also why the emails lean so heavily on urgency — a countdown to 'deletion' is designed to make you click before you inspect the sender address or the destination URL.\n\nGenuine security alerts from Google appear inside your account's Security tab and in the Gmail 'Alerts' section, not only in your inbox. You can also visit myaccount.google.com at any time to check the real status of your account directly. If everything looks normal there, the email was a phishing attempt and can be reported and deleted.","redFlags":["Email from a sender that is not an official google.com address","Urgent language: account will be deleted in 24 hours","Link goes to a URL that is not accounts.google.com","Page asks for your password and recovery phone in one step"],"whatToDoNow":["Do not click any link in the email","Go to myaccount.google.com directly and check Security > Recent activity","If your account is genuinely compromised, follow Google's account recovery steps","Enable two-factor authentication on your Google account"],"faq":[{"question":"What if the email looks exactly like a real Google email?","answer":"Scammers copy genuine email templates perfectly. Always verify account status by going directly to the official site — email appearance alone cannot prove authenticity."},{"question":"I clicked the link and entered my password. What should I do?","answer":"Change your Google password immediately, sign out of all other sessions from the Security section, and check that your recovery email and phone have not been altered. Then enable two-factor authentication and change the password on any other account where you reused it."},{"question":"Why did the email land in my inbox instead of spam?","answer":"Spam filters catch a large share of phishing, but new campaigns sent from freshly registered domains can slip through for a short window. Delivery to your inbox is not evidence that a message is genuine."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-windows-11-upgrade-pop-up-asking-for-payment-a-scam","url":"https://scamencyclopedia.org/questions/is-a-windows-11-upgrade-pop-up-asking-for-payment-a-scam","question":"Is a Windows upgrade pop-up asking for payment a scam?","shortAnswer":"Yes. Microsoft does not charge for Windows operating system upgrades through browser pop-ups or unexpected calls. Pop-ups asking for payment are scams.","explanation":"Tech-support pop-ups impersonating Microsoft are among the most persistent online scams. A full-screen alert appears warning that your computer is infected, your Windows licence has expired, or your operating system must be upgraded, and you must call a number or pay a fee immediately. The goal is either to get you on the phone with a fake 'Microsoft technician' who will demand remote access and payment, or to send you to a fake payment page.\n\nThese pop-ups usually arrive through low-quality advertising networks, compromised websites, or browser notification permissions granted to a spammy site by accident — not because anything is wrong with your computer. The alarming full-screen takeover, flashing text, and audio warnings are stage dressing that any web page can produce. Nothing on the page has scanned your machine, and nothing on it can know whether you are infected.\n\nMicrosoft distributes genuine Windows updates automatically and for free through Windows Update — it never presents payment demands via browser pop-ups, and it does not embed support phone numbers in warning screens. Closing the pop-up (even if it appears full-screen) and running a reputable security scan is the correct response. If the same page keeps reappearing, remove the offending site's notification permission in your browser settings and clear recent browsing data to break the loop.","redFlags":["Full-screen browser pop-up with a Microsoft logo demanding you call a number","Pop-up claims your computer is locked or has a critical virus","Request for payment by gift card, wire transfer, or cryptocurrency","Browser appears frozen — usually resolved by pressing Alt+F4 or force-quitting"],"whatToDoNow":["Close the browser tab or force-quit the browser — do not call the number","Run a scan with a reputable security product to check for adware","If you already paid or gave remote access, contact your bank and change passwords","Report the pop-up domain to your national cyber crime service"],"faq":[{"question":"What if the pop-up plays a loud audio warning?","answer":"Audio alarms are a deliberate tactic to create panic and stop you thinking clearly. Mute your speakers and close the browser. No legitimate system alert requires you to call a number."},{"question":"Does the pop-up mean my computer is already infected?","answer":"Usually not. Most of these pages are simply aggressive ads served through low-quality networks. A scan with reputable security software will confirm whether any adware is present, but the pop-up itself proves nothing about your machine."},{"question":"Does Microsoft ever contact users about viruses on their computer?","answer":"No. Microsoft does not send unsolicited pop-ups, emails, or phone calls telling individuals their computer is infected. Any contact of that kind is impersonation, whoever it claims to be from."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-email-saying-my-domain-is-expiring-a-scam","url":"https://scamencyclopedia.org/questions/is-an-email-saying-my-domain-is-expiring-a-scam","question":"Is an email saying my domain name is expiring a scam?","shortAnswer":"Domain expiry scam emails try to trick website owners into transferring their domain to a new, often expensive registrar. Always renew through your current registrar directly.","explanation":"Domain slamming is a fraud in which a company sends letters or emails that look like renewal invoices for your domain name, but they are actually transfer requests to a different — often much more expensive — registrar. The email may be worded to look like an urgent renewal notice, but paying it transfers your domain away from your current provider rather than renewing it. Separately, some emails simply phish for your registrar login credentials by linking to a fake login page.\n\nThe senders harvest targets from public domain registration records, which is why a notice can correctly quote your domain name and its approximate expiry window and still be fraudulent. Small businesses are a favourite target because the person who pays invoices is often not the person who registered the domain, so a plausible-looking renewal bill gets paid without question. Losing a domain this way can mean days or weeks of disruption to your website and email while you try to recover it — far more costly than the invoice itself.\n\nIf you receive a domain expiry notice, log in to your actual registrar's dashboard directly to check the real expiry date and renew there. Enabling auto-renewal and the registrar's transfer lock closes off both versions of the scam, and keeping your domain's billing contact up to date means genuine notices only ever arrive from one known source.","redFlags":["Email is from a registrar you don't recognise, not your actual provider","Invoice asks for a much higher price than your usual renewal fee","Fine print mentions 'transfer' rather than 'renewal'","Link goes to a website that is not your current registrar"],"whatToDoNow":["Log in to your actual registrar dashboard to check your real renewal date","Renew only through your current provider","Mark the slamming email as spam and report it","Enable domain lock and auto-renewal with your real registrar"],"faq":[{"question":"Can my domain be transferred without my permission?","answer":"Reputable registrars require you to approve transfers via email and an authorisation code. Enabling 'registrar lock' on your domain adds an extra layer of protection."},{"question":"How did they know my domain name and expiry date?","answer":"Domain registration details, including expiry dates, are publicly visible in WHOIS records unless you use privacy protection. Quoting them accurately requires no inside access and is not a sign of legitimacy."},{"question":"I already paid one of these invoices. What now?","answer":"Contact your real registrar immediately to check whether a transfer has been initiated and ask them to lock the domain. Then dispute the payment with your bank or card issuer and keep the invoice as evidence."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-password-reset-email-i-didnt-request-a-scam","url":"https://scamencyclopedia.org/questions/is-a-password-reset-email-i-didnt-request-a-scam","question":"Is a password reset email I didn't request a scam?","shortAnswer":"An unsolicited password reset email usually means someone is trying to take over your account or test whether it exists. Do not click the reset link — just ignore it or secure your account.","explanation":"Receiving a password reset email you did not request can mean several things: a scammer is attempting to break into your account and triggered the reset, someone typed your email in error, or your email was included in a credential-stuffing attempt. Simply receiving this email does not mean your account has been accessed — but it is a warning sign. The risk is if you click the link (which may be a phishing link in a fake reset email) or if you are using a weak, reused password.\n\nIt helps to separate the two scenarios. If the email is genuinely from the service, someone entered your address on the real reset page; nothing changes unless the link is used, so you can safely ignore it and the request will expire on its own. If the email is fake, the entire message exists to get you to click, and the 'reset' page will harvest whatever you type into it. In both cases the correct move is the same: do not interact with the email at all.\n\nInstead, log in to that service directly through its official website or app, check recent sign-in activity for anything you do not recognise, and enable two-factor authentication. If you reuse that password anywhere else, change it everywhere — a burst of reset emails across several services often means your address and an old password are circulating from a data breach.","redFlags":["You did not request a password reset","Multiple reset emails for different accounts in quick succession","The email sender domain does not exactly match the service","Link in the email goes to a domain different from the official service"],"whatToDoNow":["Do not click any link in the email if you are unsure of the sender","Log in to the account directly through the official website","Change your password if you reuse it across multiple services","Enable two-factor authentication on the account"],"faq":[{"question":"Should I click the reset link to cancel the request?","answer":"No. You do not need to do anything — the link will expire automatically. Clicking it confirms your email is active and may lead to a phishing page."},{"question":"I keep getting reset emails for the same account. Should I worry?","answer":"Repeated requests suggest someone is actively trying to get in. Log in directly, review recent activity, set a strong unique password, and enable two-factor authentication. The attempts cannot succeed without access to your inbox or codes."},{"question":"How do I tell a genuine reset email from a fake one?","answer":"Check the sender domain and, without clicking, inspect where the link actually points. When in doubt, ignore the email entirely and go to the service directly — a genuine reset request never requires you to act on the email."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-tech-support-agent-asking-for-teamviewer-access-a-scam","url":"https://scamencyclopedia.org/questions/is-a-tech-support-agent-asking-for-teamviewer-access-a-scam","question":"Is a tech support agent asking for TeamViewer access a scam?","shortAnswer":"If the 'tech support' contacted you — by pop-up, cold call, or email — the request for remote access is almost certainly a scam. Legitimate support only uses remote tools when you have initiated the contact.","explanation":"Remote access scams follow a consistent script: a pop-up, a cold call, or an email claims your device has a critical problem. A 'technician' asks you to install a remote access tool and then, once connected, shows you normal system processes claiming they are malware. They then demand payment to 'fix' the problem. In more damaging variants, while pretending to clean your system they access your banking apps or install keyloggers for later use.\n\nA common follow-up is the refund version: weeks or months later, someone calls claiming the 'support company' is closing and owes you a refund, then uses remote access to fake an overpayment into your account and pressures you to send back the difference. The 'overpayment' is an edited screen or a transfer between your own accounts — the money you send back is real. This is why a single remote session can lead to repeated targeting long after the first call.\n\nLegitimate technology companies, internet service providers, and antivirus vendors do not initiate unsolicited contact and do not request remote access unless you have opened a support ticket. The direction of contact is the test that matters: support you sought out can be genuine, support that sought you out should be treated as hostile. If you have given remote access to an unsolicited contact, disconnect your internet immediately, run a security check, and change your important passwords from a different device.","redFlags":["You did not contact them — they contacted you first","They ask you to download a remote access app immediately","They show you 'errors' in normal system tools to prove you are infected","They demand payment by gift card, wire transfer, or cryptocurrency"],"whatToDoNow":["Disconnect from the remote session immediately","Disconnect your device from the internet","Change passwords for all accounts, especially banking","Contact your bank if the scammer had access while banking was open"],"faq":[{"question":"Is TeamViewer itself malicious?","answer":"No — TeamViewer and similar tools are legitimate software. The scam lies in who is using it and why. Using remote access tools at someone else's unsolicited request is always risky."},{"question":"They only had access for a few minutes. Am I still at risk?","answer":"Possibly. A few minutes is enough to install persistent software or copy saved passwords. Uninstall the remote tool, run a full security scan, and change important passwords from a device the scammer never touched."},{"question":"How do I know if a support contact is genuine?","answer":"Ask who initiated it. If you opened a ticket or called the official number yourself, remote support can be legitimate. If they contacted you first — by call, pop-up, or email — end the contact and reach the company through its official channels."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-online-date-who-needs-money-for-a-plane-ticket-a-scammer","url":"https://scamencyclopedia.org/questions/is-an-online-date-who-needs-money-for-a-plane-ticket-a-scammer","question":"Is an online date who needs money for a plane ticket a scammer?","shortAnswer":"Almost certainly yes. Requesting money for travel to meet you is one of the most common romance scam scripts, regardless of how real and genuine the relationship has seemed.","explanation":"The plane ticket request is a near-universal stage in romance scams. After weeks or months of affectionate messages and apparent emotional investment, the person claims they have bought a ticket to finally meet you but a last-minute emergency — a cancelled card, a customs hold, a family crisis — means they need money urgently or they cannot come. This is a manufactured crisis. The relationship, the photos, and the identity are typically fabricated.\n\nThe timing is deliberate. The request lands at the moment of maximum anticipation, when refusing feels like cancelling the meeting you have both been building toward. Scammers rehearse this stage carefully: the story is detailed, documents like ticket confirmations can be forged, and any hesitation on your part is met with hurt feelings or accusations that you never cared. Once money is sent, further emergencies follow until the victim stops paying, and the amount requested is always calibrated to feel just affordable enough.\n\nGenuine partners who want to visit will buy their own tickets and deal with their own travel problems. Someone who cannot fund their own travel would ask family, their employer, or their bank — not a person they have never met. If you are unsure, apply one test: refuse the money but keep the offer to meet open. A real person keeps working toward the meeting; a scammer escalates the crisis or disappears.","redFlags":["You have never met in person despite many promises","Sudden emergency prevents them coming unless you send money","Requests escalate: ticket, then visa fee, then customs fine","Person is always 'abroad' — military, offshore, working overseas","Relationship feels very intense very quickly"],"whatToDoNow":["Do not send money regardless of how genuine the relationship feels","Reverse image-search their profile photos to check for stolen images","Talk to a trusted friend or family member about the relationship","Report the profile to the platform and to your national fraud service"],"faq":[{"question":"What if they did a video call with me?","answer":"Short, low-quality video calls can be faked using pre-recorded footage or AI face-swap tools. A single brief call does not confirm someone is who they say they are."},{"question":"They sent me a photo of the ticket they bought. Does that prove anything?","answer":"No. Booking confirmations and ticket images are trivial to forge or edit, and refundable bookings can be made and cancelled. Documents supplied by the person asking for money are not verification."},{"question":"What if I offer to buy the ticket myself instead of sending cash?","answer":"Scammers usually refuse or invent reasons the ticket must be bought their way — a specific agent, a transferable voucher, cash for 'fees'. A refusal to accept a ticket booked directly in their name is itself a strong confirmation of a scam."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-new-instagram-follower-who-mentions-investment-a-scammer","url":"https://scamencyclopedia.org/questions/is-a-new-instagram-follower-who-mentions-investment-a-scammer","question":"Is a new Instagram follower who mentions investment a scammer?","shortAnswer":"A stranger who follows you, builds rapport, and then mentions a lucrative investment opportunity is almost certainly running a romance or pig-butchering investment scam.","explanation":"Fraudsters create polished Instagram profiles with lifestyle photos, build a small genuine-looking following, and then follow targets and begin friendly conversation. Over days or weeks they build rapport — discussing shared interests, complimenting you, appearing romantically or professionally interested. Eventually they mention how well they are doing financially thanks to a crypto or forex platform and offer to help you make the same returns.\n\nThe platform is fraudulent, and everything you see on it is controlled by the scammers. Initial small deposits appear to generate profits, and early withdrawals are sometimes even allowed to build confidence. Then come larger deposits, and when you try to withdraw those, fees, taxes, and 'account verification' charges are demanded — each one supposedly the last barrier before your money is released. It never is. This pattern is called pig butchering because scammers 'fatten' the victim's trust before taking everything.\n\nThe key insight is that the investment pitch was the goal from the first message. The friendly conversation, the shared interests, and the apparent lifestyle were groundwork produced at scale, often by workers running dozens of identical conversations from a script. A stranger who contacts you unprompted has no reason to hand you a wealth-building opportunity, and anyone steering a new friendship toward a trading platform should be treated as hostile no matter how long the rapport has been building.","redFlags":["New follower with a polished lifestyle profile contacts you out of nowhere","Conversation eventually steers toward investment or financial opportunity","They show screenshots of impressive profits on an unfamiliar platform","Platform requires minimum deposits and charges fees to withdraw"],"whatToDoNow":["Stop engaging and do not send any money","Report the account to Instagram","Do not deposit anything further if you already started","Contact your bank immediately if you linked a card or bank account"],"faq":[{"question":"What if the person video-calls me and seems real?","answer":"AI deepfake tools and stolen video footage allow scammers to conduct convincing video calls. A video call alone is not sufficient proof of identity."},{"question":"I already withdrew a small profit. Doesn't that prove the platform is real?","answer":"No — allowing small early withdrawals is a standard part of the script. It costs the scammers little and persuades victims to deposit far more. The block appears when you try to take out a meaningful amount."},{"question":"Why would a scammer spend weeks chatting before mentioning money?","answer":"Because the investment pitch only works on someone who trusts the person delivering it. These operations run many conversations in parallel from scripts, so weeks of patient rapport-building is a normal, low-cost part of the fraud."}],"lastReviewed":"2026-08-01"},{"slug":"can-a-romance-scammer-use-photos-they-get-from-me-against-me","url":"https://scamencyclopedia.org/questions/can-a-romance-scammer-use-photos-they-get-from-me-against-me","question":"Can a romance scammer use photos they get from me against me?","shortAnswer":"Yes. Scammers who receive intimate or personal photos often use them to threaten you with exposure (sextortion) unless you pay money. Stop contact and do not pay.","explanation":"Once a scammer has intimate images of you — either sent willingly during a relationship or obtained through account hacking — they may shift tactics and demand payment to keep the images private. This is called sextortion. The threats feel terrifying: they may claim they will send images to your family, employer, or contacts, and they may prove they have your contact list to make the threat concrete. Paying once almost never ends the demands; it signals that you will pay, and the amount typically increases.\n\nIt helps to understand the economics on the other side. Sextortion is run at volume: the operator is working through many victims at once, and their income depends entirely on people who pay. Actually distributing images earns them nothing, destroys their leverage, and increases their exposure to investigation. Evidence from law enforcement agencies consistently shows that scammers rarely carry out the threat when payment is refused. Victims who go silent and report are typically abandoned for easier targets.\n\nThe priority is to stop paying, stop engaging, preserve evidence, and report. Screenshot the threats and the account details before blocking, report the profile to the platform, and contact your national cybercrime unit. If you are under pressure right now, remember that the shame is engineered — this is a common, industrialised crime, and telling a trusted person or the police takes the scammer's only weapon away.","redFlags":["Romantic partner online requests intimate images early in the relationship","After receiving images, tone changes suddenly — threats appear","Demands for money to delete the images, with a deadline","Threat to send images to named contacts unless you pay"],"whatToDoNow":["Stop contact and do not pay anything","Screenshot the threats as evidence before blocking","Report to your national cybercrime or police unit","Contact the platform to report the account and request content removal"],"faq":[{"question":"Will they really send the images if I don't pay?","answer":"In the majority of reported cases, scammers do not follow through when payment is refused — escalating would increase their legal exposure. Reporting promptly can also trigger platform takedowns before distribution."},{"question":"I already paid once and they are asking for more. What now?","answer":"Stop paying. Continued demands after payment are the norm, not the exception — payment marks you as profitable. Preserve the evidence, block the account, and report to the platform and your national cybercrime unit."},{"question":"Can the images be removed if they were posted somewhere?","answer":"Major platforms remove non-consensual intimate images on report, and several countries have dedicated helplines and takedown services for exactly this situation. Report to the platform first and seek those services in your country."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-soldier-stationed-abroad-asking-for-money-on-facebook-a-scammer","url":"https://scamencyclopedia.org/questions/is-a-soldier-stationed-abroad-asking-for-money-on-facebook-a-scammer","question":"Is a soldier stationed abroad asking for money on Facebook a scammer?","shortAnswer":"Almost certainly yes. Military romance scams are extremely common — scammers use stolen photos of soldiers and claim deployment prevents them from meeting until they receive financial help.","explanation":"Military romance scams exploit the credibility and sympathy that genuine military service carries. A scammer uses photos of real service personnel (stolen from public social media) to create convincing profiles. They claim to be deployed in a conflict zone or on a peacekeeping mission, which conveniently explains why they cannot meet, video-call properly, or access their own finances. After building an emotional bond, requests for money follow: for a special leave pass, satellite phone fees, medical bills, or to access a bank account frozen by deployment.\n\nEvery one of those requests describes something that does not exist. Deployed service members do not pay for leave, do not pay to communicate with home, and do not have their personal bank accounts frozen by deployment. The US Army, UK Ministry of Defence, and other military organisations publish warnings explicitly stating this, because the real soldiers whose photos are stolen are impersonated over and over. The military framing is chosen precisely because it discourages checking — questioning a 'deployed soldier' feels disrespectful, and the deployment story explains away every inconsistency.\n\nA useful habit is to evaluate the requests rather than the story. Strip away the uniform and the mission, and what remains is a person you have never met asking you to send untraceable money. That pattern has one explanation. Reverse image-search the photos, and expect to find them attached to other names or to a real serviceperson's public profile.","redFlags":["Claims to be a soldier deployed abroad but cannot video-call","Needs money for leave travel, communication fees, or a medical bill","Photos look like professional or official military portraits","Asks you to send money via wire transfer or gift cards"],"whatToDoNow":["Do not send money, gift cards, or wire transfers","Reverse image-search the photos to check for stolen identity","Report the Facebook profile for impersonation","Report to your national fraud or consumer protection body"],"faq":[{"question":"Is there a way to verify if someone is actually in the military?","answer":"You can ask them to arrange a video call through an official base channel or check with the relevant national defence verification service. Real soldiers do not require money to access leave."},{"question":"They sent me military ID and leave request documents. Are those genuine?","answer":"Almost certainly not. Fake military IDs, 'leave application' forms, and letters from commanding officers are standard props in this scam. Genuine militaries do not process leave through payments from civilians, so any document supporting that request is fabricated."},{"question":"Do real soldiers ever contact strangers on Facebook?","answer":"Real service members use social media like anyone else, but the combination of unsolicited contact, rapid romance, deployment that prevents meeting, and a financial request is the scam pattern — not normal behaviour for anyone."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-tinder-match-asking-to-move-to-whatsapp-immediately-a-scam","url":"https://scamencyclopedia.org/questions/is-a-tinder-match-asking-to-move-to-whatsapp-immediately-a-scam","question":"Is a Tinder match asking to move to WhatsApp immediately a scam?","shortAnswer":"It is a major red flag. Scammers want to move off dating platforms quickly to avoid being reported and to use a channel with fewer scam-detection tools.","explanation":"Legitimate users on dating apps do sometimes move to WhatsApp or other messaging services, but an immediate request — often in the first few messages — is a strong indicator of a scam. Scammers move off platforms quickly because dating apps have fraud-detection systems, report buttons, and moderation, and because scam accounts get banned. Getting your number early means the conversation survives even after the profile is removed, which is exactly what a fraudster needs and a genuine match does not.\n\nOnce off the platform, the person typically pursues one of several scam types: a slow-burn romance leading to an investment pitch, a link to a fake verification or subscription service, a sextortion setup, or outright financial requests. Moving early also hands over your phone number itself, which can be used for spam, linked to other data about you, or targeted later even if you stop replying.\n\nA genuine person who wants to deepen the connection will not demand you switch platforms before you have established basic rapport, and will not react badly to 'let's chat here a bit longer'. That small refusal is a useful test: an ordinary match shrugs and keeps talking, while a scripted operation — which needs to move its pipeline of targets off-platform — often pushes harder or loses interest entirely.","redFlags":["First or second message asks for your WhatsApp or phone number","Profile photos look too polished or are clearly professional","They claim to be abroad, in the military, or working overseas","Conversation accelerates unnaturally quickly toward intimacy or investment"],"whatToDoNow":["Keep communication on the platform until you have met in person","Do not share your phone number until you are confident in who you are talking to","Report the profile on the dating app if it feels suspicious","Reverse image-search any photos before investing emotionally"],"faq":[{"question":"Can I ask them to verify on a video call first?","answer":"Yes, requesting a live video call with a specific action (wave, hold up today's newspaper) is a good basic verification step, though deepfake tools mean it is not foolproof."},{"question":"Is it ever normal to swap numbers with a match?","answer":"Yes — many genuine connections eventually move off the app. The red flag is timing and pressure: a push to switch in the first few messages, before any real conversation, is the scam pattern."},{"question":"What can someone do with just my phone number?","answer":"A number alone enables spam, smishing, and impersonation attempts, and it can be combined with breach data to build a fuller profile of you. It is a small risk individually, but there is no reason to hand it to a stranger on message one."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-rated-tasks-or-app-review-job-with-a-daily-quota-a-scam","url":"https://scamencyclopedia.org/questions/is-a-rated-tasks-or-app-review-job-with-a-daily-quota-a-scam","question":"Is a 'rated tasks' or app-review job with a daily quota a scam?","shortAnswer":"Yes. Paid task or app-review jobs requiring daily quotas and deposits to 'unlock' higher earnings are task scams — there is no legitimate employment at the end.","explanation":"Task scams present as simple remote work: you rate products, review apps, like social media posts, or complete short surveys. A fake dashboard shows rising earnings. The catch is a rule that you must complete a full set of tasks per day or your earnings are frozen, and at some point you must deposit your own money to proceed to a 'higher-paying' batch. Every deposit disappears, and the earnings displayed are fictional.\n\nThe design is psychologically precise. Early on you may receive a small genuine payout, which establishes trust. The daily quota creates routine and sunk effort. The dashboard balance grows large enough that walking away feels like abandoning your own money — which is exactly the pressure that drives victims to make one more deposit, then another, in escalating amounts. Often a friendly 'mentor' or group chat full of fake co-workers celebrates payouts to keep the illusion alive. None of it is real: there is no client, no employer, and no work being done that anyone would pay for.\n\nLegitimate online work platforms — freelance marketplaces, survey sites, research panels — never require you to deposit money to access or withdraw earnings. That single rule separates every real platform from every task scam. If a job requires you to pay in before you can cash out, the balance on the screen is bait, not wages.","redFlags":["Job recruited via WhatsApp, Telegram, or unsolicited text","Dashboard shows earnings you cannot withdraw until a condition is met","You must 'top up' your account to complete a task batch","Platform cannot be found in official app stores or verified online"],"whatToDoNow":["Stop completing tasks and depositing money immediately","Accept that deposits are unlikely to be recovered","Report the platform to your national fraud service","Warn others in any group chat used to recruit you"],"faq":[{"question":"Can I get my deposit back by completing one more task batch?","answer":"No. This is the core mechanic of task scams — each new batch requires another deposit. The promised withdrawal never arrives."},{"question":"But I was actually paid at the start — doesn't that make it real?","answer":"No. Small early payouts are part of the design: they cost the scammers little and are what convinces victims to deposit larger sums later. The profitable-looking balance that follows is fictional."},{"question":"Why would anyone pay people to like posts or rate apps at all?","answer":"They wouldn't at the rates promised — that is the tell. The 'work' exists only to make the dashboard feel earned. Real engagement farms pay tiny amounts and never require deposits from workers."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-virtual-assistant-job-that-requires-a-training-fee-a-scam","url":"https://scamencyclopedia.org/questions/is-a-virtual-assistant-job-that-requires-a-training-fee-a-scam","question":"Is a virtual assistant job that requires a training fee a scam?","shortAnswer":"Any job offer that requires you to pay a training, registration, or onboarding fee upfront is almost certainly a scam. Legitimate employers pay you, not the other way around.","explanation":"Virtual assistant (VA) job scams have proliferated with the growth of remote work. The offer appears on a job board, social media, or comes via direct message. After a brief, easy 'interview' you receive a job offer, but must first pay for a background check, a training module, or special software before you can begin. Once paid, the 'employer' disappears or the position never materialises.\n\nThe interview stage is part of the manipulation. It is kept short and flattering so that you feel selected, and the offer often arrives unusually fast with above-market pay for minimal experience. Some variants skip the fee and instead harvest the documents you would naturally hand a new employer — passport scans, tax numbers, bank details — which are then used for identity fraud or money-mule recruitment. Either way, the 'job' exists only to extract something from you in the onboarding phase.\n\nReal VA employment — whether through agencies, platforms, or direct hiring — does not require you to pay to start, and if training is needed, a legitimate employer covers the cost. Upfront fees are the single clearest indicator that a job offer is fraudulent. Before accepting any remote role, verify the company independently through its official website and business registration, and confirm that the person who hired you actually works there.","redFlags":["Offer requires any upfront payment — training, certification, background check","Interview is very short and consists of only basic questions","Communication is entirely over WhatsApp, Telegram, or personal email","Salary promise is significantly above the market rate for VA work","Company cannot be verified through official business registries"],"whatToDoNow":["Do not pay any fee to get a job","Search the company name with 'scam' or 'review' to check experiences","Report the listing to the job board it appeared on","File a report with your national consumer protection body"],"faq":[{"question":"What if they offer to reimburse the fee after my first pay period?","answer":"The reimbursement never happens — this is a standard reassurance used to overcome hesitation. Do not pay."},{"question":"I already sent ID documents to a fake employer. What should I do?","answer":"Treat it as identity theft risk. Alert your bank, watch your accounts and credit file for unfamiliar activity, and report the incident to your national fraud service. Keep the job advert and messages as evidence."},{"question":"The company has a professional website. Doesn't that make it legitimate?","answer":"No — a convincing website costs almost nothing to produce, and scammers also clone real companies' sites and names. Verify through independent sources: official business registries, the company's verified careers page, and staff you can confirm elsewhere."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-social-media-influencer-management-job-offer-a-scam","url":"https://scamencyclopedia.org/questions/is-a-social-media-influencer-management-job-offer-a-scam","question":"Is a social media influencer management job offer a scam?","shortAnswer":"Unsolicited influencer management or 'brand ambassador' offers frequently lead to task scams, upfront-fee fraud, or money-mule recruitment. Research any company carefully before agreeing.","explanation":"Fraudulent influencer or brand ambassador offers arrive via direct message on Instagram, TikTok, or LinkedIn and promise good pay to post content, recruit followers, or manage social accounts. Some require an upfront 'starter kit' purchase or subscription fee. Others are money-mule schemes disguised as payment-processing roles, where the 'brand work' turns out to involve receiving transfers into your own account and forwarding them on.\n\nThe flattery is the hook. The message praises your content and implies you have been specially chosen, when in reality the same text is sent in bulk to thousands of accounts of every size. Variants include discounted 'ambassador' merchandise you must buy (the discount is the product's real markup), requests for your bank details to 'set up payroll' before any contract exists, and fake collaboration contracts that harvest identity documents.\n\nGenuine influencer management agencies are established companies that you can verify: they have websites, verifiable staff, registered business addresses, and they approach creators based on specific content — not randomly. Real brand deals pay you; they do not require you to buy anything, and payment details are exchanged only after a genuine contract is agreed. Offers that arrive unsolicited, are vague about the brand, and require payment or banking details up front should be declined without negotiation.","redFlags":["Unsolicited DM offering to represent you or pay you to post","Upfront purchase of a starter kit, subscription, or brand fee","Company cannot be found through independent verification","Role involves receiving and forwarding payments on behalf of the brand"],"whatToDoNow":["Research the company name independently before responding","Never pay to become a brand ambassador or influencer","Do not share bank details before signing a verified contract","Report suspicious offers to the platform and your fraud service"],"faq":[{"question":"Are all influencer management offers scams?","answer":"No — legitimate talent agencies and brand partnership platforms exist. The key differences are: you can verify the company, there is no upfront fee, and the role does not involve handling other people's money."},{"question":"The offer says I only need to buy a discounted starter kit. Is that a real cost of the role?","answer":"No. The 'discounted' merchandise is the scam itself — the operation profits from the kit sales, and the promised campaigns and commissions never materialise. Real ambassadors are given products or paid, not charged."},{"question":"Why did they contact me when my account is small?","answer":"Because the message is sent in bulk to accounts of every size. Small accounts are actually preferred targets, since the flattery of being 'noticed by a brand' is more persuasive when brand offers are rare."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-remote-bookkeeper-job-that-handles-client-funds-a-scam","url":"https://scamencyclopedia.org/questions/is-a-remote-bookkeeper-job-that-handles-client-funds-a-scam","question":"Is a remote bookkeeper job that asks me to handle client funds a scam?","shortAnswer":"If a bookkeeping job requires you to receive money into your personal account and forward it on, you are being recruited as a money mule — which is a criminal offence even if you did not know the funds were stolen.","explanation":"Money-mule recruitment targeting people looking for bookkeeper, accounts-assistant, or finance-admin roles is common. The job description mentions handling or processing payments as part of the role. Once hired, you receive transfers into your personal account and are told to send them onward, keeping a commission. The incoming funds are almost always proceeds of fraud or money laundering, and you are acting as a conduit that puts distance between the criminals and their victims.\n\nThe legitimate-sounding job title is the disguise. No real company routes client money through an employee's personal bank account — businesses have their own accounts, payment processors, and audit requirements, and doing otherwise would breach basic accounting controls. The 'commission' framing exists to make the arrangement feel like payroll rather than laundering. Some victims work for weeks believing the role is genuine, right up until their bank freezes the account.\n\nThe consequences fall on the mule, not the recruiter. Banks are highly attuned to these patterns and may close your accounts, apply a fraud marker that follows you for years and makes opening accounts or obtaining credit difficult, or refer your activity to law enforcement. Even if you were unaware of the criminal origin, forwarding funds you did not earn can constitute a criminal offence. If a role involves money passing through your personal account, decline it — there is no legitimate version of that arrangement.","redFlags":["Job description involves receiving money into your personal bank account","You are instructed to forward funds and keep a commission percentage","Company cannot be verified and does not have a registered business address","Employer says the arrangement is normal for remote finance roles"],"whatToDoNow":["Do not accept or forward any funds as instructed","Stop communication with the employer","Contact your bank if you already received or sent any money","Report the offer to your national fraud or financial intelligence service"],"faq":[{"question":"Could I be prosecuted even if I was tricked?","answer":"Potentially. Laws vary by jurisdiction, but knowingly forwarding funds is the key legal question. Reporting to authorities and ceasing the activity immediately is the safest response."},{"question":"How can I tell a genuine finance role from mule recruitment?","answer":"Genuine roles never involve your personal bank account. Company money moves through company accounts and payment systems you access as an employee. The moment funds are routed through an account in your own name, it is laundering, whatever the job title says."},{"question":"Money has already passed through my account. What should I do?","answer":"Stop forwarding anything, keep all messages and payment records, and contact your bank's fraud team proactively — coming forward yourself is materially better than waiting for the bank or police to find the pattern."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-grant-writing-job-that-requires-me-to-pay-a-finder-fee-a-scam","url":"https://scamencyclopedia.org/questions/is-a-grant-writing-job-that-requires-me-to-pay-a-finder-fee-a-scam","question":"Is a grant-writing job that requires me to pay a finder's fee a scam?","shortAnswer":"Yes. Legitimate grant-writing employment or freelance contracts never require the worker to pay a finder's fee to secure the role.","explanation":"Grant-writing job scams target people with writing, non-profit, or academic backgrounds. An email or social media message offers freelance or contract grant-writing work at an attractive hourly or per-grant rate, but requires an upfront finder's fee, registration fee, or access to a 'client portal' before work begins. Once paid, the 'employer' disappears and the promised work never materialises, or a further fee is invented — portal activation, compliance, insurance — to extract more before the disappearance.\n\nThe targeting is deliberate. Grant writing sits at the intersection of freelancing and the non-profit world, where informal arrangements and mission-driven language feel normal, so a fee dressed up as 'accreditation' or 'client matching' raises less suspicion than it would in other industries. The scammers often borrow the names of real foundations or agencies to make the client list look credible, knowing few applicants will call those organisations to check.\n\nThe direction of money is the whole test. Legitimate grant-writing roles — employed positions, independent contractor arrangements, or freelance gigs on established platforms — do not charge workers to access opportunities. Finder's fees flow from employers to recruitment agencies, never from jobseekers to employers. Any offer that reverses that flow is fraudulent regardless of how professional the paperwork looks, and the correct response is to decline, report the listing, and warn the platform it appeared on.","redFlags":["Any upfront payment is required before you can start or see work","Role found through a cold email or social media direct message","Company is not verifiable through public business registries","Pay rate is unusually high for entry-level grant work"],"whatToDoNow":["Do not pay any fee to access work","Verify the company through official business registers or established freelance platforms","Report the offer to the job board or platform it appeared on","File a report with your national consumer or fraud protection body"],"faq":[{"question":"Are legitimate grant-writing agencies or networks worth joining?","answer":"Yes — but they charge membership fees for networking communities, not fees to access specific client work. Always check independently before paying any fee."},{"question":"The recruiter listed real foundations as clients. Does that verify the offer?","answer":"No. Naming well-known organisations costs nothing and is a standard credibility prop. Unless you can confirm the relationship directly with the organisation, a client list is just text in a message."},{"question":"How do I find genuine grant-writing work safely?","answer":"Apply through established freelance platforms, non-profit job boards, and organisations' own vacancy pages. In every legitimate arrangement you will sign a contract and invoice the client — you will never be asked to pay to be considered."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-holiday-rental-that-only-accepts-bank-transfer-a-scam","url":"https://scamencyclopedia.org/questions/is-a-holiday-rental-that-only-accepts-bank-transfer-a-scam","question":"Is a holiday rental that only accepts bank transfer a scam?","shortAnswer":"Accepting only bank transfer is a major risk factor for rental scams. Legitimate holiday rentals on established platforms use platform-managed payments with built-in protection.","explanation":"Holiday rental scams peak around popular travel periods. A scammer lists a property — often using stolen photos from legitimate listings — on social media, classified sites, or a fake booking website, at an attractive price. They insist on bank transfer because it cannot be reversed and bypasses any platform fraud protection. Once you transfer the deposit or full payment, the property either does not exist, is unavailable, or was listed by someone who does not own it.\n\nThe payment method is the scam's entire architecture, which is why the insistence is so firm. A card payment or platform escrow gives you dispute rights and gives the platform a reason to verify the host; a direct transfer gives you neither. Scammers dress the demand up as a discount for paying directly, a way to 'avoid platform fees', or a claim that their payment system is temporarily down. Some go further and clone entire booking websites, complete with fake confirmation emails, so the transfer feels procedurally normal.\n\nThe discovery usually happens at the worst possible moment — standing outside a property that is occupied, unaware of your booking, or not a rental at all. If you find a rental through a direct website or social media ad, verify the owner independently, check the address on mapping tools to confirm the property exists and matches the photos, and use a credit card or platform payment system whenever possible. No saving justifies an unrecoverable transfer to a stranger.","redFlags":["Payment must be made by bank transfer only — no cards, no platform escrow","Price is significantly below comparable properties in the area","Owner is abroad and cannot show you the property before booking","Listing photos appear on other websites when reverse-searched"],"whatToDoNow":["Never pay a rental deposit by direct bank transfer to someone you cannot verify","Reverse image-search all listing photos","Book through a recognised platform that offers payment protection","If already paid, report to your bank and national fraud service immediately"],"faq":[{"question":"Does paying by bank transfer on a reputable platform carry the same risk?","answer":"No — payments through established booking platforms are held in escrow and have dispute mechanisms. The risk is specific to direct bank transfers to unknown individuals."},{"question":"The host on a booking platform asked me to pay outside the platform. Is that safe?","answer":"No — taking payment off-platform is against the rules of every major booking site precisely because it strips away your protection. Treat the request itself as a red flag and report the listing to the platform."},{"question":"I already paid by bank transfer for a rental I now doubt. What can I do?","answer":"Contact your bank immediately and ask them to attempt recall of the transfer — speed matters. Then report to the platform where you found the listing and to your national fraud service, keeping all correspondence as evidence."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-car-sold-with-a-duplicate-title-a-scam","url":"https://scamencyclopedia.org/questions/is-a-car-sold-with-a-duplicate-title-a-scam","question":"Is a car sold without a clear title or with a duplicate title a scam?","shortAnswer":"Selling a vehicle with a duplicate, salvage, or unclear title is a serious legal and financial risk for buyers — it may mean the car is stolen, financed, or legally undriveable.","explanation":"Title fraud is one of the most damaging vehicle purchase scams. A seller offers a car at an attractive price but either has no title, a duplicate, a salvage title, or a title that does not match the vehicle identification number (VIN). Without a clean title, you may be unable to register the car, insure it properly, or sell it on. A 'duplicate' title can also mean the original was lost because the car was stolen, and some sellers present outright forgeries.\n\nThe stories offered to explain a missing title are consistent: it is 'in the mail', held by a relative, delayed by the licensing office, or will be 'sorted after the sale'. Each version asks you to complete an irreversible payment against a promise of paperwork that never comes. Title washing — moving a salvage or flood-damaged vehicle between jurisdictions to obscure its history — adds another layer, which is why the document in the seller's hand is not the whole story even when it looks clean.\n\nBefore purchasing any private vehicle, run a VIN check through your national vehicle history service to verify ownership, outstanding finance, accident history, and whether the car has been reported stolen. Check that the VIN on the title matches the plates on the vehicle itself, and that the seller's ID matches the name on the title. Always insist on holding the original document before money changes hands — a genuine seller with nothing to hide loses nothing by waiting.","redFlags":["Seller cannot produce the original title or says it is 'in the mail'","VIN on the title does not match the VIN plate in the car","Title is marked 'salvage', 'rebuilt', or 'flood' without disclosure","Price is well below market value with urgency to complete quickly"],"whatToDoNow":["Run a VIN history check before agreeing to any price","Never pay until you hold the clear original title in your hand","If you already purchased, consult a vehicle fraud investigator or solicitor","Report title fraud to your national vehicle licensing authority"],"faq":[{"question":"Can the previous finance be cleared after I buy the car?","answer":"If a car has outstanding finance, the finance company retains legal interest in the vehicle. You should verify that finance is clear before purchase — not hope it will be resolved afterward."},{"question":"The seller says the title is in the mail and offers a discount to complete now. Should I?","answer":"No. That script converts your money into an unsecured promise. If the title genuinely exists, the seller can wait for it to arrive; the discount exists to make you accept the risk they know you shouldn't."},{"question":"What if the name on the title is not the seller's?","answer":"Walk away unless the situation is fully documented — for example an executor selling with legal authority. A mismatched name commonly means an unauthorised sale, a flipped stolen vehicle, or a curbstoner dodging dealer regulations."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-apartment-listing-on-facebook-marketplace-safe","url":"https://scamencyclopedia.org/questions/is-an-apartment-listing-on-facebook-marketplace-safe","question":"Is an apartment listing on Facebook Marketplace safe to rent?","shortAnswer":"Facebook Marketplace has no rental protection mechanisms, making it a common venue for fake apartment listings. Always verify the landlord's ownership before paying anything.","explanation":"Facebook Marketplace is widely used to advertise rental properties but offers no payment protection, identity verification, or deposit escrow for rentals. Scammers copy photos and details from legitimate estate agency listings, create convincing posts, and collect deposits from multiple victims for a property they do not own. The 'landlord' is often unavailable to show the property in person — they are abroad, unwell, or claim a key is with a neighbour — and pressure you to pay a holding deposit to secure the listing.\n\nThe economics explain the pattern. One stolen listing can collect deposits from many applicants simultaneously, so the scammer's goal is to keep every conversation moving toward payment while avoiding the one thing that exposes the fraud: a viewing with someone who can actually open the door. Below-market pricing does double duty — it attracts a large pool of applicants and gives them a reason to move fast rather than ask questions. Competition pressure ('three other people want it') finishes the job.\n\nYou should insist on meeting the landlord inside the property, verifying their ownership through your national land or property registry, and paying only through traceable, protected means after a contract is signed. A genuine landlord expects these steps; only a fraudulent one treats ordinary due diligence as an obstacle. If the photos reverse-search to an estate agent's listing under a different price or contact, you have your answer.","redFlags":["Landlord cannot show you the property in person","Deposit requested before any viewing or contract","Price is significantly below market rent for the area","Listing photos appear elsewhere when reverse-searched","Communication feels scripted or moves to WhatsApp quickly"],"whatToDoNow":["Insist on an in-person viewing before paying any deposit","Verify the landlord's ownership at your national land registry","Never pay a deposit without a signed rental agreement","Report fake listings to Facebook and to your housing fraud authority"],"faq":[{"question":"Is it safe if the landlord accepts to meet via video call?","answer":"A video call is better than nothing but can be faked. Always prioritise an in-person visit to the actual property with the person holding the keys before paying."},{"question":"The listing is much cheaper than similar flats nearby. Could it just be a bargain?","answer":"Occasionally, but far-below-market pricing is the standard bait in rental fraud because it creates urgency and a large applicant pool. Treat an unusually low price as a reason for more verification, not less."},{"question":"Are all Marketplace rental listings fake?","answer":"No — many are genuine private landlords. The point is that the platform verifies nothing for you, so the burden of checking ownership, viewing in person, and paying safely sits entirely with you."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-private-landlord-asking-for-six-months-rent-upfront-a-scam","url":"https://scamencyclopedia.org/questions/is-a-private-landlord-asking-for-six-months-rent-upfront-a-scam","question":"Is a private landlord asking for six months' rent upfront a scam?","shortAnswer":"Asking for unusually large upfront payments — particularly from people with poor credit or who cannot view the property first — is a common rental scam tactic.","explanation":"Fraudulent landlords targeting students, immigrants, or tenants with limited credit history sometimes ask for multiple months of rent in advance. For a property the scammer does not own, this maximises the money extracted before the fraud is discovered. The targeting is not accidental: people who expect to be refused elsewhere are more likely to accept unusual terms, and someone relocating from abroad often cannot view in person, which removes the check most likely to expose the scheme.\n\nWhile some legitimate private landlords do request extra months from tenants with thin credit histories, this should only ever happen after you have viewed the property, signed a legally binding tenancy agreement, and verified the landlord's right to let the property. The order of operations is the protection: viewing, verification, contract, then payment. A fraudster needs to reverse that order, because their scheme collapses at the first genuine check.\n\nIf someone asks for six months up front before you have even seen the property or signed a contract, the risk is extremely high that the property does not belong to them. Large advance payments also deserve care even with genuine landlords — pay traceable amounts against a signed agreement, get receipts, and confirm any deposit is protected in a scheme where your jurisdiction requires it. The bigger the sum requested, the more verification it should trigger, not less.","redFlags":["Large advance payment requested before any viewing or contract","Landlord cannot or will not let you visit the property before paying","Pressure to decide quickly because 'many people are interested'","Landlord's ownership cannot be verified through official property records"],"whatToDoNow":["Never pay more than a standard deposit before viewing and signing a tenancy agreement","Verify ownership at your land or property registry","Consider using a licensed letting agent with client money protection","Report the listing to your housing authority if it appears fraudulent"],"faq":[{"question":"Is requesting advance rent ever legitimate?","answer":"Some private landlords do ask for one or two months upfront from tenants with no credit history. This is only reasonable after you have viewed the property, verified ownership, and have a signed contract."},{"question":"I'm applying from another country and can't view in person. How do I stay safe?","answer":"Use verified letting agents or your destination's established rental platforms, ask a trusted local contact or professional service to visit the property, and verify ownership through the land registry before sending anything. Never pay a stranger sight-unseen."},{"question":"How do I verify that a landlord actually owns the property?","answer":"Most countries have a land or property registry where you can check the registered owner for a small fee or free. The name should match the person on the tenancy agreement, or they should prove authority to act for the owner."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-used-phone-being-sold-that-asks-me-to-send-money-first-safe","url":"https://scamencyclopedia.org/questions/is-a-used-phone-being-sold-that-asks-me-to-send-money-first-safe","question":"Is a used phone being sold online where the seller asks me to pay first a scam?","shortAnswer":"Paying before receiving any item from a private seller carries real risk. Use platforms with buyer protection and avoid bank transfers to strangers for high-value items.","explanation":"Second-hand electronics scams are common on classified ad sites and social media marketplaces. A seller lists a phone at a tempting price, creates urgency, and insists on payment upfront by bank transfer before posting the item. Either the phone never arrives, it arrives broken or as a different model, or in extreme cases the listing is entirely fake and being run against several buyers at once.\n\nThe urgency script is consistent: another buyer is 'about to take it', the seller is 'moving tomorrow', or the price is only good today. Each variation exists to stop you doing the two things that defeat the scam — checking the seller and choosing a protected payment route. Watch also for sellers who dodge simple requests a genuine owner finds easy: a photo with today's date on paper, the phone's IMEI so you can check it is not reported lost or stolen, or a brief video of the device powering on.\n\nIf you must buy from a private seller, use the marketplace's built-in payment system where available, pay by credit card if buying from a verified retailer, and only hand over money when you can inspect and collect the item in person in a safe public location. For high-value items, meeting in person with secure payment is safer than any postal sale with prepayment — and a deal that evaporates the moment you propose meeting was never real.","redFlags":["Seller insists on bank transfer or cash app before posting","Price is significantly below average for the model","Seller cannot meet in person despite being supposedly nearby","Profile is newly created and has no reviews or history"],"whatToDoNow":["Use the platform's built-in buyer-protected payment where available","Meet in person for high-value items and only pay when item is in hand","If you already paid and received nothing, report to your bank and the platform","File a report with your consumer protection or fraud authority"],"faq":[{"question":"Is paying through PayPal Goods and Services safe for private sales?","answer":"PayPal Goods and Services offers buyer protection and is safer than direct bank transfer, but you should still research the seller and use the platform's built-in tools where they exist."},{"question":"What should I check when collecting a used phone in person?","answer":"Confirm the phone powers on, is signed out of any linked account and activation lock, has no carrier finance block, and that the IMEI is not reported lost or stolen. A phone still attached to someone else's account is unusable to you."},{"question":"The seller wants payment through a friends-and-family transfer. Is that okay?","answer":"No — friends-and-family and gift payment options exist specifically to move money without buyer protection. A seller who insists on them for a commercial sale is deliberately removing your recourse."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-crypto-staking-platform-offering-daily-returns-legitimate","url":"https://scamencyclopedia.org/questions/is-a-crypto-staking-platform-offering-daily-returns-legitimate","question":"Is a crypto staking platform offering daily percentage returns legitimate?","shortAnswer":"Platforms promising fixed daily crypto returns are almost always Ponzi schemes or exit-scam platforms. Genuine staking returns are variable and far lower.","explanation":"Legitimate proof-of-stake cryptocurrency staking generates variable annual returns — typically a few percent per year — that fluctuate with network conditions. Platforms promising fixed daily returns, sometimes displayed as 'compounding', are operating as Ponzis: new depositor funds pay earlier investors until the platform collapses or the operators run with all deposits (an exit scam). The platforms often look professional, show real-time dashboards with growing balances, and initially allow small withdrawals to build confidence before locking funds or disappearing.\n\nThe arithmetic is the giveaway. A fixed daily percentage compounds into returns that no real economic activity can sustain — if such a mechanism existed, its operators would have no reason to share it with strangers on the internet. Genuine staking rewards come from network validation and are inherently variable; they cannot be 'guaranteed' by anyone, and any platform that does so is describing where new victims' deposits go, not where yield comes from.\n\nReferral bonuses are the other structural tell. Ponzi platforms need constant inflow, so they pay existing depositors to recruit, which is why these schemes spread through friends, family, and community groups — and why the person who introduced you may be a victim rather than an accomplice. If you have funds on such a platform, withdraw whatever it will release, stop referring others, and report it to your financial regulator.","redFlags":["Platform promises a fixed daily or monthly return regardless of market conditions","Cannot be found on established crypto exchange aggregators","Withdrawals require meeting a minimum balance or completing referral quotas","Returns are much higher than any established exchange's staking rates"],"whatToDoNow":["Stop depositing and attempt to withdraw any balance immediately","Accept that funds already deposited may not be recoverable","Report the platform to your national financial regulator","Warn others who were referred to the platform"],"faq":[{"question":"Does legitimate staking exist on well-known exchanges?","answer":"Yes — major regulated exchanges offer genuine staking with variable, disclosed rates. The key distinction is that rates fluctuate, are modest, and you can withdraw freely."},{"question":"A friend has been withdrawing profits from the platform for months. Doesn't that prove it works?","answer":"No — paying early participants with later deposits is exactly how a Ponzi operates, and it can run for a long time while inflow continues. Your friend's withdrawals are other depositors' money, and the collapse takes everyone still inside."},{"question":"Why do these platforms push referral bonuses so hard?","answer":"Because they have no revenue except new deposits. Referral commissions turn every depositor into a recruiter, which keeps the inflow alive — and explains why the pitch so often comes from someone you trust."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-bitcoin-atm-payment-request-from-a-government-agency-a-scam","url":"https://scamencyclopedia.org/questions/is-a-bitcoin-atm-payment-request-from-a-government-agency-a-scam","question":"Is a Bitcoin ATM payment request from a government agency a scam?","shortAnswer":"Always. No genuine government agency, court, utility company, or law enforcement body requests payment through a Bitcoin ATM. This is a signature scam tactic.","explanation":"Bitcoin ATM scams combine impersonation with the irreversibility of cryptocurrency. A caller claims to be from a tax authority, social security office, court, or police department and says you owe an urgent fine or will face arrest. You are instructed to withdraw cash and deposit it into a Bitcoin ATM, often directed to enter a QR code provided by the scammer. Once deposited, the funds are transferred instantly to the scammer's wallet and cannot be reversed.\n\nThe method is chosen for exactly that irreversibility. A bank transfer can sometimes be recalled and a card payment disputed, but cash fed into a crypto ATM against a scammer's QR code is gone the moment the machine confirms it. The scripts add control techniques to get you there: staying on the phone with you during the drive to the machine, instructing you not to speak to bank staff or the shop owner, and inventing consequences — arrest warrants, deportation, frozen accounts — that supposedly land within hours.\n\nGovernments collect taxes and fines through official portals, banks, or post — never through cryptocurrency ATMs, and never under phone supervision with a deadline of minutes. The payment channel alone settles the question before you consider anything else about the call. Bitcoin ATMs have become so associated with this fraud that many display explicit warnings on-screen; if you are reading one while someone waits on the line, hang up — that warning is about the call you are on.","redFlags":["Caller claims to be from the government and demands Bitcoin ATM payment","QR code or wallet address is provided to you during the call","You are told not to tell the ATM operator what the payment is for","Urgency: act now or face arrest, deportation, or account seizure"],"whatToDoNow":["Hang up and do not go to any ATM","If you already deposited funds, report to your police and fraud service immediately","Tell the ATM operator — they can sometimes halt a transaction in progress","Report the scam number to your national phone fraud reporting service"],"faq":[{"question":"Can Bitcoin ATM transactions be reversed?","answer":"Cryptocurrency transactions are irreversible once confirmed on the blockchain. Speed of reporting to police is important for any investigation, but direct fund recovery is rarely possible."},{"question":"The caller knew my name and address. Doesn't that mean it's genuine?","answer":"No. Personal details circulate from data breaches and public records, and scammers use them to sound official. What identifies the fraud is the demand itself — no agency anywhere collects payment through a Bitcoin ATM."},{"question":"Why did they tell me to stay on the phone and not talk to anyone?","answer":"Isolation is a control tactic. Bank staff, shop owners, and family members regularly interrupt these scams when victims mention what is happening, so the script forbids exactly those conversations. A caller demanding secrecy is confirming the fraud."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-investment-platform-that-wont-let-me-withdraw-a-scam","url":"https://scamencyclopedia.org/questions/is-an-investment-platform-that-wont-let-me-withdraw-a-scam","question":"Is an investment platform that won't let me withdraw my money a scam?","shortAnswer":"Yes. Legitimate investment platforms allow you to withdraw your funds subject to standard terms. A platform that blocks all withdrawals or demands fees to release money is fraudulent.","explanation":"Withdrawal block scams follow a predictable pattern. You invest on what appears to be a legitimate platform, sometimes through a recommendation from a trusted contact who may themselves have been scammed or recruited. Your dashboard shows growing profits. When you try to withdraw, the platform claims you must pay a tax, compliance fee, upgrade fee, or minimum balance before funds can be released. These fees are fabricated, each fee paid generates a new one, and no funds are ever released.\n\nThe fee demand works because of the balance on the screen. Victims reason that a payment worth a small fraction of their displayed profits is rational — but the displayed profits are an image the scammers control, and the 'fee' is simply the next extraction. This is why the demands escalate for as long as you keep paying and why the support agents remain patient and professional throughout: from their side, the withdrawal process is the scam's most profitable stage.\n\nLegitimate regulated investment platforms are legally required to allow you to withdraw your assets subject to their published terms, and any applicable fees or taxes are deducted from your balance — not charged as a separate upfront payment you must send in first. That distinction is absolute. Once you recognise it, stop sending money entirely, preserve screenshots of the account and conversations, and report to your financial regulator and fraud service.","redFlags":["Platform demands a fee before any withdrawal can be processed","New conditions appear each time you attempt to withdraw","Platform is not regulated by your national financial authority","Customer support is unresponsive or gives vague non-answers about your balance"],"whatToDoNow":["Stop depositing any further money, including fee payments","Submit a complaint to your national financial regulator","Report to your national fraud service with screenshots of your account","Be cautious of 'recovery agents' who claim they can retrieve your funds for a fee"],"faq":[{"question":"What if the fees are described as tax withholding?","answer":"Legitimate tax obligations on investment gains are handled by the platform and deducted at source or reported to tax authorities — they are never collected as separate upfront cash payments to the platform."},{"question":"If I pay this one final fee, will they release my balance?","answer":"No. There is no balance — the dashboard figure is an image, not money held for you. Every fee paid confirms you will pay again, and the demands continue until you stop. The only winning move is to stop now."},{"question":"Someone contacted me offering to recover my funds for a fee. Should I accept?","answer":"Be extremely cautious — recovery-for-fee offers are overwhelmingly a second scam targeting the same victims, sometimes run by the original operators using your own contact details. Legitimate recovery goes through your bank, regulator, and police, none of whom charge upfront."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-youtube-livestream-with-a-celebrity-promoting-crypto-real","url":"https://scamencyclopedia.org/questions/is-a-youtube-livestream-with-a-celebrity-promoting-crypto-real","question":"Is a YouTube livestream with a celebrity promoting a crypto giveaway real?","shortAnswer":"No. Celebrity crypto giveaway livestreams on YouTube are always scams using deepfake or cloned video footage. The celebrity has not endorsed anything.","explanation":"Fraudsters hijack large YouTube channels, use fake cloned accounts, or buy advertising to broadcast what appear to be live streams of well-known figures — executives, celebrities, or athletes — promoting a crypto giveaway where viewers must 'send to receive double back'. The video footage is either a deepfake of the real person or recycled from genuine interviews. The stream looks live because a counter ticks up, and hijacked channels bring their stolen subscriber counts and verification history with them, making the page look established.\n\nEvery element around the video is manufactured: the pinned comments confirming payouts, the scrolling list of 'recent transactions', and the countdown timer are all props aimed at one action — sending crypto to the displayed address. The real person shown has no connection to the event and is usually a victim of the impersonation themselves.\n\nNo crypto giveaway that requires you to send funds first is legitimate. Organisations and individuals with real crypto to give away have no reason to require a deposit — 'send X to receive 2X back' only makes financial sense for the party collecting the deposits. Because blockchain transactions are irreversible, there is no dispute process and no refund once the funds move; the only effective defences are refusing to send and reporting the stream so it is taken down before it reaches others.","redFlags":["Livestream promises to double any crypto you send to an address","Celebrity or executive is speaking but the audio does not quite sync","Comments are flooded with posts claiming they already received their double","Giveaway has a countdown timer to create urgency"],"whatToDoNow":["Do not send any cryptocurrency to an address shown on a livestream","Report the video to YouTube as a scam","If you already sent crypto, report to your national fraud service — recovery is unlikely","Warn others who may be watching the same stream"],"faq":[{"question":"Do any legitimate crypto giveaways exist?","answer":"Some genuine airdrops exist in the crypto space, but they never require you to send money first, and they are announced through official project channels — not through YouTube livestreams."},{"question":"The channel is verified and has a huge subscriber count. How can it be fake?","answer":"Because it is usually a hijacked channel. Scammers phish the credentials of established creators, then rename the channel and stream the giveaway — inheriting the subscriber count and, in some cases, verification badges."},{"question":"The comments are full of people confirming they got paid. Are they lying?","answer":"They are not real viewers. Comments on these streams are posted by bot accounts controlled by the scammers, and genuine warnings are deleted or disabled. Social proof on the scammer's own stream is worthless."}],"lastReviewed":"2026-08-01"},{"slug":"can-a-scammer-drain-my-crypto-wallet-through-a-connect-button","url":"https://scamencyclopedia.org/questions/can-a-scammer-drain-my-crypto-wallet-through-a-connect-button","question":"Can a scammer drain my crypto wallet through a 'connect wallet' button on a website?","shortAnswer":"Yes. Malicious 'connect wallet' buttons can prompt you to approve a transaction that grants the scammer unlimited access to your tokens.","explanation":"Wallet-draining scams disguise themselves as NFT mints, DeFi platforms, airdrop claim pages, or charity donation sites. When you click 'connect wallet' and then approve the transaction in your wallet app, you may be approving a smart contract permission that grants the scammer's contract the right to transfer all of your tokens. These are called malicious approvals or 'approval phishing'. The initial connection itself is not always dangerous, but the approval transaction that follows can be.\n\nThe distinction that matters is between connecting and signing. Connecting a wallet reveals your address and lets a site read public information; it moves nothing. Signing is where the risk lives: an approval for an 'unlimited' token allowance, a signature on a message you cannot read, or a transaction whose contents differ from what the page describes can each hand over control of assets. Drainer kits are sold ready-made to scammers, which is why the same fake mint or claim page reappears endlessly under new domains, often promoted through hacked social accounts and paid ads.\n\nBefore approving any transaction, read what the wallet prompt actually says it is granting, verify the website address character by character, and only interact with contracts reached through official project links — not through DMs, ads, or comment-section URLs. Review your existing allowances with a reputable token approval checker periodically and revoke anything you do not recognise, and consider keeping long-term holdings in a wallet that never touches new sites.","redFlags":["Website prompts a wallet approval for an amount labelled 'unlimited' or a very large number","Site URL has minor spelling differences from the genuine project","You found the site through a social media ad rather than an official project link","The transaction gas fee seems very low, suggesting a pre-signed malicious transaction"],"whatToDoNow":["Reject any wallet transaction you do not fully understand","Check existing approvals with a reputable token approval checker and revoke suspicious ones","If you approved a malicious contract, move remaining funds to a new wallet immediately","Report the site to your national cybercrime unit and the platform that hosted the ad"],"faq":[{"question":"Is it safe to connect my wallet to read-only sites?","answer":"Connecting your wallet for read-only portfolio tracking is generally low risk, but you should still verify the site is genuine and never approve any transaction on a site you have not thoroughly verified."},{"question":"Does a hardware wallet protect me from approval phishing?","answer":"Only partly. A hardware wallet stops key theft, but if you approve a malicious transaction on the device, the approval is just as valid. The protection comes from reading and understanding every signature request, whatever wallet you use."},{"question":"I approved something suspicious but nothing has been taken yet. Am I safe?","answer":"No — a granted allowance can be exercised at any time, including much later. Revoke the approval immediately using a reputable allowance checker, and if you cannot be sure what was signed, move assets to a fresh wallet."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-crowdfunding-campaign-for-a-disaster-victim-legitimate","url":"https://scamencyclopedia.org/questions/is-a-crowdfunding-campaign-for-a-disaster-victim-legitimate","question":"Is a crowdfunding campaign for a disaster victim legitimate?","shortAnswer":"Many are genuine, but fake campaigns exploiting disasters appear within hours of major events. Verify the campaign's connection to a real victim and prefer established organisations.","explanation":"Disaster relief crowdfunding fraud surges immediately after earthquakes, hurricanes, floods, and other publicised emergencies. Fraudsters create campaigns using photos from news coverage and generate urgent emotional appeals. Platforms vary widely in the degree of verification they apply to campaign creators — some check the organiser's identity and their connection to the beneficiary, others require little more than an email address and a bank account.\n\nThe fraud works because it borrows real suffering. The disaster is genuine, the photos are genuine, and the emotional urgency you feel is an appropriate response to real events — the only fabricated element is the campaign's connection to any actual victim. That is why the campaign text alone can never verify itself, however specific and moving it reads. What distinguishes a genuine campaign is corroboration from outside it: a verified identity badge on the platform, independent reporting that names the people involved, and organisers who answer questions and post substantive updates.\n\nThe safest approach remains donating to established, registered charities with a track record in the affected region, because they have accountable finances and are already operating on the ground. If you prefer to support a specific family or campaign, take the extra verification steps first and be especially cautious of campaigns promoted only through social media shares with no link to verifiable reporting. Giving well a day later helps more than giving fast to the wrong hands.","redFlags":["Campaign appeared within hours of a major disaster using news photos","No verified identity or connection between organiser and claimed victim","Campaign shares no verifiable details beyond emotional appeal","Organiser requests direct bank transfer rather than platform payment"],"whatToDoNow":["Prefer donating to established disaster relief organisations","Search the campaign organiser's name and check for independent verification","Report suspicious campaigns to the crowdfunding platform","If you donated and it appears fraudulent, contact your bank about a possible dispute"],"faq":[{"question":"Are crowdfunding platforms responsible if a campaign is fake?","answer":"Platforms have varying policies on refunds for fraudulent campaigns. Report fraud immediately — some platforms will remove fraudulent campaigns and may assist with refunds in documented cases."},{"question":"The campaign has thousands of donors already. Doesn't that mean others verified it?","answer":"No — donor counts measure how widely a campaign spread, not whether anyone checked it. Most donors give on the strength of the story alone, so popularity is not verification."},{"question":"Is it better to wait before donating after a disaster?","answer":"Waiting even a day or two lets platforms remove fraudulent campaigns and lets journalists corroborate individual stories. Established relief charities can absorb immediate donations effectively, so giving to them first loses nothing."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-smart-meter-installation-caller-from-my-energy-company-real","url":"https://scamencyclopedia.org/questions/is-a-smart-meter-installation-caller-from-my-energy-company-real","question":"Is a caller offering a smart meter installation from my energy company real?","shortAnswer":"Genuine smart meter schemes exist in many countries, but cold callers asking for access to your home or upfront payment are often scammers impersonating energy companies.","explanation":"Energy company impersonation scams involve cold callers — by phone or doorstep — claiming to be from your supplier and offering free smart meter installation or an energy efficiency survey. They may ask to enter your home, take meter readings, and then claim a problem requires payment for a 'repair'. Some steal meter readings to clone energy accounts; others steal household items during the visit. In a phone variant, they ask for your account number and payment details to 'register' the new meter.\n\nThe smart meter framing is effective because genuine rollout programmes exist in many countries and have been widely publicised, so the offer sounds plausible rather than out of the blue. Doorstep versions add pressure by suggesting the installer is 'in the area today only', that your old meter is unsafe, or that your bills will rise if you refuse. All of these are levers to get inside your home or extract account details on the spot — decisions a genuine supplier never requires you to make at the door.\n\nGenuine smart meter rollouts are managed through official supplier programmes: your actual supplier will contact you by letter, email, or through your online account, appointments are booked in advance at your convenience, installation is free, and engineers carry ID you are expected to check. If anyone arrives or calls unannounced, decline, close the door, and call your supplier on the number printed on your bill to confirm whether any visit was scheduled.","redFlags":["Unsolicited doorstep visit offering immediate free meter installation","Caller asks for your bank details to process the installation","Offers to reduce your bill immediately in exchange for access to your home","Caller becomes pushy when you ask to call your supplier to verify"],"whatToDoNow":["Do not let anyone into your home without verifying their identity first","Call your energy supplier using the number on your bill to check for any real scheme","If you gave personal or payment details, contact your bank immediately","Report doorstep fraud to your national consumer protection authority"],"faq":[{"question":"How can I verify a doorstep energy worker is genuine?","answer":"Ask for their employee ID, then close the door and call your supplier's official number to confirm they sent someone. Genuine engineers will wait or reschedule."},{"question":"Do genuine smart meter installations ever cost money?","answer":"In countries running official rollouts, installation is provided by your supplier at no upfront charge. Any doorstep or phone request for payment, bank details, or a deposit to install a meter is a scam signal."},{"question":"What details can a scammer do with just a meter reading or account number?","answer":"Account numbers and readings help fraudsters impersonate you to your supplier, switch or clone your account, or make follow-up calls sound authentic. Treat energy account details with the same care as bank details."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-prize-draw-that-asks-for-my-credit-card-details-real","url":"https://scamencyclopedia.org/questions/is-a-prize-draw-that-asks-for-my-credit-card-details-real","question":"Is a prize draw that asks for my credit card details to claim a prize real?","shortAnswer":"No. Genuine prize draws do not require your credit card details to claim a win. A request for card information is a subscription trap or outright theft.","explanation":"Fake prize notification scams come by email, post, pop-up, or phone. You are told you have won a cash prize, a holiday, or a voucher. To claim, you must 'verify your identity' or pay a small 'processing fee' using your credit card. In some cases your card is enrolled in a subscription you did not agree to; in others, the card details are used for fraudulent purchases.\n\nThe logic test cuts through every variant: an organisation that genuinely owes you money does not need your card to give it to you. Cards exist to take payment, not deliver it. The 'small fee' framing is calculated — an amount trivial next to the claimed prize feels like a reasonable formality, which is precisely how victims talk themselves past the inconsistency. Subscription-trap versions bury recurring billing terms in fine print, so the initial small charge becomes a monthly one that many people do not notice for months.\n\nReal prize draws, competitions, and sweepstakes ask for your name and address to send a prize — nothing more. And the first question to ask is prior: did you actually enter this competition? A win notification for a draw you never entered is fraudulent by definition. If you have already provided card details, call your bank, ask them to block the card and any recurring payments set up on it, and watch statements for unfamiliar charges.","redFlags":["You do not recall entering the competition","A fee or card details are needed to 'release' or 'process' the prize","Organisation cannot be verified through public records","Prize notification arrives by SMS or pop-up rather than formal letter"],"whatToDoNow":["Do not provide any card or bank details to claim a prize","Search the company name and prize draw name with 'scam' to check reports","If you already gave card details, call your bank immediately","Report the scam to your national consumer protection authority"],"faq":[{"question":"Is it normal for a prize notification to ask for a small admin fee?","answer":"No. Legitimate prize administrators do not charge winners to receive prizes. Any fee request, however small, is a red flag."},{"question":"I gave my card details before realising. What should I do?","answer":"Call your bank or card issuer now: ask them to block the card, cancel any recurring payment authority created, and dispute charges. Then watch statements closely — fraudulent merchants often bill under unrecognisable names."},{"question":"Can a company legitimately ask for ID to release a large prize?","answer":"Genuine operators may verify identity for large wins, but through documents like proof of name and address — never through card numbers, bank logins, or a payment. Identity verification that costs you money is a scam."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-scratch-card-prize-that-requires-me-to-buy-more-cards-real","url":"https://scamencyclopedia.org/questions/is-a-scratch-card-prize-that-requires-me-to-buy-more-cards-real","question":"Is a scratch card prize that requires me to buy more cards to claim my prize real?","shortAnswer":"No. Any scratch card 'prize' requiring further purchases before you can claim is a scam. Legitimate prize redemption never requires buying additional products.","explanation":"Promotional scratch card fraud is used as a door-to-door, street, and mail-out technique. You receive or are given a scratch card that appears to show a significant win. When you try to claim, you are told the prize can only be redeemed if you also purchase a number of additional cards, products, or a membership. This is sometimes called a 'lottery scratch card' scam or 'promotional prize' fraud, and the purchased items are invariably overpriced and worthless.\n\nThe cards are printed so that a 'win' is the standard outcome — everyone who scratches one wins, because the win is the hook, not the prize. Variants of the same mechanic include holiday-club presentations where the 'prize' requires attending a high-pressure sales session, premium-rate phone lines you must call to 'register' the win, and mail-outs where claiming requires an upfront 'release fee'. In every version the prize is bait for a purchase, a fee, or your personal details.\n\nGenuine promotional scratch cards run by legitimate businesses allow you to claim a real prize without any additional purchase requirement, and terms and conditions — including the actual odds — are clearly disclosed on the card itself. A prize that costs money to receive is not a prize. Walk away, keep the card if you intend to report it, and warn neighbours if the cards are being distributed locally, as these operations typically work an area intensively for a short period.","redFlags":["Prize can only be claimed if you buy additional products or cards","Scratch card was distributed by someone approaching you on the street or at your door","Products you must buy are described vaguely but cost a lot","Prize claim must be done at a remote location or over the phone immediately"],"whatToDoNow":["Do not purchase anything to claim a scratch card prize","Walk away from the interaction","Report to your national consumer protection or trading standards authority","Warn others in the area if you received the card at your door"],"faq":[{"question":"Can I keep the scratch card as evidence?","answer":"Yes — keeping the card is useful if you report it to trading standards or consumer protection agencies as it may assist in identifying a pattern of complaints."},{"question":"Why does everyone who scratches these cards seem to win?","answer":"Because the cards are printed that way. A universal 'win' maximises the number of people who engage with the claim process, which is where the actual extraction — purchases, fees, or premium calls — happens."},{"question":"The card says I must call a number to register my win. Should I?","answer":"No. Claim lines in these scams are often premium-rate numbers designed to hold you on the line, or lead to pressure selling. A genuine promotion states clear claim terms on the card without expensive phone steps."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-charity-cold-calling-me-for-a-monthly-direct-debit-legitimate","url":"https://scamencyclopedia.org/questions/is-a-charity-cold-calling-me-for-a-monthly-direct-debit-legitimate","question":"Is a charity cold-calling me for a monthly direct debit legitimate?","shortAnswer":"Legitimate charities do use telephone fundraising, but cold calls requesting direct debit details are also used by fraudulent organisations. Always verify before donating.","explanation":"Telephone charity fundraising is a lawful activity in many countries, but it is also mimicked by fraudsters who set up fake charity names or impersonate known charities. If you receive a cold call asking for a standing order or direct debit, you have no way of verifying who called you — caller ID can be spoofed, and a confident script with real-sounding case stories proves nothing about where the money goes.\n\nThere is also a grey zone worth knowing about: some calls come from commercial fundraising agencies working on behalf of real charities, where a substantial share of your early donations covers the agency's fees. That is legal when disclosed, but it means even a 'genuine' cold call may not be the most effective way to give. Fraudulent operations sit at the far end of the same spectrum, using names one word away from a familiar charity and pressing for bank details before you can check anything.\n\nBefore agreeing to any regular donation, ask for the charity's full registered name and registration number, then check it independently on your national charity regulator's website. Never read your bank details to someone who called you. If the cause appeals, hang up and donate directly through the charity's official website instead — you lose nothing by doing it an hour later, you gain a verifiable paper trail, and a legitimate fundraiser will not object to that choice.","redFlags":["Caller asks for your bank details over the phone","Charity name is very similar to a well-known charity but slightly different","High-pressure tactics: 'just this once', 'your decision today changes lives'","Charity cannot be found on your national charity register"],"whatToDoNow":["Do not give bank details to anyone who called you","Ask for the charity registration number and verify it independently","Donate directly through the charity's own website if you want to give","Report suspected fake charities to your national charity regulator"],"faq":[{"question":"Can I cancel a direct debit I set up after a charity cold call?","answer":"Yes — you can cancel any direct debit through your bank at any time. Contact your bank and they will stop further payments."},{"question":"The caller got defensive when I asked for a registration number. What does that mean?","answer":"A legitimate fundraiser expects that question and answers it readily. Reluctance, deflection, or renewed pressure to commit on the call is a strong signal to end the conversation and give directly through official channels if you wish."},{"question":"Is a caller who already knows my name and past donations definitely genuine?","answer":"No. Donor lists leak and are traded, and past giving makes you a target for impersonation of charities you have supported. Familiarity with your history does not verify the caller — the registration check does."}],"lastReviewed":"2026-08-01"},{"slug":"can-ai-clone-my-voice-from-a-short-audio-clip","url":"https://scamencyclopedia.org/questions/can-ai-clone-my-voice-from-a-short-audio-clip","question":"Can AI clone my voice from a short audio clip to scam my family?","shortAnswer":"Yes. Current AI voice-synthesis tools can create a convincing clone of your voice from a few seconds of audio, which scammers use to call family members and request emergency money.","explanation":"AI voice cloning has lowered the technical barrier for a dangerous scam: someone who cares about you receives a call that sounds exactly like your voice saying you are in trouble — arrested, in an accident, or stranded — and needs money immediately. The audio clone is generated from audio scraped from social media videos, voicemails, or other public recordings, and the tools that produce it are cheap, fast, and require no technical skill.\n\nThe scam succeeds because it attacks the strongest verification people have — recognising a loved one's voice — at the moment they are least able to think critically. Panic, background noise, crying, and a bad connection all mask the clone's imperfections, and the script always includes a reason not to check: don't call anyone, don't tell the family, there's no time. Those instructions are the scam's real signature, because a genuinely stranded relative has no reason to forbid a call-back.\n\nFamilies should agree on a private code word that can be asked during any unexpected distress call, and the failsafe habit is simpler still: hang up and call the person back on their known number, however real the voice sounded. You should also limit publicly posted audio and video where practical, and talk about this scam with older relatives in advance — knowing it exists is most of the defence, because the technique relies entirely on catching people unprepared.","redFlags":["Caller sounds like a family member but the situation described seems implausible","Urgency: 'don't tell mum/dad — just send money now'","Call asks for wire transfer, gift cards, or cryptocurrency","You cannot call the person back on their known number to verify"],"whatToDoNow":["Hang up and call the supposed family member directly on their known number","Ask a question only the real person would know","Establish a family code word for future verification of emergency calls","Report the incident to your national fraud service"],"faq":[{"question":"Should I remove all audio and video from social media to be safe?","answer":"Restricting public access to your social media reduces the risk, but a complete solution is not practical for most people. Establishing a family verification code word is a more realistic protective step."},{"question":"How much audio does a scammer need to clone a voice?","answer":"Very little — a short clip from a public video or voicemail can be enough for a usable clone, and quality improves with more material. Assume any voice with public audio online can be imitated."},{"question":"Can I tell a cloned voice from a real one during a call?","answer":"Not reliably, especially under stress and with staged background noise. Verification has to come from outside the call: a code word, a question only the real person can answer, or calling them back on their known number."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-deepfake-video-call-from-a-company-executive-a-scam","url":"https://scamencyclopedia.org/questions/is-a-deepfake-video-call-from-a-company-executive-a-scam","question":"Is a deepfake video call from a company executive telling employees to transfer funds a scam?","shortAnswer":"This is an emerging, high-impact scam. Deepfake video calls impersonating executives have been used to authorise large fraudulent bank transfers. Always verify payment requests through a separate, confirmed channel.","explanation":"Business email compromise (BEC) has evolved into deepfake video compromise. Employees in finance or payments roles receive a video call that appears to show their CEO, CFO, or a trusted external partner instructing an urgent wire transfer or change of banking details. The video may look convincing because it is generated in real time using deepfake tools or is a pre-recorded manipulation of genuine footage, and multiple companies have reported significant financial losses from this fraud.\n\nSenior executives are the easiest people in a company to deepfake, because hours of their speech and video exist publicly in interviews, earnings calls, and conference talks. The scripts also exploit hierarchy: an employee asked directly by an apparent CEO to handle something 'confidential' and 'time-critical' is being pushed to skip the very controls that would catch the fraud. Some attacks stage entire multi-person meetings in which every other participant is fake, so the presence of colleagues on screen is not reassurance.\n\nThe defence is procedural, not perceptual. Any financial instruction received by video call — especially if unexpected, high-value, urgent, or framed as secret — should be verified by calling the executive back on a known direct number and confirmed through your company's standard payment authorisation process. No genuine executive is harmed by a verification step, and organisations should say so explicitly in policy so that junior staff never feel that checking is insubordination.","redFlags":["Unexpected video call from a senior figure requesting an urgent transfer","Audio or lip-sync is slightly off","Call uses a different communication platform than usual","Request bypasses normal approval processes due to 'urgency' or 'confidentiality'"],"whatToDoNow":["Do not authorise any transfer during or immediately after such a call","Call the executive on their known direct number to verify the instruction","Follow your company's standard payment authorisation procedures regardless of apparent urgency","Report any suspected deepfake attempt to your IT security team and fraud authorities"],"faq":[{"question":"Can technical tools detect a deepfake video call in real time?","answer":"Detection tools exist but are not yet reliable enough to be your primary defence. Process controls — always verifying payment instructions through a separate channel — are more robust."},{"question":"There were several colleagues on the call who agreed with the instruction. Does that make it safe?","answer":"No. Attacks have staged meetings where every participant other than the victim was a deepfake. Numbers on a screen are not verification — only an out-of-band call-back and your standard authorisation process are."},{"question":"What should companies change to defend against this?","answer":"Make out-of-band verification mandatory for payment instructions and bank detail changes regardless of who requests them, and state in policy that urgency or confidentiality never waives the check. The control must not depend on an employee's courage to question a boss."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-qr-code-on-a-restaurant-table-safe-to-scan","url":"https://scamencyclopedia.org/questions/is-a-qr-code-on-a-restaurant-table-safe-to-scan","question":"Is a QR code on a restaurant table safe to scan?","shortAnswer":"Usually yes, but fraudsters sometimes place fake QR stickers over legitimate menu codes. Check that the sticker looks original and verify the URL before entering any personal details.","explanation":"Restaurant QR menus became ubiquitous after the pandemic and are generally safe. However, scammers place fraudulent QR code stickers over genuine ones, directing diners to phishing pages that mimic payment or loyalty reward pages and collect card details. The attack costs almost nothing — a sheet of printed stickers — and works because a QR code is unreadable to humans: you cannot see where it points until you have already scanned it.\n\nBefore scanning a table code, look at whether the sticker appears to be placed over another, and whether the label is professionally printed and consistent with the restaurant's branding. After scanning, the moment of protection is the URL check: the address that opens should match the restaurant's real domain or its known menu provider, not a lookalike or a random shortened link. A menu needs no permissions and no personal data, so a scanned page that asks you to log in, download an app, or 'verify' a card has already told you what it is.\n\nSome venues do use QR-based ordering and payment legitimately, which blurs the line — but in those cases staff can confirm the system, and the page will sit on the provider's proper domain. When in doubt, ask for a physical menu or order with a member of staff, and if you find a sticker layered over the original code, tell the restaurant so they can remove it before another table scans it.","redFlags":["QR code sticker is placed on top of or covers another code","Sticker looks different from other branded materials in the restaurant","Scanned URL does not match the restaurant's known domain","Page asks for card payment before you have received or ordered food"],"whatToDoNow":["Inspect the QR code physically before scanning","Check the URL that opens and close if it looks unfamiliar","Alert staff if you suspect a sticker has been placed fraudulently","If you entered card details on a suspicious page, call your bank immediately"],"faq":[{"question":"Should I use a QR code scanner app with a preview feature?","answer":"Yes — scanner apps that display the destination URL before opening it give you a chance to check whether the link looks legitimate before proceeding."},{"question":"Some restaurants genuinely take payment through a QR code. How do I tell those apart?","answer":"Legitimate QR ordering runs on a recognisable provider domain and staff can confirm the system is theirs. If the payment page appeared from a sticker no one can vouch for, or the domain looks unrelated, pay a member of staff instead."},{"question":"I entered card details on a page from a table QR code. What now?","answer":"Contact your bank immediately to block the card and dispute any charges, and tell the restaurant so they can check their codes and warn other customers. Watch your statements for small test transactions."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-qr-code-email-from-my-bank-or-payroll-safe-to-scan","url":"https://scamencyclopedia.org/questions/is-a-qr-code-email-from-my-bank-or-payroll-safe-to-scan","question":"Is a QR code in an email from my bank or payroll provider safe to scan?","shortAnswer":"QR codes in unsolicited emails from financial institutions are a growing phishing technique. Banks and payroll providers rarely need you to scan a QR code by email — verify first.","explanation":"QR code phishing, sometimes called quishing, exploits the fact that email security tools scan text links but often cannot inspect QR code images. A fraudulent email mimics your bank, payroll provider, or HR system and asks you to scan a QR code to verify your account, update your banking details, or claim a payment. The code redirects to a fake login page that captures your credentials.\n\nThe QR step serves the attacker twice. It bypasses filters that would have flagged the same URL as a text link, and it moves you from your work computer — with its security controls and monitoring — onto your personal phone, which usually has neither. A small screen also makes the fake page's address harder to inspect. Payroll-themed versions are particularly effective in workplaces because 'scan to view your updated pay details' arrives with built-in urgency, and captured credentials are then used to redirect salary payments.\n\nYour real bank sends you to your app or known website — it does not typically embed QR codes for account management in routine emails, and neither do legitimate HR systems. If you receive an unexpected email with a QR code from a financial entity, do not scan it; navigate directly to the institution's website or app to check whether any action is genuinely required, and report the email to your IT team or the institution's phishing address so others receiving the same campaign are protected.","redFlags":["Unexpected email from a financial institution containing a QR code","Email claims urgent action is needed or your account will be frozen","QR code destination URL uses a different domain from the institution","Sender email address differs subtly from the official domain"],"whatToDoNow":["Do not scan the QR code","Log in to your bank or payroll portal directly to check for any genuine alerts","Forward the phishing email to your institution's abuse address","Report to your national cyber crime reporting service"],"faq":[{"question":"Do banks ever legitimately send QR codes by email?","answer":"Some banks use QR codes for specific verified in-app actions, but they will direct you to open your existing app — not to scan an email QR code to access your account from scratch."},{"question":"Why do quishing emails ask me to scan with my phone specifically?","answer":"Because your phone likely sits outside your employer's security stack — no filtering, no monitoring, and a small screen where a fake URL is hard to inspect. Moving you to the weakest device is the point of the QR code."},{"question":"I scanned the code and logged in before realising. What should I do?","answer":"Change that password immediately, enable two-factor authentication, and alert the real institution — for payroll systems, tell HR to check whether your bank details were changed. If you reused the password elsewhere, change it there too."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-free-wifi-qr-code-at-a-hotel-or-airport-safe","url":"https://scamencyclopedia.org/questions/is-a-free-wifi-qr-code-at-a-hotel-or-airport-safe","question":"Is a free Wi-Fi QR code at a hotel or airport safe to scan?","shortAnswer":"Public Wi-Fi QR codes can be cloned or faked by attackers to intercept your traffic. Verify with staff and use a VPN on any public network.","explanation":"Fake Wi-Fi access point attacks using QR codes work as follows: an attacker creates a hotspot with a name similar to the venue's genuine network and posts a QR code sticker nearby, sometimes covering the real one. When you connect via the fake QR code, all your unencrypted internet traffic passes through the attacker's device. Modern HTTPS encryption protects most browsing, but credential harvesting pages that intercept app traffic or inject content into HTTP connections remain risks.\n\nThe more common danger in practice is the fake captive portal — the login page that appears when you join. An attacker's portal can imitate the venue's branding and ask for far more than a real one would: an email address is normal, but a password, payment card 'for verification', or a prompt to install an app or certificate is not. Anything typed into that page goes straight to the attacker, and travellers in a hurry at an airport gate are the ideal audience for it.\n\nWhen connecting to hotel or airport Wi-Fi, verify the exact network name with reception or the venue's official signage rather than trusting a sticker, use a reputable VPN to encrypt your traffic, and avoid logging into banking or other sensitive accounts on public networks — mobile data is the safer route for those. If a portal asks for a password or payment, disconnect and check with staff before going further.","redFlags":["QR code sticker is placed on a piece of paper rather than embedded in official signage","Network name after scanning is slightly different from the venue's listed network","You are asked to log in to a portal requesting email and full name but also a password"],"whatToDoNow":["Ask staff to confirm the official network name and password before connecting","Use a reputable VPN when on any public Wi-Fi network","Avoid logging into banking or sensitive accounts on public networks","Report suspicious Wi-Fi stickers to venue staff"],"faq":[{"question":"Is HTTPS enough to protect me on public Wi-Fi?","answer":"HTTPS protects the content of most communications, but a malicious hotspot can still intercept metadata, target apps that do not use full encryption, or serve you fake pages. A VPN adds an important additional layer."},{"question":"What should a legitimate Wi-Fi login portal ask for?","answer":"At most an email address, room number, or acceptance of terms. A portal requesting an account password, payment card details, or the installation of an app or certificate is a strong sign of a fake network — disconnect and verify with staff."},{"question":"Is mobile data safer than public Wi-Fi for banking?","answer":"Yes. Your carrier connection is not interceptable by someone running a rogue hotspot in the room. For banking and other sensitive logins while travelling, switching to mobile data removes this entire class of attack."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-free-trial-that-charged-me-after-seven-days-a-scam","url":"https://scamencyclopedia.org/questions/is-a-free-trial-that-charged-me-after-seven-days-a-scam","question":"Is a free trial that charged me after seven days a scam?","shortAnswer":"Some charges are legitimate subscription terms that were disclosed in small print. Others are subscription traps with deliberately hidden terms. Learn how to tell the difference and how to cancel.","explanation":"Subscription traps require you to enter card details for a 'free' trial, then automatically charge a monthly or annual fee when the trial expires. Some are fully disclosed in small print you may have missed; others hide the billing terms deliberately or make cancellation deliberately difficult. The key question is whether the billing terms were clearly disclosed before you entered your card. If they were, you may need to follow the cancellation process; if they were hidden or materially misrepresented, you have grounds to dispute the charge with your bank.\n\nThe deceptive versions share a design language: the trial price in large type with the recurring charge buried below the button, pre-ticked add-ons, a countdown timer pushing you through checkout, and a cancellation path that requires phoning a line with long holds while signup took one click. Some bill under a company name unrelated to the product, so the statement entry is hard to trace, and some enrol you in a second 'partner' subscription you never saw at all.\n\nWhen a charge appears, act on both fronts: cancel inside the service to stop future billing, and instruct your bank to block further payments to that merchant — you do not need the merchant's permission to withdraw a recurring payment authority. Screenshot the signup page and terms as they appeared if you can, since that evidence supports a dispute, and report genuinely hidden terms to your national consumer protection body.","redFlags":["Billing terms appeared only in fine print or were pre-ticked during signup","No reminder email was sent before the trial converted to a paid subscription","Cancellation process is difficult to find or requires calling a premium number","Company name on your bank statement is unrecognisable"],"whatToDoNow":["Cancel through the company's website or app immediately to stop future charges","Contact your bank to dispute the charge if terms were hidden or deceptive","Report aggressive subscription practices to your national consumer authority","Check for other recurring charges you do not recognise on the same statement"],"faq":[{"question":"Can my bank stop a recurring charge?","answer":"Yes — you can instruct your bank to block further payments from a specific merchant. For debit cards this is a 'continuous payment authority' cancellation; for credit cards you can dispute and request a block."},{"question":"The company refuses to refund me even though I cancelled. Do I have options?","answer":"Yes. If billing terms were hidden or the cancellation route was obstructed, dispute the charge with your card issuer and describe the deceptive flow. Keep screenshots and dates — issuers decide these disputes on documentation."},{"question":"How can I avoid this trap in future?","answer":"Before entering a card for any trial, find the exact renewal price and date in the checkout text, and set a reminder to cancel before it. Virtual or single-use card numbers, where your bank offers them, also cap the damage."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-grandparent-scam-call-common-and-how-does-it-work","url":"https://scamencyclopedia.org/questions/is-a-grandparent-scam-call-common-and-how-does-it-work","question":"Is a grandparent scam call common and how does it work?","shortAnswer":"Grandparent scams are extremely common. A caller pretends to be a grandchild (or their lawyer) in an emergency and asks for money urgently before the family finds out.","explanation":"Grandparent scams exploit the bond between older adults and their grandchildren. The caller may say 'Grandma, it's me — I'm in trouble, don't tell Mum'. If the grandparent suggests a name, the scammer confirms it and builds the rest of the call around it. The story involves a car accident, arrest, or medical emergency requiring immediate bail, legal fees, or hospital payment, and a second 'lawyer' or 'police officer' may also call to add legitimacy.\n\nEvery element of the script serves a purpose. The secrecy request ('don't tell Mum and Dad') removes the family members most likely to spot the fraud. The urgency prevents reflection. The relay to a 'professional' voice explains away any oddness in the grandchild's voice and adds authority to the payment instructions. Payment is requested by gift card, wire transfer, cryptocurrency, or — increasingly — a courier who comes to the door to collect cash, and AI voice cloning has made the opening moments of these calls far more convincing than they used to be.\n\nThe single most reliable defence is a family code word that any caller must provide in an emergency, agreed in advance and never posted anywhere. The second is a standing family rule: no money moves in response to any phone emergency until the grandchild has been reached directly on their own number. Real emergencies survive a ten-minute verification; scams do not.","redFlags":["Caller hints at identity, then confirms whatever name you suggest","Extreme urgency and request for secrecy from other family members","Money demanded by gift card, wire transfer, or cash via a courier","Voice sounds slightly different but explains it with injury or stress"],"whatToDoNow":["Hang up and call the grandchild directly on their known number","Ask a personal question only the real grandchild would know","Do not give money or gift cards to any courier","Report the call to police and your national fraud service"],"faq":[{"question":"What is the best protection for an elderly relative who lives alone?","answer":"Agree on a secret family code word that must be used in any phone emergency. Also register their number with your national call-blocking service to reduce scam call volume."},{"question":"Why do the callers insist on secrecy from the rest of the family?","answer":"Because another family member is the most likely person to break the spell — by calling the real grandchild or recognising the script. The secrecy demand protects the scam, not the grandchild, and is itself a reliable red flag."},{"question":"A courier is coming to collect money. What should we do?","answer":"Do not hand anything over, and call the police — a cash courier confirms an organised operation working your area. Note any descriptions safely, but do not confront anyone; let officers handle the collection attempt."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-student-loan-forgiveness-offer-by-phone-or-email-a-scam","url":"https://scamencyclopedia.org/questions/is-a-student-loan-forgiveness-offer-by-phone-or-email-a-scam","question":"Is a student loan forgiveness offer by phone or email a scam?","shortAnswer":"Unsolicited student loan forgiveness offers are almost always scams. Genuine forgiveness programmes are administered through official government portals — never by cold call.","explanation":"Student loan relief scams target borrowers with promises of instant forgiveness or reduced payments in exchange for a fee or your loan servicer login credentials. They may claim to be affiliated with the government or your loan servicer, use official-sounding names, and reference real government programmes to add credibility. The campaigns surge whenever forgiveness is in the news, because genuine policy changes create exactly the confusion — and hope — that these operations feed on.\n\nThe two things they ask for map to two different frauds. An upfront fee is advance-fee fraud: legitimate forgiveness and income-driven repayment programmes are free to apply for directly through your government's student loan portal, so the fee buys nothing that was not already free. Your servicer login is worse — with it, a scammer can change your contact details so you stop seeing warnings, redirect correspondence, harvest the personal data in the account, and in some schemes divert your payments while your loan quietly goes delinquent.\n\nSome operations also push you to sign a power of attorney or third-party authorisation on the first call, which lets them act on your loans without you. Decline all of it. Check your eligibility yourself on the official portal, deal with your servicer directly, and if you have already paid a company or shared credentials, change your password, notify the servicer, and report the company to your consumer protection agency.","redFlags":["Upfront fee required to process forgiveness or reduced payments","Caller asks for your federal student loan login or Social Security number","Promises guaranteed forgiveness regardless of your loan type or employment","Pressure to sign a power of attorney or third-party authorisation immediately"],"whatToDoNow":["Do not pay any upfront fee for loan relief","Check your government's official student aid website for legitimate programmes","If you gave login credentials, change your password immediately","Report the offer to your national consumer protection agency"],"faq":[{"question":"Are there legitimate third-party companies that help with student loans?","answer":"Some legitimate non-profit credit counselling services exist, but they are accredited by recognised bodies and do not charge upfront fees. Always verify accreditation independently."},{"question":"The caller referenced a real forgiveness programme by name. Doesn't that make them legitimate?","answer":"No — citing real programmes is the standard credibility trick. Real programmes never require a paid intermediary, so anyone charging to enrol you in one has told you what they are regardless of how accurate their programme knowledge sounds."},{"question":"I gave a company my loan servicer login. What should I do first?","answer":"Change the password immediately, check that your contact details and bank information in the account are unchanged, and call your servicer to flag the account. Then revoke any authorisation you signed and report the company."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-job-offer-that-requires-me-to-pay-a-visa-sponsorship-fee-a-scam","url":"https://scamencyclopedia.org/questions/is-a-job-offer-that-requires-me-to-pay-a-visa-sponsorship-fee-a-scam","question":"Is a job offer that requires me to pay a visa sponsorship fee a scam?","shortAnswer":"Almost certainly. Legitimate employers sponsoring a work visa bear the sponsorship costs themselves. Any employer asking you to pay a fee to be sponsored is exploiting your immigration aspirations.","explanation":"Visa sponsorship scams target people in countries where overseas work is a significant aspiration. A fraudulent employer — sometimes claiming to be a company in the UK, US, Canada, or Australia — offers a job and says they will provide visa sponsorship, but you must first pay a processing, legal, or sponsorship registration fee. Once paid, the job offer disappears, or further fees are demanded: medical checks, travel insurance, embassy 'appointments', each presented as the final step before your visa is issued.\n\nThe distance is the scam's shield. Victims cannot walk into the employer's office, and everything that would normally verify a job — interviews, contracts, HR correspondence — can be convincingly faked from anywhere. Scammers often clone real companies' websites and use the names of real staff, so surface research appears to confirm the offer. What cannot be faked is the official record: sponsorship licences and business registrations sit on government registers that you can check yourself from any country.\n\nGenuine employers with a valid sponsorship licence do not require workers to pay for the sponsorship process — visa costs are a cost of doing business for the employer, and in the UK it is actually illegal for employers to pass sponsorship costs to workers for most visa categories. Treat any fee request as the end of the conversation, verify the company through the destination country's official registers, and remember that a real employer will never object to you contacting them through their publicly listed channels to confirm an offer.","redFlags":["Employer asks you to pay any visa, sponsorship, or registration fee","Job offer arrived unsolicited via social media or WhatsApp","Company name and address cannot be verified in the destination country's company register","Communication is through personal email rather than a corporate address"],"whatToDoNow":["Do not pay any fee to secure a visa sponsorship","Verify the company through the destination country's official business registry","Check the company's sponsorship licence status on the relevant government register","Report the offer to your local police and the consulate of the country involved"],"faq":[{"question":"Can I get my money back if I already paid a visa sponsorship fee?","answer":"Recovery is difficult, especially for international wire transfers. Report to your bank immediately and file a complaint with your national consumer protection body. Preserve all communications as evidence."},{"question":"The company's website looks real and lists the recruiter who contacted me. Is that enough?","answer":"No — scammers clone real company websites and impersonate real employees. Contact the company only through details you find independently (their verified official site or registry records), not through anything supplied in the offer itself."},{"question":"They say the fee goes to a lawyer or agent, not the employer. Does that change anything?","answer":"No. Routing the payment through an 'immigration lawyer' or 'agent' is part of the same script and makes the demand feel procedural. In genuine sponsored employment, you are not asked to fund the process to receive the job."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-rental-scam-targeting-international-students-common","url":"https://scamencyclopedia.org/questions/is-a-rental-scam-targeting-international-students-common","question":"Is rental fraud targeting international students common?","shortAnswer":"Yes. International students — often searching for housing remotely from abroad before arriving — are prime targets for fake rental listings and advance-fee property fraud.","explanation":"International students face a uniquely high risk from rental scams because they are often searching from overseas, unfamiliar with local housing markets, on tight budgets, and under time pressure before term starts. Scammers post compelling listings at just-below-market prices, insist on a 'holding deposit' by bank transfer, and either disappear or continue extracting money with invented fees until the student arrives and discovers the property was never available or does not exist.\n\nThe extraction often continues past the first deposit precisely because the student cannot check anything until arrival: after the 'holding deposit' come key-release fees, cleaning charges, extra months of advance rent, and refundable 'insurance' — each small enough to pay rather than lose the property. Some scammers copy real estate agent listings and pose as private landlords; others impersonate accommodation pages in student social media groups, where a shared university connection creates unearned trust.\n\nStudents should work through their university's accommodation office or well-known verified letting platforms, and never pay a deposit for a property they have not viewed — even remotely through a verified video call with a trusted person physically present at the address. University international offices deal with this fraud every intake and can sanity-check a listing quickly, so asking before paying costs nothing. If the timeline is forcing a decision, temporary university housing or a short-term verified booking on arrival is always cheaper than a lost deposit and nowhere to live.","redFlags":["Landlord will not permit a viewing, citing distance or tenant occupation","Price is below comparable rentals in the same area","Payment required before arrival, with no opportunity to verify the property","Communication moves to WhatsApp or personal email quickly"],"whatToDoNow":["Use your university's official accommodation portal or verified letting agents","Never pay a deposit without a viewing — even a third-party in-person visit helps","Ask your university's international student office for housing fraud guidance","Report any fake listing to the platform and your national fraud service"],"faq":[{"question":"Can I arrange for someone local to verify a property before I pay?","answer":"Yes — asking a current student, a university welfare officer, or a professional service to physically visit and video-call from the property is an effective way to verify it exists before paying."},{"question":"The landlord was recommended in my university's student Facebook group. Is that safe?","answer":"Not by itself. Scammers join student groups specifically to post listings and fake vouches, and group admins rarely verify anyone. Treat group posts as leads to verify through the university accommodation office, not as endorsements."},{"question":"What if I arrive with nowhere to live because a listing was fake?","answer":"Contact your university's international or accommodation office immediately — most hold emergency or short-term housing options for exactly this situation. Then report the fraud to the platform and police so the listing is taken down."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-free-game-currency-generator-website-real","url":"https://scamencyclopedia.org/questions/is-a-free-game-currency-generator-website-real","question":"Is a free game currency generator website real?","shortAnswer":"No. Free V-Bucks, Robux, gems, or other game-currency generators are always scams designed to steal your account credentials, personal data, or money.","explanation":"Game currency generator sites are one of the most persistent scams targeting young people. They claim to add free premium currency to your account in exchange for completing 'human verification' steps. These steps inevitably lead to: sharing your game account login (which is then stolen), completing a chain of surveys that earn commissions for the scammer, downloading software that installs malware, or entering personal or payment details for a 'small verification fee'.\n\nThe technical claim at the heart of these sites is simply impossible. Game currency balances live on the publisher's servers, behind the same authentication that protects the whole platform; no outside website can write to them, any more than a stranger's website could add money to your bank account. The animated 'hacking' progress bars, the counters showing currency being 'injected', and the testimonials underneath are all theatre leading to the verification wall — which is where the actual extraction happens and which, tellingly, never ends in currency being delivered.\n\nThe scam persists because its targets are young, motivated, and often using accounts attached to a parent's email or payment card. It is worth explaining the 'impossible, always fake' logic to children directly, since a rule they understand beats a list of blocked sites. If a login was entered, change the password and enable two-factor authentication immediately; if software was downloaded, run a full security scan before using the device for anything sensitive.","redFlags":["Website promises free in-game currency without purchase","You must enter your game username or login credentials","Multiple 'human verification' steps that never end","Testimonials claim large amounts of currency were received"],"whatToDoNow":["Close the site immediately and do not complete any steps","If you entered your game login, change your password and enable two-factor authentication","Run a security scan if you downloaded anything from the site","Report the site to the game publisher and your national cybercrime service"],"faq":[{"question":"Can parents do anything to protect children from these sites?","answer":"DNS filtering tools and parental control software can block many known generator sites. Talking to children about why these sites are always fake is also an effective long-term protective measure."},{"question":"My child entered their game login on one of these sites. What should we do?","answer":"Change the account password immediately, enable two-factor authentication, and check for a linked payment card — remove or watch it for charges. If the same password is used elsewhere, change it there too."},{"question":"Why do these sites show the currency being 'added' before verification?","answer":"The animation is fake and runs the same for everyone. Showing the 'reward' first creates commitment, so users push through endless surveys and downloads rather than abandon currency they believe is already theirs."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-steam-trade-offer-that-seems-too-good-a-scam","url":"https://scamencyclopedia.org/questions/is-a-steam-trade-offer-that-seems-too-good-a-scam","question":"Is a Steam trade offer that seems too good to be true a scam?","shortAnswer":"Almost certainly yes. Overly generous Steam trade offers are used to trick you into accepting deals that steal your valuable items through API hijacking or social engineering.","explanation":"Steam trading scams exploit the platform's item trading system. Common variants include: impersonation of a friend whose account was compromised (they send a generous offer to build trust, then ask you to trade valuable items 'back' as a test), API key theft (scammers steal your Steam API key through phishing, intercept and cancel legitimate trades, and replace them with fake trades that send items to the scammer), and scam sites that ask you to 'verify' your inventory through a fake login.\n\nThe API key variant deserves particular attention because it defeats visual checking. Once a phishing site has captured your key, an automated bot watches your account; when you set up a genuine trade, the bot cancels it and instantly recreates a near-identical offer to an account impersonating your trading partner's name and avatar. You confirm what looks like the trade you built, and the items go to the scammer. This is why an unexplained cancelled trade followed by an immediate duplicate should stop you cold.\n\nBefore accepting any trade, verify the request verbally with your trading partner through a separate channel — not through Steam messages, which can be hijacked — and check that the item offered is actually the item shown rather than a lookalike with a slightly different name. If you have ever logged into a third-party skin or trading site, assume your API key may be exposed: revoke it, change your password, and review your confirmations before trading anything valuable.","redFlags":["Friend's account suddenly sends an unusually generous trade offer","Trading partner becomes defensive or aggressive if you ask to verify by voice","Trade item names or appearances are very similar to valuable items but slightly different","You are directed to a third-party site to 'verify' or 'confirm' the trade"],"whatToDoNow":["Verify any trade offer with the trading partner through a separate channel","Revoke your Steam API key if you suspect it has been compromised","Check your Steam account for any unrecognised trades or sign-in activity","Report the incident to Steam Support"],"faq":[{"question":"How do I revoke a compromised Steam API key?","answer":"Go to steamcommunity.com/dev/apikey and click 'Revoke My Steam Web API Key'. Then change your Steam password and enable Steam Guard mobile authenticator."},{"question":"My trade was cancelled and an identical one appeared seconds later. What happened?","answer":"That pattern is the signature of API key hijacking — a bot cancelled your real trade and substituted one to an impersonator account. Do not confirm it. Revoke your API key, change your password, and rebuild the trade from scratch after verifying your partner."},{"question":"Will Steam return items I was scammed out of?","answer":"Valve's policy is generally not to restore scammed items, which is why prevention matters so much. Still report the accounts involved — bans limit the scammer's ability to cash out and protect other traders."}],"lastReviewed":"2026-08-01"},{"slug":"is-someone-offering-to-boost-my-gaming-account-for-money-legitimate","url":"https://scamencyclopedia.org/questions/is-someone-offering-to-boost-my-gaming-account-for-money-legitimate","question":"Is someone offering to boost my gaming account for money legitimate?","shortAnswer":"Account boosting services are against the terms of service of most games and carry real risks: your account may be banned, and services offering boosts often steal accounts.","explanation":"Paid account boosting — where someone else plays on your account to raise your rank — is prohibited by the terms of service of most competitive games and can result in a permanent ban. Beyond the rules issue, the boosting industry has a significant fraud problem: services that require your account login credentials can simply steal the account, change the email and password, and demand ransom for its return.\n\nThe theft is often delayed, which is what makes it effective. The booster may deliver exactly what was promised, keep the credentials, and come back weeks later — after you have stopped watching — to strip tradeable items, hijack the account for resale, or use it for cheating that earns the ban in your name. An account that has accumulated years of purchases, progress, and linked payment methods is worth far more than the boosting fee, and you have handed over the keys with no contract and no recourse. Even 'honest' services trip automated defences with logins from unusual locations and sudden skill changes.\n\nIf you want to improve your rank, coaching services that watch you play and advise — without ever needing your login — achieve the improvement legitimately and carry none of these risks. If you have already shared credentials, change your password and linked email now, enable two-factor authentication, check for unauthorised purchases or trades, and unlink payment methods until you are sure the account is fully back under your control.","redFlags":["Service requires your account username and password","Price is very cheap for a service that allegedly takes many hours","No verifiable reviews or business registration","Contact is through Discord or WhatsApp only"],"whatToDoNow":["Do not share your account credentials with any service","If you already shared credentials and suspect theft, change your password and linked email immediately","Check your account for unauthorised purchases or changes","Report account theft to the game publisher's support team"],"faq":[{"question":"Is account boosting illegal?","answer":"It is typically a breach of terms of service rather than a criminal offence, but the account theft that sometimes accompanies it is. The risk of a permanent account ban is the more immediate concern for most players."},{"question":"The boosting service has good reviews on Discord. Doesn't that make it trustworthy?","answer":"Reviews in the seller's own community are easily manufactured and prove little. Even genuinely delivered boosts leave the operator holding your credentials afterwards — the risk is structural, not a matter of the seller's reputation."},{"question":"The booster finished the job weeks ago. Am I in the clear?","answer":"Not until you have changed your password and email, enabled two-factor authentication, and checked for unfamiliar activity. Stolen credentials are often exploited or resold long after the service ends."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-gaming-influencer-promoting-a-skin-giveaway-real","url":"https://scamencyclopedia.org/questions/is-a-gaming-influencer-promoting-a-skin-giveaway-real","question":"Is a gaming influencer promoting a skin or item giveaway real?","shortAnswer":"Most influencer skin giveaways are genuine promotional activities, but fake giveaways impersonating popular streamers are common and designed to steal your account or personal data.","explanation":"Fake influencer giveaways appear as social media posts, comments on real influencer pages, or as links posted in gaming community servers. They use the influencer's name, profile photo, and branding to look authentic. To claim your 'prize', you are asked to log in to a fake game platform page — giving scammers your account details — complete surveys that earn commissions, or connect your gaming account to a fraudulent app that harvests data.\n\nA common placement trick is to operate in the comment sections and DMs around genuine content: a real streamer posts a video, and an impersonator account with the same avatar and a near-identical handle replies to commenters telling them they have 'won'. The victim's guard is down because the real influencer genuinely is on screen, and the impersonator's profile survives only minutes of scrutiny — which is why the message always pushes you to act through a link immediately rather than visit the profile.\n\nReal influencer giveaways link to official game platform gifting tools or are announced on the influencer's verified page, and winning one never requires entering your account password on a third-party site. Verify any giveaway by going to the influencer's official, verified profile directly rather than following a link from a comment or DM. If you entered a login on a claim page, change that password immediately, enable two-factor authentication, and check the account for changes before the scammers can act on it.","redFlags":["Giveaway link arrives in a DM or comment, not on the influencer's verified page","Login page for the game publisher looks slightly different from the real site","Giveaway requires completing multiple survey steps before the prize is issued","Comment or post account has a very similar name to the real influencer but is not verified"],"whatToDoNow":["Do not click links in DMs or comments — go directly to the influencer's verified page","If you entered your game login, change your password immediately","Enable two-factor authentication on your gaming accounts","Report fake impersonation accounts to the platform"],"faq":[{"question":"How can I tell if a social media giveaway account is real?","answer":"Check for the platform's verified badge, account age, and post history. Real influencer accounts have years of content — impersonation accounts are usually new with few posts."},{"question":"I got a DM saying I won a giveaway I never entered. Is that possible?","answer":"No — winning a giveaway requires entering one. A win notification out of nowhere is the scam's opening move, designed to create excitement before you have time to check who sent it."},{"question":"Why would a giveaway need my account password at all?","answer":"It wouldn't. Game platforms deliver gifts through their own systems once you are logged in normally. A 'claim page' that asks for credentials exists only to steal them."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-in-game-romantic-relationship-asking-for-gift-cards-a-scam","url":"https://scamencyclopedia.org/questions/is-an-in-game-romantic-relationship-asking-for-gift-cards-a-scam","question":"Is an in-game romantic relationship where the other person asks for gift cards a scam?","shortAnswer":"Almost certainly. Romance scams frequently begin inside online games, where players build emotional connections before requesting real-world money or gift cards.","explanation":"Gaming platforms have become a significant recruitment ground for romance scammers because players share personal details naturally, communication is continuous and intimate, and guard is lowered in a shared hobby context. After building an in-game relationship over weeks or months, the scammer gradually moves the conversation to WhatsApp or Discord, then to romantic territory, and eventually to financial requests — often framed as a temporary crisis: a medical bill, a broken device, needing funds to visit.\n\nThe game context supplies advantages a dating app cannot. Hundreds of hours of shared play feel like evidence of who someone is, but they prove only that the person plays the game; the persona, photos, and life story attached to the account can be entirely invented. The hobby also gives the first requests a natural on-ramp — a subscription, in-game currency, a 'broken headset' — small purchases that establish the habit of giving before the larger crisis arrives. Gift cards are the preferred method because they are nearly impossible to trace or recover, and their codes can be sent in the same chat window as everything else.\n\nThe emotional investment built over the relationship makes it hard to accept that the person may not be who they claim, which is precisely what the time investment is for. The line to hold is simple: real-world money never moves to someone you have not met, whatever the story. Someone genuine will still be there after that boundary; a scammer's warmth will curdle or vanish, and that reaction tells you everything.","redFlags":["In-game friend eventually requests gift cards, crypto, or wire transfer","Person refuses to video-call or always has an excuse for not showing their face","Story involves a hardship requiring exactly the amount they request","Relationship feels unusually intense given you have never met"],"whatToDoNow":["Do not send any money or gift cards regardless of the story","Reverse image-search any photos they have shared","Talk to a trusted person outside the game about the relationship","Report the account to the game platform"],"faq":[{"question":"Can real romantic relationships begin in games?","answer":"Yes, genuine relationships do start in games. The red flag is specifically the request for real-world money — something a genuine partner would not ask for before ever meeting in person."},{"question":"Why do scammers specifically ask for gift cards?","answer":"Gift card codes transfer value instantly, anonymously, and irreversibly — once read out or photographed, the money is gone with no bank or platform to appeal to. Any relationship-based request for gift cards should be treated as fraud."},{"question":"We've played together for months. Doesn't that prove they're real?","answer":"It proves someone consistently plays the game — nothing more. The identity, photos, and circumstances described in chat are unverified, and long time investment is a deliberate part of the scam, not evidence against it."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-car-insurance-quote-from-a-website-i-dont-recognise-safe","url":"https://scamencyclopedia.org/questions/is-a-car-insurance-quote-from-a-website-i-dont-recognise-safe","question":"Is a car insurance quote from a website I don't recognise safe?","shortAnswer":"Some comparison sites are legitimate intermediaries, but fake insurance websites sell ghost policies that leave you uninsured. Always verify the insurer is authorised before paying.","explanation":"Ghost insurance scams involve fraudsters creating convincing websites or posing as brokers, collecting your premium, and issuing a fake policy document. You drive believing you are insured, but there is no real coverage. The fake policy only comes to light when you need to claim or when police check your insurance status — at which point you face the consequences of uninsured driving on top of the money already lost.\n\nGhost brokers often work through social media, messaging apps, and word of mouth, targeting people who face high premiums: young drivers, new arrivals, and anyone with a claims history. Their 'trick' for cheap cover is usually one of three frauds — a wholly invented policy document, a genuine policy bought with false details that the insurer will void the moment a claim is made, or a policy taken out with a stolen card that gets cancelled. In every version you carry the risk while the broker keeps the premium.\n\nTo protect yourself, check that the insurer and any broker are registered with your national insurance regulator before purchasing — in the UK the Financial Services Register, in the US your state's Department of Insurance. After buying, verify the policy exists by contacting the insurer directly through its official number, and check your national insurance database where one exists. Be cautious of quotes significantly below every recognised provider: the price difference usually reflects that no real coverage exists.","redFlags":["Premium is significantly lower than every other quote you received","Insurer or broker name cannot be found on your national regulatory register","Payment must be made by bank transfer rather than card","Policy document arrives with spelling errors, unofficial fonts, or inconsistent branding"],"whatToDoNow":["Check the insurer's authorisation on your national financial regulator's register before paying","If you already paid, verify your policy by calling the genuine insurer directly from their official number","If the policy is fake, report to police and your regulator immediately","Obtain genuine insurance before driving again"],"faq":[{"question":"Will I still be liable for an accident if I had a ghost policy?","answer":"Yes — if your policy is fake and you are involved in an accident, you are legally driving without insurance. This can result in prosecution, fines, licence points, and personal liability for damages."},{"question":"I received a professional-looking policy document. Doesn't that prove I'm covered?","answer":"No — documents are the easiest part to fake. Coverage is proven by the insurer's own records: call the insurer on its official number with your policy reference, or check your national motor insurance database where available."},{"question":"Why do ghost brokers target young drivers in particular?","answer":"Because their genuine premiums are highest, a 'special deal' is most tempting, and they are more likely to shop through social media where ghost brokers operate. The bigger the discount on your real market price, the more suspicion it deserves."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-health-insurance-offer-with-no-waiting-period-legitimate","url":"https://scamencyclopedia.org/questions/is-a-health-insurance-offer-with-no-waiting-period-legitimate","question":"Is a health insurance offer with no waiting period and very low premiums legitimate?","shortAnswer":"Offers of health coverage with no waiting periods and prices far below the market should be verified carefully — they may be fake policies or heavily restricted plans that do not provide real coverage.","explanation":"Health insurance fraud exploits people who are uninsured, underinsured, or struggling to afford standard premiums. Fraudulent offers promise comprehensive coverage with immediate effect and very low monthly payments. In some cases the plan is a limited indemnity plan — which pays only small fixed amounts per treatment regardless of actual costs — presented as full health insurance. In the most harmful cases, there is no coverage at all.\n\nThe cruelty of this fraud is in its timing: the deception surfaces at the moment of a medical emergency, when the 'insured' patient discovers mid-treatment that the plan pays a token amount or nothing, leaving them with the full bill at the worst possible time. Sales tactics mirror other pressure scams — enrolment 'deadlines' that do not exist, refusal to send documents before payment, and glossy brochures that describe benefits in percentages and adjectives while the binding terms remain unseen. A legitimate insurer can always send the full policy terms before you commit.\n\nWhen premiums sound too good to be true, ask for the policy's full Schedule of Benefits and read the exclusions, check the insurer's licence with your state or national health insurance regulator, and confirm that your preferred hospitals and doctors are in the plan's network before signing. If the seller resists any of those steps, that resistance is the answer. Compare against quotes from recognised insurers so you know what real coverage costs — an offer far below that floor is telling you what it is.","redFlags":["Coverage starts immediately with no medical questions","Monthly premium is far below every market comparison","Company pushing urgency: offer expires today","Insurer or plan cannot be verified through official regulatory databases"],"whatToDoNow":["Request the full Schedule of Benefits and read the exclusions","Verify the insurer on your state or national health insurance regulatory database","Compare with quotes from recognised insurers before committing","Report suspicious health plan offers to your insurance regulatory authority"],"faq":[{"question":"What is the difference between a real health plan and a limited benefit plan?","answer":"A genuine health insurance plan covers actual medical costs up to your deductible and out-of-pocket maximum. A limited benefit plan pays a fixed dollar amount per visit or procedure, leaving you responsible for the remainder."},{"question":"The seller won't send policy documents until I pay. Is that normal?","answer":"No. A legitimate insurer or broker can provide the full policy terms, Schedule of Benefits, and exclusions before any payment. Withholding documents until you commit is a defining mark of a fraudulent or deceptive plan."},{"question":"How do I check whether a health plan seller is licensed?","answer":"Contact your state or national insurance regulator, which maintains public databases of licensed insurers and agents. Verify both the company and the individual selling to you — fraudulent sellers often name a real insurer they do not represent."}],"lastReviewed":"2026-08-01"},{"slug":"what-happens-after-a-sim-swap-scam-and-how-do-i-recover","url":"https://scamencyclopedia.org/questions/what-happens-after-a-sim-swap-scam-and-how-do-i-recover","question":"What happens after a SIM swap scam and how do I recover?","shortAnswer":"After a SIM swap, scammers intercept your SMS codes and access accounts that use your phone number for two-factor authentication. Act immediately to regain control.","explanation":"In a SIM swap, a scammer convinces your mobile carrier to transfer your phone number to a SIM card they control — usually by providing stolen personal data to pass the carrier's identity check. Your phone loses signal. The scammer then receives all calls and texts to your number, including the one-time codes sent by your bank, email, or other accounts. Using these codes, they log in, change passwords, and drain or lock your accounts.\n\nThe first hour matters most, because the attacker is working through your accounts in priority order — typically email first (to control resets everywhere else), then banking and crypto, then anything resellable. Recovery is a race on the same track: call your carrier from another phone to reclaim the number and have the fraudulent SIM cancelled, then secure your primary email, then your bank via its fraud line. Do the securing from a device you control, since your own phone is offline and the attacker may be watching compromised inboxes for your recovery attempts.\n\nOnce the immediate damage is contained, restructure so it cannot repeat: move two-factor authentication from SMS to an authenticator app or hardware key on every important account, remove your phone number as a recovery method where possible, and add a PIN or port-freeze to your carrier account, which most providers offer free. File a police report and a report with your national fraud body — banks and carriers both handle disputes more smoothly when a report reference exists.","redFlags":["Your phone suddenly loses all signal for no apparent reason","You receive unexpected account-change notification emails or texts","You cannot receive calls or texts but others around you have normal signal","You are locked out of bank, email, or social accounts without trying to log in"],"whatToDoNow":["Call your mobile carrier from a different phone and report the SIM swap immediately","Contact your bank's fraud line while you still have access to alternative contacts","Change passwords and move two-factor authentication from SMS to an authenticator app","File a police report and report to your national fraud body"],"faq":[{"question":"How do carriers prevent SIM swaps?","answer":"Most carriers allow you to add a PIN or passcode to your account that must be provided before any SIM change. Enabling this free security feature significantly reduces your risk."},{"question":"In what order should I secure my accounts after a SIM swap?","answer":"Carrier first to reclaim the number, then your primary email, then banking and any crypto accounts, then everything else that used the number for codes. Email comes early because it controls password resets for most other services."},{"question":"How did the scammer pass my carrier's identity checks?","answer":"Usually with personal data from breaches and social media — name, address, date of birth, recent numbers dialled — or occasionally via a complicit or deceived store employee. This is why adding a dedicated carrier PIN matters: it is a secret breaches do not contain."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-text-saying-my-phone-contract-is-due-for-an-upgrade-a-scam","url":"https://scamencyclopedia.org/questions/is-a-text-saying-my-phone-contract-is-due-for-an-upgrade-a-scam","question":"Is a text saying my phone contract is due for an upgrade a scam?","shortAnswer":"Genuine upgrade notifications do come from carriers, but smishing texts mimicking carrier brands are also common — designed to steal your details or redirect you to a fake upgrade site.","explanation":"Carrier impersonation texts arrive at scale and often coincide with real upgrade windows, making them especially convincing. The text claims your upgrade is ready and invites you to click a link to choose a new device or claim a free gift. The link leads to a fake carrier website that collects your account credentials, personal details, or card information.\n\nThe harvest has a specific purpose beyond generic identity theft: with your carrier login, fraudsters can order handsets on your contract, add lines, or set up a SIM swap that intercepts your security codes. Because these texts are sent in bulk, some inevitably land during a recipient's genuine upgrade window — that coincidence, not any inside knowledge, is what makes the message feel personal. Spoofed sender names mean the text can even appear in the same thread as real carrier messages, which is why thread position proves nothing.\n\nA genuine carrier upgrade notification will direct you to your existing carrier app or their verified website — it will not ask for your account password or card number through a link in a text. If you think your upgrade is due, go directly to your carrier's official app or website to check; your eligibility is always visible there. Report smishing texts to your carrier's fraud team or your national SMS reporting service, and if you did enter details on a fake page, change your carrier password and alert your bank straight away.","redFlags":["Text includes a link that does not use your carrier's official domain","Link asks for your full account password and card details on one page","Offer expires today to create urgency","You are significantly early or late in your contract cycle"],"whatToDoNow":["Do not click the link — go to your carrier's official app or website directly","Check your upgrade eligibility there","Report the smishing text to your carrier's fraud team","Forward the text to your national SMS spam reporting number if available"],"faq":[{"question":"Do carriers send genuine upgrade texts?","answer":"Yes, some carriers do send upgrade reminder messages, but they link to official domains and do not ask for passwords or card details within the text flow. Verify by logging in independently."},{"question":"The text arrived exactly when my contract is actually ending. How did they know?","answer":"Almost certainly they didn't — these campaigns are sent in bulk, so some land during genuine upgrade windows by chance. Occasionally leaked customer data sharpens the timing, but either way the safe route is the same: check in your carrier's official app."},{"question":"What can a scammer do with my carrier account login?","answer":"Order devices on your contract, add premium services, view your personal data, and in the worst case arrange a SIM swap to intercept your security codes. Treat carrier credentials as seriously as banking ones."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-number-spoofing-call-from-my-own-number-a-scam","url":"https://scamencyclopedia.org/questions/is-a-number-spoofing-call-from-my-own-number-a-scam","question":"Is a call appearing to come from my own phone number a scam?","shortAnswer":"Yes. Scammers spoof your own number to try to confuse you or trick you into answering. Never trust any caller simply because the display matches your own number.","explanation":"Receiving a call from your own mobile number is a caller ID spoofing technique. Scammers exploit gaps in phone network authentication to display any number they choose — including yours. The motivation is usually to confuse you into answering a call you would otherwise ignore, or to test that a spoofing tool is working before targeting others. Sometimes the person on the line claims your number has been 'hacked' or 'used for criminal activity' and offers to 'fix' the problem for a fee.\n\nThe underlying point to hold onto is that caller ID is a display field, not an identity check. The legacy phone network largely trusts whatever number the originating system asserts, which is the same weakness that lets scammers imitate banks, police, and government agencies. Your own number appearing is simply the most jarring demonstration of it. It does not mean your phone, SIM, or accounts have been touched — no one can make calls from your line without your device or SIM, and spoofing requires neither.\n\nHang up without engaging, and do not call the number back, since a return call may route to a premium-rate line. If the call left you worried, contact your carrier from your normal line to confirm there are no real issues on your account. Where your country has a fraud-call reporting service, pass the details on; reports help carriers tune the network-level call authentication that is gradually making this trick harder.","redFlags":["Incoming call display shows your own number","Caller claims your phone number has been used for fraud","Caller offers to resolve the issue if you provide personal details or pay a fee","Urgency: police are on their way unless you act now"],"whatToDoNow":["Hang up — do not engage or provide any information","If concerned, call your mobile carrier from a different line to ask about any real account issues","Report the call to your national fraud reporting service","Do not call the number back — it may connect to a premium-rate line"],"faq":[{"question":"Can my number be permanently blocked from being spoofed?","answer":"Carriers can apply STIR/SHAKEN call authentication to flag spoofed calls, but this technology is not universally deployed. Reporting spoofing incidents to your carrier can help them flag the activity."},{"question":"Does a call from my own number mean my phone was hacked?","answer":"No. Spoofing happens on the network side and involves no access to your device, SIM, or accounts. The caller merely instructed their system to display your number — nothing of yours was touched."},{"question":"Friends say my number called them, but I didn't. What's happening?","answer":"Your number is being spoofed as the display ID on someone else's scam calls. You cannot stop it directly; it usually passes within days. Consider a voicemail note that you are aware, and report persistent cases to your carrier."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-sms-from-my-bank-about-a-new-payee-real","url":"https://scamencyclopedia.org/questions/is-an-sms-from-my-bank-about-a-new-payee-real","question":"Is an SMS from my bank asking me to confirm a new payee real?","shortAnswer":"Genuine new-payee confirmation texts do exist, but fraudulent texts designed to confirm a payee the scammer already set up are also sent. Never use a number or link in the text — call your bank's official number.","explanation":"Banks send one-time passcodes and confirmation requests when a new payee is being added to your account. Scammers exploit this by first gaining partial access to your account — or by simply sending a fake alert — and then tricking you into providing the code needed to complete the process. The text arrives and looks genuine, but acting on it confirms a fraudulent payee setup rather than a legitimate one.\n\nThe most dangerous version pairs the text with a phone call. Moments after the SMS lands, someone claiming to be your bank's fraud team calls to say a payee addition is being attempted and asks you to read out the code 'to cancel it' — when in reality the code is the final step the scammer needs to complete it. This is why genuine banks say they will never ask you to read a security code over the phone: the code exists to authorise, and anyone who asks for it is trying to use that authorisation.\n\nA new-payee confirmation you did not initiate means someone may already hold your login details, so treat it as an active compromise, not just spam. Do not press any key, click any link, or call any number in the text. Log in to your banking app directly, check pending payees, and call your bank's fraud line from the number on your card. Ask them to remove the pending payee, review recent access, and reset your credentials.","redFlags":["You did not initiate adding any new payee","Text contains a link or number to call to 'confirm' or 'cancel'","Urgency: confirm within five minutes or the request expires","Any associated call asks you to read back the SMS code"],"whatToDoNow":["Do not click any link or call any number in the text","Log in to your banking app directly and check for any pending payee additions","Call your bank's fraud line from the number on the back of your card","Ask your bank to cancel the pending payee and review recent account access"],"faq":[{"question":"What if the text is in the same thread as genuine bank messages?","answer":"SMS spoofing can place fake messages into the same thread as real ones. A legitimate-looking thread does not confirm that any specific message is genuine."},{"question":"Someone called claiming to be the bank and asked me to read the code to cancel the payee. Should I?","answer":"Never. Reading out the code completes the fraudulent setup — that call is the scam's second half. Banks do not ask customers to recite security codes. Hang up and call the fraud line printed on your card."},{"question":"I received the text but did nothing. Is my account safe?","answer":"Possibly, but an unrequested payee code can mean someone already has your login details. Change your online banking password, check pending payees in the app, and tell your bank so they can review recent access."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-supplier-who-changed-their-bank-details-by-email-legitimate","url":"https://scamencyclopedia.org/questions/is-a-supplier-who-changed-their-bank-details-by-email-legitimate","question":"Is a supplier who changed their bank details by email legitimate?","shortAnswer":"Bank detail change requests by email are a top vector for business payment fraud. Always verify any bank detail change by calling your supplier on a known number before making any payment.","explanation":"Business email compromise (BEC) fraud exploiting bank detail changes is one of the most financially damaging scam categories for businesses. A fraudulent email appears to come from a genuine supplier, law firm, or business partner, explaining that their bank details have changed and asking you to update your records before the next payment. The email may use a near-identical domain, a compromised email account, or a forwarding rule that copies real communications.\n\nThe compromised-account version is the hardest to spot, because the request arrives from the supplier's real address, mid-thread, quoting genuine invoice references and written in the correspondent's usual tone. Attackers who control a mailbox often watch it for weeks, learn the billing cycle, and time the 'new details' message just before a large payment is due. Nothing about the email itself can prove it safe — which is why the defence has to live outside email entirely.\n\nThe solution is a strict process: any request to change bank details must be verbally confirmed using a contact number you already have on file — never one provided in the email requesting the change, since that number rings the fraudster. Many businesses add a dual-approval rule so no single employee can action a detail change alone. If a payment has already gone to a fraudulent account, call your bank immediately to attempt recall, notify the real supplier from known contact details, and report to your national fraud service; recovery odds fall sharply with every passing hour.","redFlags":["Email requests a bank detail change ahead of an upcoming invoice","Sender email domain is slightly different from the supplier's normal address","Request asks you to update records urgently before a payment is due","New bank details are in a different country from the supplier's usual account"],"whatToDoNow":["Do not update any payment details based solely on an email","Call your supplier on the number in your existing records — not in the email","Verify the new details verbally before processing any payment","If you already paid, contact your bank immediately to report the misdirected payment"],"faq":[{"question":"What security controls can businesses put in place?","answer":"A dual-authorisation rule for bank detail changes — requiring two staff members to independently verify any supplier detail change by phone — significantly reduces this risk."},{"question":"The email came from the supplier's real address with correct invoice details. How can it be fraud?","answer":"Because the supplier's mailbox itself may be compromised. Attackers send from the genuine account, inside real threads, with accurate references. Authenticity of the mailbox is not authenticity of the instruction — only a call-back to a known number is."},{"question":"We already paid to the new account. What should we do first?","answer":"Call your bank's fraud line immediately and request recall of the payment — speed is the biggest factor in recovery. Then warn the real supplier through known contacts, preserve the emails, and report to your national fraud service."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-weight-loss-supplement-endorsed-by-a-doctor-on-facebook-real","url":"https://scamencyclopedia.org/questions/is-a-weight-loss-supplement-endorsed-by-a-doctor-on-facebook-real","question":"Is a weight-loss supplement endorsed by a doctor on Facebook real?","shortAnswer":"Facebook ads featuring doctor endorsements for weight-loss products are frequently fraudulent. The doctor may not exist, the endorsement may be fabricated, and the product rarely delivers its claims.","explanation":"Weight-loss supplement fraud is one of the largest categories of false advertising online. Scammers create Facebook ads featuring stock images of medical professionals, fabricated quote endorsements, and dramatic before-and-after photos. The products rarely contain the ingredients claimed, the doses shown, or provide the results advertised. Some are straightforward credit card traps: a low-cost trial leading to expensive monthly subscriptions buried in checkout fine print.\n\nAI image generation has made the fabrication cheaper and more convincing — a 'doctor' who does not exist, a fake TV interview, or a cloned celebrity endorsement can be produced in minutes, and ad accounts banned one day reappear the next under new names selling the same product. Some campaigns fake entire news articles from recognisable outlets to launder the claim. The financial harm compounds the health risk: unverified pills of unknown composition, taken on the strength of an invented authority figure.\n\nGenuine doctor endorsements require the doctor's explicit written consent and are subject to strict advertising regulation, which is why real clinicians so rarely front miracle-product ads. Before purchasing, search the product name with 'scam', check the ingredient list against peer-reviewed evidence, and consult your own doctor — particularly if you take other medication. If you already bought, cancel any hidden subscription with your card issuer, and report the ad through the platform's reporting tools so the campaign is removed faster.","redFlags":["Ad claims rapid weight loss without diet or exercise changes","Doctor or celebrity endorsement cannot be independently verified","Website checkout includes a subscription in fine print","Product is promoted only through Facebook and Instagram ads, not established retailers"],"whatToDoNow":["Do not purchase based solely on a social media ad endorsement","Search the product and company name with 'scam' or 'complaint'","If you already purchased, cancel any recurring subscription immediately","Report fraudulent health product ads to your national advertising authority"],"faq":[{"question":"Are all supplements advertised on Facebook fraudulent?","answer":"No — some legitimate supplement brands advertise on Facebook. The red flags are unverifiable endorsements, claims that exceed what science supports, and subscription traps embedded in the checkout."},{"question":"The ad showed a news clip of the product on TV. Doesn't that verify it?","answer":"No — fake news pages and fabricated broadcast clips are standard props in supplement fraud, and AI tools make them easy to produce. Search the outlet's own website: if the story is real, it will exist there."},{"question":"I was charged a monthly subscription I never agreed to. How do I stop it?","answer":"Cancel with the merchant if possible, then instruct your card issuer to block further payments to them and dispute the charges as deceptive billing. Screenshots of the original offer page strengthen your dispute."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-fake-invoice-from-a-well-known-supplier-name-a-scam","url":"https://scamencyclopedia.org/questions/is-a-fake-invoice-from-a-well-known-supplier-name-a-scam","question":"Is a fake invoice using a well-known supplier's name a scam?","shortAnswer":"Yes. Invoice fraud involves sending convincing fake invoices using legitimate company names and branding, counting on busy accounts teams to pay without checking.","explanation":"Invoice fraud exploits the trust that businesses place in established supplier relationships. A fraudulent invoice arrives with a recognised company's name and logo — sometimes even the correct account number or reference — but with a fraudulent bank account substituted. In other variants, scammers send invoices for services never ordered, hoping that large organisations with many suppliers will pay without rigorous checking.\n\nBoth variants are volume games aimed at process gaps rather than people. The never-ordered version deliberately uses plausible, unmemorable line items — directory listings, domain services, maintenance renewals — priced low enough to fall under approval thresholds and get paid on routine. The substituted-account version is timed against your real payment runs, sometimes informed by a compromised mailbox at the supplier or an insider's knowledge of the billing cycle. The invoice document itself can be pixel-perfect; the bank account is the only element that has to be wrong.\n\nThe defence is the discipline your accounts process already claims to have: match every invoice against an approved purchase order and goods receipt, verify any new or changed payment details by phone with your known supplier contact, and check that the account on the invoice matches the one in your payment system before releasing funds. Treat bank detail differences as an incident, not an update. If a fraudulent invoice was paid, contact your bank immediately to attempt recall and report to your national fraud authority — and review which control the invoice slipped through.","redFlags":["Invoice bank details differ from what is on file for this supplier","Invoice is for services or goods with no matching purchase order","Invoice numbering sequence does not match your history with this supplier","Contact details on the invoice differ slightly from the supplier's official records"],"whatToDoNow":["Match every invoice to an approved purchase order before paying","Call the supplier's known number to verify any invoice with changed bank details","If a fraudulent payment was made, contact your bank's fraud line immediately","Report to your national fraud authority and review your payment authorisation controls"],"faq":[{"question":"Should I compare every invoice against a purchase order?","answer":"Yes — a three-way match (purchase order, goods receipt, and invoice) is standard accounts-payable practice and the most effective defence against invoice fraud."},{"question":"Why do fake invoices tend to be for small, boring amounts?","answer":"Small amounts fall below approval thresholds and attract no scrutiny, and generic services like listings or renewals are hard to disprove. The fraud profits from volume — many small invoices paid on routine across many companies."},{"question":"How did the fraudster know our supplier and reference numbers?","answer":"Common sources are a compromised mailbox at either company, invoices intercepted in transit, or details leaked in breaches. Accurate references make the document convincing, which is why verification must focus on the bank account, not the paperwork."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-car-diagnostic-tool-sold-cheap-online-a-scam","url":"https://scamencyclopedia.org/questions/is-a-car-diagnostic-tool-sold-cheap-online-a-scam","question":"Is a cheap car diagnostic OBD tool sold online a scam?","shortAnswer":"Cheap OBD diagnostic tools from unknown sellers may be counterfeit, non-functional, or in rare cases designed to harvest data from your vehicle's systems via a paired app.","explanation":"OBD-II (on-board diagnostics) port adapters are widely used by mechanics and DIY car owners to read error codes and monitor vehicle health. Low-cost clones of popular brand devices flood online marketplaces and may simply not work, may damage your car's ECU with incorrect signals, or — in the case of Bluetooth-connected models — may use a paired smartphone app that sends your vehicle data, location history, or phone data to unknown servers.\n\nThe app is usually the real product. Hardware clones are cheap to make, but the paired app's permission requests — location, contacts, storage — turn a code reader into a data-collection channel, and a cloned Bluetooth device can remain persistently connected to your phone long after you finish using it. Marketplace listings blur the picture further by borrowing brand names and photos from genuine devices, so the box that arrives may have no relationship to the product reviewed on the listing page.\n\nPurchase diagnostic tools from verified automotive retailers or the manufacturer's official store, check user reviews on independent forums rather than on the listing itself, and review the permissions of any paired app before granting them — a code reader needs Bluetooth, not your contacts or location history. If you already installed a doubtful app, uninstall it, revoke its permissions, and unpair the device; and if a cheap adapter behaves oddly with your car, stop using it rather than experimenting, since ECU faults cost far more than a genuine tool.","redFlags":["Price is a fraction of the genuine branded equivalent","Paired app requests location, contacts, or phone storage access","Device manufacturer and seller are unverifiable online","App has very few downloads or reviews on official app stores"],"whatToDoNow":["Purchase from a verified automotive retailer or the manufacturer's own store","Review app permissions before connecting — deny any that seem unnecessary","If already installed, remove the app and check your phone for unusual data usage","Report counterfeit tools to the original brand and the marketplace platform"],"faq":[{"question":"Can an OBD device physically damage my car?","answer":"Most legitimate and clone devices cannot directly damage your car through normal use, but a poorly designed clone sending incorrect CAN bus messages in rare cases may trigger fault codes. Using a reputable device eliminates this risk."},{"question":"What permissions should an OBD companion app reasonably request?","answer":"Bluetooth connectivity and little else. Requests for contacts, precise location history, storage, or phone identity are unrelated to reading engine codes and signal that data collection is part of the product."},{"question":"How can I tell a genuine branded device from a clone on a marketplace?","answer":"Buy from the manufacturer's official store or a verified retailer rather than third-party marketplace sellers, and be wary of prices far below the brand's own. Clones routinely reuse authentic product photos, so the listing image proves nothing."}],"lastReviewed":"2026-08-01"},{"slug":"can-i-get-my-money-back-after-paying-a-fake-online-store","url":"https://scamencyclopedia.org/questions/can-i-get-my-money-back-after-paying-a-fake-online-store","question":"Can I get my money back after paying a fake online store?","shortAnswer":"You may be able to chargeback the payment if you paid by credit or debit card. Act quickly — contact your card issuer within days of realising the store is fake.","explanation":"Fake online shops are common on social media, search ads, and search results. They collect payment for goods that never arrive or that are far inferior to what was advertised. Recovery chances depend heavily on how you paid. Credit card payments and most debit card payments offer chargeback rights — you can dispute the charge as 'goods not received' or 'not as described'. Bank transfers are much harder to reverse, and PayPal Goods and Services has its own buyer protection claim process.\n\nExpect delay tactics, because fake shops manage them deliberately: tracking numbers that never update or track a different parcel, offers of partial refunds, and requests to 'wait a little longer' — all designed to push you past your dispute window. Start the chargeback as soon as non-delivery becomes apparent rather than negotiating with the merchant indefinitely; you can always withdraw a dispute if goods genuinely arrive. When filing, provide your order confirmation, screenshots of the site and its claims, the payment record, and your attempts to contact the seller.\n\nA slightly inferior variant deserves mention: instead of nothing, a cheap token item arrives — a plastic ring instead of the advertised product — because a delivery record weakens naive disputes. Dispute these as 'not as described' and say clearly what was received. Afterwards, report the site to your national consumer body, the ad platform, and browser safe-browsing services; takedowns are slow, but reports shorten the site's profitable lifespan and protect the next buyer.","redFlags":["Site has no verifiable business address or contact details beyond a contact form","Domain was registered very recently","Social media account behind the ad was created within weeks","Prices are dramatically lower than established retailers"],"whatToDoNow":["Contact your card issuer immediately and file a chargeback dispute","Gather evidence: screenshots of the site, order confirmation, communications","Report the fake site to your national consumer authority","Report the ad to the platform it appeared on"],"faq":[{"question":"How long do I have to file a chargeback?","answer":"Chargeback time limits vary by card network and issuer but are typically 60 to 120 days from the transaction date. Act as quickly as possible."},{"question":"The store sent me a cheap item instead of what I ordered. Does that hurt my dispute?","answer":"No, but frame it correctly: dispute as 'not as described' rather than 'not received', and document what arrived with photos. Shipping a token item is a known tactic to create a delivery record — card issuers see it regularly."},{"question":"The seller keeps promising a refund if I wait. Should I hold off on the chargeback?","answer":"No — stalling is how fake shops run out your dispute clock. File the chargeback now; if a genuine refund arrives, the dispute can be closed. Waiting benefits only the merchant."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-google-ads-result-for-a-financial-service-always-safe","url":"https://scamencyclopedia.org/questions/is-a-google-ads-result-for-a-financial-service-always-safe","question":"Is a Google Ads result for a financial service always safe?","shortAnswer":"No. Fraudsters purchase Google Ads using brand names that closely resemble legitimate banks, investment platforms, or brokers. Always verify the URL before entering any details.","explanation":"Google Ads impersonation allows a scammer to place a sponsored search result that appears above genuine organic results when you search for a bank, investment broker, or financial service. The ad may show the correct brand name in the headline but link to a fraudulent website with a different domain. Entering your login or financial details on this fake site gives scammers immediate access.\n\nThe technique inverts a habit most people trust: searching for a company's name feels safer than typing a URL, but the top of the results page is sold, and ad platforms verify advertisers imperfectly. Display URLs shown in ads can differ from the true destination, and some campaigns route through redirect chains so the final phishing domain never appears in the ad at all. Cryptocurrency exchanges, banks, and loan services are the favourite targets because a single captured login converts directly into money.\n\nGoogle does actively remove fraudulent ads, but new ones appear quickly, so the defence has to be yours: before clicking any sponsored result for a financial service, check the displayed domain against the company's known official one — and prefer skipping the ads entirely in favour of organic results. Better still, bookmark the official sites of every financial service you use and navigate from the bookmark. If you did enter credentials on a fake page, change the password immediately, enable two-factor authentication, and contact the real company's fraud team.","redFlags":["Ad domain is slightly different from the service you know (extra word, different TLD)","Ad appears for a search you typed incorrectly or with a brand misspelling","Destination site requests login credentials before any personalisation step","SSL certificate is present but the company name in the certificate differs"],"whatToDoNow":["Always check the destination URL before entering any credentials","Bookmark official sites for financial services you use regularly","Report suspected impersonation ads to Google through the ad's 'Report this ad' option","If you entered credentials, change your password and contact the real company"],"faq":[{"question":"Does the padlock (HTTPS) confirm a site is safe?","answer":"HTTPS only confirms the connection is encrypted — it does not confirm the site is genuine. Phishing sites routinely use HTTPS and display the padlock."},{"question":"Why doesn't Google catch these ads before they run?","answer":"Ad review is largely automated and adversarial — scammers rotate domains, cloak destinations during review, and relaunch under new accounts when banned. Removal happens, but reactively, so some fraudulent ads are always live."},{"question":"Is it safer to skip ads and click the organic result instead?","answer":"Generally yes — organic rankings are much harder to fake for established brands. Safest of all is a bookmark or the official app, which removes search from the login path entirely."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-cold-email-offering-a-business-partnership-a-scam","url":"https://scamencyclopedia.org/questions/is-a-cold-email-offering-a-business-partnership-a-scam","question":"Is a cold email offering a business partnership or distribution deal a scam?","shortAnswer":"Unsolicited partnership emails can be advance-fee fraud, a pretext for data harvesting, or fake business opportunity scams. Verify independently before engaging.","explanation":"Business opportunity scams target entrepreneurs and company owners. A cold email claims a large international company wants to partner with your business, distribute your products, or invest in your operation. The email may include convincing company names and logos. As the conversation progresses, you are asked to pay due-diligence fees, legal fees, insurance deposits, or to send samples that are never returned. Alternatively, the entire communication is a pretext to extract your bank details for a payment that will never materialise.\n\nThe pitch is engineered for a small business's blind spot: growth opportunities feel rare enough that scrutinising one seems self-defeating. So the early stages are deliberately encouraging — enthusiastic replies, professional-looking purchase orders, even video calls — and the fee request appears only after you are invested in the deal. Common staging includes a 'contract signing' that requires flying to another country via a specific travel agent, or a 'registration' with a fictitious regulator whose fees you must cover. Each prop exists to make the payment feel like a formality within a larger prize.\n\nGenuine business development from large companies comes through verifiable channels and does not involve upfront fees from the recipient — real buyers spend money on you, not the reverse. Verify the company through official business registries, contact it independently through its public switchboard to confirm the individual exists and the approach is real, and treat any fee, however framed, as the end of the conversation.","redFlags":["Unsolicited email from an unknown large company wanting to partner immediately","Due diligence, registration, or compliance fee required before the deal proceeds","Correspondent uses a free email address despite claiming to represent a major company","Company name and address cannot be found through official business registries"],"whatToDoNow":["Search the company name on your national business registry before responding","Contact the company through their independently verified official website","Do not pay any fee to advance the partnership","Report suspicious emails to your national business fraud service"],"faq":[{"question":"Do genuine international business partnerships ever start by cold email?","answer":"Some genuine business development does begin with cold outreach, but real companies have verifiable contact details, do not require upfront fees, and are willing to be verified through official channels."},{"question":"They sent a signed purchase order for a large quantity of our product. Is that proof of intent?","answer":"No — a purchase order is just a document, and fake ones are standard props in advance-fee schemes. Intent is proven by verifiable identity and money moving toward you, never by paperwork that precedes a fee request."},{"question":"They want us to travel abroad to sign the contract through their agent. Is that normal?","answer":"It is a known script. The 'signing trip' funnels you into paying inflated travel, visa, and hospitality costs through their nominated agents, and in the worst cases exposes you to extortion on arrival. Genuine partners do not dictate your travel arrangements."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-text-from-amazon-about-an-order-i-didnt-place-a-scam","url":"https://scamencyclopedia.org/questions/is-a-text-from-amazon-about-an-order-i-didnt-place-a-scam","question":"Is a text from Amazon about an order I didn't place a scam?","shortAnswer":"Yes — texts about Amazon orders you did not place are phishing attempts designed to get you to click a link or call a number and hand over your account credentials.","explanation":"Amazon order phishing texts take a few forms: a delivery confirmation for something you did not buy, a cancellation request for a suspicious order, or a 'your account will be suspended' alert linked to an order. All lead to a fake Amazon login page or a call centre that tries to extract your account password, card details, or one-time codes.\n\nThe fake-order framing is clever because it weaponises honesty: you know you did not buy the expensive item mentioned, so 'cancelling' it feels urgent and virtuous, and that urgency carries you through the login page or onto the phone. Call-centre versions escalate further — the 'agent' claims your account was hacked, transfers you to a fake bank or 'fraud department', and may ask you to install remote access software or move money to 'safety'. What began as a text about a phantom order becomes a full bank-draining script.\n\nThe rule that defeats every version is to check inside the app, never through the message: go directly to the Amazon app or website, open your order history, and believe only what you see there. No order means the text was bait, and there is nothing to cancel. If an unfamiliar order genuinely appears, change your password, then use Amazon's own customer service through the app. Enable two-step verification, and forward phishing texts to your national reporting service so the sending numbers get blocked faster.","redFlags":["Text mentions an Amazon order or delivery you have no knowledge of","Link goes to a URL that is not amazon.com or your regional Amazon domain","Text asks you to call a number to 'dispute' the order","Text mentions your account will be locked unless you act immediately"],"whatToDoNow":["Do not click any link or call any number in the text","Log in to Amazon directly and check your order history","If an unauthorised order appears, report it to Amazon customer service","Enable two-step verification on your Amazon account"],"faq":[{"question":"Can someone place an Amazon order using my account without my password?","answer":"If your account is compromised through a credential breach or phishing, someone could log in and place orders. Check your order history directly in the app to see if any unauthorised purchases occurred."},{"question":"I called the number and they said my account was hacked. Are they right?","answer":"No — the call centre is part of the scam, and 'your account is hacked' is the pivot toward remote access or moving money. Hang up, check your real account through the app, and if you shared anything, contact your bank."},{"question":"Why would scammers claim I ordered something expensive?","answer":"Because a large phantom charge triggers immediate action. Your certainty that the order is wrong is exactly what pushes you to click 'cancel' or call — the reaction is the trap, not the order."}],"lastReviewed":"2026-08-01"},{"slug":"is-someone-who-sent-money-to-me-by-accident-running-a-scam","url":"https://scamencyclopedia.org/questions/is-someone-who-sent-money-to-me-by-accident-running-a-scam","question":"Is someone who sent money to me by accident running a scam?","shortAnswer":"Almost certainly yes. 'Accidental' transfers to strangers are a well-known scam opener: the money comes from a stolen account, and when you refund it, you are out of pocket.","explanation":"The accidental transfer scam works because the money that arrived in your account looks real. The sender asks you to return it, often urgently. You send your own money as the refund. Then the bank reverses the original 'accidental' payment because it came from a stolen account or a fraudulent card, leaving you down the amount you refunded. A variation involves the sender asking you to send the refund to a different account than the one it came from — a request with no honest explanation, since a genuine mistaken sender wants their money back where it came from.\n\nThe timing gap is the mechanism. Fraudulent payments can take days or weeks to be identified and clawed back, while your 'refund' leaves instantly and permanently. The scammer's urgency exists to make sure your real money is gone before the fake money is. Some versions add emotional pressure — a sender in apparent distress about rent or medical bills — or threats of police involvement to hurry you past calling your bank.\n\nThe correct process protects you completely: contact your bank, explain that an unknown payment arrived, and let them reverse it through official bank-to-bank channels. You are not obliged to act on the sender's instructions, only to not spend money that is not yours — so leave the amount untouched while the banks resolve it. If the sender becomes aggressive, stop responding and let your bank's fraud team handle all further contact.","redFlags":["An unexpected payment arrives from an unknown person","Sender contacts you urgently asking for the money back","They ask you to refund to a different account from where the money came","Sender has a sense of urgency and becomes aggressive if you suggest using the bank"],"whatToDoNow":["Do not send any money back directly","Contact your bank and explain the situation — they can facilitate the reversal","Do not withdraw or spend the amount while it is under dispute","Report the incident to your bank's fraud team"],"faq":[{"question":"Am I obligated to return money sent to me in error?","answer":"Yes — funds received in error are not yours to keep. But the correct process is a bank-facilitated reversal, not a private transfer. Never refund directly to an unknown person."},{"question":"The sender is threatening to report me to the police if I don't refund immediately. Should I worry?","answer":"No. Leaving the funds untouched and notifying your bank is exactly the right conduct, and no police force acts on a 'refund me faster' complaint. Threats and urgency are the scam's signature — let your bank handle the sender."},{"question":"Why do they ask for the refund to go to a different account?","answer":"Because the original sending account is stolen and will be frozen or reversed. Directing your 'refund' elsewhere separates your real money from the fraudulent trail — a request no genuine mistaken sender would ever make."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-fake-ebay-shipping-label-email-a-scam","url":"https://scamencyclopedia.org/questions/is-a-fake-ebay-shipping-label-email-a-scam","question":"Is a fake eBay shipping label or payment confirmation email a scam?","shortAnswer":"Fake eBay emails are a major phishing category. They aim to trick sellers into shipping goods before payment is confirmed or buyers into entering credentials on a fake login page.","explanation":"eBay phishing emails target both buyers and sellers. For sellers, a fake 'payment received' email claims funds are held pending shipment — the logic is that if you ship, eBay will release the money. No such mechanism exists; if payment was genuinely made, it appears in your account balance, not in an email. For buyers, fake order confirmation or account problem emails link to credential-harvesting pages.\n\nThe seller version usually starts with a real-looking buyer who pushes the conversation off-platform or invents complications: they 'paid extra' for international shipping to a relative, or the payment is 'held for security' until you email a tracking number. Every complication points the same way — you shipping goods against an email rather than against money visible in your account. High-value, easily resold items like phones and consoles attract these buyers within hours of listing, often with pressure to close the deal quickly.\n\nThe verification rule is mechanical and reliable: money in your actual account balance is real; money described in an email is not. Any legitimate message about your account will also appear in the My Messages centre inside the platform, so an 'eBay email' with no matching platform message has identified itself. Only ship when payment shows in your balance, keep all communication and shipping inside the platform where its protections apply, and report spoofed emails so the templates are blocked.","redFlags":["Email claims payment is held and will be released after you ship","Payment amount is above the listed price (classic overpayment setup)","Sender email domain is not @ebay.com or your local eBay domain","Email contains urgent language about your account being suspended"],"whatToDoNow":["Log in to eBay directly and check My Messages for any genuine communications","Only ship when you can see payment in your actual account balance","Report the phishing email to eBay's spoof report address","If you already shipped, open a case with eBay and contact your bank"],"faq":[{"question":"Does eBay hold funds pending shipment?","answer":"eBay may hold funds briefly as part of its managed payments process, but the status is shown inside your seller account dashboard — not in an email asking you to take action first."},{"question":"The buyer overpaid and wants me to refund the difference. What is going on?","answer":"That is the overpayment scam: the 'payment' is fake or will be reversed, and only your refund is real money. Never refund against an emailed payment notice — check your actual balance, and let the platform handle any genuine overpayment."},{"question":"The buyer wants the item shipped to a different address than the order shows. Should I?","answer":"No. Shipping anywhere other than the address in the official order can void your seller protection and is a common setup for claims that the item never arrived. Keep the transaction exactly as the platform records it."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-doorstep-solar-panel-or-cavity-wall-insulation-quote-a-scam","url":"https://scamencyclopedia.org/questions/is-a-doorstep-solar-panel-or-cavity-wall-insulation-quote-a-scam","question":"Is a doorstep solar panel or cavity wall insulation quote a scam?","shortAnswer":"Unsolicited doorstep quotes for home improvements often use high-pressure selling, inflated prices, or upfront deposits that disappear. Always get multiple written quotes and check contractor credentials.","explanation":"Doorstep home improvement fraud targets homeowners, particularly older residents, with offers of solar panel installation, cavity wall insulation, driveway resurfacing, or roof repairs — sometimes claiming to be affiliated with a government grant scheme. Tactics include artificially urgent pricing, scare tactics about structural damage, and pressure to sign and pay a large deposit the same day. Once a deposit is paid, work may never begin, be of poor quality, or create more damage than existed.\n\nThe scare variant deserves particular caution: a caller 'notices' loose tiles or dangerous wiring from the street, sometimes climbs up uninvited to 'check', and returns with photographs — not necessarily of your roof — showing urgent problems. Fear of leaks or collapse converts into a same-day contract at whatever price is quoted. The grant-scheme variant works the opposite emotion, dangling free or subsidised improvements that require an up-front 'survey fee' or your bank details to 'register eligibility'. Real grant schemes are applied for through official channels, not sold door to door.\n\nLegitimate tradespeople provide written quotes, do not require large upfront payments, are registered with professional bodies, and do not pressure you to decide on the day — a genuine price is still valid next week. Get at least three written quotes for any significant work, check contractors against your national trade register, and pay by card or staged payments where possible. Many countries also give you a legal cooling-off period for contracts signed at home; a trader who denies that right is telling you what they are.","redFlags":["Salesperson arrives unsolicited and insists the offer is only valid today","Large deposit required on the day of the quote","Contractor claims to be carrying out work in your street and has leftover materials","No written quote, contract, or cooling-off period offered"],"whatToDoNow":["Take the time to get at least three written quotes from verified tradespeople","Check contractor registration on your national trade body or consumer protection register","Never pay more than a small deposit before work begins","If you already paid and work was not completed, report to trading standards"],"faq":[{"question":"How do I check if a home improvement company is legitimate?","answer":"Search the company name on your national trade body register (such as TrustMark or Which Trusted Traders in the UK), check Companies House or equivalent, and read independent reviews on established platforms."},{"question":"A caller showed me photos of damage on my roof. Should I let them fix it?","answer":"Not on the spot. The photos may not be of your roof at all, and inventing urgent damage is a classic pressure tactic. Get an independent roofer or surveyor to inspect before agreeing to anything."},{"question":"Do I have a right to cancel a contract signed at my door?","answer":"In many countries, contracts signed in your home carry a statutory cooling-off period during which you can cancel in writing. Check your national consumer rules quickly — the window is short — and a trader who denies the right is itself a red flag."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-cryptocurrency-trading-bot-that-guarantees-profit-real","url":"https://scamencyclopedia.org/questions/is-a-cryptocurrency-trading-bot-that-guarantees-profit-real","question":"Is a cryptocurrency trading bot that guarantees profit real?","shortAnswer":"No trading bot can guarantee profit. Any service promising guaranteed positive returns from an automated crypto bot is either lying about its performance or is an outright scam.","explanation":"Crypto trading bot scams leverage the genuine existence of algorithmic trading tools to sell a fantasy of passive guaranteed income. The fraudulent bots operate as investment fraud: you deposit funds, a dashboard shows impressive gains, and initial small withdrawals may be permitted to build confidence. When you attempt a larger withdrawal, the platform claims technical issues, demands a tax payment, or simply stops responding.\n\nThe pitch survives scrutiny badly if you ask one question: if the algorithm reliably beat the market, why would its owners sell access to strangers instead of quietly trading their own capital? Legitimate quantitative trading firms do exactly that. The 'AI-powered' framing, screenshots of winning trades (losses simply are not shown), and fabricated celebrity endorsements exist to bypass that question. In most cases no trading happens at all — deposits go straight to the operators, and the dashboard is a spreadsheet dressed as a market.\n\nReal algorithmic trading tools exist, but they are sold as software with disclosed risk: performance varies, losing periods are normal, and nothing is guaranteed. Any product promising fixed returns is misrepresenting risk to defraud you. If you have deposited, stop adding funds — especially 'taxes' or 'unlock fees' — attempt to withdraw what you can, document everything, and report to your financial regulator. And be wary of the recovery-agent follow-up scam that targets people who post about their losses.","redFlags":["Bot is advertised with guaranteed daily or monthly profit percentages","Testimonials show consistently positive returns with no losing periods","Minimum deposit required to activate the bot's 'premium' performance","Withdrawal is blocked until you upgrade your account or pay a fee"],"whatToDoNow":["Stop depositing funds immediately","Attempt to withdraw any available balance","Report the platform to your national financial regulator","Be cautious of 'recovery agents' who target scam victims with fee-based recovery promises"],"faq":[{"question":"Are there legitimate crypto trading bots?","answer":"Yes — automated trading tools are used by professional traders, but they are sold as tools, not as guaranteed profit services. Performance varies, losses are possible, and no reputable tool promises fixed returns."},{"question":"The bot's dashboard shows my balance growing daily. Isn't that evidence it trades?","answer":"No — a dashboard is just a display the operators control. Without withdrawals working freely and trades verifiable on a real exchange account in your name, the numbers are set decoration."},{"question":"If the algorithm really worked, would it be sold to the public?","answer":"Almost certainly not. A genuinely profitable strategy earns most by trading its owners' capital quietly, and publicising it erodes the edge. Mass-marketed 'guaranteed' bots make their money from deposits, not markets."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-romance-partner-who-is-always-away-on-work-trips-a-scammer","url":"https://scamencyclopedia.org/questions/is-a-romance-partner-who-is-always-away-on-work-trips-a-scammer","question":"Is an online romantic partner who is always away on work trips or posted overseas a scammer?","shortAnswer":"Permanent absence from in-person meetings is one of the most consistent red flags in romance scams. Legitimate partners find ways to meet or at minimum do live, verifiable video calls.","explanation":"The 'always away' story gives romance scammers a permanent excuse for never meeting: they are on an oil rig, a military posting, a humanitarian mission, or a long-haul engineering project. These roles are chosen because they sound credible, preclude easy verification, and explain why video calls are 'difficult'. The absence also creates emotional longing that scammers leverage to ask for money — flight costs, emergency funds, business investment.\n\nNotice how the occupation does double duty in the script. It explains the absence, but it also sets up the financial requests: the rig contract whose payout is 'stuck', the deployment that 'froze' a bank account, the project needing a short-term bridge that will be repaid the moment they are home. A profession that simultaneously prevents meeting and generates money emergencies is not a coincidence — it is the scam's load-bearing structure, refined across thousands of victims.\n\nGenuine long-distance relationships involve verifiable, spontaneous video calls and, eventually, in-person meetings; real jobs, however remote, come with scheduled leave that people use. If someone you have been communicating with for months cannot meet and consistently deflects live video with excuses, weigh the pattern rather than the explanations, each of which sounds reasonable alone. Reverse image-search their photos, talk to someone you trust about the relationship — isolation is part of the method — and hold one line absolutely: no money to a person you have never met.","redFlags":["Has never been available for an in-person meeting despite months of contact","Video calls are always low quality, brief, or cancelled with excuses","Work involves an implausible combination of high earnings and permanent remote deployment","Financial requests follow a pattern of escalating emergencies"],"whatToDoNow":["Insist on a spontaneous live video call with a specific real-time action","Do not send money to someone you have never met in person","Reverse image-search all photos they have shared","Discuss the situation with a trusted friend or family member"],"faq":[{"question":"Is it unreasonable to request a spontaneous video call?","answer":"No — asking for a brief unplanned video call is a completely normal request in any online relationship. A genuine person will accommodate it; a scammer will consistently have reasons why it is not possible."},{"question":"Their job explanation always sounds plausible. Why should the pattern worry me?","answer":"Because scams are built from individually plausible pieces. Judge the whole: months of contact, zero meetings, deflected video calls, and money requests tied to the job. That combination has one common explanation, however reasonable each excuse sounds."},{"question":"They promise to repay everything when their contract pays out. Does that change the risk?","answer":"No — the future payout is part of the fiction and exists to reframe a gift as a loan. Money sent to someone you have never met should be assumed unrecoverable, whatever repayment is promised."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-premium-rate-phone-number-scam-call-real","url":"https://scamencyclopedia.org/questions/is-a-premium-rate-phone-number-scam-call-real","question":"Is a missed call from an unknown number that I called back a premium-rate scam?","shortAnswer":"Yes — 'wangiri' or one-ring scams use numbers in premium-rate ranges. Calling back can result in a large charge appearing on your phone bill.","explanation":"Wangiri (Japanese for 'one ring and cut') scams generate a single ring to your phone from a premium-rate number. The caller hangs up before you can answer, hoping curiosity will make you call back. The return call connects to a premium-rate line that charges a high per-minute fee, often with hold music or a lengthy recorded message designed to keep you on the line as long as possible.\n\nThe operation is fully automated: dialler software rings thousands of numbers in a burst, and the fraudsters share in the premium-rate revenue from everyone who returns the call. That is why the missed call is engineered to look tantalisingly incomplete — a single ring at an odd hour, sometimes repeated over several days, occasionally paired with a voicemail fragment that sounds cut off. Numbers in the +881, +882, +379, +269, and other less common country codes are frequent culprits, as are numbers that look local but route to premium services.\n\nThe defence costs nothing: an unfamiliar missed number with no message can simply be ignored, because anyone who genuinely needs you leaves a voicemail or sends a text. If curiosity persists, search the number online first — wangiri numbers accumulate complaint reports quickly. If you already called back and charges appeared, contact your carrier to dispute them and ask about barring international premium-rate calls, and report the number to your telecoms regulator so it can be blocked at network level.","redFlags":["Single ring then cut — you cannot answer in time","Number has an unusual country code or prefix you do not recognise","You have no reason to be contacted from that country or code","Online searches for the number show reports of premium-rate fraud"],"whatToDoNow":["Do not call back unfamiliar missed-call numbers immediately","Search the number online to check for premium-rate or scam reports","If you already called back and saw a charge, contact your carrier to dispute it","Report the number to your national telecoms regulator"],"faq":[{"question":"Can my carrier block premium-rate calls?","answer":"Most carriers allow you to bar calls to and from international premium-rate numbers. Contact your carrier to enable this option if you are concerned."},{"question":"The same number has rung once and hung up several days in a row. Why?","answer":"Persistence raises the odds you eventually call back — repeated single rings are the automated dialler retrying its list. Block the number and ignore it; engagement of any kind is what the operation is fishing for."},{"question":"Will my carrier refund charges from a wangiri call-back?","answer":"Policies vary: some carriers waive first-time premium charges on request, others only dispute them with the premium-line operator. Ask promptly either way, and request international premium-rate barring so it cannot recur."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-social-media-page-selling-event-tickets-legitimate","url":"https://scamencyclopedia.org/questions/is-a-social-media-page-selling-event-tickets-legitimate","question":"Is a social media page selling event tickets legitimate?","shortAnswer":"Social media ticket sellers are a high-risk category — fake pages proliferate ahead of popular events. Always buy from the official venue, promoter, or a recognised secondary ticketing platform.","explanation":"Ticket fraud spikes before high-demand events: major concerts, sports finals, and festivals. Scammers create Facebook pages or Instagram accounts with a name similar to a fan group or resale page and list tickets at face value or slightly above to seem credible. Payment is requested by bank transfer, PayPal Friends and Family, or gift card — none of which offer buyer protection. The tickets either never arrive, are duplicates sent to multiple buyers, or are forgeries.\n\nSold-out events create the exact conditions fraud needs: demand that exceeds supply, buyers who feel lucky to find anything, and a deadline that shuts down due diligence. Scammers also work the comment threads of official event pages, replying to anyone asking for spare tickets, and hijack the accounts of real people so the seller appears to have years of normal posts and mutual friends. A screenshot or PDF proves nothing — the same barcode can be sold to any number of buyers, and only the first scan at the gate gets in.\n\nOfficial box offices and recognised secondary markets, which are accountable under consumer protection law, remain the safest channels. If buying from a private seller, insist on transfer through the venue or ticketing platform's official transfer system, where the ticket moves into your own account — and treat refusal as your answer. Pay by credit card wherever possible; if you have been scammed, pursue a chargeback, report the profile to the platform, and report the fraud to your consumer protection body.","redFlags":["Social media account was created recently with few posts","Payment requested by bank transfer, PayPal F&F, or gift cards — not by protected card payment","Tickets are for a sold-out event at suspiciously close to face value","Seller cannot or will not transfer tickets through the venue's official system"],"whatToDoNow":["Buy only through the official venue, promoter, or recognised secondary platforms","If you must buy privately, use the venue's official electronic transfer system","Never pay by bank transfer or PayPal Friends and Family for tickets","If scammed, file a chargeback (if card was used) and report to your consumer protection body"],"faq":[{"question":"Is a PDF ticket I bought on social media valid?","answer":"PDFs can be forwarded to multiple buyers. The only way to verify a ticket is genuine is to check its barcode through the venue's system before the event — which is often only possible at the door."},{"question":"The seller has an old account with normal posts and mutual friends. Doesn't that make them safe?","answer":"Not necessarily — hijacked accounts are prized for ticket fraud precisely because their history looks trustworthy. The account's owner may not even know it is selling tickets. Judge the transaction terms, not the profile."},{"question":"Why does the official transfer system matter so much?","answer":"Because it is the only method that moves the ticket into your own account, where duplicates cannot be sold behind you. Screenshots and PDFs carry barcodes that can be copied endlessly — first scan wins, everyone else is refused entry."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-public-records-removal-service-legitimate","url":"https://scamencyclopedia.org/questions/is-a-public-records-removal-service-legitimate","question":"Is a public records removal service legitimate?","shortAnswer":"Some data removal services genuinely submit opt-out requests to data brokers, but many are ineffective, overpriced, or outright scams. Understand what you are buying before paying.","explanation":"Data broker opt-out scams target privacy-conscious consumers who want their personal information removed from people-search websites. Some services are legitimate — they automate the tedious manual process of submitting opt-out forms to dozens of data brokers. Others charge recurring fees, promise permanent removal (which is impossible — data reappears as brokers update from new sources), or simply collect your money without doing anything.\n\nThe honest version of this product is a convenience subscription, and it should be evaluated as one: what you are buying is automation and periodic resubmission, not a result you could never achieve yourself. That framing exposes the scam versions quickly. 'Permanent removal from the internet' is a promise no one can keep, one-time large payments contradict the recurring nature of the work, and a removal service demanding your full government ID number or passport is collecting the very data you are trying to suppress. The worst operators feed customer details back into the data economy they claim to fight.\n\nBefore paying, research the specific service on independent review platforms, confirm what brokers it actually covers and how often it resubmits, and understand that most data brokers accept free opt-out requests directly from individuals. If you have subscribed and can see no evidence of submissions or results, raise a dispute with your payment provider, and share only the minimum a removal request genuinely needs — typically name, general location, and the listing URLs.","redFlags":["Service promises permanent, complete removal of all your data","Upfront large one-time payment with little explanation of what is done","Service asks for your full Social Security number or passport to 'verify your identity'","No verifiable track record, customer reviews, or business registration"],"whatToDoNow":["Research the service on independent review platforms before subscribing","Understand that you can submit most data broker opt-outs yourself for free","Avoid services that request more personal data than your name and email","If already subscribed with no results, raise a dispute with your payment provider"],"faq":[{"question":"Can my data be permanently removed from the internet?","answer":"No service can permanently remove all of your data. Data brokers continuously harvest from public records and social media. Opt-outs must be resubmitted periodically as data reappears."},{"question":"What information should a legitimate removal service actually need from me?","answer":"Broadly your name, general location, and the listings to remove — enough to identify records, no more. Requests for full government ID numbers, passport scans, or financial details are a signal to walk away."},{"question":"How can I check whether a paid service is actually doing anything?","answer":"Search the people-search sites yourself before subscribing and again after a few weeks, and ask the service for submission logs. Removals that never appear, paired with vague reporting, justify a payment dispute."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-online-psychic-or-tarot-reading-subscription-a-scam","url":"https://scamencyclopedia.org/questions/is-an-online-psychic-or-tarot-reading-subscription-a-scam","question":"Is an online psychic or tarot reading subscription a scam?","shortAnswer":"Many online psychic platforms exploit vulnerable people with vague 'personalised' readings, subscription traps, and escalating offers that extract large amounts of money over time.","explanation":"Psychic and clairvoyant fraud online can range from clearly entertainment-labelled services to deeply manipulative operations that target lonely, grieving, or anxious people. Common patterns include: a free initial reading that leads to a paid subscription; 'personalised' messages that are clearly templated; escalating urgent warnings ('you are under a curse that only I can remove') that drive repeated payments; and 'limited time' prophecy offers.\n\nThe harmful operations follow an escalation ladder that is worth recognising. The free reading establishes contact and gathers personal details you volunteer; the first paid reading 'discovers' a problem — a curse, a blocked aura, an ex's negative energy; subsequent messages raise the stakes and the price of the 'work' needed to fix it. Fear and hope alternate on a schedule, and people in grief or crisis are targeted because they are seeking exactly the reassurance being sold. The most harmful versions extract very large sums over months from people who feel unable to stop.\n\nGenuine entertainment-labelled tarot and astrology platforms exist, but any service that creates dependency, fear, or urgency to pay more should be treated with serious caution — a practitioner who invents dangers only they can remove is running the oldest extraction script there is. Cancel payments through your bank if the service resists cancellation, keep the messages as evidence, and report exploitative operations to your consumer protection authority. If the messages have caused real fear, telling one trusted person breaks the isolation these schemes depend on.","redFlags":["Reading warns of a curse, bad luck, or danger that only they can address for a fee","Messages feel templated and not genuinely personalised","Urgent time-limited offers: 'this window closes in 24 hours'","Difficulty cancelling a subscription or escalating upgrade offers"],"whatToDoNow":["Cancel any subscription immediately through your payment provider if needed","Do not respond to further messages or pay for escalating offers","Contact your bank if payments are difficult to cancel","Report exploitative services to your national consumer protection authority"],"faq":[{"question":"Is it legal to charge for psychic readings?","answer":"In most countries, charging for entertainment-labelled psychic readings is legal. What is illegal is fraudulent misrepresentation — claiming genuine predictive powers to extract money — but enforcement varies."},{"question":"The reading knew things about me. How, if it's templated?","answer":"Mostly from what you supplied — sign-up forms, earlier messages, social profiles — combined with statements vague enough to fit almost anyone. Feeling 'seen' is the product; it is manufactured from your own inputs."},{"question":"A psychic says I'm cursed and only their paid ritual can remove it. What should I do?","answer":"Stop paying and stop engaging — the curse-removal demand is the defining move of this fraud, and the 'danger' will escalate for as long as you respond. Block the sender, cancel payments via your bank, and report the service."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-fake-government-website-asking-for-fees-to-apply-for-a-passport-a-scam","url":"https://scamencyclopedia.org/questions/is-a-fake-government-website-asking-for-fees-to-apply-for-a-passport-a-scam","question":"Is a website charging fees to help me apply for a passport a government scam?","shortAnswer":"Many unofficial websites charge facilitation fees to process applications you could submit directly to the government for free or at the official fee. Always use your national government's official passport portal.","explanation":"Passport and document application facilitator sites appear at the top of search results — sometimes as paid ads — and charge additional service fees above the official government fee to 'process' your application. While not always outright fraudulent, many collect personal documents, payment, and fees for a service you could perform yourself on the official government website. In the most harmful versions, the site is fake: your payment disappears, your identity documents are harvested for fraud, and no application is ever submitted.\n\nThe design of these sites is calculated ambiguity. Official-looking crests, flag colours, and names built from words like 'portal', 'official', and the document type create a government impression, while a disclaimer in small print — 'not affiliated with any government agency' — provides legal cover. The identity harvest can be worse than the wasted fee: a passport application contains everything needed to impersonate you, and documents uploaded to an unknown operator cannot be taken back.\n\nWhen applying for any government document — passport, visa, driving licence, birth certificate — navigate directly to the official government domain, found through your national government's main portal rather than through search ads. Official domains follow recognisable government patterns for your country, and official fees are published there. If you have already used a facilitator, check with the genuine issuing authority whether an application exists in your name, dispute the payment if nothing was submitted, and watch for identity misuse in the months that follow.","redFlags":["Website charges a service fee on top of the official government fee","Site does not clearly state it is not the government's official portal","Website appeared as a sponsored search result for 'passport application'","You are asked to upload identity documents to a non-government domain"],"whatToDoNow":["Navigate directly to your national government's official portal to apply","Do not upload identity documents to any unofficial third-party site","If you already paid, check whether your application was ever submitted and dispute if not","Report the misleading site to your national advertising standards body"],"faq":[{"question":"Are all facilitator sites fraudulent?","answer":"No — some legitimate expediting services exist for travellers needing urgent processing. But these are clearly distinguished businesses, do not hide their non-government status, and charge transparent fees on top of the official one."},{"question":"How do I recognise my government's official application website?","answer":"Start from your national government's main portal and follow its links, rather than searching for the document type. Official domains follow your country's government naming pattern, and the fee shown will match the officially published one."},{"question":"I uploaded my documents to one of these sites. What is the risk?","answer":"A passport-grade document set is enough for identity fraud, so monitor your credit file and accounts for unfamiliar activity, and consider your country's identity-theft protections. Also confirm with the real authority whether any application was actually filed."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-personal-trainer-or-coach-asking-for-full-payment-upfront-a-scam","url":"https://scamencyclopedia.org/questions/is-a-personal-trainer-or-coach-asking-for-full-payment-upfront-a-scam","question":"Is a personal trainer or online coach asking for full payment upfront a scam?","shortAnswer":"Full upfront payment for coaching with no contract or trial period is a risk. Ghost coaching scams — where payment is collected and the coach disappears — are increasingly common online.","explanation":"Online fitness coach fraud has grown with the popularity of social media wellness influencers. A coach builds an appealing profile with transformation photos (not always their own), offers a premium programme, and asks for full payment upfront — often a substantial sum. After payment, the coaching is minimal, completely generic, or the coach stops responding entirely. Unlike a regulated profession, there is no licensing body for most online coaching, making recourse difficult.\n\nThe grey zone is wide, which is what makes this fraud sustainable. Between the outright ghost — paid and gone — sits the volume operator: hundreds of clients on the same copied meal plan and template workouts, with 'check-ins' handled by assistants or not at all. The sales process is often the only polished part, featuring urgency ('two spots left this month'), screenshots of other clients' results, and a pivot to payment before you have asked basic questions about qualifications or what, concretely, is delivered each week.\n\nBefore paying substantial amounts, ask for a free introductory session, a short trial period, or payment in instalments — a coach confident in their service can accommodate all three. Get the deliverables in writing: how many check-ins, how personalised, what happens if you cancel. Check reviews on independent platforms, verify claimed certifications directly with the certifying body, and pay by credit card for chargeback rights. If promised coaching never materialises, dispute the payment with documentation of what was promised versus delivered.","redFlags":["Full payment required for a multi-month programme with no trial or instalment option","Certifications listed cannot be independently verified with the issuing body","Transformation photos are reverse-searchable to other people","Communication is entirely on one social media platform with no business registration"],"whatToDoNow":["Request a short free or low-cost trial before committing to a large payment","Pay by credit card for chargeback protection","File a dispute with your payment provider if coaching promised is not delivered","Report ghost coaches to your national consumer protection authority"],"faq":[{"question":"Is it ever reasonable to pay upfront for coaching?","answer":"Some legitimate coaches do require upfront payment for intensive programmes. The protection is paying by card (for chargeback rights), having a clear written contract, and verifying credentials before committing."},{"question":"What questions expose a low-quality or fraudulent coach before I pay?","answer":"Ask exactly what is delivered weekly, how programmes are personalised, who answers your check-ins, and what the refund terms are — in writing. Vague or defensive answers to concrete delivery questions are your warning."},{"question":"The coach's transformation photos are impressive. Do they prove the programme works?","answer":"No — transformation photos are routinely borrowed, licensed, or taken from other people's work, and even genuine ones say nothing about what you will receive. Verify the service and credentials, not the imagery."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-crypto-wallet-seed-phrase-recovery-service-legitimate","url":"https://scamencyclopedia.org/questions/is-a-crypto-wallet-seed-phrase-recovery-service-legitimate","question":"Is a crypto wallet seed phrase recovery service legitimate?","shortAnswer":"Seed phrase recovery services are almost exclusively scams. Anyone asking for your seed phrase will use it to steal your entire wallet — no legitimate service needs it.","explanation":"Your wallet seed phrase is the master key to all funds in that wallet. Any service that asks you to enter, share, or 'verify' your seed phrase — to recover a wallet, troubleshoot an issue, or claim a reward — is attempting to steal your cryptocurrency. Once a scammer has your seed phrase, they can import your wallet on any device and drain all funds within seconds.\n\nThese operators hunt where distress is visible. Post in a crypto forum or reply to a wallet company's social account about a problem, and 'support agents' appear in your DMs within minutes, sympathetic and technical-sounding, steering you toward a 'validation portal' or a form that asks for your phrase. Search ads for wallet support lead to fake help sites with the same goal. The scam works because the request is dressed as the solution to the exact problem you are having — but no genuine wallet company, exchange, or support channel ever needs your seed phrase to help you, because the phrase is not an account credential; it is the money itself.\n\nIf you genuinely need to restore a lost wallet, you use the seed phrase yourself, in the official app, on your own device — without sharing it with anyone. If you have typed it anywhere, treat the wallet as compromised immediately: create a new wallet with a new phrase and transfer everything out now, prioritising the most valuable assets, because draining bots often act within minutes.","redFlags":["Service asks you to type or photograph your seed phrase","Website or app requests your seed phrase to 'verify' or 'recover' your wallet","Customer support for a wallet or exchange asks for your seed phrase by DM","You found the recovery service through a social media ad or unsolicited DM"],"whatToDoNow":["Never share your seed phrase with any person or service under any circumstances","If you already shared it, move all funds immediately to a new wallet","Report the scam to your national cybercrime unit","Warn other users in community forums that might be targeted"],"faq":[{"question":"Is there any legitimate reason to give someone my seed phrase?","answer":"No. There is no legitimate reason to share your seed phrase with any person, website, app, or service. Anyone who asks for it is attempting to steal your funds."},{"question":"Support contacted me right after I posted about my wallet problem. Coincidence?","answer":"No — scammers monitor forums and social replies for exactly those posts, and real companies do not initiate support in DMs. Anyone who reaches out to you first about a wallet issue should be assumed hostile."},{"question":"I typed my seed phrase into a website but nothing has been taken yet. Am I safe?","answer":"No. The phrase may be exploited at any moment, often automatically. Create a fresh wallet with a new phrase now and move everything to it immediately — the old wallet is permanently compromised regardless of current balance."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-toll-road-fine-by-text-with-a-link-real","url":"https://scamencyclopedia.org/questions/is-a-toll-road-fine-by-text-with-a-link-real","question":"Is a toll road fine sent by text with a payment link real?","shortAnswer":"Toll authority smishing texts are among the most reported fraud types. Genuine toll agencies send notices by post, not by unsolicited text with a payment link.","explanation":"Toll road text scams have surged globally. Fraudulent texts claim you have an unpaid toll or a fine with an urgent payment deadline. The link leads to a fake toll authority payment page that captures your card details. The financial amounts in these texts are deliberately small — a sum most drivers would rather pay than investigate — because the goal is not the toll amount but the card details, billing address, and sometimes one-time codes entered on the fake page.\n\nThe texts are sent blind to vast lists of numbers, which produces the giveaway many recipients notice: people who have never driven the toll road named, or do not drive at all, receive the same message. If you do use toll roads, the coincidence can feel like confirmation — but the sender had no idea, and a genuine toll operator identifies your vehicle and plate, not just a phone number. In the US, most state toll agencies use official .gov domains and do not open collection by text; in the UK, legitimate operators send notices by post with vehicle details included.\n\nNever pay a toll through an SMS link. If you think a genuine charge might exist, go to the toll authority's official website or app directly and check your plate or account there. Report the smishing text to your national reporting service, and if you already entered card details, contact your bank to block the card and dispute any charges.","redFlags":["Text claims urgent toll debt with a same-day payment deadline","Link in the text uses a non-official domain","You rarely or never use the toll road mentioned","Text asks for your card details on a page reached via the SMS link"],"whatToDoNow":["Do not click the link — go to the toll authority's official website directly","Check your account there for any genuine outstanding balance","Report the smishing text to your national fraud reporting service","If you entered card details, contact your bank immediately"],"faq":[{"question":"What happens if I ignore a genuine toll fine?","answer":"Genuine toll fines escalate through formal written correspondence and eventually to collection proceedings — not through increasingly urgent text messages. Real agencies provide clear appeal processes."},{"question":"I did drive on that toll road recently. Doesn't that mean the text is real?","answer":"No — the texts go out in bulk, so some inevitably reach recent toll users by chance. A genuine notice references your vehicle and plate. Check your account on the operator's official site, never through the SMS link."},{"question":"Why do these texts ask for such small amounts?","answer":"A small 'fine' feels cheaper to pay than to question, and it keeps the fake page unremarkable. The real prize is your full card details and address, which are worth far more than the toll shown."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-low-interest-debt-consolidation-loan-by-phone-a-scam","url":"https://scamencyclopedia.org/questions/is-a-low-interest-debt-consolidation-loan-by-phone-a-scam","question":"Is a low-interest debt consolidation loan offered by phone a scam?","shortAnswer":"Cold call debt consolidation loan offers are a significant fraud risk — advance-fee fraud and phishing for financial details are both common in this category.","explanation":"Debt consolidation loan fraud targets people who are already in financial difficulty and therefore most vulnerable. A cold call or text promises a low-interest loan to consolidate all your debts into one affordable payment. The 'lender' may run a credit check, issue an 'approval', and then ask for an upfront fee — administration, insurance, or security deposit — before funds are released. This fee is taken and the loan never materialises. In a variant, the caller is phishing for your existing account details.\n\nThe cruelty is in the targeting: people juggling repayments are primed to say yes to relief, may have been declined by mainstream lenders, and often cannot afford to lose the fee they are asked to pay. The staged 'approval' matters to the script — being approved feels like the risky part is over, so the fee that follows reads as paperwork rather than the entire point of the exercise. Some operations buy lead lists from loan-comparison sites, so the call may follow a genuine loan search closely enough to feel connected to it.\n\nLegitimate lenders do not cold call with pre-approved consolidation offers, and legitimate loans deduct any fees from the advance — they never require money before funds are disbursed. Verify any lender on your national financial regulator's register of authorised firms before sharing details. If debt is the underlying pressure, free debt advice charities and government-backed services exist in many countries and will never charge upfront or cold call you with offers.","redFlags":["Unsolicited call offering a pre-approved debt consolidation loan","Upfront fee required before the loan funds are released","Lender cannot be verified on your national financial regulator's register","Pressure to provide bank details over the phone to the person who called you"],"whatToDoNow":["Do not pay any upfront fee to receive a loan","Verify the lender on your national financial regulator's authorised firms register","If in genuine debt difficulty, contact a free debt advice charity or service","Report cold call loan fraud to your national financial regulator and fraud service"],"faq":[{"question":"Are free debt advice services genuine?","answer":"Yes — many countries have free, government-backed or charity-run debt advice services. These never charge upfront fees and will not call you unsolicited with loan offers."},{"question":"The call came right after I searched for loans online. Is that a coincidence?","answer":"Not always — some comparison and application sites sell leads, and fraudulent operators buy them. A call that references your recent search still needs the same verification: check the firm on your regulator's register before going further."},{"question":"They said the fee is refundable once the loan is issued. Does that make it safe?","answer":"No. 'Refundable' fees are the standard reassurance in advance-fee loan fraud — the loan is never issued, so the refund condition never arrives. Genuine lenders take fees from the loan advance, not from you beforehand."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-charity-text-after-a-natural-disaster-real","url":"https://scamencyclopedia.org/questions/is-a-charity-text-after-a-natural-disaster-real","question":"Is a charity text asking for donations after a natural disaster real?","shortAnswer":"Genuine charities do use SMS donation campaigns, but disaster phishing texts impersonating charities appear within hours of major events. Always donate through the charity's verified official channels.","explanation":"Disaster donation phishing exploits compassion. Fraudulent texts arrive quickly after earthquakes, floods, or other events, using the names of well-known charities or inventing new credible-sounding relief funds. Links in the texts lead to fake payment pages that harvest card details — and unlike most phishing, these campaigns need no pretext or urgency invented, because the news supplies both.\n\nThe fake pages are often careful imitations of real charity donation forms, and the sums requested are kept small and typical of genuine appeals so nothing feels off. Some campaigns collect more than money: name, address, and card details entered on a donation form are a complete kit for card fraud. The unsolicited arrival is the tell — legitimate charities you have never supported do not have your number, and those you have supported use the channels you agreed to.\n\nTo donate safely after any disaster, navigate directly to the charity's official website — not through the link in a text — and check unfamiliar charity names against your national charity regulator's register before giving. Many countries also run official text-to-donate short codes for major charities, which are published by the charities themselves and provide an additional layer of confidence. If you donated through a link you now doubt, contact your bank to dispute the payment and watch the card for further charges; the details may be reused later.","redFlags":["Text arrives within hours of a disaster with a payment link","Charity name is very similar to but not exactly that of a known organisation","Link goes to a domain that differs from the charity's official website","Donation text asks for more personal information than a donation normally requires"],"whatToDoNow":["Go to the charity's official website directly rather than clicking any link","Verify the charity's registration number on your national charity regulator's database","Report suspicious donation texts to your national fraud service","If you donated to a fake charity, contact your bank to dispute the charge"],"faq":[{"question":"How quickly do fraudulent disaster relief texts appear?","answer":"Scammers monitor news and can launch campaigns within hours of a major disaster. This is faster than most people assume — scepticism about disaster donation texts in the immediate aftermath is fully warranted."},{"question":"How did a charity I've never heard of get my number?","answer":"It didn't — the texts are sent in bulk to generated or leaked number lists. Legitimate charities contact supporters who opted in, through channels they agreed to; unsolicited disaster appeals by SMS are presumptively fraudulent."},{"question":"I donated through a text link and now suspect it was fake. What should I do?","answer":"Contact your bank to dispute the payment and consider blocking the card, since the details may be reused for other charges. Then report the text to your national fraud service — disaster phishing campaigns are taken down faster when reported."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-negative-balance-on-a-marketplace-account-a-scam","url":"https://scamencyclopedia.org/questions/is-a-negative-balance-on-a-marketplace-account-a-scam","question":"Is a negative balance notification on a marketplace or payment account a scam?","shortAnswer":"Unexpected negative balance notifications are often phishing attempts. Log in directly to your account to verify any real balance issue — do not act on a text or email link.","explanation":"Negative balance phishing exploits the anxiety of owing money. An email or text claims your payment account, marketplace seller account, or digital wallet has gone into negative balance and must be topped up immediately or your account will be suspended. This creates urgency and a plausible reason to click a payment link — and for sellers, the threat of suspension carries extra weight, since a frozen account interrupts income as well as access.\n\nThe precision of the message is part of the craft. An oddly specific amount reads as the output of a real accounting system rather than a scam, and referencing refunds or chargebacks — things that genuinely can push seller accounts negative — makes the story land hardest with the people most likely to believe it. But the payment link is the tell: real platforms that allow negative balances resolve them through formal processes — a clear in-app notification, automatic collection from your linked funding source, or a proper invoice — not an alarming external message demanding a top-up within hours.\n\nVerify any balance claim by logging in directly through your usual bookmark or app; if no negative balance appears there, the message was phishing and can be reported to the platform. If a genuine balance issue does exist, resolve it entirely inside the app's own payment flow. And if you already paid through a message link, contact your bank to dispute the payment and change your account password, since the same page may have captured your login too.","redFlags":["Unexpected negative balance message from a platform where you rarely have issues","Text or email contains a payment link to clear the balance","Amount claimed is very precise to seem legitimate","Urgency: account suspended unless you top up within 24 hours"],"whatToDoNow":["Do not click any link in the message","Log in to the platform directly through the official app or website","If no negative balance appears in your account, report the message as phishing","If a genuine balance issue exists, resolve it through the app's own payment flow"],"faq":[{"question":"Can marketplace accounts genuinely go negative?","answer":"Yes — refunds, chargebacks, or fees can sometimes create a negative balance on seller accounts. But the platform will notify you inside the account interface, not only by an alarming external text."},{"question":"The message quoted an exact amount down to the penny. Doesn't that make it genuine?","answer":"No — precise figures are chosen because they look system-generated. A number in a message is free to fabricate; the only balance that matters is the one shown when you log in through your own app or bookmark."},{"question":"I paid a 'negative balance' through a link before checking. What now?","answer":"Dispute the payment with your bank, change the platform password (the fake page may have captured it), enable two-factor authentication, and report the message to the platform's phishing address."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-cashback-portal-that-requires-a-membership-fee-legitimate","url":"https://scamencyclopedia.org/questions/is-a-cashback-portal-that-requires-a-membership-fee-legitimate","question":"Is a cashback portal that requires a membership fee legitimate?","shortAnswer":"Most legitimate cashback sites are free to join. Portals charging an upfront membership fee should be researched carefully — some are pyramid-style schemes or simply collect fees with minimal real cashback.","explanation":"Cashback fraud has evolved alongside the legitimate cashback industry. Scam portals require an upfront 'activation' or 'membership' fee, promising substantial cashback on future purchases that offsets the cost many times over. The cashback either never materialises, is very difficult to qualify for, or the platform closes before payouts are processed. Pyramid-style variants incentivise you to recruit others who also pay the fee, with recruitment commissions masking the lack of genuine retail partnerships. Established, free-to-join cashback platforms operate by earning affiliate commissions from retailers when you make purchases through their links — they have no reason to charge you to sign up.\n\nThe fee itself changes the economics of the scheme. Once a platform's revenue comes from joining fees rather than retailer commissions, the operator has little incentive to deliver the cashback it advertises — and every incentive to keep recruiting new fee-payers. That is why these schemes lean so heavily on referral bonuses, countdown offers, and testimonials rather than verifiable retailer partnerships.\n\nBefore handing over any money, slow down and check the basics: how long the platform has existed, whether real users report actually withdrawing cashback, and whether the company behind it can be identified and verified. A legitimate portal survives that scrutiny easily; a fee-collecting scheme usually cannot.","redFlags":["Membership or activation fee required before any cashback can be earned","Unusually high promised cashback rates across all retailers","Strong incentives to recruit friends who must also pay to join","Platform cannot be found in established app stores or consumer review sites"],"whatToDoNow":["Do not pay any fee to join a cashback platform","Research the platform on independent consumer review sites","Use only established, free-to-join cashback providers with verifiable track records","Report fee-charging cashback schemes to your national consumer protection authority"],"faq":[{"question":"Do any legitimate cashback sites charge fees?","answer":"Some premium tiers with enhanced rates exist on legitimate platforms, but the basic service is always free. A mandatory upfront fee to access any cashback is a red flag."},{"question":"How do free cashback sites make money if they don't charge members?","answer":"They earn affiliate commissions from retailers each time you buy through their links, and share part of that commission with you. That model means the platform profits when you shop, not when you join — which is why a mandatory joining fee is such a strong warning sign."},{"question":"I already paid a membership fee. Can I get it back?","answer":"If you paid by card, contact your bank and ask about a chargeback, explaining that the promised service was not delivered. Keep screenshots of the promises made, and report the platform to your consumer protection authority even if recovery proves difficult."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-microsoft-365-phishing-email-asking-me-to-update-my-payment-real","url":"https://scamencyclopedia.org/questions/is-a-microsoft-365-phishing-email-asking-me-to-update-my-payment-real","question":"Is a Microsoft 365 email asking me to update my payment details real?","shortAnswer":"Microsoft 365 payment and billing emails are heavily cloned by phishers. Always verify billing issues by logging in to your Microsoft account directly — never through a link in an email.","explanation":"Microsoft 365 subscription billing scams are among the most-reported business phishing emails. They appear to come from Microsoft billing and warn that your subscription payment has failed and your account will be suspended unless you update your card details. For businesses, this creates particular urgency because losing email and Office tools is disruptive. The link leads to a convincing fake Microsoft login page that captures your Microsoft 365 credentials. With these credentials, attackers access your email, SharePoint, OneDrive, and any connected systems. Genuine Microsoft billing notifications can be verified inside the Microsoft 365 admin centre or your personal account billing section — always access these directly at account.microsoft.com.\n\nThese campaigns work because the fear is realistic: a lapsed subscription really would disrupt a business, and busy administrators process billing emails quickly. Attackers exploit that by matching Microsoft's template design, sender display names, and even footer text. The one thing they cannot fake is the destination — which is why checking the true domain behind a link, or skipping the link entirely, defeats the scam.\n\nIf credentials were entered on a fake page, treat the account as compromised. Change the password, sign out of active sessions, check mailbox rules for anything that forwards or hides messages, and review recent sign-in activity. Attackers often set up quiet forwarding rules so they can monitor a mailbox long after the password is changed.","redFlags":["Email warns of imminent subscription cancellation unless you update payment","Link goes to a URL that is not microsoft.com or microsoftonline.com","Email asks you to log in and then immediately re-enter your full card details","Sender address is not from an official microsoft.com domain"],"whatToDoNow":["Do not click any link in the email","Log in to account.microsoft.com or the Microsoft 365 admin centre directly","Check your billing status there for any genuine payment issues","Report the phishing email to Microsoft at phish@office365.microsoft.com"],"faq":[{"question":"What if the email is in the same format as real Microsoft emails I have received before?","answer":"Phishing emails precisely copy genuine template formatting. Visual similarity does not confirm authenticity — always verify through direct login."},{"question":"I entered my Microsoft 365 password on the linked page. What should I do first?","answer":"Change the password immediately, sign out all active sessions, and check your mailbox rules for forwarding or deletion rules you did not create. If it is a work account, tell your IT team straight away — attackers use compromised mailboxes to target colleagues and suppliers."},{"question":"Why do these emails target businesses in particular?","answer":"A compromised business mailbox is worth far more than a personal one. It gives access to invoices, supplier relationships, and colleagues who trust the sender — the raw material for invoice redirection fraud and further phishing."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-cryptocurrency-exchange-asking-for-kyc-verification-by-email-a-scam","url":"https://scamencyclopedia.org/questions/is-a-cryptocurrency-exchange-asking-for-kyc-verification-by-email-a-scam","question":"Is a crypto exchange asking me to re-verify my identity by email a scam?","shortAnswer":"Phishing emails impersonating crypto exchanges with KYC (know your customer) verification requests are very common. Always log in to the exchange directly — never upload documents via an email link.","explanation":"KYC phishing targets crypto exchange users who are accustomed to periodic identity verification requirements. A fraudulent email claims your account will be restricted unless you resubmit your identity documents through a link. The link leads to a fake exchange login page or document-upload portal. Uploading your identity documents to a fake site results in identity theft — your documents may be used to open accounts in your name, commit financial fraud, or be sold. Real KYC requests from exchanges appear inside your account dashboard after you log in directly. If an exchange genuinely needs updated verification, the request will be visible in your account and any document upload will happen through the exchange's secured platform — not via a link in an unsolicited email.\n\nIdentity documents are the real prize here. A scanned passport or driving licence paired with a selfie is enough to pass verification checks at other financial services, which means a successful KYC phish can turn into accounts opened in your name months later. That delayed harm is why this scam is more serious than ordinary password phishing.\n\nBuild one habit and this whole category fails: never act on account warnings through the message that delivered them. Open the exchange's app or type its address yourself. If nothing in your dashboard asks for verification, the email was fraudulent — and if something genuinely does, you will have completed it through the real site.","redFlags":["Email asks you to upload ID documents via a link rather than inside your account","Link goes to a domain that differs from the exchange's known address","Email threatens account suspension within 24-48 hours","Sender email address is not from the exchange's official domain"],"whatToDoNow":["Do not click the link or upload any documents","Log in directly to the exchange and check your account for genuine verification alerts","If you uploaded documents, report identity fraud to your national fraud service","Place a fraud alert on your credit file if documents were compromised"],"faq":[{"question":"Do exchanges ever email KYC requests?","answer":"Some exchanges send notification emails about upcoming verification requirements, but genuine requests direct you to log in to your account on their official site — they never include a document upload link directly in the email."},{"question":"What can criminals do with my ID documents?","answer":"Stolen identity documents are used to open bank and crypto accounts, apply for credit, and pass verification at services you have never used. They also circulate for resale, so problems can surface long after the original phishing email."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-two-factor-authentication-code-request-i-didnt-trigger-a-scam","url":"https://scamencyclopedia.org/questions/is-a-two-factor-authentication-code-request-i-didnt-trigger-a-scam","question":"Is a two-factor authentication code request I didn't trigger a sign I am being hacked?","shortAnswer":"Yes — receiving an unexpected 2FA code means someone has your username and password and is actively trying to log in to your account. Change your password immediately.","explanation":"When you receive a two-factor authentication (2FA) code you did not request, it means someone else has your password and has entered it on the login page — triggering the code that is now in your inbox or on your phone. The 2FA system is working as intended by stopping them at the second step, but your password is compromised. You should change your password immediately on that account and on any other service where you use the same password. Do not share the 2FA code with anyone — if someone calls or messages you asking for it, they are a scammer trying to complete the login they triggered. Enable a stronger second factor such as an authenticator app rather than SMS where the service allows it.\n\nThink about where the password came from. Most often it was exposed in a data breach of some other service and reused, or it was captured by a phishing page. Either way, the code you received is evidence that the credential is circulating and being tried — so treat the event as a prompt to clean up password reuse generally, not just on the one account.\n\nThe follow-up contact is the most dangerous part. Fraudsters who trigger a code will sometimes call or text posing as the company's security team and ask you to 'confirm' the code to block the attempt. Reading it out completes their login. No legitimate service will ever ask you to repeat a security code to a person.","redFlags":["You receive a 2FA SMS code without having tried to log in","You receive multiple codes in succession, suggesting repeated login attempts","Shortly after the code arrives, someone contacts you asking for it","You are unable to log in to your account — it may already be taken over"],"whatToDoNow":["Change your password immediately using a device you trust","Change the same password on every other site where you used it","Do not share the 2FA code with anyone who contacts you about it","Review recent account activity and check for any changes you did not make"],"faq":[{"question":"If I have 2FA enabled, is my account safe even if my password is stolen?","answer":"2FA significantly raises the difficulty for attackers, but it is not infallible. Real-time phishing sites can relay your 2FA code before it expires. Changing your password promptly eliminates the stolen credential."},{"question":"Should I be worried if I only received one code and nothing else happened?","answer":"A single code still means your password was entered by someone else. It may have been an automated attempt using breached credentials. Change the password anyway — the attempt failing this time does not mean the credential is safe."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-work-from-home-medical-billing-job-legitimate","url":"https://scamencyclopedia.org/questions/is-a-work-from-home-medical-billing-job-legitimate","question":"Is a work-from-home medical billing job offered online legitimate?","shortAnswer":"Work-from-home medical billing jobs are frequently used as a vehicle for advance-fee fraud or to recruit money mules. Verify any offer through a credentialed healthcare staffing agency.","explanation":"Medical billing is a genuine profession, but 'work from home' medical billing job ads — especially those found on general classified sites, social media, or arriving unsolicited — are frequently fraudulent. Common schemes include: charging for training software or certification kits that are never delivered; collecting personal and banking details under the guise of payroll setup; and using the cover of a billing role to recruit money mules who process stolen insurance payments. Legitimate remote medical billing roles are offered through established healthcare staffing agencies, require verifiable credentials, do not charge workers any fees, and pay through transparent payroll processes.\n\nThe medical setting is chosen deliberately. It sounds credentialed and stable, which makes the request to buy 'certified' software or a training package feel like a normal onboarding cost rather than the point of the scheme. It also provides cover for handling payments — a role that in reality is how stolen insurance or reimbursement money gets laundered through your account.\n\nEvaluate the employer, not the job description. A genuine healthcare employer can be found in business registries, has verifiable staff, interviews you properly, and never routes company money through an employee's personal bank account. If any one of those is missing, walk away regardless of how professional the paperwork looks.","redFlags":["Upfront cost for training software, a 'starter kit', or a certification","Company cannot be verified through healthcare licensing bodies or business registers","Role involves receiving and processing payments through your personal bank account","Salary promise is very high for entry-level billing work with no experience required"],"whatToDoNow":["Do not pay any upfront fee for a billing job","Verify the company through healthcare staffing directories and business registries","Do not provide banking details before signing a verifiable employment contract","Report fraudulent job offers to your national consumer protection body"],"faq":[{"question":"Are there genuine work-from-home medical billing jobs?","answer":"Yes — legitimate remote billing roles exist, primarily through established healthcare employers or certified staffing agencies. The key distinction is no upfront fee, verifiable employer, and standard payroll."},{"question":"The company sent me a contract and tax forms. Doesn't that prove it's real?","answer":"No — documents are easy to fabricate, and scammers routinely send polished contracts, onboarding packs, and tax forms. Verification comes from checking the company independently, not from paperwork the company itself controls."}],"lastReviewed":"2026-08-01"},{"slug":"why-did-a-stranger-send-me-money-on-cash-app","url":"https://scamencyclopedia.org/questions/why-did-a-stranger-send-me-money-on-cash-app","question":"Why did a stranger send me money on Cash App?","shortAnswer":"A random money transfer from an unknown person is almost always the first step in a scam — usually an overpayment or money-mule scheme.","explanation":"When a stranger sends you money without explanation, it is rarely accidental generosity. The most common scenario is a 'flip' or overpayment scam: they send funds, ask you to send something back or forward the money somewhere, and then the original payment is reversed or charged back, leaving you out of pocket. In other cases the funds are stolen money and you are being used as an unwitting money mule to move it through your account. Accepting and forwarding the money could make you liable for fraud even if you did not know the source. Cash App has very limited buyer protection and most transfers cannot be reversed once you send them.\n\nThe mechanics favour the scammer because of timing. Their payment to you may take days to be reversed if it was funded by a stolen card or disputed transaction, while anything you send is gone the moment you tap send. The whole scheme runs inside that gap: they need you to move money out before their money in gets clawed back.\n\nResist the instinct to be helpful. Sending an 'accidental' payment back to the sender, or on to the 'right' account they name, is exactly what the script depends on. Let the platform handle misdirected payments — that is what its support process is for, and it protects you from becoming part of a laundering chain.","redFlags":["Unsolicited payment from someone you don't know","They message asking you to send money back or to a third party","They say it was an 'accident' and ask for an immediate refund","Any claim you can 'flip' the money for a profit"],"whatToDoNow":["Do not send any money back — the original payment may be reversed later","Report the transaction to Cash App support immediately","Do not forward funds to any third party","If funds were stolen, contact your bank and local police"],"faq":[{"question":"Can a Cash App payment be reversed?","answer":"Payments made from a linked bank account or card can sometimes be charged back by the sender's bank. If you forward funds before that happens you lose them permanently."},{"question":"What if the person seems genuinely upset and says it was an honest mistake?","answer":"Real misdirected payments are resolved through the platform's support process, not by you sending money manually. Report it, leave the funds untouched, and let the platform reverse the original transfer if it was genuine."}],"lastReviewed":"2026-08-01"},{"slug":"is-it-normal-for-a-landlord-to-only-contact-by-text","url":"https://scamencyclopedia.org/questions/is-it-normal-for-a-landlord-to-only-contact-by-text","question":"Is it normal for a landlord to only contact me by text or email?","shortAnswer":"Legitimate landlords communicate by various means, but a landlord who refuses any phone or video call and pushes for a deposit before you view the property is a major warning sign.","explanation":"Rental scams frequently operate entirely over text or email because the 'landlord' is not local, does not own the property, or does not exist. Scammers often clone real listings from legitimate sites and set a below-market price to attract attention. They create urgency by saying many people are interested and ask for a holding deposit before you can view. Once payment is made they disappear or invent more fees. A genuine landlord or letting agent will agree to show you the property in person or via a verified video walkthrough before any money changes hands.\n\nMessage-only contact serves several purposes for a fraudster: it hides accents and locations, allows one person to run dozens of listings at once, and leaves you nothing verifiable — no voice, no face, no meeting. The 'working abroad' story exists to make that refusal sound reasonable while explaining why a viewing is impossible.\n\nTreat the viewing as non-negotiable. No matter how competitive the rental market feels, a property you cannot see — through a live, interactive video call at minimum — is a property you should not pay for. Genuine landlords lose nothing by showing the home; only fraudsters need you to pay sight unseen.","redFlags":["Refuses phone or video calls, communicates only by message","Asks for a deposit before you have viewed the property","Price is notably below market rate for the area","Listing photos appear on multiple sites with different names"],"whatToDoNow":["Never pay a deposit without a verified in-person or live video viewing","Reverse-image-search the property photos to check for duplicate listings","Search land registry or public records to verify the owner's name","Pay only by traceable bank transfer, never cash or gift card"],"faq":[{"question":"What if the landlord says they are abroad and can't meet me?","answer":"This is a very common cover story in rental scams. Always insist on verifying ownership and viewing the property before any payment."},{"question":"Is a pre-recorded video tour good enough proof?","answer":"No. Recorded footage can be copied from the original listing or filmed by someone with no right to let the property. Insist on a live video call where you can ask them to show specific details in real time, or an in-person viewing."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-email-from-docusign-or-adobe-sign-asking-me-to-sign-safe","url":"https://scamencyclopedia.org/questions/is-an-email-from-docusign-or-adobe-sign-asking-me-to-sign-safe","question":"Is an email from DocuSign or Adobe Sign asking me to review a document safe?","shortAnswer":"Fake DocuSign and Adobe Sign emails are a common phishing method. Verify the sender domain and log in directly — do not click the email link.","explanation":"Scammers send convincing fake e-signature request emails mimicking DocuSign, Adobe Sign, or HelloSign. The embedded 'Review Document' button leads to a phishing page that captures your login credentials or Microsoft/Google account details. Some fake links also download malware. The emails can look nearly identical to genuine ones, including correct branding and plausible sender names. Always verify by logging into your DocuSign or Adobe Sign account directly in your browser rather than following the link in the email.\n\nE-signature phishing is effective because these emails arrive in workplaces constantly and are designed to be actioned quickly. Attackers also know that a signing request implies something important — a contract, an HR document, a payment authorisation — so recipients hesitate to ignore it. That combination of routine and urgency is exactly what the scam borrows.\n\nThe safest workflow is to treat the email purely as a notification. If a document genuinely awaits you, it will be visible when you log in to the platform directly, or the sender can confirm it through a channel you already trust. A quick message to the supposed sender takes seconds and defeats even the most polished fake.","redFlags":["Sender email domain does not match docusign.com or adobe.com exactly","Urgency about a document expiring in hours","You were not expecting any document to sign","Clicking the link asks for your email or Microsoft/Google password"],"whatToDoNow":["Do not click links in the email — go directly to the service's website","Check the sender's full email address for misspellings","If you clicked and entered credentials, change your password immediately","Report the phishing email to the service and your IT team"],"faq":[{"question":"How do I tell a real DocuSign email from a fake one?","answer":"Real DocuSign emails come from docusign.net or docusign.com. They include a security code you set, and never ask for your password. If in doubt, log in at docusign.com directly."},{"question":"What if the signing request appears to come from a colleague or client I know?","answer":"Compromised business mailboxes are often used to send phishing to the victim's own contacts, so a familiar sender proves little. Confirm with the person by phone or chat before opening any unexpected signing request."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-text-asking-me-to-rate-my-recent-delivery-a-scam","url":"https://scamencyclopedia.org/questions/is-a-text-asking-me-to-rate-my-recent-delivery-a-scam","question":"Is a text asking me to rate my recent delivery a scam?","shortAnswer":"Texts prompting delivery feedback that include a link to claim a reward are often phishing attempts designed to steal card details.","explanation":"Parcel and delivery survey scams arrive by SMS shortly after you receive — or expect — a package. They mimic genuine post-delivery feedback requests from carriers like DHL, FedEx, or Royal Mail and offer a small gift or discount as a reward for completing a survey. The survey leads to a checkout page asking for card details to pay a nominal shipping fee on the reward. Those details are harvested by scammers. Real carriers do send satisfaction surveys but they do not require card payment, and any reward is credited automatically rather than requiring payment details.\n\nThe 'reward' is the tell. A survey that ends with a prize you must pay a small shipping fee to receive is not a survey at all — it is a card-harvesting page, and in many cases it also enrols you into a recurring subscription buried in the small print. The tiny fee exists purely to justify asking for full card details.\n\nEven the timing is manufactured. These texts are sent out in bulk, and with parcel volumes as high as they are, a large share of recipients will happen to be expecting a delivery. What feels like a personalised message about your parcel is a coincidence engineered at scale.","redFlags":["Survey link in an SMS you did not expect","Reward requires entering card details for a small shipping fee","The URL is not the carrier's official domain","Sender is an unknown short-code or mobile number"],"whatToDoNow":["Do not click the link or enter any card details","Delete the message","If you shared card details, contact your bank immediately to block the card","Report smishing to your carrier or national cyber authority"],"faq":[{"question":"Why do these messages arrive exactly when I'm expecting a parcel?","answer":"Scammers send these messages broadly, knowing that at any given moment many recipients will have a recent delivery. Timing that feels precise is usually coincidence."},{"question":"I entered my card details for the small fee. What should I expect?","answer":"Contact your bank immediately to block the card. Beyond one-off fraudulent charges, these pages often set up recurring subscription billing, so check your statements over the following weeks and dispute anything unfamiliar."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-caller-saying-my-national-insurance-number-is-compromised-a-scam","url":"https://scamencyclopedia.org/questions/is-a-caller-saying-my-national-insurance-number-is-compromised-a-scam","question":"Is a caller saying my National Insurance number has been compromised a scam?","shortAnswer":"Yes. No UK government body will call you to say your National Insurance number is compromised and demand you verify it or make a payment.","explanation":"This scam targets UK residents with a recorded or live call claiming their NI number has been used for criminal activity. The caller — often claiming to be HMRC or the police — says the number has been 'suspended' and that warrants are being issued. They ask you to confirm the number, pay a fee to 'protect' it, or stay on the line while the matter is investigated. HMRC and DWP do not make unsolicited calls about NI number fraud. The goal is to extract your real NI number, personal details, or payment. Variants of this scam occur in the US targeting Social Security numbers.\n\nThe script relies on fear of officialdom. Talk of suspended numbers, warrants, and criminal cases is designed to bypass your judgement and keep you on the line — sometimes under instruction not to hang up or tell anyone. That isolation is deliberate: the longer you stay engaged and silent, the harder it becomes to step back and question the premise.\n\nRemember what real investigations look like: they do not begin with a robocall, they do not require you to confirm your own number to a stranger, and no genuine officer will ever direct you to pay money to clear your name. Ending the call is not obstruction — it is exactly what the authorities themselves advise.","redFlags":["Automated or live call claiming your NI or SSN is linked to criminal activity","Threatens arrest, court action, or account freezing","Asks you to confirm your number to clear the issue","Requests payment by bank transfer, crypto, or gift card"],"whatToDoNow":["Hang up immediately","Do not confirm, deny, or read out your NI number","Report the call to the Report Fraud service (UK, formerly Action Fraud) or the FTC (US)","Contact HMRC directly using their official website if you have genuine concerns"],"faq":[{"question":"Can my NI or Social Security number actually be suspended?","answer":"No. National Insurance numbers and Social Security numbers cannot be suspended or deactivated. Any claim to the contrary is a scam."},{"question":"I confirmed my NI or Social Security number to the caller. How bad is it?","answer":"One number alone has limited use, but combined with your name, address, and date of birth it supports identity fraud. Monitor your credit file, consider a fraud alert, and report the incident to your national fraud service so the attempt is on record."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-whatsapp-message-from-a-celebrity-offering-a-prize-real","url":"https://scamencyclopedia.org/questions/is-a-whatsapp-message-from-a-celebrity-offering-a-prize-real","question":"Is a WhatsApp message from a celebrity offering me a prize real?","shortAnswer":"No. Celebrities do not contact members of the public directly on WhatsApp to give away prizes. This is a scam.","explanation":"Impersonation scams using celebrity names on WhatsApp are widespread. The fake profile often uses stolen photos, a verified-looking display name, and references the celebrity's real social media to appear convincing. The 'prize' — money, a car, brand-sponsored goods — requires you to pay taxes, shipping fees, or account verification charges before it can be released. Once you pay, the requests escalate or contact stops entirely. Real prize promotions run through official channels like verified social media accounts, dedicated websites, or registered competition operators and never require upfront fees.\n\nAsk what the celebrity would gain. Genuine public figures run giveaways — when they do — through verified accounts, in public, with published rules, because the point is publicity. A private message from an unverified number offers them nothing, which is why it is never how real promotions work. The privacy exists to protect the scammer, not to make you feel special.\n\nThe confidentiality request is the sharpest red flag in the script. You are told to keep the win secret so 'others don't get jealous' or the promotion 'isn't spoiled' — in reality so that no friend or family member gets the chance to point out the obvious before you pay the release fee.","redFlags":["Unsolicited WhatsApp message from a celebrity account","Prize requires payment of a fee, tax, or insurance before release","Account was created recently and has few contacts in common","Pressure to keep the prize offer confidential"],"whatToDoNow":["Do not pay any fee to claim the prize","Block and report the account on WhatsApp","Check the celebrity's official accounts to see if the promotion is listed","Report to your national consumer protection body"],"faq":[{"question":"What if the celebrity's name and photo look genuine?","answer":"Photos and names are easily copied. Verify by checking the celebrity's official verified accounts — legitimate prize campaigns are always publicly announced."},{"question":"Why did they contact me specifically?","answer":"They didn't — the same message goes to thousands of numbers, often harvested from leaked data or previous scam lists. Anyone who replies is passed along the script. There was no selection and there is no prize."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-text-saying-i-have-a-pending-benefits-payment-real","url":"https://scamencyclopedia.org/questions/is-a-text-saying-i-have-a-pending-benefits-payment-real","question":"Is a text saying I have a pending benefits payment real?","shortAnswer":"Texts claiming a benefits payment is waiting and asking you to click a link or confirm details are phishing scams imitating government benefit agencies.","explanation":"Scammers send SMS messages mimicking agencies like the DWP (UK), Social Security Administration (US), or Centrelink (Australia). The message says a payment is pending but your details need updating or a small fee is owed. The link leads to a fake government portal that harvests your personal details or payment information. Genuine benefit agencies communicate changes in writing by post, through their official online portals, or during pre-arranged phone appointments. They do not send links asking you to confirm personal data by SMS, and benefit payments never require an upfront fee.\n\nPeople who rely on benefits are targeted precisely because the stakes are high: the fear of a missed or suspended payment pushes recipients to act quickly. The fake portals are convincing copies, complete with official logos and reference numbers, and they typically ask for exactly the details needed to redirect payments or commit identity fraud — bank account, date of birth, and national identifiers.\n\nThe reliable defence is the direct route. Bookmark your government benefits portal, or search for it fresh each time, and check there whenever a message claims something needs your attention. If there is a genuine issue with your claim, it will be visible in your account or arrive in official post — never only in a text with a link.","redFlags":["Unexpected text about a benefits payment needing action","Link leads to a website that is not the official government domain","Request to confirm bank details, NI or SSN, or date of birth","Fee required to release the payment"],"whatToDoNow":["Do not click the link or provide any information","Log in to your benefits account through the official government website","Report the message to the relevant agency's fraud line","Forward SMS scams to 7726 (UK) or the FTC (US)"],"faq":[{"question":"How do I check if a benefits message is genuine?","answer":"Log in directly to your account on the official government website. Never use a link from a text message — search the agency name and navigate there yourself."},{"question":"I entered my bank details on one of these sites. What now?","answer":"Contact your bank immediately so they can watch for or block fraudulent activity, and alert the benefits agency through its official fraud line so your claim can be protected. Monitor both your bank account and any benefits correspondence closely in the following weeks."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-friend-request-from-someone-i-already-follow-on-facebook-a-scam","url":"https://scamencyclopedia.org/questions/is-a-friend-request-from-someone-i-already-follow-on-facebook-a-scam","question":"Is a friend request from someone I already follow on Facebook a scam?","shortAnswer":"Yes — receiving a second friend request from someone already on your friends list almost always means a scammer has cloned that person's account.","explanation":"Account cloning is a simple but effective scam. A criminal copies a real person's name, profile photo, and public information to create a near-identical account. They then send friend requests to that person's existing connections, hoping recipients assume it is a legitimate re-request. Once accepted, the cloned account may ask for money citing an emergency, send phishing links, or harvest information to target the victim's other contacts. The real account owner is typically unaware until friends inform them. Checking your current friends list before accepting any second request is the simplest defence.\n\nCloning takes minutes and requires no hacking — everything the scammer needs is visible on a public profile. That is also why the fake accounts feel authentic at first glance: the photo, name, and cover image are all genuinely your friend's, just copied. What the clone cannot copy is history — years of posts, mutual interactions, and old photos — which is why the profiles look thin when you actually open them.\n\nThe harm usually comes after acceptance, when the 'friend' messages you. Common follow-ups include an urgent financial problem, a grant or prize scheme they claim to have benefited from, or a link they insist you open. Any money request or investment tip from a recently duplicated account should end the conversation immediately.","redFlags":["New friend request from an account identical to someone already on your list","The new account has few posts, photos, or friends","Account was created recently","After accepting, the person quickly mentions a financial need"],"whatToDoNow":["Check your existing friends list before accepting the request","Message the real person through their established account to confirm","Decline and report the cloned account to Facebook","Alert the real account owner so they can report it too"],"faq":[{"question":"Can Facebook stop account cloning?","answer":"Facebook has tools to report cloned accounts and removes them when reported. Lock down your profile photos so only friends can see them — it makes cloning harder."},{"question":"Should I warn the real person if I get a duplicate request?","answer":"Yes — contact them through their established account or another channel. They can report the clone, warn their contacts, and stop others in their network from being tricked. Early warning is often what limits the damage."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-email-offering-a-job-as-an-online-english-tutor-a-scam","url":"https://scamencyclopedia.org/questions/is-an-email-offering-a-job-as-an-online-english-tutor-a-scam","question":"Is an unsolicited email offering me a job as an online English tutor a scam?","shortAnswer":"Unsolicited tutor job offers via email are frequently scams involving upfront fees, fake cheques, or money-mule recruitment.","explanation":"Legitimate tutoring platforms post vacancies publicly and require tutors to apply, submit qualifications, and go through an onboarding process. Unsolicited offers — particularly those offering high hourly pay for minimal experience — typically lead to one of several fraud types: an advance-fee scheme where you pay for background checks or course materials; a fake cheque scam where you receive an overpayment and are asked to return the difference; or money-mule recruitment disguised as payment processing for students. Native English speakers in countries with high unemployment are frequently targeted. Any tutoring job that contacts you first and promises quick, above-market pay deserves scrutiny.\n\nThe cheque variant deserves particular caution because it exploits how bank clearing works. You are 'overpaid' for equipment or your first month, asked to forward the excess to a 'materials supplier', and left liable when the original cheque bounces days later. The money you sent on was your own; the payment you received never existed.\n\nApproach it like any hiring decision in reverse: who is this employer, where are they registered, who else works for them, and why are they recruiting by cold email rather than through platforms where tutors apply? Legitimate tutoring companies have public application processes and no reason to chase strangers with offers.","redFlags":["You did not apply for the role","Unusually high hourly rate with no experience required","Request for upfront payment for materials, checks, or certification","Overpayment cheque scenario in the first week"],"whatToDoNow":["Do not pay any fee to start the job","Verify the company through independent searches, not links in the email","Do not accept or forward cheques or payments on behalf of the employer","Report the solicitation to your national consumer protection body"],"faq":[{"question":"Are there real online English tutoring jobs?","answer":"Yes — platforms like VIPKid, iTalki, and Preply offer genuine tutoring work. They require applications and never contact tutors unsolicited with job offers."},{"question":"They asked me to buy teaching software from a specific supplier and said I'd be reimbursed. Is that normal?","answer":"No. Directing new hires to purchase equipment or software from a named 'supplier' — usually with reimbursement promised later — is a classic advance-fee structure. Real employers provide tools or reimburse purchases you make from mainstream retailers."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-ticket-resale-site-other-than-the-official-venue-safe","url":"https://scamencyclopedia.org/questions/is-a-ticket-resale-site-other-than-the-official-venue-safe","question":"Is buying from a ticket resale site other than the official venue safe?","shortAnswer":"Unofficial ticket resale sites vary widely in legitimacy. Some are licensed secondary marketplaces; others are outright scams that sell fake or non-existent tickets.","explanation":"The secondary ticket market includes licensed resellers (such as Ticketmaster Resale, Viagogo, or StubHub in some regions) and outright fraudulent sites that list non-existent tickets, send unscanned PDF fakes, or take payment and disappear. Even licensed resale platforms can sell tickets that are invalidated by the original issuer. The safest approach is to buy from the official venue box office or its authorised partners. If you use a secondary market, verify the site is registered in your country, check consumer reviews on independent platforms, and use a credit card for chargeback protection.\n\nHigh-demand events are where this fraud concentrates. When official allocations sell out, buyers get less cautious, prices lose their meaning, and fraudsters list tickets that do not exist — or sell the same genuine ticket to several buyers, only the first of whom will get through the gate. Screenshots, PDFs, and confirmation emails prove nothing, since all are trivially copied or forged.\n\nWhere a platform offers a guarantee, read what it actually covers: some refund you if a ticket fails, others only offer replacements 'where available', and peer-to-peer sales arranged in comments or direct messages sit outside any protection at all. A payment method with dispute rights is your last line of defence — use it.","redFlags":["Price far above or far below face value","Site has no verifiable registered address or phone number","Payment accepted only by bank transfer or crypto","Ticket delivered as a PDF with no electronic validation link"],"whatToDoNow":["Buy from the official box office or venue-authorised resellers only","Check the resale site's registration and consumer reviews","Pay by credit card for chargeback protection","If a ticket is rejected at the gate, contact the reseller and your card issuer"],"faq":[{"question":"What if I paid for a fake ticket — can I get a refund?","answer":"Credit card payments may be recoverable through a chargeback. Bank transfers are harder to recover. Report the seller to consumer protection and the event organiser."},{"question":"Is buying tickets from someone in a fan group or on social media safe?","answer":"It is the riskiest route of all. There is no platform protection, sellers can vanish after payment, and bank transfers to individuals are very hard to recover. If you must buy this way, treat the money as at risk from the moment you send it."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-instagram-dm-saying-i-won-a-brand-giveaway-real","url":"https://scamencyclopedia.org/questions/is-a-instagram-dm-saying-i-won-a-brand-giveaway-real","question":"Is an Instagram DM saying I won a brand giveaway real?","shortAnswer":"Most Instagram DMs claiming you won a brand giveaway are scams run from fake accounts imitating genuine brands.","explanation":"Brand impersonation giveaway scams on Instagram are pervasive. A fake account mimicking a well-known company sends a DM saying you have been selected as a winner. To claim the prize you are directed to pay a small delivery fee, provide card details, or click a link that harvests your Instagram login. Legitimate brand giveaways announce winners publicly on the official, verified account; winners are never asked to send money or provide payment information. Verify any giveaway win by checking the official brand account independently rather than following the DM's links.\n\nLook closely at the account that messaged you and the differences appear quickly: a handle with an extra letter, underscore, or number; a following count far below the real brand's; and a very recent creation date. Scammers monitor the comment sections of real giveaways and message everyone who entered — which is why the contact can arrive moments after you interacted with a genuine post.\n\nCredential harvesting is often the real goal. The 'claim form' asks you to log in again, and once your Instagram password is captured the account is taken over and used to run the same scam on your followers. Enabling two-factor authentication limits the damage even if a password does slip out.","redFlags":["DM from an account that is not the brand's official verified page","Winning a giveaway you do not recall entering","Request for card details or a fee to receive the prize","Link in the DM goes to a non-brand domain"],"whatToDoNow":["Do not click links in the DM or provide card details","Search for the official brand account and check if the giveaway is listed","Report the impersonating account to Instagram","If you entered credentials, change your Instagram password immediately"],"faq":[{"question":"How do real brand giveaways work?","answer":"Genuine brand giveaways announce winners publicly on the brand's official verified account. They never DM you asking for card details or a delivery payment."},{"question":"I clicked the link and logged in before realising. What should I do?","answer":"Change your Instagram password immediately, enable two-factor authentication, and check that your linked email and phone number have not been altered. Warn your followers if the account sent messages without your knowledge."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-romance-partner-who-asks-me-to-invest-with-their-friend-a-scammer","url":"https://scamencyclopedia.org/questions/is-a-romance-partner-who-asks-me-to-invest-with-their-friend-a-scammer","question":"Is a romance partner who introduces me to their friend's investment platform a scammer?","shortAnswer":"Yes. This is the classic structure of pig-butchering — a romance relationship engineered to introduce you to a fake investment platform.","explanation":"In pig-butchering fraud, a stranger builds a romantic or close friendship over weeks before casually mentioning that a trusted friend manages an investment platform with exceptional returns. They offer to help you invest a small amount first. Initial withdrawals succeed to build trust, but the platform is entirely fabricated. As you deposit more, withdrawal requests are blocked and demands for taxes or fees escalate. Neither the romantic contact nor the investment platform is genuine. This fraud originates largely from organised criminal compounds and the 'friend' introduction is a scripted manipulation technique.\n\nThe pacing is the method. Weeks of warm, attentive conversation come first — good-morning messages, shared photos, talk of the future — precisely so that the investment suggestion, when it arrives, feels like something a caring partner would mention rather than a pitch. Refusing can be met with hurt feelings or gentle pressure, which is itself part of the manipulation.\n\nWatch the platform, not just the person. The sites and apps used in these schemes look professional, show live-looking charts, and display balances that grow convincingly — all fabricated. If a platform cannot be found on your financial regulator's register and was introduced to you by someone you have never met in person, no balance it displays is real.","redFlags":["New online contact steers conversation toward investment after gaining trust","Introduction to an investment platform not listed on official financial registers","Small initial withdrawals succeed but larger ones are blocked","Taxes, insurance, or fees must be paid before withdrawing profits"],"whatToDoNow":["Stop depositing money immediately","Do not pay any fee in hopes of releasing frozen funds","Report to your national financial regulator and fraud authority","Seek support — recovery from this type of fraud can involve significant emotional harm"],"faq":[{"question":"Can I recover money lost in a pig-butchering scheme?","answer":"Direct cryptocurrency losses are very difficult to recover. Report to authorities and your bank. Some victims have had partial bank-wire losses returned through fraud claims, but crypto transfers are rarely recoverable."},{"question":"The platform shows my balance growing and I already withdrew a small amount. Doesn't that prove it works?","answer":"No — early small withdrawals are part of the design, funded to build your confidence before larger deposits are requested. The displayed balance is a number on a screen controlled by the scammer, not money held for you."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-no-credit-check-personal-loan-offer-legitimate","url":"https://scamencyclopedia.org/questions/is-a-no-credit-check-personal-loan-offer-legitimate","question":"Is a no-credit-check personal loan offer legitimate?","shortAnswer":"Legitimate lenders always conduct some creditworthiness checks. A 'no credit check' loan offer — especially one requiring an upfront fee — is almost always a scam.","explanation":"Advance-fee loan fraud targets people who have been declined credit elsewhere. The scammer offers a loan that requires no credit check, promising guaranteed approval regardless of credit history. To activate the loan they ask for an upfront fee — labelled as insurance, a processing charge, or collateral. The fee is collected, no loan is ever disbursed, and the scammer moves on. Regulated lenders are legally required to assess affordability and creditworthiness. Genuine bad-credit lenders do exist but they never collect fees before releasing funds — any fee is deducted from the loan itself.\n\nThe scheme targets desperation and repeats itself. Once you pay the first 'insurance' fee, a new obstacle appears — a transfer charge, a compliance check, a final release payment — each small enough to seem worth it given the loan supposedly waiting. Some victims also hand over bank details and identity documents during the 'application', compounding the loss with identity-theft risk.\n\nThere is also a list-building angle: responding to one of these offers marks you as receptive, and your details are commonly sold on, producing a wave of further loan, grant, and 'compensation' offers. If the contact arrived out of the blue and the lender cannot be found on your regulator's register, the approval guarantee is the giveaway.","redFlags":["Guaranteed approval regardless of credit history","Upfront fee required before funds are released","Lender cannot be verified on a financial services register","Contact was made by cold call, text, or social media ad"],"whatToDoNow":["Never pay an upfront fee to secure a loan","Check the lender on your country's financial services register (FCA, CFPB, ASIC)","Report the offer to your national financial regulator","Seek debt advice from a non-profit credit counsellor if you need credit support"],"faq":[{"question":"Are there any legitimate no-credit-check lenders?","answer":"Some lenders use alternative credit data instead of traditional scores, but they still assess affordability. A lender who collects fees upfront before lending is not legitimate."},{"question":"I already paid a fee and now they're asking for another. Will paying release the loan?","answer":"No. There is no loan — each payment simply triggers the next invented fee. Stop paying, keep the correspondence as evidence, report to your financial regulator, and ask your bank whether the payments can be disputed."}],"lastReviewed":"2026-08-01"},{"slug":"can-i-get-scammed-by-scanning-a-qr-code-on-a-flyer","url":"https://scamencyclopedia.org/questions/can-i-get-scammed-by-scanning-a-qr-code-on-a-flyer","question":"Can I get scammed by scanning a QR code on a flyer or poster?","shortAnswer":"Yes. QR codes on printed flyers can point to phishing pages, fake payment portals, or malware downloads just like digital QR codes.","explanation":"Physical QR code scams — sometimes called 'quishing' — appear on flyers, fake invoices, posters, and even stickers placed over legitimate codes in public spaces. Scanning takes you to a convincing fake page that may mimic a bank login, a parking payment portal, a prize claim form, or an app download. Since the URL is not visible before scanning, it is harder to check legitimacy. Always preview the URL your scanner shows before tapping through, verify the domain matches the legitimate service, and never enter payment details or passwords on a page you arrived at via an unexpected QR scan.\n\nQR codes shift trust from something readable to something opaque. Printed URLs can be judged at a glance; a QR square gives no hint of its destination, and context does all the persuading — a parking meter, an official-looking flyer, a restaurant table sticker. Criminals exploit exactly that by placing their codes where a code is expected, including directly over genuine ones.\n\nPayment situations deserve the most care. Scanning to pay for parking, charging, or a fine is now routine, and fake payment portals reached by QR are correspondingly common. Where possible, use the operator's official app or type the address printed on signage rather than trusting the square — especially when the page that loads asks for card details.","redFlags":["QR code on a sticker that appears to cover an original printed code","Scanned URL domain does not match the expected service","Page asks for card details, login credentials, or personal data","Flyer arrived unsolicited by post or was left on your vehicle"],"whatToDoNow":["Check the URL your scanner shows before opening it","Do not enter payment or login information on unexpected pages","Remove and report stickers placed over legitimate public QR codes","Use a QR scanner app that shows a URL preview before loading"],"faq":[{"question":"Is it safe to scan a QR code at a legitimate business?","answer":"Generally yes, but check that the QR code is original and not covered by a sticker. If the URL shown after scanning does not match the business domain, do not proceed."},{"question":"Can scanning a QR code hack my phone by itself?","answer":"Simply decoding a QR code is harmless — the risk begins with what you do next: opening the link, entering details, or installing something. A scanner that previews the URL before opening gives you a moment to judge the destination."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-pop-up-saying-my-computer-is-infected-and-to-call-a-number-real","url":"https://scamencyclopedia.org/questions/is-a-pop-up-saying-my-computer-is-infected-and-to-call-a-number-real","question":"Is a pop-up saying my computer is infected and to call a number real?","shortAnswer":"No. Legitimate antivirus software and operating systems never display phone numbers to call. This is a tech-support scam pop-up.","explanation":"Tech-support scam pop-ups are designed to look like Windows or macOS system alerts or antivirus warnings. They typically play an audio warning, fill the screen, and display a phone number. Calling the number connects you to scammers who claim to be Microsoft, Apple, or an antivirus company. They ask for remote access to your computer, show you 'evidence' of infection using normal system tools, then demand payment for a fix or a support contract. Sometimes they install actual malware during the session. Windows and macOS do not display warning pop-ups with phone numbers. Close the browser tab or reboot your computer to dismiss the pop-up.\n\nEverything about the pop-up is engineered to prevent calm thought: the siren audio, the flashing warnings, the countdown, the full-screen lock that hides your browser controls. It looks like a system failure, but it is only a web page — usually reached through a malicious ad or a mistyped address — and it has no ability to inspect your machine or detect any infection.\n\nThe phone call is where the real damage happens. Once connected, the 'technician' takes remote control, stages fake evidence in system logs, and pushes for payment — and remote sessions have been used to install malware, harvest saved passwords, or drain bank accounts while the victim watches a blank screen. If remote access was granted, treat every credential used on that machine as compromised.","redFlags":["Full-screen browser pop-up with a warning message and phone number","Audio alarm or automated voice claiming your computer is infected","Pop-up appears while browsing a website, not from your antivirus program","Caller asks for remote access software like AnyDesk or TeamViewer"],"whatToDoNow":["Do not call the number — close the browser tab or force-quit the browser","If the pop-up does not close, restart your computer","Run a scan with a trusted antivirus tool if you are concerned","If you gave remote access, disconnect, run a scan, and change all passwords"],"faq":[{"question":"Can closing the pop-up cause any damage?","answer":"Simply seeing or closing a scam pop-up does not damage your computer. The risk only arises if you call the number, give remote access, or download software."},{"question":"I called the number but hung up without paying. Am I at risk?","answer":"If you gave no remote access and no payment or personal details, the main risk is follow-up calls — scammers keep lists of people who responded. Block the number and hang up on any 'refund' or 'follow-up' callers, which are a second round of the same fraud."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-recruitment-agency-asking-for-payment-to-find-me-a-job-legitimate","url":"https://scamencyclopedia.org/questions/is-a-recruitment-agency-asking-for-payment-to-find-me-a-job-legitimate","question":"Is a recruitment agency asking me to pay a fee to find me a job legitimate?","shortAnswer":"In most countries it is illegal for a recruitment agency to charge job seekers fees. Any agency asking for payment upfront is a major red flag.","explanation":"Genuine recruitment agencies are paid by employers, not candidates. Charging job seekers for placement is prohibited under labour laws in the UK, EU, US, and many other jurisdictions. Fee-charging 'agencies' often target vulnerable groups — recent graduates, immigrants, and people who have been unemployed for a long time — and promise access to exclusive jobs or guaranteed placement. Fees are labelled as registration costs, CV writing, background checks, or training. No job materialises, and victims lose the fee. Some operations also harvest identity documents submitted as part of the application.\n\nThe exclusivity pitch is the hook to examine. Claims of unadvertised roles, guaranteed placement, or special employer relationships exist to explain why this opportunity is worth paying for when every other agency is free. Real recruiters cannot guarantee any placement — hiring decisions belong to employers — so a guarantee is not a premium service, it is a fiction.\n\nIdentity harvesting can be the quieter half of the scheme. A convincing 'registration' process collects your passport scan, address history, and bank details for payroll — a complete identity-theft kit — whether or not a fee is ever charged. Provide documents only after you have verified the agency exists, is licensed where required, and has a traceable office and staff.","redFlags":["Agency asks for payment before placing you with an employer","Fees described as registration, CV preparation, or background-check costs","Cannot verify the agency on a government or industry register","Promises of exclusive or guaranteed job placement"],"whatToDoNow":["Refuse to pay any fee to an agency as a job seeker","Check the agency's registration with the relevant licensing body","Report fee-charging agencies to your national labour authority","Seek free job-seeking services through government employment centres"],"faq":[{"question":"Is it ever acceptable to pay an agency as a job seeker?","answer":"Optional, separately purchased services like career coaching or CV writing from an independent specialist can be legitimate. What is not acceptable is payment as a condition of being placed in a role."},{"question":"The agency says the fee is refundable once I'm placed. Does that make it legitimate?","answer":"No — refundable-fee promises are a standard way to make the charge feel safe. Since no placement ever comes, the refund condition is never met. Legitimate agencies are paid by employers and charge candidates nothing."}],"lastReviewed":"2026-08-01"},{"slug":"what-does-it-mean-if-an-email-has-my-real-password-in-it","url":"https://scamencyclopedia.org/questions/what-does-it-mean-if-an-email-has-my-real-password-in-it","question":"What does it mean if a scam email includes my real password?","shortAnswer":"The password was obtained from a data breach. It does not mean your device is hacked — but you should change that password immediately.","explanation":"Sextortion and blackmail emails that include one of your actual passwords are designed to shock you into believing the sender has hacked your device. They claim to have filmed you through your webcam, accessed your contacts, or installed spyware. In almost every case, the password was taken from a past data breach and included to make the threat credible. These emails are sent in bulk to thousands of people at a time. No footage exists, no device was compromised. The appropriate response is to change the exposed password everywhere it was used and enable two-factor authentication — not to pay the demanded ransom.\n\nThe password is doing all the persuasive work, and it is usually old. Breach data circulates for years, so the credential quoted is often one you used long ago on a forum or shopping site. The rest of the email — the surveillance claims, the split-screen video threat, the technical jargon — is a template sent unchanged to enormous mailing lists, with only the password and payment address swapped in.\n\nPaying does not make anything go away; it marks you as responsive, and follow-up demands are common. The correct response costs nothing: retire the exposed password everywhere it was used, switch to unique passwords with a password manager, add two-factor authentication, and delete the email. There is no footage to release and no negotiation to have.","redFlags":["Email displays a password you recognise","Claims to have recorded you through your webcam","Demands payment in Bitcoin to prevent release of footage","Gives a short deadline to increase panic"],"whatToDoNow":["Do not pay — there is almost certainly no footage","Change the exposed password immediately on all sites where you used it","Enable two-factor authentication on important accounts","Check haveibeenpwned.com to see which breach exposed your password"],"faq":[{"question":"Should I cover my webcam?","answer":"Covering your webcam is a reasonable precaution. In this type of scam, the sender almost certainly has no actual footage, but a camera cover removes the possibility entirely."},{"question":"The email says they'll send the video to my contacts within days. Should I warn anyone?","answer":"There is no video, and the deadline exists only to rush you into paying. Nothing happens when it passes — the same threat is sent to thousands of people, and the sender has no access to your contacts."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-call-offering-to-reduce-my-energy-bill-a-scam","url":"https://scamencyclopedia.org/questions/is-a-call-offering-to-reduce-my-energy-bill-a-scam","question":"Is a cold call offering to reduce my energy bill a scam?","shortAnswer":"Cold calls promising to cut your energy bill are often scams or high-pressure sales for overpriced switching services. Genuine tariff switching is done through regulated comparison sites.","explanation":"Energy bill reduction scams and misleading sales calls spike during periods of high energy costs. Some are outright frauds that collect personal and banking details under the guise of setting up a new tariff. Others are aggressive marketing for switching brokers that earn large commissions and may switch you to a worse deal. Genuine tariff comparison is free through regulated comparison sites and is initiated by the consumer, not an unsolicited caller. In the UK, cold-calling for energy switching without prior consent is prohibited under Ofgem and ICO rules.\n\nA common opening gambit is false familiarity: the caller implies they are from your current supplier, or from a 'government-backed' savings scheme, and asks you to confirm account or bank details they should already have if they were genuine. Anything you confirm — supplier name, tariff, direct debit details — becomes material for either a fraudulent switch or a later, better-targeted scam.\n\nIf cheaper energy is genuinely the goal, take the initiative yourself: check your current tariff in your supplier's app or on a bill, then compare through a regulated comparison service in your own time. Nothing an unsolicited caller offers requires a same-day decision, and the pressure to decide now is itself the strongest evidence of bad faith.","redFlags":["Unsolicited call claiming to represent your energy supplier","Promises of very large savings with no comparison shown","Requests bank details, direct debit details, or account numbers during the call","Urgency — offer only available today"],"whatToDoNow":["Do not provide personal or payment details to an unsolicited caller","Check your current tariff directly with your supplier","Use a regulated comparison site to find genuine deals","Register with the Telephone Preference Service (UK) or Do Not Call registry (US) to reduce cold calls"],"faq":[{"question":"Can scammers switch my energy without my permission?","answer":"Fraudulent switching ('slamming') has occurred. If your supply is switched without your consent, contact your regulator — you have the right to be returned to your original tariff at no cost."},{"question":"The caller knew my name and address. Doesn't that mean the call is genuine?","answer":"No — names, addresses, and even supplier details circulate through data breaches and marketing lists. Genuine suppliers verify you; they do not ask you to hand over account or bank details to prove who you are to them."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-vehicle-history-check-site-that-charges-upfront-legitimate","url":"https://scamencyclopedia.org/questions/is-a-vehicle-history-check-site-that-charges-upfront-legitimate","question":"Is a vehicle history check site that charges me before showing results legitimate?","shortAnswer":"Some vehicle history check sites are legitimate but charge per report. However, fake or misleading sites exist — verify the provider's credentials before paying.","explanation":"Checking a vehicle's history before purchase is important and worth paying for. Genuine services like Carfax, AutoCheck, or the UK's HPI Check provide detailed reports for a fee. However, the demand for cheap checks has produced a range of low-quality and fraudulent sites that take payment and return limited, fabricated, or stolen data. Red flags include unusually low prices, no verifiable company registration, and reports that look visually generic. Always use a provider recognised by your national motoring authority and check reviews independently before paying. Never rely solely on a history check provided by the seller — obtain your own from a verified provider.\n\nThe cheap-check ecosystem thrives on search ads. Type the obvious phrase and heavily discounted 'full reports' fill the results — some from sites that simply repackage free public data, others that generate a reassuring report for any registration entered. The danger is not just the wasted fee; it is making a major purchase on the strength of a document with no real data behind it.\n\nKeep the incentives straight when buying: the seller benefits if problems stay hidden, so a report they supply — however genuine it looks — is not due diligence. A check you commission yourself from a recognised provider, cross-referenced against the vehicle's documents and physical condition, is a small cost against the price of a car with hidden finance or accident history.","redFlags":["Price far below the recognised market rate for a history check","No verifiable company registration or contact details","Report data looks generic or cannot be traced to official vehicle records","Seller provides the check — conflicts of interest are obvious"],"whatToDoNow":["Use a vehicle history provider endorsed by your national motoring authority","Check independent reviews for the service before paying","Obtain your own report separately from the seller's","Cross-reference key data points such as mileage and ownership history"],"faq":[{"question":"Does a clean history check mean the vehicle is safe to buy?","answer":"A clean report reduces risk but cannot catch everything — vehicles are sometimes clocked, repaired without declaration, or have outstanding finance in another name. Always have a physical inspection too."},{"question":"The seller showed me a report that looks official. Should I trust it?","answer":"Treat it as unverified. Reports are easily edited or generated by low-quality sites, and the seller controls what you see. Run your own check with a recognised provider using the registration and VIN you read off the car yourself."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-call-from-a-known-relatives-number-asking-for-bail-money-real","url":"https://scamencyclopedia.org/questions/is-a-call-from-a-known-relatives-number-asking-for-bail-money-real","question":"Is a call from a known relative's number asking for bail money a real emergency?","shortAnswer":"Probably not. This is a variant of the grandparent scam using spoofed or cloned numbers. Verify directly before sending any money.","explanation":"Scammers spoof or take over phone numbers to call family members in distress-sounding scenarios — car accidents, arrests, hospital visits. The caller uses information gathered from social media to sound convincing. Sometimes an accomplice poses as a lawyer, doctor, or police officer to add credibility. Even if the number on your screen belongs to your relative, that number may have been spoofed or the relative's device borrowed by a scammer. Before sending money, hang up and call your relative back on a number you know independently. Contact other family members to confirm.\n\nThe emotional design is precise: a loved one in danger, a time limit, and a reason for secrecy — embarrassment, a court gag order, or 'don't worry the family'. Each element removes a safeguard. Panic clouds judgement, urgency prevents verification, and secrecy stops the one phone call that would collapse the story. Recognising that structure matters more than spotting any single detail.\n\nAgree a family code word or verification question in advance, and make it standard practice that any emergency money request — whatever the voice sounds like — gets confirmed through a second channel before anything is sent. Payment method is the other tell: no genuine court, hospital, or lawyer collects urgent payments in gift cards, wire transfers, or cryptocurrency.","redFlags":["Relative's voice sounds different or connection is poor","Urgency prevents you from verifying — 'do not tell mum'","Payment requested by wire transfer, gift card, or crypto","A second person — 'lawyer' or 'officer' — takes the call to confirm the need"],"whatToDoNow":["Hang up and call the relative back on a number you know independently","Contact another family member to verify the story","Never send bail money, gift cards, or wire transfers without verification","Report to local police and your national fraud authority"],"faq":[{"question":"Can AI clone a family member's voice to make the call more convincing?","answer":"Yes — AI voice-cloning tools can produce convincing imitations from short audio clips found on social media. Even if the voice sounds exactly right, always verify through an independent call."},{"question":"The caller knew personal details about my relative. How?","answer":"Social media, obituaries, data breaches, and public records supply names, relationships, schools, and travel plans. A few accurate details are easy to gather and are included precisely to pre-empt your doubts — they prove research, not identity."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-new-online-store-with-only-five-star-reviews-trustworthy","url":"https://scamencyclopedia.org/questions/is-a-new-online-store-with-only-five-star-reviews-trustworthy","question":"Is a new online store with only five-star reviews trustworthy?","shortAnswer":"Not necessarily. An exclusively positive review profile — especially on a newly launched site — is a common feature of fake online stores.","explanation":"Fake online stores manufacture credibility by populating review sections with paid or fabricated five-star ratings before launch. Genuine stores accumulate a natural spread of ratings over time, including some neutral or critical feedback. Other signs of a dubious store include prices far below market rate, limited contact information, no verifiable physical address, and checkout pages that do not match the site's domain. Even a store with many positive reviews may be fraudulent if those reviews were seeded at launch, all arrived within a short window, or are superficially similar in language and structure.\n\nRead reviews the way an investigator would: look at their distribution over time, the specificity of the complaints and praise, and whether reviewers have any history beyond this one store. Genuine feedback mentions concrete details — sizing, delivery times, customer service exchanges — and includes middling ratings. Fabricated sets cluster at five stars, use interchangeable superlatives, and often share odd phrasing traits because they were produced in bulk.\n\nReviews should also never be the only check. A minute spent on the domain's age, a searchable business address, a working phone number, and the store's presence on independent review platforms tells you more than any testimonial the store hosts about itself. When the deal looks exceptional and every signal but the reviews is missing, the reviews are the decoration on a trap.","redFlags":["Hundreds of five-star reviews on a very recently registered domain","All reviews arrived within a short time window","No neutral or critical reviews at all","Prices are steeply below market rate"],"whatToDoNow":["Check the site's domain registration date using a WHOIS lookup","Search the business name alongside 'review' or 'scam' on independent forums","Look for reviews on third-party platforms like Trustpilot or Google","Use a credit card for purchases to enable chargeback if goods do not arrive"],"faq":[{"question":"Is there a tool to check if reviews are fake?","answer":"Services like Fakespot and ReviewMeta analyse Amazon and some other platforms for suspicious review patterns, but they cannot check all independent stores."},{"question":"The store has some negative reviews too. Does that mean it's genuine?","answer":"Not by itself — some fake-store operators seed a few mild negatives to look authentic. Weight independent platforms over on-site testimonials, and treat recent registration, unrealistic prices, and missing contact details as stronger signals than the review balance."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-text-from-my-bank-with-a-one-time-code-always-safe","url":"https://scamencyclopedia.org/questions/is-a-text-from-my-bank-with-a-one-time-code-always-safe","question":"Is a text from my bank with a one-time passcode always safe to use?","shortAnswer":"Only if you initiated the action it authorises. One-time passcodes you did not trigger indicate someone else is trying to access your account.","explanation":"One-time passcodes (OTPs) sent by your bank provide a second layer of security — but only when you are the one who requested them. Scammers use real-time phishing and social engineering to steal OTPs while they are valid. In one common scenario, the fraudster has already obtained your card or account details and calls you impersonating bank fraud prevention. They claim to need you to read out the code to 'verify' or 'cancel' a transaction. Reading the code to them gives them exactly what they need to complete a transaction they are already authorising on a different screen. Your bank will never ask you to read back or confirm a code sent to you.\n\nThe psychology is inverted cleverly: the caller frames the code as proof of your identity — 'read it back so I know it's really you' — when in fact it is proof that their identity is false. Some operations run the fraud in real time, triggering the code from the bank's own login page while keeping you on the phone, so the SMS genuinely comes from your bank at the exact moment they predict. Authentic origin, fraudulent purpose.\n\nTreat every unexpected OTP as an alarm rather than noise. It means someone, somewhere, has enough of your details to reach the final step of a login or payment. Check the account directly, update the password if anything looks wrong, and never let an inbound caller — however knowledgeable or patient — turn the alarm into their key.","redFlags":["OTP arrives when you are not logging in or making a payment","Caller or SMS asks you to share the code you just received","Urgency — code about to expire, account under threat","Multiple OTPs in quick succession"],"whatToDoNow":["Never share an OTP with anyone, including callers claiming to be your bank","If an OTP arrives unexpectedly, log in directly and check for unauthorised activity","Change your online banking password if you suspect compromise","Contact your bank immediately using the number on the back of your card"],"faq":[{"question":"Can scammers trigger an OTP without knowing my password?","answer":"If they have your card number, or have tricked your bank's phone system using your personal details, they may be able to initiate steps that generate an OTP — the code is the last piece they need."},{"question":"The SMS really came from my bank's usual number. How can the call still be a scam?","answer":"The code is genuine — the scammer triggered it by starting a login or payment with your details. The SMS sender being authentic tells you nothing about the person on the phone asking you to read it out."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-door-to-door-seller-of-cleaning-products-or-tools-a-scam","url":"https://scamencyclopedia.org/questions/is-a-door-to-door-seller-of-cleaning-products-or-tools-a-scam","question":"Is a door-to-door seller of cleaning products or tools running a scam?","shortAnswer":"Not always a fraud, but high-pressure door-to-door sales tactics are common and in some countries heavily regulated. Never feel obliged to buy on the spot.","explanation":"Door-to-door selling exists on a spectrum from legitimate direct-sales businesses to outright fraud and harassment. At the legitimate end, regulated sellers must clearly identify themselves, cannot misrepresent products, and must give you a legal cooling-off period to cancel. At the fraudulent end, sellers charge far above market value for low-quality goods, use high-pressure or intimidation tactics, do not provide a receipt, and claim the special price is only available now. Some operations are fronts for casing properties for burglary. You have the right to close the door at any time and are never obligated to buy at the door.\n\nHigh-pressure doorstep selling works by controlling the moment: the deal is 'only available now', the seller is 'in the area today', and standing in your own doorway makes many people feel socially obliged to keep listening. Legitimate businesses survive a customer sleeping on the decision; pressure to sign or pay immediately exists because scrutiny — a price comparison, a search on the company, a chat with a neighbour — kills the sale.\n\nA door camera or a simple 'no cold callers' notice reduces visits, and for anything beyond trivial value the rule of thumb holds: take the details, close the door, and decide later. If the offer is genuine it will survive that; if the seller becomes insistent, that reaction is the information you needed.","redFlags":["Refuses to leave a price list or written quote","Claims the price is only valid if you decide right now","Cannot provide company name, registered address, or ID badge","Uses guilt or pressure tactics if you try to end the conversation"],"whatToDoNow":["Ask for the salesperson's ID, company registration, and a written quote","Say you will think about it and ask them to come back — a genuine seller agrees","If you do buy, exercise your cooling-off cancellation right in writing","Report aggressive tactics to your local consumer authority"],"faq":[{"question":"What is the cooling-off period for door-to-door sales?","answer":"In the UK and EU, consumers have at least 14 days to cancel most door-to-door contracts. The US FTC provides a 3-day cooling-off rule. Check local law for specifics."},{"question":"An elderly relative keeps buying from doorstep sellers. What can I do?","answer":"Post a no-cold-callers notice, ask their bank about transaction alerts, and check whether local trading standards run doorstep protection schemes. Regular conversations about recent visitors — without blame — catch problems earlier than bank statements do."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-online-course-that-promises-to-replace-my-income-legitimate","url":"https://scamencyclopedia.org/questions/is-an-online-course-that-promises-to-replace-my-income-legitimate","question":"Is an online course promising to replace my income in 30 days legitimate?","shortAnswer":"Income-replacement claims attached to online courses are almost universally misleading marketing. Genuine education providers do not make financial guarantees.","explanation":"Courses promising to replace a full-time income within weeks — through dropshipping, day trading, affiliate marketing, or social media — use aspirational lifestyle marketing and vague testimonials to command high prices. What is typically sold is access to generic or publicly available information, a members' area with little support, and upsells to increasingly expensive coaching tiers. While online courses can provide genuine value, regulators in the UK (ASA), US (FTC), and Australia (ACCC) have taken action against course sellers making unsubstantiated income claims. Legitimate educators show verifiable credentials, realistic outcomes, and clear refund policies.\n\nThe funnel matters more than the course. These operations spend heavily on ads showing rented lifestyles, run 'free trainings' that are extended sales pitches, and price the real product in tiers — the course you buy exists mostly to sell you the mastermind, the coaching calls, and the package above it. Income claims survive because refunds are hedged with conditions and disappointed buyers blame themselves.\n\nTwo questions cut through most of it: does the seller demonstrably earn from the skill itself, or from selling courses about it? And can you find independent students — not affiliates earning commission — who achieved the promised result? If the evidence trail always leads back to marketing material, the product is the marketing.","redFlags":["Guaranteed income or specific earnings within a short timeframe","Testimonials from people with no verifiable online presence","High pressure to buy before a countdown timer expires","Limited preview of course content before purchase"],"whatToDoNow":["Search the creator's name alongside 'review' or 'complaint' independently","Ask for a free preview or trial before paying","Check the refund policy in detail before purchase","Report misleading income claims to your national advertising authority"],"faq":[{"question":"Are all paid online courses a scam?","answer":"No — many provide genuine value. The issue is unsubstantiated income guarantees. Focus on courses from verifiable experts with transparent content previews and fair refund policies."},{"question":"The course has a money-back guarantee. Doesn't that remove the risk?","answer":"Read the conditions — many guarantees require completed coursework, documented 'implementation', or expire before you can meaningfully judge results. Chargebacks are also contested aggressively. A refund policy is only as good as the friction between you and the refund."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-payment-link-sent-by-a-seller-on-facebook-marketplace-safe","url":"https://scamencyclopedia.org/questions/is-a-payment-link-sent-by-a-seller-on-facebook-marketplace-safe","question":"Is a payment link sent by a seller on Facebook Marketplace safe?","shortAnswer":"Only use Facebook's built-in checkout for Marketplace purchases. External payment links sent by sellers are a common fraud vector.","explanation":"Marketplace scams often involve a seller moving the transaction off-platform by sending a payment link to a third-party site or requesting a bank transfer, PayPal Friends and Family, or crypto. Once you pay outside the platform you lose all buyer protections. The link may go to a fake checkout page that harvests card details without delivering any goods. Alternatively, the seller may accept your payment and immediately become uncontactable. Facebook's Checkout with Purchase Protection is available on eligible listings — use it when possible and treat any off-platform payment request as a red flag.\n\nSellers push you off-platform for one reason: the protections work. Inside checkout, payment is tied to delivery and disputes have an arbiter; outside it, your bank transfer is a gift and a fake checkout page can harvest the card itself. The stories vary — fee avoidance, a broken checkout, a courier who 'handles payment' — but the destination is always the same: money moved beyond recall before any goods exist.\n\nFor local pickup items, the equivalent discipline is simple: inspect first, pay at handover, and be wary of any choreography that separates your payment from the item — deposits to 'hold' it, couriers arriving after you pay, or a switch to a different payment method at the last minute.","redFlags":["Seller asks you to pay through a link or email outside Marketplace","Request to pay by PayPal Friends and Family, gift card, or crypto","Seller is reluctant to meet locally or allow collection","Price is significantly below market value"],"whatToDoNow":["Use Facebook Checkout or meet locally with cash for physical items","Never pay by bank transfer or Friends and Family to someone you have not met","Report the listing and seller to Facebook if asked for an off-platform payment","If you paid by card through a suspicious link, contact your bank immediately"],"faq":[{"question":"Does PayPal Goods and Services protect me for Marketplace purchases?","answer":"PayPal Goods and Services offers buyer protection but only if the seller ships the item. For local collection or services, the protection is limited — always evaluate the listing carefully."},{"question":"The seller says an external link avoids Marketplace fees and saves us both money. Is that ever true?","answer":"The savings pitch is the standard cover story. Whatever the fee arithmetic, paying outside the platform trades a small cost for the entire loss of buyer protection — which is precisely the trade a scammer needs you to make."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-text-saying-i-have-an-unread-voicemail-a-scam","url":"https://scamencyclopedia.org/questions/is-a-text-saying-i-have-an-unread-voicemail-a-scam","question":"Is a text saying I have an unread voicemail and to click a link a scam?","shortAnswer":"Yes. Texts with voicemail notification links are a widespread phishing method — the link leads to a credential-stealing page or malware download.","explanation":"Fake voicemail notification SMS messages are a well-documented phishing method called 'smishing'. The message mimics notifications from network carriers, Google Voice, or iPhone voicemail. The link does not play a voicemail — it opens a page that imitates a login screen to steal your Apple ID, Google account, or mobile carrier credentials. On Android, some variants attempt to install malware disguised as a voicemail app. Genuine voicemail notifications from your carrier do not require you to log in via a link in an SMS; you access them through your phone's built-in dialler.\n\nThe lure works because voicemail sits at an odd intersection: rarely used, vaguely official, and just plausible enough that a 'missed message' triggers curiosity. The linked pages adapt to their audience — showing an Apple-styled login to iPhones and a Google one to Android devices — and the malware variants ask for permissions that let them read your messages, including the one-time codes that protect your bank.\n\nIf an app was installed from one of these links, act on the assumption it can see your SMS: remove it, run a security scan, and change important passwords from a different device. On any device, credentials entered on the fake page should be changed immediately and reused versions of that password retired everywhere.","redFlags":["SMS voicemail notification from an unknown sender or short code","Link domain does not match your carrier's official domain","Page asks for account login after clicking","Device prompts you to install an app to hear the voicemail"],"whatToDoNow":["Do not click the link — delete the message","Access voicemail through your phone's dialler or official carrier app","If you clicked and entered credentials, change passwords immediately","Report smishing to your carrier by forwarding to 7726 (UK/US)"],"faq":[{"question":"Can clicking the link without entering anything cause harm?","answer":"On some devices, visiting a malicious URL can trigger automatic downloads, especially on older Android versions. Avoid clicking even to 'just look'."},{"question":"I installed the 'voicemail app' it offered. How serious is that?","answer":"Serious — these apps typically request SMS access, which exposes your two-factor codes. Delete the app, run a reputable security scan, change key passwords from another device, and watch your accounts for unauthorised logins."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-email-from-a-law-firm-saying-i-am-named-in-a-will-real","url":"https://scamencyclopedia.org/questions/is-an-email-from-a-law-firm-saying-i-am-named-in-a-will-real","question":"Is an email from a law firm saying I am named in a will real?","shortAnswer":"Unsolicited emails claiming a distant relative named you in a will are an advance-fee fraud. Legitimate estate solicitors do not contact beneficiaries by cold email.","explanation":"The unclaimed inheritance scam relies on the small but plausible chance that you have a distant relative whose estate needs a beneficiary. A fake law firm or solicitor's email says you share a surname with a deceased client who left a substantial estate. To proceed, you are asked to pay legal fees, taxes, or document preparation costs. The firm name is fabricated or cloned from a real firm. No inheritance exists. Genuine probate solicitors locate beneficiaries through official genealogy records and government probate services — they verify your identity in person and never request payment before confirming entitlement.\n\nThe economics run on hope and sunk cost. The claimed estate is large enough that each fee — court stamp, transfer tax, anti-laundering certificate — looks trivial by comparison, and once you have paid one, abandoning the claim means admitting the earlier payments were wasted. That escalation, not the first fee, is where the real losses accumulate.\n\nVerification is straightforward if an inheritance were real: probate is a public, documented process, the handling firm would appear on its jurisdiction's solicitor register with matching contact details, and no legitimate practitioner needs your money to release yours. A registry lookup and an independent call to the firm's listed number — not the number in the email — settles it in minutes.","redFlags":["Cold email from a law firm you have never heard of","Claim of inheritance from a distant or unknown relative","Request for upfront legal fees or taxes to release the estate","Vague details about the deceased that change between messages"],"whatToDoNow":["Do not pay any fee","Search the law firm name and jurisdiction independently to verify registration","Contact the country's probate court if you believe an inheritance may be real","Report the email to your national consumer fraud authority"],"faq":[{"question":"Is it possible to be named in a will by a stranger?","answer":"It is possible but rare. Genuine cases are handled through official probate channels and solicitors who can be verified on their professional register — never by a cold email."},{"question":"The email includes official-looking documents with stamps and signatures. Are they proof?","answer":"No — death certificates, court letters, and bank statements are routinely forged for these schemes, often convincingly. Authenticity is established through official registers and independent contact, never through attachments the sender controls."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-google-voice-verification-code-request-from-a-stranger-a-scam","url":"https://scamencyclopedia.org/questions/is-a-google-voice-verification-code-request-from-a-stranger-a-scam","question":"Is a stranger asking me to share a Google Voice verification code a scam?","shortAnswer":"Yes. Sharing that code allows the scammer to create a Google Voice number linked to your phone, which they then use for fraud.","explanation":"This scam is common on Craigslist, Facebook Marketplace, and dating apps. The stranger claims they want to verify you are real before meeting or transacting and says they will send a code to your phone. The code is actually a Google Voice setup code — sharing it links a new Google Voice number to your real phone number. The scammer uses that number to commit other frauds while the number traces back to you. This can expose you to liability and cause serious problems if investigators trace fraud calls back to your linked number.\n\nThe framing is what makes it work: the scammer positions the code as a scam-prevention step — 'so many fake buyers out there, just confirming you're real' — which flips your guard to their advantage. The same mechanic appears with other services too: any code delivered to your phone is a key to something, and anyone asking you to relay one is trying to use that key.\n\nRecovery is worth doing promptly. Reclaiming the number through Google Voice setup breaks the scammer's use of it, and it is sensible to note the date and report the exchange to the marketplace where contact began — those reports help platforms spot the accounts running the scheme at scale.","redFlags":["Stranger asks you to share a code sent to your phone as a 'safety' check","They say the code proves you are a real person","Contact came from a classified ads or marketplace site","The code arrives from Google and mentions Google Voice"],"whatToDoNow":["Never share any verification code sent to your phone with a stranger","If you shared the code, go to voice.google.com immediately and reclaim or remove the number","Report the incident to the platform where contact was made","Alert your phone carrier if you believe your number has been compromised"],"faq":[{"question":"Why would a scammer want a Google Voice number linked to my phone?","answer":"It gives them a disposable US number that traces back to you if investigated, allowing them to call or text victims while distancing themselves from detection."},{"question":"What if I already shared the code days ago?","answer":"Reclaim the number now — go through Google Voice setup with your own number, which forces the transfer back. Keep a note of what happened in case any activity is later traced to the number, and report the original contact to the platform."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-business-email-asking-me-to-update-supplier-bank-details-safe","url":"https://scamencyclopedia.org/questions/is-a-business-email-asking-me-to-update-supplier-bank-details-safe","question":"Is a business email asking me to update a supplier's bank details safe?","shortAnswer":"Not until verified independently. Fraudulent invoice redirection — also called BEC or APP fraud — is one of the most costly scams targeting businesses.","explanation":"Business email compromise (BEC) invoice fraud works by intercepting or impersonating supplier email accounts and sending a convincing message to the accounts payable team asking them to update payment details. The new bank details belong to the fraudster. The next legitimate invoice payment goes to the wrong account. Losses can be significant. The email may come from a domain almost identical to the supplier's (a single character swapped) or from a genuine account that has been hacked. The only safe procedure is to phone the supplier using a number from your own records — not any number in the email — and verbally confirm the change.\n\nThese attacks are researched, not sprayed. Fraudsters often sit inside a compromised supplier mailbox for weeks, reading invoice cycles, learning names and payment rhythms, then striking with a detail-perfect email at the exact moment a real payment is due. That is why authenticity checks on the message itself — tone, formatting, thread history — fail: everything except the bank details can be genuine.\n\nProcess beats vigilance here. A standing rule that bank-detail changes are only actioned after a call-back to an independently held number, plus dual authorisation on the change itself, removes the single point of failure. The control matters most under time pressure — which is exactly when the fraudulent email will arrive.","redFlags":["Email requesting a change to payment or bank details","Sender domain has subtle differences from the known supplier domain","Urgency — upcoming invoice must be paid to the new account today","Email arrives with no prior conversation thread"],"whatToDoNow":["Never update bank details based solely on an email","Call the supplier directly using a number from your own records","Confirm in writing after verbal verification","Implement a dual-authorisation process for bank detail changes"],"faq":[{"question":"Can my company recover money sent to a fraudster's account?","answer":"Speed is critical — contact your bank immediately. Same-day recalls are sometimes possible. Cross-border transfers are much harder to recover. Report to the Report Fraud service (UK, formerly Action Fraud) or the FBI IC3 (US)."},{"question":"The email came from the supplier's real address with the usual thread history. How is that possible?","answer":"Their mailbox is likely compromised — the fraudster is replying inside genuine conversations. This is why verification must go around email entirely: phone the contact on a number from your records, not one quoted in the message."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-charity-on-social-media-collecting-for-sick-children-legitimate","url":"https://scamencyclopedia.org/questions/is-a-charity-on-social-media-collecting-for-sick-children-legitimate","question":"Is a charity collecting donations for sick children on social media legitimate?","shortAnswer":"Possibly — but charity impersonation and crowdfunding fraud are common. Verify any charity's registration before donating.","explanation":"Social media fundraising pages for sick children evoke genuine compassion and are frequently used by scammers. Fake pages clone photos from real families — sometimes taken without consent — and siphon donations to personal accounts. Some use real charity logos without being affiliated. Crowdfunding platforms like GoFundMe verify some campaigns but cannot guarantee all are authentic. Always check that the campaign links to a registered charity, that the charity can be found on an official register (Charity Commission, GuideStar, ACNC), and that the campaign was not recently created with no prior history on the platform.\n\nEmotional urgency is the engine of these frauds, and it is manufactured with stolen material — real photographs of real sick children, lifted from family blogs and hospital fundraisers, attached to payment handles the family has never heard of. Disasters and viral news stories produce the same surge: within hours, opportunistic pages appear collecting for victims they have no connection to.\n\nGenerosity survives a short pause. Checking the charity register, looking at when the page was created, and seeing whether donations flow to an organisation or an individual takes two minutes and does not diminish the gift — it directs it. When a cause moves you, donating through the charity's own website is the version of the impulse that actually reaches it.","redFlags":["Campaign page created very recently with no prior activity","Donations go to a personal PayPal, Venmo, or bank account rather than a registered charity","No connection to a verifiable hospital, care organisation, or registered charity","Requests for gift cards or crypto rather than direct donations"],"whatToDoNow":["Search the charity's name on an official register before donating","Donate directly to the verified charity rather than through a social media link","Report suspicious campaigns to the crowdfunding platform","If you donated and believe it was fraud, report to your national fraud authority"],"faq":[{"question":"Are all GoFundMe campaigns for children verified?","answer":"GoFundMe verifies payment methods but cannot guarantee all campaigns are genuine. Always check independently and prefer donating to a named registered charity."},{"question":"I recognise the child's story from the news. Does that make the fundraiser genuine?","answer":"Not necessarily — scammers attach real, publicised cases to their own payment accounts. Check whether the family or hospital has named an official fundraising channel, and give through that rather than through a page that merely retells the story."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-vishing-call-from-my-bank-about-fraud-on-my-account-real","url":"https://scamencyclopedia.org/questions/is-a-vishing-call-from-my-bank-about-fraud-on-my-account-real","question":"Is a vishing call from my bank about suspected fraud on my account real?","shortAnswer":"It could be real but is more likely a scam. Always hang up and call your bank back using the number on your card — never use a number from the call.","explanation":"Voice phishing ('vishing') is one of the most effective forms of telephone fraud. Callers spoof your bank's real phone number, use your name and partial account details to sound credible, and claim there is suspicious activity that requires urgent action. The action they suggest — confirming details, transferring money, or installing an app — is the fraud itself. Real bank fraud teams do call customers about suspicious transactions, but they never ask you to move money, share your full PIN, or install remote-access software. The safest rule: thank the caller, hang up, wait a few minutes, and call the number on the back of your card.\n\nWhat makes vishing dangerous is its similarity to something real: banks do call about suspicious transactions, and the fraudster's opening lines mimic that call precisely — right down to offering to 'verify' themselves with details bought from data breaches. The divergence comes at the action: genuine fraud teams block cards and reverse transactions on their side; impostors need you to act — move money, read codes, install software.\n\nThe call-back habit defeats spoofing entirely, but the details matter: use a number you sourced yourself, wait a few minutes or use a different phone in case the line is held open, and describe what happened rather than assuming the earlier call was real. Any genuine issue will exist in the bank's records; anything that exists only in the caller's narrative was the scam.","redFlags":["Caller asks you to transfer money to a 'safe account'","Requests your full PIN, password, or one-time passcode","Asks you to install an app to 'secure' your device","Insists you must not call the bank's main number because the fraud team is handling it separately"],"whatToDoNow":["Politely end the call without providing any information","Wait at least 5 minutes (on a landline, use a different phone) then call the number on your card","Report the vishing attempt to your bank's fraud line","File a report with your national fraud authority"],"faq":[{"question":"Why should I wait before calling back on a landline?","answer":"Scammers on landlines sometimes stay on the line after you hang up, so a call placed immediately may reconnect to the scammer. Waiting 5 minutes — or using a mobile phone — closes that risk."},{"question":"The caller offered to prove themselves by reading my card number and address. Doesn't that verify them?","answer":"No — those details circulate in breach data, and reciting them is a scripted trust-building move. The only verification that counts is you initiating a call to the bank's published number."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-cryptocurrency-exchange-that-appeared-in-an-ad-safe","url":"https://scamencyclopedia.org/questions/is-a-cryptocurrency-exchange-that-appeared-in-an-ad-safe","question":"Is a cryptocurrency exchange that appeared in a social media ad safe to use?","shortAnswer":"Ads for crypto exchanges deserve extra scrutiny — fake or unregulated exchanges are advertised widely and can disappear with your funds.","explanation":"Fraudulent crypto exchanges advertise aggressively on social media and search platforms because advertising controls around financial services vary globally. A convincing fake exchange may operate for months, allowing users to deposit and even make small withdrawals, before blocking accounts and disappearing with larger deposits. Legitimate exchanges are registered with financial regulators in the countries where they operate. Before depositing, check that the exchange is registered with your country's financial regulator, verify its legal entity name, and search for independent user reviews on established crypto forums rather than relying on testimonials in the ad.\n\nThe patience of these operations is what catches experienced users. Months of normal-seeming service — working deposits, responsive chat, successful small withdrawals — build the confidence that precedes the large transfer, and only then do 'compliance reviews', 'account upgrades', and withdrawal fees appear. By that stage the interface can show any balance it likes; the funds behind it are already gone.\n\nAdvertising placement is no endorsement. Ad platforms filter imperfectly, fraudulent exchanges rebrand and relaunch faster than they are removed, and paid reach is bought, not earned. Registration with your financial regulator, a verifiable corporate identity, and an established independent track record are the filters that matter — an ad has none of them by default.","redFlags":["Exchange cannot be found on your country's financial services register","Promoted by a celebrity whose account may be compromised or cloned","Withdrawal requests require additional fees or identity upgrades","Customer support is only available via Telegram or WhatsApp"],"whatToDoNow":["Check the exchange's registration on your financial regulator's official website","Search the exchange name on trusted forums and independent review sites","Start with a very small deposit and test a withdrawal before committing larger amounts","Report unregistered exchanges to your financial regulator"],"faq":[{"question":"Are regulated exchanges completely safe?","answer":"Regulation reduces risk but does not eliminate it. Use established, well-reviewed exchanges and avoid storing large amounts on any exchange — use a personal wallet for long-term holdings."},{"question":"I made a small withdrawal successfully. Doesn't that prove the exchange is real?","answer":"No — allowing small withdrawals is part of the model, building trust before larger deposits are trapped. Judge an exchange by regulatory registration and independent history, not by how it behaves with amounts it can afford to return."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-housing-benefit-or-section-8-voucher-offer-online-legitimate","url":"https://scamencyclopedia.org/questions/is-a-housing-benefit-or-section-8-voucher-offer-online-legitimate","question":"Is a housing benefit voucher or Section 8 assistance offer I found online legitimate?","shortAnswer":"Legitimate housing assistance is applied for through government agencies — not through social media ads, private websites, or individuals selling 'slots'.","explanation":"Housing assistance fraud targets low-income individuals by advertising fake access to Section 8 (US), housing benefit (UK), or equivalent government programmes. Scammers charge a fee for a waiting list 'spot', application assistance, or guaranteed approval. Some operate fake websites imitating official government portals. Official housing assistance programmes are free to apply for through government agencies and councils. Waiting lists are long and managed publicly — there is no way to pay for faster or guaranteed access. Anything that charges money to secure a housing benefit place is fraud.\n\nThe scheme preys on scarcity. Waiting lists are long, need is urgent, and an offer to skip the queue lands exactly where desperation lives. That is also what betrays it: allocation of housing support follows published rules administered by public bodies — there is no side door, and no private individual or website has 'slots' to sell at any price.\n\nBeyond the lost fee, the fake application itself is a harvest: national identifiers, income details, and household information collected on a bogus form support identity theft and benefit fraud in your name. Apply only on the official portal you navigated to yourself, and treat any request for payment as the end of the conversation.","redFlags":["Fee to secure a place on a housing assistance waiting list","Website domain does not match official government websites","Guarantee of quick or certain approval","Contact made via social media ad or WhatsApp"],"whatToDoNow":["Apply only through official government housing agency portals","Report fraudulent housing assistance ads to the platform and authorities","Contact your local housing office or council for genuine guidance","If you paid a fee, report to consumer protection and local police"],"faq":[{"question":"How do I apply for genuine housing assistance?","answer":"In the US, apply through your local Public Housing Authority. In the UK, apply through your local council. Both are free and there is no legitimate middleman."},{"question":"I gave my details on one of these sites before realising. What should I do?","answer":"Report it to the genuine housing agency so your records can be flagged, watch for correspondence about applications you did not make, and consider a fraud alert with credit agencies. If you paid, contact your bank about disputing the transaction."}],"lastReviewed":"2026-08-01"},{"slug":"what-happens-if-i-click-a-phishing-link-but-dont-enter-anything","url":"https://scamencyclopedia.org/questions/what-happens-if-i-click-a-phishing-link-but-dont-enter-anything","question":"What happens if I click a phishing link but don't enter any information?","shortAnswer":"Clicking alone is usually low risk if your device is updated, but some links can deliver malware silently. Check your device and monitor your accounts.","explanation":"Most phishing links are designed to capture information you actively enter — credentials, card numbers, or personal data. If you did not enter anything, your exposure is limited. However, some links exploit browser or device vulnerabilities to deliver drive-by malware without any user input, particularly on unpatched devices. The risk is much higher if you then downloaded a file or app, dismissed a security warning to proceed, or entered credentials before realising the page was fake. Run an up-to-date antivirus scan, check your accounts for unauthorised access, and ensure your device's operating system and browser are fully updated.\n\nOne quiet consequence to know about: clicking confirms to the sender that your address is live and that you open messages, which typically increases the volume and targeting of what follows. Expect more attempts, potentially referencing the same theme, and treat near-term emails and texts with extra suspicion — a follow-up 'security alert' after a phishing click is usually round two.\n\nUse the incident as a cheap audit. Turn on two-factor authentication for email and banking, review which accounts share passwords, and note what made the link convincing — sender, timing, subject. The realistic goal is not never clicking again; it is making sure a click never has anything valuable to capture.","redFlags":["Link was in an unsolicited email or SMS","The page that loaded asked for login or payment information","Your device prompted you to install an app or extension after clicking","A security certificate warning appeared and you proceeded anyway"],"whatToDoNow":["Run an antivirus or security scan on your device","Check your email and banking accounts for suspicious login activity","Update your browser and operating system to close known vulnerabilities","Change passwords for any accounts associated with the email address you used"],"faq":[{"question":"Do I need to factory-reset my phone after clicking a phishing link?","answer":"A factory reset is only needed if your scan detects malware that cannot be removed, or if you installed a suspicious app. For most cases, scanning and password changes are sufficient."},{"question":"Will more scam messages come because I clicked?","answer":"Quite possibly — a click signals a live, engaged address, and such lists are refined and resold. Be especially wary of follow-up messages on the same theme, and report or delete them rather than engaging further."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-online-pharmacy-selling-prescription-medicine-without-a-prescription-safe","url":"https://scamencyclopedia.org/questions/is-an-online-pharmacy-selling-prescription-medicine-without-a-prescription-safe","question":"Is an online pharmacy selling prescription medicine without a prescription safe?","shortAnswer":"No. Pharmacies that supply prescription medication without a valid prescription are operating illegally and the products may be counterfeit or dangerous.","explanation":"Rogue online pharmacies advertise discounted or hard-to-obtain prescription medicines without requiring a legitimate prescription. Some dispense fake or contaminated products; others simply take payment and send nothing. Even if the product arrives and looks genuine, it may have the wrong dosage, contain harmful adulterants, or interact with other medications without a healthcare provider's guidance. In the UK, legitimate online pharmacies are registered with the MHRA and display the EU common logo. In the US, the FDA maintains a list of registered internet pharmacies (VIPPS). Prescription requirements exist to protect your health — bypassing them carries real medical risk.\n\nCounterfeit medicine is manufacturing without oversight: seized products have been found with wrong active ingredients, wrong doses, and contaminants, all packaged convincingly enough to pass casual inspection. The categories these sites push hardest — weight-loss drugs, sedatives, erectile dysfunction treatments, unlicensed 'miracle' compounds — are exactly the ones where dosing errors and interactions do the most harm.\n\nThe prescription requirement is also the checkpoint where a clinician screens for interactions and conditions the drug would aggravate; removing it removes that screen. If cost or access is the obstacle, pharmacists can often suggest generic alternatives, assistance programmes, or legitimate online prescribing services that include a proper consultation — routes that solve the problem without gambling on the contents of an unregulated package.","redFlags":["No prescription required for a regulated prescription drug","Price dramatically below licensed pharmacy rates","No contact address, only an email or chat service","Not registered on the national medicines agency's pharmacy register"],"whatToDoNow":["Do not purchase prescription drugs without a valid prescription","Verify any online pharmacy on your country's official regulator register","Consult a licensed pharmacist or doctor for legitimate prescriptions","Report illegal online pharmacies to the MHRA (UK), FDA (US), or equivalent"],"faq":[{"question":"Are all online pharmacies dangerous?","answer":"No — many legitimate online pharmacies operate with proper registration and require valid prescriptions. Always verify the pharmacy's registration before using one."},{"question":"The medicine arrived and the packaging looks exactly right. Is it safe to take?","answer":"Packaging proves nothing — counterfeiters copy blister packs, holograms, and information leaflets. Without regulatory oversight there is no way to know the dose or contents. Show it to a pharmacist rather than taking it."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-fake-job-posting-on-linkedin-common","url":"https://scamencyclopedia.org/questions/is-a-fake-job-posting-on-linkedin-common","question":"Is a fake job posting on LinkedIn common?","shortAnswer":"Yes. LinkedIn job listings are not all verified and fake postings are used to harvest personal data, collect fees, or recruit money mules.","explanation":"LinkedIn's size and professional reputation make it an attractive platform for scammers to post convincing fake jobs. Fraudulent listings often advertise remote roles at well-known companies, request CVs and personal details that are then sold or used for identity theft, and sometimes lead to advance-fee demands for background checks or onboarding materials. Some fake jobs on LinkedIn are pig-butchering fronts that collect enough personal information to engineer targeted investment fraud. Signs of a fake posting include a recently created company page, no employee connections at the company, vague job descriptions, and above-market salaries with minimal requirements.\n\nA fake listing costs nothing and a CV is a rich haul: address, phone number, employment history, education — enough to seed identity fraud or highly convincing follow-up scams. The more elaborate operations run fake interviews over chat, issue offer letters, and only then introduce the catch: equipment purchases from a 'preferred supplier', onboarding fees, or banking details for 'payroll setup' well before any verifiable employment exists.\n\nVerify outward from the listing: does the company's own careers page show the role, do the recruiters' profiles have history and real connections, does the interview process involve a video call with identifiable staff? An employer that exists only inside LinkedIn messages and email threads — however polished — has not yet demonstrated it exists at all.","redFlags":["Company page was recently created and has few followers or employees listed","Salary is unusually high for the experience level required","Job description is vague or uses generic corporate language with no specifics","Application process moves off LinkedIn immediately to email or WhatsApp"],"whatToDoNow":["Research the company on its official website and cross-reference with LinkedIn","Check if real employees at the company are connected to the posting","Never pay fees as part of a job application","Report suspicious job postings to LinkedIn and your national labour authority"],"faq":[{"question":"Does LinkedIn verify job postings?","answer":"LinkedIn uses automated and manual checks but cannot verify every listing. Job seekers must still do their own due diligence on any opportunity found on the platform."},{"question":"The recruiter moved our conversation to WhatsApp for convenience. Is that a red flag?","answer":"It is a common one — moving off-platform quickly removes LinkedIn's moderation trail. Legitimate recruiters may use various channels, but early insistence on chat apps, combined with vague company details, is a pattern worth treating with suspicion."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-call-offering-me-a-free-home-security-system-a-scam","url":"https://scamencyclopedia.org/questions/is-a-call-offering-me-a-free-home-security-system-a-scam","question":"Is a cold call offering me a free home security system a scam?","shortAnswer":"Free home security system offers are almost always a high-pressure sales tactic involving long-term monitoring contracts or are outright scams.","explanation":"Callers and doorstep sellers offering 'free' home security systems typically use the free equipment as a hook to lock you into a multi-year monitoring contract at elevated monthly rates. The total cost of the contract far exceeds the value of the equipment. In more aggressive versions, installers gain access to your home and require a deposit before revealing the full contract terms. Some schemes are outright fraudulent — collecting upfront fees or personal information with no intention of installing equipment. Always get the full contract terms in writing before agreeing to anything and compare against known security monitoring providers.\n\n'Free' is doing heavy lifting in the pitch. The equipment cost is recovered many times over through monitoring fees, activation charges, and steep early-termination penalties buried in multi-year terms — the contract, not the hardware, is the product. Fear-based selling often accompanies it: talk of break-ins 'in your area', crime claims quoted without source, and urgency about signing while the installer is present.\n\nSome doorstep variants have a darker purpose: a walk-through of your home to plan a 'system layout' doubles as reconnaissance of entry points and valuables. Whatever the offer, the safe sequence is the same — no home access, no signatures, and no deposits until you have verified the company independently and read the full agreement at your own pace.","redFlags":["Equipment is free but a long-term monitoring contract is required","Offer is only valid today — no time to read the contract","Caller cannot provide a written contract upfront","Requires a deposit or card details before installation"],"whatToDoNow":["Do not agree to anything during the call — request written documentation","Research the company's registration and consumer reviews independently","Read the full contract before signing, including early termination fees","Report aggressive sales tactics to your consumer protection authority"],"faq":[{"question":"Are there legitimate free home security offers?","answer":"Some regulated security companies offer discounted or free equipment with a monitoring contract. The key is that the full contract terms are disclosed upfront and you have time to review them."},{"question":"The salesperson mentioned recent burglaries on my street. Should that change my decision?","answer":"Treat unverifiable local crime claims as a sales script, not information — inventing nearby break-ins is a standard pressure tactic. If security genuinely concerns you, research providers yourself on your own schedule."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-text-from-hmrc-about-a-council-tax-rebate-real","url":"https://scamencyclopedia.org/questions/is-a-text-from-hmrc-about-a-council-tax-rebate-real","question":"Is a text from HMRC about a council tax rebate real?","shortAnswer":"No. HMRC does not send texts about council tax. Council tax is administered by local councils, and neither body initiates rebates by text with a link.","explanation":"Council tax rebate phishing texts use the confusion between central and local government to make fake messages seem plausible. The message typically impersonates HMRC and claims you are owed a rebate due to an overpayment or government scheme. It directs you to a link where you enter bank details to receive the refund. HMRC manages income tax and VAT — not council tax, which is a local government matter. Local councils communicate by letter about rebates and never send unsolicited texts with payment links. If you believe you may be owed a council tax rebate, contact your council directly through their official website.\n\nThe scam borrows credibility from moments when rebates are genuinely in the news — cost-of-living support, energy schemes, revaluations — because a vague memory that 'some rebate exists' is all the message needs. The mismatch of agencies is the built-in flaw: HMRC simply has no role in council tax, so the sender's choice of a familiar national brand over your actual council reveals the template.\n\nThe harvested details support more than one theft: bank credentials enable direct fraud, while name, address, and date of birth feed later impersonation — sometimes a follow-up call from the 'bank's fraud team' referencing the very details you entered. If you submitted anything, tell your bank immediately and treat subsequent unsolicited calls, however well-informed, as part of the same operation.","redFlags":["Text claiming to be from HMRC about council tax","Link to a website that is not a verified government domain (.gov.uk)","Request to enter bank details to receive a refund","Urgency or a short deadline to claim"],"whatToDoNow":["Do not click the link or enter any information","Delete the message","Contact your local council directly if you have a genuine rebate query","Report the phishing text to HMRC at phishing@hmrc.gov.uk or forward to 7726"],"faq":[{"question":"How does a real council tax rebate work?","answer":"Genuine rebates are arranged directly between you and your local council. They typically contact you by letter and the money is returned to the direct debit account you pay from."},{"question":"I'm genuinely owed a council tax refund. How would the real process work?","answer":"Refunds are handled by your local council, usually credited to the account you pay from or arranged after you contact them directly. Check your council's official website — councils do not send payment links by text."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-pet-transport-or-shipping-fee-request-for-a-puppy-a-scam","url":"https://scamencyclopedia.org/questions/is-a-pet-transport-or-shipping-fee-request-for-a-puppy-a-scam","question":"Is a pet transport or shipping fee request for a puppy I bought online a scam?","shortAnswer":"Almost certainly yes. Escalating transport and insurance fee requests for a pet that has not arrived are the signature of an online puppy scam.","explanation":"Online pet scams begin with appealing listings — often for rare or pedigree breeds — at attractive prices. After payment, the 'seller' claims the animal is at a transport company and requires additional payments for shipping, insurance, customs clearance, or a special crate. Each request is followed by another before the pet can be released. The pet does not exist. Scammers use stock photos and fake transport company websites to keep victims paying. A genuine pet transaction with a legitimate breeder or rescue organisation involves viewing the animal in person or via live video, paying directly to the seller, and never encountering escalating transport fees.\n\nThe fee ladder is scripted in advance: shipping, then a 'thermally regulated' crate, then insurance, then customs — each framed as the last obstacle, each 'refundable on delivery', and each followed by another. A fake courier site with a working tracking page often supports the fiction, and some victims are eventually threatened with animal-abandonment penalties to extort a final payment. The animal in the photos was never theirs to sell.\n\nThe emotional investment is the trap's mechanism — by the second fee, you are rescuing a specific puppy you have named, not evaluating a transaction. That is why the viewing rule has to be absolute: money moves only after you have seen the animal live, in person or on an interactive video call, with the seller demonstrably present alongside it.","redFlags":["Pet cannot be viewed in person — seller only shows photos or short videos","Shipping fee request arrives after initial payment","A 'transport company' contacts you separately demanding fees","Breed is rare and price is below what reputable breeders charge"],"whatToDoNow":["Stop all payments immediately","Do not pay any transport, insurance, or clearance fees","Report the seller to the platform and your national fraud authority","If you paid by card, contact your bank about a chargeback"],"faq":[{"question":"Can I find a legitimate pet breeder online?","answer":"Yes — reputable breeders are often registered with breed clubs and always allow you to visit and see the puppy with its mother before any payment. Never buy without a viewing."},{"question":"The transport company has its own website with live tracking. Doesn't that prove the shipment exists?","answer":"No — fake courier sites with functioning tracking numbers are built as part of the scheme, often reused across many victims with the details swapped. A website proves only that someone made a website."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-telegram-bot-offering-automated-trading-profits-legitimate","url":"https://scamencyclopedia.org/questions/is-a-telegram-bot-offering-automated-trading-profits-legitimate","question":"Is a Telegram bot offering automated trading profits legitimate?","shortAnswer":"No legitimate automated trading system is distributed through Telegram bots with profit guarantees. These are almost always investment fraud.","explanation":"Telegram trading bots are advertised as passive income tools that execute trades automatically and deliver guaranteed daily or weekly returns. In practice they are either non-functional (they collect subscription fees for nothing) or they are the user interface for a pig-butchering or Ponzi scheme — showing fake balance displays while redirecting real deposits to fraudsters. Returns are fake, powered by new victim deposits, and withdrawals are eventually blocked. Genuine algorithmic trading tools are sold through regulated brokers or software marketplaces, come with verifiable track records, and carry no profit guarantees because all trading involves risk.\n\nThe channel around the bot is theatre: streams of screenshotted profits, grateful 'member' testimonials, and admins posting daily wins — all producible in minutes by the operators, with dissenting messages deleted and questioners banned. The bot interface itself typically shows a fabricated balance ticking upward, unconnected to any real trading; the numbers exist to justify the next deposit request.\n\nThe structural tell is where the money flows. Genuine trading tools connect to your account at a regulated broker or exchange, where funds stay under your control and custody is independent of the software. Any arrangement where deposits go to the tool's operators — via bot, wallet address, or 'account manager' — has already failed the only test that matters.","redFlags":["Guaranteed daily percentage returns regardless of market conditions","Distributed exclusively through a Telegram channel or bot","Withdrawal of profits requires additional fees or 'activation' payments","No regulatory registration or audited performance record"],"whatToDoNow":["Do not deposit funds into any platform accessed via a Telegram bot","Report the channel to Telegram and your financial regulator","If you have funds locked in a platform, do not pay further fees to release them","Seek advice from your national financial regulator on recovery options"],"faq":[{"question":"Do any legitimate trading bots operate through Telegram?","answer":"Some regulated brokers use Telegram for notifications, but they do not collect deposits through bots or promise guaranteed returns. Depositing money via Telegram is never appropriate."},{"question":"The group is full of members posting daily profit screenshots. Could they all be fake?","answer":"Yes — profit screenshots take seconds to fabricate, and many 'members' are operator accounts. Channels are curated: losses and complaints are deleted, and sceptics are removed before other members see them."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-mystery-prize-email-from-a-well-known-retailer-real","url":"https://scamencyclopedia.org/questions/is-a-mystery-prize-email-from-a-well-known-retailer-real","question":"Is a mystery prize email from a well-known retailer real?","shortAnswer":"Emails claiming you have won a mystery prize from a major retailer are almost always phishing or lead-generation fraud using the brand's name without permission.","explanation":"Brand impersonation prize emails use familiar names like Amazon, Walmart, or major supermarkets to lower your guard. They claim you have been selected for a loyalty reward or mystery prize. Clicking the link takes you to a survey or offer page that collects personal data for sale or leads to a subscription trap requiring card details. Some collect login credentials for the retailer's site. Legitimate retailer promotions are announced in your account on the official website or app, never via unsolicited emails with external survey links. Check by logging into your account directly — do not use the email's link.\n\nThe survey format is a data business: each page collects a little more — demographics, phone number, address — and the 'prize' at the end justifies asking for card details to cover delivery. Buried terms often convert that small charge into a recurring subscription, which is the actual product. The retailer whose logo appears throughout has no involvement and no ability to help when charges appear.\n\nLoyalty makes targets: these emails are effective precisely because most recipients genuinely shop at the brands being imitated, so a 'reward' feels plausible. The account-first habit — checking offers by logging in directly rather than through email links — costs seconds and works against every variant of this scheme, whatever brand it wears next.","redFlags":["Email claims you won a prize you do not recall entering","From an email address that does not match the retailer's official domain","Link leads to a survey with a prize claim at the end","Card details required to 'pay shipping' on the free prize"],"whatToDoNow":["Do not click the link — log in to your account on the retailer's official site","Check promotions inside your account rather than following the email","Report phishing emails to the real brand and your email provider","If you entered card details, contact your bank immediately"],"faq":[{"question":"How do I report a brand impersonation email?","answer":"Forward the email to the brand's anti-phishing address (many large retailers have one), report it to your email provider as phishing, and notify your national cyber authority."},{"question":"A small delivery charge for a free prize sounds reasonable. Why is it dangerous?","answer":"The charge is the pretext for collecting full card details, and the page's terms frequently authorise recurring billing. Genuine prize promotions do not require winners to enter card details to receive anything."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-phone-call-saying-my-broadband-is-about-to-be-cut-off-a-scam","url":"https://scamencyclopedia.org/questions/is-a-phone-call-saying-my-broadband-is-about-to-be-cut-off-a-scam","question":"Is a phone call saying my broadband is about to be cut off a scam?","shortAnswer":"Almost certainly yes if it was unsolicited. Genuine broadband providers notify you by email or letter, not automated calls threatening immediate disconnection.","explanation":"Broadband disconnection scam calls use automated voice messages or live callers claiming to be from BT, Virgin Media, Sky, or another major provider. They warn that your internet will be cut off within hours unless you call back or press a key. The goal is to get you talking to a 'technical support' agent who asks for remote access to your router or computer, payment for a fake issue, or personal banking details to verify your account. Genuine providers contact you through your account portal, by email, or by post — they do not cold-call with disconnection threats. If you are unsure, log into your account directly or call the number on your bill.\n\nDisconnection threats select for the people most likely to comply — anyone working from home, running a business, or caring for family online treats the connection as critical, and the 'press a key to speak to an engineer' prompt converts that alarm into a live conversation with a scammer. From there the script matches classic tech-support fraud: remote access to 'test the line', a fee to cancel the disconnection, or bank details to 'update the account'.\n\nRemote access is the line that should never be crossed: no genuine ISP needs to control your computer to manage your broadband service. If access was granted, disconnect the machine from the internet, remove the remote software, run a security scan, and change passwords from a different device — sessions like these are used to reach saved logins and online banking.","redFlags":["Automated call about imminent broadband disconnection","Caller asks for remote access to your router or device","Payment by unusual method to restore your connection","Caller cannot verify your account details — asks you to provide them"],"whatToDoNow":["Hang up — do not press any number or call back the number provided","Check your account via the official provider website or app","Call your provider on the number from your bill or their official website","Report the call to Ofcom (UK) or the FTC (US)"],"faq":[{"question":"Could my broadband genuinely be at risk?","answer":"If you have unpaid bills your provider would contact you through normal account channels first. Always verify through your own account rather than an inbound call."},{"question":"I pressed the number and spoke to them but hung up without doing anything. Am I affected?","answer":"Engaging confirms your number is live, so expect repeat attempts — block and ignore them. If you gave no details, access, or payment, no direct harm was done; verify your account through official channels for peace of mind."}],"lastReviewed":"2026-08-01"},{"slug":"is-it-safe-to-give-my-email-to-sign-up-for-a-free-competition","url":"https://scamencyclopedia.org/questions/is-it-safe-to-give-my-email-to-sign-up-for-a-free-competition","question":"Is it safe to give my email address to enter a free competition online?","shortAnswer":"Free online competitions frequently collect email addresses to sell to marketers, enter you into subscriptions, or send phishing emails — read the terms carefully.","explanation":"Entering an email in a free competition is low risk by itself, but many free competition sites exist primarily as data-collection businesses. Your email may be shared with hundreds of marketing partners, added to spam lists, or used to send convincingly branded phishing emails referencing the competition. Some sites auto-enrol entrants into paid subscriptions that are hard to cancel. Others exist solely to build targeted lists for subsequent prize fraud. Before entering, check the terms of entry to see who your data is shared with, whether entering constitutes consent to marketing, and whether there is a clear and genuine competition organiser.\n\nThere is also a downstream effect: entering low-quality prize draws places you on 'responder' lists that are traded between marketers and, at the bottom of the chain, fraud operations. Months later this surfaces as prize-claim calls, 'you've won' emails referencing draws you vaguely remember, and increasingly aggressive sweepstakes offers — the audience for prize fraud is largely built from earlier harmless-looking entries.\n\nContain the exposure by design: a dedicated email address for competitions, no phone number where it is optional, marketing consents unticked, and an eye on the organiser's name before entering. If the entry form wants payment details, identity documents, or app installs, the prize is not the product — you are.","redFlags":["No clear organiser or company name associated with the competition","Terms allow data to be shared with an undefined number of marketing partners","Entering requires creating an account with payment details 'for identity verification'","Competition runs only by email with no publicly verifiable draw"],"whatToDoNow":["Read the privacy policy and terms before entering","Use a secondary email address for competitions to limit spam to your main inbox","Opt out of marketing consent if given the option","Unsubscribe promptly from any marketing emails after entering"],"faq":[{"question":"How do I know if a competition prize draw is genuine?","answer":"Genuine prize draws are run by named, registered companies, comply with advertising standards, and publish draw results. Check the organiser's registration independently."},{"question":"Why do I get prize-claim calls months after entering competitions?","answer":"Entry data is sold on as 'engaged responder' lists, which eventually reach scam operations. That delayed tail of calls and emails is often the real price of low-quality prize draws — and why a throwaway email address is worth using."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-request-to-use-my-bank-account-to-hold-money-for-someone-safe","url":"https://scamencyclopedia.org/questions/is-a-request-to-use-my-bank-account-to-hold-money-for-someone-safe","question":"Is it safe for a friend or online contact to ask me to hold money in my bank account?","shortAnswer":"No. Allowing someone to use your account to receive or hold funds makes you a money mule — which is a criminal offence in most countries.","explanation":"Money mule recruitment often comes through a friend, an online romantic contact, or a job offer. The request sounds reasonable — they cannot access their funds right now, they need a safe account temporarily, they will pay you a fee. In reality, the money being routed through your account is stolen or linked to criminal activity such as fraud, drug trafficking, or people smuggling. Your account is being used to launder it. Even if you did not know the source of the funds, receiving and passing on criminal money is a serious offence. Banks monitor for unusual transactions, freeze accounts, and pass information to law enforcement. A criminal record can affect your employment and ability to hold a bank account for years.\n\nRecruitment is engineered to feel like anything but crime: a partner who trusts you with their savings, an employer whose 'finance role' is receiving and forwarding transfers, a friend of a friend with a temporary banking problem. The consistent core is the ask — your account, their money, onward movement — and the consistent truth is that people with legitimate funds have no need for another person's account to hold them.\n\nIf funds have already landed, the moments after are decisive: forwarding them completes the laundering act, while contacting your bank first puts you on record as reporting rather than participating. Do not spend, move, or return the money yourself — banks have processes for handling suspect deposits, and the paper trail of your report is your best protection.","redFlags":["Request to receive money into your account and transfer it on","Promise of a commission or fee for 'helping'","Contact cannot explain clearly why they cannot use their own account","Contacted through a dating app, WhatsApp job offer, or social media"],"whatToDoNow":["Decline — do not allow anyone to use your account this way","If money has already arrived in your account, do not send it on","Contact your bank and explain the situation","Report to your national financial intelligence unit or fraud authority"],"faq":[{"question":"What happens if I am caught as a money mule?","answer":"Consequences include account closure, civil liability, and criminal prosecution. Sentences for money laundering offences can include fines and imprisonment. Cooperate with your bank and authorities immediately."},{"question":"I didn't know the money was criminal. Am I still liable?","answer":"Ignorance helps but does not guarantee protection — prosecutions can proceed where someone 'should have suspected', and banks may close accounts regardless. Reporting promptly, before moving the funds, is the strongest evidence of good faith."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-cashiers-check-from-a-buyer-always-safe-to-deposit","url":"https://scamencyclopedia.org/questions/is-a-cashiers-check-from-a-buyer-always-safe-to-deposit","question":"Is a cashier's check from a buyer always safe to deposit?","shortAnswer":"No. Cashier's checks can be convincing fakes that appear to clear initially but are later reversed, leaving you responsible for any funds you withdrew or forwarded.","explanation":"Fake cashier's check scams are common in private sales, rental transactions, and overpayment schemes. The buyer sends a check that appears authentic and the bank may even show an initial credit while waiting for final settlement. This provisional credit is sometimes mistaken for cleared funds. If you withdraw or forward money during this window and the check later bounces, the bank reverses the entire amount and you are liable for what you spent. Genuine cashier's checks can be verified by calling the issuing bank using a number from their official website — not a number printed on the check itself.\n\nThe scam succeeds because 'the bank accepted it' feels like validation. In reality, tellers are not verifying authenticity at deposit, and rules oblige banks to make funds available on a schedule that runs faster than counterfeit detection. The forged check travels back through the clearing system and fails later — at which point the deposit reverses, and any money you wired away in the meantime was simply yours.\n\nOverpayment is the giveaway wrapped around the instrument: there is no honest reason for a buyer to send more than the price and ask for the difference back, whatever story accompanies it — shipping agents, moving costs, a clerical error. Any transaction that ends with you sending money to a buyer has inverted; that inversion is the scam.","redFlags":["Check is for more than the agreed amount — seller asked to refund the difference","Buyer insists on paying by cashier's check when other methods are available","You are asked to wire back part of the funds before the check fully clears","Buyer is in a rush for you to deposit and confirm"],"whatToDoNow":["Ask your bank to hold the funds until full clearance — not provisional credit","Verify the check by calling the issuing bank on a number from their official website","Do not withdraw or transfer any of the funds until full clearance is confirmed","If the check was fraudulent, report to your bank and local law enforcement"],"faq":[{"question":"How long does it take for a cashier's check to truly clear?","answer":"A bank's provisional credit may appear within 1–2 days, but full settlement can take up to 10 business days. Never treat provisional credit as cleared funds."},{"question":"My bank said the funds were 'available'. Isn't that the same as cleared?","answer":"No — availability is a timing requirement, not a verdict on the check. A counterfeit can bounce after funds show as available, and the bank will reverse the full amount from your balance when it does."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-resale-or-arbitrage-job-on-amazon-a-scam","url":"https://scamencyclopedia.org/questions/is-a-resale-or-arbitrage-job-on-amazon-a-scam","question":"Is a job that pays me to buy and resell items on Amazon a scam?","shortAnswer":"Resale and arbitrage job offers that ask you to use your own money and accounts are usually fronts for money laundering or advance-fee schemes.","explanation":"Genuine retail arbitrage is a legal solo business model, but 'jobs' where an employer pays you to buy items online using your own accounts and money are a different matter. In many cases your purchasing account is being used to launder stolen payment details — you buy real goods, which are shipped and then charged back, leaving you with neither goods nor payment. Some schemes keep your initial deposit and vanish. Others use your Amazon seller account to process fraudulent transactions. Legitimate employment does not require you to spend personal money to carry out work, and no employer needs to use your personal marketplace account.\n\nThe structure launders stolen cards through your identity: purchases made at your address, with your accounts, convert compromised payment details into goods that ship onward to the operators. When the card owners dispute the charges, the trail ends at you — account suspensions, clawed-back payments, and questions from platforms and banks arrive at your door while the 'employer' dissolves and reopens under a new name.\n\nThe reimbursement treadmill is the operational tell: floats and repayments arrive just often enough to keep you buying, then stall as amounts grow. Any role built on your money moving first — your card, your credit, your marketplace standing — has the risk exactly backwards from real employment, where the company funds its own operations.","redFlags":["You must use your personal Amazon account or bank card to purchase","Reimbursement is promised after purchases but delayed repeatedly","You are asked to ship items to addresses you have not verified","Contact was via WhatsApp or Telegram with little company background"],"whatToDoNow":["Do not use personal funds or accounts for an employer's transactions","Report the job offer to the relevant employment authority","If items were purchased, stop and contact your bank about any charges","Report to Amazon Trust and Safety if your account was involved"],"faq":[{"question":"What is real retail arbitrage?","answer":"Legitimate retail arbitrage is when a self-employed individual buys underpriced products and resells them for profit using their own business. It does not involve an employer asking you to buy on their behalf."},{"question":"They reimbursed my first purchases promptly. Doesn't that show they're legitimate?","answer":"Early reimbursement is working capital for the scheme — it builds the trust that keeps you purchasing as amounts increase. The pattern typically ends with large unreimbursed purchases and chargebacks landing on your accounts."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-whatsapp-group-for-investment-tips-from-a-bank-employee-legitimate","url":"https://scamencyclopedia.org/questions/is-a-whatsapp-group-for-investment-tips-from-a-bank-employee-legitimate","question":"Is a WhatsApp group run by a bank employee offering investment tips legitimate?","shortAnswer":"No. Bank employees are prohibited from sharing investment tips through private messaging groups. This is a common set-up for insider-tip investment fraud.","explanation":"Scammers pose as bank employees, stockbrokers, or financial analysts in WhatsApp or Telegram groups and claim to have insider knowledge that gives them an edge in markets. Members who follow the tips initially see gains — which are fabricated using platform manipulation or small real gains on volatile assets — before being steered toward a fraudulent platform where larger investments are locked. Genuine financial professionals are governed by strict regulations that prohibit sharing undisclosed tips privately. Any investment advice channel operating outside regulated channels is illegal and almost certainly designed to defraud you.\n\nThe group itself is a stage set: dozens of 'members' celebrating gains are operator accounts, the admin's insider status is unverifiable by design, and early wins are engineered — small enough for the operation to fund, convincing enough to unlock bigger deposits. The pivot to a specific platform is the destination the whole performance was built to reach.\n\nThe insider premise also conscripts you into secrecy: if the tips were real, discussing them would be illegal, so silence feels self-protective — and conveniently prevents the outside conversation that would puncture the scheme. Any 'opportunity' that carries a built-in reason you cannot ask anyone about it has told you what it is.","redFlags":["Group claims to be run by a bank employee sharing non-public information","Early tips appear profitable, encouraging larger subsequent investments","Members are directed to a specific trading platform not mentioned initially","Group admin encourages secrecy about the group's existence"],"whatToDoNow":["Leave the group and do not follow any investment instructions from it","Report the group to WhatsApp or Telegram","If you invested money through the recommended platform, report to your financial regulator","Do not pay fees to withdraw any apparent gains"],"faq":[{"question":"Can a financial professional share tips in a private group legally?","answer":"In most jurisdictions, sharing material non-public information (insider tips) is a criminal offence. Legitimate financial advisers operate through regulated channels with registered licences."},{"question":"Other group members keep posting their profits. Could the group still be fake?","answer":"Yes — populating groups with operator-controlled accounts is standard. Members you have never met, posting screenshots you cannot verify, in a group you were added to unexpectedly, are part of the scenery."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-email-from-paypal-saying-a-payment-was-sent-to-me-a-scam","url":"https://scamencyclopedia.org/questions/is-an-email-from-paypal-saying-a-payment-was-sent-to-me-a-scam","question":"Is an email from PayPal saying a large payment was sent to me a scam?","shortAnswer":"If you were not expecting a payment, treat it with caution — it may be a phishing email impersonating PayPal, or the start of an overpayment scheme.","explanation":"Two different scams use fake PayPal payment notification emails. In the phishing version, the email mimics PayPal's branding but comes from a fraudulent domain, and any link leads to a credential-stealing site. In the overpayment version, the sender has actually sent funds (or claims to have) and asks you to ship a product or send back a portion of the overpaid amount. Real payments show up immediately inside your PayPal account when you log in directly — checking your account at paypal.com is always the authoritative source. Never rely on email notifications alone when deciding whether to ship goods or send money.\n\nSeller-side pressure is the common thread: fake 'payment on hold — ship to release' emails push you to send goods against money that never existed, while genuine-but-reversible payments fund overpayment refunds that come out of your pocket when the original transaction is disputed. In both patterns, the scammer's aim is to extract value from you inside the window before the payment's true status settles.\n\nThe account-is-truth rule needs one refinement: even funds visible in your balance can later reverse if they were sent from a stolen card, so unexpected money from strangers deserves the same caution as unexpected emails. Ship only for payments you anticipated, from buyers in a real transaction, and route any dispute through the platform rather than private arrangements.","redFlags":["Email sender domain is not exactly paypal.com","Payment amount is more than expected or from an unknown person","Email instructs you to ship goods before the payment fully clears","Request to refund the overpayment to a different account"],"whatToDoNow":["Log in to PayPal directly at paypal.com to verify the payment","Do not ship goods or refund money based on the email alone","Report phishing emails to spoof@paypal.com","If overpayment is real, use PayPal's Resolution Centre — do not send money outside PayPal"],"faq":[{"question":"What if the PayPal balance shows the payment inside my account?","answer":"Even an in-account balance can be reversed if funded by a stolen card or disputed payment. Wait for the payment to fully clear and the dispute window to pass before sending goods."},{"question":"An email says my payment is on hold until I provide a tracking number. Is that how PayPal works?","answer":"Emails demanding shipment to 'release' funds are a hallmark of fake-payment fraud. Check the transaction by logging in directly — if it is not in your account there, no payment exists regardless of what the email shows."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-text-about-a-speed-camera-fine-or-driving-penalty-real","url":"https://scamencyclopedia.org/questions/is-a-text-about-a-speed-camera-fine-or-driving-penalty-real","question":"Is a text about a speed camera fine or driving penalty asking for online payment real?","shortAnswer":"Texts about traffic fines demanding immediate online payment via a link are almost always phishing scams. Genuine fines arrive by post.","explanation":"Traffic enforcement agencies communicate penalty notices by post to the registered keeper of a vehicle. They do not send SMS messages with payment links. Scam texts mimic the format of penalty notices and create urgency by threatening increased fines or legal action if payment is not made immediately. The link leads to a fake payment page that captures card details. In some countries, genuine online payment portals exist for traffic fines, but you are always directed there through an official reference number shown on a physical notice — not via an unsolicited text link.\n\nThe formality is the disguise: reference numbers, statute-sounding language, and escalation warnings mimic how enforcement actually communicates, and the small 'fine' is priced to be paid without scrutiny — cheaper than the doubled amount threatened, easier than investigating. The card details captured are worth far more than the fee, and are typically tested with small charges before larger fraud follows.\n\nKnowing the genuine process defuses the urgency: penalty notices arrive in writing to the vehicle's registered keeper, identify the alleged offence with time and place, and include formal routes to pay or challenge. A message that skips all of that in favour of a same-day payment link has described itself.","redFlags":["Unsolicited SMS about a traffic fine or penalty","Link in the message rather than a reference number to use on an official site","Urgency — fine doubles or legal action begins within hours","Payment requested by card through the SMS link"],"whatToDoNow":["Do not click the link or make any payment","Check whether a genuine notice has arrived by post","If concerned, contact the relevant enforcement authority through their official website","Report the phishing text to your national cyber authority or forward to 7726"],"faq":[{"question":"What happens if I ignore a genuinely owed traffic fine?","answer":"Genuine unpaid fines escalate through formal channels with official written notices. You will not lose the right to contest or pay by ignoring an SMS — always verify through official records."},{"question":"I paid the 'fine' through the link. What should I do now?","answer":"Contact your bank to block the card and dispute the charge, and watch statements for follow-on transactions — captured details are often tested and reused. Report the message to your fraud authority; no genuine fine was involved."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-social-media-ad-for-a-government-grant-for-small-businesses-real","url":"https://scamencyclopedia.org/questions/is-a-social-media-ad-for-a-government-grant-for-small-businesses-real","question":"Is a social media ad for a government grant for small businesses real?","shortAnswer":"Almost certainly not. Legitimate government grant programmes are not advertised through social media ads and never require upfront fees to apply.","explanation":"Government grant fraud targets small business owners and the self-employed by advertising 'unclaimed' grants via Facebook, Instagram, or TikTok. The ad often uses official-looking government branding and promises substantial funds. To apply, you are directed to a third-party website where you pay a processing or administrative fee. No grant is ever received. Real government grant programmes are listed on official government websites, administered by recognised agencies, and are free to apply for. Some may involve a grant writer or consultant fee for assistance with the application, but these are optional services — not a requirement to access the grant.\n\nThe ad format itself does most of the deceptive work. Government logos, crests, and colour schemes are trivially easy to copy into an ad image, and platforms generally do not verify that an advertiser is actually a government body before running the campaign. The ads are targeted at small business owners and the self-employed — people under real financial pressure — and manufactured urgency such as 'final funding round' or 'applications close tonight' is added to stop you checking. Once you pay one fee, further charges tend to follow: a release fee, a compliance fee, a tax on the grant amount.\n\nThe reliable habit is to start from the official source, never from the ad. Search your government's own business support portal directly and look for the programme by name. Genuine grant schemes publish their eligibility criteria, application windows, and administering agency openly, and you can check all of it without paying anyone. If the programme in the ad cannot be found through official channels, it does not exist.","redFlags":["Grant discovered through a social media ad rather than an official government source","Application requires a processing or administrative fee","Website domain does not match an official government portal","Promise of guaranteed approval before reviewing your application"],"whatToDoNow":["Search for the grant programme directly on your government's official website","Do not pay any fee to apply for a government grant","Report the fraudulent ad to the social media platform and your consumer authority","Contact your national small business support agency for legitimate grant information"],"faq":[{"question":"Where can I find real small business grants?","answer":"Genuine grants are listed on government portals (gov.uk/business-finance-support, grants.gov in the US) and through enterprise agencies. All legitimate programmes are free to apply for."},{"question":"Why do these ads use real government logos?","answer":"Logos and official branding are simple to copy, and ad platforms rarely verify that an advertiser is a genuine government body. Branding proves nothing — only the domain and the official programme listing do."},{"question":"I paid a fee through one of these ads — what should I do?","answer":"Contact your bank or card provider immediately to dispute the payment, report the ad to the platform, and report the fraud to your national fraud authority. Be wary of follow-up contacts offering to recover your money for a fee — these are usually the same criminals."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-debt-relief-company-that-guarantees-to-clear-my-debt-legitimate","url":"https://scamencyclopedia.org/questions/is-a-debt-relief-company-that-guarantees-to-clear-my-debt-legitimate","question":"Is a debt relief company that guarantees to clear my debt legitimate?","shortAnswer":"Guaranteed debt clearance claims are false — no company can legally guarantee debt write-off. Many debt relief companies are scams that take fees while resolving nothing.","explanation":"Debt relief fraud targets people already in financial difficulty. A company promises to negotiate your debts down to a fraction of what you owe or to have them legally removed. They charge upfront fees or monthly payments during which they may advise you to stop paying creditors. Debts are rarely reduced or cleared, creditors continue collection activity, and your credit score deteriorates further. In many countries, legitimate debt management is provided free by non-profit agencies. Regulated companies can negotiate with creditors but cannot guarantee outcomes. Any company guaranteeing specific outcomes or collecting fees before resolving debts should be avoided.\n\nThe most damaging part of this scam is often the advice to stop paying your creditors. While your money goes to the company's fees, your accounts fall into arrears, default notices accumulate, and creditors may begin legal action — all of which is harder to undo than the original debt position. The 'guarantee' is impossible for a simple reason: whether a debt is reduced or written off is decided by your creditors or by a formal legal process, not by the company making the promise.\n\nLegitimate help looks very different. Non-profit debt advice services are free, explain every option including the drawbacks, and never pressure you to sign up on the spot. Regulated firms set out their fees in writing, appear on the official register, and describe outcomes as possibilities rather than certainties. If a company opens with a guarantee, an upfront fee, or an instruction to cut off contact with your creditors, walk away and take the free route instead.","redFlags":["Guarantee that all or most of your debt will be written off","Upfront fee required before any negotiation begins","Advised to stop paying creditors immediately and let the company handle everything","Cannot be found on the relevant debt advice regulatory register"],"whatToDoNow":["Seek free advice from a non-profit debt counsellor first (StepChange, National Debt Line, NFCC)","Never pay upfront fees to a debt relief company","Verify the company on your country's financial services register","Report predatory debt companies to your financial regulator"],"faq":[{"question":"Can any of my debt genuinely be written off?","answer":"In some circumstances, through formal insolvency processes (like IVAs in the UK or Chapter 7 in the US), some debt can be legally discharged. These processes are governed by law and administered by licenced practitioners — not by cold-calling debt companies."},{"question":"Why is being told to stop paying creditors so dangerous?","answer":"Your accounts fall into arrears while the company collects its fees. Defaults, extra interest, and possible legal action follow, and your credit file can take years to recover — often leaving you worse off than before you sought help."},{"question":"How can I tell a regulated debt firm from a scam?","answer":"A regulated firm appears on your country's financial services register, puts all fees in writing before you commit, and never guarantees a specific outcome. If any of those three things is missing, do not proceed."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-stranger-on-a-dating-app-who-wants-to-send-me-money-a-scammer","url":"https://scamencyclopedia.org/questions/is-a-stranger-on-a-dating-app-who-wants-to-send-me-money-a-scammer","question":"Is a stranger on a dating app who wants to send me money a scammer?","shortAnswer":"Almost always yes. Sending money to a new match is a recruitment technique — the money may be stolen and your account used to launder it.","explanation":"A dating app contact who offers to send you money early in the conversation is typically recruiting a money mule, testing your willingness to receive and forward funds, or setting up a later request for financial favours in return. In some cases, the money sent comes from a stolen card or compromised bank account. If you receive and forward it, you may be committing money laundering regardless of intent. In other scenarios, the gift is a manipulation technique — creating a sense of obligation that is later exploited to pressure you into sending money to them. Genuine romantic interest from a stranger does not involve unsolicited financial transfers.\n\nIf money does land in your account, the situation is more serious than it looks. Funds sent from a stolen card or compromised account are typically reversed once the real owner reports the theft — but by then you may have forwarded the money on, leaving you out of pocket and flagged by your bank. Forwarding funds for someone else, even innocently, is how money laundering investigations begin, and banks routinely freeze or close accounts showing this pattern.\n\nThe safest response is complete refusal: no receiving, no forwarding, no sharing of account handles or payment details with a new match. If money has already arrived, do not send it anywhere — not even 'back' to an account the sender names, which is a common laundering step. Contact your bank, explain what happened, and let them handle the return. A genuine romantic prospect will accept a simple boundary about money; a scammer will push against it, and that push tells you everything.","redFlags":["New match offers money, a gift, or a transfer early in conversation","Requests your bank details, Venmo, or CashApp handle very early","Claims they want to help you financially as a sign of care","The conversation feels scripted or moves very fast emotionally"],"whatToDoNow":["Decline any financial transaction with a new dating contact","Do not share payment details","If money has arrived, do not forward it and contact your bank","Report the profile to the dating platform"],"faq":[{"question":"Is it ever normal for a new dating contact to send money?","answer":"No legitimate romantic interest requires financial transactions before meeting in person. Any early financial gesture is a manipulation tactic."},{"question":"Money already arrived in my account — should I just send it back?","answer":"No. Do not forward it anywhere, including to a 'return' account the sender provides — that is a classic laundering step. Contact your bank, explain the situation, and let them reverse the payment through official channels."},{"question":"Could this be the start of a longer investment scam?","answer":"Yes. Early financial generosity is a common opening move in pig-butchering fraud, where trust built through small gestures leads to a fake investment platform. Treat any match who mixes romance with money as hostile."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-college-scholarship-offer-by-email-i-didnt-apply-for-real","url":"https://scamencyclopedia.org/questions/is-a-college-scholarship-offer-by-email-i-didnt-apply-for-real","question":"Is a college scholarship offer by email that I didn't apply for real?","shortAnswer":"Unsolicited scholarship offer emails are almost always scams designed to collect personal data or advance fees.","explanation":"Scholarship fraud targets students and parents by sending official-looking award notifications for scholarships they never applied for. The email asks for personal information to 'process the award', a fee for application handling or tax, or banking details to deposit the scholarship. Real scholarships are awarded through a competitive application process initiated by the student. No legitimate scholarship awards money to people who have not applied. These scams harvest identity information and financial data, and some are used to facilitate student loan fraud by applying for loans in your name.\n\nThe details these emails request are the giveaway. A genuine scholarship administrator already has everything it needs from your application; it never needs your Social Security or National Insurance number, bank login, or a fee to 'release' funds. Scam versions typically arrive from free email domains or addresses that only loosely resemble a university or foundation, use generic greetings, and pressure you to respond within days before the award 'lapses'. The urgency exists to stop you or your parents checking with the institution directly.\n\nTreat every unsolicited award as unverified until you have confirmed it through the front door: search for the foundation or university yourself, find its official contact details, and ask whether the programme exists. If you have already shared personal details, monitor your credit file, alert your bank if account information was included, and tell your school or university's financial aid office — they can warn other students, and they may recognise the specific fraud pattern.","redFlags":["Scholarship offer for a programme you never applied to","Request for an upfront fee to process or claim the award","Asks for Social Security or National Insurance number to 'verify eligibility'","Email domain does not match the official institution or foundation"],"whatToDoNow":["Do not pay any fee or share sensitive personal information","Verify the scholarship by searching the institution or foundation independently","Report fraudulent scholarship emails to the FTC, Report Fraud (formerly Action Fraud), or equivalent","Use official scholarship databases (scholarships.com, the scholarship portals of verified universities)"],"faq":[{"question":"Are there legitimate no-essay or easy scholarships?","answer":"Some low-barrier scholarships exist through verified foundations, but they always require an application you complete yourself. You cannot be awarded one without initiating the process."},{"question":"What information does a real scholarship ever need from me?","answer":"Only what you provide through an application you initiated — typically academic records and an essay or form. Legitimate awards never require a fee, bank credentials, or a government ID number sent by email to release funds."},{"question":"I already replied with my details — what should I do?","answer":"Stop responding, monitor your credit file for accounts you did not open, and contact your bank if any financial details were shared. Tell your school's financial aid office and report the email to your national fraud authority."}],"lastReviewed":"2026-08-01"},{"slug":"is-it-normal-for-a-cryptocurrency-platform-to-charge-a-withdrawal-tax","url":"https://scamencyclopedia.org/questions/is-it-normal-for-a-cryptocurrency-platform-to-charge-a-withdrawal-tax","question":"Is it normal for a cryptocurrency platform to charge a withdrawal tax before releasing funds?","shortAnswer":"No. Legitimate exchanges deduct fees from your balance — they never require you to pay a separate tax or fee from outside the platform before withdrawing.","explanation":"Fake cryptocurrency platforms routinely block withdrawal attempts and demand a 'tax', 'insurance', 'compliance fee', or 'profit release charge' that must be paid from outside the platform. This is a key mechanism in pig-butchering, Ponzi, and investment fraud schemes. The fees serve two purposes: generating additional revenue from victims and extending the time before victims realise they will never see their funds. Once you pay the fee, a new fee is invented. Regulated exchanges charge transaction or withdrawal fees that are deducted directly from your balance — they never require external payment before a withdrawal can proceed.\n\nThe logic of the demand collapses under one question: if the platform genuinely holds your balance, why can it not deduct the fee from that balance? There is no honest answer. The 'tax' exists because the balance on your dashboard is a fabricated number — there is nothing to deduct from. Each payment you make from outside the platform is new, real money going directly to the criminals, which is why the fees never end: after the tax comes an insurance charge, then a compliance review, then an account unfreeze fee.\n\nThis stage of the scam is also engineered around sunk cost. Having watched your 'profits' grow for weeks, paying one more charge to unlock everything feels rational — and the scammers, often posing as helpful support agents, encourage exactly that reasoning. The discipline that protects you is absolute: once any platform demands outside payment to release funds, stop paying, preserve screenshots and transaction records, and report it. Money already inside is very unlikely to return, but every further fee is a fresh, avoidable loss.","redFlags":["Withdrawal blocked until a tax, compliance fee, or insurance is paid externally","Fee amount changes or a new fee is added after each payment","Customer support is only reachable via Telegram or WhatsApp","Platform is not listed on any regulated exchange register"],"whatToDoNow":["Stop sending money to the platform immediately","Do not pay any fee in hopes of recovering funds — it will not work","Report the platform to your financial regulator and fraud authority","Seek support from a victims' organisation — the emotional impact of investment fraud can be significant"],"faq":[{"question":"Is there any chance of recovering funds from a fake crypto platform?","answer":"Direct crypto losses are very difficult to recover. Some bank-wire losses have been recovered through fraud claims. Report to authorities and your bank as soon as possible — speed matters."},{"question":"Why can't the platform just deduct the tax from my balance?","answer":"Because the balance is not real. A genuine exchange deducts fees from the funds it holds for you. The demand for outside payment exists precisely because there is no actual money in your account to deduct from."},{"question":"Support says the fee is required by regulators — is that possible?","answer":"No. Financial regulators do not collect taxes or fees through trading platforms, and no jurisdiction requires an external payment before a withdrawal. Citing regulators is a script designed to make the demand sound official."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-government-text-about-covid-or-health-payments-real","url":"https://scamencyclopedia.org/questions/is-a-government-text-about-covid-or-health-payments-real","question":"Is a government text about a COVID payment or health rebate real?","shortAnswer":"Texts about health-related government payments are frequently used as phishing lures. Verify any payment claim through official government portals only.","explanation":"Health emergency and pandemic-related payment fraud exploits the confusion created by genuine government relief programmes. Fake texts and emails claim you are entitled to a COVID rebate, health credit, or welfare payment, and direct you to a link to claim it. The site mimics government portals and harvests personal and banking details. Genuine government health payments are administered through existing benefit systems and tax authorities. If you are eligible, you are notified through your existing account or by post — not through unsolicited texts with payment links.\n\nThese campaigns work because they borrow credibility from genuine relief programmes people half-remember from news coverage. The message names a plausible-sounding payment, adds a deadline, and links to a page that reproduces official layouts and logos convincingly. Sender names on SMS can be spoofed to display a government-sounding label, so the apparent sender proves nothing. The page will typically ask for card or bank details 'to deposit your payment' — which is the reversal that gives the scam away, since receiving a genuine government payment never requires you to enter card details on a linked page.\n\nThe safe pattern is always the same: do not tap the link, and check any claimed entitlement by logging into your existing government, tax, or benefits account through the address you normally use. If you already entered details, contact your bank straight away to protect the card or account, change any passwords you reused, and report the message. Expect follow-up attempts — responding once marks your number as live.","redFlags":["Unexpected text about a health payment or rebate you were not expecting","Link to a site that is not an official government domain","Requires banking details or card information to deposit the payment","Urgency — offer expires soon"],"whatToDoNow":["Do not click the link or enter any details","Log into your relevant government account directly to check for genuine payments","Report the text to your national health authority's fraud line","Forward phishing texts to 7726 (UK/US) or the relevant authority"],"faq":[{"question":"How do genuine government health payments reach me?","answer":"Real payments are deposited automatically to your registered bank account or credited to your tax account. You should not need to take action based on an SMS link."},{"question":"I entered my card details before realising — what should I do?","answer":"Contact your bank immediately so the card can be blocked and any attempted charges stopped. Change any passwords you entered, especially if you reuse them elsewhere, and report the message to your national fraud authority."},{"question":"The sender name looked official — doesn't that mean it's genuine?","answer":"No. SMS sender labels can be spoofed to display almost any name, including government-sounding ones. Judge the message by what it asks you to do, not by who it appears to come from."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-new-cryptocurrency-coin-or-token-launch-a-good-investment","url":"https://scamencyclopedia.org/questions/is-a-new-cryptocurrency-coin-or-token-launch-a-good-investment","question":"Is a new cryptocurrency coin or token launch a good investment?","shortAnswer":"New coin launches carry extremely high fraud risk — rug pulls and pump-and-dump schemes are common and most new tokens fail or disappear.","explanation":"Initial coin offerings (ICOs) and new token launches are frequently used to conduct rug-pull fraud. Promoters create a new token with slick branding and community hype, raise investment from buyers, and then abandon the project or withdraw all liquidity — leaving investors with worthless tokens. Even legitimate new tokens carry enormous speculative risk. High-profile promotions on social media and endorsements by influencers or celebrities are common in both fraudulent and speculative legitimate launches. Never invest more than you can afford to lose entirely, verify the development team's real-world identities, and check whether the code has been independently audited.\n\nThe hype around a launch is manufactured, not organic. Paid influencer posts, coordinated Telegram and Discord communities, artificial trading volume, and countdown timers are standard tools for creating the impression that everyone else is buying. Even signals that sound technical — a 'locked' liquidity pool, a renounced contract — can be faked, time-limited, or structured with backdoors that a casual buyer cannot detect. An anonymous team is the single most important warning: when no real person's reputation is attached to the project, there is no cost to abandoning it.\n\nIf you still choose to speculate on new tokens, treat it as gambling rather than investing: use only money whose total loss would not affect your life, take profits rather than compounding into the same project, and be aware that the people who promoted the token to you may have received their tokens free. Nothing about a launch's popularity, celebrity backing, or early price movement tells you whether the founders intend to stay.","redFlags":["Promoted exclusively on social media with celebrity or influencer backing","Development team anonymous or unverifiable","Promises of extraordinary returns in a short period","No independent code audit from a credible security firm"],"whatToDoNow":["Research the team's identities and track record independently","Check for an independent smart contract audit by a credible firm","Treat all speculative crypto as high-risk — never invest money you cannot afford to lose","Report suspected rug-pull projects to your financial regulator"],"faq":[{"question":"What is a rug pull?","answer":"A rug pull occurs when a crypto project's developers withdraw all liquidity from the project, making the token worthless, and disappear with the raised funds."},{"question":"Does a locked liquidity pool make a new token safe?","answer":"No. Liquidity locks reduce one specific risk but can be short-term, partial, or misrepresented, and they do nothing about insider token dumps, malicious contract functions, or simple project abandonment."},{"question":"The token just got listed on a large exchange — is it legitimate now?","answer":"A listing improves liquidity but is not an endorsement or a safety guarantee. Exchanges have listed tokens that later collapsed or were revealed as fraudulent. Do your own checks regardless of where a token trades."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-ai-generated-deepfake-of-a-news-anchor-promoting-crypto-real","url":"https://scamencyclopedia.org/questions/is-an-ai-generated-deepfake-of-a-news-anchor-promoting-crypto-real","question":"Is an AI-generated deepfake of a news anchor promoting crypto real?","shortAnswer":"No. Deepfake videos of news anchors promoting cryptocurrencies are AI-fabricated fraud — no legitimate investment is marketed this way.","explanation":"Deepfake investment scams use AI tools to create convincing video clips of real journalists, news anchors, or public figures appearing to endorse a cryptocurrency platform or investment. These videos are distributed through social media ads and look increasingly realistic. The investment platform featured is fake or fraudulent, and any money deposited is lost. Genuine financial regulators and news organisations issue warnings when their branding or personnel are impersonated. If you see a video where a well-known journalist endorses a specific investment platform, verify by checking the journalist's actual social media and the news organisation's official website.\n\nThe reason these videos keep circulating is structural: paid ad distribution moves faster than platform moderation. A fabricated clip can be re-uploaded under new advertiser accounts as quickly as old ones are removed, and the same footage is recycled across different fake platforms with only the branding changed. As generation tools improve, the traditional visual tells — odd blinking, mismatched lip movement — are becoming less reliable, so the safest test is not visual inspection but source-checking: a real endorsement would exist on the journalist's verified accounts and the broadcaster's own site.\n\nA simpler rule cuts through all of it: no legitimate investment platform recruits customers through celebrity video ads promising returns. Regulated firms are prohibited from marketing this way in most jurisdictions, and journalists do not endorse trading platforms. Treat the format itself — famous face plus investment opportunity plus urgency — as conclusive evidence of fraud, regardless of how authentic the video looks. If you have already deposited, stop all further payments, contact your bank, and report the platform; be alert for follow-up 'recovery' offers targeting known victims.","redFlags":["Video of a known journalist or celebrity endorsing a specific investment platform","Visual or audio glitches around the face or mouth","Platform is not registered with any financial regulator","Video appears only in paid social media ads, not on verified news sites"],"whatToDoNow":["Do not invest in any platform advertised through a video endorsement in an ad","Check the journalist's or organisation's official channels to verify","Report deepfake ads to the social platform and your financial regulator","If you invested, report to your financial regulator and bank immediately"],"faq":[{"question":"How can I detect a deepfake video?","answer":"Look for unnatural blinking, inconsistent lighting on the face, blurring at the hairline, or audio that does not quite match mouth movement. When in doubt, verify through the journalist's authentic accounts."},{"question":"Why don't platforms remove these deepfake ads faster?","answer":"Ad review happens at enormous scale, and removed ads are quickly re-uploaded under new advertiser accounts with small changes. Removal lags behind distribution, which is why you cannot rely on a platform having filtered out fraud."},{"question":"I deposited money on a platform advertised this way — what now?","answer":"Stop all further deposits, contact your bank immediately to discuss recalling payments, and report the platform to your financial regulator. Keep screenshots of the ad and platform, and ignore anyone who contacts you offering fund recovery for a fee."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-used-car-seller-who-wants-a-deposit-before-i-view-the-car-a-scam","url":"https://scamencyclopedia.org/questions/is-a-used-car-seller-who-wants-a-deposit-before-i-view-the-car-a-scam","question":"Is a used car seller asking for a deposit before I can view the car a scam?","shortAnswer":"Yes. No legitimate private seller or dealer requires a deposit before you view a car. This is a standard vehicle fraud tactic.","explanation":"Online vehicle scams often feature attractively priced cars with a compelling story — the seller is moving abroad, deployed in the military, or working through a third-party 'buyer protection' scheme. They ask for a deposit to hold the car before you can see it. Once paid, the car is unavailable or the seller disappears. Some use cloned listings from legitimate platforms. Always view a vehicle in person before any money changes hands. If a seller refuses in-person viewing or applies pressure for a pre-viewing deposit, treat the listing as fraudulent regardless of how convincing the photos or descriptions appear.\n\nThe below-market price is the hook, and the unavailable seller is the mechanism. Every element of the story — deployment, relocation, a shipping company that will deliver the car for inspection — exists to explain why the normal sequence of viewing first and paying second cannot happen. Some versions add a fake 'buyer protection' or escrow layer, complete with professional-looking emails, to make the deposit feel refundable. It is not: the escrow company is invented, and the money goes straight to the scammer.\n\nThe defence is procedural rather than clever: no viewing, no money — with no exceptions for good stories. Verify the vehicle's registration through your official vehicle authority, reverse-image-search the photos (cloned listings reuse images from genuine ads), and be suspicious of any seller who answers questions fluently but always has a reason not to meet. A genuine private seller with a fairly priced car has no shortage of buyers willing to view it, and therefore no reason to demand money from someone who has not.","redFlags":["Seller asks for a deposit or holding fee before you can view the car","Price is significantly below market value for the make and model","Seller claims they are abroad or deploying and cannot meet","Payment requested through an escrow service you have never heard of"],"whatToDoNow":["Never pay any fee before viewing and inspecting the car in person","Verify the registration plate through an official DVLA or DMV check","Reverse-image-search the listing photos to check for duplication","Report fraudulent listings to the platform and Report Fraud (formerly Action Fraud) or IC3"],"faq":[{"question":"Is it safe to buy a car through an online escrow service?","answer":"Only use established, verifiable escrow services. Many vehicle scams invent fake escrow companies — always verify the escrow service's registration independently before sending funds."},{"question":"The seller offered to ship the car to me for inspection — is that real?","answer":"Vehicle-shipping-with-inspection offers are a standard part of this fraud. The 'shipping company' is fake, and the deposit or shipping fee is lost. No legitimate private sale works this way — view the car where it is, or walk away."},{"question":"I paid a deposit and the seller has gone quiet — what should I do?","answer":"Contact your bank immediately to attempt a recall or chargeback, keep all messages and the listing as evidence, and report the fraud to the platform and your national fraud authority."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-call-about-my-student-loan-from-a-company-i-dont-recognise-a-scam","url":"https://scamencyclopedia.org/questions/is-a-call-about-my-student-loan-from-a-company-i-dont-recognise-a-scam","question":"Is a call about my student loan from a company I don't recognise a scam?","shortAnswer":"Likely yes. Student loan servicers are assigned by your loan authority — calls from unknown companies claiming to manage or refinance your student debt are often fraud.","explanation":"Student loan scams take several forms: companies charge upfront fees to enrol you in income-driven repayment plans that are free through your loan servicer; they offer fake loan forgiveness schemes; or they harvest your personal details and FSA login credentials to redirect your correspondence and interfere with your account. In the US, the Department of Education assigns loan servicers — your loan servicer communicates with you through your official loan account and by letter. You should never pay a third party to access repayment programmes or forgiveness schemes that are administered by the government at no cost.\n\nThe most dangerous version of this scam is credential theft rather than the fee. With your loan portal login, a fraudster can change your contact details so official correspondence stops reaching you, redirect communications, and in some cases attempt to divert disbursements or apply for additional borrowing in your name. Because you stop seeing the letters, months can pass before you notice. Callers often time their campaigns around news about forgiveness programmes or repayment changes, when borrowers are expecting contact and are primed to believe the story.\n\nTwo habits neutralise the entire category. First, treat your loan servicer's identity as something you look up, never something a caller tells you — log into your official loan account and check who services your debt. Second, remember that everything these companies sell — repayment plan enrolment, consolidation, forgiveness applications — is available free through official channels. If you have already shared credentials, change your password immediately, review your contact details on the account, and alert your servicer so they can flag the account for fraud.","redFlags":["Promises of immediate loan forgiveness or dramatic balance reduction","Requests your FSA ID, login credentials, or Social Security number","Upfront fee to access government repayment programmes","Company is not your official loan servicer assigned by the loan authority"],"whatToDoNow":["Do not provide credentials or fees to unsolicited callers","Log into your official student loan account directly to check your servicer","Contact your official servicer for free help with repayment options","Report fraudulent student loan companies to the CFPB (US) or relevant national authority"],"faq":[{"question":"Are there legitimate student loan refinancing companies?","answer":"Yes — regulated lenders offer refinancing. The key difference is they contact you after you inquire, do not charge upfront fees, and never ask for government portal credentials."},{"question":"I gave a caller my loan portal login — what should I do now?","answer":"Change the password immediately, check that your contact details and bank information on the account have not been altered, and contact your official servicer to flag the account. Monitor statements closely for the next several months."},{"question":"Why did the caller know details about my loan?","answer":"Partial loan details circulate through data breaches and lead-generation lists. A caller knowing your balance or servicer name does not make them legitimate — verify by logging into your official account, never by trusting inbound contact."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-rental-listing-that-only-accepts-cryptocurrency-a-scam","url":"https://scamencyclopedia.org/questions/is-a-rental-listing-that-only-accepts-cryptocurrency-a-scam","question":"Is a rental listing that only accepts cryptocurrency as a deposit a scam?","shortAnswer":"Yes. No legitimate landlord requires cryptocurrency as a tenancy deposit. This is always a fraud.","explanation":"Requiring cryptocurrency for a rental deposit is a strong indicator of fraud because crypto transfers are irreversible and untraceable to a named individual. Legitimate tenancy deposits are paid by bank transfer or through a government-registered deposit protection scheme. Scam rental listings — which often clone real properties from other platforms at below-market prices — request crypto to prevent chargebacks and make recovery impossible. In some jurisdictions, accepting a tenancy deposit in cryptocurrency may not even constitute a legally valid deposit protection. If a landlord insists on crypto, do not proceed.\n\nThe crypto demand usually sits inside a broader pattern worth recognising: the property is priced just below comparable listings to generate urgency, the 'landlord' is conveniently abroad and communicates only in writing, and viewing is either impossible or promised only after payment 'secures' the property. Some versions dress the transaction up with a fake booking platform or 'rental guarantee' service that appears to hold your money safely. None of that changes the underlying fact — once cryptocurrency is sent, no bank, platform, or authority can pull it back.\n\nProtecting yourself is mostly about sequencing. View the property in person, meet the landlord or agent, and verify ownership or agency credentials before any money moves. Pay deposits only by traceable bank transfer, and use your jurisdiction's deposit protection scheme where one exists. A genuine landlord benefits from traceable payment as much as you do; only someone planning to disappear benefits from an irreversible one.","redFlags":["Cryptocurrency required as the sole payment method for the deposit","Property listed below market rate for the area","Landlord cannot show proof of ownership","Viewing is not available before payment is requested"],"whatToDoNow":["Decline any rental that requires crypto for a deposit","Verify ownership through land registry before paying any deposit","Pay deposits only by bank transfer to a traceable account and use a deposit protection scheme","Report the listing to the platform and fraud authority"],"faq":[{"question":"Can I ever get crypto back if a landlord scams me?","answer":"Cryptocurrency transactions are final and pseudonymous — recovery is extremely rare. This is exactly why fraudsters request it. Bank transfers to regulated accounts have much better recovery options."},{"question":"The listing uses a booking platform that holds my crypto 'in escrow' — is that safer?","answer":"No. Fake escrow and rental-guarantee sites are built specifically to make crypto payments feel protected. If the underlying payment is cryptocurrency to an unverified landlord, the escrow layer is part of the fraud."},{"question":"What if the landlord says crypto is just faster for an international deposit?","answer":"Speed is not a tenant's problem to solve. International landlords use ordinary bank accounts and letting agents. The real reason for the crypto request is irreversibility — decline and move on."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-fake-invoice-for-a-domain-or-website-renewal-a-scam","url":"https://scamencyclopedia.org/questions/is-a-fake-invoice-for-a-domain-or-website-renewal-a-scam","question":"Is a letter or email with a fake invoice for my domain or website renewal a scam?","shortAnswer":"Very likely yes. Domain renewal scams send invoices mimicking the look of official notices to trick website owners into paying an unknown registrar.","explanation":"Domain renewal scam letters and emails are sent to registered domain owners whose details are publicly available in WHOIS records. They mimic the format of official registry invoices and warn that your domain will expire if you do not pay urgently. Paying transfers your domain to the scammer's registrar rather than renewing it with your existing provider, and the cost is typically far above market rate. Your domain records are also used to harvest payment details. Always verify domain renewal notices by logging into your actual registrar's account — never pay an invoice that arrives unsolicited without first checking your real renewal date.\n\nThese notices succeed because they exploit a real administrative anxiety: losing a domain genuinely does break a business's website and email, so an official-looking expiry warning triggers quick payment, especially inside busy companies where the person handling invoices is not the person who registered the domain. Some variants are technically legal but deceptive — the small print reveals you are authorising a transfer to a different registrar at an inflated price rather than paying a fake invoice. Others are pure theft, harvesting card details with no service behind them at all.\n\nA few habits remove the risk entirely. Keep a record of which registrar actually holds each of your domains and when they expire, enable auto-renewal, and treat any renewal demand that arrives by post or unsolicited email as noise. Consider enabling WHOIS privacy so your contact details are not published for scammers to harvest, and make sure whoever pays invoices in your business knows that domain renewals only ever happen inside your registrar account.","redFlags":["Renewal notice from a registrar you do not use","Price significantly higher than your current registrar charges","Language implies your domain will be lost imminently without payment","Payment link goes to an unfamiliar domain"],"whatToDoNow":["Log into your actual registrar to check your domain's real expiry date","Do not pay any invoice that did not come from your verified registrar account","Mark the domain for auto-renewal with your genuine registrar","Report domain scam letters to consumer authorities and your national domain registry"],"faq":[{"question":"What happens if I accidentally pay a domain renewal scam?","answer":"Your domain may be transferred to the scammer's registrar. Contact your real registrar immediately to initiate a transfer back. Act quickly — the transfer window is usually 60 days."},{"question":"How did they know I own this domain and when it renews?","answer":"Domain ownership records and expiry dates are publicly visible in WHOIS databases unless you enable privacy protection. Scammers harvest these records in bulk, which is why the notices often quote accurate details."},{"question":"How do I stop these letters targeting my business?","answer":"Enable WHOIS privacy with your registrar, turn on auto-renewal so expiry anxiety loses its power, and brief anyone who handles your invoices that domain renewals are only ever paid inside your registrar account."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-phone-call-about-a-problem-with-my-amazon-account-a-scam","url":"https://scamencyclopedia.org/questions/is-a-phone-call-about-a-problem-with-my-amazon-account-a-scam","question":"Is a phone call about a problem with my Amazon account a scam?","shortAnswer":"Almost certainly yes. Amazon does not make unsolicited calls about account issues. These calls are impersonation scams designed to steal your credentials or payment details.","explanation":"Amazon impersonation calls typically warn that your account has been compromised, that an unauthorised purchase was made, or that a Prime membership is about to renew unexpectedly. The caller asks you to press a number, visit a URL, or call back a provided number. They then attempt to capture your Amazon login, payment card details, or remote access to your device. Amazon communicates account issues through your account dashboard and by email to your registered address. If you receive an unexpected call claiming to be Amazon, hang up and check your account directly at amazon.com.\n\nThe scripts are designed to convert alarm into obedience. An automated voice announces a large purchase — a phone, a laptop, an order shipping to another city — and offers to connect you to 'security' if the order was not yours. Because you did not make the purchase, connecting feels like the responsible thing to do, and from there a calm 'agent' walks you through steps that end with a compromised account, a card number read aloud, or remote access software on your device. Some versions escalate further, transferring you to a fake bank or government investigator once the story needs more authority.\n\nThe strongest defence is refusing the channel, not debating the content. Any unexpected call about an Amazon problem gets hung up on — not argued with, not tested with questions — and the claim gets checked in the one place it can be verified: your account's order history and message centre. Nothing legitimate is ever lost by hanging up and checking directly; everything the scammer needs depends on keeping you on the line.","redFlags":["Unsolicited call claiming to be from Amazon about a problem","Automated voice followed by a number to press","Caller asks for your Amazon password or payment details","Request to install an app or allow remote access to your device"],"whatToDoNow":["Hang up and do not call back the number provided","Log into your Amazon account directly to check for any real issues","Change your Amazon password if you shared any credentials","Report the call to Amazon's customer service and your national fraud authority"],"faq":[{"question":"Does Amazon ever call customers?","answer":"Amazon may call you if you have requested a callback through your account. They will never make an unsolicited outbound call to warn you about security issues or prompt action."},{"question":"The caller described a specific order that wasn't mine — why?","answer":"The 'unauthorised order' is invented precisely so you will engage to dispute it. Naming a specific expensive item makes the story feel real, but the details are the same in thousands of identical calls."},{"question":"I allowed the caller remote access to my device — what should I do?","answer":"Disconnect the device from the internet, uninstall any software they had you install, run a security scan, and change your Amazon, email, and banking passwords from a different device. Contact your bank if it was accessed during the session."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-sponsored-facebook-post-from-a-well-known-bank-about-investment-safe","url":"https://scamencyclopedia.org/questions/is-a-sponsored-facebook-post-from-a-well-known-bank-about-investment-safe","question":"Is a sponsored Facebook post from a well-known bank promoting an investment offer safe?","shortAnswer":"Not necessarily. Fraudsters run sponsored ads on Facebook using cloned bank branding. Always verify investment offers directly through the bank's official website.","explanation":"Investment fraud using fake bank-branded Facebook ads is a well-documented problem. Scammers create convincing sponsored posts mimicking major banks, building societies, or investment platforms. The ad links to a polished fake site where you enter contact details or make a deposit. Facebook's ad system does not verify financial services branding before publishing, so fraudulent ads circulate for days before being removed. The FCA, FTC, and other regulators issue regular warnings about fake bank investment ads. Any investment offer found through a social media ad should be verified independently by navigating to the bank's official domain directly.\n\nWhat makes this format effective is that everything visible in the ad can be authentic-looking at once: real logos, accurate brand colours, plausible product names like 'fixed-rate bonds', and rates just high enough to be attractive without seeming absurd. The landing page often collects only your name and phone number — the actual fraud happens later, when a professional-sounding 'adviser' calls back, sometimes over weeks, building trust before taking a deposit into an account that has nothing to do with the bank.\n\nThat callback stage is worth understanding, because it defeats people who were rightly suspicious of the ad itself. The caller references the bank fluently, sends convincing brochures, and never pressures crudely. The only reliable checkpoint is independent verification: find the bank's number on its official website or your card and ask whether the offer exists, and check that the firm and the account details you are given match the regulator's register. If you have already transferred money, contact your bank at once — speed materially affects what can be recovered.","redFlags":["Investment return is notably higher than current market rates","Sponsored ad rather than a post from the bank's verified account","Landing page URL does not exactly match the bank's official domain","No risk warnings or regulatory registration details on the page"],"whatToDoNow":["Do not click through or enter any details from the ad","Navigate to the bank's official website directly to check for the offer","Check the investment provider on your financial regulator's register","Report fraudulent ads to Facebook and your national financial regulator"],"faq":[{"question":"Can I trust a Facebook post from a bank's verified page?","answer":"A verified page offers more assurance than a sponsored ad, but even verified accounts can be compromised. Always visit the official website directly for investment decisions."},{"question":"I only submitted my name and phone number — am I at risk?","answer":"Expect polished follow-up calls from a fake 'adviser' for that bank. Treat any inbound investment call as hostile, verify offers only through the bank's official number, and warn family members who share your landline."},{"question":"The rate offered was only slightly above normal — doesn't that suggest it's real?","answer":"Modest rates are deliberate. Clone-firm fraud moved away from absurd returns because slightly-better-than-market offers get through people's defences. Verify the firm on the regulator's register regardless of how reasonable the rate looks."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-text-saying-i-have-unclaimed-tax-back-real","url":"https://scamencyclopedia.org/questions/is-a-text-saying-i-have-unclaimed-tax-back-real","question":"Is a text saying I have unclaimed tax money waiting for me real?","shortAnswer":"Unexpected tax refund texts are almost always phishing scams. Tax authorities communicate through your tax account or by post — not via SMS links.","explanation":"Tax rebate phishing is perennially popular because tax refunds are a genuine occurrence. A convincing SMS claims you are owed a refund and provides a link to claim it. The link leads to a fake government tax portal that captures personal and banking details. Real tax refunds from HMRC, the IRS, or equivalent agencies are calculated and issued automatically. When a refund is due, you are notified through your tax account or official correspondence. You are never required to click an SMS link to trigger or receive a tax refund. If you believe you may genuinely be owed a rebate, check your tax account directly at the official government website.\n\nTax rebate phishing clusters around the times of year when refunds are plausible — after filing deadlines and year-end reconciliations — which is precisely when a refund message feels expected rather than suspicious. The fake portals are close copies of the real thing and typically ask for far more than a refund would ever require: full card numbers, online banking credentials, your national identity number, sometimes your mother's maiden name. That over-collection is the tell. A genuine refund needs nothing from you at all, because the tax authority already holds your details and pays through established channels.\n\nIf you clicked and entered information, act on the assumption it will be used. Contact your bank to protect the card or account, change any passwords you entered (and anywhere else you reuse them), and consider a fraud alert on your credit file if identity numbers were shared. Report the message to your tax authority's phishing address so the domain can be taken down — these campaigns are run in waves, and the page that caught you is catching others the same day.","redFlags":["Unsolicited SMS about unclaimed tax money","Link to a site that is not the official government tax domain","Requires bank details to receive the refund","Urgency — rebate expires within a short timeframe"],"whatToDoNow":["Delete the message and do not click the link","Log into your tax account directly through the official government website","Report tax phishing texts to the relevant tax authority","If you shared bank details, contact your bank immediately"],"faq":[{"question":"How will I know if I genuinely have a tax rebate?","answer":"Your tax authority will notify you through your account portal or by post. In the UK, HMRC sends a P800 letter. In the US, the IRS issues a refund notice. You do not need to act on an SMS."},{"question":"Why does the fake refund site ask for so many details?","answer":"Over-collection is the point — card numbers, banking logins, and identity numbers are each valuable separately. A genuine refund requires nothing from you, because the tax authority already has your details and pays automatically."},{"question":"I entered my details on the linked site — what should I do?","answer":"Contact your bank immediately, change any passwords you typed (everywhere you reuse them), and consider a credit-file fraud alert if identity numbers were shared. Report the message to your tax authority so the fake site can be taken down."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-call-saying-my-national-grid-or-utility-meter-needs-upgrading-a-scam","url":"https://scamencyclopedia.org/questions/is-a-call-saying-my-national-grid-or-utility-meter-needs-upgrading-a-scam","question":"Is a call saying my national grid or smart meter needs urgent upgrading a scam?","shortAnswer":"Cold calls about urgent meter upgrades are often scams using utility company names to gain access to your home or financial details.","explanation":"Smart meter and utility upgrade scams involve callers claiming to be from your energy company, the national grid, or a government programme. They say your meter is faulty, overcharging you, or that you are legally required to upgrade within a short timeframe. Some scams are purely financial — they collect a fee for the 'upgrade'. Others use the pretext to gain access to your home, where they may steal, install fraudulent meters that allow energy theft, or pressurise you into buying energy-efficiency products. Genuine smart meter upgrades are offered free by your energy supplier and arranged through verifiable correspondence — they never begin with an unsolicited phone call demanding urgency.\n\nThe 'legal requirement' framing is the pressure point to watch. Callers claim your meter type is being phased out, that you face fines or disconnection, or that you are owed compensation for years of overcharging that can only be released after the upgrade visit. Each story exists to get one of two things: a payment over the phone, or a stranger inside your home with your consent. Doorstep versions carry additional risks — distraction burglary while one 'engineer' keeps you talking, or pressure-selling of overpriced energy products to whoever answers the door.\n\nHandle it with a fixed routine: take no action during the inbound call, then verify through the number printed on your energy bill. For any doorstep visit, keep the door closed while you check ID by phoning the supplier yourself — genuine engineers expect this and carry verifiable identification. Booked appointments for real meter work come with reference numbers you can confirm in your online account. If someone resists being verified, that resistance is your answer; report the incident to your supplier and, for doorstep callers, to local police.","redFlags":["Unsolicited call about an urgent meter upgrade","Caller cannot verify your account details without you providing them first","Fee required for the upgrade","Insists on immediate access to your home"],"whatToDoNow":["Do not agree to a visit or payment during the call","Call your energy supplier using the number on your bill to verify","Ask any doorstep caller for a company ID and verify it before letting them in","Report the call to your energy regulator and national fraud authority"],"faq":[{"question":"Are smart meter upgrades ever free?","answer":"Yes — in the UK and many countries, smart meter upgrades are provided free by energy suppliers under government schemes. You can request one through your supplier's official website."},{"question":"An 'engineer' is at my door about the meter — what should I do?","answer":"Keep the door closed and call your supplier on the number from your bill to confirm the visit. Genuine engineers carry ID, expect to be checked, and will wait or rebook. Anyone who pressures you to open up first should be reported."},{"question":"The caller said I'd be fined if my meter isn't upgraded — is that true?","answer":"No. Householders are not fined for having an older meter. The threat exists to create urgency. Any genuine change to your metering is arranged by your supplier through correspondence you can verify in your account."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-online-gaming-tournament-that-charges-an-entry-fee-legitimate","url":"https://scamencyclopedia.org/questions/is-an-online-gaming-tournament-that-charges-an-entry-fee-legitimate","question":"Is an online gaming tournament that charges an entry fee legitimate?","shortAnswer":"Paid tournaments exist on legitimate platforms, but many tournament scams collect fees and cancel the event or disappear with the prize pool.","explanation":"Legitimate paid gaming tournaments run on established platforms (Battlefy, Challonge, ESL) or through verified game publishers and have transparent prize structures, terms of service, and dispute mechanisms. Scam tournaments advertise on social media or Discord with high prize pools, collect entry fees by payment link, and then either never begin, cancel citing 'technical issues', or pay winners nothing. Before paying an entry fee, verify the organiser's identity, check if the platform is established with a history of completed events, and confirm that any prize pool is held in escrow rather than with the organiser personally.\n\nThe prize pool is usually the mathematical tell. When the guaranteed prizes far exceed what plausible entry fees could fund, the money must come from somewhere else — and in a scam, it comes from nowhere, because no prizes will ever be paid. Watch also for how the tournament handles losing gracefully: fraudulent events postpone repeatedly, blame server issues, demand a further 'verification fee' before paying winners, or quietly delete the Discord server after the entry window closes.\n\nPaying safely is largely about where the money goes. Entry fees paid to an established tournament platform sit inside a system with dispute processes and organiser accountability; fees sent to a personal PayPal, CashApp, or crypto address sit with an anonymous individual. Keep records of the rules and prize commitments as advertised, pay by methods with chargeback rights where possible, and treat any organiser who changes payment arrangements mid-registration as a cancelled event. The competitive gaming scene has enough verifiable operators that unverifiable ones never need your entry fee.","redFlags":["Tournament promoted only through social media or Discord with no established platform","Entry fee collected through a personal payment link rather than a platform","No verifiable history of completed tournaments by the organiser","Prize pool guaranteed in a suspiciously high amount relative to entry fee"],"whatToDoNow":["Research the tournament organiser on independent forums","Only pay entry fees through established gaming tournament platforms","Ask for confirmation of prize escrow arrangements before paying","Report scam tournaments to the platform and your consumer protection body"],"faq":[{"question":"Are prize pools in gaming tournaments regulated?","answer":"Regulation varies by country and prize size. In general, established platforms hold prize money in trust. Avoid tournaments where the organiser directly holds prize funds without escrow."},{"question":"The tournament keeps getting postponed — is that a bad sign?","answer":"Repeated postponements after fees are collected are a classic wind-down before the organiser disappears. Request a refund immediately, raise a chargeback if you paid by card, and warn other entrants."},{"question":"How can I check an organiser's history?","answer":"Look for completed events under the same name on established tournament platforms, search community forums for past participants' payout experiences, and be wary of organisers whose accounts and servers were all created recently."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-text-from-my-delivery-company-asking-for-my-card-details-to-redeliver-real","url":"https://scamencyclopedia.org/questions/is-a-text-from-my-delivery-company-asking-for-my-card-details-to-redeliver-real","question":"Is a text from a delivery company asking for card details to redeliver my parcel real?","shortAnswer":"No. Genuine delivery companies do not ask for card details by text. This is a delivery phishing scam.","explanation":"Delivery redelivery card-detail requests are a consistent form of smishing. The message imitates a carrier like DHL, UPS, FedEx, or Royal Mail and says a parcel could not be delivered. To rearrange delivery you must pay a small fee by entering card details on a linked page. The page is a fake checkout that captures and stores your card number for fraudulent use. Real delivery companies offer free redelivery options through their official app or website. Where a genuine charge applies — such as customs duties — you are redirected to the carrier's official payment page, never asked for card details by SMS link.\n\nThe small size of the fee is deliberate and is the most instructive part of the scam. Nobody hesitates over a trivial amount, but the payment form captures the full card number, expiry, and security code — everything needed for much larger fraudulent charges later, or for a follow-up call in which someone posing as your bank's fraud team references the small charge to sound credible. That second-stage call is often where the real damage happens, because you half-remember the delivery payment and the story fits.\n\nTiming does the rest of the work: these texts are sent in vast indiscriminate batches, so a proportion always lands on people genuinely waiting for a parcel. Expecting a delivery is not evidence the message is real. Keep one rule regardless of context — parcels are managed only through the carrier's app or website, reached by typing the address or using your existing app, never through a message link. If card details were entered, tell your bank immediately and treat any later 'bank fraud team' call about the incident as part of the same scam.","redFlags":["SMS requesting card details to release or redeliver a parcel","URL in the text does not match the carrier's official domain","Parcel reference number is absent or generic","Message arrives when you are not expecting a delivery"],"whatToDoNow":["Do not click the link or enter card details","Track any real parcel directly through the carrier's official website or app","If you entered card details, contact your bank immediately to block the card","Report smishing texts to 7726 (UK/US) and the carrier's fraud team"],"faq":[{"question":"How do I rearrange a genuine missed delivery?","answer":"Visit the carrier's official website, enter your tracking number, and use their redelivery tool. No card details are required for a standard redelivery."},{"question":"Why would scammers bother with such a tiny fee?","answer":"The fee is bait, not the prize. The payment form captures your full card details for larger fraud later, and the small charge is sometimes referenced in a follow-up call from a fake bank fraud team to win your trust."},{"question":"I was actually expecting a parcel — doesn't that mean the text is real?","answer":"No. These texts are sent in enormous random batches, so many recipients are genuinely awaiting deliveries by coincidence. Check the parcel only through the carrier's own app or website, never through the link."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-high-yield-savings-account-offered-by-email-legitimate","url":"https://scamencyclopedia.org/questions/is-a-high-yield-savings-account-offered-by-email-legitimate","question":"Is a high-yield savings account offered by email from a bank I don't recognise legitimate?","shortAnswer":"Unsolicited emails advertising above-market savings rates from unfamiliar banks deserve verification before any deposit. Some are fraudulent clone firms.","explanation":"Clone firm fraud involves criminals registering entities with names similar to real banks and advertising above-market interest rates to attract deposits. The firm may even create websites that reference real regulatory registrations to appear legitimate, while actually not being authorised. In the UK, the FCA maintains a financial services register — any firm collecting deposits must be listed there. In the US, the FDIC insures deposits at member banks. Before depositing with any unfamiliar savings provider, verify their exact registration on the regulator's official register and confirm the email domain matches the firm's verified contact details. Deposits at unregulated firms may not be covered by compensation schemes.\n\nClone operations put real effort into surviving your first round of checks. They quote the genuine firm's registration number, copy its address, and sometimes link to the real regulator entry — counting on you noticing that the firm exists without noticing that the contact details you are using belong to someone else. That is why verification has to run in one direction only: find the firm on the register first, then use the phone number and website listed there, rather than confirming details the email gave you.\n\nRate context helps too. Deposit rates across regulated providers cluster within a narrow band because they are all funded the same way; an outlier well above that band is not a hidden bargain, it is the cost of attracting deposits from people who compare rates but not registrations. Before moving savings anywhere unfamiliar, check the firm on the official register, confirm deposit protection applies to the specific account type, and make the first contact yourself through the registered details. An unsolicited email is never the right doorway into a savings product.","redFlags":["Interest rate significantly higher than other market rates","You cannot find the firm on the official financial regulator's register","Contacted by unsolicited email rather than through a comparison site you initiated","Firm name is similar to a well-known bank but slightly different"],"whatToDoNow":["Search the firm's exact name on the official financial services register","Verify the firm's registered address, phone number, and email domain match the register","Do not deposit until verification is complete","Report suspected clone firms to your national financial regulator"],"faq":[{"question":"What is a clone firm?","answer":"A clone firm uses a name and branding similar to a real authorised firm to deceive consumers. They are not the real firm and deposits are not covered by compensation schemes."},{"question":"The email quoted a genuine regulator registration number — doesn't that prove it's real?","answer":"No. Clone firms quote the real firm's registration while substituting their own bank details and contacts. Always look the firm up on the register yourself and use only the contact details listed there."},{"question":"I already transferred savings to one of these firms — what now?","answer":"Call your bank immediately and ask them to attempt recovery of the transfer, then report the clone firm to your financial regulator. The sooner your bank acts, the better the chance of freezing funds before they move on."}],"lastReviewed":"2026-08-01"},{"slug":"is-it-safe-to-sell-on-vinted-or-depop-and-accept-a-bank-transfer","url":"https://scamencyclopedia.org/questions/is-it-safe-to-sell-on-vinted-or-depop-and-accept-a-bank-transfer","question":"Is it safe to sell on Vinted or Depop and accept a bank transfer from a buyer?","shortAnswer":"No — accepting payment outside the platform's checkout removes all seller protection and is against the platforms' terms of service.","explanation":"On second-hand fashion platforms like Vinted and Depop, scammers pose as buyers and ask sellers to accept payment by direct bank transfer, claiming the platform's checkout is down or offers them a lower fee. Once you agree to go off-platform, buyer protection and seller protection are both gone. The 'buyer' may send a fake payment confirmation and pressure you to ship immediately. They may also send an overpayment and ask you to return the difference. Always complete transactions through the platform's official checkout. This protects you as a seller from payment reversal or non-payment, and ensures disputes can be resolved through the platform.\n\nThe requests are engineered to sound like favours to you: a higher price for your item, faster payment, avoiding the platform's fees. Each framing hides the same trade — you give up the payment system's guarantees in exchange for words on a screen. Fake payment confirmations are a particular trap for newer sellers: a convincing email or screenshot 'from' the platform or a bank says the money is waiting, sometimes adding that you must ship first or pay a small 'release' charge before the funds appear. No real payment system holds a seller's money hostage pending shipment proof you send by chat.\n\nA clean policy costs you nothing: every message that proposes moving payment, shipping, or dispute-handling off the platform ends the conversation. Genuine buyers almost never make these requests, and the rare one inconvenienced by your caution is a far smaller loss than one reversed payment. If you have already shipped after an off-platform 'payment', contact the platform and your bank at once with screenshots — and report the account so the same script does not work on the next seller.","redFlags":["Buyer asks to pay by bank transfer, PayPal Friends and Family, or outside the platform","Claims the platform's payment system is not working","Sends a fake payment confirmation and urges immediate shipping","Offers to pay slightly more if you go off-platform"],"whatToDoNow":["Decline any off-platform payment request and insist on the platform's checkout","Do not ship until payment is confirmed inside the platform","Report the buyer to the platform's trust and safety team","If defrauded off-platform, report to your bank and Report Fraud (formerly Action Fraud) or IC3"],"faq":[{"question":"Can I offer a discount for bank transfer to avoid platform fees?","answer":"Both platforms prohibit off-platform transactions. Doing so removes your protection and may result in your account being suspended if reported."},{"question":"The buyer sent a screenshot showing they paid — should I ship?","answer":"No. Screenshots and confirmation emails are trivially faked. Money is only real when it shows as received inside the platform's own payment system or as cleared funds in your actual bank account."},{"question":"I already posted the item after an off-platform payment that never arrived — what now?","answer":"Contact the carrier to attempt interception if the parcel is still in transit, report the buyer to the platform with screenshots, and report the fraud to your bank and national fraud service."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-cold-email-from-a-company-asking-to-guest-post-on-my-blog-a-scam","url":"https://scamencyclopedia.org/questions/is-a-cold-email-from-a-company-asking-to-guest-post-on-my-blog-a-scam","question":"Is a cold email from a company asking to guest post on my blog a scam?","shortAnswer":"Not always, but many guest post outreach emails are link-buying operations or content spam campaigns that may harm your site's search reputation.","explanation":"Genuine guest posting exists as a content marketing practice, but the majority of cold guest post emails are from link-buying agencies that want to place keyword-rich content containing paid backlinks to commercial clients. Publishing these posts can violate Google's guidelines and result in manual penalties to your site. In more aggressive versions, a contact poses as a writer but the 'guest post' contains malicious links, affiliate links without disclosure, or content promoting dubious services like crypto or pharmaceuticals. Before accepting any guest post, verify the writer's identity, review all links independently, and ensure you comply with your advertising disclosure obligations if any payment changes hands.\n\nThe economics explain the volume: your site's search authority is the product being bought. Link-buying agencies pitch hundreds of site owners at once with templated flattery, because a single published post carrying commercial links can be resold to their clients many times over. The risk lands asymmetrically on you — the agency loses nothing if your site is penalised, while you can lose rankings that took years to build. The more dangerous variants swap links after publication, editing an innocuous approved article to point at gambling, pharmaceutical, or crypto pages weeks later when you are no longer watching.\n\nA short screening routine filters nearly all of it: reply asking for the writer's verifiable identity and published work; require final editorial control including the right to remove or nofollow any link at any time; and re-check published guest content periodically for altered links. Anyone whose real goal is placing a paid link will drop out at the editorial-control step, which is exactly the point.","redFlags":["Email is clearly templated with minimal personalisation about your site","Offer includes payment for publishing an article with links","Writer refuses to allow you to edit the content or remove specific links","Article topic is unrelated to your site's usual subject matter"],"whatToDoNow":["Review any offered content carefully before publishing, including all links","Decline requests where you cannot edit freely or where links must remain","If paid, disclose any sponsored content per advertising standards","Report emails containing malicious links to your email provider"],"faq":[{"question":"Are all guest post emails paid link schemes?","answer":"No — genuine writers do pitch guest posts. The difference is that genuine pitches are personalised, the writer is verifiable, and they do not require specific commercial links to remain in the content."},{"question":"What is the risk to my site if I publish paid link content?","answer":"Search engines treat undisclosed paid links as manipulation. Your site can lose rankings or receive a manual penalty, and recovering that authority is slow. The agency selling the links bears none of this risk — you do."},{"question":"Can links in an already-published guest post be changed later?","answer":"Yes — some operators request small 'updates' or retain edit access and swap innocuous links for commercial ones after publication. Keep control of edits yourself and periodically re-check the links in any guest content you host."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-nhs-or-medicare-contact-asking-for-my-details-to-send-a-card-real","url":"https://scamencyclopedia.org/questions/is-an-nhs-or-medicare-contact-asking-for-my-details-to-send-a-card-real","question":"Is an NHS or Medicare contact asking for my personal details to send a new card real?","shortAnswer":"No. The NHS and Medicare do not contact patients to gather details for card replacement — this is an impersonation scam.","explanation":"Healthcare impersonation scams target elderly people and migrants by impersonating the NHS (UK) or Medicare (US). A caller claims your health card or National Health Service number needs updating and asks for personal details, date of birth, and sometimes banking details for 'insurance record' purposes. This information is used for identity theft, benefit fraud, or to access your medical records. The NHS sends replacement cards automatically when needed — they do not call to ask for your details. Medicare contacts you by post, not by cold call requesting information. If you receive such a call, hang up and contact the relevant agency using a number from their official website.\n\nHealth-system impersonation is unusually effective because the details requested sound administrative rather than financial. A date of birth, a health number, an address history — none of it feels like handing over money, yet combined these details are enough to attempt benefit claims, open credit, or pass identity checks elsewhere. Some scripts add a small 'postage' or 'processing' charge for the new card, which both extracts a payment and captures your card details; others use the health pretext to book a follow-up call from a fake billing or insurance department.\n\nThe structural fact to hold onto is that these systems already know you. The health service that issued your number does not need to phone you to ask what it is, any more than it needs your bank details to maintain a record. When contact is genuinely required, it arrives in ways you can verify — letters referencing your actual GP or provider, messages in official portals — and nothing is ever cancelled because you chose to hang up and call back through the published number. Vulnerable relatives are the main targets, so pass the pattern on to them explicitly.","redFlags":["Unsolicited call from someone claiming to represent the NHS or Medicare","Asks for your health number, date of birth, or national insurance number","Requests banking details to update insurance records","Urgency — card will be cancelled if you do not verify today"],"whatToDoNow":["Hang up without providing any information","Contact the relevant agency directly using a number from their official website","Report the call to your national fraud authority","Alert elderly or vulnerable family members who may be targeted"],"faq":[{"question":"Does the NHS or Medicare ever call patients?","answer":"They may call for appointment-related purposes. They do not make cold calls asking for personal details to update records or issue new cards."},{"question":"Why would scammers want health details rather than bank details?","answer":"Identity fragments — date of birth, health numbers, address history — are combined to pass identity checks, attempt benefit fraud, or open credit. The call feels administrative precisely so you don't treat the information as valuable."},{"question":"I gave my details before hanging up — what should I do?","answer":"Report it to the relevant health agency's fraud line, monitor your credit file and benefit correspondence for activity you don't recognise, and warn your bank if any payment details were shared. Expect and ignore follow-up calls referencing the first one."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-telegram-group-promising-daily-returns-on-a-trading-fund-a-scam","url":"https://scamencyclopedia.org/questions/is-a-telegram-group-promising-daily-returns-on-a-trading-fund-a-scam","question":"Is a Telegram group promising daily percentage returns on a pooled trading fund a scam?","shortAnswer":"Yes. Pooled trading funds promising consistent daily returns on Telegram are unregulated investment fraud or Ponzi schemes.","explanation":"Telegram pooled investment groups invite members to contribute funds that are 'managed' by a skilled trader or automated system, with daily percentage profits shared. Initial returns may be genuine, paid from newer investors' deposits rather than real trading activity — the defining feature of a Ponzi scheme. As the group grows, withdrawal requests are delayed, restricted, or met with demands for taxes or fees. The 'fund manager' eventually disappears. Running a pooled investment fund in most countries requires authorisation from the financial regulator. Any fund operating exclusively through Telegram without regulatory oversight is conducting illegal financial services activity.\n\nThe group chat itself is a stage set. Screenshots of profitable trades, grateful testimonials, and members announcing successful withdrawals are routinely produced by accounts controlled by the operators — a technique that makes the scheme feel socially verified from the inside. Early small withdrawals are often honoured deliberately, because a member who has successfully withdrawn once will deposit far more the second time and recruit friends with genuine enthusiasm. That recruited sincerity is what makes these schemes spread through real social networks.\n\nJudge any pooled fund by the tests that do not depend on the group's atmosphere: consistent returns regardless of market direction are mathematically implausible; genuine fund managers are named, regulated, and auditable; and real investment firms do not operate customer service, onboarding, and withdrawals entirely inside a messaging app. If you have money in such a group, do not signal suspicion before attempting a withdrawal, never pay a fee to release funds, and preserve the chat history — it is evidence for your bank and regulator, and it disappears when the operators reset.","redFlags":["Consistent daily or weekly percentage returns regardless of market conditions","Fund operates exclusively through Telegram — no regulated platform","Withdrawal difficulties or additional fees after profits accumulate","Recruiter earns a commission for bringing in new investors"],"whatToDoNow":["Do not contribute funds and exit the group","If you have funds 'invested', do not pay additional fees to withdraw them","Report to your national financial regulator","Warn others in the group who may not have identified the fraud"],"faq":[{"question":"What is the difference between a Ponzi scheme and genuine investing?","answer":"Genuine investments carry risk and returns vary with markets. A Ponzi scheme pays fake consistent returns using new investors' money and collapses when new investment slows."},{"question":"Other members post proof of their withdrawals — doesn't that verify the fund?","answer":"No. Testimonials and withdrawal screenshots inside the group are typically posted by operator-controlled accounts, and early withdrawals are honoured deliberately to encourage larger deposits. Social proof inside the scheme verifies nothing."},{"question":"I have money in one of these groups — how should I try to get it out?","answer":"Attempt a full withdrawal without announcing suspicion, refuse any fee demanded to release it, and save the complete chat history. Then report to your bank and financial regulator whether or not the withdrawal succeeds."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-request-to-verify-my-paypal-account-by-calling-a-number-real","url":"https://scamencyclopedia.org/questions/is-a-request-to-verify-my-paypal-account-by-calling-a-number-real","question":"Is an email asking me to verify my PayPal account by calling a phone number real?","shortAnswer":"No. Legitimate PayPal account verification is done inside your PayPal account — not by phone call. This is a vishing set-up.","explanation":"PayPal verification scam emails tell you there is an issue with your account and provide a phone number to call. When you call, you reach a scammer impersonating PayPal support who asks for your account email, password, or one-time verification code to 'confirm your identity'. Once they have your credentials they access and drain your account. PayPal's genuine security processes are handled entirely within the PayPal website or app — they do not email you a phone number to call for verification, and PayPal support never asks for your password.\n\nRouting you to a phone number is a deliberate evolution of ordinary phishing. Email filters have become good at catching malicious links, but a phone number in plain text sails through — and once you dial, the interaction leaves no link to analyse and no page to take down. On the call, the 'agent' controls the pace, reads from a script polished across thousands of victims, and can adapt in real time when you hesitate. The one-time code request is the critical moment: the scammer is logging into your account as you speak, and the code you read out is the final barrier they need removed.\n\nTreat the channel itself as the verdict. PayPal handles account limitations, disputes, and verification through messages inside your account, and any genuine issue will be visible there when you log in directly. If you already called and shared anything, change your password immediately, revoke unfamiliar linked devices and authorised applications in your account settings, check for new payment methods or address changes, and contact PayPal through its official help centre to flag the account.","redFlags":["Email provides a phone number to call for account verification","Caller asks for your PayPal password or OTP during the 'verification'","Sender email does not come from paypal.com","Urgency — account will be limited if not verified within hours"],"whatToDoNow":["Do not call the number in the email","Log into PayPal directly at paypal.com to check for real account issues","If you called and gave credentials, change your PayPal password immediately","Report phishing emails to spoof@paypal.com and your email provider"],"faq":[{"question":"Does PayPal ever call customers?","answer":"PayPal may call if you have initiated a support request. They do not proactively call from numbers in emails, and they never ask for your password over the phone."},{"question":"Why do scammers prefer a phone number over a phishing link?","answer":"Links get caught by email filters and taken down; a phone number in plain text usually is not. On a call, the scammer also controls the pacing and can adapt the script live when you hesitate."},{"question":"I read out a one-time code during the call — how bad is that?","answer":"Assume the account is compromised: the code completed a login the scammer had already started. Change your password now, review linked devices, payment methods, and recent activity, and report the takeover to PayPal."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-free-government-phone-or-tablet-offer-real","url":"https://scamencyclopedia.org/questions/is-a-free-government-phone-or-tablet-offer-real","question":"Is an offer for a free government-subsidised phone or tablet through an ad real?","shortAnswer":"Legitimate programmes exist (such as the Affordable Connectivity Program in the US), but many ads exploit the programme's name to collect personal data or fees.","explanation":"Government phone and internet subsidy programmes are real and valuable, but scammers exploit them by running lookalike ads that collect personal data or advance fees in the programme's name. The real programme application process is administered through verified participating providers and official government channels — you never pay a fee, and the application is done through licensed carriers. Fake programme ads may harvest your Social Security number, address, or card details for identity theft. If you believe you qualify for a subsidy, apply directly through the official government programme website using a URL you have searched for independently.\n\nThe existence of the real programme is what gives the fake ads their power — you may have heard a genuine subsidy exists, so an ad offering to enrol you feels like convenience rather than risk. But that convenience always comes with an added step the real programme never has: a 'processing' fee, a 'reservation' deposit for the device, or a form asking for identity numbers and card details that a benefit application does not require. Some operations deliver nothing at all; others deliver a cheap device while harvesting enough identity data to open accounts in your name — a much larger loss than the fee.\n\nEligibility for genuine subsidy programmes can always be checked without paying anyone or going through an intermediary you did not choose. Apply through the official programme website or a provider you have verified on the programme's own participant list, and treat any enrolment path that begins with a social media ad as untrusted by default. If you already shared identity details, monitor your credit file and consider placing a fraud alert; if you paid a fee, dispute it with your bank and report the ad.","redFlags":["Ad seen on social media rather than from an official government source","Application requires an upfront fee or deposit","Asks for more personal detail than necessary for a benefit application","Processing company cannot be verified as an official programme participant"],"whatToDoNow":["Apply for genuine government programmes only through official government websites","Verify any carrier claiming to offer the subsidy on the official programme's approved-provider list","Do not pay any fee to access a government benefit programme","Report fraudulent programme ads to the relevant government agency"],"faq":[{"question":"How do I find out if I qualify for a genuine phone subsidy?","answer":"In the US, check fcc.gov for the latest approved subsidy programmes. In the UK, check Ofcom's guidance on social tariffs. Use the official government site — not an ad link."},{"question":"The site sent me a real device — so was it legitimate after all?","answer":"Not necessarily. Some operations ship a cheap handset because the real value was the identity data you submitted. If you provided identity numbers, monitor your credit file for accounts you did not open."},{"question":"What does a genuine subsidy application never ask for?","answer":"A fee. Genuine programmes are free to apply for, and eligibility checks go through official channels or verified participating providers. Any payment request, however small, marks the offer as fraudulent."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-cryptocurrency-mining-pool-that-requires-a-joining-fee-legitimate","url":"https://scamencyclopedia.org/questions/is-a-cryptocurrency-mining-pool-that-requires-a-joining-fee-legitimate","question":"Is a cryptocurrency mining pool that requires a joining fee legitimate?","shortAnswer":"No. Legitimate mining pools do not charge joining fees — they take a small percentage of mined rewards. Any upfront joining fee is a fraud signal.","explanation":"Crypto mining pool scams advertise impressive hash rates and mining returns and require a one-time joining fee or equipment rental payment before you can participate. No real profits are generated — the pool may show a fake dashboard of accumulating rewards that can never be withdrawn without paying further fees. Genuine mining pools (such as established pools for major cryptocurrencies) are free to join. They charge a pool fee as a small percentage of the coins you actually mine, deducted automatically. The economics of mining are transparent and do not involve upfront cash payments to an operator.\n\nThe fake dashboard is the engine of the scheme. Watching a mining balance tick upward daily creates the sense of a machine working for you, and that feeling is what funds the next stage: when withdrawal time comes, the operator introduces an electricity surcharge, a hardware maintenance fee, or a minimum-payout threshold that keeps moving. Every number on the screen was generated by the website itself — no mining hardware, hash rate, or coin ever existed behind it. Cloud mining contracts are the same scheme wearing more professional clothes, and the overwhelming majority of retail cloud mining offers are either fraudulent or structured so fees exceed any realistic return.\n\nA quick reality check exposes most offers: if an operator genuinely controlled profitable mining capacity, selling access to strangers at a discount would be giving money away — the rational move would be to mine with it themselves. Real pools make money transparently, as a small percentage of coins actually mined, which is why they have no reason to charge you to join. Treat every joining fee, rental payment, and withdrawal charge as the entire business model, because it is.","redFlags":["Joining fee or equipment rental required before any mining begins","Returns are guaranteed regardless of network difficulty","Withdrawal of mined coins requires additional payment","Pool is promoted through social media DMs or messaging apps"],"whatToDoNow":["Do not pay any joining fee for a mining pool","Research established mining pools on reputable crypto resources","Report the fake pool to your financial regulator and crypto platform","If you have funds deposited, do not pay further fees — the money is likely unrecoverable"],"faq":[{"question":"Is cryptocurrency mining still profitable for individuals?","answer":"Mining profitability varies considerably with electricity costs and network difficulty. Legitimate mining requires real hardware. Cloud mining contracts are also widely used for fraud — research any provider carefully."},{"question":"My dashboard shows coins accumulating — aren't those mine?","answer":"No. The dashboard is a webpage displaying numbers the operator invents. Without real hardware and a verifiable pool behind it, there are no coins — which is why withdrawal always triggers a new fee instead of a payout."},{"question":"Are cloud mining contracts any safer than joining-fee pools?","answer":"Rarely. Most retail cloud mining offers are the same scheme with better presentation — either outright fraud or contracts structured so fees exceed any plausible mining return. If you cannot verify the hardware exists, assume it does not."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-love-interest-on-social-media-who-claims-to-be-a-doctor-abroad-a-scammer","url":"https://scamencyclopedia.org/questions/is-a-love-interest-on-social-media-who-claims-to-be-a-doctor-abroad-a-scammer","question":"Is a love interest on social media who claims to be a doctor working abroad a scammer?","shortAnswer":"This profile description is a very common cover story in romance fraud. Be very cautious before developing trust with someone fitting this description.","explanation":"Romance scammers frequently adopt personas as doctors, surgeons, or other high-status professionals working in conflict zones, on oil rigs, or on international assignments. These personas justify why they cannot meet in person, explain limited video call availability (poor connection, hospital schedules), and create a humanitarian framing that generates sympathy and admiration. After establishing emotional closeness, the requests begin — money for an emergency, a plane ticket home, equipment for a patient, or investment advice. The profile photos are typically stolen from real professionals found online. Reverse-image-searching photos and insisting on a verified live video call are the most direct ways to assess authenticity.\n\nThe persona is chosen for what it licenses, not just the status it carries. A doctor in a conflict zone can plausibly vanish for days, refuse video calls, describe heart-wrenching emergencies, and need help that only you can provide — every practical obstacle a scammer faces is written into the character. The humanitarian framing also flips the emotional dynamic: you are not being asked to fund a stranger, you are helping a selfless professional save lives, which makes refusing feel unkind. Operators often work from shared scripts and photo sets, so the same 'surgeon' may be romancing many people simultaneously.\n\nHold to verification steps that scripts cannot survive. A reverse image search on every photo, a request for a live video call where they perform a specific spontaneous action, and a firm personal rule of never sending money or vouchers to someone you have not met in person will end almost every one of these relationships abruptly — which is painful, but is the proof. If you have already sent money, contact your bank quickly, keep the full conversation history as evidence, and be aware that 'recovery agents' who approach you afterwards are usually the same network returning for more.","redFlags":["Cannot meet in person or make a proper live video call","Professional on a remote assignment (war zone, oil rig, international project)","Emotional connection develops unusually fast","Eventually introduces a financial request or an 'investment opportunity'"],"whatToDoNow":["Reverse-image-search all photos shared with you","Ask for a live, unscripted video call showing a specific action","Never send money or gifts to someone you have not met in person","Report the profile to the platform and Report Fraud (formerly Action Fraud) or IC3"],"faq":[{"question":"Can a romance scammer invest time for weeks or months before asking for money?","answer":"Yes — many romance scammers invest significant time to build trust before making financial requests. Long interaction duration does not indicate genuine relationship."},{"question":"Why do so many of these profiles claim to be doctors or engineers abroad?","answer":"The persona explains away every verification obstacle — no meetings, poor video, sudden absences — while adding status and sympathy. It is chosen because it makes the scam's practical limitations look like the character's circumstances."},{"question":"I already sent money — is there any way back?","answer":"Contact your bank immediately to attempt recall of transfers, keep the entire chat history as evidence, and report to the platform and your national fraud service. Decline all later offers to recover your funds for a fee — that is the same network returning."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-google-play-or-app-store-gift-card-request-from-anyone-ever-legitimate","url":"https://scamencyclopedia.org/questions/is-a-google-play-or-app-store-gift-card-request-from-anyone-ever-legitimate","question":"Is a request to pay using Google Play or App Store gift cards ever legitimate?","shortAnswer":"No. Gift cards are never a legitimate payment method for anything outside their intended app stores. Any request to pay using them is a scam.","explanation":"Google Play and App Store gift cards are designed for purchasing apps, games, and digital content — not for paying debts, taxes, fines, bail, or any real-world obligation. Scammers favour them because they are irreversible, anonymous, and available at many retail stores. If a caller, texter, or online contact asks you to buy gift cards and share the codes, it is always fraud — regardless of how convincing the story is. Common cover stories include tax debt, utilities disconnection, a grandchild in trouble, tech support charges, lottery fees, or government fines. Legitimate government agencies, utilities, banks, and employers do not accept gift cards as payment.\n\nThe mechanics favour the scammer completely. The moment you read out or photograph the code on the back of a card, the value is redeemed or resold — often within minutes, through automated channels — and unlike a bank transfer there is no receiving account to freeze and no institution obliged to investigate. This is why callers insist on staying on the line while you drive to the shop and scratch the cards: the window between purchase and redemption is their only vulnerability, and your hesitation is the only thing that can widen it.\n\nRetail staff are trained to ask questions when someone buys large amounts of gift cards while on the phone, and that intervention saves people daily — so treat a cashier's concern as help, not embarrassment. The rule worth memorising and sharing with older relatives is absolute and has no exceptions: anyone who asks to be paid in gift card codes, for any reason, in any story, is a scammer. There is no tax office, court, utility, tech company, or family emergency on earth for which gift cards are the answer.","redFlags":["Any request to buy gift cards and share the codes as payment","Urgency — act now to avoid arrest, disconnection, or a fine","Caller asks you to stay on the line while you buy the cards","Story changes when you hesitate or question the request"],"whatToDoNow":["Refuse the request immediately — there is no legitimate use case","Hang up if the request came by phone","If you bought cards, call the card issuer immediately and report before the codes are used","Report to your national fraud authority"],"faq":[{"question":"Can gift card codes be recovered if reported quickly?","answer":"If you report to the gift card issuer before the codes are redeemed, there is a chance of a refund. Act immediately — scammers redeem codes within minutes."},{"question":"Why does the caller insist on staying on the line while I buy the cards?","answer":"The time between purchase and reading out the codes is the only point the scam can fail. Keeping you on the phone prevents you pausing, talking to shop staff, or calling a family member — all of which routinely stop this fraud."},{"question":"The store cashier questioned my gift card purchase — why?","answer":"Retail staff are trained to spot the pattern of scam-driven gift card purchases, especially large amounts bought while on a phone call. Their questions are a safeguard — if you are buying cards because a caller told you to, stop and tell them."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-social-media-post-asking-to-share-a-lost-dog-for-a-prize-a-scam","url":"https://scamencyclopedia.org/questions/is-a-social-media-post-asking-to-share-a-lost-dog-for-a-prize-a-scam","question":"Is a social media post asking me to share a lost dog photo to win a prize a scam?","shortAnswer":"These posts are almost always engagement-farming scams that have nothing to do with a real lost pet or a genuine prize.","explanation":"Like-farming and engagement-farming posts are a well-known social media manipulation tactic. A post with an emotional hook — a lost pet, a sick child, a heartwarming story — asks users to like or share for a chance to win a prize. The post accumulates large engagement, after which the original content is sometimes edited to promote a fraudulent product or link. The emotional appeal and the low-effort ask ('just share') make these posts highly effective. Genuine lost pet posts do not offer prizes for sharing.\n\nWhat happens after the sharing is where the harm lives. A page inflated by viral emotional content has real resale value: it can be renamed and used to push fake shops, investment schemes, or phishing links to an audience that already trusts it, and the platform's algorithm treats the inherited engagement as credibility. The edit trick matters too — because shares point at the post rather than a snapshot of it, the heartwarming story your friends saw from you can later become a crypto promotion carrying your implicit endorsement.\n\nA few seconds of checking protects both you and your followers. Open the posting page's profile: an account created recently, posting the same 'lost dog' in dozens of towns, or containing nothing but giveaway posts is farming, not searching. Genuine local appeals name a specific area, come from accounts with a real history, and ask only for local eyes — never for entries, prize draws, or clicks to an external link. When in doubt, share nothing; if a pet is really lost nearby, your local community group will have the authentic version.","redFlags":["Prize offered in exchange for sharing or liking the post","Post is from a page with no other content or a very large following","Prize claim requires visiting an external link","Emotional content combined with a commercial offer"],"whatToDoNow":["Do not share engagement-bait posts that combine emotional appeals with prizes","Report the post to the platform as potential spam","Be cautious about pages that gain your follow through these posts","If you entered contact details for a prize, expect marketing spam and phishing attempts"],"faq":[{"question":"Does sharing a post ever help find a genuinely lost pet?","answer":"Yes — genuine lost pet posts shared in local community groups can be effective. The red flag is when a prize is offered for sharing, which indicates engagement farming rather than a real search."},{"question":"What actually happens to the page after the post goes viral?","answer":"Pages inflated by emotional viral content are renamed or sold, then used to push fake shops, phishing links, or investment scams at an audience that already engaged. The original post is often edited so your old share now points at the new content."},{"question":"How do I check whether a lost pet post is genuine before sharing?","answer":"Open the posting account. A real appeal comes from an account with history, names a specific local area, and asks for nothing but local awareness. New accounts, identical posts across many towns, or any prize mechanic mean engagement farming."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-company-requiring-an-nda-before-an-investment-pitch-a-scam","url":"https://scamencyclopedia.org/questions/is-a-company-requiring-an-nda-before-an-investment-pitch-a-scam","question":"Is a company asking me to sign an NDA before revealing an investment opportunity a scam?","shortAnswer":"Requiring an NDA before disclosing any investment details is a manipulation tactic, not a standard practice. It creates pressure and discourages you from seeking advice.","explanation":"Genuine investment opportunities involving sensitive commercial information may use NDAs in sophisticated investor settings, but requiring one from a retail investor before sharing basic details is a red flag. The NDA creates a false sense of exclusivity and can discourage you from discussing the opportunity with a financial adviser or regulator. Scammers use NDAs to isolate victims and imply that sharing details with others is prohibited. You are never legally prevented from reporting fraud to a regulator, regardless of any NDA signed.\n\nThe NDA performs three jobs for the fraudster at once. It manufactures exclusivity — secret opportunities feel valuable precisely because they are secret. It isolates you at the moment you most need outside perspective, since the natural instinct to ask a spouse, accountant, or adviser now feels like a breach. And it pre-builds a silencing tool for later: victims who realise they have been defrauded often hesitate to report or warn others because they believe the agreement binds them. Legitimate confidentiality in business exists to protect specific commercial information during genuine negotiations — not to stop a retail investor from asking whether an opportunity is real.\n\nA practical response is to accept nothing on the fraudster's timeline. Say you will have any document reviewed by your own adviser before signing — a genuine counterparty finds this normal, while a scammer treats it as an obstacle and escalates pressure or vanishes. That reaction is the cheapest due diligence available. And if you have already signed and suspect fraud, report anyway: agreements procured as part of a fraud are not a shield for the fraudster, and regulators and police deal with such reports routinely.","redFlags":["NDA required before any basic investment information is shared","Told the opportunity is too exclusive to discuss with advisers","Implied that sharing with regulators would violate the agreement","Urgency to sign and invest before the window closes"],"whatToDoNow":["Decline to sign an NDA that prevents you from seeking independent advice","Consult a qualified financial adviser before any investment","Check the provider on your national financial services register","Report pressure-NDA tactics to your financial regulator"],"faq":[{"question":"Can I legally report a fraud even if I signed an NDA?","answer":"Yes. In virtually all jurisdictions, NDAs cannot legally prevent you from reporting illegal activity to law enforcement or regulatory authorities."},{"question":"How should I respond when asked to sign before hearing details?","answer":"Say you will have the document reviewed by your own adviser first. A legitimate counterparty finds this completely normal. A fraudster treats delay as a threat and will pressure you or disappear — either reaction tells you what you needed to know."},{"question":"Do genuine investments ever involve NDAs?","answer":"Yes, in sophisticated deals protecting specific commercial information — typically between companies and professional investors with lawyers involved. What does not happen legitimately is an NDA demanded from a retail investor before any basic details are shared."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-app-that-pays-me-to-walk-or-exercise-legitimate","url":"https://scamencyclopedia.org/questions/is-an-app-that-pays-me-to-walk-or-exercise-legitimate","question":"Is an app that pays me to walk or exercise a real way to earn money?","shortAnswer":"Move-to-earn apps exist, but many are short-lived crypto schemes that lose value quickly. Verify the app before investing time or money.","explanation":"Move-to-earn or exercise-reward apps became popular with fitness tracking and blockchain incentives. Some offer genuine low-value rewards through advertising revenue. Others require you to buy in-app tokens or NFTs before earning, and the token value frequently collapses after initial hype. Scam apps go further — they collect personal data, charge subscription fees, or require a crypto wallet that is then targeted. Before using any app that promises payment for physical activity, check reviews on independent app stores, research whether any reward token has real exchange value, and never pay to join a fitness reward scheme.\n\nThe buy-in requirement is where the model flips from harmless to hazardous. When earning depends on purchasing tokens or NFTs first, you are no longer a user being rewarded for activity — you are a speculator whose 'earnings' are paid in an asset the operator controls, and whose value depends on a continuous stream of newcomers buying in behind you. That structure behaves like a pyramid regardless of how sincere the founders are, and it fails the same way: token price collapses once growth slows, leaving late joiners holding worthless rewards that never covered their entry cost.\n\nThe data side deserves equal attention. A fitness app knows your daily movements, routines, and location history — commercially valuable information that free-reward apps commonly monetise. Read what the privacy policy allows before granting location access, deny permissions that exceed the app's function, and prefer apps whose reward economics are boring: small payouts funded by advertising, withdrawable in real money, with no entry price. Boring economics are sustainable economics; excitement in this category is usually the sound of your entry fee funding someone else's exit.","redFlags":["Requires purchasing NFTs or tokens to start earning","Rewards paid in a proprietary token with no exchange listing","Earning potential described in unrealistic amounts","App requests unusual permissions for a fitness app"],"whatToDoNow":["Read independent reviews on app stores and trusted forums before downloading","Never pay to join a fitness rewards app","Research any token the app pays in before deciding it has value","Withdraw any earned balance regularly rather than accumulating"],"faq":[{"question":"Can I actually earn meaningful money from exercise apps?","answer":"Most apps offer minimal rewards relative to time invested. The few that pay real money are usually advertising-supported with no upfront purchase — treat payment as a bonus, not income."},{"question":"Why does requiring a token or NFT purchase make an app risky?","answer":"Your rewards are then paid in an asset the operator controls, whose value depends on new users buying in after you. When growth slows the token collapses, and late joiners never recover their entry cost — pyramid dynamics, whatever the branding says."},{"question":"What data risks come with fitness reward apps?","answer":"These apps can collect your location history, daily routines, and movement patterns — valuable data that free apps commonly monetise. Check the privacy policy, restrict permissions to what the app genuinely needs, and delete apps you stop using."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-cold-call-about-mis-sold-ppi-or-car-finance-a-scam","url":"https://scamencyclopedia.org/questions/is-a-cold-call-about-mis-sold-ppi-or-car-finance-a-scam","question":"Is a cold call about mis-sold PPI or car finance a scam?","shortAnswer":"Claims management calls about PPI or car finance may be legitimate or may be fee-charging scams. Genuine claims do not require upfront fees.","explanation":"Following major PPI and car finance mis-selling rulings, legitimate claims management companies (CMCs) do help consumers recover compensation. However, many companies operating in this space are predatory — they charge large upfront fees, take excessive percentages of successful claims, or are not registered with the Financial Conduct Authority. Some cold-callers collect your personal and financial details with no intention of making a genuine claim, then use the data for identity fraud. You can make PPI and car finance complaints to your bank and the Financial Ombudsman Service entirely free, without any intermediary. Upfront fees are prohibited for regulated claims management.\n\nThe cold call itself deserves scrutiny before its content does. These campaigns buy contact lists and dial at scale, which is why the caller often knows nothing about you beyond your name — the confident opener about compensation you are 'owed' is a script sent to thousands of people, most of whom have no eligible claim at all. Data harvesting is frequently the real business: the 'claim assessment' collects your bank, address, and finance agreement details, which are then sold on or used for follow-up fraud in which a second caller, referencing your claim, poses as your bank or a court.\n\nBefore engaging with any claims firm — including a legitimate one — it is worth being clear about what you would be paying for. The complaint process is designed for consumers to use directly: you write to the firm that sold you the product, and if unsatisfied, escalate to the ombudsman at no cost. A claims company does the same thing with the same form, minus a large slice of any award. If you value the convenience, choose a regulated firm yourself from the official register; never buy the service from whoever happens to phone you.","redFlags":["Request for an upfront fee to begin the claim","Company not registered on the FCA's claims management register","Promises a specific compensation amount before reviewing your case","Requests sensitive financial details immediately by phone"],"whatToDoNow":["Check the company on the FCA register before engaging","Never pay an upfront fee for a claims management service","Complain directly to your bank and then the Financial Ombudsman Service for free","Report unauthorised claims management to the FCA"],"faq":[{"question":"Can I reclaim car finance commission myself without a claims company?","answer":"Yes — you can complain directly to your finance provider and then escalate to the Financial Ombudsman Service at no cost. You do not need a claims management company."},{"question":"The caller said records show I'm owed compensation — how would they know?","answer":"They don't. The claim is a script dialled to purchased contact lists at scale. No caller has access to records proving you are owed anything — the certainty exists to get you talking and sharing details."},{"question":"What details should I never give a claims cold-caller?","answer":"Bank account numbers, card details, copies of ID, or your finance agreement references. Harvested claim details fuel follow-up fraud, including second calls impersonating your bank or a court that reference your 'claim' to sound genuine."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-job-offer-asking-me-to-receive-and-forward-parcels-legitimate","url":"https://scamencyclopedia.org/questions/is-a-job-offer-asking-me-to-receive-and-forward-parcels-legitimate","question":"Is a job offer asking me to receive and forward parcels from home legitimate?","shortAnswer":"No. Parcel forwarding jobs are one of the most common forms of reshipping fraud, used to launder goods bought with stolen payment cards.","explanation":"Work-at-home parcel forwarding or reshipping jobs advertise simple tasks — receive parcels, repackage them, and ship them abroad. The pay seems reasonable and the work minimal. In reality, the parcels contain goods bought online using stolen credit card details. You become the final link in the fraud chain, and when the cardholders dispute the purchases, the goods are traced back to your address. You may be investigated for handling stolen goods or participating in fraud, even if you genuinely did not know. Legitimate logistics companies do not recruit individuals to use their home addresses as reshipping hubs.\n\nThe operation is structured so that you absorb all the traceable risk. The stolen cards, the online orders, and the overseas recipients are all hidden behind layers; your name and address are the only real-world details in the chain, appearing on courier records, customs declarations, and the retailers' delivery logs. When the card fraud is discovered — usually within weeks — every parcel traces to your door. Wages are typically promised monthly, which is not generosity but arithmetic: the operation expects to burn each 'employee' before the first payday, and many victims are never paid at all.\n\nA second layer of the same scam targets your identity. Onboarding often includes sending photographs of your passport or driving licence and your bank details for 'payroll', giving the operators everything needed for identity fraud after the reshipping ends. If you are currently holding parcels, do not forward them and do not return them to any address the 'employer' supplies; contact the police and the delivering carriers, keep all correspondence, and notify your bank that your identity documents may be circulating. Ending involvement early and reporting voluntarily is the strongest evidence of your good faith.","redFlags":["Job involves receiving parcels at home and forwarding them abroad","Employer pays you per parcel forwarded rather than through a standard employment contract","Job found through an unsolicited email or messaging app","Employer provides shipping labels and prepaid postage"],"whatToDoNow":["Do not accept any parcels on behalf of an unknown employer","If parcels have arrived, do not forward them and contact police","Report the job offer to your national labour authority","Inform your postal carrier if packages are arriving at your address for this purpose"],"faq":[{"question":"Am I criminally liable if I forwarded parcels without knowing the goods were stolen?","answer":"Liability depends on jurisdiction and evidence of knowledge, but police investigations can still involve you. Stop immediately and cooperate with authorities if investigated."},{"question":"Why does the 'employer' pay monthly instead of per parcel upfront?","answer":"Because the operation plans to discard workers before the first payday. Monthly pay maximises the parcels moved through your address before the stolen-card disputes surface — many reshipping victims are never paid at all."},{"question":"I sent them my ID and bank details when I was 'hired' — what should I do?","answer":"Treat your identity as compromised: alert your bank, monitor your credit file, and consider a fraud alert. Report the operation to police with all correspondence — the ID harvesting is often the second half of the same fraud."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-bitcoin-investment-app-my-relative-uses-safe-to-join","url":"https://scamencyclopedia.org/questions/is-a-bitcoin-investment-app-my-relative-uses-safe-to-join","question":"Is a Bitcoin investment app my relative or friend uses safe for me to join?","shortAnswer":"Not necessarily. Many people unknowingly promote fraudulent platforms after being convinced by fake early returns. Verify independently before depositing anything.","explanation":"In affinity fraud, a trusted contact introduces you to an investment opportunity they believe in. They may have received genuine early returns — which are often funded by the scheme itself to recruit more investors. The fact that someone you trust uses an app does not mean it is legitimate. Pyramid and Ponzi schemes rely precisely on this word-of-mouth dynamic to grow before collapsing. Before depositing on any platform a friend or family member recommends, check it against your financial regulator's registered providers list and read independent reviews on platforms outside the app's own community.\n\nWhat makes affinity fraud so persistent is that the person recommending the platform is not lying to you. They have seen deposits grow on their dashboard, perhaps completed a small withdrawal, and their enthusiasm is genuine — which defeats the instinct that normally protects you from strangers selling investments. The scheme is engineered to produce exactly this: early participants are paid real money and encouraged, sometimes with referral bonuses, to bring in the people who trust them most. When collapse comes, it fractures families and friendships twice over — once financially, once through the guilt of having recruited each other.\n\nSeparate the relationship from the platform when you evaluate it. Your relative's honesty is not evidence; the checks that matter are impersonal ones — regulatory registration, verifiable company identity, independent reviews from outside the community, and a successful full withdrawal of both deposit and profits, not just a token amount. If the platform fails those checks, share your findings gently and factually with the person who invited you: they are likely a victim mid-scheme, and the money they still have at risk may be recoverable only if they stop depositing now.","redFlags":["Platform cannot be found on a financial services regulator's register","Early returns are very high and consistent","You are encouraged to recruit others to earn more","Withdrawal of profits triggers new fees or delays"],"whatToDoNow":["Verify the platform independently on your financial regulator's website","Do not invest based solely on a referral, regardless of the source","Start with the smallest possible amount and test a full withdrawal before committing more","Report suspicious platforms to your financial regulator"],"faq":[{"question":"What is affinity fraud?","answer":"Affinity fraud uses trusted social or community networks to spread investment fraud. Victims recruit their own friends and family, often unaware the scheme is fraudulent."},{"question":"My relative has actually withdrawn money from the platform — doesn't that prove it works?","answer":"No. Paying early, small withdrawals is how these schemes build the sincere advocates who recruit others. The test is whether large, full withdrawals of deposits plus profits succeed — which is exactly what collapses the scheme when people try."},{"question":"How do I warn a family member who is deep in one of these platforms?","answer":"Stay factual and blame-free: show the regulator's register search, suggest they attempt a full withdrawal, and urge them to stop new deposits and recruiting. Shame drives victims deeper into secrecy — calm evidence works better than confrontation."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-immigration-consultant-asking-for-cash-payment-legitimate","url":"https://scamencyclopedia.org/questions/is-an-immigration-consultant-asking-for-cash-payment-legitimate","question":"Is an immigration consultant asking for cash-only payment legitimate?","shortAnswer":"Legitimate immigration professionals accept traceable payments. Cash-only requests are a significant fraud indicator in immigration services.","explanation":"Immigration services fraud is a serious problem, particularly in communities where immigrants have limited English or are unfamiliar with local legal systems. Fraudulent 'consultants' — sometimes called 'notarios' in Latin American communities — charge large cash fees for visa applications, residency filings, or citizenship services, provide little or incorrect assistance, and disappear when problems arise. In many countries, providing immigration legal advice requires a licence. Cash payments leave no record of the transaction or the services agreed. Only use licensed immigration lawyers or government-accredited advisers for any immigration matter, and insist on a written contract and traceable payment.\n\nThe damage from immigration fraud compounds in ways money alone does not capture. A botched or fabricated application can put your legal status at risk: missed deadlines, false statements filed in your name, or applications never submitted at all can lead to refusals that complicate every future application. Fraudulent advisers also frequently keep original documents — passports, certificates, records that are difficult to replace — as leverage for further payments. This is why the community-based nature of the fraud is so harmful: the adviser is often recommended by word of mouth, speaks your language, and understands exactly which fears stop victims from reporting.\n\nProtect yourself with steps that no genuine adviser resists: verify their licence number on the official register before the first meeting, provide certified copies rather than originals, get every promised service and fee in writing, and pay traceably. Be especially sceptical of anyone claiming special relationships inside the immigration authority or guaranteed outcomes — case decisions are made by the government, and no legitimate practitioner can promise them. If you have been defrauded, report it even if your own status feels precarious; in many countries, reporting channels exist that do not trigger enforcement against the victim.","redFlags":["Payment required in cash only","Consultant cannot show a professional licence or accreditation","Promises guaranteed visa or residency approval","No written contract or receipt provided"],"whatToDoNow":["Pay only by traceable bank transfer or card and request a receipt","Verify the adviser's licence with the relevant legal or immigration authority","Seek a second opinion from a verified licensed practitioner","Report unlicensed immigration advisers to your national immigration authority"],"faq":[{"question":"What is a 'notario' scam?","answer":"In many Latin American countries 'notario' is a licensed legal professional. In the US, this title has no legal standing for immigration matters, but fraudulent advisers misuse it to imply authority."},{"question":"The consultant is holding my original passport and documents — what can I do?","answer":"Ask for their return in writing, then report to the police and your national immigration authority if they are withheld or used as leverage for more payments. Holding originals hostage is a recognised abuse pattern — provide only certified copies in future."},{"question":"I'm afraid reporting the fraud will harm my own immigration case — should I stay silent?","answer":"Silence usually protects only the fraudster. Many countries have reporting routes for immigration fraud victims that do not trigger enforcement against them, and correcting false filings early is generally better for your case than leaving them undiscovered."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-fake-antivirus-scan-result-on-a-website-real","url":"https://scamencyclopedia.org/questions/is-a-fake-antivirus-scan-result-on-a-website-real","question":"Is a fake antivirus scan result that pops up on a website real?","shortAnswer":"No. Websites cannot scan your device. Pop-up scan results showing virus detections are fake alerts designed to frighten you into downloading malware or calling a scam number.","explanation":"Fake antivirus pop-ups imitate the appearance of real security software — Windows Defender, Norton, McAfee — and claim to have found multiple threats on your device. They use alarming language, warning sounds, and countdown timers. The goal is to get you to click a 'Fix Now' button that downloads malware, or to call a tech-support number where scammers charge for fake services or install genuine malware via remote access. Websites do not have the ability to scan your device's files. Only software installed on your device can perform a real scan. Dismiss the pop-up by closing the browser tab or restarting your browser.\n\nEverything about the page is theatre built from ordinary web techniques: full-screen mode that hides your browser controls, scripts that reopen dialog boxes when you try to leave, alarm sounds on a loop, and progress bars 'scanning' files the page cannot actually see. The threat count is invented; the countdown is decoration. The design goal is a few seconds of panic — enough to make calling the on-screen number or clicking the flashing button feel like the responsible response rather than the trap it is.\n\nWhat follows a call to that number is the real scam: a patient 'technician' who requests remote access, shows you harmless system logs restyled as evidence of infection, and then charges heavily for fixing nothing — or worse, installs genuine malware and captures banking details while connected. So the whole defence happens before that point: never call numbers from pop-ups, close the browser forcefully if the page resists (Task Manager on Windows, Force Quit on Mac), and decline to restore tabs on reopening. If concern lingers, run a scan with security software you installed yourself — that is the only kind of scan result that means anything.","redFlags":["Pop-up appears in a browser window, not in your system tray or installed software","Claims to have found a specific number of threats","Warning sound plays and the page tries to prevent you from closing it","Provides a phone number to call for immediate assistance"],"whatToDoNow":["Close the browser tab or force-quit the browser","Do not call any number shown in the alert","Run a real scan with your installed, up-to-date security software","Clear your browser's cache if the pop-up keeps reappearing"],"faq":[{"question":"If I saw the pop-up, is my computer already infected?","answer":"Simply seeing a fake pop-up does not infect your computer. The infection risk arises if you click the alert, download something, or call the number provided."},{"question":"The pop-up won't let me close the page — what should I do?","answer":"Force-close the browser: Task Manager on Windows or Force Quit on Mac, then decline to restore tabs when reopening. The 'unclosable' page is a script trick, not evidence of infection."},{"question":"I called the number and let them connect to my computer — what now?","answer":"Disconnect from the internet, uninstall the remote access software they used, run a full scan with reputable security software, and change important passwords from another device. If you paid, dispute the charge with your bank immediately."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-courier-delivery-request-for-id-before-releasing-a-parcel-normal","url":"https://scamencyclopedia.org/questions/is-a-courier-delivery-request-for-id-before-releasing-a-parcel-normal","question":"Is it normal for a courier to request a copy of my ID before releasing a parcel?","shortAnswer":"Genuine couriers do not request ID copies sent by email or messaging app. Signature confirmation is the standard — anything beyond this is suspicious.","explanation":"Standard courier delivery requires only a signature or a safe-place instruction for confirmation. Some premium or regulated deliveries may require a government-issued ID to be shown in person — but no legitimate courier asks you to photograph your passport or driving licence and send it via email, WhatsApp, or a third-party link before releasing a package. This tactic is used to harvest identity documents for identity theft. If you receive such a request, contact the courier's official customer service number (found on their official website) to verify whether the request is genuine before providing anything.\n\nA photographed identity document is one of the most valuable single items a fraudster can obtain, which is why the parcel pretext exists at all. With a clear image of your passport or licence, criminals can attempt account openings, SIM swaps, and verification steps at services that accept document photos as proof of identity — and unlike a stolen card, an identity document cannot simply be cancelled and reissued overnight. The delivery framing is chosen because a waiting parcel creates mild urgency and because carriers do occasionally have genuine verification steps, giving the request a plausible shell.\n\nApply the direction-of-contact test: identity checks you initiate through a carrier's official app or website as part of a real delivery flow are one thing; documents demanded through an inbound message are another, and no genuine courier process works that way. If you have already sent an image of your ID, act as though it will be misused — notify your bank, monitor your credit file, consider a fraud alert with the credit agencies, and keep the original message as evidence for your report.","redFlags":["Request to send a photo of ID via email, WhatsApp, or a link","Communication comes from an unknown number or unofficial email","Parcel tracking information is vague or unverifiable","Request arrives without a context of a known order"],"whatToDoNow":["Do not send copies of identity documents to an unverified contact","Call the courier using a number from their official website","If the request turns out to be genuine, show ID in person — do not send a photo","Report suspicious messages to the courier's fraud team"],"faq":[{"question":"When is showing ID to a courier legitimate?","answer":"Some restricted deliveries (alcohol, age-restricted items, certain financial documents) require age verification in person. The courier will never need to photograph or keep your ID."},{"question":"What can a scammer actually do with a photo of my ID?","answer":"Pass identity checks at services that accept document photos — opening accounts, attempting SIM swaps, or verifying fraudulent applications in your name. Unlike a card, an ID document cannot be quickly cancelled, so prevention matters more than reaction."},{"question":"I already sent a photo of my passport — what should I do?","answer":"Notify your bank, monitor your credit file for new applications, and consider placing a fraud alert with credit agencies. Keep the original request message as evidence and report it to the courier's fraud team and your national fraud service."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-trading-signal-group-that-guarantees-forex-profits-legitimate","url":"https://scamencyclopedia.org/questions/is-a-trading-signal-group-that-guarantees-forex-profits-legitimate","question":"Is a trading signal group that guarantees forex profits legitimate?","shortAnswer":"No. Forex and trading signal groups guaranteeing profits are almost universally fraudulent or deceptive marketing for unregulated brokers.","explanation":"Foreign exchange is a genuine market, but 'signal groups' promising guaranteed pips or percentage gains operate at the intersection of marketing manipulation and outright fraud. Many charge subscription fees for signals that consistently underperform or are fabricated. Others are fronts for unregulated brokers who earn spreads and commissions regardless of your performance, and some lead to pig-butchering or investment fraud through the same trust-building mechanism as other trading group scams. Genuine professional traders and analysts do not guarantee outcomes — all forex trading involves risk of capital loss and past performance does not guarantee future results.\n\nThe evidence these groups present dissolves under light pressure. Profit screenshots are trivially manufactured in demo accounts or image editors; 'live' win streaks are curated by deleting losing calls from the channel history; and some operators run parallel groups sending opposite signals, so one group always looks brilliant. The broker tie-in is the more durable business: the group earns commissions on your deposits and trading volume at an unregulated broker, meaning they profit whether your trades win or lose — and unregulated brokers themselves can manipulate prices, refuse withdrawals, or vanish.\n\nIf you want exposure to currency markets, the boring route is the protective one: a regulated broker you selected from the official register, position sizes that respect the genuine riskiness of leveraged trading, and deep scepticism toward anyone whose income depends on your deposits rather than their own trading. Ask a simple question of every signal seller: if the signals reliably beat the market, why does their business model depend on subscription fees and broker commissions instead of trading their own capital? There has never been a good answer.","redFlags":["Guaranteed pips, percentage returns, or 'never lose' strategies","Signals group promotes a specific unregulated broker exclusively","Screenshots of profits shared but no audited track record","Subscription fee or invitation deposit required to access signals"],"whatToDoNow":["Do not subscribe to signal groups promising guaranteed returns","Only use regulated brokers listed on your financial authority's register","Treat any signal group promoting a specific platform with high scepticism","Report unregulated forex signal services to your financial regulator"],"faq":[{"question":"Are there any legitimate forex signal services?","answer":"Some regulated financial advisory services provide market analysis, but they never guarantee outcomes. Verified track records from independent audit services are the minimum standard of credibility."},{"question":"The group's channel shows months of winning trades — how is that faked?","answer":"Losing calls are deleted from the history, screenshots come from demo accounts, and some operators run parallel groups with opposite signals so one always looks right. Only an independently audited track record means anything."},{"question":"Why does the group push one specific broker so hard?","answer":"Because that is the business. Signal groups typically earn commissions on deposits and trading volume at partnered unregulated brokers — they profit from your activity regardless of whether you do, and the broker itself may block withdrawals."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-health-supplement-advertised-as-a-cure-for-a-disease-real","url":"https://scamencyclopedia.org/questions/is-a-health-supplement-advertised-as-a-cure-for-a-disease-real","question":"Is a health supplement advertised as a cure for a disease real?","shortAnswer":"No. Supplements are not approved as cures for diseases. Health claims implying a product cures, treats, or prevents a medical condition are illegal in most countries.","explanation":"Unproven health supplement marketing targets people with chronic illnesses, pain, weight concerns, or anxiety about ageing. Products are advertised with exaggerated testimonials, celebrity endorsements (real or fabricated), and scientific-sounding language. Health authorities in the UK, US, EU, and Australia require supplements to carry only evidence-based claims — a product cannot legally claim to cure or treat a disease unless approved as a medicine. Buying these products wastes money, may cause harm, and can delay legitimate treatment. The subscription or auto-ship model used by many supplement companies is also frequently hard to cancel.\n\nThe marketing playbook is consistent enough to recognise on sight: a discovery story ('doctors don't want you to know'), an enemy suppressing the truth (the pharmaceutical industry, regulators), testimonials that carry the claims the label legally cannot, and a countdown or limited-stock banner to rush the purchase. Fabricated endorsements are common — real doctors and celebrities regularly issue warnings that their names and images are being used without consent on products they have never seen. The 'scientific' citations, where present, typically reference unrelated studies or research the product was never part of.\n\nThe deepest cost is rarely the purchase price. People managing chronic conditions may reduce or abandon prescribed treatment on the strength of these promises, and the auto-ship small print quietly converts a 'trial' into recurring charges that require persistence to stop. Before buying anything marketed as treating a condition, ask your pharmacist or doctor — they can tell you in minutes whether a claim has any foundation. If you are stuck in an auto-ship cycle, cancel in writing, keep the record, and instruct your card provider to block further charges from the merchant.","redFlags":["Claims to cure, reverse, or eliminate a specific medical condition","Celebrity or doctor endorsement that cannot be independently verified","Before-and-after photos without clinical trial evidence","Auto-ship subscription that is difficult to cancel"],"whatToDoNow":["Consult a licensed healthcare provider before taking any supplement","Report misleading health claims to your national advertising or food safety authority","Cancel auto-ship subscriptions promptly and keep records of cancellation","Check whether a health claim has been approved by your country's medicines regulator"],"faq":[{"question":"Are all health supplements fraudulent?","answer":"No — many supplements are genuine nutritional products. The issue is products making unapproved disease-cure claims that are illegal and unsupported by evidence."},{"question":"The ad showed a well-known doctor recommending the product — could that be fake?","answer":"Very likely. Fabricated celebrity and doctor endorsements are standard in this marketing, and the people named frequently publish warnings that their image is being misused. Check the person's own verified channels before believing any endorsement."},{"question":"How do I escape a supplement auto-ship subscription?","answer":"Cancel in writing and keep proof, then ask your card provider to block future charges from the merchant. If charges continue after a documented cancellation, dispute them — persistence usually wins, and reporting the seller helps others."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-mobile-app-asking-for-excessive-permissions-a-security-risk","url":"https://scamencyclopedia.org/questions/is-a-mobile-app-asking-for-excessive-permissions-a-security-risk","question":"Is a mobile app asking for excessive permissions a security risk?","shortAnswer":"Yes. An app requesting permissions beyond what its function requires is a significant privacy and security red flag.","explanation":"Malicious and data-harvesting apps are available on both the Google Play Store and Apple App Store, though Apple's review process is stricter. Red flags include a torch app requesting contact access, a calculator requesting location data, or a free game requesting access to your messages. These permissions can enable the app to harvest your contacts for spam, track your location for fraud or burglary intelligence, or intercept two-factor authentication codes. Always review permissions before installing, revoke unnecessary permissions after installation, and remove apps you no longer use. Permissions can be managed through your device's settings at any time.\n\nThe permissions that deserve the most suspicion are the ones that unlock money and identity rather than mere data. SMS access can intercept the one-time codes protecting your bank; accessibility-service permissions — designed for assistive technology — can let an app read your screen and act on your behalf inside other apps, including banking apps; and notification access reads message previews. Malicious apps often request little at install time to pass review, then push permission prompts later during use, when tapping 'allow' has become a reflex. Free versions of flashlight, PDF, cleaner, and wallpaper apps are historically the most common carriers.\n\nA workable routine takes minutes: before installing, glance at what the app wants and who made it; during use, deny prompts that exceed the app's obvious purpose — a photo editor needs photos, not your call log; and periodically, sweep your settings for apps holding SMS, accessibility, or admin rights and remove any you cannot justify. On both major platforms, the settings screen that lists permissions by category (rather than by app) is the fastest way to spot the outlier that should not be there.","redFlags":["App requests access to contacts, messages, or camera without an obvious need","Free app with very broad permission requests","App developer has no web presence or published privacy policy","App was downloaded from outside the official app store"],"whatToDoNow":["Review permission requests before installing any app","Deny unnecessary permissions during installation","Review and revoke app permissions in your device settings regularly","Delete apps that you no longer use"],"faq":[{"question":"Can I remove permissions from apps I already installed?","answer":"Yes — go to your device's Settings, find the app, and review its permissions. You can revoke individual permissions at any time without uninstalling the app."},{"question":"Which permissions are the most dangerous to grant?","answer":"SMS access (intercepts bank one-time codes), accessibility services (lets an app read the screen and act inside other apps), device admin rights, and notification access. Grant these only to apps whose core purpose clearly requires them."},{"question":"Why did the app only ask for risky permissions after I'd used it for a while?","answer":"Requesting little at install helps an app pass store review and user scrutiny; prompts pushed mid-use catch people tapping 'allow' by reflex. A later request that exceeds the app's function is a strong signal to deny and uninstall."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-crowdfunded-startup-on-a-public-platform-safe-to-invest-in","url":"https://scamencyclopedia.org/questions/is-a-crowdfunded-startup-on-a-public-platform-safe-to-invest-in","question":"Is a crowdfunded startup on a public platform safe to invest in?","shortAnswer":"Equity crowdfunding carries high risk of total loss. Platforms must be regulated, but that does not mean the businesses listed will succeed.","explanation":"Regulated equity crowdfunding platforms such as Seedrs and Crowdcube (UK) or Wefunder (US) are authorised by financial regulators and provide disclosures about investment risk. However, the vast majority of startups fail, and most crowdfunded investments are illiquid — you may not be able to sell your stake for years or at all. Fraudulent businesses do sometimes list on these platforms despite screening processes. Red flags include unverifiable financial projections, no named and traceable founding team, or pressure to invest before a deadline closes the round. Only invest money you can afford to lose entirely and diversify across multiple investments.\n\nIt helps to be precise about what platform regulation actually covers. The platform's authorisation governs how it handles your money, presents risk warnings, and runs its processes — it is not an endorsement of any company raising funds, and platform screening cannot reliably detect a founder who intends to misuse the money or a business plan built on wishful numbers. The glossy pitch page, professional video, and progress bar showing the round nearly full are marketing assets produced by the company itself; the progress bar in particular creates herd pressure that has nothing to do with the company's quality.\n\nDo your own diligence at the level the investment deserves: read the actual financials rather than the summary, check the founders' histories through business registries and past ventures, and look at what rights your share class actually carries — crowdfunded shares are often non-voting and heavily diluted in later rounds. Assume illiquidity measured in years and a realistic chance of total loss even with honest founders, and size the investment so that outcome would be an acceptable cost of participating in something you found interesting.","redFlags":["Founding team identities are unverifiable or vague","Financial projections are unrealistically high with no evidence base","Pressure to invest before the window closes","Platform is not registered with the relevant financial regulator"],"whatToDoNow":["Verify the platform's regulatory registration before investing","Research the founding team independently","Read all risk disclosures and only invest what you can afford to lose","Diversify across multiple investments rather than concentrating in one startup"],"faq":[{"question":"Is equity crowdfunding covered by investor compensation schemes?","answer":"In the UK, investments through FCA-authorised platforms may be covered by the FSCS up to a limit in cases of platform failure, but not for losses from business failure. Check the specific platform's protection."},{"question":"Doesn't the platform's screening protect me from bad companies?","answer":"Screening filters obvious problems, but it cannot detect dishonest intent or over-optimistic projections, and platform authorisation is not an endorsement of any listed business. The investment risk assessment remains yours."},{"question":"What should I actually check before investing in a crowdfunding round?","answer":"The full financials rather than the pitch summary, the founders' verifiable history through business registries, and the rights attached to your share class — crowdfunded shares are often non-voting and diluted in later rounds."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-bank-draft-or-money-order-from-a-buyer-safe-to-accept","url":"https://scamencyclopedia.org/questions/is-a-bank-draft-or-money-order-from-a-buyer-safe-to-accept","question":"Is a bank draft or money order from a buyer safe to accept?","shortAnswer":"Bank drafts and money orders can be counterfeited convincingly. Never spend or forward funds until your bank confirms full and final clearance.","explanation":"Fake bank draft and money order scams work identically to fake cashier's check scams. A buyer for a high-value item sends a bank draft or money order — often for more than the agreed price — and asks you to refund the difference or forward some funds. The document appears to clear initially but is later reversed. You are then liable for the full amount. Counterfeit bank drafts have become sophisticated enough to defeat teller scrutiny in some cases. The only reliable way to verify is to allow your bank's full settlement process to complete — which can take up to 10 business days — before taking any action.\n\nThe scam works because of a gap most people never encounter until it costs them: 'funds available' and 'funds final' are different events. Banks credit deposited instruments quickly as a customer convenience, but the underlying verification continues for days afterwards — and when a counterfeit is detected, the credit is reversed and the account holder bears the loss. Scammers time their pressure to land inside that gap, urging you to ship goods or wire back an 'overpayment' while your banking app still shows the money as present.\n\nYour handling of the instrument should assume the gap exists. Tell the teller the draft came from a stranger in a sale, ask explicitly for final settlement rather than availability, and refuse every request that requires action before that confirmation — a legitimate buyer has no reason to need money returned urgently from an instrument they just sent. Overpayment itself is effectively conclusive: there is no innocent explanation for a stranger deliberately paying more than the asking price and requesting the difference back.","redFlags":["Payment instrument sent for more than the agreed price","Buyer asks you to forward the difference before clearance","You are pressured to act quickly before full settlement","Buyer insists on this payment method when others are available"],"whatToDoNow":["Tell your bank you have received a bank draft and ask them to flag it for full verification","Do not spend or forward any funds until your bank confirms final settlement","Refuse any request to return an overpayment before clearance","If the document was fraudulent, report to your bank and local police"],"faq":[{"question":"How long does it take for a money order to fully clear?","answer":"Domestic money orders typically clear in 1–5 business days. International instruments and bank drafts can take up to 10 business days. Always wait for explicit confirmation from your bank before acting."},{"question":"My banking app shows the money in my account — isn't it safe now?","answer":"Not yet. Banks credit deposits before verification finishes. If the instrument later proves counterfeit, the credit is reversed and you bear the loss. Only explicit confirmation of final settlement from your bank means the money is real."},{"question":"Why would a buyer overpay in the first place?","answer":"There is no innocent reason. Overpayment exists to create a pretext for you to send real money back before the fake instrument bounces. Treat any overpaid draft or money order as fraud and refuse to return anything."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-email-about-a-package-waiting-at-customs-requiring-fees-real","url":"https://scamencyclopedia.org/questions/is-an-email-about-a-package-waiting-at-customs-requiring-fees-real","question":"Is an email about a package waiting at customs requiring me to pay fees real?","shortAnswer":"Genuine customs charges are possible but are communicated officially. Email links requesting card details for customs fees are almost always phishing.","explanation":"Real customs fees and VAT on international shipments do exist and can be required before release. However, genuine customs notices arrive from your national customs authority (HMRC, CBSA, US Customs) or from your carrier's official customs portal — and they provide a verifiable reference number you can check on an official website. Phishing emails mimic customs notices with urgent language, carrier logos, and a payment link to a fake portal that captures your card details. If you have genuinely ordered something from abroad and a customs fee seems plausible, navigate directly to your carrier's official website using a reference number from your real order — never follow a link in an email.\n\nThe genuine existence of customs charges is what separates this from cruder phishing: because international buyers really do get import fee requests, the fake ones inherit believability. The scam page usually asks for full card details, and sometimes follows up with a call from a fake customs or border officer adding threats about seized goods or penalties for unpaid duties. Genuine customs authorities do not threaten individuals by phone over a routine parcel charge, and carriers collect legitimate duties through their own tracked payment systems, tied to a shipment number you can verify.\n\nThe verification routine is quick: find your real order confirmation, take the tracking number from there, and enter it on the carrier's official site. Either a genuine customs hold appears against your shipment — with the amount and an official payment route — or nothing does, and the email is answered. If you paid on a fake page, contact your bank to protect the card, and expect follow-up attempts: a working card and a proven willingness to pay small official-sounding fees make you a target for repeat contact.","redFlags":["Email link goes to a site that is not your carrier's or customs authority's official domain","No order reference or tracking number that matches a real purchase","Fee amount seems disproportionately high or low","Urgency — package returned if fee not paid within hours"],"whatToDoNow":["Do not click the link — navigate to your carrier's official site directly","Use a tracking number from your actual order to check for genuine customs holds","If you entered card details, contact your bank immediately","Report phishing customs emails to your national cyber authority"],"faq":[{"question":"How will I know if a customs fee is genuinely owed?","answer":"Your carrier will notify you through their official tracking page with a specific reference and the amount owed. You pay through the carrier's portal or at a local customs office — not via an email link."},{"question":"A 'customs officer' phoned me about unpaid duties — is that genuine?","answer":"No. Customs authorities do not phone individuals with threats about seized parcels or penalties. Phone follow-ups are an escalation of the same fraud, using fear to push payment. Hang up and check your real tracking directly."},{"question":"How do genuine customs fees actually get collected?","answer":"Through the carrier's official tracked payment system or the customs authority itself, always tied to a shipment reference you can verify on the official website. If your real tracking number shows no hold, no fee is owed."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-refund-for-overpayment-request-from-an-energy-company-a-scam","url":"https://scamencyclopedia.org/questions/is-a-refund-for-overpayment-request-from-an-energy-company-a-scam","question":"Is a request to contact an energy company about an overpayment refund real?","shortAnswer":"Overpayment refund calls and texts from energy companies are frequently phishing attempts. Verify by logging into your account directly.","explanation":"Energy overpayment refund scams arrive by call, SMS, or email and claim your energy account is in credit with a refund waiting. You are directed to a link or number to claim the refund, where you enter card or bank details. Genuine energy company refunds are processed automatically to the direct debit account registered with the supplier — you are not asked to enter card details through a link to receive them. If you believe you are in credit with your energy supplier, check your account balance through your supplier's official app or website.\n\nEnergy credit is a clever lure because it is genuinely common — households paying by fixed direct debit often do build up credit across the year, so a message saying you are owed money matches something you half-believe already. The fraudulent version inverts the direction of data flow: instead of money coming to you, your card number, bank login, or personal details go to them. Some phone variants go further, talking you through opening your banking app 'to receive the refund' while actually guiding you to authorise an outbound payment.\n\nThe asymmetry to remember is that genuine refunds require nothing from you. Your supplier already knows your payment details — that is how they collect your bills — so any refund process that needs you to re-enter card numbers, log in through a provided link, or act during a phone call is structurally fake. Check your balance through the app or website you already use, and if a refund is genuinely due, request it there in a few clicks. If you gave details to a fake refund contact, tell your bank immediately and watch for follow-up calls that reference the incident to build false credibility.","redFlags":["Unsolicited contact about an energy refund","Link to claim the refund does not match your supplier's official domain","Request for card details to process the refund","Urgency — refund lapses if not claimed quickly"],"whatToDoNow":["Log into your energy account directly through the official supplier website or app","Check your actual credit balance from within your account","Call your supplier using the number on your bill if you have questions","Report phishing energy contacts to your national cyber authority"],"faq":[{"question":"How does a genuine energy refund work?","answer":"Real energy refunds are credited to the bank account you pay from or carried forward to reduce your next bill. You are notified in your online account — no external link or card details needed."},{"question":"Why do these scams focus on energy accounts specifically?","answer":"Because credit balances are genuinely common with fixed direct debits, the claim matches what many households already suspect. Plausibility is the lure — the request for your card details to 'receive' money is the giveaway."},{"question":"A caller wants to guide me through my banking app to process the refund — should I follow?","answer":"Never. Receiving money requires nothing from your banking app. Callers who direct you through it are steering you to authorise an outbound payment to themselves. Hang up and call your supplier on the number from your bill."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-gaming-account-recovery-service-safe-to-use","url":"https://scamencyclopedia.org/questions/is-a-gaming-account-recovery-service-safe-to-use","question":"Is a gaming account recovery service safe to use?","shortAnswer":"Third-party account recovery services carry significant risk of account theft. Use only the official account recovery tools provided by the game developer.","explanation":"When a gaming account is hacked or banned, players may seek help from unofficial recovery services found on social media, Discord, or classified sites. These services frequently steal the account they are supposed to recover by obtaining your login credentials during the 'recovery' process, then selling it. Some services take payment and do nothing. Legitimate account recovery is provided free through the game developer's official support portal. Account bans that are permanent are rarely reversible through third-party intervention, and any service claiming otherwise is almost certainly fraudulent.\n\nThese services fish where the desperation is: replies to your public complaint about a hack, ads inside Discord servers, and search results for 'recover banned account'. The pitch usually claims insider contacts at the developer or a private exploit — both fabrications. What the 'recovery' actually needs from you is the same thing an account thief needs: your credentials, your linked email access, or your payment. Handing them over to a stranger because your account is already in trouble is how a bad situation becomes a total loss, sometimes including the email account itself.\n\nThe official route is less exciting but actually works where anything can: the developer's support portal, with proof of ownership — original purchase receipts, transaction IDs, the account's creation email, and payment records carry real weight in recovery reviews. While the case is open, lock down everything adjacent: change the password on the linked email address first, since that is usually how the account was taken, then enable two-factor authentication on both. Treat anyone who contacts you offering recovery as a scavenger following the breach — legitimate staff do not solicit hacked players through DMs.","redFlags":["Service found through social media DM or Discord server, not official channels","Requires your login credentials to perform the recovery","Charges a fee for account recovery that is normally free through official support","Promises to reverse a permanent ban"],"whatToDoNow":["Use only the official account recovery and support tools from the game developer","Never share your account credentials with a third party","If you shared credentials, change your password and email immediately","Enable two-factor authentication to prevent future unauthorised access"],"faq":[{"question":"Can a third-party service genuinely appeal a game ban?","answer":"No — only the developer can reverse a ban. Third parties who claim to have a contact or method are misleading you. Use the developer's official appeal process."},{"question":"Someone replied to my post about being hacked, offering to help — coincidence?","answer":"No. Scavenger accounts monitor public hack complaints and DM victims posing as recovery experts or even game staff. Legitimate support never initiates contact through DMs — go to the developer's official portal only."},{"question":"What evidence actually helps an official recovery claim?","answer":"Proof of ownership: original purchase receipts, payment transaction records, the email address the account was created with, and old screenshots. Gather these before opening the ticket — they matter far more than any third party's 'contacts'."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-text-from-netflix-or-spotify-about-a-payment-issue-real","url":"https://scamencyclopedia.org/questions/is-a-text-from-netflix-or-spotify-about-a-payment-issue-real","question":"Is a text from Netflix or Spotify saying there is a problem with my payment real?","shortAnswer":"Streaming service payment failure texts are a very common phishing method. Verify any issue by logging into the service's official app or website.","explanation":"Netflix and Spotify phishing texts are among the most widely distributed smishing campaigns. They warn of a failed payment or account suspension and link to a cloned login or payment page. The page captures your streaming credentials and, more importantly, the payment card you enter to 'update' your billing details. Genuine payment failures are communicated through the service's app notification system or by email to your registered address, and they direct you to update details within your account settings — not via an SMS link. If you receive such a text, go directly to the service's official site by searching for it, not by clicking the link.\n\nStreaming services are chosen as bait for practical reasons: subscriptions are near-universal, the monthly charge is small enough that a 'payment failure' seems routine rather than alarming, and the threatened consequence — losing access tonight — is annoying enough to prompt fast action. The cloned pages are typically pixel-accurate, and the card form is the entire purpose: credentials taken alongside are a bonus that gets tested against other services, since passwords reused between a streaming login and an email or shopping account multiply the damage.\n\nA calm routine defuses every variant. Payment problems, if real, are visible the moment you open the app or website you already use — there is never a scenario where an SMS link is the only way to fix billing. If you did enter details, deal with the card first (your bank can block it before charges land), then the password, changing it everywhere you reused it, and turn on two-factor authentication for the email account above all. Reporting the message to your carrier's spam service helps get the sending numbers blocked for everyone behind you.","redFlags":["SMS about a payment problem for a streaming service","Link in the text does not match the service's official domain","Page asks for your card details to restore access","Account suspension threatened unless you act immediately"],"whatToDoNow":["Do not click the link — open the app or navigate to the official website directly","Check your account status and payment settings from within the app","If you entered card details, contact your bank immediately","Report the phishing text to 7726 (UK/US) and the streaming service"],"faq":[{"question":"How does Netflix or Spotify actually notify me of payment issues?","answer":"Both services send email notifications to your registered address and show in-app messages. They do not send SMS messages with payment links."},{"question":"Why do phishers pick streaming services rather than banks?","answer":"Nearly everyone has a subscription, a small payment failure feels routine, and losing access is annoying enough to prompt a quick click. Low alarm plus mild urgency converts better than high-stakes bank impersonation for many campaigns."},{"question":"I entered both my password and card on the fake page — what order do I fix things?","answer":"Card first — call your bank so it is blocked before charges land. Then change the password everywhere you reuse it, starting with your email account, and enable two-factor authentication there."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-website-that-checks-if-my-data-was-leaked-safe-to-use","url":"https://scamencyclopedia.org/questions/is-a-website-that-checks-if-my-data-was-leaked-safe-to-use","question":"Is a website that checks if my data was leaked in a breach safe to use?","shortAnswer":"Reputable breach-check tools are safe. Only use well-known, established services — fake equivalents harvest the very credentials you are trying to protect.","explanation":"Legitimate data breach checking services like Have I Been Pwned (haveibeenpwned.com) allow you to check whether your email was exposed in known breaches using a method that protects your password from disclosure. However, copycat sites have appeared that mimic these tools but actually collect your email and password for misuse. Before using any breach-checking site, verify it is a well-known, widely recommended service covered in reputable technology publications. Never enter your current password into any third-party site — reputable tools only ask for your email address.\n\nThe password question is the entire dividing line, and it is worth understanding why. A legitimate breach checker compares your email address against catalogues of already-public breach data; it never needs your current password, because it is telling you about past exposure, not testing your live credentials. A site that asks you to type your actual password to 'check its safety' is performing the theft it claims to warn about — you would be handing over exactly the credential pair (email plus current password) that attackers buy breach data to obtain.\n\nWhat you do with a genuine 'you were breached' result matters more than the check itself. Change the password on the breached service and anywhere else you reused it, prioritising your email account, which resets everything else. Then reduce the blast radius of future breaches: unique passwords per site via a password manager, and two-factor authentication on accounts that matter. Breaches of services you use are largely outside your control; whether one leaked password unlocks your whole life is entirely within it.","redFlags":["Site asks for your actual password to check if it was breached","Site was discovered through a social media ad or unsolicited email","Domain is similar to a known service but with subtle differences","Site has no information about who runs it or how it handles data"],"whatToDoNow":["Use only haveibeenpwned.com or your browser's built-in breach monitoring","Never enter your current password into any third-party breach checker","If you used a suspicious site, change the password for any associated accounts","Enable two-factor authentication on your most important accounts"],"faq":[{"question":"Is Have I Been Pwned safe to use?","answer":"Yes — Have I Been Pwned is a widely trusted service run by a reputable security researcher. It checks your email address against known breach databases without exposing your password."},{"question":"Why doesn't a real breach checker need my password?","answer":"Because it checks your email against already-public breach catalogues — it reports past exposure, not the state of your live credentials. Any site requesting your current password to 'check' it is collecting it."},{"question":"The checker says my email appears in breaches — what should I actually do?","answer":"Change the password on the breached services and anywhere you reused it, starting with your email account. Then move to unique passwords via a password manager and enable two-factor authentication on important accounts."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-private-seller-who-wants-to-see-my-id-before-a-cash-sale-a-scam","url":"https://scamencyclopedia.org/questions/is-a-private-seller-who-wants-to-see-my-id-before-a-cash-sale-a-scam","question":"Is a private seller who asks to see my ID before a cash sale a scam?","shortAnswer":"Reputable private sellers do not need to see your government ID for a standard cash sale. This is an unusual request that warrants caution.","explanation":"In most private marketplace transactions, cash payment requires no ID — the exchange is simple and immediate. A seller requesting to see or photograph your passport, driving licence, or other government ID before completing a cash sale has no legitimate commercial reason to do so. This tactic can be used to harvest identity information for fraud, or to intimidate or profile the buyer. In some cases it is used by scammers to create a false sense of mutual verification that makes victims feel more secure about proceeding with an otherwise suspicious transaction. You have no obligation to share ID documents with a private seller.\n\nThe request often arrives wrapped in reasonable-sounding language — 'for both our security', 'so I know you're genuine', 'my last buyer was a scammer' — and that framing is exactly what makes it work. Mutual-verification theatre is a documented manipulation pattern: by asking you to prove yourself, the other party positions themselves as the cautious one, lowering your guard for whatever comes next, whether that is a request for a deposit, a switched meeting location, or simply the harvesting of a clean ID photo. A cash sale needs nothing from either side except the item and the money.\n\nDistinguish this firmly from contexts where identity does play a legitimate role: platforms may verify users through their own in-app systems, and certain regulated goods require an in-person glance at ID for age confirmation. Neither involves a private individual photographing or keeping your document. If a seller will not proceed without capturing your ID, let the purchase go — and if you have already sent a photo of your document to a stranger, monitor your credit file and treat unexpected verification texts or calls in the following weeks with suspicion.","redFlags":["Private seller requests to photograph your ID before completing the sale","No legitimate commercial or legal reason for ID is offered","Seller becomes hostile or abandons the sale if you decline","Transaction involves an unusually large amount of cash"],"whatToDoNow":["Decline to show ID for a standard private cash sale","If ID is required for a legitimate reason (e.g. age-restricted goods), show — do not photograph","Meet in a safe, public location for any cash transaction","Trust your instincts — walk away if the interaction feels wrong"],"faq":[{"question":"Are there legal situations where a private seller can require ID?","answer":"Age-restricted goods (alcohol, tobacco, certain knives) may require age verification, but this means showing ID — not photographing or copying it. For standard private sales, no ID is required."},{"question":"The seller says they were scammed before and just wants security — isn't that fair?","answer":"The story may even be true, but your ID document is not the answer to their anxiety. 'Mutual verification' framing is a known manipulation pattern that lowers your guard. A cash sale requires the item and the money — nothing else."},{"question":"I already sent a photo of my licence to a marketplace stranger — what now?","answer":"Monitor your credit file for applications you did not make, and be suspicious of verification calls or texts over the coming weeks — a captured ID is often paired with follow-up social engineering. Report the account to the platform."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-whatsapp-gift-exchange-chain-message-a-scam","url":"https://scamencyclopedia.org/questions/is-a-whatsapp-gift-exchange-chain-message-a-scam","question":"Is a WhatsApp gift exchange chain message a scam?","shortAnswer":"Yes. Gift exchange chain messages on WhatsApp and social media are pyramid schemes. Participants almost always lose their gift and their money.","explanation":"Gift exchange chain messages — variously themed as 'secret sister', wine swaps, book exchanges, or online gift rings — circulate on WhatsApp and social media with promises that you will receive many gifts in return for sending one. They work on the same mathematical principle as pyramid schemes: early participants may receive gifts, but the structure collapses as recruitment becomes impossible. Most participants receive nothing. In addition, sharing your address with strangers in an online chain creates a privacy and safety risk. In many countries these schemes are illegal as unlicensed lotteries or fraudulent pyramid arrangements.\n\nThe arithmetic is unforgiving and worth spelling out once. Each round of the chain needs several new participants for every existing one, so the required membership multiplies with every cycle — within a surprisingly small number of rounds, the scheme needs more participants than any community, or country, contains. Collapse is therefore built into the design, and whoever joins in the later rounds — which is most people, by definition — sends a gift into the void. The seasonal themes and friendly presentation change nothing about the shape.\n\nThe secondary harms are easy to underestimate. Address lists gathered by these chains circulate onward, and participants sometimes receive follow-up messages, 'admin' contacts requesting fees, or targeted scam attempts that reference the exchange. There is also a social cost: the message spreads through real friendships, so each share lends a trusted face to a scheme that will disappoint almost everyone downstream. Declining kindly and explaining the maths — early joiners are paid by later ones until the chain runs out of people — is the most useful reply, both for the friend who sent it and for everyone they would have reached next.","redFlags":["Must send a gift or money before receiving anything","Potential return is multiples of what you send in","Requires you to recruit others to participate","Originated from a social media post or WhatsApp message from someone you barely know"],"whatToDoNow":["Do not participate or forward the message","Do not share your personal address with organisers or participants","Inform friends who share the message that it is a pyramid scheme","Report it to your national consumer authority if it involves money"],"faq":[{"question":"Are gift exchanges with close friends also a scam?","answer":"Consensual gift exchanges among friends you already know are generally fine. The problem arises when the exchange relies on recruiting strangers and promises inflated returns."},{"question":"My friend says she really received gifts from one of these — how?","answer":"Early participants are paid by later ones — that is the pyramid working as designed, not evidence it works for everyone. The majority who join later send gifts and receive nothing, because the chain always runs out of new people."},{"question":"What happens to the addresses collected in these chains?","answer":"They circulate. Participants report follow-up messages, fee requests from 'organisers', and targeted scam attempts referencing the exchange. Sharing your home address with a chain of strangers is a lasting cost for a temporary game."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-google-search-ad-for-a-bank-or-crypto-platform-safe-to-click","url":"https://scamencyclopedia.org/questions/is-a-google-search-ad-for-a-bank-or-crypto-platform-safe-to-click","question":"Is a Google search ad for a bank or crypto platform safe to click?","shortAnswer":"Search ads for financial services are heavily targeted by fraudsters. Always navigate to the financial institution's official website directly rather than via ads.","explanation":"Malicious search ads impersonating banks, crypto exchanges, and financial platforms have been documented extensively. Google's ad review process catches many fraudulent ads, but some bypass screening. Clicking an ad and entering credentials on a fake site can result in account takeover. For high-stakes financial services, always type the URL directly into your browser or use a bookmark you have previously verified — never trust a paid search result for login purposes. This is especially important for crypto wallets, where a single wrong URL can result in irreversible loss of funds.\n\nThe placement is the trick: paid results appear above organic ones, styled almost identically, and the visible display URL in an ad can differ from the destination it actually opens. People searching for their own bank in a hurry click the top result out of habit, which is exactly the behaviour the attackers pay to intercept. Crypto services are the most heavily targeted category because a wallet drained through a phished seed phrase or a fake login has no fraud department to appeal to — but bank credential harvesting through the same route feeds account takeover and authorised-payment fraud too.\n\nThe fix costs nothing: reach financial logins through a bookmark you created on a day you were not in a hurry, or through the institution's official app. If a search is unavoidable, scroll past the sponsored block entirely and read the domain of the organic result before clicking. And treat any difference in a familiar login page — layout, wording, an unexpected request for full credentials or codes — as a stop signal, because cloned pages are rarely perfect. If credentials went into a page you now doubt, change them immediately from a known-good route and tell your bank before any transactions appear, not after.","redFlags":["Ad URL preview shows a domain that differs from the institution's known address","Clicking the ad takes you to a login page that looks slightly different from normal","Ad appears above the official organic search result for the same institution","Crypto or DeFi platform promoted through a search ad with unusually high returns"],"whatToDoNow":["Never log in to a financial account via a search ad — use direct URL or bookmark","Check the actual landing URL before entering any credentials","Report misleading financial ads to Google and your financial regulator","If you entered credentials on a suspicious page, change passwords immediately"],"faq":[{"question":"Why does Google allow fraudulent financial ads?","answer":"Google has policies against fraudulent financial advertising and removes violating ads, but the scale of ads means some slip through review. Regulators in multiple jurisdictions have called for tighter controls."},{"question":"The ad showed the bank's correct web address — how could it still be fake?","answer":"The display URL shown in an ad can differ from the destination it opens. Judging safety by the visible address in a sponsored result is unreliable — check the actual URL in your browser's address bar, or skip ads entirely."},{"question":"Why are crypto platforms targeted hardest by this technique?","answer":"Because losses are final. A seed phrase or wallet login captured by a fake page lets attackers drain funds with no fraud department, chargeback, or reversal available. One wrong click can be the entire loss."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-person-i-met-at-a-hotel-or-airport-offering-a-business-deal-trustworthy","url":"https://scamencyclopedia.org/questions/is-a-person-i-met-at-a-hotel-or-airport-offering-a-business-deal-trustworthy","question":"Is a person I met at a hotel or airport who offers a business deal trustworthy?","shortAnswer":"Use the same caution you would with any stranger. In-person approaches with business proposals are used in confidence tricks and advance-fee fraud.","explanation":"Confidence fraud ('con tricks') include in-person approaches where a well-dressed, credible-seeming stranger strikes up a conversation and eventually introduces a business opportunity, an investment, a gem deal, or a request to help move money. These are structured scripts refined over generations. The stranger may have a convincing backstory, an impressive-looking office or hotel suite, and accomplices who reinforce the credibility. No genuine business deal is initiated by a chance encounter with a stranger who then pressures you to commit money before leaving. Always conduct any business through verifiable channels and take time to consult independently before any financial commitment.\n\nThe setting does heavy lifting in these approaches. Hotels, airports, and business-class lounges pre-select for people with money and lend the stranger borrowed credibility — you assume someone in this environment belongs here. The conversation is built patiently: the deal emerges only after rapport, apparent coincidences ('you're in logistics? Incredible — my partner needs exactly that'), and often a display of wealth or generosity. Accomplices may appear as satisfied partners or independent verifiers. By the time money is mentioned, refusing feels like insulting a new friend, which is precisely the engineered emotion.\n\nTravel amplifies vulnerability: you are away from your usual advisers, working in an unfamiliar legal environment, and often on a schedule the fraudster can exploit ('I fly out tomorrow — decide tonight'). The counter is a personal policy set before you travel, not judgement exercised in the moment: no financial commitments, document signings, or 'small deposits' arising from chance encounters, ever, regardless of charm or apparent stature. A genuine businessperson will happily exchange details and proceed through verifiable channels after you have both gone home; only a fraudster needs the decision made before you leave the lobby.","redFlags":["Stranger approaches you with a seemingly fortuitous business opportunity","Deal requires a commitment or deposit before you have had time to verify","The business cannot be verified through public records or professional registers","Others in the group reinforce the credibility of the stranger"],"whatToDoNow":["Never commit money during an initial encounter with a stranger","Take time to independently verify any business claim","Consult a trusted adviser before making any financial decision","Report the approach to local police if you believe you were targeted"],"faq":[{"question":"Are there any genuine business deals that start with a chance encounter?","answer":"Very few. Genuine business relationships develop through verifiable introductions, professional networks, or due diligence processes. A stranger approaching you cold with an opportunity requiring immediate money is almost never legitimate."},{"question":"Why do these approaches happen in upmarket hotels and lounges?","answer":"The venue pre-selects wealthy targets and lends the fraudster borrowed credibility — people assume anyone present belongs there. The setting is part of the costume, exactly like a convincing website or uniform."},{"question":"How do I politely test whether the deal is genuine?","answer":"Say you will proceed through verifiable channels after travelling — lawyers, registered companies, documented terms. A genuine businessperson finds that normal. A fraudster needs commitment before you leave, and the pressure that follows is your answer."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-parcel-locker-pin-code-text-a-scam","url":"https://scamencyclopedia.org/questions/is-a-parcel-locker-pin-code-text-a-scam","question":"Is a text message with a parcel locker PIN code I didn't expect a scam?","shortAnswer":"It could be. Unsolicited parcel locker codes are sometimes sent by scammers to manipulate you into visiting a location or revealing personal details.","explanation":"Parcel locker phishing is a growing tactic. Scammers send fake PIN codes by SMS or email to trick you into clicking a link, calling a number, or handing over personal information under the pretence of 'claiming your parcel'. Genuine parcel locker codes arrive only after you have placed an order with a retailer that uses locker delivery. If you receive a code for a parcel you know nothing about, treat it as suspicious. The message may ask you to confirm your address, pay a small redelivery fee, or log in to a spoofed carrier website. Each of those steps is a data-collection trap. Real carriers such as Amazon Locker, InPost, or DHL ServicePoint do not ask for payment to collect a parcel once a code has been sent. If you are genuinely expecting something, log in directly to the retailer or carrier website using a bookmark — never follow a link in the message.\n\nA second variant is worth knowing about because it looks like the opposite of fraud: a code for a locker or delivery you never ordered can be part of a brushing or account-abuse scheme, in which sellers ship cheap unsolicited items to real addresses to generate 'verified purchase' reviews, or a criminal uses your address for a purchase they intend to intercept. In the interception version, a follow-up message or knock on the door asks you to hand over the parcel or forward the code because it was 'sent by mistake'. Handing over collection codes lets someone else collect goods bought with stolen payment details — with your address in the middle of the record.\n\nKeep the handling simple: unexpected codes get ignored, never forwarded, and requests to pass a code or parcel to a stranger get declined. Check your own retailer accounts for orders you did not place — an unexplained delivery sometimes signals a compromised account with a saved card. If everything checks out clean, delete the message; a genuine sender who made a real mistake resolves it through the carrier, not through you.","redFlags":["PIN code for a parcel you did not order","Link in the same message asking you to log in or pay","Sender is an unknown number or generic address","Message asks you to confirm personal or card details","Urgency — code 'expires in 24 hours'"],"whatToDoNow":["Do not click any link in the message","Log in directly to the retailer site to check your orders","If no order matches, delete the message","Report it to your national spam-reporting service"],"faq":[{"question":"Could someone have sent me a parcel as a gift?","answer":"Yes, but a genuine sender would tell you. If in doubt, contact the retailer named in the message — using a number you find yourself, not one in the text."},{"question":"Someone asked me to forward the code because the parcel was 'sent by mistake' — should I?","answer":"No. Forwarding a collection code lets a stranger collect goods that may have been bought with stolen payment details, with your address in the audit trail. Genuine mis-deliveries are resolved through the carrier, never through you."},{"question":"A parcel I never ordered actually arrived — what does that mean?","answer":"Possibly a brushing scheme using your address for fake reviews, or a sign your retailer account was used by someone else. Check your accounts for orders you did not place and change passwords if anything looks wrong."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-buy-now-pay-later-offer-from-an-unknown-brand-safe","url":"https://scamencyclopedia.org/questions/is-a-buy-now-pay-later-offer-from-an-unknown-brand-safe","question":"Is a buy-now-pay-later offer from a brand I have never heard of safe?","shortAnswer":"Not necessarily. Fake BNPL services harvest payment details upfront and never deliver goods or credit.","explanation":"Buy-now-pay-later (BNPL) fraud works in two ways. First, a fake online store offers BNPL checkout powered by an unknown 'fintech', collects your details, and neither delivers the goods nor processes legitimate credit. Second, a genuine-looking BNPL brand runs sponsored ads redirecting to a cloned checkout where your bank details are stolen. Legitimate BNPL providers such as Klarna, Clearpay, or Afterpay are integrated into established retailers and are regulated financial services. They do not solicit you by cold email or social media ad, and they will never ask for your full debit card PIN as part of sign-up. Before using any BNPL at checkout, verify the provider is authorised by your country's financial regulator and that the retailer itself is genuine.\n\nThe BNPL badge functions as borrowed trust: shoppers who would hesitate to type card details into an unknown store feel safer when a familiar-looking instalment option appears at checkout, reasoning that a finance company must have vetted the merchant. Fake stores exploit exactly that inference, either by inventing a lender or by displaying a real provider's logo on a checkout that routes everything to the fraudster. The instalment framing also softens price psychology — a small first payment feels low-risk even on a site you have doubts about, which is the moment misplaced trust does its work.\n\nAnchor your checks on the store rather than the payment method: an unfamiliar retailer with prices well below market does not become safe because of its checkout options. Where the BNPL provider is real, complete the sign-up inside the provider's own app or verified domain rather than through forms embedded in the merchant's page, and review what you are agreeing to — legitimate BNPL is still credit, with late fees and collection processes. If a fake store took your details through a BNPL-styled form, treat it as full card compromise: contact your bank, watch statements, and check your credit file for accounts you did not open.","redFlags":["BNPL brand you cannot find on a financial regulator's register","Request for your full card PIN during sign-up","Checkout reached via a social media ad rather than a known retailer","No physical address or customer service contact for the BNPL provider","Charges or fees before any purchase is made"],"whatToDoNow":["Check the BNPL provider on your country's financial regulator website","Search the retailer independently before completing checkout","Use a credit card with chargeback rights if you are unsure","Report suspicious BNPL schemes to your financial regulator"],"faq":[{"question":"Can I get my money back if BNPL was used fraudulently?","answer":"If a criminal opened a BNPL account in your name, contact the provider immediately and report it to your bank and the police. Dispute any charges and place a fraud alert on your credit file."},{"question":"Does a real BNPL logo at checkout mean the store has been vetted?","answer":"No. Logos are copied freely, and even genuine BNPL integration does not guarantee the merchant is honest. Judge the store on its own evidence — verifiable business details, independent reviews, realistic prices — before paying by any method."},{"question":"Is paying by legitimate BNPL safer than by card if the goods never arrive?","answer":"Protections vary and are often weaker than credit card chargeback rights. With a genuine provider you can dispute the purchase, but a credit card generally offers the strongest recourse when buying from an unfamiliar retailer."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-refund-return-request-on-marketplace-a-scam","url":"https://scamencyclopedia.org/questions/is-a-refund-return-request-on-marketplace-a-scam","question":"Is a buyer asking me to accept a refund or return outside the marketplace a scam?","shortAnswer":"Almost always yes. Requests to handle refunds off-platform remove all the protections the marketplace offers you as a seller.","explanation":"Marketplace refund fraud targets sellers on platforms such as eBay, Vinted, Depop, Facebook Marketplace, and Etsy. The buyer claims the item is faulty, then suggests settling the refund directly by bank transfer 'to avoid the platform's slow process'. Once you send money, the buyer either keeps the item and the refund, or never had the item in the first place. A variation involves the buyer sending a counterfeit return (an empty box or a different item) and demanding a refund before you can inspect it. Another version uses fake platform emails claiming you must issue a refund via a payment link. Always process refunds and disputes through the platform's official system, no matter how convincing the buyer's story sounds. This preserves your seller protections and leaves an audit trail.\n\nThe psychology aims at your reasonableness. Most sellers want to be helpful, fear negative feedback, and find dispute processes tedious — so a buyer offering a 'simpler' direct settlement is pushing at an open door. Some scripts add menace instead: threats of public one-star reviews, chargebacks, or reports to the platform unless you refund immediately outside the system. Both pressure styles have the same purpose, moving the money somewhere the platform cannot see, because inside the dispute system the buyer's claims would have to survive evidence.\n\nEvidence is your side of the bargain, so build it routinely: photograph items during packing, keep proof of postage with weights where possible, and photograph returned parcels before opening them on camera if a dispute is already live — an empty-box return documented this way is winnable, undocumented it rarely is. Respond to every claim inside the platform's messaging so the record stays complete, and let the dispute process run even when it is slow. Sellers lose these situations at the moment they step outside the system, almost never before.","redFlags":["Buyer wants to settle outside the platform","Pressure to refund before the return arrives","Email that looks like a platform notice but links offsite","Buyer claims the platform told them to contact you directly","Request for refund to a different account than the original payment"],"whatToDoNow":["Direct all refund requests through the platform's official dispute system","Never transfer money outside the marketplace","Document everything with screenshots","If in doubt, escalate to the platform's customer support"],"faq":[{"question":"What if the platform says I must refund immediately?","answer":"Genuine platforms allow you time to review a dispute. Log in to the platform directly — not via a link in the email — to check the real status of any case."},{"question":"The buyer is threatening bad reviews unless I refund directly — what should I do?","answer":"Keep everything in platform messages and let the threat sit on the record — coerced off-platform refunds are exactly what review-blackmail is designed to extract, and platforms can remove feedback left as leverage."},{"question":"How do I protect myself against an empty-box return?","answer":"Photograph items during packing, keep postage receipts with weights, and film opening any disputed return. Documented evidence submitted inside the platform's dispute system wins these cases; undocumented word-against-word rarely does."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-investment-app-recommended-by-a-social-media-friend-safe","url":"https://scamencyclopedia.org/questions/is-an-investment-app-recommended-by-a-social-media-friend-safe","question":"Is an investment app recommended by a friend on social media safe to use?","shortAnswer":"Be very cautious. Your friend's account may have been hacked, or they may unknowingly be promoting a scam platform.","explanation":"Social-media investment referrals are one of the fastest-growing fraud vectors. The person recommending the app may have a genuine-looking account but it could be cloned or compromised. Even when the recommendation comes from someone you genuinely know, they may have been a victim themselves — told they can only withdraw profits by recruiting others. These platforms commonly display impressive fake portfolio dashboards, offer bonuses for inviting friends, and then freeze withdrawals once you try to access your money, citing tax holds, verification fees, or account upgrade costs. Before using any investment app, verify it is registered with your country's financial regulator. Never invest money you cannot afford to lose entirely, and treat any app promoted primarily through social media with deep scepticism.\n\nVerify the friend before you even consider the platform. Contact them through a different channel — a phone call, a different app, in person — and ask whether they actually sent the recommendation; cloned and hijacked accounts distribute these pitches at scale precisely because a familiar name converts better than any advert. If the account is genuinely theirs, ask one revealing question: have they successfully withdrawn their full balance, deposits and profits together, back to their own bank? An enthusiastic yes about dashboard growth with a no — or a not-yet — about full withdrawal describes almost every victim mid-scheme.\n\nIf your friend is real and really invested, you may be watching the recruitment stage of their loss as well as a pitch for yours. The kindest move is the same as the safest one: run the regulator check together, in front of them. An unregistered platform, withdrawal fees, and referral bonuses speak for themselves more persuasively than your warnings can, and the sooner an invested friend stops depositing and attempts a full withdrawal, the more they stand to keep.","redFlags":["Recommendation arrives as a social media DM or post","Platform not found on your financial regulator's register","Impressive displayed returns with no explanation of risk","Bonus credited for inviting others","Withdrawal requires additional fees or verification"],"whatToDoNow":["Search the app name on your financial regulator's warning list","Message your friend through a separate channel to verify they really sent it","Do not deposit until you have independently verified the platform","Report scam platforms to your financial regulator"],"faq":[{"question":"What should I do if I already deposited money?","answer":"Stop depositing immediately, screenshot everything, and contact your bank to discuss reversal options. Report the platform to your financial regulator and national fraud service."},{"question":"How do I check whether my friend's account really sent the recommendation?","answer":"Ask them through a completely different channel — call them or ask in person. Cloned and hijacked accounts push investment pitches precisely because a familiar name converts better than an ad ever could."},{"question":"What single question best reveals whether the platform is real?","answer":"Ask if they have withdrawn their entire balance — deposits plus profits — back to their own bank. Enthusiasm about on-screen growth combined with no completed full withdrawal is the profile of a victim mid-scheme."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-free-government-benefits-check-by-phone-legitimate","url":"https://scamencyclopedia.org/questions/is-a-free-government-benefits-check-by-phone-legitimate","question":"Is a free government benefits check offered by phone legitimate?","shortAnswer":"Probably not. Cold calls offering to find unclaimed government benefits are usually data-harvesting or advance-fee scams.","explanation":"Benefit entitlement scams target people across the income spectrum by offering a 'free check' to see if you qualify for government grants, tax credits, or welfare payments you may have missed. The caller sounds official, may name real government departments, and asks you to confirm your name, date of birth, National Insurance or Social Security number, and bank details 'to process any payment'. That information is then used for identity fraud, or the caller pivots to charging a fee to 'process your claim'. Genuine government agencies do not cold-call citizens to offer benefit checks. If you think you may be missing out on benefits, use your government's official website or contact your local citizen's advice service directly.\n\nThe 'free check' framing is chosen because it inverts the usual scam warning signs: nothing is being sold, the caller is apparently offering you money, and declining feels like turning down your own entitlement. The script builds a sense of officialdom with department names, reference numbers, and case IDs, then normalises each disclosure — confirming your date of birth 'for the file', your national insurance number 'to run the check', your bank details 'for the payment'. Individually reasonable-sounding steps assemble into a complete identity theft kit, and some operations conclude by 'finding' an entitlement that unlocks only after a processing fee.\n\nThe underlying truth is simple: benefit eligibility can always be checked for free, at your own pace, through official calculators and advice services you approach yourself — and no genuine entitlement is ever lost because you refused to complete a phone call. If details have already been shared, contact your bank, monitor your credit file, and alert the benefits agency so they can flag attempts to redirect payments or open claims in your name. Older relatives are the primary target for this script, so describing it to them specifically — the free check, the friendly officiality, the drip of small questions — is worthwhile prevention.","redFlags":["Unsolicited call offering to check your benefit entitlement","Requests for National Insurance, Social Security, or bank details over the phone","Claim to be acting on behalf of a government department","Fee required to 'process' your claim","Urgency to confirm details before the offer expires"],"whatToDoNow":["Do not give personal or banking details to cold callers","Hang up and visit the official government website directly","Use a free official service such as Citizens Advice for benefit checks","Report the call to your national fraud reporting service"],"faq":[{"question":"Are there any legitimate services that help with benefit claims?","answer":"Yes — charities and advice agencies do offer this help for free, but they do not cold-call. Seek them out yourself rather than responding to an unsolicited approach."},{"question":"Why does this scam work when nothing is being sold?","answer":"Offering you money inverts the warning signs people watch for. Declining feels like losing your own entitlement, and each small 'confirmation' — birth date, insurance number, bank details — seems reasonable until they assemble into full identity theft."},{"question":"I answered their questions before hanging up — how exposed am I?","answer":"Depends what was shared. Bank details mean calling your bank now; identity numbers mean monitoring your credit file and alerting the benefits agency to watch for fraudulent claims or payment redirection in your name."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-travel-visa-agency-asking-for-upfront-payment-legitimate","url":"https://scamencyclopedia.org/questions/is-a-travel-visa-agency-asking-for-upfront-payment-legitimate","question":"Is a travel visa agency asking for full payment upfront before submitting my application legitimate?","shortAnswer":"Full upfront payment before any service is delivered is a red flag for visa-agency fraud, especially if the agency cannot be independently verified.","explanation":"Visa facilitation fraud involves agents who collect full payment for visa applications, tourist packages, or immigration paperwork, then disappear or deliver nothing. Victims often discover the 'agency' was never registered, the application was never submitted, or the visa documents they received are counterfeit. Legitimate visa agents are typically registered with relevant industry or government bodies, provide a written agreement detailing services and fees, and charge in clear stages. Be especially cautious with agencies found only on social media, those who contact you first, or those promoting unusually fast or guaranteed visa approvals. Always verify an agent's registration with your destination country's official embassy or immigration authority website.\n\nThe stakes here are larger than the fee. Travelling on counterfeit visa documents can mean denied boarding, refusal at the border, or consequences for future applications — turning a paid-for shortcut into a lasting problem on your immigration record. The scam clusters around situations of urgency and confusion: last-minute travel, complex destination requirements, and applicants who are unsure whether they can navigate an official portal themselves. Guarantees of approval are the clearest tell of all, because visa decisions belong to the destination government and no third party can promise them.\n\nFor most tourist and short-stay visas, the official application portal is designed for individuals and cheaper than any agent — check the destination country's own government site first, and beware lookalike sites that charge mark-ups for public forms. Where an agent genuinely adds value (complex cases, language barriers), choose one you found and verified yourself, insist on a written agreement with staged payments, and expect real reference numbers you can check against the official system. Any 'visa' delivered as a PDF that cannot be verified through official channels should be treated as no visa at all — confirm before travelling, not at the airport.","redFlags":["No verifiable registration or physical address","Guarantee of visa approval or suspiciously fast processing","Full payment demanded before any paperwork is submitted","Visa documents delivered as PDFs with no official reference numbers","Agent found only through social media or an unsolicited approach"],"whatToDoNow":["Verify the agency on the official embassy or immigration authority website","Never pay in full before seeing a written service agreement","Apply directly through official government portals where possible","Report suspicious agents to the relevant immigration authority"],"faq":[{"question":"What if I already paid and now cannot contact the agency?","answer":"Contact your bank immediately to attempt a chargeback if you paid by card. Report the fraud to your national consumer protection agency and the destination country's embassy."},{"question":"The agency guarantees my visa will be approved — is that possible?","answer":"No. Visa decisions are made by the destination government, and no agent can promise the outcome. Approval guarantees exist to justify the upfront fee and are the single clearest sign of visa fraud."},{"question":"How do I check whether the visa document I received is genuine?","answer":"Verify the reference number through the destination country's official visa-check system or embassy before you travel. A PDF that cannot be confirmed through official channels is not a visa, and discovering that at the airport is the worst-case outcome."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-subscription-that-is-impossible-to-cancel-a-scam","url":"https://scamencyclopedia.org/questions/is-a-subscription-that-is-impossible-to-cancel-a-scam","question":"Is a subscription service that is impossible to cancel a scam?","shortAnswer":"Deliberately hard-to-cancel subscriptions may not always be scams, but hiding cancellation routes is deceptive and often illegal under consumer protection law.","explanation":"Dark-pattern subscriptions use confusing interfaces, hidden cancellation links, mandatory phone calls, long waiting periods, or aggressive retention tactics to prevent customers from stopping payments. Some services go further and continue charging even after a cancellation confirmation has been issued. The most harmful version is a subscription you never knowingly signed up for — often triggered by a 'free trial' checkbox buried in a checkout page, or a third-party offer attached to another purchase. Under consumer protection laws in many countries, businesses must make cancellation as easy as sign-up. If a service refuses to cancel, you have the right to ask your bank to block the merchant and to raise a chargeback or Section 75 claim for charges after a valid cancellation request was made.\n\nThe business model relies on friction economics: every extra step — the retention call queue, the 'are you sure' pages, the cancellation form that errors out — loses a percentage of cancellers who give up until next month, and across a subscriber base those percentages are the profit. Recognising this reframes the experience: the obstacles are not incompetence, they are the product working as designed, which is why politeness and patience with the process often achieve nothing that a documented written cancellation and a merchant block do not achieve faster.\n\nPrevention is worth building into your habits: before any 'free trial', find the cancellation route first — if you cannot see how to leave before entering, do not enter. Use card statements rather than memory to audit subscriptions periodically, since dark-pattern services rely on small charges under unfamiliar billing names passing unnoticed. Virtual or single-use card numbers, where your bank offers them, are the cleanest solution for trials, because the subscription dies with the card. And keep timestamps on everything once you decide to cancel — the evidence requirement for a chargeback is easily met if you collect it as you go, and nearly impossible to reconstruct afterwards.","redFlags":["No obvious cancel button in account settings","Cancellation requires a phone call only during business hours","Charges continue after you thought you cancelled","Subscription you do not remember signing up for appearing on your bank statement","Company uses many different billing names making it hard to identify"],"whatToDoNow":["Screenshot every step of your cancellation attempt with timestamps","Send a written cancellation request by email and keep a copy","Ask your bank to block the merchant for future charges","Raise a chargeback for charges after your cancellation request","Report to your national consumer protection agency"],"faq":[{"question":"Can my bank cancel a subscription for me?","answer":"Your bank can block future payments to a merchant and may reverse recent charges, but they usually require evidence you attempted to cancel first."},{"question":"Why do these companies make cancelling so hard — isn't it illegal?","answer":"Increasingly yes, but enforcement lags. Every obstacle loses a fraction of cancellers who give up for another month, and at scale those fractions are the business model. Treat the friction as intentional and go straight to written cancellation plus a merchant block."},{"question":"How can I take free trials without getting trapped?","answer":"Find the cancellation route before signing up — if you cannot see the exit, do not enter. Where your bank offers virtual or single-use card numbers, use one: the subscription dies with the card."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-online-course-certificate-from-an-unknown-platform-valid","url":"https://scamencyclopedia.org/questions/is-an-online-course-certificate-from-an-unknown-platform-valid","question":"Is an online course certificate from a platform I have never heard of valid for employment?","shortAnswer":"Certificates from unaccredited or fake platforms have no recognised value and are sometimes sold purely to extract money from job seekers.","explanation":"Course certificate fraud targets people looking to upskill or change careers. Fraudulent platforms sell expensive 'professional certificates', 'diplomas', or 'accreditations' that employers either do not recognise or find have no backing from any real accreditation body. Some platforms go further and claim their certificate is equivalent to a university degree or a regulated professional qualification. Others sell access to genuine third-party certificate programmes but pocket the money without enrolling you, leaving you with a fake completion credential. Before paying for any online course, verify the awarding body is listed on your country's official register of qualifications or higher-education institutions. For industry-specific certificates, check directly with the relevant professional body.\n\nThe vocabulary is engineered to blur categories that matter. 'Accredited', 'certified', 'internationally recognised', and 'diploma' have precise meanings in regulated education and none at all on a sales page — some platforms even establish their own 'accreditation body', accredit themselves, and present the circle as external validation. The employment claim is the part that costs you twice: once in fees, and again when a credential you cited turns out to signal nothing to employers, or worse, signals credulity in fields where recruiters know the certificate mills by name.\n\nInvert the research direction and the problem mostly disappears: instead of asking whether a course's certificate is valid, start from the outcome you want and find out what actually signals competence there — a regulated qualification, a professional body's own certification, a portfolio of work, or simply demonstrable skill. Job postings and professional associations in your target field will tell you which credentials they recognise. Spending on education is often worthwhile; spending on a certificate whose issuer no employer has heard of rarely is, and the checking takes an evening.","redFlags":["Accreditation body cannot be found on an official register","Certificates promise equivalence to regulated qualifications","Payment required before you can view course content or tutor details","No instructor profiles or verifiable faculty","Very high certificate fees with a short study period"],"whatToDoNow":["Search the awarding body name on your national qualifications register","Check with the professional body for your target industry","Use free or verified platforms (Coursera, edX, LinkedIn Learning) where possible","Report fake accreditation to your national qualifications authority"],"faq":[{"question":"Can I get a refund if a course certificate turned out to be worthless?","answer":"If the platform made explicit false claims about accreditation, you may have grounds for a chargeback or a consumer protection complaint."},{"question":"The platform says it is 'fully accredited' — what does that actually mean?","answer":"On its own, nothing. Accreditation only matters if the accrediting body is recognised by your country's qualifications authority or the relevant professional body. Some platforms invent their own accreditor and cite it as validation — check who accredits the accreditor."},{"question":"What should I check before paying for any career-focused course?","answer":"Start from the destination: look at job postings and the professional body for your target field and see which credentials they actually recognise. Then work backwards to courses that carry those credentials."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-real-estate-investment-seminar-with-no-upfront-cost-a-scam","url":"https://scamencyclopedia.org/questions/is-a-real-estate-investment-seminar-with-no-upfront-cost-a-scam","question":"Is a free real estate investment seminar that later tries to sell me expensive courses a scam?","shortAnswer":"Free seminars used as a funnel to sell high-priced mentorship programmes or courses are a well-documented scam format — the 'free' event is the sales pitch.","explanation":"Property investment seminar fraud follows a predictable pattern: a free or very cheap introductory event creates excitement, features success stories, and ends with a high-pressure sales pitch for courses, coaching packages, or 'exclusive deal access' costing thousands. The value delivered is usually generic information freely available elsewhere. Participants who pay often find the promised mentorship is minimal, the deals are overpriced or unavailable, and the refund policy is effectively unusable. Organisers rotate brand names and presenters to avoid consistent negative reviews. This model is not illegal everywhere, but regulators in several countries have issued warnings about specific operators. Genuine property education is available through regulated estate agencies, accredited colleges, and professional bodies — without the high-pressure selling environment.\n\nThe event itself is a engineered persuasion environment worth decoding: success stories selected for emotional range, income claims framed as typical when they are exceptional or invented, audience plants who rush to the signup table, and 'tonight only' pricing that makes deliberation feel like loss. The escalation structure matters too — the first paid course is rarely the last, with attendees moved up a ladder of masterminds, elite coaching tiers, and deal-access programmes, each priced higher and each justified by the sunk cost of the previous one. Encouraging attendees to fund courses on credit cards or new loans is the point where an overpriced course becomes genuinely destructive.\n\nA single commitment protects you completely: decide before attending that no money leaves your accounts within a week of any seminar, whatever is offered. Genuine education survives seven days of reflection; pressure offers are designed not to. Use the week to search the operators' history — company names, presenter names, past attendee accounts on independent forums — and to compare what the course promises against what accredited institutions and professional bodies teach for a fraction of the price. If property investment knowledge is the real goal, the boring routes deliver it; the seminar circuit sells the feeling of it.","redFlags":["Free or very cheap introductory event followed by a high-pressure upsell","Course prices in the thousands with 'only available tonight' deadlines","Testimonials but no verifiable independent reviews","Claims of guaranteed returns from property deals","Encouragement to use credit cards or take out loans to fund the course"],"whatToDoNow":["Do not commit money on the night of the seminar","Search the company name plus 'reviews' and 'scam' independently","Read the refund policy carefully before paying anything","Consider free alternatives from regulated professional bodies"],"faq":[{"question":"Are any real estate education programmes legitimate?","answer":"Yes — courses delivered by accredited institutions or professional bodies can be valuable. The key difference is transparent pricing, verifiable credentials, and no high-pressure one-night-only sales tactics."},{"question":"Why do these events push so hard for a decision on the night?","answer":"Because the offer does not survive reflection. 'Tonight only' pricing, audience plants, and countdowns exist to prevent the week of research that would reveal the operators' history and the free availability of the material."},{"question":"I already paid for a course and mentorship — can I get anything back?","answer":"Read the refund terms immediately and submit any cancellation within the permitted window in writing. If you paid by credit card, ask your provider about a dispute, especially where the promised mentorship or deal access never materialised."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-friend-who-got-a-job-through-a-facebook-group-trustworthy","url":"https://scamencyclopedia.org/questions/is-a-friend-who-got-a-job-through-a-facebook-group-trustworthy","question":"Is a job someone found through a Facebook group and is recommending to me trustworthy?","shortAnswer":"Not necessarily. Your friend may have been misled themselves, or their account could be compromised — always verify the employer independently.","explanation":"Job referral scams exploit personal trust. A friend or family member genuinely believes they have found a good opportunity and shares it, unaware the employer is fraudulent. This is especially common with task scams, stuffing envelopes, and reshipping jobs. In other cases the recommending account has been hacked and scammers are using it to distribute the offer. Facebook groups have minimal vetting of job postings, making them popular with fraudulent recruiters. Before pursuing any job found through social media, search the company name on LinkedIn and Companies House or the relevant business register, look for a professional website independent of social media, and verify the contact email domain matches the company name. If the application involves providing bank details, paying a fee, or receiving and forwarding goods, stop immediately.\n\nThe referral layer is what makes this fraud spread further than cold outreach ever could: each convinced worker becomes an unpaid, sincere recruiter, and some schemes formalise it with referral bonuses that quietly convert victims into distributors. Your friend's good experience so far — even actual wages received — tells you little, because task scams and mule operations deliberately pay early and small to build the credibility that later extracts deposits, purchases, or use of workers' bank accounts. The pivot usually arrives after trust is set: a required 'training kit', an account upgrade, or a request to process payments through your own account.\n\nEvaluate the job as if the referral did not exist. A real employer has a verifiable registered business, a named human you can find independently, a role that makes commercial sense, and a hiring process that never asks workers for money or banking access. If your friend is already inside, watch for the moments that matter: the first request for their money, their account details, or recruitment targets. Sharing this pattern with them before that pivot — while their experience still feels positive — is more effective than warnings after they have paid.","redFlags":["Job posted in a casual Facebook group rather than a professional job board","Vague company name or no verifiable company website","Your friend cannot explain exactly what the company does","Application asks for bank details or payment before any interview","Role involves receiving payments or forwarding parcels"],"whatToDoNow":["Search the company on a business register and LinkedIn","Contact the company directly using details found independently","Ask your friend how they were paid and whether they have met anyone in person","Report suspicious job posts to Facebook"],"faq":[{"question":"What if my friend has already been paid?","answer":"Early payments are a common tactic to build trust before asking for something larger. Consistent payment in the first few weeks does not guarantee the operation is legitimate."},{"question":"The job offers a bonus for referring friends — is that a warning sign?","answer":"In this context, yes. Referral bonuses convert workers into sincere recruiters before the scheme pivots to extracting money. Legitimate employers reward referrals of qualified candidates, not mass recruitment into vague roles."},{"question":"What is the moment I should tell my friend to walk away?","answer":"The first time the 'employer' asks for their money, their bank account access, or recruitment targets. Everything before that point — even wages paid — can be part of building trust for that pivot."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-dating-app-match-who-only-messages-late-at-night-a-scammer","url":"https://scamencyclopedia.org/questions/is-a-dating-app-match-who-only-messages-late-at-night-a-scammer","question":"Is a dating app match who only messages me late at night and never during daytime a scammer?","shortAnswer":"Unusual messaging patterns can indicate someone operating across time zones as part of a scripted romance scam operation.","explanation":"Romance scam operations are often run from overseas, where agents manage many 'relationships' simultaneously using scripts. Messaging exclusively in the early hours of your morning can reflect working hours in a different time zone. Other timing patterns include extremely fast responses at all hours — suggesting a script rather than a real person — or sudden long silences followed by effusive catch-up messages. Timing alone is not proof of a scam, but combined with other signs — no video calls, a profile photo that returns results on a reverse image search, or early mentions of financial trouble — it warrants serious caution. If you are suspicious, suggest a spontaneous video call at a time convenient for you. Scammers usually cannot produce an unscripted live video of the person whose photos they are using.\n\nTiming patterns reveal operational reality because they are hard to fake at scale. An agent managing dozens of conversations works in shifts, so 'your' partner's availability follows a workday somewhere — consistent late-night windows, identical daily rhythms, or replies that arrive in bursts as the agent cycles through targets. Handovers between agents sharing an account produce their own tells: shifts in tone, vocabulary, or pet names, forgotten details you mentioned days earlier, and answers that read like paraphrases of your own messages rather than responses to them.\n\nUse spontaneity as your instrument, because scripts depend on control. Suggest a call right now rather than at a scheduled time; ask a question that references a specific earlier conversation; change topic abruptly and watch whether the reply tracks you or the script. None of these tests is conclusive alone, and genuine people can be awkward on camera — but a partner who fails every spontaneity test while intensifying emotional declarations fits one profile far better than the other. Whatever the explanation offered, hold the boundary that matters: no money, gift cards, or crypto to someone you have not met, regardless of how long the relationship has run.","redFlags":["Messages arrive exclusively during unusual hours for your time zone","Replies are instantaneous at all times of day and night","Declining or always-rescheduling video calls","Profile photos appear on other social media accounts under different names","Relationship moves very fast toward declarations of love"],"whatToDoNow":["Reverse image search their profile photos","Request a spontaneous live video call","Never send money regardless of the circumstances given","Report suspicious profiles to the dating app"],"faq":[{"question":"Can scammers use AI-generated images that won't appear in a reverse image search?","answer":"Yes, AI-generated profile photos are increasingly common and may not appear in reverse searches. A spontaneous video call remains the strongest verification method."},{"question":"Sometimes the writing style seems to change between messages — am I imagining it?","answer":"Possibly not. Scam accounts are often worked by multiple agents in shifts. Tone shifts, forgotten details you mentioned recently, and changed pet names are classic handover tells worth taking seriously."},{"question":"What is the fairest way to test the relationship without accusing them?","answer":"Spontaneity. Suggest a call right now, reference a specific earlier conversation, or change topic abruptly. Genuine people track you; scripts resist unscheduled contact. Repeated failure of every spontaneous test is your answer."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-classified-ad-seller-who-asks-for-payment-by-gift-card-a-scam","url":"https://scamencyclopedia.org/questions/is-a-classified-ad-seller-who-asks-for-payment-by-gift-card-a-scam","question":"Is a classified-ad seller who asks me to pay by gift card a scammer?","shortAnswer":"Yes. No legitimate private seller accepts gift cards as payment for goods. This is a defining sign of a scam.","explanation":"Gift card payment requests are almost universally fraudulent because gift card transactions are irreversible and untraceable. In the classified-ad context a seller may list a desirable item at a low price, create urgency, and then explain they cannot meet in person and only accept gift card payment 'for security'. Once you send the card numbers and PINs, the item is never delivered. A variant involves a buyer (not seller) sending you a fake payment confirmation and then asking you to forward gift cards to 'release' the funds. Gift cards are designed for consumer purchases, not person-to-person transactions. Legitimate classified-ad sales should be conducted in person with cash, or through a platform with its own buyer/seller protection.\n\nThe 'for security' justification deserves a moment's thought, because it inverts reality so completely. Gift cards offer the buyer no security whatsoever — no receipt trail tied to the seller, no dispute process, no reversal — which is precisely their appeal to the person asking. Sellers who insist on them are selecting a payment method whose only distinguishing feature is that it cannot be traced or recovered, and no honest reason for that preference exists. The same applies to requests for codes from prepaid debit products or 'verification' payments to hold an item.\n\nThe buyer-side variant rounds out the picture: a 'buyer' claims to have paid through some service that supposedly holds the funds, then asks you to purchase gift cards to 'verify your identity' or 'release' the payment. Any transaction structure in which gift card codes flow toward a stranger is fraud by definition, whichever role they are playing. Local sales work best face to face with cash or verified instant transfer at handover; remote sales belong on platforms whose payment systems exist precisely to referee strangers. If you already sent codes, contact the card issuer immediately — unredeemed codes are occasionally recoverable — and report the listing.","redFlags":["Payment requested by iTunes, Google Play, Amazon, or any gift card","Seller cannot meet in person or declines video showing the item","Price is unusually low to attract quick payment","Urgency — must be paid today or the item goes to another buyer"],"whatToDoNow":["Refuse any gift card payment request immediately","Meet in person and pay cash for local classified sales","Use a platform with buyer protection for remote transactions","Report the listing to the classified-ad platform"],"faq":[{"question":"What if the seller says gift cards are safer for the buyer?","answer":"The opposite is true. Gift card payments offer you zero protection as a buyer. Any seller insisting on this method is almost certainly fraudulent."},{"question":"A buyer wants me to buy gift cards to 'release' their payment — is that a thing?","answer":"No. No payment service holds funds pending gift card verification. Whether posing as buyer or seller, anyone structuring a deal so gift card codes flow to them is running the same fraud."},{"question":"I sent the card codes — is the money gone?","answer":"Usually, but act anyway: contact the gift card issuer immediately, as unredeemed codes can sometimes be frozen or refunded. Keep the conversation as evidence and report the listing to the platform and your fraud authority."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-social-media-account-verified-badge-a-guarantee-of-legitimacy","url":"https://scamencyclopedia.org/questions/is-a-social-media-account-verified-badge-a-guarantee-of-legitimacy","question":"Is a social media verification badge a guarantee that an account is legitimate?","shortAnswer":"No. Verification badges confirm identity at the time of approval but do not prevent accounts from being sold, compromised, or used deceptively after verification.","explanation":"Social media platforms use verification badges (blue ticks, gold shields, etc.) to confirm that an account is associated with a particular person or brand. However, several things can undermine this assurance. First, verified accounts are regularly hacked and used to promote scams before the platform can act. Second, some platforms have sold verification to almost anyone who pays a subscription fee, removing its identity-assurance value. Third, scammers create accounts with nearly identical names and usernames, adding a badge lookalike character or emoji to the display name to visually mimic a verified account. Always check whether the badge is the platform's official verification mark rather than an emoji, and whether the username matches the real account you expect. A badge does not mean the content being shared — especially investment opportunities or prize draws — is genuine.\n\nHacked verified accounts are the highest-value inventory in the account-theft economy precisely because the badge survives the takeover. A compromised verified account can be renamed, rebranded, and pointed at a crypto giveaway or fake support operation within minutes, and every safety heuristic its followers relied on now works for the attacker. Impersonation refinements go further: reply-chains under a celebrity's genuine post filled with lookalike accounts announcing giveaways, or 'brand support' accounts that answer your public complaint faster than the real company can.\n\nThe durable defence is separating identity from behaviour. A badge, at best, says who an account belonged to at verification time; it says nothing about who controls it now or whether today's post is honest. Judge the behaviour on its own: giveaways requiring an upfront payment, investment pitches, urgent DMs about your account, and support agents who move you to private channels are fraudulent patterns whoever appears to send them. For anything involving money or credentials, leave the social platform entirely and act through the organisation's official website or app — the badge can be spoofed, borrowed, or stolen, but the behaviour test cannot.","redFlags":["Badge appears to be an emoji in the display name rather than a platform badge","Account has a slightly different username from the genuine brand","Verified account is promoting investments, giveaways, or prize draws","Profile was recently created or changed","Account asks you to move to a private channel"],"whatToDoNow":["Hover over or tap the badge to confirm it is a genuine platform verification","Compare the username carefully against the brand's official website","Navigate to the brand directly via their official website, not a social link","Report impersonation accounts to the platform"],"faq":[{"question":"Can I trust a payment request from a verified brand account on social media?","answer":"No. Legitimate brands do not request payments through social media DMs. Always use their official website checkout."},{"question":"Why are hacked verified accounts so valuable to scammers?","answer":"The badge survives the takeover. A stolen verified account can be renamed and pointed at a giveaway or fake support scheme within minutes, converting its followers' trust directly into victims."},{"question":"A 'brand support' account replied to my public complaint — can I trust it?","answer":"Be careful — fake support accounts monitor complaints and respond faster than real ones, then move you to DMs to harvest credentials. Contact companies only through the support channels on their official website."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-gig-work-app-requiring-a-background-check-fee-legitimate","url":"https://scamencyclopedia.org/questions/is-a-gig-work-app-requiring-a-background-check-fee-legitimate","question":"Is a gig work app that requires me to pay a background check fee before I can work legitimate?","shortAnswer":"Legitimate gig platforms cover background check costs themselves or use trusted third-party services at no charge to workers.","explanation":"Background check fee scams target people looking for flexible work through apps. The fraudulent platform explains that a criminal records check or DBS check is mandatory before you can accept jobs, and directs you to pay a fee either to the app directly or to a linked 'screening service'. Once you pay, the platform either disappears, never gives you access to jobs, or invents new fees for insurance, uniforms, or training. Real gig platforms such as those for driving, delivery, or care work either absorb check costs or use accredited providers who never charge the applicant directly. If an app asks for money before you have earned anything, treat it as a strong warning sign. Verify the company on a business register and look for independent reviews before paying anything.\n\nThe background check pretext is selected carefully: real gig platforms genuinely do screen workers, so the request sounds like procedure rather than profit. What differs is the direction of payment. Accredited screening providers bill the platform, not the applicant, and no legitimate onboarding flow routes a worker's card details through a 'screening partner' link. The fee itself is often only the opening — the same operations typically harvest full identity details during 'verification', which are worth more than the fee and can circulate long after the fake app disappears.\n\nThe general principle covers every variation before it appears: employment pays you; it does not charge you. Fees for applications, screening, training, uniforms, equipment, or 'activation' — whatever the label — mark the operation as extractive, because a business that profits from onboarding fees needs applicants, not workers. Established gig platforms can be verified through app store history, company registries, and thousands of independent worker reviews; a platform lacking that trail and charging to join has told you its business model already. If you paid, dispute the charge with your bank and treat any identity documents you submitted as compromised.","redFlags":["Fee required before you can start working","Background check must be paid through the app or a linked website","Company has no verifiable address or phone number","No independent reviews on established platforms","Fee escalates — insurance, training, or equipment charges follow"],"whatToDoNow":["Never pay a fee to start a job — legitimate employers do not charge workers","Search the company on a business register","Check for reviews on independent sites","Report fee-charging fake gig platforms to your consumer protection agency"],"faq":[{"question":"What if the app promises to reimburse the fee after my first job?","answer":"This promise is rarely honoured. The fee reimbursement is used as a hook to make the request seem reasonable — do not pay it."},{"question":"But real gig platforms do run background checks — how is this different?","answer":"Direction of payment. Legitimate platforms pay accredited screening providers themselves; the worker is never billed through a link or in-app payment. Any onboarding that charges the applicant is using the real practice as cover."},{"question":"I paid the fee and uploaded my ID — what should I do now?","answer":"Dispute the charge with your bank, treat the identity documents as compromised — monitor your credit file and consider a fraud alert — and report the app to the store it was distributed through and your consumer protection agency."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-caller-saying-my-social-media-account-will-be-closed-a-scam","url":"https://scamencyclopedia.org/questions/is-a-caller-saying-my-social-media-account-will-be-closed-a-scam","question":"Is a call or message saying my social media account will be closed unless I verify immediately a scam?","shortAnswer":"Yes. Social media platforms do not phone users to warn of account closure, and legitimate suspension notices never demand immediate action via a call.","explanation":"Account suspension scams impersonate Facebook, Instagram, TikTok, and other platforms to harvest login credentials or payment details. The message arrives by phone call, SMS, or direct message, claiming your account has violated policies and will be permanently deleted unless you 'verify' it right now. A link in the message leads to a convincing fake login page that captures your username and password. A phone call version directs you to speak with a 'platform representative' who guides you through 'restoring' your account while actually helping themselves to your credentials. Real platforms communicate policy violations through in-app notifications and official email. They do not call users, and they allow time to appeal — they do not demand instant verification under threat of deletion.\n\nFor many targets the account is the business: sellers, creators, and community admins can lose income, audience, and years of content in a takeover, which is why 'your account will be deleted' lands harder than most financial threats. Attackers know this and target business and creator accounts preferentially, sometimes citing fake copyright strikes or advertising policy breaches for extra plausibility. Once inside, they run ads on your payment methods, message your followers with scams under your name, or ransom the account back to you.\n\nThe defence stack is short and worth completing today rather than after an attempt: two-factor authentication using an app rather than SMS where offered; a unique password not shared with your email; and knowing in advance where genuine policy notices appear inside each platform, so a threatening DM has nothing to imitate. If credentials were phished, move fast in the right order — secure the linked email first, then the platform password, then review authorised sessions and connected apps, then check for ads or messages sent in your name. Speed matters, because takeovers monetise your account within hours.","redFlags":["Phone call, SMS, or DM claiming your account is about to be deleted","Immediate action required to save the account","Link in the message leads to a login page","Caller claims to be from the platform's 'trust and safety' or 'compliance' team","Request for your password or a verification code"],"whatToDoNow":["Do not click any link in the message","Log in directly to the platform via the official app or website","Check in-app notifications for any genuine policy notices","Enable two-factor authentication on all social accounts"],"faq":[{"question":"What if the email looks exactly like one from the platform?","answer":"Email sender addresses and branding can be spoofed. Go directly to the platform app or website — never via a link in the email — to check your real account status."},{"question":"Why do these scams target business and creator accounts especially?","answer":"Because the account is the livelihood — the threat of deletion lands harder, and a captured account can be monetised immediately through ads on your payment methods, scam messages to your audience, or ransom demands."},{"question":"My login details went into a fake verification page — what order do I fix things?","answer":"Secure the linked email account first, then change the platform password, then review active sessions and connected apps, then check whether ads or messages were sent in your name. The email account is the master key — always start there."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-in-app-purchase-from-an-app-i-downloaded-for-free-safe","url":"https://scamencyclopedia.org/questions/is-a-in-app-purchase-from-an-app-i-downloaded-for-free-safe","question":"Is it safe to make an in-app purchase inside a free app I downloaded from an app store?","shortAnswer":"Generally yes if the app is legitimate, but some apps use misleading dark patterns, unexpected recurring charges, or prey on children making accidental purchases.","explanation":"In-app purchase fraud takes several forms. Some low-quality apps hide subscription sign-ups inside confusing consent screens, charge immediately on free-trial sign-up, or make cancellation extremely difficult. Apps that target children may present purchases in ways that seem like free game rewards. A more serious variant involves fake apps that mimic legitimate brands — a fake banking app, wallet, or exchange — and use in-app 'verification' to steal credentials or payment details. Before making any in-app purchase, confirm the app developer matches the genuine company (check their website), read reviews specifically about billing, and use your device's family spending controls if children have access. Enable purchase confirmations on iOS and Android to prevent accidental charges.\n\nThe boundary that matters most is whether payment stays inside the store's own billing system. Purchases processed by Apple or Google inherit real protections — visible subscription lists, standardised cancellation, and a refund process — while an app that collects card details through its own forms bypasses all of it, leaving you dealing directly with whoever built the app. The same logic applies to credentials: your Apple ID or Google password belongs only in system dialogs, never typed into a screen an app itself draws, which is a technique fake apps use to capture accounts.\n\nFor households, the highest-value fix is structural rather than behavioural: purchase confirmation requirements and family approval settings mean a child's tap cannot become a charge, which defuses the 'free game reward' patterns aimed at them. For yourself, a monthly glance at the subscription list in your store account catches both forgotten trials and dark-pattern sign-ups while refunds are still realistic. Treat billing complaints in an app's recent reviews as disqualifying before installing — users burned by surprise charges tend to say so, loudly, and that record is the cheapest research available.","redFlags":["App requests card details beyond what the app store already holds","Subscription price is buried in tiny print on a cluttered screen","Developer name does not match the genuine company","Reviews mention unexpected charges or difficulty cancelling","App prompts for Apple ID or Google account password within the app itself"],"whatToDoNow":["Enable purchase confirmation settings on your device","Set up parental spending controls if children use the device","Review subscriptions monthly in your app store account settings","Report misleading apps to your device platform's app store"],"faq":[{"question":"Can I get a refund for an accidental or unauthorised in-app purchase?","answer":"Both Apple and Google have refund request processes for in-app purchases. Submit a refund request through the app store — most accidental or first-time charges are refunded."},{"question":"What's the difference between paying through the store and paying in the app's own form?","answer":"Store-processed purchases come with visible subscription management, standard cancellation, and a refund process. An app collecting card details through its own forms bypasses all of that — you are trusting the developer directly, which is where fraud lives."},{"question":"When is it never okay to enter my Apple ID or Google password?","answer":"Inside a screen the app itself draws. System password prompts come from the operating system, not the app. Fake login dialogs inside apps are a known technique for capturing store accounts and their linked payment methods."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-debt-collector-asking-for-payment-by-prepaid-card-legitimate","url":"https://scamencyclopedia.org/questions/is-a-debt-collector-asking-for-payment-by-prepaid-card-legitimate","question":"Is a debt collector asking me to pay by prepaid debit card or wire transfer legitimate?","shortAnswer":"No legitimate debt collector requires payment by prepaid card or wire transfer. This is a hallmark of phantom debt scams.","explanation":"Phantom debt scams involve callers who claim you owe a debt — often described as a payday loan, utility bill, or legal judgement — and pressure you to pay immediately by wire transfer or prepaid debit card to avoid arrest, legal action, or wage garnishment. Real debt collectors are required by law to provide written verification of the debt and must follow regulated conduct rules. They accept standard payment methods, and they cannot threaten arrest or immediate legal action simply for not paying on a phone call. If you genuinely owe a debt, a real collector will give you their company name, address, and licence number, and send written confirmation. If a caller refuses to do any of these things, you are almost certainly dealing with a scam.\n\nPhantom debt scripts are built from fragments of truth, which is what makes them disorienting: the caller may cite a lender you once used, an old address, or a loan application you half-remember, all sourced from breached or purchased data. Some victims are pursued over debts that were fully repaid years earlier, or 'debts' that never existed at all, with the story adjusted live based on your reactions. The arrest threat is the load-bearing lie — consumer debt is a civil matter, and no country's police arrest people because a phone caller says a bill is unpaid.\n\nYour leverage is the verification requirement. Ask for the collector's company name, address, and licence details, and a written validation notice of the debt — a legitimate collector must provide these and expects to; a phantom collector will escalate threats instead, because pressure is all they have. Do not confirm or fill in any personal details during the call, do not pay 'to stop enforcement today', and check any debt you think might be real through your own records and credit file. If threats continue, report the operation — details you provide about numbers and scripts genuinely help shut these boiler rooms down.","redFlags":["Payment demanded by prepaid card, gift card, or wire transfer","Threat of immediate arrest or bailiff visit if you do not pay now","Caller refuses to provide written debt verification","Debt is for something you have no knowledge of","Caller ID shows a government or legal authority number"],"whatToDoNow":["Request the collector's company name, licence number, and a written notice of the debt","Check the debt against your own records before paying anything","Contact your national debt advice service to verify your rights","Report suspected phantom debt calls to your consumer protection agency"],"faq":[{"question":"What if I am genuinely behind on a debt?","answer":"Real debt collectors accept payment by bank transfer, cheque, or card — and they provide a written payment receipt. You can also negotiate payment plans. Never pay a caller who insists on prepaid cards."},{"question":"The caller knew about a real loan I once had — doesn't that prove the debt is real?","answer":"No. Loan and application details circulate through data breaches and purchased lead lists. Scammers routinely chase debts that were repaid or never existed, using real fragments to make the story land. Verify through your own records and credit file."},{"question":"Can I really be arrested over an unpaid consumer debt?","answer":"No. Consumer debt is a civil matter, and police do not arrest people at a phone caller's request. The arrest threat is the defining lie of phantom debt fraud — a legitimate collector will never make it."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-crypto-nft-project-promising-real-world-asset-returns-legitimate","url":"https://scamencyclopedia.org/questions/is-a-crypto-nft-project-promising-real-world-asset-returns-legitimate","question":"Is a crypto or NFT project that promises returns backed by real-world assets legitimate?","shortAnswer":"Such claims require serious independent verification. Most retail investors cannot check the underlying assets, making these projects highly susceptible to fraud.","explanation":"Real-world asset (RWA) tokenisation is a real concept in financial technology, but scammers exploit the terminology to make fraud sound sophisticated. Promoters claim that buying their token or NFT gives you ownership or yield from physical assets such as property, gold, or invoices. The underlying assets may not exist, may be heavily encumbered, or may have been pledged to multiple investors. Regulatory frameworks for tokenised assets are still developing in most countries, meaning investor protections are limited. Before investing, check whether the issuer is licensed by a financial regulator, whether the claimed assets are independently audited, and whether a legal structure actually connects your token to the asset. Promises of stable, high yield with minimal risk in a new token are a strong warning sign.\n\nThe terminology is doing deliberate work: 'backed by real assets' borrows the safety connotations of property and gold while delivering none of their legal substance. Genuine asset backing requires an enforceable legal chain — a custodian holding the asset, a legal structure giving token holders a claim on it, and independent audits confirming the asset exists and is not pledged elsewhere. In fraudulent projects that chain is replaced by photographs, unaudited claims, and a whitepaper. Without the legal wiring, 'backed' means only 'mentioned in the marketing'.\n\nA short interrogation separates substance from decoration: who holds the asset, under what legal agreement, audited by whom, and what exactly can a token holder enforce if the yield stops? Legitimate projects answer with named custodians, licence numbers, and documents a lawyer can read; fraudulent ones answer with community enthusiasm and yield tables. Treat stable high yields as the strongest single warning — real asset income (rent, interest, invoice payments) fluctuates and is eaten by costs, so smooth generous returns imply either new-investor money or invented numbers. If you cannot verify the chain from token to asset independently, the asset may as well not exist — and usually it does not.","redFlags":["Token issuer is not registered with a financial regulator","No independent third-party audit of the claimed real-world assets","High fixed yield promised with no clear explanation of how it is generated","Pressure to invest before a 'pre-sale' ends","Community managed only through Telegram or Discord with no legal address"],"whatToDoNow":["Check the issuer on your country's financial regulator register","Request and read the legal offering documents before investing","Do not invest more than you can afford to lose completely","Report unregistered securities offers to your financial regulator"],"faq":[{"question":"Is all RWA tokenisation fraudulent?","answer":"No — legitimate RWA projects exist and are typically run by regulated financial institutions with audited structures. The red flags above distinguish fraud from legitimate offerings."},{"question":"What questions expose a fake asset-backed token fastest?","answer":"Who holds the asset, under what legal agreement, audited by whom, and what can a token holder legally enforce? Legitimate projects answer with named custodians and documents; fraudulent ones answer with marketing and yield tables."},{"question":"Why is a stable high yield a warning rather than a selling point?","answer":"Real asset income fluctuates and carries costs — rent has vacancies, invoices default, gold pays nothing. Smooth generous returns from claimed assets imply new-investor money or invented numbers, not genuine yield."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-pet-insurance-policy-sold-by-phone-legitimate","url":"https://scamencyclopedia.org/questions/is-a-pet-insurance-policy-sold-by-phone-legitimate","question":"Is a pet insurance policy sold to me by cold call legitimate?","shortAnswer":"Cold-call pet insurance sales are rarely from genuine insurers — many are fake policies that take your premium but provide no real cover.","explanation":"Pet insurance fraud involves callers impersonating genuine insurers or selling worthless policies through unregistered companies. The quoted premium is attractive, the caller sounds professional and quotes genuine-sounding policy terms, and you receive a policy document by email. When you make a claim, you discover the insurer does not exist, the policy has exclusions that void every claim, or the company has disappeared. Legitimate pet insurance is sold by regulated insurers found on your country's financial regulator register. You can buy directly through insurer websites, comparison sites, or through veterinary practices. If you receive an unsolicited call about pet insurance, hang up and search for the insurer's name on the regulator's register before calling them back on a number from that site.\n\nInsurance fraud has a property that makes it crueller than most: the product's failure is invisible until the worst moment. A fake policy behaves exactly like a real one — documents arrive, direct debits collect smoothly, renewal notices appear — right up until a sick or injured animal generates a claim, at which point the victim discovers the cover never existed while facing an urgent vet bill. That delay is also why these operations can run for long periods: premiums flow in monthly and the fraud only surfaces claim by claim.\n\nThe worthless-policy variant deserves equal caution: some cold-sold policies come from real but unscrupulous intermediaries and are technically genuine yet engineered with exclusions, excesses, and claim caps that make payouts practically impossible. Whether outright fake or merely hollow, the protection is the same — buy cover you sought out yourself, verify the underwriting insurer (not just the selling brand) on the regulator's register, and read what is actually covered before paying. If you hold a policy bought from a cold call, verify it now, while your pet is well: check the insurer's registration and confirm your policy number directly with the insurer through details from the register.","redFlags":["Unsolicited call offering cheap pet cover","Insurer name cannot be found on the financial regulator's register","Policy document is a low-quality PDF with no policy number","Caller pressures for payment before sending policy details","Premium is significantly cheaper than comparison site quotes"],"whatToDoNow":["Never buy insurance from an unsolicited caller","Search the insurer on your financial regulator's register","Use a regulated comparison site to find genuine policies","Report fake insurance sellers to your financial regulator"],"faq":[{"question":"How do I check if my existing pet insurance is genuine?","answer":"Search the insurer's name on your financial regulator's website. If they are not listed, contact the regulator to report the policy and seek advice."},{"question":"My cold-call policy sends documents and collects payments normally — doesn't that mean it's real?","answer":"Not necessarily. Fake policies imitate every routine touchpoint; the fraud only surfaces when a claim is made. Verify the underwriting insurer on the regulator's register and confirm your policy number with them directly — now, not at claim time."},{"question":"What's the difference between a fake policy and a worthless one?","answer":"A fake policy has no insurer behind it. A worthless one is technically real but built with exclusions and caps that defeat almost any claim. Both are avoided the same way: verify the underwriter and read the cover before paying."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-prize-competition-that-requires-me-to-share-a-post-first-real","url":"https://scamencyclopedia.org/questions/is-a-prize-competition-that-requires-me-to-share-a-post-first-real","question":"Is a prize competition on social media that requires me to share a post and follow an account real?","shortAnswer":"Many are fake. Engagement-farming competitions collect followers and shares but never award prizes, or they build audiences for later scam promotions.","explanation":"Engagement-bait prize scams are designed to rapidly grow a social media page by promising valuable prizes in exchange for shares and follows. Once the post goes viral, the page is either sold to scam operators or used to promote fraudulent investment schemes, phishing links, or fake product stores. In other cases the competition is designed purely to harvest personal data through a linked entry form. Genuine brand competitions are run through regulated promotional mechanics, clearly state the prize value, include full terms and conditions with a closing date, and are hosted on the brand's official verified account. Before entering any online competition, confirm the account running it is the brand's genuine verified presence, not a lookalike account.\n\nThe winner-notification stage is where the real extraction happens, sometimes weeks after the post itself. A DM announces you have won and introduces a small obstacle between you and the prize: a delivery fee, a 'verification' payment, a form wanting your card details for shipping insurance, or a link to claim within hours. Some variants ask for a code sent to your phone — which is actually the two-factor code for an account takeover in progress. Genuine promotions never charge winners to receive prizes, and a request for payment or codes converts 'you have won' into its true meaning.\n\nLookalike winner accounts add a second layer: after a real brand runs a genuine competition, fake accounts with near-identical names DM entrants who commented publicly. This is why entering competitions with a public comment slightly raises your exposure — your username becomes a target list. None of this makes real competitions untouchable; it makes the checks specific. Confirm any win through the brand's verified account or official website, never pay or share codes to claim anything, and treat urgency in a winner message as the tell it is: real brands give winners reasonable time, fraudsters give hours.","redFlags":["Account running the competition is not the brand's official verified page","No terms and conditions, closing date, or previous winner history","Entry requires following multiple unrelated accounts","Linked form requests excessive personal or financial information","Previous winner posts look staged or are very sparse"],"whatToDoNow":["Check the competition is on the brand's official verified account","Read any terms and conditions before sharing personal data","Avoid forms requesting financial or government ID information","Report fake competitions to the social media platform"],"faq":[{"question":"Is there any harm in just sharing a post without filling in a form?","answer":"The main harm is amplifying the scammer's reach. Your followers see the post and some may be deceived into entering or following the fraudulent account."},{"question":"I got a DM saying I won and asking for a delivery fee — is that ever normal?","answer":"No. Genuine promotions never charge winners to receive prizes. Any payment, card details, or verification code requested to 'claim' a win is the actual scam — the competition was only the harvest stage."},{"question":"Why did a second account with almost the same name message me after a real brand's competition?","answer":"Lookalike accounts monitor genuine competitions and DM public entrants posing as the brand. Verify any winner contact against the brand's verified account or official website before responding."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-telecom-refund-call-asking-me-to-open-my-banking-app-a-scam","url":"https://scamencyclopedia.org/questions/is-a-telecom-refund-call-asking-me-to-open-my-banking-app-a-scam","question":"Is a call from my telecom provider saying I was overcharged and they need me to open my banking app to process a refund a scam?","shortAnswer":"Yes. Unsolicited refund calls that ask you to open your banking app are a well-known fraud format used to steal money.","explanation":"Telecoms refund scams begin with a caller who claims to be from your broadband, mobile, or TV provider, saying you are owed a refund due to overcharging or a service fault. They ask you to open your banking app so they can 'transfer the refund'. Instead, they guide you through authorising a payment to themselves, or they install remote access software to access your accounts directly. Real telecom providers issue refunds as bill credits or by cheque — they never call you to process a refund that requires you to operate your banking app over the phone. If you believe you may have been overcharged, hang up and call your provider directly using the number printed on your bill.\n\nOnce your banking app is open on their instruction, the caller's script turns every security feature into a prop. Payment confirmation screens become 'refund authorisation', one-time codes become 'verification', and if your bank's app displays a warning about scams, the caller pre-empts it — 'the system will show a standard notice, just continue'. Some versions instead push remote-access software, watching your screen while the 'refund' is processed; others recruit you into 'testing' after the refund, walking you through additional transfers. The consistent thread is a stranger directing your hands inside your own bank.\n\nThe rule that defeats every script is about who initiated contact: your banking app opens on your initiative, never during an inbound call, whatever the caller's story or apparent knowledge of your account. If money already left, call your bank's fraud line immediately — authorised-payment fraud is time-sensitive, and your report starts the recovery attempt and protects your position. Then report the call, and expect repeat attempts: successful and near-successful victims are recycled through follow-up scripts, including fake 'fraud team' calls about the very scam that just happened.","redFlags":["Unsolicited call about a refund you did not request","Caller asks you to open your banking app or online banking","Request to install remote access software or allow screen sharing","Urgency — refund must be processed today or will be forfeited","Caller knows your approximate bill amount"],"whatToDoNow":["Hang up and call your telecom provider using the number on your bill","Never open your banking app during an inbound call you did not initiate","Do not install any software at a caller's instruction","Report the call to your national fraud reporting service"],"faq":[{"question":"What if the caller already knows my account number?","answer":"Account numbers and partial billing details are commonly obtained from data breaches. Knowing your details does not make the caller genuine."},{"question":"The caller told me to ignore my banking app's scam warning — why would they know it appears?","answer":"Because the script anticipates it. Pre-empting your bank's fraud warnings ('a standard notice will pop up, just continue') is proof you are being coached through an authorised payment to a criminal, not receiving a refund."},{"question":"I authorised a payment during one of these calls — is it recoverable?","answer":"Sometimes, and speed is decisive. Call your bank's fraud line immediately — authorised push payment fraud has reimbursement routes in some jurisdictions, and early reporting maximises both recovery odds and your protections."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-loan-with-a-small-processing-fee-before-funds-are-released-real","url":"https://scamencyclopedia.org/questions/is-a-loan-with-a-small-processing-fee-before-funds-are-released-real","question":"Is a loan offer that only requires a small processing fee before the funds are released real?","shortAnswer":"No. Advance fee loan fraud is one of the most common financial scams — any loan that requires upfront fees before funds are released is fraudulent.","explanation":"Advance fee loan scams target people who are financially vulnerable or have poor credit. The fraudster offers a loan at surprisingly good terms — no credit check, low interest, large amounts — but explains that a small fee must be paid first to release the funds, cover insurance, or satisfy a regulatory requirement. After the first fee is paid, new fees are invented, and eventually the scammer disappears. No genuine regulated lender requires upfront payment before disbursing a loan. Arrangement fees for legitimate loans are always deducted from loan proceeds or added to repayments — they are never collected in cash or by transfer before you receive any money. If you are asked to pay anything upfront to access a loan, stop immediately.\n\nThe targeting is what makes this fraud so effective: it concentrates on people that mainstream credit has already refused, so 'no credit check' reads as understanding rather than absurdity. The initial fee is deliberately small relative to the promised loan — paying feels proportionate, almost cautious. Then the sequence begins: the transfer 'failed' and needs an insurance payment; your credit profile requires a 'risk deposit'; a final 'release fee' will unlock everything. Each stage is calibrated against what you have already spent, using your own sunk costs as the pressure.\n\nSome operations add an identity-theft layer, collecting the documents a real loan application would need — ID, bank statements, payslips — which are then used or sold for fraud in your name. If you are caught mid-sequence, the discipline is to stop at once: no fee has ever been the last one, and money already sent does not improve by being followed. Dispute card payments with your bank, report the 'lender' to your financial regulator, and if you genuinely need credit, talk to a regulated credit union or community lender — the options for imperfect credit are worse than prime rates, but they are real, and none of them charges you before lending.","redFlags":["Any payment required before receiving loan funds","No credit check mentioned alongside large loan amounts","Lender cannot be found on a financial regulator's authorised firms register","Loan offer arrived unsolicited by text, email, or social media","Additional new fees invented after the first one is paid"],"whatToDoNow":["Never pay any fee before receiving loan funds","Check the lender on your financial regulator's register","Seek credit through your bank or a regulated credit union","Report the fraudulent offer to your financial regulator"],"faq":[{"question":"What about credit brokers who charge a fee to find me a loan?","answer":"Some regulated credit brokers do charge a fee, but they must be authorised, must disclose the fee in advance, and must refund it if they cannot find a suitable loan. Never pay a broker fee to an unregistered party."},{"question":"I've already paid two fees — should I pay the final release fee to get my loan?","answer":"No. There is no loan and no final fee — each payment funds the invention of the next obstacle. Stop immediately, dispute what you can with your bank, and report the lender to your financial regulator."},{"question":"They have my ID and bank statements from the 'application' — what should I do?","answer":"Treat your identity as compromised: monitor your credit file, consider a fraud alert with credit agencies, and warn your bank. Advance-fee operations often monetise applicants' documents a second time through identity fraud."}],"lastReviewed":"2026-08-01"},{"slug":"can-scammers-use-ai-to-clone-a-bank-voice-on-a-phone-call","url":"https://scamencyclopedia.org/questions/can-scammers-use-ai-to-clone-a-bank-voice-on-a-phone-call","question":"Can scammers use AI voice cloning to impersonate my bank on a phone call?","shortAnswer":"Yes. AI voice synthesis can produce convincing copies of real voices and is increasingly used to impersonate trusted callers.","explanation":"AI voice cloning technology allows a convincing synthetic voice to be generated from a short audio sample. Scammers have used this to impersonate bank staff, financial advisers, family members, and executives during phone calls. The caller sounds natural, can hold a basic conversation, and may match the accent and tone of the person they mimic. Combined with caller ID spoofing, the call appears to come from a legitimate number. At the banking level, the AI voice may instruct you to confirm a transaction, provide a one-time code, or authorise a large payment. Your bank will never call you to ask for an OTP or PIN. If a call feels even slightly unusual, hang up and call your bank on the number on the back of your card.\n\nThe practical implication of voice cloning is that authentication by ear is finished — for banks, and equally for the 'family member in trouble' calls that use the same technology. What has not changed is the shape of the request underneath the voice: no matter how perfect the audio, the call still needs you to read out a code, approve a payment, move money, or share credentials, and those requests are exactly as illegitimate from a perfect voice as from an obvious robot. Judge calls by what they ask, never by how they sound.\n\nBuild your defences on channels rather than voices. A callback on a number you sourced independently defeats cloning completely, because the fraudster cannot answer your bank's real phone line. A pre-agreed family password does the same for personal emergency calls. Give yourself standing permission to hang up on anyone claiming institutional authority — a real bank employee is untroubled by you verifying through the official number, and the caller who resists or panics at that suggestion has identified themselves. If you did share a code or approve a payment, call your bank's fraud line immediately; minutes matter in what can be frozen or recalled.","redFlags":["Caller asks for an OTP, PIN, or password over the phone","Instruction to authorise or confirm a payment you did not initiate","Caller sounds slightly robotic or pauses unnaturally","Caller becomes evasive when asked unexpected questions","Caller ID matches your bank but the request is unusual"],"whatToDoNow":["Hang up and call back on a number you find independently","Never share an OTP or PIN on an inbound call","Ask your bank to add a verbal security passphrase to your account","Report the call to your bank's fraud team and national fraud service"],"faq":[{"question":"How can I tell if I am speaking to an AI voice?","answer":"AI voices may pause unnaturally, struggle with unexpected slang, or repeat phrases. Asking an unexpected personal question about the supposed caller can reveal inconsistencies."},{"question":"If the voice can be perfect, how do I ever trust a phone call again?","answer":"Trust channels, not voices. A callback on a number you found independently defeats cloning entirely — the fraudster cannot answer your bank's real line. Judge every call by what it asks you to do, never by how it sounds."},{"question":"Does this same technique target families as well as bank customers?","answer":"Yes — cloned voices of relatives in fabricated emergencies use identical technology. A pre-agreed family code word, checked before any money moves, is the household equivalent of calling your bank back on the official number."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-pay-per-task-app-that-requires-an-upgrade-fee-to-withdraw-a-scam","url":"https://scamencyclopedia.org/questions/is-a-pay-per-task-app-that-requires-an-upgrade-fee-to-withdraw-a-scam","question":"Is a pay-per-task app that requires me to buy an upgrade before I can withdraw my earnings a scam?","shortAnswer":"Yes. Any earnings platform that requires a fee to unlock withdrawals is a task scam — the displayed balance is fictional.","explanation":"Task scam platforms mimic legitimate micro-task or paid-per-click work sites. You complete tasks, a balance accumulates in your dashboard, and when you attempt to withdraw you are told your account must be 'upgraded' or a 'VIP level' purchased. After each fee is paid, a new reason is invented to delay withdrawal. The balance displayed is never real money — it is a number on a screen designed to keep you paying. Legitimate micro-task platforms such as Amazon Mechanical Turk, Clickworker, or Appen pay modest amounts and never require any fee to withdraw earnings. The tell-tale sign is that the job was promoted through WhatsApp or Telegram and the platform has no independent reviews on established sites.\n\nThe early experience is engineered to feel like proof: tasks are trivially easy, the balance grows visibly, and small withdrawals often succeed at first — the scheme's one genuine expenditure, made to establish that 'the platform pays'. Group chats full of congratulatory screenshots complete the impression, though many of those celebrating members are operator accounts. The 'upgrade' then arrives framed as opportunity rather than obstacle: VIP tiers with better rates, combo tasks with bigger payouts, each requiring a deposit that is always slightly more than the balance you are trying to unlock.\n\nThe test that never fails is direction of money over time: legitimate work moves money toward you, cumulatively and without conditions; task scams reverse the flow at the exact moment your balance looks worth protecting. When the first withdrawal condition appears, the correct accounting is brutal but accurate — the dashboard number is fiction, the deposits are gone, and further payments buy nothing but the next demand. Stop, keep screenshots of everything including payment addresses, report to your bank and authorities, and do not bring anyone else in: recruitment bonuses exist to make victims spread the scheme before they discover what it is.","redFlags":["Job promoted via WhatsApp, Telegram, or social media DM","Growing dashboard balance you can see but not withdraw","Withdrawal requires buying a plan, level, or upgrade","Customer support only available within the same app","Heavy referral bonuses to recruit more participants"],"whatToDoNow":["Stop all deposits immediately once a withdrawal fee arises","Do not recruit friends or family into the platform","Report the platform to your national consumer protection agency","Use only established well-reviewed platforms for micro-task work"],"faq":[{"question":"Is any money paid in recoverable?","answer":"Recovery is rarely possible as task scams usually operate from overseas using cryptocurrency or obscure payment routes. Stop further payments and report immediately."},{"question":"My first small withdrawals actually worked — doesn't that prove the app pays?","answer":"It proves the operators spend a little to establish trust. Honouring early withdrawals is the scheme's only real cost, and it exists to make the later, larger deposits feel safe. The test is whether money flows toward you without conditions over time."},{"question":"Why is the required upgrade always slightly more than my balance?","answer":"Because the balance is the bait, not money. Pricing each unlock just above what you are trying to withdraw maximises what victims will pay while keeping the fictional prize visible. No payment ever releases it."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-ticket-resale-website-with-high-prices-but-no-reviews-safe","url":"https://scamencyclopedia.org/questions/is-a-ticket-resale-website-with-high-prices-but-no-reviews-safe","question":"Is a ticket resale website with high prices but no independent reviews safe to buy from?","shortAnswer":"No. Unreviewed ticket resale sites are a major source of counterfeit and non-existent ticket fraud, especially for high-demand events.","explanation":"Ticket fraud costs consumers significant amounts each year. Fraudulent resale sites take payment for tickets that are either counterfeit, double-sold, or do not exist, and then become unreachable before the event. They often appear prominently in search engine results because they pay for advertising. The absence of independent reviews is a serious warning sign — look for the site on Trustpilot or Google Reviews before buying. Legitimate secondary ticket markets are typically registered with their country's consumer protection authority and offer buyer guarantees. Always try to buy directly from the event venue or official box office first. If buying from a resale platform, use a credit card for Section 75 or chargeback protection.\n\nHigh-demand events create the exact conditions this fraud needs: official channels sold out, fans emotionally committed, and a deadline that cannot move. Fake resale sites are built for that moment — polished design, countdown timers, 'only 3 left' banners, and paid search placement that puts them above legitimate results when desperation peaks. Some send nothing; others send convincing PDFs or transferred tickets that fail at the turnstile, a failure you discover at the venue with no time to respond and the seller already unreachable.\n\nThe payment method question is really a recovery question, decided before anything goes wrong. Card payments preserve dispute rights; bank transfers and crypto to an unknown site are effectively unrecoverable, which is why fraudulent sites steer you toward them, sometimes with a 'card system temporarily down' message at checkout. Prefer official resale and face-value exchange platforms tied to the event where they exist, check any unfamiliar site's review footprint and company details before paying, and treat prices dramatically below the going resale rate with the same suspicion as unavailable tickets suddenly available — in a sold-out market, bargains from strangers are the product being sold.","redFlags":["No reviews on independent review sites","Prices significantly above face value with no clear reason","No physical address or phone number on the website","Payment only by bank transfer or cryptocurrency","Website domain registered very recently"],"whatToDoNow":["Buy directly from the official venue or box office first","Search the resale site name on independent review platforms","Pay by credit card for chargeback protection","Avoid sites found only through search ads"],"faq":[{"question":"Can I get my money back if a ticket turns out to be fake?","answer":"If you paid by credit card, raise a chargeback claim immediately. If you paid by bank transfer, report to your bank and national fraud service — recovery is harder but possible in some cases."},{"question":"The site says its card system is down and asks for a bank transfer — should I proceed?","answer":"No. 'Card payments temporarily unavailable' at checkout is a classic steer toward irreversible payment. Card disputes are your only realistic recovery route with an unknown ticket seller — if cards are refused, walk away."},{"question":"The tickets arrived as a PDF — am I safe now?","answer":"Not yet. Counterfeit and duplicated PDFs fail at the turnstile, which is the worst possible moment to find out. Where the event supports it, verify the transfer through the official ticketing platform rather than relying on the file."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-message-saying-my-icloud-storage-is-full-and-i-must-pay-real","url":"https://scamencyclopedia.org/questions/is-a-message-saying-my-icloud-storage-is-full-and-i-must-pay-real","question":"Is a message saying my iCloud or Google storage is full and I must pay immediately to avoid losing data real?","shortAnswer":"Be cautious. Genuine storage warnings come through the app's own settings interface, not through unexpected texts or pop-ups with payment links.","explanation":"Storage warning phishing attempts impersonate Apple and Google by sending emails, SMS messages, or browser pop-ups claiming your storage is full and your data will be deleted unless you upgrade immediately via the link provided. The link leads to a fake payment page that harvests your card details. Genuine iCloud storage prompts appear inside the Settings app on your Apple device, and Google storage warnings appear within Google Drive or Gmail settings. Neither company sends external links for immediate payment. If you receive an unexpected storage warning, go directly to your device's official settings to check your genuine storage status — never follow a link from the message.\n\nThe threat of losing photos is chosen for its emotional precision: for most people, the pictures of their children, travels, and late relatives are the least replaceable things they own digitally, so 'your memories will be deleted' reliably beats rational checking. The fake pages exploit a second fact — storage subscriptions are cheap — so entering card details for a small familiar-sounding charge feels routine. As always, the card capture is the goal, and the small 'storage payment' is followed by charges that have nothing to do with storage.\n\nKnowing how the real systems behave defuses the whole category. Genuine storage-full states degrade gently — new photos stop backing up, new emails may bounce — but existing data is not summarily deleted on a deadline delivered by SMS, and paid upgrades happen inside your account settings where your existing payment method is already on file. That last detail is a reliable tell: the real provider rarely needs your card typed in fresh, because it already has your billing relationship. Check your true storage state in your device or account settings, upgrade there if you actually need to, and report the message.","redFlags":["Storage warning arrives by SMS, email, or pop-up rather than in device Settings","Link in the message leads to a payment page","Urgency — data will be deleted in 24 hours","Message asks for card details on a non-Apple or non-Google website","Sender address does not match the genuine platform domain"],"whatToDoNow":["Do not click any link in the message","Open Settings on your device to check genuine storage usage","Manage storage or upgrades only through the official app or website","Report the phishing message to Apple or Google"],"faq":[{"question":"What if the email looked exactly like an Apple or Google message?","answer":"Branding and email addresses can be closely spoofed. Always go directly to your device settings rather than following links in storage warning messages."},{"question":"What actually happens if my cloud storage genuinely fills up?","answer":"New backups and syncing pause, and new emails may bounce — but existing photos and files are not deleted on an SMS-delivered deadline. Real storage pressure shows in your settings, and gives you time to act."},{"question":"Why is the request to type in card details itself suspicious?","answer":"Because your real provider already has your billing details on file — genuine upgrades happen inside account settings using the stored payment method. A page needing your card typed fresh is usually a page collecting it."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-elderly-family-member-at-extra-risk-from-scammers","url":"https://scamencyclopedia.org/questions/is-an-elderly-family-member-at-extra-risk-from-scammers","question":"Is my elderly family member at extra risk from scammers and how can I help protect them?","shortAnswer":"Older adults are disproportionately targeted by scammers. Protective conversations, call-blocking tools, and clear safe-word agreements are among the most effective defences.","explanation":"Scammers disproportionately target older adults because they are more likely to own property, have savings, be home during the day to receive calls, and be less familiar with newer fraud formats. Cognitive decline can also make it harder to detect manipulation. Common fraud types targeting older adults include pension liberation scams, grandparent emergency calls, fake police or bank officers, door-to-door scams, and telephone-based romance fraud. Protective steps families can take include having open, non-shaming conversations about current scam types, setting up call-blocking services, establishing a family safe word to verify emergency calls, and asking the bank to add 'carer flags' or verbal password protections to the account. Scam victims of all ages often feel ashamed — creating a blame-free environment makes it more likely they will report an attempt.\n\nShame is the mechanism that keeps elder fraud running, and it operates on both sides of the family. Victims hide losses because they fear being seen as incapable — or having their independence reduced — while relatives who discover a scam sometimes react with exasperation that confirms the fear and guarantees the next incident stays hidden. Repeat targeting is the practical consequence: victims' details circulate on lists, and the same person is approached again, often by 'recovery' fraudsters referencing the first loss. A household where scam attempts are discussed like weather — commonplace, no-fault, worth mentioning — is structurally safer than one where they are confessions.\n\nProtective measures work best introduced as collaboration rather than oversight, and before any incident: setting up call blocking together, agreeing the family code word over a meal, adding the bank's trusted-contact option 'because everyone should have one'. Frame the threat accurately — these are professional operations that fool lawyers, accountants, and the confidently tech-literate — because that truth is both accurate and dignity-preserving. The goal is not supervising a vulnerable person; it is giving a capable person better tools and a blame-free channel for the day something almost works.","redFlags":["Unusual withdrawals or new unfamiliar payees on bank statements","New 'friend' or 'adviser' figure who discourages family contact","Unexplained purchases of gift cards","Increased secretiveness about phone calls or online activity","Statements that a caller told them not to discuss something with family"],"whatToDoNow":["Have a calm, non-shaming conversation about common scam approaches","Set up a trusted contact on their bank account","Install call-blocking software or register with a telephone preference service","Establish a family code word to verify any emergency money request","Report suspected financial elder abuse to adult protective services or equivalent"],"faq":[{"question":"Should I take control of a family member's finances to protect them?","answer":"Taking control of someone's finances without their agreement may be inappropriate or illegal. Consider discussing a lasting power of attorney with a solicitor as a consensual, legal arrangement."},{"question":"My parent was scammed once — does that make them more or less likely to be targeted again?","answer":"More. Victims' details circulate on target lists, and follow-up approaches — especially fake 'recovery' services referencing the first loss — are routine. Treat the period after any scam as one of elevated risk and extra check-ins."},{"question":"How do I bring up scam protection without insulting their independence?","answer":"Frame it as universal, not personal: these operations fool lawyers and professionals daily, and the tools — call blocking, a family code word, a trusted bank contact — are things every household should have. Set them up together rather than for them."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-new-cryptocurrency-exchange-with-high-interest-rates-safe","url":"https://scamencyclopedia.org/questions/is-a-new-cryptocurrency-exchange-with-high-interest-rates-safe","question":"Is a new cryptocurrency exchange offering much higher interest rates than established platforms safe?","shortAnswer":"Very unlikely. Abnormally high interest rates on a new or unknown crypto platform are a hallmark of fraud or a platform doomed to collapse.","explanation":"High-yield crypto lending scams promise significantly better rates than established exchanges because they need to attract deposits quickly. Some operate as outright Ponzi schemes — early depositors are paid with funds from new investors until inflows slow and the platform collapses. Others are exit scams — the founders collect deposits and disappear. Even some initially genuine platforms have collapsed suddenly, leaving depositors unable to recover funds. Before using any exchange that offers unusually high yields, check whether it is registered with a financial regulator, look for independent security audits, research the founders' real identities and backgrounds, and assess whether the stated strategy for generating the yield is credible. If you cannot understand how the return is generated, treat it as a warning sign.\n\nThe rate itself is the recruitment budget. A platform whose yield stands far above the market is answering the question 'how do we attract deposits faster than trust would normally allow' — and the honest answers (better technology, cheaper operations) cannot produce yield gaps of that size. What can produce them is a plan in which depositors' principal, not investment income, funds the payouts. Comparison sites and rate-chasing communities then amplify the reach, and each month of reliable interest payments recruits the next cohort while deepening earlier depositors' commitment.\n\nBehavioural changes around withdrawals are the early-warning system, because collapse is a liquidity event before it is an announcement: new minimum holding periods, 'temporary' processing delays, bonuses for locking funds longer, and marketing pivots toward long-term deposits all signal outflows exceeding inflows. If you hold funds on a high-yield platform, test a meaningful withdrawal periodically rather than compounding indefinitely, keep exposure within what you can lose, and treat any new friction at the exit as the signal to leave entirely. In this category, being early out of a good-looking platform costs a little yield; being late costs the principal.","redFlags":["Rates significantly above what established platforms offer","Platform is new with little independent history","Founders are anonymous or cannot be independently verified","No regulatory registration or third-party security audit","Withdrawal delays or new conditions appear after deposit"],"whatToDoNow":["Only use exchanges registered with a financial regulator","Search the platform name plus 'review' and 'withdrawal problems'","Never deposit more than you can afford to lose entirely","Report unregistered platforms to your financial regulator"],"faq":[{"question":"Are there ever legitimate reasons a new exchange pays higher rates?","answer":"New platforms occasionally offer promotional rates to attract users, but substantial ongoing yields above market rates are not sustainably achievable. Treat any persistent high-rate offer with serious scepticism."},{"question":"The platform has paid interest reliably for months — doesn't that prove sustainability?","answer":"No. Paying early depositors reliably is how deposit-funded schemes grow — each smooth month recruits the next cohort. Reliability of payouts says nothing about their source, which is the only question that matters."},{"question":"What early signs suggest a high-yield platform is running out of money?","answer":"Friction at the exit: new minimum holding periods, withdrawal 'processing delays', bonuses for locking funds longer, and pushes toward fixed-term deposits. Any of these appearing is the moment to withdraw everything you can."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-door-to-door-charity-collector-with-a-tablet-legitimate","url":"https://scamencyclopedia.org/questions/is-a-door-to-door-charity-collector-with-a-tablet-legitimate","question":"Is a door-to-door charity collector using a tablet or card reader to take donations legitimate?","shortAnswer":"Some are genuine, but door-to-door collection fraud is common. Always verify the collector's identity and the charity's registration before donating.","explanation":"Door-to-door charity fundraising is legal in many countries but is heavily exploited by fraudsters and some aggressive commercial fundraising agencies. Genuine collectors from registered charities carry official ID, clearly state the charity name and registration number, and are happy to be verified. Fraudulent collectors use emotional appeals, show branding that mimics well-known charities, and may use handheld card readers that route payments to private accounts. A direct debit set up this way can continue taking money indefinitely. You can verify a UK charity on the Charity Commission register, or US charities on the IRS Tax Exempt Organization Search. If in doubt, donate directly through the charity's official website rather than at the door.\n\nThe tablet and card reader deserve particular attention because technology reads as institutional: a device with a form and a payment flow feels like infrastructure, when anyone can configure the same tools in an afternoon. The direct debit model is what separates doorstep fraud from petty theft — a signature or screen-tap given under gentle pressure can authorise indefinite monthly collection, and small recurring amounts under a vaguely charitable billing name can run unnoticed for years. Aggressive but technically legal commercial fundraising sits on the same doorstep, where a large cut of your donation funds the agency rather than the cause.\n\nA doorstep policy settles it all in advance: never sign up or pay at the door, take the charity's name, and — if the cause appeals — verify the registration and donate through the charity's own website that evening. A genuine collector loses nothing by this; the charity receives more of your money without the agency's commission. Check bank statements periodically for donation-labelled debits you do not recognise, cancel any you cannot trace, and remember that the emotional urgency at your door — tonight's target, this week's appeal — is a sales technique in both the fraudulent and the legal versions.","redFlags":["Collector refuses or cannot provide charity registration number","Branding looks similar to a well-known charity but details are slightly different","High pressure to sign up immediately rather than considering the request","Direct debit form has no clear address or cancellation instructions","Collector cannot explain exactly how donations are used"],"whatToDoNow":["Ask for the charity's full name and registration number","Verify the registration on your country's official charity register","Donate through the charity's official website rather than at the door","Report suspected fraudulent collectors to the charity and police"],"faq":[{"question":"Can I cancel a direct debit I signed up for at the door?","answer":"Yes. You can cancel any direct debit by contacting your bank. Do this immediately if you have doubts about the collector. You are also entitled to a refund of recent payments in most jurisdictions."},{"question":"Doesn't a professional tablet and card reader show the collector is genuine?","answer":"No — payment devices and sign-up forms are available to anyone and read as more official than they are. Judge the collector by verifiable registration details, not equipment."},{"question":"What's the safest way to support a cause a doorstep collector introduced me to?","answer":"Take the charity's name, verify it on the official register, and donate through the charity's own website. The cause gets your money without agency commission, and you avoid signing anything under doorstep pressure."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-car-seller-who-only-accepts-escrow-payment-a-scammer","url":"https://scamencyclopedia.org/questions/is-a-car-seller-who-only-accepts-escrow-payment-a-scammer","question":"Is a private car seller who insists on using an escrow service I have never heard of a scammer?","shortAnswer":"Very likely. Fake escrow services are one of the most common tools used in online vehicle purchase fraud.","explanation":"Fake escrow fraud in vehicle sales works like this: you find an appealing car listed at a good price on a classified site, the seller explains they are overseas or cannot meet in person, and they insist all transactions must go through a specific escrow service 'for buyer protection'. The escrow company is fraudulent — it collects your payment and releases neither the car nor your money. Real escrow for vehicle sales is rare in private markets; the overwhelming majority of private car purchases are completed in person with a bank transfer upon satisfactory viewing. If a seller refuses an in-person meeting or pushes you toward an unfamiliar escrow service, treat it as a clear sign of fraud.\n\nThe fake escrow site is often the most convincing artefact in the entire fraud: professional design, live chat support, transaction tracking pages, and terms-of-service text lifted from legitimate services. Some borrow the name and logo of a real escrow or vehicle-transport company, differing only in the domain. The story wrapped around it does the emotional work — military deployment and overseas relocation explain the seller's absence, add sympathy, and often justify the below-market price ('I need a quick sale before I ship out'). The 'buyer protection period', during which you can supposedly inspect the car and get a refund, exists only in the site's text.\n\nThe structural tell is who controls the mechanism: in any legitimate escrow arrangement, the buyer chooses or at least verifies the neutral third party, while in the fraud, the seller insists on one specific service and resists alternatives — because the 'service' is them. Applied strictly, one rule ends the entire category: physical inspection before any payment, with no exceptions for compelling stories. A car you cannot see is, for buying purposes, a car that does not exist, and any seller structure that prevents seeing it is answering your real question.","redFlags":["Seller insists on a specific escrow service rather than an in-person transaction","Seller cannot meet in person or permit a viewing","Car price is significantly below market value","Seller claims to be overseas, in the military, or on a work assignment","Escrow website was registered very recently"],"whatToDoNow":["Insist on viewing the car in person before any payment","Never use an escrow service suggested by the seller — find your own if needed","Search the escrow company independently and check its registration","Report suspicious listings to the classified-ad platform"],"faq":[{"question":"Is there any legitimate reason a car seller would insist on escrow?","answer":"For expensive collector vehicles sold internationally, escrow can be legitimate if you use an established independent escrow service you select yourself. Never use one the seller names."},{"question":"The escrow site looks completely professional, with live chat and tracking — how can it be fake?","answer":"Fraudulent escrow sites are built as the centrepiece of the scam and often copy real services' text and branding wholesale. Polish proves budget, not legitimacy — verify the company's registration independently and check the exact domain."},{"question":"The seller says the transport company will let me inspect before the payment releases — is that real?","answer":"The 'inspection period' exists only on the fake site. Once you pay, there is no car, no transport, and no refund window. Physical inspection before any payment, arranged by you, is the only version of this that protects you."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-qr-code-at-a-concert-or-event-venue-safe-to-scan","url":"https://scamencyclopedia.org/questions/is-a-qr-code-at-a-concert-or-event-venue-safe-to-scan","question":"Is a QR code at a concert or event venue safe to scan?","shortAnswer":"Usually yes if it is an official sign, but scammers sometimes place fake QR code stickers over legitimate venue codes to redirect you to phishing pages.","explanation":"QR code sticker attacks ('quishing') occur when fraudsters print and stick fake QR codes over official ones in high-traffic locations such as event venues, museum displays, and public transport. At a venue the fake code may lead to a convincing fake merchandise shop or 'exclusive offer' page that harvests your card details. Warning signs include a QR code that is slightly misaligned, has a sticker texture different from the sign behind it, or leads to a URL that does not match the event's official domain. Before scanning any QR code at an event, check whether it looks physically authentic and preview the URL before opening it fully. If the URL looks unfamiliar, close it and visit the official event website directly.\n\nEvents concentrate the conditions quishing needs: crowds of distracted people, an expectation of scanning codes for menus, merchandise, and Wi-Fi, and enough noise and queueing that nobody studies a poster closely. Payment-related placements are the priority targets — codes at parking machines, drink-ordering stations, and merchandise stands sit exactly where people expect to type card details seconds after scanning, so the fake checkout raises no suspicion. The physical attack costs a sheet of sticker paper, and one evening's placement can harvest cards until someone peels it off.\n\nCalibrate trust by what the destination asks for rather than where the code is displayed: a menu or schedule that asks for nothing is low-stakes even if you cannot fully verify it, while anything leading to payment or a login deserves the extra seconds — read the full URL, prefer typing the vendor's address yourself, and pay through the event's official app where one exists. Treat card details entered after a casual scan as the risk moment, and if it has already happened, watch the card's transactions and tell your bank at the first unfamiliar charge. Reporting a suspect sticker to venue staff protects the hundreds scanning after you.","redFlags":["QR code appears to be a sticker placed over another surface","Code is slightly misaligned or has a different texture to the sign beneath","URL preview does not match the event's official domain","Page asks for card details to access a 'special offer'","Multiple QR codes in the same area with subtle differences"],"whatToDoNow":["Check the QR code physically for sticker overlays before scanning","Preview the URL before opening and verify it matches the official domain","Access merchandise and offers directly through the official event website","Report suspect codes to venue staff"],"faq":[{"question":"How do I preview a QR code URL before visiting it?","answer":"Most phone cameras show a URL preview before you tap to open it. Some QR scanner apps also show the full link first. Read the URL carefully before proceeding."},{"question":"Which QR codes at a venue carry the most risk?","answer":"Ones that end in payment or login — parking machines, drink ordering, merchandise, Wi-Fi portals. A tampered menu code wastes your time; a tampered payment code takes your card. Give payment codes the extra seconds of URL checking."},{"question":"I typed card details after scanning a code at an event — what should I do?","answer":"Watch the card's transactions closely and contact your bank at the first unfamiliar charge — or pre-emptively if the checkout felt wrong in hindsight. Report the code's location to venue staff so the sticker gets removed."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-home-rental-listing-that-has-no-lease-agreement-a-scam","url":"https://scamencyclopedia.org/questions/is-a-home-rental-listing-that-has-no-lease-agreement-a-scam","question":"Is a home rental listing where the landlord says a lease agreement is not necessary a scam?","shortAnswer":"Almost certainly yes. A landlord who refuses to provide a written lease is either operating illegally or, more commonly, collecting a deposit with no intention of providing a tenancy.","explanation":"No-lease rental fraud is common in high-demand housing markets. The scammer presents as a landlord offering an attractive property at a reasonable price, insists a formal lease is 'not needed between trusted people' or 'too much paperwork', and asks you to pay a security deposit and first month's rent upfront by bank transfer to secure the place. Once the money is sent, the landlord becomes uncontactable. The property may have been genuinely listed by a different party, the 'landlord' may have no right to rent it, or it may not exist as described. A written tenancy agreement is your basic legal protection as a tenant — its absence protects only the party who wishes to deny you rights.\n\nThe 'no paperwork between trusted people' framing deserves decoding, because it recruits your own social instincts against you. Declining to demand a contract feels like reciprocating trust, and in a competitive market — where the listing will supposedly go to the next applicant — insisting on formality feels like losing the property. That squeeze is manufactured: the below-market price generates the queue, the queue generates the urgency, and the urgency justifies skipping every step that would expose the scheme. Some versions never intend a tenancy at all; others 'let' the same property to multiple deposit-payers who discover each other on move-in day.\n\nVerification is unglamorous but decisive: see the property in person, meet the landlord or agent, and confirm through land registry records that the person you are paying has the right to let the space — a check available to the public in many jurisdictions for a small fee. Insist on a written agreement and pay deposits only by traceable transfer into the jurisdiction's protection scheme where one exists. Any market pressure that requires you to skip these steps is the scam's engine, not a reason to hurry: a legitimate landlord in a hot market still signs contracts, because the contract protects them too.","redFlags":["Landlord explicitly says a written lease is unnecessary","Deposit or rent requested before any viewing or agreement","Landlord communicates only by text or email and cannot meet in person","Rental price noticeably below local market rates","Property photos appear in reverse image searches on other listing sites"],"whatToDoNow":["Never pay any deposit without first viewing the property and meeting the landlord in person","Insist on a written tenancy agreement before any payment","Verify the landlord owns or has the right to let the property via land registry records","Report suspected rental fraud to the platform and local housing authority"],"faq":[{"question":"Is a verbal rental agreement legally binding?","answer":"In some jurisdictions a verbal agreement has limited legal standing, but it is extremely difficult to enforce and provides almost no protection if the landlord denies its existence."},{"question":"The rental market is so competitive — won't insisting on a contract lose me the property?","answer":"A legitimate landlord signs contracts even in the hottest market, because the agreement protects them too. Market pressure that only works by making you skip contracts, viewings, and ownership checks is manufactured by the scam itself."},{"question":"How do I check the 'landlord' actually has the right to rent the property?","answer":"Land registry records identify the owner in many jurisdictions for a small public fee, and letting agents can be verified through their professional registration. If the name you are paying cannot be connected to the property, do not pay."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-gaming-account-sold-on-a-third-party-site-legitimate","url":"https://scamencyclopedia.org/questions/is-a-gaming-account-sold-on-a-third-party-site-legitimate","question":"Is a gaming account sold on a third-party website legitimate and safe to buy?","shortAnswer":"Account sales violate the terms of service of most games and platforms, and many third-party sales are fraudulent — the original account holder often reclaims the account after payment.","explanation":"Buying and selling gaming accounts, skins, or characters on third-party markets carries multiple risks. First, account trading violates the terms of service of most games, meaning the account can be permanently banned at any time. Second, the seller may reclaim the account after payment by using the original email and security questions, leaving you with nothing. Third, many listing sites are entirely fraudulent — they collect payment and never provide account credentials. Legitimate in-game economies exist on some platforms with official support, but these are limited to specific items within official transfer systems. Researching any third-party market's reputation extensively, using payment methods with chargeback protection, and never paying outside escrow for high-value accounts are minimum precautions.\n\nThe recovery problem is structural and permanent: game publishers resolve ownership disputes in favour of the original creator, using evidence only they can produce — the creation email, first payment methods, oldest login records. This means a seller retains a master key no transfer can revoke, and 'account recovered after sale' is not a risk of careless buying but a business model: the same account is sold, reclaimed through official support, and sold again. Because you obtained the account against the terms of service, you have no standing when it happens.\n\nIf you accept all of this and proceed anyway, at least match precautions to the reality: use marketplaces with genuine escrow and post-sale guarantee periods, pay only by methods with dispute rights, and immediately change every credential the seller could know — password, email, linked recovery details, security questions. Understand that none of this closes the publisher-side recovery route, which is why the honest summary is that third-party account buying is a gamble where the other party keeps a copy of the dice. The safer investment in every sense is progress on an account that is actually yours.","redFlags":["Seller pressures you to pay quickly before the listing closes","Price is significantly below comparable accounts","Seller wants payment by cryptocurrency or gift card","Platform has no dispute resolution process","No official game support for the account transfer"],"whatToDoNow":["Check whether account trading is allowed by the game's terms of service","Use a reputable escrow or official transfer mechanism if permitted","Pay by credit card for chargeback protection","Report fraudulent gaming marketplaces to the game developer and your consumer authority"],"faq":[{"question":"What if the account looks active and the seller shows it on a video call?","answer":"Video demonstrations can be staged or recorded. The safest approach is to not buy third-party accounts at all — original account holders retain the ability to recover them."},{"question":"I changed the password and email after buying — can the seller still take the account back?","answer":"Yes. Publisher support resolves ownership using evidence only the original creator has — creation email, first payment records. That recovery route survives every credential change, and some sellers use it to resell the same account repeatedly."},{"question":"The account I bought was recovered by the seller — do I have any recourse?","answer":"Very little through the game, since the purchase violated its terms. Your realistic options are the marketplace's guarantee period if one exists, and a payment dispute through your card provider. This is why payment method choice matters before buying."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-seller-who-asks-me-to-mark-an-ebay-item-received-before-delivery-a-scammer","url":"https://scamencyclopedia.org/questions/is-a-seller-who-asks-me-to-mark-an-ebay-item-received-before-delivery-a-scammer","question":"Is a seller on eBay or another marketplace asking me to mark an item as received before it arrives a scammer?","shortAnswer":"Yes. This request is designed to close your buyer protection window before any problem with the item is discovered.","explanation":"Premature delivery confirmation fraud is used on eBay and other marketplaces to defeat buyer protection systems. Once you mark an item as received or leave positive feedback, most platforms close the dispute window or significantly reduce your protection. Scammers use this to prevent claims after sending a different item, a damaged product, or nothing at all. A seller may claim they need confirmation 'for their records' or 'to release the payment' or may offer a small discount in exchange. You should never confirm receipt of an item until it is physically in your hands and verified to match the listing. If a seller asks you to do otherwise, report it to the platform immediately.\n\nEach cover story collapses on inspection, which is why the requests rely on you not inspecting. Sellers are paid through the platform's normal settlement cycle — no marketplace requires a buyer's manual confirmation to release funds, so 'I need it to get paid' is false by design. The discount variant is more honest about being a trade: a small sum in exchange for your entire dispute window, which prices your protection at almost nothing. And where tracking already shows 'delivered' while your hands are empty, confirming receipt converts a winnable missing-parcel case into a closed one.\n\nYour feedback and confirmations also function as infrastructure for the next victim: positive reviews extracted before delivery launder the seller's profile, making the account more convincing for future frauds. Treat both — confirmation and feedback — as things that happen only after the physical item is in your hands and matches the listing. Any seller message requesting otherwise is worth reporting even when you have refused and lost nothing, because the pattern across reports is what gets fraudulent accounts removed before they finish their run.","redFlags":["Seller asks you to confirm receipt or close the order before delivery","Offer of discount or bonus in exchange for early confirmation","Claim that confirming early is needed for payment release","Item has not arrived but tracking shows 'delivered'","Seller asks you to leave positive feedback in advance"],"whatToDoNow":["Never mark an item as received until it is in your hands and verified","Do not leave feedback until you are satisfied with the item","Report the request to the marketplace's customer service","Open a dispute through the platform if the item does not arrive as described"],"faq":[{"question":"What if the tracking says delivered but I have not received anything?","answer":"Open a dispute with the marketplace immediately and contact your local postal service. 'Delivered' tracking can sometimes mean left in a safe place or signed by a neighbour."},{"question":"The seller says they can't get paid until I confirm receipt — is that true?","answer":"No. Marketplaces pay sellers through their normal settlement process; no platform requires the buyer's manual confirmation to release funds. The claim exists solely to close your dispute window early."},{"question":"Is accepting a small discount for early confirmation really that risky?","answer":"You are selling your entire buyer protection for a token amount. If the item then arrives damaged, wrong, or not at all, the closed order leaves you with little recourse — the trade only makes sense for the seller planning that outcome."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-student-discount-website-asking-for-my-university-email-safe","url":"https://scamencyclopedia.org/questions/is-a-student-discount-website-asking-for-my-university-email-safe","question":"Is a student discount website asking for my university email address safe to use?","shortAnswer":"Major verified student discount platforms are generally safe, but lesser-known sites may collect university credentials or sell your data.","explanation":"Student discount aggregators such as UNiDAYS and Student Beans verify eligibility through official university email domains and are generally reputable. However, less-known sites may use your university email as a first step to credential phishing — sending you a verification link that actually captures your university login details. Others harvest student email lists and sell them for marketing purposes. Before registering on any student discount site, check independent reviews, look for a privacy policy explaining how your data is used, and verify the site is not asking for your university password — a legitimate eligibility check should only send a verification email to your address, not ask you to log in to university systems through their platform.\n\nUniversity credentials are worth more than most students assume, which is why fake discount sites bother building them a doorway. A campus login often opens far more than email: library and journal subscriptions resold on grey markets, cloud storage and software licences, personal records useful for identity fraud, and — because universities are trusted senders — a launchpad for phishing that lands convincingly in other inboxes. Discount culture makes students an easy audience, since entering a student email at yet another 'verify your status' page feels routine by the end of the first term.\n\nThe safe pattern mirrors breach-checking: your address, never your password. A legitimate eligibility check sends a link to your inbox and confirms you clicked it — at no point does a third party need you to type your university password anywhere outside your university's own domain. Watch the address bar at the moment of login: institutional sign-in happens on your university's domain even when initiated elsewhere. If your credentials have gone into a lookalike page, change the password immediately through official channels and tell your university's IT team — compromised student accounts are usually abused quickly, and IT can limit the damage if told early.","redFlags":["Site asks for your university password rather than just sending you a verification email","No privacy policy or data handling statement","Discount offers require downloading an app or browser extension","Site only reachable through a social media ad","Discount codes do not work when you try them"],"whatToDoNow":["Use only well-reviewed student discount platforms","Never enter your university password on a third-party site","Read the privacy policy before providing your email","Use a dedicated student email address rather than your main personal one if possible"],"faq":[{"question":"Is it safe to verify my student status with a university email?","answer":"Yes, if the site only sends a verification link to your address. No, if it asks you to enter your university portal password."},{"question":"Why would anyone want my university login rather than my bank details?","answer":"Campus credentials unlock resellable journal and software access, personal records for identity fraud, and a trusted email address for launching phishing at others. They are quietly valuable, which is why fake verification pages exist to collect them."},{"question":"I entered my university password on a discount site — what now?","answer":"Change it immediately through your university's official portal and notify campus IT. Compromised student accounts are typically abused fast — for spam, phishing, or data access — and IT can contain it if told early."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-immigration-consultant-online-with-a-professional-website-legitimate","url":"https://scamencyclopedia.org/questions/is-an-immigration-consultant-online-with-a-professional-website-legitimate","question":"Is an online immigration consultant with a professional-looking website legitimate?","shortAnswer":"A professional website alone is not enough to verify legitimacy — immigration consultants must be registered with a recognised regulatory body in your country.","explanation":"Immigration consultant fraud causes serious harm because victims lose money, submit incorrect applications that damage their case, or have their personal documents misused. Fraudulent consultants often have polished websites with official-looking logos and testimonials. In many countries, only lawyers and registered immigration advisers are legally permitted to give immigration advice for a fee. Others claiming to offer this service are operating illegally, regardless of how professional they appear. Before engaging any immigration consultant, verify their registration on the relevant official register — in the UK this is the OISC, in the US practitioners must be registered attorneys or accredited representatives with USCIS. If someone claims to have 'contacts inside the immigration office' who can speed up your case, that is a scam.\n\nOnline operation removes the checks that constrain even dishonest local advisers: the website can be built anywhere, the testimonials invented, the office photos borrowed, and the entire presence deleted the day complaints accumulate — then relaunched under a new name with the same templates. Payment requested by transfer to personal accounts, or in crypto, completes the pattern. The 'inside contacts' claim is the most reliable single disqualifier because it is a confession either way: if false, the adviser lies to clients; if it were true, you would be paying for corruption that could destroy your application entirely.\n\nRegister verification cuts through every layer of presentation, and it works in both directions — check that the name on the register matches the person you are dealing with, and that the contact details you are using match the register's, since fraudulent advisers sometimes impersonate genuinely registered practitioners. Prefer video calls where you can ask about their registration and specific experience with cases like yours, keep all advice and promises in writing, and pay traceably against an itemised written agreement. Your immigration status is too consequential to purchase from an unverifiable website, however professional the design.","redFlags":["Consultant cannot provide a verifiable registration number","Claims to have inside contacts at the immigration authority","Requests original documents rather than certified copies","Fees are unusually low or quoted only verbally with no contract","Pressure to decide quickly before a policy change closes the opportunity"],"whatToDoNow":["Verify the consultant on your country's official immigration adviser register","Never hand over original documents — provide certified copies only","Get all fees and services in writing before paying anything","Report unregistered advisers to the relevant immigration authority"],"faq":[{"question":"Can I use a 'notary' for immigration advice?","answer":"In many countries, notaries perform document certification only and are not qualified to give immigration legal advice. Check the specific rules in your jurisdiction."},{"question":"The consultant's name appears on the official register — is that enough?","answer":"Almost — also confirm the contact details you are using match the register's entry. Fraudulent operators sometimes impersonate genuinely registered advisers, trading on a real name while routing payments to themselves."},{"question":"Why is claiming 'contacts inside the immigration office' an automatic disqualifier?","answer":"Because it condemns the adviser either way: if false, they lie to clients; if true, they are selling corruption that could invalidate your application and expose you to consequences. Legitimate practitioners compete on competence, not connections."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-tech-company-asking-for-payment-to-remove-a-virus-a-scam","url":"https://scamencyclopedia.org/questions/is-a-tech-company-asking-for-payment-to-remove-a-virus-a-scam","question":"Is a tech company calling me or popping up on screen asking for payment to remove a virus from my computer a scam?","shortAnswer":"Yes. This is a classic tech-support scam — no legitimate company monitors your computer remotely and calls you unsolicited about a virus.","explanation":"Tech-support scams use pop-up warnings, audio alerts, or cold calls to create panic about a supposed virus or security breach. A toll-free number or button is provided to 'contact support'. Once you call or connect, the scammer asks for remote access to 'fix' the problem, then either charges a large fee for unnecessary software, steals financial data visible on your screen, or installs genuine malware. Microsoft, Apple, BT, and all other real tech companies do not monitor individual computers and do not call users about detected viruses. If a pop-up appears, close your browser using Task Manager or Force Quit — do not call any number shown, and do not click anything on the pop-up.\n\nOnce connected, the 'technician' manufactures evidence from your own machine: ordinary system logs and routine background processes are presented as infections, netstat output becomes 'hackers connected to your computer', and the performance of the show is calibrated to your reactions. The pricing follows the fear — a cleaning fee, then a 'lifetime protection plan', then in the worst cases banking access 'to process your refund'. That refund call is a signature move: months later, the same operation phones offering to return your money, then 'accidentally' overpays and pressures you to send back the difference.\n\nRemote access is the line that matters most, because everything catastrophic requires it. A stranger who initiated contact — by pop-up or by phone — never gets remote access to your machine under any story; that single rule blocks the tech-support scam in all its variants. If access was already granted, disconnect from the internet, uninstall the remote tools, run a scan with your own security software, change important passwords from a different device, and call your bank if it was open during the session. Where payment was made, dispute it — and treat every future call referencing the incident as the same operation returning.","redFlags":["Pop-up or phone call claiming your computer is infected and needs immediate action","Instructions to call a phone number shown on screen","Request to install remote access software such as AnyDesk or TeamViewer","Payment demanded by gift card, wire transfer, or cryptocurrency","Caller ID appears to show Microsoft, Apple, or a known tech company"],"whatToDoNow":["Close your browser using Task Manager (Windows) or Force Quit (Mac)","Do not call any number shown in a pop-up","Do not allow remote access to your computer","Run a scan using your existing security software if you are concerned","Report the incident to your national fraud service"],"faq":[{"question":"What if the pop-up has an official-looking Microsoft logo?","answer":"Logos are easily copied in a webpage. Microsoft does not display pop-up warnings or call users about viruses — any alert claiming to be from them and asking you to call a number is fraudulent."},{"question":"The technician showed me proof of infections on my screen — was it real?","answer":"No. They restyle ordinary system logs and routine processes as threats — standard output presented theatrically to a non-expert. Genuine diagnostics do not arrive via strangers who initiated contact with you."},{"question":"Months later someone called offering a refund for the support fee — genuine?","answer":"No — the refund call is the same operation's second act. It typically ends with a staged 'overpayment' you are pressured to return from your real money. Hang up and tell your bank about both incidents."}],"lastReviewed":"2026-08-01"},{"slug":"is-someone-asking-me-to-send-my-bank-statement-before-a-property-viewing-a-scammer","url":"https://scamencyclopedia.org/questions/is-someone-asking-me-to-send-my-bank-statement-before-a-property-viewing-a-scammer","question":"Is someone asking me to send a bank statement or proof of funds before I can book a property viewing a scammer?","shortAnswer":"In competitive rental markets some landlords do request proof of income, but the timing and method matter greatly — asking for full bank statements before any viewing is a major red flag.","explanation":"Legitimate landlords and letting agents may ask for proof of income during referencing — which happens after you have applied for a property, not before an initial viewing. Requesting full bank statements before a viewing serves no legitimate purpose and exposes your account details, balance, and payment history to potential fraudsters who can use them for identity theft or targeted social engineering. If you feel a pre-viewing request is genuine, offer an employment letter showing your income instead of bank statements. Be especially wary of rental listings that quote a very competitive price and require 'financial qualification' before a viewing can be arranged — this is a common rental scam format designed to harvest financial data.\n\nA full bank statement is a richer prize than most people realise: beyond your account numbers and balance, it maps your salary and employer, your regular payees, your spending patterns, and your financial pressure points. That is raw material for precisely targeted follow-up fraud — a call that knows your bank, your payday, and a recent transaction is dramatically more convincing than a cold one. In housing-market versions of this scheme, the property itself often does not exist or is not the scammer's to let; the listing is a lure engineered around the desperation of competitive rental markets, where applicants have been trained to jump through hoops quickly.\n\nSequence is your protection, because the legitimate process has one: viewing, then application, then referencing — with financial checks arriving at the end, through an identifiable agency, and usually satisfied by payslips or an employer's letter rather than full statements. Anything demanding financial documents before you have stood inside the property inverts that order for no honest reason. If you have already sent statements, be alert to unusually informed calls or emails in the following weeks, warn your bank, and report the listing to the platform so the same lure is removed before it lands on the next applicant.","redFlags":["Full bank statement requested before any viewing is arranged","Landlord or agent found only on a classified site with no verifiable office","Property price is notably below local market rates","Request framed as 'protecting the landlord from time wasters'","Pressure to send documents quickly before the listing is taken"],"whatToDoNow":["Decline to send full bank statements before viewing the property","Offer an employment letter or income summary instead","Verify the letting agent on your country's property agent register","View the property before providing any financial documents"],"faq":[{"question":"When is it normal to provide financial documents in a rental process?","answer":"After you have viewed a property and submitted a formal application, a referencing agency may ask for proof of income. Full bank statements are not usually required at this stage — a payslip or employer's reference normally suffices."},{"question":"What can a scammer actually do with my bank statements?","answer":"Map your salary, employer, payees, and spending patterns — then run precisely targeted follow-up fraud. A caller who knows your bank, payday, and recent transactions is far more convincing than any cold approach."},{"question":"I already sent statements to a 'landlord' I now doubt — what should I watch for?","answer":"Unusually well-informed calls or emails referencing your real transactions, bank, or employer in the coming weeks. Warn your bank, treat such contacts as hostile, and report the listing to the platform it appeared on."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-cryptocurrency-wallet-app-in-my-app-store-always-safe","url":"https://scamencyclopedia.org/questions/is-a-cryptocurrency-wallet-app-in-my-app-store-always-safe","question":"Is a cryptocurrency wallet app in the official app store always safe to use?","shortAnswer":"Not always. Fake wallet apps do occasionally appear in official stores, and can drain your funds or steal your seed phrase.","explanation":"Both the Apple App Store and Google Play have been exploited by fraudsters who publish convincing fake wallet apps for popular cryptocurrencies and hardware wallet brands. These apps may look identical to the genuine product, use stolen branding, and receive fake positive reviews. When you enter your seed phrase to 'restore' your wallet, the phrase is immediately sent to the attacker who drains your funds. Before downloading any crypto wallet, verify the developer name matches the official brand website, check the number of reviews and download count against the genuine app, and visit the project's official website to find the correct download link. Never enter a seed phrase into an app you are not completely certain is genuine.\n\nThe seed phrase deserves its own mental category, because its properties differ from every credential you are used to: it is the wallet, not a password to it. Anyone who has ever seen the phrase can take everything, from anywhere, at any time — and no reset, support ticket, or fraud department exists afterwards. This is why fake wallets do not need elaborate functionality; a convincing setup screen with a 'restore your wallet' field completes the theft the moment you finish typing. Some fakes go further, functioning normally for a while and forwarding your phrase quietly, so the drain happens weeks after the download when suspicion has faded.\n\nA legitimate wallet asks you to write your phrase down during creation and confirm you have; what none legitimately does is need your existing phrase typed in outside of a restore flow you deliberately initiated on an app you verified first. Make the official project website your single source of truth for download links, checked character by character, and treat every other route — search results, ads, QR codes in communities, DM'd links 'to the new version' — as untrusted. If a phrase may have been exposed, move funds immediately to a fresh wallet whose phrase has never touched a screen you doubt.","redFlags":["Developer name differs slightly from the genuine brand","App has few reviews or reviews are very recent","App requests your seed phrase during setup","App found through a search result or social media link rather than the official website","App requests excessive device permissions"],"whatToDoNow":["Find download links only through the official project website","Compare developer name and review count to the genuine app","Never enter your seed phrase into any app you did not download from the official source","Report fake wallet apps to the app store and the genuine project"],"faq":[{"question":"What if the fake app has thousands of reviews?","answer":"Review count and ratings can be purchased or faked. Always cross-reference by going to the official project website first and following their download link."},{"question":"Why is a seed phrase so much more dangerous to expose than a password?","answer":"The phrase is the wallet itself — anyone who has ever seen it can take all funds, from anywhere, permanently, with no reset or fraud process afterwards. A leaked password can be changed; a leaked seed phrase can only be abandoned."},{"question":"I typed my phrase into an app I now distrust but nothing has been taken — am I safe?","answer":"No. Some fake wallets forward phrases quietly and drain funds weeks later. Move everything now to a new wallet whose phrase has never been entered anywhere you doubt, and stop using the suspect app entirely."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-social-media-influencer-selling-a-crypto-coin-a-scam","url":"https://scamencyclopedia.org/questions/is-a-social-media-influencer-selling-a-crypto-coin-a-scam","question":"Is it safe to buy a cryptocurrency being promoted by a social media influencer?","shortAnswer":"Extreme caution is warranted. Celebrity and influencer crypto promotions have frequently preceded sudden collapses, leaving investors with near-worthless tokens.","explanation":"Influencer-promoted cryptocurrency launches follow a pattern regulators call a 'pump and dump'. The influencer receives payment in free tokens or cash to promote a new coin to their audience. Their followers buy in, pushing the price up. The insiders who held tokens early sell their holdings at the peak, the price collapses, and ordinary investors are left holding near-worthless assets. In many countries, paid promotion of financial products without disclosure is illegal, and some influencers have faced regulatory action. An influencer's popularity says nothing about a coin's legitimacy or long-term value. Before buying any coin, look for a credible and verifiable team, an independently audited whitepaper, and a genuine use case — not a celebrity face.\n\nThe information asymmetry is the whole trade: insiders know the token allocation, the promotion schedule, and the exit plan, while the audience knows a face they like. Even where the influencer discloses nothing dishonest and simply took a fee, the structure routinely produces the same result, because tokens whose only fundamentals are attention decay the moment attention moves on. Parasocial trust does the heavy lifting here — an audience that has watched someone daily for years processes their recommendation like a friend's, when the actual relationship is a billboard.\n\nA few questions strip the promotion to its mechanics: was the influencer paid, and in tokens they can sell into the demand you create? What does the token do that requires it to exist? Who holds the large allocations, and what stops them selling? If the answers are a shrug, the honest name for the purchase is a bet that hype will outlast your holding period — which is a game where insiders hold the clock. Nothing about admiration for a creator's content transfers to their financial promotions, and the promoters most worth trusting are the ones who tell you exactly that.","redFlags":["Coin is promoted primarily by celebrities or social media influencers","Promotion does not disclose the influencer's financial relationship with the project","Coin has no audited smart contract or verifiable development team","Launch is artificially urgent — 'only available for 48 hours'","Community exists only on Telegram or Discord with no independent media coverage"],"whatToDoNow":["Research the project's whitepaper and team independently","Check whether the smart contract has been audited by a reputable firm","Never invest money you cannot afford to lose entirely","Report unregistered securities promotions to your financial regulator"],"faq":[{"question":"Are all influencer-promoted coins scams?","answer":"Not all, but the structure of paid promotion creates strong conflicts of interest. Treat any coin primarily known for its influencer backing with deep scepticism."},{"question":"The influencer seems genuinely enthusiastic, not scripted — does that change anything?","answer":"No. Sincerity does not alter the structure: insiders hold cheap tokens, the audience creates the demand they sell into, and attention-based tokens decay when attention moves. Judge the token's mechanics, not the promoter's authenticity."},{"question":"What disclosure should a legitimate promotion include?","answer":"Whether the promoter was paid, in what form, and whether they hold tokens they can sell. Undisclosed paid promotion of financial products is illegal in many jurisdictions — and its absence from a crypto pitch is itself a warning."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-stranger-asking-me-to-use-my-bank-account-for-a-business-payment-a-scam","url":"https://scamencyclopedia.org/questions/is-a-stranger-asking-me-to-use-my-bank-account-for-a-business-payment-a-scam","question":"Is a stranger asking me to use my bank account to receive and pass on a business payment a scam?","shortAnswer":"Yes. This is money-mule recruitment, which is illegal even if you did not know the underlying source of the funds was criminal.","explanation":"Money mule recruitment happens when someone asks you to receive money into your bank account and then forward it, keeping a percentage as a fee. The person recruiting you may pose as an employer, a romantic partner, a person needing help, or someone offering a simple 'agent' role for a foreign business. The money passing through your account is almost always the proceeds of fraud, drug trafficking, or other crime. Even if you receive it in good faith, using your account this way makes you a money mule, which is a criminal offence in most countries and can result in prosecution, a permanent ban from banking, and a criminal record. Banks detect unusual patterns and will freeze accounts suspected of mule activity.\n\nThe recruitment pitch is calibrated to the target: students and job-seekers get 'payment agent' roles with official-sounding contracts; romance contacts get a partner who 'can't access their account from abroad'; small favours are asked of people who would refuse a criminal proposition but will help a friend. The commission is the psychological anchor — being paid a percentage makes the arrangement feel like work rather than what it is, and the paperwork some operations provide exists purely to give you false comfort. None of it changes the legal reality: the money's origin, not your paperwork, defines the offence.\n\nThe consequences fall hardest on the mule because the mule is the traceable link: the fraudsters operate behind anonymity, while your name is on the account. Bank closure and industry-wide flags can follow even without prosecution, making everyday banking, credit, and some jobs harder for years. If money you cannot fully explain is in your account now, the least-bad path is the proactive one — do not move it, contact your bank, and report the person who asked. Acting before the freeze, rather than explaining after it, is the clearest evidence of innocence you can create.","redFlags":["Stranger or new online contact asks you to receive money into your account","You are asked to forward money minus a commission for yourself","The person explains the need vaguely as 'helping a business' or 'currency exchange'","Large sums appear in your account unexpectedly","You are asked to buy cryptocurrency with the funds and send it to an address"],"whatToDoNow":["Refuse any request to use your account to pass money for others","Do not accept any payment into your account unless you know exactly its source","If you have already received suspicious funds, contact your bank immediately","Report the recruitment attempt to your national fraud reporting service"],"faq":[{"question":"What if I have already forwarded money on someone's behalf?","answer":"Contact your bank and the police immediately and explain the full situation. Cooperating with authorities is the best way to demonstrate you were misled and not a knowing participant."},{"question":"They gave me a contract calling me a 'payment agent' — doesn't that make it legal?","answer":"No. Paperwork from the people recruiting you has no bearing on the money's origin, which is what defines the offence. Legitimate payment processing is done by licensed businesses, never through private individuals' personal accounts."},{"question":"What happens to me if my bank flags my account for mule activity?","answer":"Freezing and closure are typical, and industry-wide fraud markers can follow even without prosecution — making accounts, credit, and some jobs harder for years. Contacting your bank first, before the freeze, is materially better than explaining afterwards."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-health-app-offering-personalised-cancer-screening-for-a-fee-legitimate","url":"https://scamencyclopedia.org/questions/is-a-health-app-offering-personalised-cancer-screening-for-a-fee-legitimate","question":"Is a health app offering personalised cancer screening or genetic risk analysis for a fee legitimate?","shortAnswer":"Only if it is regulated as a medical device and provided by a licensed clinical service. Many commercial health apps overstate their screening capabilities.","explanation":"The consumer health technology market includes many apps that claim to detect or predict serious illness through questionnaires, photos, or consumer wearable data. While some regulated medical device applications exist, a large number of products make misleading health claims not backed by clinical evidence, charge subscription fees for results of no diagnostic value, or collect sensitive health data that may be sold without meaningful consent. No app or consumer wearable can replace a medical consultation or validated clinical screening programme. Before paying for any health screening service, check whether it is registered as a medical device with your national health regulator, whether clinical evidence is published in peer-reviewed journals, and whether a qualified clinician is involved in interpreting results.\n\nBoth failure directions cause real harm, which is what separates this from ordinary wellness marketing. A false reassurance can delay someone from seeking care for symptoms that needed it; a false alarm generates anxiety and cascades of unnecessary private testing — and some operators sit at the end of that cascade, selling the follow-up consultations and supplements their own 'results' recommend. The subscription mechanics compound it: results held behind paywalls, 'risk scores' that update just often enough to justify renewal, and cancellation friction of the standard dark-pattern kind.\n\nHealth data adds a second, quieter cost. Screening questionnaires collect exactly the information — family history, symptoms, lifestyle — that insurers, advertisers, and data brokers value, and privacy policies in this category are often written to permit sharing. The practical position is straightforward: real screening pathways run through clinicians and validated programmes, and anything claiming to detect serious disease from a photo, quiz, or wearable without regulatory registration is selling the feeling of vigilance, not the substance. Take genuine concerns to your doctor, check any medical claim against the device register, and give health data only to services with a clinical reason to hold it.","redFlags":["App claims to diagnose or detect cancer, diabetes, or other serious illness without a medical consultation","No reference to regulatory approval as a medical device","No qualified clinician named or involved","Results available instantly based on a photo or simple questionnaire","Subscription fee required to view your health 'results'"],"whatToDoNow":["Verify the app's medical device registration with your national health regulator","Consult your GP or doctor for any genuine health concern","Read the app's data privacy policy before submitting health information","Report misleading health claims to your consumer protection authority"],"faq":[{"question":"Are all health apps untrustworthy?","answer":"No — many fitness and wellness apps are useful and safe. The concern is specifically with apps making clinical diagnostic or screening claims without proper medical device authorisation."},{"question":"What harm can an unvalidated screening result actually do?","answer":"In both directions: false reassurance can delay care for symptoms that needed attention, while false alarms drive anxiety and unnecessary paid follow-ups — sometimes sold by the same operator whose 'results' triggered them."},{"question":"Is the health data I enter into these apps protected?","answer":"Often less than you would assume. Screening questionnaires collect family history and symptoms that data brokers and advertisers value, and privacy policies in this category frequently permit sharing. Read the policy before submitting anything."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-text-saying-i-have-unclaimed-pension-funds-real","url":"https://scamencyclopedia.org/questions/is-a-text-saying-i-have-unclaimed-pension-funds-real","question":"Is a text or letter saying I have unclaimed pension funds I can access now real?","shortAnswer":"Be very cautious. Unsolicited messages about unclaimed pensions are frequently pension liberation fraud or cold-call pension scams.","explanation":"Pension liberation fraud persuades people — often under 55 — that they can access their pension pot early through a special scheme. The scammer takes a large fee, often 20-30% of the pension value, as a commission, and victims later discover they face large tax charges for accessing their pension outside the rules, often greater than the amount released. Pension cold-calling has been illegal in the UK since 2019, and similar restrictions apply in other jurisdictions. Genuine pension entitlement information comes directly from your pension provider or government pension authority — never from unsolicited texts, letters, or calls. If you are unsure about your pension position, contact your provider directly using the number on their official website.\n\nPensions are attacked precisely because the sums dwarf ordinary scam categories — a lifetime's savings accessible in one authorised transfer — and because the rules are complicated enough that a confident stranger explaining a 'little-known option' sounds plausible. The scripts wrap themselves in official vocabulary: 'government-approved schemes', 'pension liberation', 'free pension reviews'. The transfer variant is the most devastating — savings moved into a fraudulent or absurdly high-risk scheme with the victim's full cooperation, discovered only when retirement arrives and the fund is gone, far too late for meaningful recovery.\n\nThe tax trap gives this fraud a uniquely cruel second act: accessing a pension outside the rules can leave the victim owing substantial tax on money the scammer has already taken, so the loss exceeds the pot itself. Protection is procedural: any pension conversation you did not initiate is treated as hostile, full stop; any genuine question goes to your provider through its published contacts or to your government's free pension guidance service; and any transfer decision passes through a regulated financial adviser you selected. Legitimate pension changes are never urgent — deadlines measured in days are the fraud identifying itself.","redFlags":["Unsolicited text, letter, or call about accessing your pension early","Promise of a lump sum payment without mentioning tax implications","Scheme described as a 'government-approved' loophole","High upfront fees or percentage commissions","Pressure to decide quickly before the offer closes"],"whatToDoNow":["Do not respond to unsolicited pension contact","Contact your pension provider directly using your own verified contact details","Use your government's official pension tracing service for genuine queries","Report the approach to your financial regulator and pension watchdog"],"faq":[{"question":"Is there a legitimate way to trace lost pension funds?","answer":"Yes — most countries operate an official pension tracing service. In the UK it is the Pension Tracing Service at gov.uk. Use that rather than responding to any unsolicited contact."},{"question":"Why is pension fraud so much more damaging than other scams?","answer":"The sums are a lifetime's savings, discovery often comes only at retirement when recovery is impossible, and accessing a pension outside the rules can add a substantial tax bill on money the scammer already took."},{"question":"I think I genuinely have a lost pension from an old job — how do I trace it safely?","answer":"Use your government's official pension tracing service or contact the old employer's scheme administrator directly. Never trace a pension through anyone who contacted you first — genuine tracing never starts with an unsolicited message."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-romance-partner-who-keeps-asking-for-small-amounts-a-scammer","url":"https://scamencyclopedia.org/questions/is-a-romance-partner-who-keeps-asking-for-small-amounts-a-scammer","question":"Is an online partner who keeps asking for small amounts of money over time a scammer?","shortAnswer":"Possibly yes. Repeated small requests are a deliberate tactic to build financial dependency gradually, making it harder to recognise the overall pattern.","explanation":"Incremental romance fraud is designed to avoid the immediate red-flag feeling that a large request would trigger. Each individual request is framed as urgent but modest — a medical bill, a phone bill, a short-term travel cost — and your emotional investment in the relationship makes each one feel reasonable. Over weeks or months, the total sent can be substantial. The requests typically increase in frequency and size over time, and are always accompanied by an emotionally compelling reason. A genuine partner who cannot manage occasional small financial shortfalls without asking you is worth examining carefully. If you have never met in person, cannot video call spontaneously, and the financial requests are regular, treat the relationship with serious caution.\n\nThe small-amounts structure is chosen because it defeats both your alarm system and your accounting. No single request crosses the threshold that would trigger scrutiny, refusing feels disproportionate when the sum is modest and the story urgent, and the running total stays invisible because nobody adds up sums that each felt trivial. Some operations also use early small transfers diagnostically — a person who sends small amounts smoothly is marked as viable for the larger asks that follow, or for 'investment opportunities' introduced once payment behaviour is established.\n\nTwo exercises cut through the fog. First, do the arithmetic: total every transfer since the relationship began, because the honest number often reframes everything. Second, test the relationship's response to a boundary — a warm partner who hits financial trouble accepts 'I can't send money, but let's think it through together'; a script escalates, guilt-trips, or produces a fresh emergency. If the pattern fits, stop all transfers at once regardless of the story in flight, talk to someone outside the relationship whose judgement you trust, and keep the conversation history — both for reporting and for the moment your own certainty wavers, which manipulated affection reliably produces.","redFlags":["Partner makes repeated financial requests however small","You have never met in person or had a spontaneous unscripted video call","Each request is accompanied by a different urgent but compelling reason","Partner becomes emotional or distant when a request is declined","Requests have gradually grown larger or more frequent"],"whatToDoNow":["Stop all money transfers regardless of the reason given","Discuss the pattern with a trusted friend or family member","Attempt a spontaneous unscripted video call","Reverse image search the partner's profile photos","Report the profile to the platform and national fraud service"],"faq":[{"question":"What if the person has already met me in person once?","answer":"Meeting once does not rule out fraud. Some scammers invest in an initial in-person meeting to build deeper trust before escalating financial requests."},{"question":"Why do small requests worry experts more than one big ask?","answer":"Because they are engineered to stay under your alarm threshold while establishing payment behaviour. Each modest sum feels refusable-but-unkind to refuse, the total stays uncounted, and smooth small transfers mark you as viable for larger asks later."},{"question":"How can I test whether the relationship is genuine without ending it?","answer":"Set one boundary: no money, offered warmly — 'I can't send anything, but let's work the problem together.' A genuine partner accepts that. A script escalates, guilt-trips, or produces a new emergency. The reaction is your answer."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-missed-delivery-notification-by-email-always-genuine","url":"https://scamencyclopedia.org/questions/is-a-missed-delivery-notification-by-email-always-genuine","question":"Is a missed delivery notification I received by email always genuine?","shortAnswer":"No. Fake delivery notifications are one of the most widely distributed phishing methods used to steal card details and login credentials.","explanation":"Parcel delivery phishing emails closely mimic the branding of genuine carriers such as FedEx, UPS, DHL, Royal Mail, and Amazon. They claim a delivery was missed and offer a link to reschedule or pay a small redelivery fee. Clicking the link leads to a fake carrier website that collects your card details or credentials. The tell-tale signs are a sender email address that does not match the carrier's official domain, a generic greeting rather than your name, and a fee for redelivery — real carriers typically do not charge to reattempt a delivery. If you are expecting a parcel, log in directly to the carrier's website by typing the address yourself, and check your tracking number there.\n\nDelivery phishing dominates by volume for a simple statistical reason: at any given moment, a large fraction of recipients genuinely are waiting for a parcel, so an indiscriminate blast lands 'in context' for millions of people without the sender knowing anything about them. Timing amplifies it — campaigns surge around shopping seasons and sales events, exactly when people juggle multiple orders and can no longer remember which carrier serves which purchase. The fake page's small 'redelivery fee' is card harvesting, and the details captured often feed a second act: a call from your 'bank's fraud team' referencing the charge you just made.\n\nOne habit makes you immune regardless of how convincing the next template is: delivery problems get checked only in the retailer's order page or the carrier's own app or website, reached by your own typing, never through message links. Applied consistently, it converts every delivery notification — real or fake — into a harmless prompt to check a place you already trust. If card details went into a fake page, contact your bank before charges appear, and treat any follow-up call about 'fraud on your card' as the second stage of the same operation.","redFlags":["Sender email address does not match the official carrier domain","Generic greeting such as 'Dear Customer' instead of your name","Link in the email leads to a domain you do not recognise","Small payment requested to redeliver a parcel","You are not expecting any delivery from the carrier named"],"whatToDoNow":["Do not click any link in the email","Go directly to the carrier's official website to check your tracking","Report the phishing email to the carrier and your email provider","Forward UK phishing emails to report@phishing.gov.uk"],"faq":[{"question":"What if I did recently order something?","answer":"Even if you are expecting a delivery, verify the notification by logging in to the retailer's tracking system directly — not by clicking the link in the email."},{"question":"Why are delivery emails such a dominant phishing theme?","answer":"Statistics. At any moment a large share of people are genuinely expecting parcels, so a mass blast lands 'in context' for millions without the sender knowing anything about them — especially during shopping seasons."},{"question":"I paid a small 'redelivery fee' on a linked page — what happens next?","answer":"Assume full card compromise: contact your bank before larger charges appear. Be ready for a follow-up call posing as your bank's fraud team, referencing the fee to sound credible — that call is stage two of the same scam."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-offer-to-buy-my-timeshare-or-holiday-club-membership-a-scam","url":"https://scamencyclopedia.org/questions/is-an-offer-to-buy-my-timeshare-or-holiday-club-membership-a-scam","question":"Is an offer to buy my timeshare or holiday club membership a scam?","shortAnswer":"Almost always yes. Timeshare resale fraud specifically targets people who are already struggling to exit their contracts.","explanation":"Timeshare resale fraud preys on owners who are desperate to sell and have already lost money on a timeshare or holiday club contract. A caller — sometimes claiming to represent a resale agency or a buyer with a named interested party — says they can sell the timeshare quickly for a good price but requires an upfront fee for legal fees, transfer taxes, escrow, or marketing. After the fee is paid, the buyer vanishes or invents additional charges. In a variation sometimes called a 'cold call exit scam', the caller claims to be a law firm that can cancel the timeshare contract for a fee. Legitimate timeshare exit options exist but involve regulated legal professionals, not cold callers. Any approach that starts with an unsolicited call and leads to an upfront fee should be treated as fraud.\n\nVictims of timeshare fraud are frequently targeted again, because completed frauds generate contact lists that are traded between criminal groups. A second caller may claim to be a regulator, a law firm, or a recovery agent who can retrieve the money you already lost — for another fee. Treat any follow-up contact about a previous timeshare payment as part of the same operation. If you genuinely want out of a contract, start with the resort or scheme operator's own exit process, get independent regulated legal advice, and put everything in writing so there is a record of what was offered and by whom.","redFlags":["Unsolicited call offering to buy or exit your timeshare","Upfront fee required before any transaction completes","Company found only through the cold call with no verifiable address","Claims of a named buyer ready to proceed immediately","Pressure to pay quickly before the buyer changes their mind"],"whatToDoNow":["Do not pay any upfront fee in response to an unsolicited call","Research the company independently before providing any information","Contact your timeshare provider directly to understand your exit options","Seek advice from a regulated legal professional for legitimate exit routes"],"faq":[{"question":"Are there any legitimate companies that help exit timeshares?","answer":"Some regulated solicitors and consumer rights firms do assist with timeshare exits, but they are found through referrals and professional registers — not cold calls."},{"question":"Why does the caller seem to know details about my contract?","answer":"Ownership records, resort membership lists, and details from earlier fraud attempts circulate among criminal groups. A caller knowing your resort or purchase details is not evidence of legitimacy."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-government-texting-my-phone-about-a-digital-id-verification-real","url":"https://scamencyclopedia.org/questions/is-a-government-texting-my-phone-about-a-digital-id-verification-real","question":"Is a text or email from the government asking me to verify my identity on a new digital ID system real?","shortAnswer":"Be very cautious. Government digital ID communications are issued through official portals and pre-announced — unsolicited texts asking you to verify are almost always phishing.","explanation":"Digital identity phishing campaigns impersonate government agencies by telling you that you must verify your identity on a new system or your access to benefits, tax, or healthcare records will be suspended. The message contains a link to a convincing fake government website that harvests your real government login credentials or your personal and financial details. Genuine government digital identity programmes are announced publicly through official channels and allow extended transition periods. They do not send bulk SMS or email demanding immediate verification under threat of account closure. In the UK, legitimate digital identity services include GOV.UK Verify and HMRC online accounts — accessed by typing the address yourself, never via a link in a message.\n\nThe pressure in these messages is deliberately front-loaded: a short deadline, a threatened suspension, and a link that promises to resolve everything in one tap. Genuine identity programmes work the other way around — they give long notice periods, offer several routes to comply, and never make a single unsolicited message the only path. If you are unsure whether a scheme applies to you, search for it from your own browser and read the official guidance. Anything that genuinely affects your benefits, tax, or records will also be visible when you log in to the relevant account directly, which is the only check worth relying on.","redFlags":["Unsolicited text about a new government digital identity system","Link in the message rather than instruction to visit an official portal","Threat that benefits or tax records will be suspended without immediate action","Request for bank details as part of identity verification","Sender address or URL does not match the official government domain"],"whatToDoNow":["Do not click any link in the message","Visit the relevant government portal by typing the address yourself","Call the relevant agency using a number from the official website","Report the phishing message to your national fraud service"],"faq":[{"question":"How will I know when a real government digital identity scheme launches?","answer":"Genuine schemes are announced through official government websites, mainstream media, and written letters — not through mass text campaigns."},{"question":"What if I already clicked the link and entered my details?","answer":"Change the password for the affected government account and any account that shares it, contact your bank if you entered financial details, and report the incident to your national fraud service. Watch for follow-up contact — submitted details are often used for a second, more targeted approach."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-charity-fundraising-on-gofundme-for-a-stranger-legitimate","url":"https://scamencyclopedia.org/questions/is-a-charity-fundraising-on-gofundme-for-a-stranger-legitimate","question":"Is a crowdfunding campaign on GoFundMe or a similar site for a stranger I saw shared on social media legitimate?","shortAnswer":"Some are genuine, but fundraising fraud on crowdfunding platforms is common, and social sharing makes fraudulent campaigns appear more trustworthy than they are.","explanation":"Crowdfunding platforms allow anyone to create a fundraiser, and while platforms have verification and fraud reporting processes, they cannot prevent all fraudulent campaigns. Scammers create compelling stories with stolen photos and emotional narratives. Social sharing creates a false sense of verification — if a friend shared it, it feels safe. Before donating to a stranger's campaign, look for verifiable details such as a named hospital, a specific location, or links to local news coverage. Check whether the beneficiary's name returns legitimate social media profiles consistent with the story. Even genuine campaigns can be set up by intermediaries who pocket some or all of the funds. Consider donating to established charities working in the relevant area instead.\n\nFraudulent campaigns tend to surge after major news events, when emotions run high and people want to help quickly. That urgency is exactly what scammers rely on: a genuine need will still exist tomorrow, after you have had time to check the story. It also helps to look at how the organiser responds to questions — legitimate fundraisers usually welcome scrutiny and post updates with verifiable specifics, while fraudulent ones delete questions, block commenters, or give vague answers about how the money will actually be used.","redFlags":["Story includes emotional but vague details that cannot be independently verified","Photos on the campaign return results from unrelated social media profiles","Campaign organiser is different from the stated beneficiary with no explanation","Funds requested seem disproportionate to the stated need","Campaign was set up very recently and is shared aggressively"],"whatToDoNow":["Research the story independently using named people and locations","Reverse image search photos on the campaign page","Consider donating to a relevant established charity instead","Report suspicious campaigns directly to the crowdfunding platform"],"faq":[{"question":"Does GoFundMe guarantee that funds reach the stated beneficiary?","answer":"GoFundMe has a guarantee policy for some campaign types, but coverage varies. Check the current terms before donating."},{"question":"Is a campaign safer because a friend shared it?","answer":"Only slightly. Your friend has usually not verified the campaign either — they are passing on the same emotional story that reached them. Do your own checks regardless of who shared it."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-bank-asking-me-to-attend-a-branch-because-of-fraud-suspicious","url":"https://scamencyclopedia.org/questions/is-a-bank-asking-me-to-attend-a-branch-because-of-fraud-suspicious","question":"Is a call from my bank asking me to visit a branch immediately because of fraud on my account genuine?","shortAnswer":"Treat it with caution. While genuine bank fraud alerts exist, scammers use the same approach to get you to a branch where a courier awaits to collect your card and PIN.","explanation":"Bank courier fraud and branch-visit fraud are well-established tactics in which a scammer posing as a bank fraud investigator — sometimes backed by convincing caller ID spoofing — asks you to visit your branch to 'cancel a compromised card' or 'withdraw cash for safekeeping'. At the branch or shortly after, a courier arrives to collect the card or cash on behalf of the 'fraud team'. Real banks never send couriers to collect your cards, cash, or PIN. If you receive such a call, hang up and call your bank directly using the number on the back of your card or 159 in the UK. Never hand your card or cash to anyone who arrives claiming to be from your bank.\n\nA distinctive feature of this fraud is the instruction to deceive branch staff — you may be told the investigation is testing corrupt employees and that you must give a cover story for the withdrawal. This inversion is the clearest possible signal: no genuine investigation asks a customer to lie to the very bank supposedly running it. Branch staff are trained to ask questions about unusual withdrawals precisely because they intercept this scam regularly. Answering them honestly protects you; the only party harmed by the truth is the fraudster on the phone.","redFlags":["Instruction to visit the branch and then hand your card or cash to a courier","Caller insists you must not tell branch staff the real reason for the visit","Caller asks you not to talk to anyone about this for 'investigation' reasons","Courier arrives at your home shortly after the call","Instruction to withdraw large amounts of cash for 'safekeeping'"],"whatToDoNow":["Hang up and call your bank on the number on your card or 159 (UK)","Never hand your card, PIN, or cash to a courier","Tell branch staff the truth about any instructions you were given","Report the call to your bank's fraud team immediately"],"faq":[{"question":"Does a real bank ever send someone to your home?","answer":"In very rare circumstances a bank may send a specialist representative, but they will not ask for your PIN or cash. If in doubt, contact your bank independently to verify any visit."},{"question":"Why do the scammers want me to visit a branch at all?","answer":"Cash and cards collected in person avoid the transfer checks that banks apply to online payments. Involving a branch also makes the process feel official, which lowers the victim's guard."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-free-credit-score-check-website-safe-to-use","url":"https://scamencyclopedia.org/questions/is-a-free-credit-score-check-website-safe-to-use","question":"Is a free credit score check website safe to enter my personal details into?","shortAnswer":"Only established regulated credit reference agencies are safe. Many lookalike 'free score' sites are data-harvesting tools or funnel you into hidden subscriptions.","explanation":"Free credit score sites range from genuinely useful regulated services to outright data-harvesting operations. Well-known regulated credit reference agencies offer free score access and are worth using. The risk comes from lesser-known sites that mimic the format: they collect your name, date of birth, address history, and often your financial details, then sell your data to marketing companies, sign you into a paid subscription you did not clearly agree to, or use the data for identity fraud. Before using any credit score site, verify it is operated by or partnered with a regulated credit reference agency. Check the website for a clearly stated privacy policy, a named company that can be verified on a business register, and genuinely free access without mandatory card details.\n\nThe data these sites collect is exactly the set needed to impersonate you: full name, date of birth, address history, and sometimes employer and income details. That combination can be used to apply for credit in your name or to pass security checks on your existing accounts. If you have already used a questionable site, monitor your credit file for applications you did not make and consider a protective registration with the credit reference agencies, which prompts lenders to apply extra checks before approving anything in your name.","redFlags":["Site requires your card details to 'verify identity' for a free score","Company name cannot be found on a business register","No clear privacy policy stating how your data is used","Site found via a social media ad rather than a known financial comparison site","Free score access buried behind a trial subscription"],"whatToDoNow":["Use only regulated credit reference agencies for free score access","Read the terms before entering any personal information","Never enter card details for a service claiming to be free","Report data-harvesting sites to your consumer protection authority"],"faq":[{"question":"Can checking my credit score hurt my credit rating?","answer":"A 'soft' search for your own credit score does not affect your rating. Hard searches performed by lenders do have a small short-term impact."},{"question":"How often should I check my credit report?","answer":"Checking a few times a year — and after any suspected data exposure — is reasonable. Regular checks help you catch fraudulent applications early, when they are easiest to dispute."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-sports-betting-tipster-who-guarantees-profits-a-scam","url":"https://scamencyclopedia.org/questions/is-a-sports-betting-tipster-who-guarantees-profits-a-scam","question":"Is a sports betting tipster who guarantees consistent profits a scam?","shortAnswer":"Yes. No betting tipster can genuinely guarantee consistent profits — this claim is the defining hallmark of subscription fraud in the tipster industry.","explanation":"Sports betting tipster scams sell subscription services promising consistent returns based on 'insider information', 'algorithms', or 'proven systems'. Promoters may show fabricated profit-and-loss records, cherry-picked winning streaks, or testimonials from fake customers. In practice, no one can guarantee consistent sports betting profits — if they genuinely could, bookmakers would close or restrict their accounts. Many tipster services charge high monthly fees, show initial 'proofed' wins to retain subscribers, then quietly stop tipping or disappear. In countries where betting is legal, tipster services may be unregulated. Spending money on a tipster subscription is statistically likely to cost you more than betting at random.\n\nThe marketing around tipster services also leans on survivorship: a promoter can run many free channels giving different predictions, then advertise only the one that happened to win. Followers of that channel see an apparently flawless record that was manufactured by chance. This is why a long, independently verified history covering every tip — not a screenshot of recent winners — is the minimum standard for taking any service seriously, and even that is no promise of future results. If gambling is causing you financial stress, support services in most countries offer free, confidential help.","redFlags":["Guaranteed profit claims or minimum monthly return figures","No independently verifiable profit and loss history","High-pressure limited-time subscription offers","Testimonials that cannot be independently verified","Tipster claims access to insider information about fixtures"],"whatToDoNow":["Treat any guaranteed-profit claim in betting as false","Research any tipster on independent betting community forums","Never subscribe without seeing a genuinely independent, long-term verified record","Report misleading financial claims to your consumer protection authority"],"faq":[{"question":"Are there any legitimate tipster services?","answer":"Some services provide analysis without guaranteeing outcomes, and some have independently verified records on proofing sites. Treat any service claiming guaranteed returns as fraudulent regardless."},{"question":"The tipster posts betting slips showing big wins. Does that prove anything?","answer":"No. Slips can be edited, staged with small stakes, or selected from many losing bets. A single winning slip says nothing about long-term profitability."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-website-asking-for-my-selfie-with-my-id-for-verification-safe","url":"https://scamencyclopedia.org/questions/is-a-website-asking-for-my-selfie-with-my-id-for-verification-safe","question":"Is a website asking me to submit a selfie holding my ID document as verification safe?","shortAnswer":"Only if the site is a regulated, established service. This type of verification is genuine for financial services but is also exploited by fraudsters to steal your identity.","explanation":"Know-your-customer (KYC) identity checks are a legal requirement for banks, regulated investment platforms, and some marketplaces. A selfie with your ID is a legitimate method used by regulated services. However, fraudsters have built convincing fake platforms that collect this same verification to open fraudulent bank accounts, credit applications, or cryptocurrency accounts in your name. Before submitting a selfie with ID to any website, confirm the business is registered and regulated, look for independent reviews of the service, and ensure you are on the genuine website domain — not a lookalike. Be especially cautious if you were directed to the site through a social media ad or a job offer. Once your ID and selfie have been submitted to a fraudster, the resulting identity fraud can be extensive and difficult to resolve.\n\nContext matters as much as the check itself. A regulated bank asking for verification during account opening is normal; a stranger, a new employer you have never met, or a trading platform you found through social media asking for the same documents is not. Fraudsters increasingly build the ID request into fake job onboarding or 'account upgrade' flows because compliance requests feel routine and people comply without questioning them. Before uploading anything, ask yourself who is receiving the images, whether you approached them or they approached you, and whether the service genuinely needs regulated-level identity checks for what it claims to offer.","redFlags":["Site found through a social media ad or job offer rather than an official source","No verifiable regulatory registration for the service","Site asks for ID verification before you have agreed to any specific product","Domain is new or does not match the company's official website","Request to send ID images by WhatsApp or email rather than a secure upload portal"],"whatToDoNow":["Verify the company on a business and financial regulator register before submitting","Access the site directly by typing the address — not via a link in a message","Never send ID documents by WhatsApp or unencrypted email","If in doubt, contact the company by phone first to confirm the request is genuine"],"faq":[{"question":"What should I do if I sent ID to a site I now suspect was fraudulent?","answer":"Place a CIFAS protective registration or equivalent fraud alert with your credit reference agencies immediately, and report the incident to your national fraud service and police."},{"question":"Can I mark my ID photo before sending it?","answer":"Where the service accepts annotated copies, adding a visible note stating the date and purpose across the image makes reuse harder without invalidating a genuine check. It is a sensible precaution for any document you send remotely."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-car-insurance-deal-offered-by-someone-i-met-online-legitimate","url":"https://scamencyclopedia.org/questions/is-a-car-insurance-deal-offered-by-someone-i-met-online-legitimate","question":"Is a car insurance deal offered by someone I met online or through social media legitimate?","shortAnswer":"No. Private individuals cannot legally sell or arrange car insurance — this is a regulated activity. Any such offer is either a scam or a form of illegal 'ghost broking'.","explanation":"Ghost broking is an insurance fraud in which a fraudster sells fake or doctored car insurance policies, usually at significantly below-market rates. Victims believe they are covered, only to discover when making a claim — or when stopped by police — that the policy is counterfeit or was taken out with false details that make it void. Ghost brokers advertise heavily on social media and messaging apps and often operate as apparently private individuals. A genuine car insurance policy is only available through a regulated insurer or broker listed on your country's financial regulator's register. Never buy insurance from someone who contacts you on WhatsApp, Instagram, or Facebook — regardless of how convincing the documentation looks.\n\nGhost broking is dangerous even when the paperwork initially checks out, because many policies are taken out with deliberately false details — a different address, age, or claims history — to lower the premium. The insurer can void such a policy from the start, which means you were never covered at all. Younger drivers are targeted heavily because their genuine premiums are high, making a 'special deal' feel plausible. If a quote is dramatically cheaper than every regulated comparison result, the difference is not a discount — it is the value of the protection you are not actually getting.","redFlags":["Insurance offered through a social media profile or messaging app","Price significantly lower than comparison site quotes","Policy documentation delivered as an image or PDF without a policy number","Seller asks for your personal details but does not ask about driving history in detail","No verifiable insurer name or broker licence number on the documents"],"whatToDoNow":["Buy insurance only from a regulated insurer or broker on the financial regulator's register","Verify your policy by contacting the insurer directly using their official number","Report suspected ghost brokers to your financial regulator and police","Check your existing policy if you have any doubts about how it was arranged"],"faq":[{"question":"What happens if I unknowingly drove with a ghost-broked policy?","answer":"Driving without valid insurance is a criminal offence regardless of whether you were deceived. Report it to the police and seek genuine cover immediately."},{"question":"How can I check that a policy I already hold is real?","answer":"Contact the insurer named on the documents using details from their official website and confirm the policy number is active and registered to your correct details. In some countries you can also check a national motor insurance database."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-email-from-a-law-firm-about-a-class-action-settlement-real","url":"https://scamencyclopedia.org/questions/is-a-email-from-a-law-firm-about-a-class-action-settlement-real","question":"Is an email from a law firm telling me I am part of a class action settlement and can claim money real?","shortAnswer":"Sometimes yes, but also a common phishing format. Verify the law firm and case independently before clicking anything or providing information.","explanation":"Legitimate class action settlement notices are sent by administrators appointed by courts and are required to include case details, court names, and claim deadlines. They do exist and some people genuinely receive money from them. However, scammers mimic this format exactly because the premise of receiving unexpected money is compelling. A fraudulent version directs you to a fake claim portal that harvests personal and financial details, or asks for a processing fee to release your share. Before acting on any class action email, search the case name and court online to verify it is real, look up the law firm on your country's law society register, and navigate directly to the settlement website by searching the case name — not by clicking the link in the email.\n\nTwo details separate genuine notices from imitations. First, real settlement administrators never charge claimants — their costs come out of the settlement fund, so any request for a fee, 'court charge', or tax payment is decisive proof of fraud. Second, genuine claims ask for modest information relevant to the case, such as proof you bought a product during a certain period. A form demanding your full banking credentials, copies of identity documents, or online account passwords is harvesting data, not processing a claim. When in doubt, contact the court or the named firm through independently sourced contact details.","redFlags":["No case number, court name, or judge named in the email","Link in the email leads to a domain not associated with the law firm","Fee required to process or claim your settlement share","Law firm cannot be found on the relevant law society register","Email uses generic greeting rather than your full name"],"whatToDoNow":["Search the case name online to verify it is a real court proceeding","Look up the law firm on your country's law society register","Navigate to the settlement site by searching the case name rather than clicking the email link","Report phishing settlement emails to your national fraud service"],"faq":[{"question":"Do I need to pay anything to claim a genuine class action settlement?","answer":"No. Genuine settlement administrators are paid from the settlement fund, not by claimants. Any fee request is a scam."},{"question":"I never bought the product mentioned. Could I still be owed money?","answer":"No. Settlements compensate people affected by the specific conduct in the case. An email inviting you to claim from a settlement that cannot apply to you is a strong sign of phishing."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-message-saying-my-payment-details-are-expired-on-a-streaming-service-real","url":"https://scamencyclopedia.org/questions/is-a-message-saying-my-payment-details-are-expired-on-a-streaming-service-real","question":"Is a message saying my payment details have expired on a streaming service and I must update them real?","shortAnswer":"It may be real, but this is also one of the most commonly spoofed phishing messages. Always update payment details by logging in directly, never via the link.","explanation":"Streaming service payment phishing is common because almost everyone subscribes to at least one streaming platform, making the message statistically relevant to many recipients. Scammers send emails and texts impersonating Netflix, Disney+, Spotify, and others, claiming payment has failed and the account will be suspended unless details are updated via the link. The link leads to a convincing fake login page that captures your credentials and card details. Real streaming services do send genuine payment failure emails, which makes this format extra effective. The safest response to any payment update request is to open the streaming app directly or visit the official website you access through your bookmarks — never through a link in an unexpected message.\n\nThese campaigns are sent in enormous volumes precisely because they need no targeting: enough recipients will happen to subscribe to the named service, and a few will happen to have a genuine card issue that makes the message feel timely. The fake pages are often near-perfect copies of the real login and billing screens, so visual inspection of the page itself is unreliable. The habit that defeats the scam is procedural rather than observational — never entering payment details on a page you reached from a message, no matter how convincing it looks or how plausible the timing seems.","redFlags":["Email or text from a sender address that does not match the service's official domain","Link in the message leads to a domain you do not recognise","Urgency — account will be cancelled within 24 hours","Generic greeting rather than your account name","Payment page asks for details beyond card number and expiry"],"whatToDoNow":["Open the streaming app directly or visit the official website via a bookmark","Check your real account payment status in the official app settings","Do not click any link in the message","Report phishing emails to the service and your email provider"],"faq":[{"question":"How do I know if the email is from the real service?","answer":"Check the full sender email address — not just the display name. Even if the address looks right, accessing your account directly is always safer than clicking a link."},{"question":"The message named the exact service I subscribe to. Was I specifically targeted?","answer":"Not necessarily. Scammers send the same template for each major service to huge address lists, so matches happen by chance. Personalisation from breached data is also common and tells you nothing about legitimacy."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-telegram-channel-offering-free-premium-account-access-legitimate","url":"https://scamencyclopedia.org/questions/is-a-telegram-channel-offering-free-premium-account-access-legitimate","question":"Is a Telegram channel offering free access to premium Netflix, Spotify, or other subscription accounts legitimate?","shortAnswer":"No. Shared premium accounts are either stolen, part of a credential-harvesting scam, or will be used to infect your device.","explanation":"Free premium account sharing channels on Telegram and Discord distribute credentials in several harmful ways. Stolen credentials harvested from data breaches or phishing campaigns are shared until the real owner changes their password. In another variant, you are asked to log in through a provided link — a phishing page that captures your email and password when you enter them. Some channels distribute fake client apps that contain malware. Even if shared credentials appear to work, using someone else's account is a breach of the service's terms and may involve receiving stolen property. If you want a streaming or subscription service, use the official platform — many offer legitimate free tiers or discounted student plans.\n\nThere is also a quieter cost to engaging with these channels: the operators learn that you are willing to bend rules for a small saving, which marks you as a promising target for follow-up offers. Members are frequently approached later with 'account generator' tools, cracked software, or paid upgrade schemes, each carrying a higher risk of malware or payment fraud than the last. The channels themselves churn constantly as platforms shut them down, so any credential that works today typically dies within days — while the password you typed into a fake login page stays compromised until you change it everywhere you use it.","redFlags":["Telegram or Discord channel sharing username and password combinations","Link to a 'special login portal' rather than the official service website","Channel asks you to create an account through them to get the benefit","App download from outside the official app store required","Channel was created recently and has no verifiable history"],"whatToDoNow":["Do not use shared account credentials from unofficial sources","Do not enter your own credentials on any login page reached through the channel","Change your passwords if you already interacted with such a channel","Report the channel to Telegram and the affected streaming service"],"faq":[{"question":"What if I already used a shared account and it worked?","answer":"The account may have belonged to someone whose details were stolen. Using it could get your own IP address associated with fraudulent activity. Stop using it and scan your device for malware."},{"question":"Why do these channels give accounts away if there is no benefit to them?","answer":"The 'free' accounts are bait. The operators profit from harvested logins, malware installs, and follow-up offers to the audience they build. You are the product, not the customer."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-landlord-asking-for-a-holding-deposit-before-i-have-signed-anything-normal","url":"https://scamencyclopedia.org/questions/is-a-landlord-asking-for-a-holding-deposit-before-i-have-signed-anything-normal","question":"Is a landlord asking for a holding deposit before I have signed any paperwork normal?","shortAnswer":"A small holding deposit to take a property off the market during referencing can be legitimate, but the rules on how much and when vary by country, and fraud is common.","explanation":"Holding deposits are used in rental markets to reserve a property while referencing checks are completed. In the UK a holding deposit is capped at one week's rent and must be refunded unless you withdraw, provide false information, or fail referencing. Similar rules apply in many other jurisdictions. The fraudulent version involves a 'landlord' who collects holding deposits from multiple prospective tenants simultaneously, then disappears. Warning signs include a landlord who will not let you see the property first, urgency about paying before other applicants take it, and a deposit request exceeding local legal limits. Always get the landlord's full name and verify they have the right to let the property before paying any holding deposit.\n\nVerification is easier than it sounds. Land ownership records are publicly searchable in many countries for a small fee, letting you confirm the name on the title matches the person asking for money. A genuine landlord or agent will also happily accept payment methods that leave a clear trail and will provide written terms without being asked twice. Reluctance on any of these points — or a request to pay by bank transfer to an account in a different name — tells you more than anything the listing itself says. In competitive rental markets, scammers deliberately price properties slightly below the going rate to generate a queue of applicants willing to pay quickly.","redFlags":["Holding deposit requested before you have viewed the property","Amount exceeds local legal limits","Landlord communicates only by text and cannot be verified","Urgency — another applicant is ready to pay right now","No receipt or written agreement provided for the deposit"],"whatToDoNow":["View the property before paying any deposit","Verify the landlord's identity and ownership of the property","Get a written receipt specifying the holding deposit terms and refund conditions","Report suspected rental fraud to the classified-ad platform and local housing authority"],"faq":[{"question":"Can I get a holding deposit back if I decide not to rent the property?","answer":"Rules vary by country. In the UK, if you decide not to proceed you typically forfeit the holding deposit unless the landlord breaches the terms. Always get the refund conditions in writing."},{"question":"How can I verify that the person actually owns or manages the property?","answer":"Check the public land ownership record where available, ask for photo ID matching the name on the record, and for agencies, confirm the agent is listed on the agency's official website. A genuine landlord will not resist these checks."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-email-asking-me-to-complete-a-survey-for-a-cash-reward-a-scam","url":"https://scamencyclopedia.org/questions/is-an-email-asking-me-to-complete-a-survey-for-a-cash-reward-a-scam","question":"Is an email asking me to complete a short survey for a cash reward a scam?","shortAnswer":"Many are scams. Fake survey emails harvest personal data, redirect you to subscription sign-ups, or lead to phishing pages disguised as reward claim forms.","explanation":"Survey scam emails impersonate well-known retailers, banks, and research firms. They promise a cash reward, gift card, or prize for completing a brief survey. The survey itself collects personal and household information. At the end you are directed to a 'reward claim page' that requests card details 'to process your payment' — which are then stolen — or you are silently enrolled in a paid subscription. Legitimate paid surveys are run by regulated market research agencies and pay genuine but modest amounts through verified panel accounts, not as unexpected one-off rewards in unsolicited emails. If you want to earn money from surveys, join a reputable panel directly rather than responding to email invitations.\n\nThe survey format is effective for scammers because answering questions feels harmless — no single answer seems sensitive, yet by the end you may have disclosed your household size, income band, shopping habits, and contact details. That profile is valuable for targeting you with tailored follow-up fraud, and the 'reward claim' step converts the goodwill you have built up into a card-detail capture. A useful rule: the moment a supposedly free reward requires payment information, the interaction has told you everything you need to know. Close the page rather than trying to complete it carefully.","redFlags":["Survey invite arrived unsolicited by email or text","Reward is unusually generous for a short survey","Claim page requests card details to process a reward","Link leads to a domain not associated with the named brand","Generic sender address rather than an official brand domain"],"whatToDoNow":["Do not click any link in an unsolicited survey email","Never enter card details to receive a survey reward","Join reputable survey panels directly if you want paid survey work","Report the phishing email to the spoofed brand and your email provider"],"faq":[{"question":"Are paid survey websites ever legitimate?","answer":"Yes — established market research panels such as YouGov, Prolific, and Swagbucks are legitimate. They are joined directly, not through unsolicited emails."},{"question":"I completed the survey but stopped before entering card details. Am I at risk?","answer":"The answers you gave may be used to profile you for future targeted scams, so be alert to follow-up emails and calls that reference them. No immediate financial harm occurs without payment details, but treat further contact from the same source as hostile."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-call-saying-my-broadband-router-has-been-hacked-a-scam","url":"https://scamencyclopedia.org/questions/is-a-call-saying-my-broadband-router-has-been-hacked-a-scam","question":"Is a call saying my broadband router has been hacked and my internet will be cut off a scam?","shortAnswer":"Yes. Internet service providers do not call customers to report router hacks and then request remote access — this is a well-known variant of tech-support fraud.","explanation":"Router hack phone scams involve a caller claiming to be from your broadband provider or a 'technical department', warning that your router has been compromised and is being used to access illegal content or will be disconnected unless you act immediately. The caller directs you to download remote access software to 'fix the router', then accesses your device, bank accounts, or installs malware. Real ISPs communicate service issues through official channels and do not cold-call customers with demands for remote computer access. If you receive such a call, hang up. If you are concerned about your router's security, contact your provider directly using the number on your bill or official website.\n\nThe technical claims in these calls are theatre. The caller may direct you to a command window or system log full of routine entries and describe them as evidence of hacking, or read out an IP address as if it were secret knowledge — details chosen because they look alarming to a non-technical person while proving nothing. Once remote access software is installed, the real damage begins: the caller can view your screen while you log in to online banking, move money while showing you a fake screen, or install software that persists after the call ends. If remote access was ever granted, treat the device as compromised until it has been professionally checked, and change your passwords from a different device.","redFlags":["Unsolicited call claiming your router is hacked or used for illegal activity","Instruction to download remote access software","Caller knows your approximate IP address (easily found online) as 'proof'","Urgency — internet will be disconnected in minutes without action","Caller ID appears to show your ISP's number"],"whatToDoNow":["Hang up immediately","Do not download any software","Call your ISP on the number from your bill to check for genuine account issues","Report the call to your national fraud service"],"faq":[{"question":"Does an ISP ever contact customers about network security issues?","answer":"ISPs may send automated emails about detected malware on a network, but they do not cold-call to demand remote computer access. Any such call should be treated as fraudulent."},{"question":"I let the caller install remote access software. What should I do now?","answer":"Disconnect the device from the internet, uninstall the remote access tool, and have the machine scanned or professionally checked. Change your important passwords from a different device and tell your bank what happened so they can watch for unauthorised activity."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-job-that-sends-me-equipment-and-asks-me-to-forward-it-a-scam","url":"https://scamencyclopedia.org/questions/is-a-job-that-sends-me-equipment-and-asks-me-to-forward-it-a-scam","question":"Is a job that sends me equipment in advance and then asks me to forward it to another address a scam?","shortAnswer":"Yes. This is a reshipping mule scam, which typically involves handling stolen goods and can result in criminal liability.","explanation":"Reshipping mule scams recruit workers, often through fake remote work listings, who receive packages and then forward them to another address, usually overseas. The goods in the packages are typically purchased with stolen credit cards or are proceeds of other fraud. The reshipping worker may believe they are part of a legitimate logistics operation, but they are knowingly or unknowingly handling stolen property — which can result in police contact, account freezes, and in some cases prosecution. The 'employer' stops communicating once the goods have been reshipped and no wages are paid. If a job offer involves receiving and forwarding parcels you did not purchase, it is a reshipping scam.\n\nThese operations recruit deliberately from people who are job-hunting, newly arrived in a country, or working from home for the first time — groups less likely to recognise the pattern and more likely to accept unusual arrangements. The paperwork can look thorough, with contracts, onboarding forms, and a company website, because the operation needs you to feel employed for the few weeks it uses your address. When the scheme is detected, it is the reshipper whose name and address appear on every parcel and whose door the investigation reaches first. Keeping all messages, labels, and tracking numbers, and contacting police before disposing of anything, puts you in the strongest position as a witness rather than a suspect.","redFlags":["Job involves receiving packages and forwarding them to a different address","You never meet the employer in person or verify their business","Packages arrive in your name but you were not given details about the contents","Employer communicates only by email or messaging app","High commission promised for a simple forwarding task"],"whatToDoNow":["Refuse any job that involves receiving and forwarding packages","If packages have already arrived, contact the police and do not forward them","Report the job offer to the platform where you found it","Report to your national fraud and consumer protection service"],"faq":[{"question":"Is it illegal to forward a package without knowing it contains stolen goods?","answer":"Law varies by country, but knowingly facilitating the movement of stolen property can carry criminal penalties. If you are suspicious, contact police before forwarding anything."},{"question":"The company gave me a contract and onboarding documents. Does that make it legitimate?","answer":"No. Reshipping operations produce convincing paperwork because they need workers to feel employed. The defining test is the work itself: receiving and forwarding parcels you did not buy is not a real job function."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-seller-who-wants-to-use-their-own-shipping-company-a-scammer","url":"https://scamencyclopedia.org/questions/is-a-seller-who-wants-to-use-their-own-shipping-company-a-scammer","question":"Is an online seller who insists on using their own shipping company a scammer?","shortAnswer":"Frequently yes. Insisting on a specific shipping company is a classic element of online purchase fraud, particularly for high-value items.","explanation":"In online purchase scams for items such as vehicles, heavy machinery, electronics, or pets, the seller insists on using their own 'trusted' shipping or transport company. This company is controlled by the scammer. The buyer pays the purchase price and then receives additional invoices from the shipping company for insurance, customs, or storage. Each payment is absorbed by the scammer with no item ever delivered. Real sellers use verifiable, independently chosen carriers. If a seller will not allow you to arrange your own transport or insists their carrier must be used, treat this as a serious red flag and do not pay anything until you have physically seen the item.\n\nThe fake shipping company is the engine of this fraud because it converts one payment into a sequence. Each new invoice arrives with an official-looking explanation — insurance that was 'mandatory', a customs hold, a storage charge accruing daily — and each is framed as the last obstacle before delivery. Victims keep paying because walking away means losing everything already spent, which is precisely the pressure the scam is built on. The sunk money is gone either way; the only decision you control is whether to add to it. Treat the second invoice as final confirmation of fraud and stop all payment immediately.","redFlags":["Seller insists on using a specific, previously unknown shipping company","Additional invoices arrive from the shipping company after the initial payment","Seller cannot let you view or collect the item in person","Item is priced significantly below market value","Shipping company website was registered very recently"],"whatToDoNow":["Insist on viewing the item in person or arranging your own verified carrier","Do not pay additional shipping company invoices","Check the shipping company's registration and reviews independently","Report the listing to the platform and your consumer protection service"],"faq":[{"question":"What if the seller shows photos and videos of the item?","answer":"Photos and videos are easily faked or stolen from other listings. Physical viewing remains the only reliable verification for high-value items."},{"question":"I already paid the first shipping invoice. Should I pay the customs fee to get the item?","answer":"No. There is no item. Additional fees are how the scam extracts more money — stop paying, contact your bank about recovering what was sent, and report the fraud."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-energy-company-door-canvasser-offering-a-better-tariff-legitimate","url":"https://scamencyclopedia.org/questions/is-an-energy-company-door-canvasser-offering-a-better-tariff-legitimate","question":"Is a doorstep canvasser from an energy company offering me a better tariff and asking me to switch legitimate?","shortAnswer":"Some doorstep energy switching is legitimate, but the sector has a documented history of high-pressure mis-selling, forged consent, and sometimes outright fraud.","explanation":"Doorstep energy sales are tightly regulated in most countries because of widespread mis-selling. Legitimate energy sales agents must identify themselves, give you time to consider, provide full written terms before you agree, and honour a statutory cooling-off period if you change your mind. Problems arise when agents forge signatures, switch you without consent, misrepresent tariff savings, or represent companies that are not genuinely licensed suppliers. Before agreeing to anything at the door, ask for the agent's ID card and company name, verify the company is licensed by your energy regulator, and check comparison sites yourself rather than accepting the agent's claim about savings. Never provide your current energy account details on the doorstep.\n\nThe doorstep setting is chosen because it strips away your usual tools: you cannot easily compare tariffs, check a register, or discuss the decision with anyone while a persuasive stranger waits on your step. A legitimate offer survives a delay — any deal that is only available if you sign right now is not a deal, it is a pressure tactic. Taking the agent's materials and saying you will consider them costs you nothing and instantly filters out most bad actors, who need same-day commitment to make their approach pay. If a switch does go through without your consent, contact your existing supplier promptly; erroneous transfer processes exist to reverse it.","redFlags":["Agent cannot provide verifiable company ID","Pressure to sign or agree at the door without time to consider","Claims of savings that seem too large to be credible","Request for your current account number, meter readings, or bank details at the door","No written terms or cooling-off period mentioned"],"whatToDoNow":["Take the agent's details and verify the company on your energy regulator's register","Do not sign anything at the door","Check any claimed savings yourself on a comparison site","Report high-pressure or fraudulent doorstep selling to your energy regulator"],"faq":[{"question":"Can I cancel a switch I agreed to at the door?","answer":"Yes. Most countries provide a statutory cooling-off period of at least 14 days for distance and doorstep sales. Contact the new supplier in writing immediately if you wish to cancel."},{"question":"What if I was switched without ever agreeing to anything?","answer":"Contact your existing supplier straight away and say you did not consent. Suppliers operate erroneous transfer procedures to reverse unauthorised switches, and you can escalate to the energy ombudsman if it is not resolved."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-whatsapp-account-verification-code-request-from-a-friend-real","url":"https://scamencyclopedia.org/questions/is-a-whatsapp-account-verification-code-request-from-a-friend-real","question":"Is a WhatsApp message from a contact asking me to forward them a verification code I just received a scam?","shortAnswer":"Yes. This is account takeover fraud — your contact's account has already been hijacked and scammers are now targeting yours.","explanation":"WhatsApp account takeover fraud works in a chain. A scammer compromises one person's account, then messages their contacts claiming to have accidentally sent a six-digit verification code to the contact's number and asking them to forward it. The code is actually WhatsApp's two-factor authentication code for your own account. Sharing it instantly transfers control of your WhatsApp to the scammer, who then repeats the attack on your contacts. The message is convincing because it appears to come from a trusted contact. Your real friend did not send this — their account is being used by a scammer. Never forward any verification code to anyone, even a close contact. If you receive such a request, call your contact on a voice call to alert them to the compromise.\n\nThe reason this chain spreads so effectively is that each hijacked account lends the next request borrowed trust: the message arrives in an existing conversation history, from a name and photo you know. Understanding the mechanic dissolves it — a verification code sent to your phone belongs to your account and nothing else, so there is no innocent scenario in which someone else legitimately needs it. Enabling two-step verification adds a PIN that the code alone cannot bypass, which stops the takeover even if a code is ever shared in a moment of distraction. Setting it up takes a minute in the app's security settings and is the single most effective protection available.","redFlags":["Contact asks you to forward a code you just received","Explanation is that they accidentally sent it to your number","Message has unusual urgency or phrasing different from the contact's normal style","Contact cannot explain the situation clearly if you call them"],"whatToDoNow":["Do not forward the code under any circumstances","Call your contact directly to tell them their account has been compromised","Set up two-step verification on your own WhatsApp in settings","Report the hijacked account to WhatsApp support"],"faq":[{"question":"What should I do if I already forwarded the code?","answer":"Deregister your WhatsApp immediately by requesting a new verification code to re-register your own number. Enable two-step verification as soon as you regain access."},{"question":"Is there ever a genuine reason someone else needs a code sent to my phone?","answer":"No. Verification codes are tied to the account being registered on your number. Any request to share one — from a friend, a company, or a support agent — is an attempt to take over an account."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-company-asking-for-a-director-id-number-to-verify-a-b2b-transaction-legitimate","url":"https://scamencyclopedia.org/questions/is-a-company-asking-for-a-director-id-number-to-verify-a-b2b-transaction-legitimate","question":"Is a company asking for my director ID or company registration number to verify a B2B transaction legitimate?","shortAnswer":"Requesting a company registration number is normal in B2B transactions, but asking for director personal details or internal login credentials is not.","explanation":"Business-to-business fraud increasingly targets company directors and finance teams. In a legitimate procurement or invoicing context, it is normal to exchange company registration numbers and verify VAT numbers. However, fraudsters posing as suppliers, compliance services, or regulatory bodies ask for more: personal director identification numbers, Companies House authentication codes, or access to filing portals. With this information they can file false company changes, redirect dividends, or commit other registration fraud. A separate risk is a supplier requesting a 'vendor verification' email that contains a link to a fake payment portal where your banking credentials are captured. Always verify any B2B verification request through a channel you initiated — phone the contact at their known number, not one provided in the email.\n\nBusiness identity fraud is attractive to criminals because a company's public filings do most of their reconnaissance for them: director names, registered addresses, and filing dates are openly searchable, letting an approach sound remarkably well informed. The defence is to treat credentials for filing portals with the same discipline as banking credentials — held by named individuals, never shared by email, and never entered on a page reached through a link. It is also worth setting up whatever change-alert service your company registry offers, so any filing made against your company generates an immediate notification you can act on before changes take effect commercially.","redFlags":["Request for a Companies House or company portal authentication code","Supplier or client requesting personal director credentials","Verification request arrives by email with a link to a portal","Request comes from a newly introduced contact or through a social media message","Sense of urgency about completing verification to release a payment"],"whatToDoNow":["Never share portal authentication codes or filing credentials","Verify any request by calling the contact on a known number","Check your company registration for unauthorised changes regularly","Report suspected business identity fraud to your company registry"],"faq":[{"question":"Can someone change my company's registered details if they have my authentication code?","answer":"In some jurisdictions, yes — authentication codes can be used to file changes to company registration details. Guard them as carefully as a password."},{"question":"How do I know the caller is really from my supplier's finance team?","answer":"You cannot know from the call itself — names and details are often researched in advance. Hang up and phone the supplier on the number you already hold on file before acting on any request."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-popup-offering-to-fix-my-slow-computer-for-free-a-scam","url":"https://scamencyclopedia.org/questions/is-a-popup-offering-to-fix-my-slow-computer-for-free-a-scam","question":"Is a browser pop-up offering to fix my slow computer for free a scam?","shortAnswer":"Yes. Free computer fix pop-ups are tech-support bait — they lead to malware installs, unnecessary software purchases, or remote access fraud.","explanation":"Slow-computer pop-ups appear as browser overlays or as full-screen takeovers that claim your PC is running slowly due to detected problems and offer to fix them for free with a single click. Clicking downloads either a fake optimisation tool containing adware or malware, or directs you to call a number staffed by scammers who charge for unnecessary 'cleaning' and attempt to gain remote access to your machine. Genuine system maintenance tools are available through operating system built-in utilities or reputable software vendors and do not announce themselves through browser pop-ups. If you see such a pop-up, close your browser using Task Manager — do not click anywhere on the pop-up itself.\n\nIt is worth understanding why the pop-up appeared at all, because that shapes what to do next. Most arrive through malicious adverts on otherwise ordinary websites or through low-quality sites reached from search results — meaning your computer usually was not infected before the pop-up and does not become infected just by seeing it. A slow computer, meanwhile, almost always has mundane causes: too many startup programs, a full drive, or ageing hardware. The built-in maintenance tools in your operating system address these safely and free of charge, which is exactly why the scam has to interrupt you with an invented emergency rather than compete on merit.","redFlags":["Pop-up appears suddenly claiming to detect problems with your computer","Free fix requires downloading a tool or calling a number","Pop-up prevents you from closing the browser normally","Claims to be from Microsoft, Apple, or your antivirus brand","Sound or voice plays warning you to act immediately"],"whatToDoNow":["Close the browser using Task Manager (Windows) or Force Quit (Mac)","Do not click on the pop-up, call any number shown, or download anything","Run a scan with your existing security software if you are concerned","Clear your browser cache after closing the tab"],"faq":[{"question":"Could the pop-up have already installed something before I closed it?","answer":"Simply viewing a pop-up is generally safe. Clicking, downloading, or calling the number carries the real risk. Run a security scan if you clicked anywhere on the pop-up."},{"question":"My computer genuinely is slow. What should I actually do?","answer":"Use your operating system's built-in tools: review startup programs, free up disk space, and install pending updates. If problems persist, a reputable local repair shop is safer than anything offered through a browser pop-up."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-new-landlord-asking-me-to-pay-rent-to-a-different-bank-account-a-scam","url":"https://scamencyclopedia.org/questions/is-a-new-landlord-asking-me-to-pay-rent-to-a-different-bank-account-a-scam","question":"Is a new landlord or letting agent asking me to change which bank account I pay rent into a scam?","shortAnswer":"Treat this with great caution. Bank account change requests in rental relationships are a common entry point for payment diversion fraud.","explanation":"Payment diversion fraud in rental relationships typically occurs in two ways. First, a scammer intercepts email communication between a tenant and a letting agency and sends a convincing fake message claiming the payment account has changed. Second, a fraudster takes over a letting agent's email account and notifies tenants of a change. In both cases, rent is diverted to a criminal's account and the tenant remains liable to the real landlord for non-payment. Before changing any bank account payment details, call your landlord or letting agent on a telephone number you already have on file — not one provided in the change-of-details email — and verbally confirm the request.\n\nWhat makes this fraud effective is that everything about the message except the account number is genuine: the payment amount, the due date, the property address, and often the writing style, because the scammer has been reading real correspondence before intervening. That is why inspecting the email for mistakes is the wrong test — a well-executed interception contains none. The right test is procedural: bank detail changes are only ever actioned after voice confirmation on a number you sourced independently. Some banks also offer name-checking when you set up a new payee; a mismatch between the account name and your landlord or agency should stop the payment on the spot.","redFlags":["Unexpected email asking you to change the rent payment bank account","Slight difference in the email address from previous correspondence","Urgency — next payment is due soon and the old account is 'closing'","Request arrived without any previous warning or discussion","New bank account is in a different name from the landlord or agency"],"whatToDoNow":["Call your landlord or agent on a number you already hold to verify the change","Do not pay to the new account until you have confirmed verbally","Check the email address carefully against previous genuine communications","Report suspected email interception to the letting agent and Report Fraud (formerly Action Fraud)"],"faq":[{"question":"If I pay rent to a fraudulent account by mistake, am I still liable to the real landlord?","answer":"Legally yes, though landlords and courts consider the circumstances. Stopping further misdirected payments immediately and reporting to the police is essential."},{"question":"The email looks exactly like previous genuine messages from my agent. Does that mean it is safe?","answer":"No. If the agent's mailbox has been compromised, fraudulent messages come from the real address with the real history attached. Only voice confirmation on a number you already hold verifies a bank detail change."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-survey-company-promising-high-daily-earnings-for-simple-tasks-legitimate","url":"https://scamencyclopedia.org/questions/is-a-survey-company-promising-high-daily-earnings-for-simple-tasks-legitimate","question":"Is a company promising high daily earnings for completing simple online tasks or surveys legitimate?","shortAnswer":"No. Genuine paid surveys and micro-tasks pay modest amounts — promises of high daily income are the starting point for task scams.","explanation":"High-earnings task scams mimic the format of legitimate survey or micro-task platforms but operate very differently. They promise substantial daily earnings for completing easy tasks, then funnel you into a system where you must buy a 'membership' or 'upgrade' to unlock higher-paying tasks or withdraw your earnings. The tasks are simple ratings or reviews, but the real revenue model is the fees you pay. Legitimate survey platforms pay a few pounds or dollars per hour at most and have no membership fees or withdrawal barriers. If an opportunity promises high daily income for simple work, treat it as a warning sign and research the platform independently before engaging.\n\nThe psychology of these schemes is carefully staged. Early tasks pay out small amounts promptly, sometimes into your real account, to establish trust and make the dashboard balance feel real. Larger 'combination tasks' then appear that require you to deposit your own money first, with the promise of an amplified return — and the deposits grow with each round until you cannot or will not continue, at which point the balance becomes unreachable. The moment any earning platform asks you to pay in before you can take money out, the direction of money has reversed, and that reversal is the entire business model. Nothing recoverable sits behind the numbers on the screen.","redFlags":["Daily earnings promise significantly above minimum wage for simple tasks","Upgrade or membership fee required to access better-paying tasks","Platform found through a social media ad or unsolicited DM","Withdrawal requires reaching a threshold or paying a release fee","No independent reviews on established consumer review platforms"],"whatToDoNow":["Research the platform on independent review sites before signing up","Never pay to access jobs or withdraw earnings","Join only established, well-reviewed survey platforms directly","Report high-earnings scam platforms to your consumer protection authority"],"faq":[{"question":"What are realistic earnings from genuine survey platforms?","answer":"Established survey platforms typically pay a few pounds or dollars per survey, with total monthly earnings rarely exceeding small supplementary amounts. High-income claims are not realistic."},{"question":"The platform paid me real money at the start. Doesn't that prove it is genuine?","answer":"No — small early payouts are the hook. They cost the operators little and are recovered many times over once you start depositing your own money to unlock bigger tasks."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-bitcoin-investment-that-my-accountant-or-financial-adviser-recommended-safe","url":"https://scamencyclopedia.org/questions/is-a-bitcoin-investment-that-my-accountant-or-financial-adviser-recommended-safe","question":"Is a Bitcoin or crypto investment my accountant or financial adviser recommended safe?","shortAnswer":"Not automatically. Advisers and accountants can themselves be defrauded or may recommend unregulated products that are not suitable or lawful to advise on.","explanation":"Third-party recommendation fraud occurs when a trusted professional is either compromised themselves, receives a commission to recommend a product, or is used as a social engineering tool by scammers who encourage you to involve your adviser to appear credible. Some advisers are also unqualified to give advice on cryptocurrency investments, and doing so may be unlawful. Before acting on any crypto recommendation — even from a trusted professional — verify the investment platform is registered with your financial regulator, confirm the adviser is specifically authorised to advise on the product type, and obtain a second opinion from an independent financial adviser. Never invest based on a single recommendation alone, regardless of the source.\n\nScammers understand that a recommendation routed through a trusted professional inherits that person's credibility, which is why some frauds deliberately encourage victims to 'ask your accountant' — knowing the adviser will be shown the same polished materials and fabricated performance data the victim saw. A professional endorsement is only as good as the verification behind it, so ask your adviser directly what independent checks they performed and whether they are being paid for the introduction. Commission-driven recommendations are a conflict of interest you are entitled to have disclosed, and a genuine adviser will answer both questions without hesitation.","redFlags":["Platform cannot be found on your financial regulator's register","Adviser earns a commission from the recommendation","Adviser is not specifically authorised to advise on crypto assets","Investment promises high fixed returns with no risk disclosure","Adviser pressures you to invest quickly to lock in a rate"],"whatToDoNow":["Check the platform on your financial regulator's authorised firms register","Verify your adviser's authorisation covers the specific product","Seek an independent second opinion","Report unregulated investment advice to your financial regulator"],"faq":[{"question":"Can I complain if my adviser recommended a fraudulent investment?","answer":"If your adviser is regulated, you can complain to the relevant ombudsman service. If they are not regulated, report them to the financial regulator and police."},{"question":"What questions should I ask before acting on the recommendation?","answer":"Ask whether the adviser is authorised to advise on this product type, what independent checks they made on the platform, and whether they receive any commission. Hesitation on any of these is a warning sign."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-facebook-marketplace-seller-who-says-paypal-is-safer-right","url":"https://scamencyclopedia.org/questions/is-a-facebook-marketplace-seller-who-says-paypal-is-safer-right","question":"Is a Facebook Marketplace seller who says PayPal is safer than cash and sends me a payment link telling the truth?","shortAnswer":"Partly misleading and potentially fraudulent. Scammers use fake PayPal payment links to steal credentials or argue that a 'Friends and Family' payment grants no buyer protection.","explanation":"Facebook Marketplace PayPal fraud works in two ways. In the first, a seller sends a payment link that leads to a fake PayPal login page designed to steal your credentials and card details. In the second, the seller insists you pay through PayPal's 'Friends and Family' option, which genuinely carries no buyer protection — so if the goods are not delivered, you cannot file a dispute. A legitimate seller does not send payment links; you generate the payment yourself through the official PayPal app after verifying the seller's real PayPal email address. For physical goods, cash on collection or PayPal Goods and Services with buyer protection is the safest approach. Never pay via Friends and Family to a stranger.\n\nSellers who push Friends and Family usually offer a reason that sounds considerate — avoiding fees, keeping the price lower for you, or a 'business account restriction'. Each explanation exists to disguise the same fact: that payment route is designed for people who trust each other and deliberately excludes dispute rights. A legitimate seller loses nothing meaningful by accepting a protected payment method, so refusal is informative in itself. The same logic applies across marketplaces and payment apps generally — whenever a stranger steers you toward the one payment option that cannot be reversed or disputed, the steering is the scam, whatever the stated reason.","redFlags":["Seller sends a payment link rather than their PayPal email","Insistence on using PayPal Friends and Family rather than Goods and Services","Link leads to a domain that is not paypal.com","Seller claims Friends and Family is safer or required for their 'business account'","Seller cannot or will not meet for an in-person cash exchange"],"whatToDoNow":["Never click a payment link from a seller — go to PayPal directly","Use Goods and Services for any purchase from a stranger","Verify the PayPal email address before sending any payment","For local sales, meet in person and pay cash or via bank transfer on viewing"],"faq":[{"question":"Does PayPal Goods and Services fully protect me on Facebook Marketplace?","answer":"Goods and Services provides dispute resolution and a refund route if items are not received or not as described. It is substantially safer than Friends and Family for marketplace purchases."},{"question":"The seller says Goods and Services fees make the sale unprofitable. Is that fair?","answer":"Fees are a normal cost of selling and can be built into the price. A seller who refuses protected payment outright values the lack of dispute rights more than the fee — which tells you why."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-voicemail-from-the-irs-or-hmrc-threatening-arrest-real","url":"https://scamencyclopedia.org/questions/is-a-voicemail-from-the-irs-or-hmrc-threatening-arrest-real","question":"Is a voicemail from the IRS or HMRC threatening immediate arrest for unpaid tax real?","shortAnswer":"No. Neither the IRS, HMRC, nor any other tax authority leaves threatening arrest voicemails. This is a widely known impersonation scam.","explanation":"Government impersonation robocall fraud is one of the highest-volume scam formats globally. Victims receive automated or live calls claiming to be from the IRS (US), HMRC (UK), ATO (Australia), or equivalent agencies, warning that a warrant has been issued and police will arrive unless they pay immediately. The calls use official-sounding language, badge numbers, and sometimes spoofed caller IDs. Real tax authorities communicate by official post before any enforcement action, allow time to respond, and have formal appeals processes. They do not demand immediate payment by wire transfer, cryptocurrency, or gift card over the phone. If you receive such a voicemail, do not call back the number provided.\n\nThe emotional design of these calls deserves attention, because fear works even on people who intellectually know better. Threats of arrest short-circuit deliberation and push victims toward immediate compliance, while the instruction to stay on the line and tell no one exists to block the one thing that reliably breaks the spell — a pause and a second opinion. If a call or voicemail about tax leaves you frightened, that fear is itself diagnostic: real tax administration is slow, paper-based, and procedural, and it never needs you scared. Hanging up, taking an hour, and checking your actual tax account directly costs nothing and defeats the entire approach.","redFlags":["Automated or live voicemail threatening arrest for unpaid tax","Instruction to call back a specific number immediately","Demand for payment by gift card, cryptocurrency, or wire transfer","Threat that police will arrive within hours","Caller asks you not to discuss the matter with a lawyer or family member"],"whatToDoNow":["Do not call back the number in the voicemail","If concerned about a genuine tax issue, contact the authority via their official website","Report the voicemail to your national fraud service","Block the number on your phone"],"faq":[{"question":"What if I already called back and gave information?","answer":"Contact your bank immediately if financial information was shared. Report to your national fraud service and monitor your accounts closely."},{"question":"How do I check whether I genuinely owe any tax?","answer":"Log in to your official online tax account or call the tax authority using the number published on its official website. Any real liability will be visible there, along with formal routes to query or appeal it."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-discount-pharmacy-selling-branded-medication-online-safe","url":"https://scamencyclopedia.org/questions/is-a-discount-pharmacy-selling-branded-medication-online-safe","question":"Is a discount online pharmacy selling branded prescription medication safe to order from?","shortAnswer":"Only if the pharmacy is licensed by your national medicines regulator. Many discount online pharmacies sell counterfeit, substandard, or incorrectly dosed medication.","explanation":"Online pharmacy fraud is a significant public health concern. Counterfeit medication can contain incorrect active ingredients, wrong doses, or harmful contaminants. Scam pharmacies often sell prescription-only medication without requesting a prescription, which is illegal and dangerous. They typically have very low prices, generic-looking websites, and no verifiable pharmacy registration number. In the UK, registered online pharmacies must display the NHS distance-selling logo and can be verified on the GPhC register. In the US, the NABP runs a verified internet pharmacy program (VIPPS). Before ordering any medication online, verify the pharmacy on your national regulator's register. If an online pharmacy sells you prescription medication without asking for a valid prescription, it is operating illegally.\n\nThe risk here is different in kind from most online fraud: with counterfeit medication, the worst outcome is not lost money but harm to your health. Pills pressed to look identical to branded products may contain no active ingredient, an unpredictable dose, or a dangerous substitute — and there is no way to tell by appearance. The people most drawn to these sites are often those priced out of legitimate supply or embarrassed to see a doctor about the condition being treated, and the sellers know it. If cost or embarrassment is the barrier, registered telehealth services and generic versions prescribed through proper channels address both more safely than any unverified discount site can.","redFlags":["Prescription medication available without a valid prescription","No pharmacy registration number or regulatory logo on the site","Price significantly below normal pharmacy prices","Site found through a spam email or social media ad","No physical address or contact phone number"],"whatToDoNow":["Verify any online pharmacy on your national medicines regulator's register","Never purchase prescription medication without a valid prescription","Use your GP or a registered telehealth service for legal online prescriptions","Report illegal online pharmacies to your national medicines regulator"],"faq":[{"question":"How do I identify a registered online pharmacy in the UK?","answer":"Look for the NHS distance-selling logo linked to the GPhC register. Clicking the logo should take you to the pharmacy's entry on the official register."},{"question":"What should I do if I already took medication bought from an unverified site?","answer":"Stop taking it and speak to a doctor or pharmacist, taking the packaging with you if possible. Seek urgent care if you feel unwell, and report the seller to your national medicines regulator."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-cold-call-offering-me-a-compensation-claim-service-legitimate","url":"https://scamencyclopedia.org/questions/is-a-cold-call-offering-me-a-compensation-claim-service-legitimate","question":"Is a cold call offering to help me claim compensation for mis-sold products or services legitimate?","shortAnswer":"Treat with caution. While genuine claims management companies exist, the cold call format is heavily exploited for fee fraud and data harvesting.","explanation":"Claims management cold calls target people who may have had mis-sold PPI, car finance, payday loans, investments, or energy products. Legitimate claims are possible through free services, ombudsmen, and regulated claims managers — but cold callers in this space frequently operate without authorisation, charge high upfront fees, harvest personal data, or help file fabricated claims that expose you to legal risk. In the UK cold calling for claims management services is banned. If you think you have a genuine mis-selling claim, contact the relevant ombudsman (Financial Ombudsman Service, Legal Ombudsman, etc.) or seek a regulated no-win-no-fee solicitor through a professional register, not through a cold caller.\n\nEven where a cold-calling firm does file something on your behalf, the economics rarely favour you: a substantial slice of any award goes to the firm for form-filling you could have done for free, and fabricated or exaggerated claims filed in your name can rebound on you rather than the company that filed them. The details these callers request — policy numbers, loan references, bank details — are also valuable in themselves and frequently resold for follow-up fraud, including fake 'refund processing' calls that reference the earlier conversation to seem credible. Treat the original cold call and everything downstream of it as one connected operation.","redFlags":["Unsolicited call or text about a specific compensation claim type","Upfront fee required before any claim is assessed","Company cannot provide a registration number with the relevant regulator","Claim sounds very easy with guaranteed large payouts","You are asked for your bank details or policy documents immediately"],"whatToDoNow":["Do not give personal or financial details to cold callers","Check whether you have a genuine claim through the official ombudsman service","Use a regulated no-win-no-fee solicitor or ombudsman service for real claims","Report cold-calling claims companies to your financial regulator"],"faq":[{"question":"Can I claim for mis-sold PPI or car finance without using a claims company?","answer":"Yes — you can complain directly to the company involved and escalate to the relevant financial ombudsman for free. You do not need a paid claims manager."},{"question":"The caller knew about a product I actually held. Does that make them genuine?","answer":"No. Lists of policyholders and borrowers circulate from data breaches and marketing databases, and some callers simply guess common products. Accurate detail is not verification."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-pension-pot-transfer-to-a-better-scheme-recommended-by-phone-safe","url":"https://scamencyclopedia.org/questions/is-a-pension-pot-transfer-to-a-better-scheme-recommended-by-phone-safe","question":"Is a pension pot transfer to a better-performing scheme recommended by a cold caller safe?","shortAnswer":"No. Unsolicited pension transfer recommendations are one of the most financially devastating scam types. Never transfer a pension based on a cold call.","explanation":"Pension transfer fraud causes some of the largest average financial losses of any scam because pension pots often represent lifetime savings. Cold callers recommend transferring your existing pension to a new scheme promising higher returns, often citing overseas investments, storage commodities, or guaranteed income. The new scheme may hold your money in illiquid or fictitious investments before collapsing, or may have been designed solely to extract a large management or transfer fee. Transferring out of a defined benefit pension is particularly harmful as you lose guaranteed income rights that cannot be restored. Before transferring any pension, consult an independent regulated financial adviser, check the scheme on your country's financial regulator register, and verify the transfer is appropriate for your circumstances.\n\nPension fraud has a cruelty specific to it: the loss is usually discovered years later, at the point of retirement, when there is no working life left in which to rebuild. That is also why the sales scripts emphasise sophistication — 'institutional-grade' investments, overseas structures, early access loopholes — because complexity discourages the victim from asking basic questions. Several countries have banned pension cold calling outright, which gives you a simple operating rule: the call itself is the violation, before anything is even offered. A legitimate transfer process is slow, documented, adviser-led, and survives any amount of scrutiny you apply to it.","redFlags":["Unsolicited call or text about pension performance or consolidation","Promises of returns significantly above current market rates","Recommendation to transfer a defined benefit pension","Urgency to transfer before a deadline","New scheme involves overseas assets, storage commodities, or exotic structures"],"whatToDoNow":["Hang up and do not engage with unsolicited pension transfer offers","Consult a regulated independent financial adviser before any transfer","Check the recommended scheme on your financial regulator's register","Report the approach to your financial regulator and pension watchdog"],"faq":[{"question":"Is it ever sensible to transfer a pension?","answer":"Sometimes, but only on the advice of a regulated independent financial adviser who has assessed your specific circumstances. The decision should never be driven by a cold caller."},{"question":"The caller offered a free pension review. Is that a genuine service?","answer":"The 'free review' is the standard opening move of pension fraud — it exists to get sight of your pot and start the transfer conversation. Genuine reviews come from advisers you approach yourself."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-job-offer-that-requires-me-to-buy-starter-kits-or-materials-a-scam","url":"https://scamencyclopedia.org/questions/is-a-job-offer-that-requires-me-to-buy-starter-kits-or-materials-a-scam","question":"Is a job offer that requires me to buy a starter kit or materials before I can begin working a scam?","shortAnswer":"Almost certainly. Legitimate employers provide tools and training at their own cost — requiring workers to purchase starter kits is a defining sign of a scam.","explanation":"Starter kit job scams are common in work-from-home listings for craft assembly, envelope stuffing, product testing, and content creation. The employer asks you to purchase a starter kit, training materials, or initial stock before you can begin. Once you pay, you either receive nothing, receive materials of no practical use, or discover that the promised work does not exist. A variation involves multi-level marketing schemes that technically call kit purchases 'business investment'. Real employers bear the cost of onboarding tools and training. Any situation where you spend money to start a job should be treated as a strong warning sign regardless of how convincingly it is framed as an 'investment in your future'.\n\nThe framing does a lot of work in this scam. Calling the fee an 'investment', a 'deposit', or a 'refundable materials charge' reframes an extraction as a commitment, and some operations reinforce it by pointing to the flexibility or income you stand to gain. A useful mental test is to reverse the flow: in genuine employment, money moves from employer to worker from the first day, and any exceptions — such as regulated licence fees paid to third parties in some trades — are paid to independent bodies, never to the employer itself. If the person offering the job is also the person collecting your payment, the job is the product being sold, and you are the customer, not the hire.","redFlags":["Required to purchase a starter kit, training, or materials before starting","Kit can only be purchased through the employer or a linked site","Job found through a social media ad promising flexible high earnings","Employer has no verifiable address or phone number","Terms of the work are vague or only revealed after the kit is purchased"],"whatToDoNow":["Never pay to start a job","Research the company on a business register and independent review sites","Report fee-charging job listings to the platform and consumer authority","Seek employment through established job boards rather than social media ads"],"faq":[{"question":"What if the seller promises to refund the kit cost from my first earnings?","answer":"This promise is designed to overcome your objection and is almost never honoured. The refund commitment has no value if the employer disappears after the purchase."},{"question":"Are there any legitimate costs when starting a new job?","answer":"A few trades require licences or certifications paid to independent regulated bodies, and some roles need standard tools you would own anyway. What is never legitimate is paying the employer itself to access work."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-app-claiming-to-show-who-viewed-my-instagram-profile-safe","url":"https://scamencyclopedia.org/questions/is-an-app-claiming-to-show-who-viewed-my-instagram-profile-safe","question":"Is an app claiming to show me who viewed my Instagram or TikTok profile safe to use?","shortAnswer":"No. Instagram and TikTok do not provide this data to third-party apps, so such apps are either harvesting your credentials or selling a fictional service.","explanation":"Profile viewer apps exploit curiosity about who is watching your social media. Instagram and TikTok do not expose profile view data through their APIs, which means any third-party app claiming to reveal your viewers is lying. In practice these apps either ask you to log in with your social media credentials — capturing your username and password — or charge a recurring subscription for fictitious data. Some apps also request extensive device permissions to harvest your contact list, camera, or location. The account takeover risk is significant: once a scammer has your social media login credentials, they can use the account to defraud your contacts. If you want to know who views your content, use the official insights tools built into the platforms themselves.\n\nThe compromise from these apps often extends beyond the one account you logged in with. Many people reuse passwords, so a captured social media login is immediately tried against email, shopping, and banking services in automated attacks. Granted device permissions can persist too — a contact list uploaded once is copied forever, and it seeds convincing scams against your friends that appear to come from you. If you have ever used such an app, change the affected password anywhere it was reused, revoke the app's access in your account's connected-apps settings, and check your login activity for sessions you do not recognise.","redFlags":["App claims to show profile viewers on a platform that does not offer this feature","App requests your social media username and password","Subscription or fee required to see the viewer list","App requests excessive device permissions","App found through a social media ad rather than the official app store recommendations"],"whatToDoNow":["Do not enter your social media credentials into any third-party app","Use only the official analytics tools provided within each platform","Change your social media password if you already logged in through such an app","Enable two-factor authentication on all social accounts"],"faq":[{"question":"Does Instagram offer any official way to see profile viewers?","answer":"Instagram shows Story views and Reel reach in your official account insights, but it does not reveal which specific accounts viewed your main profile page."},{"question":"The app showed me a plausible list of viewers. How is that possible if the data does not exist?","answer":"The lists are generated from your own followers and public interactions to look believable. Plausibility is part of the product — it keeps you subscribed and logged in."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-charity-collection-tin-outside-a-supermarket-legitimate","url":"https://scamencyclopedia.org/questions/is-a-charity-collection-tin-outside-a-supermarket-legitimate","question":"Is a charity collection tin placed outside a supermarket or shop entrance legitimate?","shortAnswer":"Static charity tins in shops are usually genuine, but loose tins or collectors holding them outside can be fraudulent — always check for official permission.","explanation":"Static collection tins inside shops are typically authorised by the retailer and regularly verified — this is generally a low-risk way to donate. However, standalone tins left outside on the pavement, individuals carrying tins who approach you, or collections that appear only during high-profile disaster events are more easily faked. Anyone can print a label and shake a tin. Signs of legitimacy include the collector wearing an official tabard or lanyard with a visible registration number, the charity name matching a registered charity, and the collector being able to tell you their company or agency. For any donation where you are uncertain, donate directly through the charity's official website to be sure your money reaches its destination.\n\nAsking questions of a street collector is not rude — registered charities train their collectors to expect it, and the answers are quick to give: which charity, which organisation employs the collector, and where the permit came from. Evasion, irritation, or vagueness in response to those three questions is your answer. Be especially wary of collections that pair a tin with high-pressure sign-up clipboards, or names engineered to sound one word away from a famous charity. If you want your money to do the most good, a direct donation through the charity's own site also avoids the commission that some third-party collection agencies retain.","redFlags":["Tin is being carried by a collector who cannot show official ID","Collection appears without retailer or council permission documentation","Charity name is very similar to a well-known organisation but slightly different","Collector gives evasive answers about how funds will be used","Collection began immediately after a major disaster with no advance publicity"],"whatToDoNow":["Ask to see the collector's ID and charity registration number","Verify the charity on your country's official charity register","Consider donating directly through the charity's official website instead","Report suspicious collections to local police and the charity regulator"],"faq":[{"question":"Can I get a receipt for a tin donation?","answer":"Tins do not provide receipts. If you want a record of your donation for tax purposes, donate directly through the charity's website."},{"question":"What questions should I ask a street collector?","answer":"Ask which charity benefits, who the collector works for, and whether they have a permit for the location. Trained collectors for registered charities answer readily; evasiveness is a red flag."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-job-where-i-am-paid-to-test-apps-by-wire-transfer-a-scam","url":"https://scamencyclopedia.org/questions/is-a-job-where-i-am-paid-to-test-apps-by-wire-transfer-a-scam","question":"Is a job where I am paid to test apps and rate them and receive payment by wire transfer legitimate?","shortAnswer":"Be very cautious. Most paid app review jobs found through unsolicited messages are task scams or money-mule operations.","explanation":"App review jobs are a popular scam wrapper. In the task scam version you complete reviews, a fictitious balance accumulates, and withdrawal eventually requires an upgrade fee. In the money-mule version, payments received to your bank account are the proceeds of fraud that you are expected to forward, keeping a commission. Legitimate app testing does exist — companies like UserTesting and Testbirds pay modestly for real feedback through their own verified platforms — but these are applied to directly, not offered via unsolicited messages. If a job offer arrives by WhatsApp, Telegram, or an unknown email and involves receiving money directly to your bank account, treat it as extremely high risk.\n\nThe mule variant carries consequences beyond the lost time. Money passing through your account as part of a fraud chain can lead your bank to freeze or close the account, file reports that follow you to other banks, and in serious cases prompt a criminal investigation — even where you believed the arrangement was a job. Banks are not generally sympathetic to 'I was just processing payments for my employer' because that is precisely what money laundering looks like from their side. Any role in which your personal bank account is part of the company's payment flow is disqualifying on its face; legitimate businesses have their own accounts and payment infrastructure.","redFlags":["Job arrived via WhatsApp, Telegram, or unsolicited email","Payment arrives in your bank account for you to keep a portion and send the rest","Reviews are submitted through a private platform with no independent verification","Payment structure involves receiving more money than you earned","Employer discourages you from researching the company"],"whatToDoNow":["Refuse jobs involving receiving and forwarding payments","Use only verified platforms that you find through direct research","If you received money in error, contact your bank immediately","Report the job offer to your national fraud service"],"faq":[{"question":"Are there any legitimate paid app testing jobs?","answer":"Yes — established platforms like UserTesting, TryMyUI, and Testbirds exist. They pay modest amounts for genuine testing sessions and are applied to directly, never via unsolicited messages."},{"question":"Money has already arrived in my account from this 'employer'. What now?","answer":"Do not spend or forward it. Contact your bank, explain the situation, and follow their instructions — acting before the funds are reversed protects you from liability and shows good faith."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-free-antivirus-tool-offered-on-a-website-popup-safe-to-install","url":"https://scamencyclopedia.org/questions/is-a-free-antivirus-tool-offered-on-a-website-popup-safe-to-install","question":"Is a free antivirus tool offered in a website pop-up safe to install?","shortAnswer":"No. Pop-up antivirus offers are among the most common methods of distributing malware and adware under the guise of protection software.","explanation":"Fake antivirus pop-ups present a fake scan result showing your device is 'infected' and offer a one-click fix. Clicking installs either genuine-looking fake security software that generates constant false alerts to push you toward a paid upgrade, or actual malware that steals credentials, monitors keystrokes, or locks your files for ransom. Real antivirus software is not distributed through browser pop-ups — it is purchased or downloaded directly from established vendors' official websites or through your operating system's built-in security settings. If a pop-up claims your device is infected, close your browser entirely and run a scan with software you already have installed rather than anything offered by the pop-up itself.\n\nA detail worth internalising: no website can scan your computer from a browser page. The 'scan' animation and the list of detected threats are a pre-written performance that shows the same results to every visitor — which is why it completes in seconds and always finds something alarming. Real security software runs on your device with your permission, takes meaningful time, and does not need to sell you the cure in the same breath as the diagnosis. Modern operating systems ship with capable built-in protection, so for most people the honest answer to 'which antivirus should I install from this pop-up' is none at all.","redFlags":["Pop-up announces a virus scan result without you initiating one","One-click install offered from an unknown website","Software name slightly resembles a well-known brand","Scan completes instantly and finds many threats","Prompt to enter card details for a 'full clean'"],"whatToDoNow":["Close the browser using Task Manager — do not click on the pop-up","Run a scan with your existing installed security software","Download security software only from the official vendor website","Report the malvertising to the advertising network if identifiable"],"faq":[{"question":"What if I already installed the software from the pop-up?","answer":"Uninstall it immediately, then run a full scan with a reputable security tool. Change passwords for any accounts accessed since the install and monitor your bank statements."},{"question":"Can a website really scan my computer for viruses?","answer":"No. Browser pages cannot scan your device. Any in-page 'scan' with instant results is an animation designed to frighten you into downloading something or paying for a clean-up."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-lottery-syndicate-invitation-from-a-workplace-colleague-a-scam","url":"https://scamencyclopedia.org/questions/is-a-lottery-syndicate-invitation-from-a-workplace-colleague-a-scam","question":"Is a lottery syndicate invitation from a workplace colleague or online group a scam?","shortAnswer":"Genuine workplace syndicates exist, but online or social media syndicate invitations are often advance fee fraud.","explanation":"Workplace lottery syndicates are generally legitimate and common, but fraudulent syndicates operate in two ways. First, an online syndicate invitation — especially from a group you found through social media — collects your regular payment, never purchases tickets, and eventually disappears. Second, you are told you are already a member of a winning syndicate and must pay an 'administration fee' to claim your share. Real syndicates managed by colleagues are verifiable in person, show proof of ticket purchases, and distribute winnings transparently. Never join a lottery syndicate you cannot verify in person, and never pay a fee to claim winnings from a syndicate you do not recall joining.\n\nThe 'you are already a winner' variant deserves particular caution because it inverts the usual dynamic — instead of asking you to gamble, it tells you the gamble already paid off, and the only thing between you and the money is a small administrative step. That framing makes the fee feel like unlocking something you own rather than losing something new, which is exactly why it works. The reliable principle is the same across every prize format: genuine winnings are never released against a payment from the winner, and any organisation that structures a payout that way has told you what it is.","redFlags":["Syndicate invitation arrived online from people you have never met","You must pay an admin fee to claim winnings","No verifiable ticket purchase receipts shared with members","Syndicate organiser cannot be contacted outside the platform","Winning notification for a syndicate you have no record of joining"],"whatToDoNow":["Only join syndicates run by colleagues you can verify in person","Never pay a fee to claim lottery winnings","Report fraudulent syndicate invitations to your national fraud service","Check your bank for unauthorised syndicate subscription payments"],"faq":[{"question":"How should a legitimate workplace syndicate be managed?","answer":"A legitimate syndicate should have a written agreement, copies of purchased tickets shared with all members, and a transparent process for splitting winnings."},{"question":"I was told a syndicate I joined years ago has won. Could that be real?","answer":"If you cannot produce your own record of joining and paying in, treat the claim as fraud. Real syndicates keep member lists and contact winners through the organiser you already know — never with a fee attached."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-job-offer-in-another-country-that-requires-me-to-travel-first-a-scam","url":"https://scamencyclopedia.org/questions/is-a-job-offer-in-another-country-that-requires-me-to-travel-first-a-scam","question":"Is a job offer in another country that requires me to travel at my own expense before a contract is signed a scam?","shortAnswer":"Very likely. Legitimate overseas employers sponsoring foreign workers cover travel costs or sign a contract before any travel is undertaken.","explanation":"Overseas job scams are particularly harmful because victims lose both money and time, and in some cases end up stranded abroad. The scam typically involves an attractive job offer in a wealthier country, an 'almost finalised' contract, and a request for the applicant to fund their own travel, visa fees, or medical checks before the contract is issued. Once the money is paid, the employer becomes unresponsive or the contract never arrives. A more dangerous variant involves traffickers who use fake overseas job offers to lure victims into debt bondage or forced labour. Genuine employers who recruit internationally provide signed contracts before the candidate is expected to travel and meet all mandatory immigration-related costs themselves.\n\nThe trafficking variant makes this category more serious than a typical financial scam, and it has recognisable precursors: a vague job description with an excellent salary, insistence on a rushed departure, instructions to travel on a tourist visa 'to be converted later', and an employer who controls the travel arrangements end to end. Working on the wrong visa also leaves you exposed even in the mild cases — deportable, unprotected by labour law, and dependent on the very people who misled you. Before committing to any overseas role, verify the employer with the destination country's business registry, confirm the visa route with that country's embassy yourself, and leave copies of your documents and itinerary with someone you trust.","redFlags":["Contract not yet signed but travel is required immediately","You must pay visa fees, medical checks, or travel costs upfront","Employer communicates only by messaging app with no physical office address","Job offer was unsolicited and found on a social media group","Salary or working conditions sound unusually good for the role"],"whatToDoNow":["Never travel for a job without a signed contract in hand","Verify the employer on the business register of their country","Check with the destination country's embassy for work visa advice","Report suspicious overseas job offers to your national fraud service"],"faq":[{"question":"Is it normal for an employer to ask for copies of my passport before a contract is signed?","answer":"Passport copies are sometimes needed to begin visa sponsorship, but only after a formal offer is made and documented. They should never be requested as a precondition of receiving a job offer."},{"question":"Who pays visa and work permit costs in a genuine international hire?","answer":"Sponsoring employers typically handle and pay for the work permit process themselves. Where a candidate must pay an official fee, it goes directly to the government authority — never to the employer or a 'travel agent' they nominate."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-cryptocurrency-mixing-service-legal-to-use","url":"https://scamencyclopedia.org/questions/is-a-cryptocurrency-mixing-service-legal-to-use","question":"Is a cryptocurrency mixing or tumbling service legal to use?","shortAnswer":"In many jurisdictions cryptocurrency mixing is illegal or severely restricted because it is primarily used to obscure the origin of criminally obtained funds.","explanation":"Cryptocurrency mixers pool transactions from multiple users to obscure the traceability of funds on a public blockchain. Law enforcement agencies in the US, EU, and UK have taken action against several major mixing services, classifying them as money-laundering tools. Individuals who use mixers — even with no criminal intent — risk asset seizure, investigation for money laundering offences, and having their mixed funds flagged by regulated exchanges which may freeze accounts. There is no legitimate consumer need for a mixing service that cannot be met through normal privacy-conscious practices. If you are concerned about on-chain privacy, seek legal advice specific to your jurisdiction before using any mixing or obfuscation service.\n\nMixers also appear inside scams themselves, which is a separate reason to refuse them. Fraudsters may instruct victims to route payments through a mixer 'for security', ask supposed employees to process transactions this way, or present mixing as a step in recovering previously lost funds. In each case the real purpose is to launder proceeds while placing your identity in the transaction chain. Beyond the legal exposure, the practical costs are real: exchanges routinely freeze deposits that show mixer history, and unwinding a frozen account can take months of compliance correspondence. If anyone you are dealing with online introduces a mixer into the conversation, treat that as conclusive evidence of fraud.","redFlags":["Service is being recommended to you by someone in a crypto investment group","Service claims to 'clean' your crypto","No information about jurisdictional compliance on the service website","Service used as a step in a broader investment or recovery scheme"],"whatToDoNow":["Do not use cryptocurrency mixing services","Seek legal advice if you are concerned about the traceability of funds","Report mixing services promoted in investment scam contexts to your financial regulator","Use only regulated exchanges that comply with anti-money-laundering rules"],"faq":[{"question":"Can a recovery scammer trick me into using a mixer?","answer":"Yes — some recovery scammers ask victims to pass funds through a mixer as part of a supposed recovery process, which launders the original scam proceeds and implicates the victim."},{"question":"My exchange froze a deposit because of 'mixer exposure'. What does that mean?","answer":"Blockchain analytics flagged that the funds passed through a mixing service at some point. Expect the exchange to request source-of-funds evidence; respond honestly and seek legal advice if significant sums are held."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-text-message-from-a-delivery-company-asking-me-to-pay-a-small-redelivery-fee-a-scam","url":"https://scamencyclopedia.org/questions/is-a-text-message-from-a-delivery-company-asking-me-to-pay-a-small-redelivery-fee-a-scam","question":"Is a text message from a delivery company asking me to pay a small redelivery fee a scam?","shortAnswer":"Very likely. Delivery fee texts are one of the most widely distributed phishing formats — the small amount makes victims less suspicious.","explanation":"Parcel redelivery fee scams work precisely because the amounts are small — typically just a token sum — making victims feel the risk is low. The text claims to be from a delivery company and asks for a small fee to redeliver a held or missed parcel. Clicking the link leads to a convincing fake carrier website that collects your card details. Even if you only provide your card number for a small charge, the scammer now has your full card details for larger fraudulent transactions. Real delivery companies do not charge card fees for standard redelivery — any redelivery arrangement is managed through the carrier's app or website that you navigate to yourself. If you are genuinely expecting a parcel, log in directly to the carrier's website using a known bookmark.\n\nThe card capture is often only the first stage. Days later, many victims receive a phone call from someone posing as their bank's fraud team, referencing the exact delivery payment they made — instant credibility, because who else would know? That call then talks the victim into 'securing' their account by moving money or revealing codes, and it is where the serious losses happen. If you have entered card details on a delivery page and later receive a bank call about it, hang up and dial your bank yourself on the number from your card. The follow-up call is part of the same operation, not the rescue from it.","redFlags":["Text from an unrecognised number about a missed parcel requiring a small fee","Link in the text leads to a domain you do not recognise","Amount requested is small to seem low-risk","You are not expecting a delivery from the named carrier","Message has generic sender name and no specific parcel reference"],"whatToDoNow":["Do not click the link or enter any card details","Check your genuine parcel status directly on the carrier's official website","Report the phishing text to your national SMS fraud reporting service","Forward it to 7726 in the UK to report to your mobile provider"],"faq":[{"question":"What if I entered my card details on the fake page?","answer":"Contact your bank immediately to cancel the card and monitor for unauthorised transactions. Report the incident to your national fraud service."},{"question":"Why would scammers bother collecting such a small fee?","answer":"The fee is incidental — the real prize is your full card details and personal information entered on the fake page, which are used for larger fraud and convincing follow-up calls impersonating your bank."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-too-cheap-hotel-booking-on-a-third-party-site-a-scam","url":"https://scamencyclopedia.org/questions/is-a-too-cheap-hotel-booking-on-a-third-party-site-a-scam","question":"Is a hotel booking on a third-party website that is significantly cheaper than the official hotel rate a scam?","shortAnswer":"It could be. Fake hotel booking sites take payment and either provide no booking confirmation or generate a reservation that the hotel never received.","explanation":"Fake hotel booking sites closely mimic the appearance of legitimate online travel agencies. They list genuine hotel photos and descriptions, show competitive rates, and send booking confirmation emails that look official. Victims only discover the booking is fake when they arrive at the hotel and find no reservation under their name. Some fake sites also harvest your card details without making any booking. When searching for accommodation, book directly through the hotel's official website or a well-known, established travel agency. If using a comparison site, click through to an agency you recognise and verify the booking directly with the hotel using a phone number from the hotel's own website.\n\nThe verification call to the hotel is the step most people skip and the one that catches nearly every fake. A genuine reservation exists in the hotel's own system within a day or two of booking, under your name, with your dates — and confirming it takes two minutes. Do this well before travelling, not at check-in, so a problem is a refund claim rather than a stranded night. Timing also matters on the fraud side: fake listings and cloned agency sites multiply around peak booking seasons and major events, when demand pressure makes people book faster and check less. A price that undercuts every other channel during a sold-out period is a lure, not luck.","redFlags":["Price significantly below the hotel's own direct booking rate","Site found through a search ad rather than a trusted comparison service","Booking site domain does not match the agency name you expect","Confirmation email arrives from a free email service rather than a corporate domain","No option to pay on arrival or at the property"],"whatToDoNow":["Book directly through the hotel website where possible","Verify your reservation by calling the hotel directly after booking","Use only established, well-known travel agencies for third-party bookings","Pay by credit card for chargeback protection on travel bookings"],"faq":[{"question":"Can I get my money back if a hotel booking turns out to be fake?","answer":"If you paid by credit card, raise a chargeback claim. If you paid by bank transfer, report to your bank and national fraud service immediately."},{"question":"When should I verify my booking with the hotel?","answer":"Within a few days of booking, and again shortly before travel. Call the hotel using a number from its own website and confirm the reservation exists under your name and dates."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-online-auction-where-bids-cost-money-to-place-legitimate","url":"https://scamencyclopedia.org/questions/is-an-online-auction-where-bids-cost-money-to-place-legitimate","question":"Is an online auction where each bid costs money to place legitimate?","shortAnswer":"These are known as penny auctions. They are legal in some jurisdictions but are designed so that most bidders lose money — and some are outright fraudulent.","explanation":"Penny auction sites charge a fee for each bid placed, meaning the total amount paid by all bidders often vastly exceeds the item's value. Even if you win, you have paid for each bid placed. Fraudulent penny auction sites go further: they use software bots to artificially extend auctions, ensuring no human wins until a target revenue has been reached, or they fail to deliver items to genuine winners. Some sites are entirely fictitious and never deliver any prizes at all. Before participating in any penny auction, research the site independently for reviews from verified winners, check its trading history and company registration, and calculate the worst-case cost of losing based on the bid fees. Most participants lose money even on legitimate sites.\n\nThe advertised sale prices are the core of the illusion. A gadget 'won' for a tiny fraction of retail looks like a bargain until you count every paid bid behind that price — spread across all participants, the site frequently collects more than the item's full value, and the winner's own bid spend can approach or exceed what a shop would have charged. This structure has more in common with gambling than with shopping: you are paying repeatedly for a chance, not a product. Anyone drawn to these sites should budget for participation the way they would for a casino visit — money they can afford to lose entirely — or, more simply, buy the item at its ordinary price.","redFlags":["Each bid costs money regardless of whether you win","Auctions extend repeatedly by seconds every time a new bid is placed","No verifiable winner history or testimonials from real named winners","Items appear to sell for implausibly low prices in promotional material","Site has limited or no verifiable company registration"],"whatToDoNow":["Research any penny auction site thoroughly before buying bid credits","Calculate the maximum amount you could spend and still lose","Look for independent verified reviews from winners, not site testimonials","Avoid sites you found through a social media ad with no prior track record"],"faq":[{"question":"Can I get bid credit refunds if I do not win anything?","answer":"Most penny auction sites explicitly state bid credits are non-refundable. Check the terms before purchasing any credits."},{"question":"How is a penny auction different from a normal auction like eBay?","answer":"On a normal auction only the winner pays, and only the final price. On a penny auction every bidder pays for every bid, win or lose — the format is closer to gambling than shopping."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-investment-opportunity-shared-in-a-private-facebook-group-safe","url":"https://scamencyclopedia.org/questions/is-an-investment-opportunity-shared-in-a-private-facebook-group-safe","question":"Is an investment opportunity shared in a private Facebook group by members I do not know safe?","shortAnswer":"No. Private Facebook groups are a common distribution channel for investment fraud because the closed nature creates false credibility.","explanation":"Private Facebook group investment fraud exploits the community dynamic of closed groups. Members who appear to be regular participants post about impressive returns from a platform, add positive follow-up comments, and create an impression of peer validation. In reality, many of these members are fake accounts or paid promoters. The group's closed status makes it feel like a select community with privileged access to a good opportunity. The investment platform promoted is typically unregulated, shows fake dashboard returns, and blocks withdrawals once a sufficient amount has been deposited. Before acting on any investment discussed in a social media group, verify the platform independently on your financial regulator's register.\n\nClosed groups defeat the checks people normally rely on. Because content inside is invisible to outsiders, there are no independent reviews of what is being promoted, no journalists or regulators watching, and no dissenting voices — moderators simply remove anyone who questions the scheme, so the surviving conversation is unanimously positive by construction. That curated unanimity is then presented as evidence. Ask yourself one question about any such group: if the opportunity were genuinely this good, why would strangers recruit you into it rather than quietly investing more themselves? The recruitment is the business; your deposit is the product.","redFlags":["Investment is promoted by multiple group members you do not know personally","Group was recently created or has suspicious membership growth","Members refuse to discuss the platform outside the group","Platform promoted is not found on a financial regulator's register","Invitation to the group arrived through a DM or from an unknown contact"],"whatToDoNow":["Check the platform on your financial regulator's authorised firms register","Do not invest based on social proof from people you cannot verify","Report the group to Facebook if it appears to be an investment fraud operation","Consult a regulated financial adviser for genuine investment decisions"],"faq":[{"question":"Can a legitimate investment community exist on Facebook?","answer":"Discussion groups exist for legitimate investing topics, but they should never be the place where you make financial decisions — always verify independently."},{"question":"Everyone in the group posts winning screenshots. Could they all be fake?","answer":"Yes, easily. Screenshots are trivial to fabricate, dissenters are removed by moderators, and many 'members' are accounts run by the operators. Unanimous success stories are a hallmark of orchestration, not proof of returns."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-credit-card-number-safe-to-share-for-a-free-trial-with-no-charge-today","url":"https://scamencyclopedia.org/questions/is-a-credit-card-number-safe-to-share-for-a-free-trial-with-no-charge-today","question":"Is it safe to share my credit card number for a free trial that says there is no charge today?","shortAnswer":"Proceed with caution. Many free trials that require a card automatically charge you after a short period, and some sites use the card details for unauthorised charges immediately.","explanation":"Free trial card entry fraud works in two ways. In the first, you are enrolled in a subscription that is deliberately hard to cancel before the trial ends, resulting in a large recurring charge. In the second, the site collects your card details for immediate or delayed fraudulent use. Even when the trial is genuinely free for the first period, the business model relies on you forgetting to cancel. Before entering card details for any free trial, check whether the refund and cancellation policy is clear and easy to exercise, whether the site is a known legitimate business, and whether you can set a calendar reminder to cancel before the charge date. Consider using a virtual one-time card number from your bank for free trials if that service is available to you.\n\nA useful distinction: reputable companies use free trials to demonstrate a product they believe you will keep; subscription-trap operators use them to obtain billing authority they intend to exploit. You can usually tell which you are dealing with by how easy the exit is. A clear cancellation button, an advance reminder before the first charge, and a plainly stated renewal price all signal the first kind. A cancellation path that requires phoning a helpline with limited hours, terms that hide the renewal amount, or a trial that converts to an annual charge rather than monthly all signal the second — and are worth treating as disqualifying before you type a single card digit.","redFlags":["Cancellation process requires a phone call or is buried in the account settings","Trial period is short and the subsequent charge is large","Site is new or found through a social media ad","Terms and conditions are lengthy and hard to locate before sign-up","Site asks for your CVV on a page that does not use HTTPS"],"whatToDoNow":["Read the cancellation terms before entering card details","Set a calendar reminder to cancel before the trial period ends","Consider using a virtual card number if your bank offers one","Monitor your bank statements for trial-to-subscription charges"],"faq":[{"question":"Can I get a refund if I forgot to cancel a free trial?","answer":"Some companies refund promptly on request. If they refuse, escalate to your card issuer for a chargeback on the grounds that you did not consent to the ongoing subscription."},{"question":"What is a virtual card and how does it help with trials?","answer":"Many banks can issue a temporary card number with its own limit that you can freeze or delete after signing up. If the company tries to charge later, the payment simply fails — no dispute needed."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-message-from-a-friend-saying-they-are-in-trouble-and-need-money-now-a-scam","url":"https://scamencyclopedia.org/questions/is-a-message-from-a-friend-saying-they-are-in-trouble-and-need-money-now-a-scam","question":"Is a message from a friend saying they are in trouble abroad and need money urgently a scam?","shortAnswer":"Possibly. Account compromise and clone account scams use your friend's identity to send convincing emergency messages to their contact list.","explanation":"Social media and email account compromise fraud involves a scammer taking over your friend's account and messaging their contacts with an emergency story — stranded abroad, mugged, hospitalised, arrested — and asking for an urgent money transfer. The message may use your friend's actual name, photo, and communication style. Some versions use AI to mimic their writing. The best way to verify is to call your friend directly on their known mobile number. Do not call any number provided in the message, and do not send money until you have spoken with the person directly by voice. If your friend's account has been compromised, also warn other people in their contact list.\n\nThese messages are engineered to make verification feel unkind — a friend is suffering and you are hesitating over procedure. Expect that feeling and treat it as part of the scam rather than a reason to skip the check. A genuine friend in genuine trouble is helped, not harmed, by a voice call, and a scammer is defeated by one; there is no scenario in which calling first makes things worse. Be aware too that 'my phone was stolen, that's why I'm on this number' is the standard pre-emptive excuse — it explains away exactly the verification step that would expose the fraud, which is precisely why the script includes it.","redFlags":["Emergency request arrives by email or social DM from a friend who is normally contactable by phone","Story involves being overseas, losing all possessions, and needing money urgently","Request to transfer to a bank account or cash app you have not used with them before","Friend says not to call them as their phone was stolen","Slight differences in writing style or grammar"],"whatToDoNow":["Call your friend directly on their mobile number you already have","Do not send money until you have spoken to them by voice","Alert other mutual contacts to be aware","Report the compromised account to the platform"],"faq":[{"question":"What if my friend confirms by message but still sounds slightly off?","answer":"Only a live voice call to a number you already have is reliable verification. Text messages and DMs on the same compromised account can be answered by the scammer."},{"question":"What if the voice on the call also sounds like my friend?","answer":"Voice cloning from short audio samples is now feasible, so if anything feels off, ask about something only the real person would know — a shared memory not documented online — before sending anything."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-grant-for-starting-a-small-business-offered-by-email-real","url":"https://scamencyclopedia.org/questions/is-a-grant-for-starting-a-small-business-offered-by-email-real","question":"Is a grant for starting a small business offered by email or social media real?","shortAnswer":"Legitimate small business grants exist, but they are applied for — they do not arrive unsolicited by email or DM. Unsolicited grant messages are almost always fee fraud.","explanation":"Business grant scams target entrepreneurs and small business owners with unsolicited messages claiming they have been selected for a government or corporate grant. To 'claim' the grant, victims are asked to pay registration fees, legal fees, or insurance — with each payment generating a new fee request. Genuine business grants from governments, enterprise agencies, and foundations require a formal application, publish their criteria publicly, and never ask for payment to receive the grant. If you are looking for genuine small business funding, consult your national business support service, local enterprise partnerships, or your bank's small business advisers — not unsolicited email contacts.\n\nSmall business owners are attractive targets because their public footprint — a registered company, a website, social profiles hungry for growth — lets scammers craft messages that feel individually researched. The 'selected for funding' framing flatters exactly the ambition it targets. Notice also what genuine funders never do: they never award money to businesses that did not apply, never communicate solely through messaging apps, and never introduce fees that were absent from the published scheme criteria. If a grant offer cannot point you to a public page describing the programme, its criteria, and its application process, there is no programme.","redFlags":["Unsolicited email or DM saying you have been selected for a grant","Fee required to register, process, or release the grant","Grantor organisation cannot be verified on an official register","Grant offer expires within days creating urgency","Amount offered is very large relative to your business size or history"],"whatToDoNow":["Never pay any fee to claim a grant","Search for the grantor organisation on an official register","Use your national business support service for genuine funding guidance","Report fraudulent grant solicitations to your consumer protection authority"],"faq":[{"question":"How do I find real small business grants?","answer":"Start with your national government's business support portal, local enterprise partnerships, and banks with dedicated small business lending. Grants require applications — they are never awarded unsolicited."},{"question":"The grant email referenced my actual business name and industry. Is that meaningful?","answer":"No. Company registries and business directories are public, so personalising a fraud email with your real details takes seconds. Verify the programme exists on an official government or foundation website before responding."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-gaming-skin-marketplace-that-requires-my-steam-login-safe","url":"https://scamencyclopedia.org/questions/is-a-gaming-skin-marketplace-that-requires-my-steam-login-safe","question":"Is a gaming skin marketplace that requires me to log in with my Steam account safe?","shortAnswer":"Only if the site uses Steam's official OAuth login. Many fake skin trading sites steal your Steam credentials via a convincing fake login page.","explanation":"Steam account phishing through fake skin marketplaces is extremely common. A fraudulent site offers to trade or sell game skins and prompts you to 'log in with Steam'. The login page looks identical to Steam's real interface but is a phishing page that captures your username, password, and Steam Guard code. With these, the attacker takes over your Steam account and empties it of skins and any wallet balance. A genuine Steam login integration loads the real Steam website in your browser and your browser's address bar shows 'store.steampowered.com' or 'steamcommunity.com'. If the login page is hosted on the marketplace's own domain — not Steam's — it is fraudulent. Check your browser's address bar before entering any Steam credentials.\n\nSkin phishing targets a young audience that is often more comfortable online than cautious, and the lures reflect that: too-good trade offers arriving by Discord DM, giveaway links from compromised friends' accounts, and 'vote for my team' or 'try my game' pretexts that all end at the same fake login. Inventories worth real money make these accounts genuinely lucrative to steal, and recovering a stolen account is far slower than the theft. Beyond checking the address bar, use a mobile authenticator, treat unsolicited trade links as hostile by default, and remember that a friend's account sending you a link is not the same as your friend sending it.","redFlags":["Login page shows the marketplace's domain in the address bar rather than Steam's","Marketplace was found through a social media ad or Discord link","Skin prices are significantly above or below market value","Site requests your Steam Guard code on the same page as your credentials","No verifiable company information or trading history"],"whatToDoNow":["Always check the browser address bar before entering Steam credentials","Use Steam's official marketplace for skin trading where possible","Enable Steam Guard with an authenticator app for added account protection","Report phishing sites to Valve via Steam's official fraud report process"],"faq":[{"question":"What should I do if I already entered my Steam details on a fake site?","answer":"Change your Steam password immediately and revoke all other sessions in your account settings. Enable or regenerate your Steam Guard code and report unauthorised trades to Steam support."},{"question":"A friend sent me a trading link on Discord. Is it safe because it came from them?","answer":"Not necessarily — compromised accounts are used to spread phishing links to friends lists. Confirm with your friend through another channel before clicking, especially if the message feels generic or rushed."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-email-from-my-solicitor-asking-me-to-change-payment-details-for-a-house-purchase-safe","url":"https://scamencyclopedia.org/questions/is-an-email-from-my-solicitor-asking-me-to-change-payment-details-for-a-house-purchase-safe","question":"Is an email from my solicitor asking me to change the bank account details for a house purchase payment safe?","shortAnswer":"Do not act on it without calling your solicitor directly first. Conveyancing fraud is a major risk — scammers intercept emails and impersonate solicitors to divert completion funds.","explanation":"Conveyancing fraud is one of the most financially devastating forms of payment diversion. Scammers monitor email correspondence between homebuyers and their solicitors — either through a compromised email account or by creating convincing lookalike email addresses. Shortly before completion, when large sums must be transferred, the scammer sends a fake email from what appears to be the solicitor's address, advising that the bank account for the completion funds has changed. Homebuyers who transfer their savings to the fraudulent account may lose their entire purchase price with very limited recovery options. Before transferring any funds for a property purchase, call your solicitor on a telephone number you already have on file — not one provided in the email — and verbally confirm all payment details.\n\nThe days around exchange and completion are uniquely dangerous because everything about the fraudulent email fits your expectations: you are waiting for payment instructions, large transfers are normal, and delay feels costly. Build the defence in early instead. At the start of the transaction, agree with your solicitor how bank details will be communicated and confirm the account details verbally then, when there is no time pressure. Many firms state in writing that their bank details will never change by email — take that literally. A small test transfer confirmed by phone before sending the balance adds one more inexpensive layer to the largest payment most people ever make.","redFlags":["Email requests a change of bank account details close to a completion date","Slight variation in the solicitor's email address from previous correspondence","Urgency — funds must be transferred today to proceed with completion","New bank account is in a different name from the firm","Any change of payment details arriving by email rather than confirmed by phone"],"whatToDoNow":["Call your solicitor immediately on a number you already hold","Do not transfer funds to any new account without verbal confirmation","Report the suspicious email to your solicitor's firm","Inform your bank before making the transfer so they can flag it for review"],"faq":[{"question":"Can I recover money lost in a conveyancing fraud?","answer":"Recovery is difficult and not guaranteed. Some banks may refund under their authorised push payment fraud policies. Solicitors who have poor email security may bear liability — take legal advice immediately."},{"question":"How can I protect the completion payment in advance?","answer":"Agree the firm's bank details verbally at the start of the transaction, confirm any later change by phone on a number you already hold, and consider a small test transfer confirmed by phone before sending the balance."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-blocked-account-recovery-service-for-social-media-legitimate","url":"https://scamencyclopedia.org/questions/is-a-blocked-account-recovery-service-for-social-media-legitimate","question":"Is a service offering to recover my blocked or banned social media account legitimate?","shortAnswer":"Almost always no. Account recovery services for social media are typically scams that take payment without delivering results or steal your remaining account credentials.","explanation":"Social media account recovery fraud targets people who are frustrated after having accounts suspended or locked. Scammers advertise services claiming to 'know someone at' Facebook, Instagram, TikTok, or Twitter, or to have a special process for recovering accounts. They charge fees upfront and either do nothing, provide generic advice freely available on the platform's own help pages, or steal your remaining account credentials during the 'recovery attempt'. Real account appeals are conducted exclusively through the affected platform's official help centre. Platforms do not have intermediaries who accept payment for appeals. If your account has been locked or banned, follow the platform's official appeal process — no third party can meaningfully help.\n\nThese services find their victims where frustration is loudest — reply threads under complaints about bans, comment sections of help videos, and hashtags about locked accounts. Anyone posting publicly about a lost account is quickly contacted by 'recovery agents', which is itself worth knowing: the speed and confidence of the outreach reflects a sales operation, not a technical capability. People who ran businesses through the lost account are pressed hardest, because their desperation supports higher fees. However painful the loss, sending money or credentials to a stranger cannot restore an account and frequently converts one problem into two — the original suspension plus a fresh compromise or theft.","redFlags":["Service claims to know platform staff who can restore accounts for a fee","Payment required upfront before any appeal is made","Service found through a social media ad or direct message","Provider asks for your account username, email, and password","Recovery guaranteed within a specific timeframe"],"whatToDoNow":["Use only the platform's official help centre and appeals process","Never share your credentials with a third-party recovery service","Report fake recovery services to the platform and consumer authority","Accept that some account decisions by platforms are final"],"faq":[{"question":"Is there any legitimate service that helps with social media account appeals?","answer":"Regulated reputation management firms and lawyers can sometimes advise on appeal strategies, but they cannot influence platform decisions through payments or connections."},{"question":"I posted about my banned account and someone offered to help. Coincidence?","answer":"No — scammers actively monitor complaint threads and hashtags about locked accounts. Unsolicited recovery offers that follow a public complaint are approaches by fraudsters, not helpful insiders."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-crypto-trading-coach-who-shows-screenshots-of-profits-legitimate","url":"https://scamencyclopedia.org/questions/is-a-crypto-trading-coach-who-shows-screenshots-of-profits-legitimate","question":"Is a crypto trading coach who shows screenshots of large profits on social media legitimate?","shortAnswer":"Almost certainly not. Profit screenshots are trivially easy to fabricate or cherry-pick, and 'coaching' accounts primarily serve as funnels for investment platform fraud.","explanation":"Fake crypto trading coaches operate a two-stage fraud. First, they build credibility on Instagram, TikTok, or Twitter by posting dramatic profit screenshots and lifestyle content. Second, they offer paid coaching, a proprietary trading group, or access to a trading platform — which is either an overpriced subscription with generic advice, or a direct pathway to an investment fraud platform. Profit screenshots can be fabricated in minutes using image editing or by cherry-picking single winning trades from many losing ones. No trading approach generates the consistent returns these accounts claim. If you want to learn about investing or trading, use accredited financial education resources or regulated financial advisers — not social media personalities selling courses.\n\nThe lifestyle content is not decoration — it is the argument. Rented cars, borrowed watches, and airport lounge photos substitute for the verifiable track record that does not exist, and the target audience is people young enough to find that evidence persuasive and new enough to investing not to know what real performance reporting looks like. One structural fact cuts through all of it: someone genuinely holding a method that produced consistent outsized returns would face no need to retail it for a subscription fee, and regulated professionals who actually manage money are prohibited from marketing the way these accounts do. The louder the display of wealth, the more it is doing the work that evidence should.","redFlags":["Posts show repeated dramatic profit screenshots without any losses","Account sells access to a private trading group or coaching programme","Platform recommended is not regulated by a financial authority","Testimonials from followers who themselves have new accounts and no history","Direct message offering you a personalised trading opportunity"],"whatToDoNow":["Treat all social media trading profit screenshots as potentially fabricated","Do not join any private trading group promoted by a social media account","Verify any investment platform on your financial regulator's register","Seek financial education from accredited and regulated sources"],"faq":[{"question":"Can someone genuinely make large profits trading crypto?","answer":"Some people do — but for every large winner there are many losers. Anyone presenting only wins and offering to teach you their method is almost certainly not sharing a complete picture."},{"question":"If the coaching fee is small, what is the harm in trying it?","answer":"The fee is rarely the endpoint. Coaching funnels typically escalate toward a promoted trading platform where deposits are lost, and your engagement marks you for increasingly personal follow-up approaches."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-call-from-my-energy-supplier-about-a-smart-meter-upgrade-a-scam","url":"https://scamencyclopedia.org/questions/is-a-call-from-my-energy-supplier-about-a-smart-meter-upgrade-a-scam","question":"Is a call from my energy supplier offering a free smart meter upgrade legitimate?","shortAnswer":"Smart meter rollouts are genuine government-backed programmes, but scammers impersonate energy companies in this context to gain access to homes or collect bank details.","explanation":"Smart meter installation fraud exploits the genuine rollout of smart meters by energy suppliers. Scammers call customers pretending to be their energy company, offer a free installation, and during the conversation request direct debit details to 'update' the account. Some callers also attempt to arrange a home visit during which they steal from the property or install camera devices. Real smart meter appointments are booked through official letters or via your energy supplier's app and website — a genuine engineer requires no financial details during an installation. If you receive an unsolicited call about a smart meter, hang up and call your supplier using the number on your bill to arrange an appointment through official channels.\n\nThe home visit element makes this scam worth taking more seriously than a typical phone approach. An appointment booked through a fraudulent call places a stranger inside your home with a plausible reason to access multiple rooms, and elderly householders are disproportionately targeted for exactly that reason. The protective habits are simple and worth sharing with relatives who live alone: an installation you did not book through your own supplier does not happen, ID is checked through the supplier's phone line before the door opens rather than by looking at the badge, and no engineer visit of any kind involves discussing bank details on the doorstep.","redFlags":["Caller requests bank or direct debit details during a smart meter call","Call is unsolicited and you did not enquire about a smart meter recently","Caller pressures you to agree to an installation date immediately","Person arriving for the installation does not carry verifiable company ID","Caller ID shows your energy supplier but the number feels unfamiliar"],"whatToDoNow":["Hang up and call your supplier directly to confirm any smart meter offer","Never give financial details over an inbound call about smart meters","Ask engineers for company ID before allowing access to your home","Report suspicious calls to your energy supplier and national fraud service"],"faq":[{"question":"Are smart meters genuinely free?","answer":"In the UK and several other countries, smart meter installation is provided at no direct charge to customers as part of a national rollout programme. You should never be asked to pay for the meter or installation."},{"question":"How should I verify an engineer who arrives at my door?","answer":"Keep the door closed, call your supplier on the number from your bill, and ask them to confirm the visit and the engineer's identity. A genuine engineer expects this and will wait."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-notification-that-my-online-banking-password-was-changed-a-scam","url":"https://scamencyclopedia.org/questions/is-a-notification-that-my-online-banking-password-was-changed-a-scam","question":"Is a notification that my online banking password was recently changed something I should worry about?","shortAnswer":"If you did not change it, treat this as an urgent security incident — someone may have accessed your account and changed the credentials.","explanation":"An unexpected password change notification from your bank is a serious warning sign. This can indicate that a scammer obtained your login credentials through phishing, credential stuffing, or data breach and has changed the password to lock you out. If the notification arrives by email or SMS and you are unsure whether it is genuine, do not click any link in it. Instead, immediately call your bank using the number on your card and report the situation. Ask them to freeze the account while the access is investigated. Change any other accounts that use the same password and enable two-factor authentication on all financial accounts. Prompt action can significantly limit the damage.\n\nThere is a second possibility to hold in mind: the notification itself may be the fraud. Fake 'password changed' alerts are a phishing format designed to panic you into clicking a 'secure my account' link that leads to a credential-harvesting page — the alert manufactures the emergency it claims to report. This is why the response channel matters more than the message: whether the alert is real or fake, the correct move is identical. Never act through the notification. Go to your banking app or type the bank's address yourself, and if anything is genuinely wrong it will be visible there. Your email account deserves equal attention, since control of email enables password resets everywhere else.","redFlags":["Password change confirmation you did not initiate","Bank notification followed by a call from 'fraud prevention' asking for your details","Inability to log in to your account with your existing password","Transaction alerts for payments you did not make"],"whatToDoNow":["Call your bank immediately using the number on the back of your card","Ask to freeze the account while access is investigated","Change the email address password associated with your banking account","Enable two-factor authentication on all financial and email accounts"],"faq":[{"question":"How did someone get my banking login in the first place?","answer":"Common routes include phishing emails, credential stuffing from breached third-party sites, or malware on your device. Change all passwords that match your banking password on other sites."},{"question":"Could the password-change alert itself be fake?","answer":"Yes — fake alerts with a 'secure your account' link are a common phishing format. Never respond through the message; check your account by opening the app or typing the address yourself."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-buyer-on-craigslist-who-wants-to-pay-by-cashiers-check-and-arrange-their-own-shipping-a-scammer","url":"https://scamencyclopedia.org/questions/is-a-buyer-on-craigslist-who-wants-to-pay-by-cashiers-check-and-arrange-their-own-shipping-a-scammer","question":"Is a Craigslist or classifieds buyer who wants to pay by cashier's check and arrange their own shipping a scammer?","shortAnswer":"Almost certainly yes. This is one of the oldest and most consistent classifieds fraud patterns.","explanation":"The overpayment cashier's check scam has been running for decades. A buyer responds to a local listing, says they cannot collect in person, offers to pay by cashier's check — often for more than the asking price — and explains they will arrange their own shipper. Once you deposit the check, it appears to clear initially. You send the item to the shipper (controlled by the scammer) and refund the overpaid amount. Days later the check bounces and you lose both the item and the refunded money. Cashier's checks can take up to two weeks to fully clear and funds showing in your account do not mean the check is genuine. Only accept cash in person for local classifieds sales and meet in a public place.\n\nThe scam survives decades of warnings because it exploits a genuine gap in how banks display money: regulations in many countries require funds to be made available before a check has truly been verified, so your balance shows the deposit while the underlying instrument is still working its way back to an issuing bank that may not exist. When it bounces, the bank reverses the deposit and holds you responsible for anything you spent or refunded. The overpayment is the giveaway worth teaching anyone who sells online: there is no honest reason for a buyer to send more than the price and ask for change, ever, in any format.","redFlags":["Buyer cannot collect locally and wants to use their own shipper","Payment by cashier's check, money order, or certified check","Check is for more than the asking price with a request to refund the difference","Buyer is overly eager and willing to pay without negotiating","Communication style is formal or slightly unusual"],"whatToDoNow":["Accept cash in person only for local classifieds transactions","Never ship an item before full verified payment has cleared","Wait at least two weeks for a check to fully clear — not just show in your balance","Report the scam to the classifieds platform and your bank"],"faq":[{"question":"Can a cashier's check really be fake?","answer":"Yes. Fake cashier's checks look convincing and can fool even bank tellers initially. The bank will hold you responsible for the amount once the check bounces even though it appeared cleared."},{"question":"Why does my bank show the money if the check has not really cleared?","answer":"Availability rules require banks to release funds on a schedule that runs faster than full verification. The displayed balance is provisional — if the check later proves fake, the deposit is reversed."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-cold-email-offering-to-manage-my-amazon-or-ebay-store-a-scam","url":"https://scamencyclopedia.org/questions/is-a-cold-email-offering-to-manage-my-amazon-or-ebay-store-a-scam","question":"Is a cold email offering to manage my Amazon or eBay store and generate passive income a scam?","shortAnswer":"Almost always yes. Ecommerce automation services that promise passive income from managed stores are a well-documented investment fraud format.","explanation":"Ecommerce automation fraud involves companies offering to build and manage an Amazon or eBay store on your behalf for a large upfront fee, promising monthly passive income. Victims pay fees in the thousands, sometimes taking out loans or drawing on savings. The stores either generate no meaningful sales, charge ongoing fees that consume any revenue, or are built using policy-violating methods that get the account suspended. Some operators simply take the upfront fee and disappear. The promise of a 'done-for-you' business with guaranteed returns is a core hallmark of investment fraud. Real ecommerce businesses require ongoing work, and no legitimate service can guarantee income from a retail store.\n\nThese offers are dressed in the language of investing — 'asset', 'portfolio', 'projected returns' — precisely to justify fees far beyond what any store-building service could honestly charge. The sales process tells you as much as the product: slick webinars, countdown timers, claims that only a few client slots remain, and case studies that cannot be independently contacted. Some victims are also encouraged to finance the fee through loans or business credit, which converts a bad purchase into lasting debt. Before any large payment for a business opportunity, insist on speaking to existing clients you select from a full list rather than ones chosen for you, and treat refusal as the answer.","redFlags":["Guaranteed monthly passive income from a managed online store","Large upfront fee to set up the store","Company found through a social media ad or unsolicited email","No independently verifiable case studies or client references","Pressure to invest quickly before the opportunity closes"],"whatToDoNow":["Do not pay large upfront fees for 'automated' ecommerce businesses","Research the company independently on consumer review platforms","Be sceptical of any business opportunity promising guaranteed passive income","Report fraudulent ecommerce automation offers to your consumer protection authority"],"faq":[{"question":"Can you actually run a successful Amazon store without much involvement?","answer":"Successful ecommerce requires significant ongoing effort in sourcing, pricing, customer service, and compliance. No legitimate operator can guarantee hands-off passive income."},{"question":"The company offered financing to cover the setup fee. Is that a good sign?","answer":"The opposite. Encouraging you to borrow to pay their fee shifts all risk onto you and can leave you repaying a loan for a store that never earns. Legitimate services do not need you in debt to buy them."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-council-grant-for-home-improvement-offered-by-cold-call-legitimate","url":"https://scamencyclopedia.org/questions/is-a-council-grant-for-home-improvement-offered-by-cold-call-legitimate","question":"Is a council or government grant for home improvements offered by a cold caller legitimate?","shortAnswer":"Treat with caution. Government energy efficiency and home improvement grants exist, but the cold call format is heavily exploited by rogue traders and advance fee fraudsters.","explanation":"Home improvement grant scams piggyback on genuine government initiatives such as energy efficiency schemes, loft and cavity wall insulation funding, and boiler replacement programmes. Cold callers claim you have been pre-approved for a free or heavily subsidised improvement and send a surveyor to assess your home. The surveyor then upsells unnecessary or poor-quality work, pressures you into signing a contract on the spot, and charges far above market rate for any additional work. In the advance fee version, a fee is required to secure the grant, which never materialises. Genuine grant schemes are listed on government energy agency websites and applied for directly — they do not cold call households.\n\nThe rogue trader version can be more costly than pure fee fraud because it puts poor-quality work on your house. Botched insulation, unnecessary roof repairs, or substandard boiler installations can cause damp, damage, and expensive remediation long after the company has dissolved and re-registered under a new name — a routine manoeuvre in this sector. The 'grant' framing exists to explain why the visit is free and why the offer is urgent, but the survey always finds something, and the something always costs money. Genuine schemes never mind you taking weeks to compare quotes; only the fraudulent version needs your signature today.","redFlags":["Unsolicited cold call claiming you qualify for a home improvement grant","Surveyor wants to visit immediately and sign a contract the same day","Work quote is presented as part of the 'grant package' without independent comparison","Fee required to release or register for the grant","Company cannot provide credentials on the relevant government-backed scheme"],"whatToDoNow":["Verify the scheme on the official government energy agency website","Never sign a contract on the same day as a survey","Get at least two independent quotes for any physical work","Report rogue traders to your national consumer protection authority"],"faq":[{"question":"How do I find genuine government home improvement grants?","answer":"Check your national energy agency's official website and your local council's housing support pages. Genuine schemes list their eligibility criteria publicly and require a formal application."},{"question":"The surveyor found urgent problems with my roof or insulation. Should I act on that?","answer":"Not on their word alone. Get at least two independent assessments from firms you choose yourself. Rogue traders manufacture urgency because an independent second opinion usually ends the sale."}],"lastReviewed":"2026-08-01"},{"slug":"is-it-safe-to-log-in-to-my-bank-on-public-wifi","url":"https://scamencyclopedia.org/questions/is-it-safe-to-log-in-to-my-bank-on-public-wifi","question":"Is it safe to log in to my bank on public WiFi?","shortAnswer":"It carries more risk than a secure private connection, but is generally safe if you connect to the bank's official app or HTTPS website — the main danger is connecting to a fake hotspot.","explanation":"Public WiFi security risks have diminished significantly with the universal adoption of HTTPS encryption, which protects the content of your communications regardless of the network. The greater risk on public WiFi is a 'evil twin' hotspot: a fraudulent access point mimicking a genuine one (such as 'CoffeeShop_Free_WiFi') that intercepts traffic and may serve fake website pages. To stay safe, confirm the hotspot name with the venue before connecting, prefer using your mobile data network for banking, and never access banking on a network you did not verify. Enable your phone's automatic HTTPS-upgrade setting and consider using a VPN on public networks. Never ignore certificate warnings in your browser — they can indicate you are being intercepted.\n\nIt helps to rank the actual risks rather than fearing the phrase 'public WiFi' generally. Encrypted banking apps and HTTPS websites protect the content of your session even on a hostile network; what remains exploitable is the connection step — joining a fraudulent hotspot, accepting an unusual login portal, or installing anything the network asks you to install. A captive portal requesting only an email address is normal in cafes and airports; one requesting card details, app installs, or security certificates is not, and is your cue to disconnect. Mobile data sidesteps the entire question, which is why it remains the simplest advice for anything sensitive away from home.","redFlags":["Hotspot name is generic and you cannot verify it with the venue","Your browser shows a certificate warning on a banking site","You are prompted to install a certificate to use the network","Banking app behaves unusually or asks for additional unusual confirmations"],"whatToDoNow":["Verify the hotspot name with venue staff before connecting","Use mobile data for banking when in doubt about a WiFi network","Never proceed past certificate warnings on banking websites","Log out of banking sessions when finished and avoid saving passwords in browsers"],"faq":[{"question":"Does a VPN make public WiFi banking completely safe?","answer":"A VPN adds a meaningful layer of protection by encrypting your traffic through a private tunnel, but it does not protect you from all threats, including malware already on your device."},{"question":"The WiFi login page asked me to install a certificate or app. Should I?","answer":"No. Legitimate captive portals ask at most for an email or a checkbox. A request to install certificates or software is a strong interception signal — disconnect and use mobile data instead."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-person-who-claims-to-be-a-us-soldier-stationed-abroad-on-a-dating-site-a-scammer","url":"https://scamencyclopedia.org/questions/is-a-person-who-claims-to-be-a-us-soldier-stationed-abroad-on-a-dating-site-a-scammer","question":"Is a person who claims to be a US soldier, doctor, or engineer stationed abroad on a dating site likely a scammer?","shortAnswer":"This exact profile — overseas military or professional who cannot video call freely — is one of the most consistent romance scam personas.","explanation":"Romance scam operators frequently use the persona of a US soldier, military contractor, UN doctor, or offshore engineer. The profession explains why the person cannot meet in person, video call spontaneously, or accept money by normal transfer. Stories of being deployed to conflict zones, working on classified assignments, or being stationed far from home generate sympathy and make financial requests seem more credible. A key tell is the request to communicate on a different platform — email or WhatsApp — immediately after matching. Reverse image searching the profile photos frequently reveals they belong to a real serviceperson whose images have been stolen. The US Army Criminal Investigation Command (CID) has published extensive warnings about this exact persona.\n\nThe persona works because it pre-answers every question a cautious person would ask. Cannot video call? Operational security. Cannot meet? Deployed. Needs money routed unusually? Military banking restrictions. Each explanation sounds specific and checkable while actually being none of those things — real service members have ordinary access to their own money, standard communication channels, and leave processes that never require a partner to pay. Notice also the escalation pattern: intense affection established quickly, then a modest first request framed as temporary, then larger emergencies. The relationship timeline is a script, and the money requests are the only scenes that matter to its author.","redFlags":["Profile claims to be overseas military, contractor, or UN professional","Requests to move to WhatsApp or email quickly after matching","Photos return results for someone else in a reverse image search","Financial requests framed around leave travel costs, medical emergencies, or customs fees","Relationship intensity escalates very quickly with frequent emotional messages"],"whatToDoNow":["Reverse image search all profile photos","Request a spontaneous unscripted video call — genuine people can almost always manage one","Never send money regardless of the story given","Report the profile to the dating platform and national fraud service"],"faq":[{"question":"Are there any genuine military personnel on dating sites?","answer":"Yes, but they can video call like anyone else and do not ask for money for leave travel or customs fees. Real service members receive standard communication access."},{"question":"We have talked for months and they have never asked for money. Could it still be a scam?","answer":"Yes. Long grooming periods are an investment in a larger eventual request. The tests remain the same at any stage: spontaneous video contact, verified photos, and an absolute rule of never sending money."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-loan-shark-charging-very-high-interest-illegal","url":"https://scamencyclopedia.org/questions/is-a-loan-shark-charging-very-high-interest-illegal","question":"Is a loan shark charging very high interest rates illegal and what should I do if I am being threatened?","shortAnswer":"Illegal lending is a criminal offence in most countries. You have the right to protection and support, and your debt to a loan shark is not legally enforceable.","explanation":"Illegal moneylending — loan sharking — involves lending money at extremely high and unregulated interest rates, often with threats or intimidation to enforce repayment. In most countries, any money lent by an unlicensed lender is legally unenforceable, meaning you do not have a legal obligation to repay it. Loan sharks exploit vulnerable people with no access to regulated credit and then use fear of violence, property damage, or exposure to keep victims compliant. You are not in legal trouble for borrowing from an unregulated lender — the lender is the one committing an offence. Specialist illegal lending teams exist in many police forces, and organisations such as the England Illegal Money Lending Team (UK) or equivalent bodies in other countries offer confidential support and protection.\n\nLoan sharks often begin as something softer — a friend of a friend, someone known at work or in the neighbourhood who 'helps people out' — and the relationship hardens only after money changes hands. Records are deliberately vague or absent so the balance can never be settled: payments are taken but the debt persists, because the debt is the product. Victims stay silent out of shame or fear, which is exactly what the model depends on. Support services exist because this is recognised as exploitation rather than borrowing; contacting them does not require you to involve police at first, and dedicated teams can advise on safety before anything else happens.","redFlags":["Lender has no licence or registration number","Interest rate is not clearly stated or is impossibly high","Threats or intimidation used to collect repayments","Lender holds your bank card, benefits book, or ID documents","Debt appears to grow despite regular payments"],"whatToDoNow":["Contact your national illegal lending reporting line in confidence","Know that a debt to an unlicensed lender is legally unenforceable","Seek support from a debt charity or citizens advice service","Contact police if you are being threatened or harmed"],"faq":[{"question":"Will I get into trouble for reporting a loan shark?","answer":"No. Reporting illegal lending is protected, and authorities recognise that borrowers are victims. Specialist teams focus exclusively on prosecuting the lender."},{"question":"Where can I borrow safely if banks have refused me?","answer":"Credit unions and community lenders offer regulated small loans to people with poor credit histories, and debt advice charities can help you assess options. Any regulated route is safer than an unlicensed lender."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-fake-invoice-sent-to-my-business-email-a-scam","url":"https://scamencyclopedia.org/questions/is-a-fake-invoice-sent-to-my-business-email-a-scam","question":"Is an invoice sent to my business email for services I do not recognise a scam?","shortAnswer":"Very likely. Unsolicited invoices — sometimes called invoice fraud or billing scams — are sent hoping a busy accounts team will pay without checking.","explanation":"Invoice fraud targets businesses large and small by sending invoices for services that were never delivered or ordered, relying on companies with high invoice volumes to process them without adequate checks. The invoice may be for domain renewals, directory listings, advertising, or generic office supplies. A more sophisticated version involves compromising a real supplier's email and sending a legitimate-looking invoice with changed bank details. Before paying any invoice, verify that the service was actually ordered by someone with authority in your organisation and that the bank details match those held on file for the supplier — confirmed by phone, not by email. Implement a purchase order system and dual-authorisation for new suppliers.\n\nInvoice fraud is a numbers game played against process weaknesses rather than individuals, which means the durable fix is procedural. Small businesses are hit disproportionately because one person often handles ordering, approval, and payment, removing the natural cross-check larger firms get for free. Timing is chosen deliberately too — invoices arrive during month-end runs, holiday cover, or immediately after a genuine large project, when scrutiny is lowest. A written rule that no first-time payee and no changed bank detail is ever paid without independent phone verification costs nothing to adopt and defeats both the crude and the sophisticated versions of this fraud in one stroke.","redFlags":["Invoice for a service no one in the business recalls ordering","Bank details on the invoice differ from those previously used for this supplier","Invoice arrived unsolicited with no corresponding purchase order","Service described is vague — 'website maintenance', 'directory listing'","Urgency and late payment fee threats on a first invoice"],"whatToDoNow":["Verify all invoices against purchase orders before payment","Confirm any bank detail changes by phone using a number already on file","Implement dual authorisation for new payees","Report invoice fraud to your police and national fraud reporting service"],"faq":[{"question":"Are unsolicited invoices legally enforceable?","answer":"In most jurisdictions an invoice for services not ordered and not delivered is not legally enforceable. You can dispute it without payment, though scammers sometimes issue threatening follow-up letters."},{"question":"We already paid a fraudulent invoice. Can the money be recovered?","answer":"Contact your bank immediately — recalls sometimes succeed if the funds have not been moved on. Report to police and your national fraud service, and review your payment approval process before the next attempt."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-email-claiming-i-won-an-international-lottery-i-did-not-enter-real","url":"https://scamencyclopedia.org/questions/is-an-email-claiming-i-won-an-international-lottery-i-did-not-enter-real","question":"Is an email claiming I have won an international lottery I did not enter real?","shortAnswer":"No. You cannot win a lottery you did not enter. This is one of the longest-running advance fee fraud formats.","explanation":"International lottery scam emails have been circulating for decades. They typically claim you have won a large prize in a lottery run in a foreign country and instruct you to contact a claims agent. When you do, you are asked to pay taxes, legal fees, or insurance before the prize can be released. Each payment generates a new fee requirement. The prize never exists. Real lotteries only contact winners who entered with a verifiable ticket — they do not email random addresses about unsolicited winnings, and they never require winners to pay fees upfront. If you receive such an email, delete it without responding. Responding confirms your email address is active and invites further contact.\n\nThe format endures because it filters efficiently: the implausible premise repels sceptical recipients and selects for the small minority willing to believe, who then justify the scammer's sustained attention. Once engaged, victims are moved through an escalating relationship with a 'claims agent' who mixes bureaucratic paperwork with warmth and encouragement, making each new fee feel like progress rather than loss. Elderly and isolated people are held in these correspondences for months and their details circulated on victim lists for other frauds. If someone you know mentions a foreign lottery win, treat it as a welfare matter, not a finance question — the correspondence itself is the trap.","redFlags":["Lottery you have no memory of entering","Request to keep the win confidential","Processing fee, legal fee, or tax payment required before the prize is released","Claims agent communicates only by email or messaging app","Prize amount increases with each exchange to increase your investment"],"whatToDoNow":["Delete the email without responding","Never pay any fee to claim a lottery prize","Report it to your national fraud service","Block the sender"],"faq":[{"question":"What if the email shows my real name and address?","answer":"Personal data from breaches, marketing lists, and social media is widely available. Scammers use it to make messages feel personalised and credible — it does not mean the lottery is real."},{"question":"A relative keeps corresponding with a foreign lottery 'claims agent'. How can I help?","answer":"Approach it gently — victims often defend the correspondence because it includes friendship and hope. Focus on the fee pattern rather than blame, help them stop contact, and report the fraud together."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-discount-voucher-for-a-supermarket-shared-on-facebook-real","url":"https://scamencyclopedia.org/questions/is-a-discount-voucher-for-a-supermarket-shared-on-facebook-real","question":"Is a discount voucher for a supermarket or well-known brand shared on Facebook real?","shortAnswer":"Rarely. Brand impersonation voucher posts are widely used to harvest personal data, spread malware, or grow fake pages.","explanation":"Fake voucher and discount posts impersonating supermarkets, fast food chains, and major retailers are among the most widely shared fraud content on social media. They typically promise a substantial discount in exchange for sharing the post and completing a short survey — which collects your personal data — or clicking a link that installs adware or redirects to a subscription sign-up page. The genuine brand has nothing to do with the post. Real supermarket and retailer promotions are published on the brand's official verified social media page or official app. Before sharing any voucher post, check it is from the brand's verified official page and that the offer is listed on their official website.\n\nThe share requirement is the clever part of the design: every person who shares becomes an unpaid, trusted distributor, lending the post their own credibility with friends and family. This is why fake vouchers spread faster than most scam content and why the pages behind them accumulate large audiences that are later renamed and repurposed for other fraud — a page built on free voucher promises can wake up months later selling investment schemes to the same followers. Sharing 'just in case it's real' therefore has a cost even if you personally never click anything: it recruits your network into the funnel. When an offer matters to you, thirty seconds on the brand's official app settles it.","redFlags":["Voucher post asks you to share before you can access it","Post is from a page that slightly mimics the brand's name but is not verified","Survey required to receive the discount","Offer is unusually generous — large amount off or free products","Link in the post leads to a domain unrelated to the brand"],"whatToDoNow":["Verify any promotion on the brand's official website or app","Do not share voucher posts from unverified pages","Report fake brand impersonation posts to Facebook and the brand","Avoid surveys linked from social media posts promising prizes"],"faq":[{"question":"How can I tell if a supermarket voucher page is official?","answer":"Check for the platform's official verification badge and compare the page name and username to the brand's own website. Real offers are also listed in the brand's app."},{"question":"I shared a fake voucher post before realising. What should I do?","answer":"Delete your share, let anyone who engaged with it know it was fake, and report the original page. If you completed any survey, be alert for follow-up spam and phishing using the details you provided."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-credit-repair-service-that-guarantees-to-fix-my-credit-score-legitimate","url":"https://scamencyclopedia.org/questions/is-a-credit-repair-service-that-guarantees-to-fix-my-credit-score-legitimate","question":"Is a credit repair service that guarantees to fix my credit score legitimate?","shortAnswer":"No legitimate credit repair service can guarantee to improve your score. Services that make this promise are often scams that charge fees for work you can do yourself for free.","explanation":"Credit repair fraud targets people with poor credit who are desperate to improve their financial standing. Fraudulent services charge large upfront fees and promise to remove negative items from your credit file — including legitimate accurate information that cannot legally be removed. Some offer to create a 'new' credit identity using a credit privacy number (CPN), which is illegal. Genuine methods for improving your credit score include correcting actual errors on your credit file (which you can do for free directly with credit reference agencies), reducing outstanding balances, registering on the electoral roll, and building a history of on-time payments. No paid service can do anything for your credit that you cannot do yourself for free through legitimate channels.\n\nSome credit repair operations cause harm beyond the wasted fee. Blanket disputes filed against accurate entries can complicate your file while they are processed, and 'tradeline rental' or synthetic identity techniques sold as advanced repair are fraud that you would be participating in, not merely purchasing. The industry targets moments of desperation — a refused mortgage, a rejected car loan — when the promise of a fast fix is most tempting and least examined. The honest news is mixed but workable: real improvement is slower than anyone wants, it comes from payment history and falling balances, and every mechanism involved is free and under your own control.","redFlags":["Guarantee of a specific credit score improvement","Promise to remove accurate negative information","Offer of a 'new' credit identity or credit privacy number","Upfront fees required before any service is delivered","Advice to dispute accurate information rather than correct errors"],"whatToDoNow":["Check your credit file for errors directly with regulated credit reference agencies at no charge","Report and correct any genuine errors through the official dispute process","Never pay for a 'new' credit identity — this is illegal","Report fraudulent credit repair services to your financial regulator"],"faq":[{"question":"How long does legitimate credit improvement take?","answer":"It depends on the negative factors involved. Consistent on-time payments, reduced utilisation, and corrected errors typically begin showing results within three to six months, though significant improvement can take longer."},{"question":"Is disputing accurate negative information ever a good strategy?","answer":"No. Accurate entries are reinstated after investigation, the tactic can complicate your file, and services built on mass disputes are charging you for a process that cannot deliver lasting change."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-utility-company-contacting-me-about-an-unclaimed-rebate-a-scam","url":"https://scamencyclopedia.org/questions/is-a-utility-company-contacting-me-about-an-unclaimed-rebate-a-scam","question":"Is a utility company contacting me about an unclaimed rebate or overpayment a scam?","shortAnswer":"Often yes. Unsolicited rebate contacts are frequently used to harvest bank details or trick you into paying a small fee to receive a fictional refund.","explanation":"Utility rebate scams mimic legitimate energy or water company rebate programmes. The contact claims you are owed money from an overpayment or scheme you were automatically enrolled in, and asks you to provide bank details to receive the payment. Real utility rebates are processed to the account already on file or notified in writing — they do not require you to provide account details over an inbound call or through a link in a text. If you receive an unexpected rebate contact, hang up and call your utility provider using the number on your bill to check whether a genuine rebate is owed.\n\nRebate scams spike whenever governments announce genuine support payments for energy or water costs, because real news coverage does the scammer's persuasion for them — recipients already half-expect money and the fraudulent contact simply arrives first. The detail that unmasks the approach is always the same: a genuine credit already knows where to go, since your supplier holds your account and payment details, so any process that needs you to supply bank information is describing a payment mechanism that does not exist. Refunds you must 'claim' through a link, and rebates that require a small fee first, fail the same test for the same reason.","redFlags":["Unsolicited call or text about a utility rebate you were unaware of","Request for bank details to process the rebate","Small admin fee required to release the payment","Caller ID shows your utility provider's name","Urgency to claim before a deadline"],"whatToDoNow":["Hang up and call your utility provider on the number from your bill","Never provide bank details in response to an inbound rebate call","Check your account online directly for any genuine credit balance","Report the fraudulent contact to your utility provider and fraud service"],"faq":[{"question":"How are genuine utility rebates usually delivered?","answer":"Genuine rebates are typically applied as a credit to your account or processed to the direct debit account already registered — you do not need to provide new bank details."},{"question":"A government energy support payment was in the news. How do I claim my share safely?","answer":"Check the official government or supplier website for the scheme. Most support of this kind is applied automatically to bills or paid via existing account details — publicity around real schemes is exactly when fake claim links circulate."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-cryptocurrency-investment-advisor-on-linkedin-legitimate","url":"https://scamencyclopedia.org/questions/is-a-cryptocurrency-investment-advisor-on-linkedin-legitimate","question":"Is a cryptocurrency investment adviser who connected with me on LinkedIn legitimate?","shortAnswer":"Be very sceptical. LinkedIn is increasingly used to run professional-looking romance scams and investment fraud targeting high-earning professionals.","explanation":"LinkedIn investment fraud has grown significantly because the platform's professional context makes approaches seem credible. A scammer creates a convincing profile with work history, endorsements, and mutual connections, then connects and builds a rapport before mentioning an investment opportunity. The investment is typically on an unregulated crypto platform showing impressive returns. As with all pig-butchering style fraud, the platform blocks withdrawal and invents fees once a significant amount is deposited. The platform's professional environment makes people less guarded than they might be on a dating app, while the financial focus means investment conversations feel natural. Verify any person who discusses investment with you on LinkedIn by independently confirming their employment history and checking any platform they recommend on a financial regulator register.\n\nThe professional setting also reshapes the grooming script. Instead of romance, the scammer offers mentorship and peer respect — admiring your career, comparing portfolios, discussing markets intelligently for weeks before any platform is mentioned. High earners are deliberately selected because they have investable capital and are accustomed to acting decisively on professional advice. Endorsements, mutual connections, and a polished company page are all manufacturable and should carry no weight. The only verifications that matter are external to the platform: a regulator register entry for any firm involved, and confirmation of employment through the claimed company's own official channels.","redFlags":["New LinkedIn connection quickly pivots to discussing investment opportunities","Investment involves a platform not found on a financial regulator's register","Person's work history cannot be independently verified on the named company's website","Pressure to invest quickly to take advantage of market conditions","Withdrawal from the platform requires paying additional fees"],"whatToDoNow":["Research the person's employment history independently before trusting investment advice","Check any recommended platform on your financial regulator's register","Report suspicious investment-focused LinkedIn profiles to the platform","Never invest based on an unsolicited approach regardless of the platform"],"faq":[{"question":"Can a real financial adviser use LinkedIn to find clients?","answer":"Yes, but they are regulated and their registration is verifiable. They do not immediately push specific platforms on new connections and do not guarantee returns."},{"question":"We have mutual connections and their profile looks established. Does that help?","answer":"Very little. Mutual connections usually accepted the same cold request you did, and profiles with years of apparent history can be bought or fabricated. Verify through the regulator and the claimed employer, not the platform."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-call-saying-my-computer-has-been-used-for-illegal-activity-a-scam","url":"https://scamencyclopedia.org/questions/is-a-call-saying-my-computer-has-been-used-for-illegal-activity-a-scam","question":"Is a call saying my computer has been used for illegal activity and my accounts will be frozen a scam?","shortAnswer":"Yes. This is a variant of government impersonation and tech-support fraud. No legitimate authority contacts citizens this way.","explanation":"Computer crime impersonation scams involve a caller claiming to be from the FBI, Interpol, GCHQ, CISA, or another authority, warning that your IP address has been linked to illegal downloads, child exploitation material, or money laundering. To avoid arrest, you are told to cooperate immediately — by providing remote access to your computer, paying a settlement fee, or purchasing cryptocurrency. Real law enforcement investigates through formal legal processes and does not cold-call suspects demanding immediate payment to avoid arrest. This scam is designed to create maximum fear to bypass your critical judgement. If you receive such a call, hang up. Real law enforcement will communicate through official written notices if needed.\n\nThe accusation is chosen for its shame value. By naming offences too embarrassing to discuss, the script isolates the victim from the one thing that would end the call — telling another person — and makes even the innocent hesitate, since being investigated feels dangerous regardless of guilt. It is worth stating the procedural reality plainly: genuine criminal investigations do not warn suspects by phone, do not accept money to make cases disappear, and do not conduct justice through gift cards or cryptocurrency. An offer to settle a criminal matter with payment is not how any legal system works; it is the signature of extortion, and it should end the conversation instantly.","redFlags":["Caller claims your computer or IP is linked to illegal content","Demand for immediate payment or cryptocurrency to avoid arrest","Instruction to allow remote access to your computer to 'clear' your record","Caller insists you keep the matter secret and act immediately","Caller ID shows a government or police number"],"whatToDoNow":["Hang up immediately","Do not pay anything or install any software","Report the call to your national fraud service","Know that genuine law enforcement does not operate this way"],"faq":[{"question":"What if the caller already knows my name, address, and some account details?","answer":"Personal data is widely available from breaches and marketing databases. Knowing your details does not make the caller legitimate — real law enforcement still follows formal legal processes."},{"question":"I am worried something on my computer could actually be illegal. Does that change anything?","answer":"No — the call is still a scam, because this is not how investigations happen. If you have separate genuine concerns about your device or conduct, speak to a lawyer, not to anyone who cold-called you."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-stranger-who-found-cash-and-wants-to-share-it-running-a-scam","url":"https://scamencyclopedia.org/questions/is-a-stranger-who-found-cash-and-wants-to-share-it-running-a-scam","question":"Is a stranger who claims to have found cash and wants to share it with me running a scam?","shortAnswer":"Yes. This is a classic street-based confidence fraud known as the pigeon drop or found money scam.","explanation":"The pigeon drop is one of the oldest known confidence tricks. A stranger approaches you saying they found a wallet, envelope, or bag of cash and proposes splitting it with you. But first, they say, you both need to put up some 'good faith money' while they check with a lawyer or manager about what to do. Once you hand over your cash, the stranger and any accomplice disappear and the found money turns out to be fake or non-existent. The entire interaction is scripted by a professional fraudster. The core mechanic — using the prospect of free money to persuade you to hand over real money — is the same principle as advance fee fraud. No genuine finder of lost cash would approach a random stranger with this proposal.\n\nStreet confidence tricks share a choreography worth recognising in general form: an unexpected windfall or crisis, a second stranger who conveniently appears to confirm the story, a reason you must decide within minutes, and a step that requires your own money or valuables to unlock the gain. The accomplice matters most — corroboration from an apparently independent bystander is what converts a bizarre proposal into a believable one. Older adults are approached disproportionately, often near banks. The defence requires no cleverness in the moment, only a fixed personal rule: any street proposal involving your money and a deadline is declined without negotiation, however friendly its presentation.","redFlags":["Stranger approaches you about found cash and proposes sharing","A second person (an accomplice) appears to validate the story","You are asked to provide 'good faith' money before splitting anything","Urgency to decide quickly before the opportunity is lost","Interaction moves toward an isolated location"],"whatToDoNow":["Politely decline and walk away immediately","Do not provide any cash, cards, or personal information","Report the approach to police if it felt threatening","Warn others nearby if you feel it is safe to do so"],"faq":[{"question":"What should I do if I genuinely find lost cash or a wallet?","answer":"Hand it to the nearest police station or lost property office. The law in most countries requires found money to be declared and held for the rightful owner."},{"question":"Why do these scams so often involve a second stranger?","answer":"The accomplice poses as an independent witness who validates the story, which is far more persuasive than one person's claim. Two strangers agreeing is the oldest trust-manufacturing device in street fraud."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-rental-car-company-that-only-accepts-cash-a-scam","url":"https://scamencyclopedia.org/questions/is-a-rental-car-company-that-only-accepts-cash-a-scam","question":"Is a rental car company that only accepts cash payment a scam?","shortAnswer":"Treat with serious caution. Cash-only car rental is highly unusual for legitimate operators and removes all your payment protection and fraud recourse.","explanation":"Legitimate car rental companies accept major credit cards and provide insurance documentation, a proper rental agreement, and a clear complaints process. Cash-only operators have no verifiable payment trail and may be operating without proper licensing, insurance, or roadworthy vehicles. If the car is involved in an accident or returned with claimed damage, you have no payment record and no chargeback option to dispute fraudulent charges. Some cash-only 'rental' operations are fronts for vehicle theft — the car is taken back from you and you cannot prove you paid. When renting a vehicle, always use a card payment, verify the operator is licensed with the relevant transport authority, and photograph the car's condition before driving away.\n\nTravellers are the natural prey for this arrangement: unfamiliar with local licensing norms, short on time, and often comparing prices in a currency they do not think in. Informal operators cluster around tourist arrival points and holiday listing groups, where a cheap quote and a friendly manner substitute for paperwork. The damage-claim variant is the most common ending — vague or absent condition documentation lets the operator claim pre-existing scratches against your cash deposit, and without a card trail there is nothing to dispute through. Insurance is the deeper danger: if an unlicensed operator's vehicle is uninsured, an accident can leave you personally exposed for damage and injury in a foreign legal system.","redFlags":["Cash-only payment with no card option available","No formal rental agreement or minimal documentation","Rental company found only through a social media ad or informal listing","Operator cannot provide proof of vehicle insurance","Car condition is significantly below what is shown in listing photos"],"whatToDoNow":["Always pay for rental vehicles by credit card","Verify the rental company on your country's transport authority register","Photograph the vehicle thoroughly before and after rental","Only use operators who provide a full written rental agreement"],"faq":[{"question":"Is a small local car rental that asks for a cash deposit alongside a card payment normal?","answer":"A security deposit held on a credit card is standard practice. A requirement for the rental fee itself in cash is not normal and should be treated as a warning sign."},{"question":"What documentation should a legitimate rental always provide?","answer":"A written agreement naming the operator, proof the vehicle is insured for rental use, a recorded condition report you both sign, and a receipt for any deposit. Missing any of these, walk away."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-ai-chatbot-financial-adviser-giving-reliable-advice","url":"https://scamencyclopedia.org/questions/is-an-ai-chatbot-financial-adviser-giving-reliable-advice","question":"Is an AI chatbot offering financial or investment advice giving me reliable guidance?","shortAnswer":"No. AI chatbots are not regulated financial advisers and should never be relied upon for specific investment or financial decisions — doing so could cause serious harm.","explanation":"AI language models can produce convincing and authoritative-sounding financial text, but they are not regulated, do not know your personal financial circumstances, and can produce factually incorrect information confidently. Using AI output as the basis for a significant financial decision — such as investing savings, choosing a pension, or taking on a loan — bypasses the regulatory protections that exist for a reason. Regulated financial advisers are professionally qualified, carry liability insurance, and are required to understand your specific circumstances before giving advice. They are also held accountable if their advice is unsuitable. If you need financial advice, use a regulated independent financial adviser. AI can help you understand general concepts but cannot replace professional regulated advice.\n\nThe risk is compounded by a growing commercial layer: services that wrap a general-purpose language model in a financial interface and sell 'AI-powered advice' by subscription, sometimes implying regulatory status they do not hold, and sometimes steering users toward affiliated products. The fluency of AI output is precisely what makes it hazardous here — an error is delivered with the same confident tone as a fact, and there is no accountability, insurance, or ombudsman behind it when the error costs you money. Fraudsters have noticed the same thing, using 'our AI predicts the market' as the modern dress for the oldest promise in investment fraud: returns without risk.","redFlags":["AI tool claims to know the right investment for your specific situation","Output includes specific stock picks, guaranteed returns, or target prices","No disclaimer that the tool is not providing regulated financial advice","Third-party service claims to offer AI-powered financial advice for a subscription fee"],"whatToDoNow":["Use AI only for general financial education, not specific advice","Consult a regulated independent financial adviser for investment decisions","Verify any specific claim an AI makes against authoritative sources","Report services that present unregulated AI output as regulated financial advice to your financial regulator"],"faq":[{"question":"Can I use AI to help understand my financial options?","answer":"Yes — AI is useful for understanding general financial concepts, terminology, and processes. The line is using it to generate specific personalised advice without regulatory oversight."},{"question":"A platform advertises an AI that predicts markets with high accuracy. Is that possible?","answer":"No system reliably predicts markets, and claims of consistent AI-driven returns are the current fashion in investment fraud. Check whether the platform is on your financial regulator's register before engaging at all."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-seller-on-depop-or-vinted-who-wants-to-communicate-off-platform-a-scammer","url":"https://scamencyclopedia.org/questions/is-a-seller-on-depop-or-vinted-who-wants-to-communicate-off-platform-a-scammer","question":"Is a seller on Depop or Vinted who asks me to communicate and pay outside the app a scammer?","shortAnswer":"Very likely. Requests to move off-platform remove all buyer and seller protections that the app provides.","explanation":"Depop, Vinted, and similar secondhand fashion platforms provide integrated payment, messaging, and dispute systems that protect both buyers and sellers. Scammers — operating as either buyers or sellers — request to communicate by WhatsApp or email and pay via bank transfer or PayPal Friends and Family instead. As a buyer, paying outside the app removes your dispute rights: if the item is not delivered or is not as described, you have no route to a refund through the platform. As a seller, a buyer asking to pay by bank transfer may send a fake payment screenshot and demand shipping before the money actually arrives. Always keep all communication and payment within the official app.\n\nThe off-platform request is usually wrapped in a reasonable-sounding motive — avoiding the platform's fees, a faster deal, a small discount for your trouble. Notice what each excuse has in common: the saving is offered to you, but the protection removed is also yours. The platform's cut funds exactly the systems that make a stranger safe to trade with, and a counterparty who wants those systems gone has told you how they intend to behave without them. Moderation teams can also only act on what happens inside the app; the moment a dispute occurs over WhatsApp, you are two anonymous strangers with a disagreement and no referee.","redFlags":["Seller or buyer asks to move to WhatsApp, email, or another messaging app","Payment requested via bank transfer, PayPal Friends and Family, or Venmo","Price is offered slightly below asking to entice you to deal off-platform","Buyer sends a 'payment received' screenshot before funds are visible in the app","Seller claims the app has technical issues and payment must be made directly"],"whatToDoNow":["Keep all communication within the official platform","Only pay through the platform's integrated checkout","Report off-platform requests to the app's moderation team","Walk away from any deal where the other party insists on leaving the platform"],"faq":[{"question":"What if a seller says their bank account is not linked to the app yet?","answer":"This is a common excuse. No legitimate seller needs you to pay outside the platform — they can set up proper payment within the app before selling."},{"question":"The deal already went wrong off-platform. Do I have any options?","answer":"Report the account to the app anyway so others are protected, contact your bank or payment provider about recovery, and report to your national fraud service. Recovery is harder off-platform, which is the point of the tactic."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-bitcoin-atm-a-safe-way-to-send-money-to-someone-i-trust","url":"https://scamencyclopedia.org/questions/is-a-bitcoin-atm-a-safe-way-to-send-money-to-someone-i-trust","question":"Is a Bitcoin ATM a safe way to send money to someone I trust?","shortAnswer":"No. Bitcoin ATMs are a leading cash collection tool for scammers. Once money is inserted, it cannot be recovered.","explanation":"Scammers — particularly those running government impersonation, tech support, and romance scams — increasingly direct victims to Bitcoin ATMs as a payment method because the transaction is instant and irreversible. They may instruct victims to withdraw cash and insert it into a Bitcoin ATM, providing a wallet address to scan. The reasoning given varies: avoiding tax, paying a fine, or releasing a frozen account. No legitimate government agency, utility company, or financial institution asks for payment via a Bitcoin ATM. If anyone directs you to a Bitcoin ATM to resolve a problem or help someone, it is a scam regardless of the context.\n\nScammers favour the machines because they combine a bank's irreversibility with a corner shop's anonymity: cash goes in, cryptocurrency leaves for a wallet the victim never controls, and no teller or transfer-delay stands in between. Scripts anticipate the remaining obstacles — victims are kept on the phone throughout the deposit and coached to dismiss the on-screen fraud warnings that many operators now display, or to lie if a bystander asks questions. Those coached lies are themselves the tell: no legitimate payment in any context requires you to deceive the people around you while making it. If you are on a call and walking toward a Bitcoin ATM, the call is the crime.","redFlags":["Any organisation directs you to use a Bitcoin ATM for payment","Caller gives you a QR code or wallet address to scan at the ATM","Urgency — you must act before the police arrive, account closes, or person is released","You are told to lie to the ATM operator if asked why you are sending money","The payment is supposed to resolve a legal, tax, or financial emergency"],"whatToDoNow":["Do not use a Bitcoin ATM on anyone else's instruction","Hang up and call the relevant organisation using a number from their official website","Report the scam to your national fraud authority","Alert the Bitcoin ATM operator if you have just used one — some have fraud monitoring"],"faq":[{"question":"Is there any way to get money back after a Bitcoin ATM transaction?","answer":"Crypto transactions are irreversible. Immediate reporting to the ATM operator, police, and your national fraud authority gives you the best chance of any recovery, but it is very rare."},{"question":"Why did the caller keep me on the phone the whole time I was at the machine?","answer":"Continuous contact prevents the pause in which victims reconsider or someone intervenes. It is a control technique — and a definitive sign that the transaction served the caller, not you."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-cold-email-from-a-pr-firm-asking-me-to-review-products-for-money-a-scam","url":"https://scamencyclopedia.org/questions/is-a-cold-email-from-a-pr-firm-asking-me-to-review-products-for-money-a-scam","question":"Is a cold email from a PR firm asking me to review products for money a scam?","shortAnswer":"Treat it carefully. Legitimate product seeding exists, but cold email review-for-cash offers frequently lead to advance-fee or data harvesting scams.","explanation":"Genuine brands and PR agencies do reach out to content creators and micro-influencers, but they typically offer free products rather than upfront cash, and they do not ask you to pay for the sample first. Scam versions ask you to purchase the product on their behalf — promising full reimbursement plus a review fee — or request extensive personal details for a brand registration form. Once you pay or provide your details, neither the reimbursement nor the products arrive and the company disappears. Even where products are sent, some operations sign you up to costly subscription plans linked to any purchase you make during the 'campaign'. Ask for the brand's official website, look for a verifiable PR agency registration, and never pay upfront.\n\nSmall creators are targeted rather than large ones, and deliberately so: an account with a modest following is flattered to be noticed, unlikely to have management screening offers, and unfamiliar with how genuine brand outreach reads. Real campaigns specify deliverables, usage rights, and payment terms in a written agreement, come from a named person whose agency and role you can confirm independently, and never route through 'brand portals' that demand card details or logins. The reimbursement structure is the cleanest test of all — any arrangement whose first step is your money leaving your account is a purchase, not a partnership, whatever the email calls it.","redFlags":["Asked to buy a product and submit a receipt for reimbursement","No named PR contact with a verifiable agency profile","Cash payment offered for a review from an account you have never promoted before","Extensive personal information requested in the initial email","Tight deadline to confirm participation"],"whatToDoNow":["Verify the PR agency through their official website","Never pay for any product as part of a review arrangement","Protect your personal details until a legitimate working relationship is established","Report suspicious outreach to your email provider"],"faq":[{"question":"How do I tell if a product review offer is legitimate?","answer":"Genuine campaigns come through established influencer platforms or verified agencies. If asked to purchase a product upfront, decline — legitimate product seeding sends the item to you free of charge."},{"question":"Why would a brand approach my small account at all?","answer":"Genuine micro-influencer outreach does exist, but scammers prefer small accounts precisely because the attention feels plausible and flattering. Judge the offer by its structure — written terms, verifiable contact, no upfront cost — not by whether being chosen feels realistic."}],"lastReviewed":"2026-08-01"},{"slug":"is-it-safe-to-share-a-screenshot-of-a-payment-to-prove-it-was-sent","url":"https://scamencyclopedia.org/questions/is-it-safe-to-share-a-screenshot-of-a-payment-to-prove-it-was-sent","question":"Is it safe to share a screenshot of a payment to prove it was sent?","shortAnswer":"Only share with the recipient. Screenshots of payments can be edited to show false amounts or statuses, and some contain financial data.","explanation":"Payment screenshots — showing a Zelle, Cash App, Venmo, or bank transfer confirmation — can be edited with readily available photo editing tools. Scammers in marketplace and service frauds share fabricated screenshots claiming they have paid when they have not. They also request screenshots from victims to harvest reference numbers or account details. If someone claims to have paid you and sends a screenshot, always verify the payment in your actual account balance — do not trust a screenshot as proof. Equally, sharing screenshots of your own payments can inadvertently expose your account name, last four digits, or other identifiers.\n\nFabricated screenshots work because they arrive at the moment of maximum momentum — the deal is agreed, the buyer seems pleasant, and questioning the image feels like an accusation. Some fraudsters sharpen this with a story about bank processing delays, so that when no money appears you have a ready-made innocent explanation to reassure yourself with while you hand over the goods. Set the rule before any transaction rather than during one: value leaves your hands only after your own app or online banking, refreshed by you, shows cleared funds. Anyone who genuinely paid loses nothing by waiting for that; only someone who did not pay needs you to act sooner.","redFlags":["Buyer or client sends a screenshot instead of your account showing receipt","Screenshot has inconsistent formatting or font compared to the real app","You are asked to dispatch goods or provide a service before the payment clears","Sender rushes you to confirm and act before you have checked"],"whatToDoNow":["Always verify payments in your actual account balance, not from a screenshot","Never dispatch goods or services until the payment shows in your account","Be cautious about what financial details are visible in any screenshot you share","Report fabricated payment screenshots to the platform and report as fraud"],"faq":[{"question":"Should I ask for a screenshot as proof of payment?","answer":"No — only your own bank or payment app balance is reliable proof. A screenshot provided by someone else can be faked."},{"question":"The buyer says the payment is delayed by their bank. Should I ship anyway?","answer":"No. The delay story exists to explain why the money is not visible. Genuine transfers between most accounts complete quickly, and a buyer who really paid can wait until the funds appear."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-seller-on-craigslist-who-prefers-local-cash-only-legitimate","url":"https://scamencyclopedia.org/questions/is-a-seller-on-craigslist-who-prefers-local-cash-only-legitimate","question":"Is a seller on Craigslist or a classifieds site who insists on local cash-only safe?","shortAnswer":"Cash-in-person is actually safer for high-value items — but be alert to robbery setups and counterfeit currency risks.","explanation":"Cash-only in-person classifieds sales are the traditional model and can be legitimate. However, criminals exploit the format in two ways. First, a 'robbery at meet-up' where the seller — or a buyer posing as one — leads you to an unsafe location to steal cash or goods. Second, payment with counterfeit notes. To stay safe, meet in a well-lit public place — ideally a police station's designated safe exchange zone — bring a companion, and check cash carefully. For high-value items such as electronics, verify serial numbers haven't been reported stolen before handing over cash. Never meet at your home or a secluded location regardless of how friendly the seller seems.\n\nMost in-person classifieds meetings pass without incident, and the precautions above are cheap insurance rather than signs of a broken format. The pattern that should genuinely change your plans is a counterparty who works to move the meeting somewhere quieter after it was agreed — a new address at the last minute, a request to come to a house 'because the item is heavy', or an evening time proposed for no clear reason. Location control is the setup for the robbery variant, and a legitimate buyer or seller has no motive to resist a busy public spot. For expensive items, completing the exchange inside a bank lobby also lets cash be checked and deposited on the spot.","redFlags":["Seller or buyer suggests meeting at a quiet or remote location","Item is very high value and seller accepts only large cash notes","Seller is unusually insistent on meeting at an unusual time","Story behind the item changes between messages"],"whatToDoNow":["Meet only in a busy public place, ideally a police station safe exchange zone","Bring a companion and let someone know where you are going","Check notes for authenticity using a pen or UV light","Run serial numbers of electronics through stolen goods databases"],"faq":[{"question":"Are police station exchange zones widely available?","answer":"Many police services in the US, UK, and other countries offer designated safe transaction areas. Check your local police service website for locations."},{"question":"The other party keeps changing the meeting place. Should I go ahead?","answer":"No. Late relocation toward quieter venues is the classic setup for robbery at a classifieds meet. Restate a busy public location and treat refusal as the end of the deal."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-whatsapp-group-added-to-by-strangers-for-investment-a-scam","url":"https://scamencyclopedia.org/questions/is-a-whatsapp-group-added-to-by-strangers-for-investment-a-scam","question":"Is being added to a WhatsApp group by strangers for investment tips a scam?","shortAnswer":"Yes. Being added without your consent to a WhatsApp investment group is the setup for a classic group investment fraud.","explanation":"You receive a notification that you have been added to a WhatsApp group — often with a name suggesting trading, investment, or a mentorship programme. The group appears active with participants sharing successful trade screenshots and positive commentary. A group administrator or mentor encourages all members to follow specific investment signals on a trading platform they promote. In reality, all other group members are either fake accounts or hired participants. The platform is fraudulent. Any investment made on it is lost when members try to withdraw and discover the platform requires escalating fees before releasing funds. Leave any group you were added to without your consent.\n\nStaying to observe is more dangerous than it feels. The group is a performance staged for the handful of real people inside it, and everything you watch — the celebrations, the withdrawal confirmations, the mentor's patient market commentary — is calibrated to erode scepticism over days or weeks. Merely remaining signals receptivity, and the private follow-up message from the admin typically lands soon after. Adjusting your messaging app's privacy settings so that only contacts can add you to groups closes the door on the whole category, and it is worth doing on behalf of less wary family members while you are at it.","redFlags":["Added to a group without requesting to join","Group members share frequent screenshots of profits","A specific trading platform is recommended by the group admin","Group admin or mentor contacts you privately to guide your investment","Investment returns appear far above realistic market rates"],"whatToDoNow":["Leave the group immediately","Do not contact the admin or follow any investment links","Block the numbers that added you","Report the group to WhatsApp"],"faq":[{"question":"What if some members in the group seem to be real people I can verify?","answer":"Profile photos and names can be stolen from real accounts. You cannot verify group members through the group itself. All participants may be controlled by the same operation."},{"question":"How do I stop strangers adding me to groups in future?","answer":"In your messaging app's privacy settings, restrict who can add you to groups to your contacts only. Strangers then have to send an invitation you can simply ignore."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-peer-to-peer-payment-request-from-a-stranger-a-scam","url":"https://scamencyclopedia.org/questions/is-a-peer-to-peer-payment-request-from-a-stranger-a-scam","question":"Is a peer-to-peer payment request from a stranger a scam?","shortAnswer":"Yes. Unsolicited payment requests from people you don't know on Cash App, Venmo, or PayPal are either direct fraud attempts or money mule setups.","explanation":"Strangers send payment requests on peer-to-peer apps for various reasons, all fraudulent. Some simply hope the recipient accepts by mistake. Others follow a story — 'I accidentally sent money to your account and need it back' — when no money was ever sent. In the mule variant, money is deposited into your account first and you are asked to forward it on; the initial deposit is later reversed, leaving you liable for what you forwarded. You should never accept, approve, or respond to a payment request or unusual incoming payment from someone you don't know. Check your actual bank balance rather than trusting app notifications, which can be manipulated in screenshots.\n\nThe 'accidental payment' variant deserves particular respect because it recruits your honesty against you. Money genuinely appears in your account, the sender's distress reads as sincere, and returning it feels like basic decency. But the deposit typically comes from a stolen card or a hijacked account, and when the rightful owner reverses it, your account gives back the original while your 'return' payment — sent to a different account the scammer actually controls — is gone from your own funds. The decent and the safe response are the same one: leave the money untouched, tell your bank or the app's support team, and let them resolve it through their own channels.","redFlags":["Stranger requests payment or claims to have accidentally sent you money","You are asked to forward money to a third party after receiving a payment","Incoming payment appears but the sender immediately requests a return","Story is elaborate — emergency, wrong number, overseas circumstance"],"whatToDoNow":["Decline all payment requests from people you don't know","Check your actual bank balance independently before forwarding any money","Report unexpected requests to the payment platform","If you forwarded money, contact your bank immediately"],"faq":[{"question":"What if the stranger says it is urgent and they are in trouble?","answer":"Urgency and distress are designed to override your caution. Decline, verify with a direct phone call if you think you might know them, and never forward money based on a message alone."},{"question":"Money really did arrive in my account from a stranger. Isn't returning it the honest thing to do?","answer":"Return it only through your bank or the platform's support process, never by sending a new payment yourself. If the original deposit is reversed later, a payment you sent 'back' comes out of your own money."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-course-certificate-i-bought-online-recognised-by-employers","url":"https://scamencyclopedia.org/questions/is-a-course-certificate-i-bought-online-recognised-by-employers","question":"Is a course certificate I bought online recognised by employers?","shortAnswer":"Often not. Many online certificate sellers have no accreditation and their qualifications carry no weight with employers or licensing bodies.","explanation":"A growing industry sells professional-looking certificates for short online courses in IT, healthcare, safety, childcare, and other fields. These range from legitimate online learning with recognised accreditation to entirely fabricated credentials sold as 'career boosters'. If a role requires a specific regulated qualification — such as a food hygiene certificate, a forklift licence, or a healthcare credential — only certificates from bodies recognised by the relevant industry regulator are valid. Employers and regulators can usually verify qualifications through official awarding body registers. Using a fake or non-accredited certificate in a regulated field can constitute fraud and create serious safety risks.\n\nCertificate mills flourish because they sell something psychologically real — the feeling of progress toward a better job — at a price that undercuts the genuine article. Their marketing borrows the vocabulary of legitimate education ('accredited', 'internationally recognised', 'industry approved') while the accrediting bodies cited are often entities the mill itself created. The practical test cuts through the branding: accreditation only means something when the body granting it is one your target employer or regulator actually recognises, which you can establish with a direct question to an employer or a check of the regulator's published list. Time spent on that check before paying is never wasted; discovering the problem in a job interview is the expensive version.","redFlags":["Certificate obtained in hours without practical assessment","Awarding body cannot be found on any official register","Certificate is for a role that legally requires a regulated qualification","Price is very low compared to the legitimate course","No expiry date or renewal requirement despite the industry having mandatory refreshers"],"whatToDoNow":["Check whether the qualification requires official accreditation in your field","Verify the awarding body through the relevant regulatory body's register","Do not use an unrecognised certificate for a regulated role","Report certificate mills to your national trading standards authority"],"faq":[{"question":"What if the course platform has thousands of positive reviews?","answer":"Reviews reflect satisfaction with the experience, not whether an employer or regulator will accept the credential. Always check the awarding body independently."},{"question":"How do I check whether an awarding body is genuinely recognised?","answer":"Ask the regulator or a target employer in your field directly, or consult the regulator's published list of approved awarding organisations. If the body appears only on the course seller's own website, treat it as unrecognised."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-message-that-my-facebook-or-instagram-account-will-be-disabled-a-scam","url":"https://scamencyclopedia.org/questions/is-a-message-that-my-facebook-or-instagram-account-will-be-disabled-a-scam","question":"Is a message saying my Facebook or Instagram account will be disabled a scam?","shortAnswer":"Almost certainly yes. Account-disabling threats sent by message are phishing attacks designed to steal your social media credentials.","explanation":"Scammers send messages — often appearing to come from 'Meta Support' or a similar-looking account — claiming that your Facebook or Instagram account has violated community standards and will be permanently disabled unless you verify your identity within 24 hours. The link leads to a convincing fake login page that steals your username and password, and sometimes a two-factor authentication code. The attacker then takes over your account to scam your followers or sell the account. Meta communicates real policy actions through the official Support Inbox inside the app — never by DM, external link, or email requesting your password.\n\nBusiness accounts and creators are hit hardest by this format, because an account that generates income makes the threat of deletion genuinely frightening and the owner correspondingly hasty. Variants aimed at them cite 'copyright strikes' or 'ad account violations' and sometimes arrive via the platform's own advertising or messaging systems, lending false authenticity. The structural tell survives every variation: real enforcement never asks you to prove who you are by typing your password into a page reached from a message. Losing the account to the 'verification' is the outcome the message threatens and the outcome it delivers — the threat and the theft are the same act.","redFlags":["Message arrives via DM rather than the official in-app support inbox","Link leads to a domain other than facebook.com or instagram.com","Urgency — account disabled in 24 hours unless you act","Asks you to enter your login credentials or a verification code","Sender account has few followers and recent creation date"],"whatToDoNow":["Do not click any link in the message","Check your official Support Inbox in the app for any genuine notices","Report the message to the platform","If you entered credentials, change your password and review connected apps immediately"],"faq":[{"question":"Could the message have come from a hacked account I recognise?","answer":"Yes. Scammers use compromised accounts to send phishing links to friends lists. Even if you recognise the sender, treat any login request by DM with suspicion."},{"question":"I run a business page. Should I treat these warnings differently?","answer":"Only by being more careful, not less. Business-targeted versions cite ad or copyright violations to raise the stakes, but the rule is identical: check the official Support Inbox and never enter credentials via a message link."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-prize-notification-sent-by-official-looking-letter-in-the-mail-real","url":"https://scamencyclopedia.org/questions/is-a-prize-notification-sent-by-official-looking-letter-in-the-mail-real","question":"Is a prize notification sent by official-looking letter in the mail real?","shortAnswer":"No. Printed prize letters that say you have won a car, cash, or holiday are scams that require a fee to claim the non-existent prize.","explanation":"Mail prize notifications are a long-running advance-fee scam. The letter is printed on professional-looking paper with logos, gold seals, and a cheque for a fictional prize amount. To claim, you must call a premium-rate number, visit a website, or send a small 'administration' or 'tax' fee. Once the fee is paid, the prize never arrives and contact ends. Some letters use real-sounding competition body names. Genuine prize draws notify winners by recorded delivery and never require a fee to claim — expenses for a real prize are covered by the promoter. If you receive one, do not call the number or send any money.\n\nPostal prize fraud targets older people almost exclusively, and responding once has a compounding cost: respondents are added to so-called sucker lists that are sold between fraud operations, after which the volume of prize letters, fake clairvoyant appeals, and catalogue scams multiplies. Some long-term victims send small amounts weekly for years, sustained by personalised letters that mimic friendship. If you help manage an older relative's affairs, a sudden increase in colourful official-looking post, cheque stubs to unfamiliar companies, or secrecy around mail are practical warning signs worth acting on gently — the shame victims feel is often the biggest barrier to stopping the losses.","redFlags":["Letter says you have won a substantial prize you have no memory of entering","Fee, tax, or processing charge required to release the prize","Premium-rate telephone number to claim","Letter was addressed to your name using data likely sourced from marketing lists","Urgency — prize must be claimed within a short window"],"whatToDoNow":["Do not call any premium-rate number or send any money","Discard the letter or keep it as evidence if reporting","Report to your national postal fraud or consumer protection authority","Alert elderly relatives who may be on mailing lists targeted by this scam"],"faq":[{"question":"The letter has my full name and address — could it be genuine?","answer":"Name and address mailing lists are widely sold for marketing purposes. Having your details does not make the prize real."},{"question":"An elderly relative keeps receiving and answering these letters. What can I do?","answer":"Raise it without blame — shame keeps many victims silent. Help them report to the postal fraud authority, ask their bank about payment blocks, and consider mail redirection or opt-out services to cut the volume."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-job-ad-that-shows-a-known-company-logo-always-genuine","url":"https://scamencyclopedia.org/questions/is-a-job-ad-that-shows-a-known-company-logo-always-genuine","question":"Is a job ad that shows a known company logo always genuine?","shortAnswer":"No. Scammers routinely copy company branding to make fake job listings look legitimate.","explanation":"Fraudulent job postings often reproduce the exact logo, colour scheme, and boilerplate text of well-known employers. They appear on legitimate job boards because platforms cannot always verify each poster in advance. The listing may offer a salary above market rate, claim minimal experience is required, and ask for your contact details or personal information early in the process. When you respond, the fake recruiter conducts a brief interview by text or email — no video call — then sends an offer letter requiring you to pay for equipment, training, or a background check. Always verify job openings through the company's official careers page before responding to any advert.\n\nThe deeper aim of these listings varies. Some exist purely to collect fees disguised as onboarding costs. Others harvest the personal information a job application naturally contains — identity documents, address history, bank details for 'payroll setup' — which is then used for identity fraud. A third group recruits money mules, presenting the movement of funds through your account as a normal part of the role.\n\nThe most reliable check takes only a minute: open the company's official careers page in a separate tab and search for the vacancy there. If it does not appear, or the application route differs from the one in the advert, treat the listing as fake. Genuine recruiters can always be verified through the company's main switchboard, and no legitimate employer charges candidates to start work.","redFlags":["Salary notably above market rate for the role described","Interview conducted entirely by text or email with no video","Offer arrives quickly with no real vetting","Equipment, training, or background check fee requested","Employer email address does not match the official company domain"],"whatToDoNow":["Search the company's official website for the same job listing","Call the company's main line to verify the recruiter's name and role","Never pay any fee as part of a job application process","Report fake listings to the job board and company directly"],"faq":[{"question":"What if the job is listed on a major job board?","answer":"Major platforms allow anyone to post and use any branding. Presence on a reputable board is not verification of the employer's identity."},{"question":"The recruiter's email uses the company name — is that proof?","answer":"No. Lookalike domains and slightly altered spellings are easy to register, and display names can show anything. Check the exact domain against the company's official website, and confirm the person exists by calling the main office number."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-buy-one-get-one-free-online-offer-requiring-my-card-details-safe","url":"https://scamencyclopedia.org/questions/is-a-buy-one-get-one-free-online-offer-requiring-my-card-details-safe","question":"Is a buy-one-get-one-free online offer requiring my card details safe?","shortAnswer":"Not unless it comes from a verified, well-known retailer. Free offers requiring card entry are frequent subscription traps or data theft operations.","explanation":"Advertisements promising a free product — just pay shipping — or a BOGO deal appear constantly on social media. When you enter your card details to pay the small shipping charge, you may be signing up for a recurring monthly subscription in the small print, or your card details are stolen outright. The fine print on subscription traps often authorises full-price charges after a short trial period, and cancellation is made deliberately difficult. These ads frequently impersonate recognisable brands. Before entering any card details on an offer site, verify the retailer is authentic, read the full terms and conditions, and check for recurring charge clauses.\n\nThe subscription-trap model relies on the gap between what the advert shows and what the checkout terms say. The headline offer prices the product at almost nothing, while the agreement you technically accept authorises repeat billing at a much higher rate. Because you did enter your card details on a page that disclosed the terms somewhere, disputing the charges can take persistence — which is exactly what the operators count on.\n\nA practical safeguard is to treat any 'free' offer that needs a card as a purchase decision, not a giveaway. If you would not buy the product at full price from this seller, do not hand over card details for the free version. Where your bank offers virtual card numbers, use one with a low limit for trials so any hidden billing simply fails.","redFlags":["Ad appeared on social media rather than on the brand's own channels","URL does not match the official brand domain","Offer requires card details for a small or zero shipping charge","Terms and conditions mention recurring billing or auto-enrolment","No clear cancellation policy"],"whatToDoNow":["Read the full terms before entering card details","Use a virtual or single-use card number for trial offers","If charged unexpectedly, contact your bank for a chargeback","Report the ad as misleading to the social media platform"],"faq":[{"question":"Is free-plus-shipping ever a genuine offer?","answer":"Yes, some legitimate companies use it as a marketing tool, but they make the subscription terms clear. If the offer obscures what you are agreeing to, do not proceed."},{"question":"I've spotted a recurring charge from one of these offers — can I stop it?","answer":"Yes. Contact your card issuer, tell them you did not authorise ongoing billing, and ask them to block the merchant. Cancel with the company in writing as well, and keep copies. If charges continue, request a chargeback and consider replacing the card."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-telegram-channel-run-by-a-hacker-claiming-to-sell-stolen-data-legitimate","url":"https://scamencyclopedia.org/questions/is-a-telegram-channel-run-by-a-hacker-claiming-to-sell-stolen-data-legitimate","question":"Is a Telegram channel claiming to sell stolen data or hacking services legitimate?","shortAnswer":"These channels are almost always scams. They take payment for services they cannot deliver, or the 'service' itself is illegal.","explanation":"Telegram hosts thousands of channels advertising stolen credentials, database dumps, social media account hacks, and 'hire a hacker' services. Most are exit scams: they take cryptocurrency payment, deliver nothing, and block the buyer. A minority deliver low-quality or fabricated data dumps that are worthless. In both cases the buyer has been defrauded with no legal recourse. Engaging with these services also exposes the buyer to criminal liability for handling stolen data or commissioning unlawful access, even if they receive nothing in return. These channels survive by cycling through new names after enough complaints.\n\nThe 'reviews' and 'vouches' that fill these channels are manufactured. Admins post fake testimonials from accounts they control, and some display doctored screenshots of successful jobs. Escrow bots that claim to protect buyers are usually run by the same operator, so the appearance of a safeguard is itself part of the fraud.\n\nThere is also a real risk beyond losing the payment. Handing over your own account details, a target's information, or proof of payment gives the operator material to blackmail you with later — threatening to expose the request is a known follow-up move. The only safe course is not to engage at all.","redFlags":["Service advertised on Telegram, dark web forums, or anonymous accounts","Payment in cryptocurrency with no refund option","Claims to sell database dumps, hacked accounts, or custom hacks","Channel reviews are positive but accounts created recently","No verifiable track record outside the platform"],"whatToDoNow":["Do not engage or pay — you will be defrauded or implicated in a crime","If you have been scammed, report to your national fraud authority","If your own data appears in a dump, change passwords and enable 2FA"],"faq":[{"question":"What if I want to hire a hacker to recover my own account?","answer":"Legitimate account recovery goes through the platform's official support process, not a third-party Telegram channel. Any unsanctioned access to accounts is illegal regardless of ownership claims."},{"question":"Could I get in legal trouble just for asking?","answer":"Commissioning unauthorised access to accounts or data can be a criminal offence in many jurisdictions even if nothing is delivered. Beyond the legal exposure, you hand the scammer evidence they can later use to pressure or blackmail you."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-dating-app-profile-that-moves-very-fast-emotionally-a-scammer","url":"https://scamencyclopedia.org/questions/is-a-dating-app-profile-that-moves-very-fast-emotionally-a-scammer","question":"Is a dating app profile that moves very fast emotionally a scammer?","shortAnswer":"It is a major warning sign. Rapid emotional bonding — 'love bombing' — is a deliberate technique used in romance scams.","explanation":"Love bombing means overwhelming a new match with affection, compliments, and intensity in a very short time. Within days the person may call you their soulmate, talk about a future together, and communicate constantly. This emotional acceleration is designed to create attachment before you can assess the person rationally. The goal is to lower your defences so that when a crisis or opportunity is eventually presented — requiring money — you feel a deep enough bond that you want to help. Healthy relationships develop at a natural pace. If a person you have never met is professing deep love within the first week, slow down and assess objectively.\n\nLove bombing works because it feels wonderful. Constant attention, flattery, and talk of destiny trigger genuine emotional responses, and the scammer mirrors your interests and values to accelerate the bond. Many victims later describe the early weeks as the most attentive relationship they had ever experienced — that intensity is the product, and it is manufactured deliberately.\n\nThe test is not how the person makes you feel but how they respond to friction. Ask to video call at a specific time, suggest meeting in a public place, or simply slow your reply rate. A genuine match adapts; a scammer deflects, produces emergencies, or escalates the emotional pressure. Anyone who makes you feel guilty for verifying who they are has answered the question for you.","redFlags":["Extreme affection and declarations of love within days of matching","Persistent daily contact across multiple channels","Profile photos look professionally taken or unusually perfect","Cannot or will not do a live video call","Life story features hardship designed to elicit sympathy"],"whatToDoNow":["Slow the pace and notice how the person reacts — genuine people respect boundaries","Reverse image search their profile photos","Never send money to someone you have not met in person","Talk to a trusted friend or family member about the relationship"],"faq":[{"question":"Is it possible to fall genuinely in love this quickly?","answer":"Rapid feelings can be genuine, but a trustworthy person will not pressure you or be upset if you ask to go more slowly. Resistance to slowing down is itself a red flag."},{"question":"Should I confront them if I suspect a scam?","answer":"There is little to gain. Scammers work from scripts and will have persuasive answers ready. Stop responding, keep your messages as evidence, report the profile to the app, and talk it through with someone you trust offline."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-university-bursary-or-grant-email-i-didnt-apply-for-real","url":"https://scamencyclopedia.org/questions/is-a-university-bursary-or-grant-email-i-didnt-apply-for-real","question":"Is a university bursary or grant email I didn't apply for real?","shortAnswer":"No. Unsolicited bursary or grant emails targeting students are phishing attacks or advance-fee scams.","explanation":"Students are targeted by scam emails claiming they have been selected for a bursary, emergency fund, or educational grant. The email appears to come from the university financial aid office, a charitable foundation, or a government body. To claim the money, you are asked to click a link and verify your student portal credentials — which are then stolen — or you are told to pay a small processing fee to release the funds. Genuine university bursaries require you to apply, are communicated through official student portal notifications, and never charge a fee to receive funds. If you receive an unsolicited award notification, verify it by contacting your student services office directly.\n\nThese campaigns cluster around the points in the academic year when money is tight — enrolment, exam periods, and the weeks before loan instalments arrive. Compromised student accounts make the problem worse: once one mailbox is taken over, the scam is re-sent internally, so a message from a fellow student's address is no guarantee of safety. Stolen portal credentials are valuable in their own right, giving access to personal data, coursework, and sometimes the ability to redirect payment details.\n\nTreat any financial award you did not apply for as unverified until student services confirms it. Use contact details from the university's own website, not those in the message, and encourage coursemates who received the same email to report rather than click.","redFlags":["Award notification arrives unsolicited for something you never applied for","Link leads to a credential login page outside the university domain","Processing fee required before funds are released","Email addresses you generically — 'Dear Student' — not by name","Urgent deadline to claim the funds"],"whatToDoNow":["Do not click links or pay any fees","Contact your university student finance office directly to verify","If you entered credentials, change your student portal password immediately","Report the email to your university IT security team"],"faq":[{"question":"What if the email came from an address that looks like my university?","answer":"Email domain spoofing allows senders to imitate official-looking addresses. Always go directly to your official student portal rather than clicking email links."},{"question":"I clicked the link but did not enter my login — am I at risk?","answer":"Clicking alone is usually low risk, but change your password if you are unsure what the page did, and report the link to your university IT team so they can warn other students and block the domain."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-debt-collector-who-cannot-provide-written-proof-of-debt-legitimate","url":"https://scamencyclopedia.org/questions/is-a-debt-collector-who-cannot-provide-written-proof-of-debt-legitimate","question":"Is a debt collector who can't provide written proof of debt legitimate?","shortAnswer":"No. Legitimate debt collectors must provide written validation of any debt on request — if they refuse, it is likely a scam.","explanation":"Phantom debt scams involve callers claiming you owe money on an old loan, medical bill, or credit account. They create urgency by threatening legal action, wage garnishment, or arrest. Genuine debt collectors are legally required in most countries to provide written validation of the debt, including the creditor's name and the amount owed, when you request it. If a caller refuses to send anything in writing, cannot name the original creditor, or demands immediate payment by unusual methods like gift cards or wire transfer, it is almost certainly fraudulent. Never pay a debt to someone who called you unprompted without first verifying it in writing.\n\nPhantom debt callers often work from purchased data — old loan applications, breach records, expired debts — which lets them recite personal details with unsettling accuracy. Some claim to be lawyers or process servers, warn that papers will be filed today, or mention a court date. The performance is designed to make paying feel safer than questioning. In reality, requesting validation is a routine, protected step that no genuine collector objects to.\n\nWhile you verify, avoid confirming or volunteering additional details such as your employer, bank, or card numbers. Check your credit report independently for any real debt matching their claim. If nothing appears and the caller cannot produce written validation, end contact and report the calls.","redFlags":["Collector refuses to provide written validation of the debt","Threatens immediate arrest or legal action if you do not pay today","Demands payment by gift card, wire transfer, or cryptocurrency","Cannot provide the name of the original creditor","You have no memory of the debt they describe"],"whatToDoNow":["Request written debt validation in writing — do not pay without it","Check your official credit report for any legitimate outstanding debts","Report the call to your consumer protection authority","If threatened with arrest, know that civil debt is not a criminal matter"],"faq":[{"question":"What if the collector has my social security or national insurance number?","answer":"Personal identifiers can be obtained from data breaches. Possessing them does not mean the debt is real or that the caller is a legitimate collector."},{"question":"Should I pay a small amount just to make them stop?","answer":"No. Any payment marks you as responsive and can invite escalating demands. In some places a partial payment can even complicate your legal position on a genuine old debt. Verify in writing first, always."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-online-ticket-seller-asking-for-payment-by-friends-and-family-a-scam","url":"https://scamencyclopedia.org/questions/is-an-online-ticket-seller-asking-for-payment-by-friends-and-family-a-scam","question":"Is an online ticket seller asking for payment by friends and family a scam?","shortAnswer":"Yes. Requesting friends-and-family payment for tickets removes all buyer protection and is a classic scam signal.","explanation":"Concert and sports event ticket scams frequently operate through social media, classified ads, and messaging apps. The seller claims to have spare tickets but insists on payment via PayPal Friends and Family, Venmo, or a bank transfer because 'fees are lower'. These methods have no buyer protection — there is no chargeback, and if the tickets turn out to be fake or never arrive, you have no recourse through the payment platform. Genuine private ticket resellers accept protected payment methods and can provide proof of purchase. If a seller refuses anything other than a fee-free personal payment, walk away.\n\nThe fee excuse is the tell. Buyer-protected payments cost sellers a small percentage, and a legitimate seller of genuine tickets accepts that cost as normal. A seller who refuses protection is telling you they expect a dispute — because the tickets are counterfeit, already used, sold to several buyers at once, or simply do not exist. Screenshots of e-tickets and booking confirmations prove nothing, as the same file can be sold repeatedly.\n\nFor high-demand events, scarcity does the scammer's work: fans who have missed official sales are primed to move fast and skip checks. Slowing down for one protected-payment conversation filters out the vast majority of fraudulent sellers on its own.","redFlags":["Seller insists on PayPal Friends and Family or direct bank transfer","Tickets are priced below face value or exactly at face value from a stranger","Seller is reluctant to provide a scanned copy of the original booking","Communication only via social media DM or messaging app","Pressure to pay quickly before tickets are sold to someone else"],"whatToDoNow":["Only buy from official venue box offices or authorised resale platforms","Never pay via friends-and-family or bank transfer to an unknown seller","Ask for proof of purchase before any payment is made","Report ticket fraud to local police and the event organiser"],"faq":[{"question":"Is it safe to buy tickets from a verified social media account?","answer":"A verified badge confirms identity on that platform but not trustworthiness as a seller. Always use a protected payment method regardless of how the seller appears."},{"question":"The seller offered to send the tickets before I pay — is that safe?","answer":"Be careful. A PDF or screenshot can look genuine and still be invalid or duplicated, and scammers sometimes send tickets first to win trust before a larger request. Only official transfer through the event's ticketing system proves you hold a valid ticket."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-bank-text-asking-me-to-approve-a-new-payee-a-scam","url":"https://scamencyclopedia.org/questions/is-a-bank-text-asking-me-to-approve-a-new-payee-a-scam","question":"Is a bank text asking me to approve a new payee a scam?","shortAnswer":"It could be. Scammers send fake bank texts to trick you into approving a payee they control — your bank will never rush this decision.","explanation":"Authorised push payment fraud often begins with a text that looks exactly like a genuine bank alert, complete with a matching sender name. The message warns that an unfamiliar payee is awaiting your approval and gives you a short window to tap 'approve' or 'decline'. If you tap approve, money moves directly to the criminal. Real banks do send new-payee notifications, but they never threaten to block your account if you delay, and they never follow up with a phone call asking you to confirm over the phone. The key question is: did you initiate this payee yourself? If you did not, decline and call your bank on the number printed on your card.\n\nThis scam often runs in stages. The text primes you, then a caller claiming to be from the fraud team walks you through 'securing' the account — which in practice means approving the payee or reading out codes. Because the criminal controls both the message and the call, everything appears consistent, and the caller can sound calm, professional, and well-informed from breach data.\n\nBanks build friction into new-payee approval precisely because it moves real money. Any message that pushes you to rush that step is working against your interests. Take the time the process is designed to give you: close the message, open your banking app directly, and check whether any genuine approval is actually pending.","redFlags":["Text arrives with no prior transaction you initiated","Urgency — 'approve within 10 minutes or account will be restricted'","A phone call follows the text, pressuring you to confirm","Sender ID matches your bank but the link goes to an unfamiliar domain","Payee name looks vaguely like a known company"],"whatToDoNow":["Do not approve any payee you did not set up yourself","Hang up any follow-up call and dial your bank using the number on the card","Report the text to your bank's fraud team and delete it","If you approved by mistake, call your bank immediately to request a recall"],"faq":[{"question":"Can my bank send me a genuine new-payee notification?","answer":"Yes, but a genuine one will never pressure you to approve quickly or be followed by a call asking for your PIN or password. When in doubt, log in directly through the official app."},{"question":"I approved the payee but no money has left yet — what should I do?","answer":"Call your bank straight away and tell them exactly what happened. They can remove the payee, block pending payments, and add monitoring. Acting before any transfer completes is the best window for stopping loss entirely."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-job-that-asks-me-to-rate-hotels-or-restaurants-online-a-scam","url":"https://scamencyclopedia.org/questions/is-a-job-that-asks-me-to-rate-hotels-or-restaurants-online-a-scam","question":"Is a job that asks me to rate hotels or restaurants online a scam?","shortAnswer":"Yes. Paid review jobs are a common cover for task scams that eventually demand you deposit money to unlock earnings.","explanation":"The job advertisement promises easy income for rating businesses on a special platform. After completing a few free tasks, you are assigned 'combo' or 'special' tasks that offer higher rewards — but require you to first deposit funds into the platform. Your dashboard shows growing earnings, but you can only withdraw after completing all tasks in a session. Sessions are designed to require ever-larger deposits, and withdrawals are blocked by new fees. No legitimate review platform pays workers upfront commissions or requires deposits. Real market research jobs pay through payroll or legitimate freelance platforms, never through a deposit model.\n\nThe psychology is carefully staged. Early tasks pay out quickly and in full, sometimes with a friendly 'mentor' congratulating you in a group chat filled with accounts posting withdrawal screenshots — nearly all of them operated by the scammers. By the time the first deposit is requested, you have seen the system 'work' and feel invested. Each subsequent stage is priced just above what you have already committed, which is why victims so often borrow to continue.\n\nThe moment any work platform asks you to pay in order to be paid, the answer is settled. No further evidence — dashboards, contracts, testimonials — changes it. Stop, keep screenshots of the chats and transactions, and report.","redFlags":["Job offered via WhatsApp, Telegram, or a random text","Platform has a proprietary dashboard you access via a link","Early tasks are free, but 'combo tasks' require deposits","Earnings visible but not withdrawable until session is complete","Supervisor encourages you to borrow money to complete tasks"],"whatToDoNow":["Stop participating and do not deposit more money","Report the scam to your national consumer protection authority","Warn others in any group chat where the job was shared","If you deposited, contact your bank or payment service immediately"],"faq":[{"question":"I made small withdrawals early on — does that mean it is legitimate?","answer":"Small early payouts are deliberate. They build trust so you deposit larger amounts later. This is a standard confidence-building tactic in task scams."},{"question":"My dashboard shows a large balance — is any of it real?","answer":"No. The balance is a number typed into a website the scammers control. It does not correspond to funds held anywhere, which is why no amount of extra deposits or fees will ever release it."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-facebook-marketplace-car-seller-asking-for-a-holding-deposit-a-scam","url":"https://scamencyclopedia.org/questions/is-a-facebook-marketplace-car-seller-asking-for-a-holding-deposit-a-scam","question":"Is a Facebook Marketplace car seller asking for a holding deposit a scam?","shortAnswer":"Frequently yes. Fake car listings on social marketplaces are designed to extract a deposit before you ever see the vehicle.","explanation":"Scammers post car listings at attractive prices and claim the car is stored elsewhere — often with a relative or in a compound. They ask for a small 'holding deposit' via bank transfer to reserve it before you come to view. Once the money is sent, the seller becomes unavailable, the listing disappears, and there is no car. Legitimate private sellers rarely require a deposit before you have inspected the vehicle in person; dealers who do take deposits have a physical address, a written receipt, and a cancellation policy. Always insist on viewing the car at its current location before paying anything.\n\nThese listings are usually built from photographs stolen from genuine adverts, sometimes with the plates blurred or edited. The 'stored elsewhere' story — a relative's farm, a compound, a port — exists to explain why you cannot simply drive over and look at it, and the below-market price supplies the urgency. Some operations run dozens of near-identical listings across regions at once, changing only the location text.\n\nA genuine private seller loses nothing by letting you view before any money moves, and a genuine bargain survives a day of checks. Reverse image search the photos, ask for the registration and run a history check, and treat any resistance to an in-person viewing as the end of the conversation.","redFlags":["Car is priced significantly below market value","Seller cannot show you the car at its current location","Pressure to pay a deposit quickly before another buyer takes it","Payment requested by bank transfer, not cash on collection","Profile created recently with few or no previous listings"],"whatToDoNow":["Never pay a deposit before viewing a vehicle in person","Run the registration plate through an official vehicle history checker","Meet at the seller's address shown on the V5C logbook","If scammed, report to the Report Fraud service (formerly Action Fraud) or your national fraud authority"],"faq":[{"question":"What if the seller sends me photos and a video of the car?","answer":"Photos and videos can be copied from legitimate listings or generated with AI. They prove nothing about ownership or the car's actual condition."},{"question":"The seller says other buyers are waiting — should I move fast?","answer":"That pressure is the tactic, not a market signal. Scarcity claims cost nothing to make. A seller who genuinely has other buyers does not need your deposit today, and a car you have never seen is never worth a rushed transfer."}],"lastReviewed":"2026-08-01"},{"slug":"is-it-safe-to-buy-concert-tickets-from-a-resale-platform","url":"https://scamencyclopedia.org/questions/is-it-safe-to-buy-concert-tickets-from-a-resale-platform","question":"Is it safe to buy concert tickets from a resale platform?","shortAnswer":"It depends on the platform. Authorised fan-to-fan resale sites offer buyer guarantees; unofficial sites and social media resellers frequently deliver invalid or non-existent tickets.","explanation":"Ticket resale exists on a spectrum. Authorised resale platforms — which vary by country but are typically disclosed by venue or event organisers — guarantee validity of the tickets sold and offer refunds if tickets are invalid. Unofficial secondary market sites may have no verification processes, meaning you could receive cancelled, duplicated, or simply non-existent tickets. Social media and classifieds resellers carry the highest risk. If you use a resale platform, check that it is listed as an authorised resale partner for the event, read the buyer guarantee terms, and pay by credit card for additional chargeback protection. Never pay by bank transfer to a private individual for tickets.\n\nSpeculative selling adds another layer of risk: some resellers list tickets they do not yet hold, hoping to buy cheaper stock before the event. If they fail, you receive a refund at best — often long after the event has sold out elsewhere. Delivery timing matters too. Platforms that release tickets only days before the event leave you little room to dispute problems, so check the stated delivery window before paying.\n\nWherever possible, prefer resale that moves the ticket into your account within the event's own ticketing system, as this confirms validity in a way no PDF can. Keep records of the listing, the price, and all correspondence in case a claim under the buyer guarantee becomes necessary.","redFlags":["Resale site not listed as an official partner by the venue or event","Price is dramatically above or below face value with no explanation","Seller requests payment by bank transfer, Zelle, or cryptocurrency","Tickets sent only as screenshots or PDFs rather than in a verified transfer","No buyer guarantee or clear refund policy"],"whatToDoNow":["Check the venue or event website for authorised resale partners","Use a credit card for added chargeback protection","Prefer resale via platforms that transfer tickets to your official ticketing account","If you receive invalid tickets, contact the platform and your card provider"],"faq":[{"question":"Is face value a guarantee of authenticity?","answer":"No. Scammers sell fake tickets at face value to appear less suspicious. The payment method and seller verification matter more than the price."},{"question":"What should I do if my resale tickets are refused at the venue?","answer":"Ask the box office to note the refusal in writing or keep any rejection slip, then claim under the platform's buyer guarantee and, if you paid by credit card, raise the failed purchase with your card provider as well."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-cold-call-offering-to-write-or-update-my-will-for-free-a-scam","url":"https://scamencyclopedia.org/questions/is-a-cold-call-offering-to-write-or-update-my-will-for-free-a-scam","question":"Is a cold call offering to write or update my will for free a scam?","shortAnswer":"Yes. Free will-writing cold calls are lead-generation tools designed to upsell expensive and sometimes unnecessary legal or financial products to older adults.","explanation":"Cold callers — particularly those targeting people over 60 — offer free or low-cost will-writing as a way to access your home, collect personal and financial information, and then promote add-on products such as trusts, funeral plans, and lasting powers of attorney at inflated prices. Some operations recommend unnecessary trust arrangements that tie up assets and have significant ongoing fees. In the worst cases, callers attempt to insert themselves or an affiliated company as executor or financial adviser. Legitimate will-writing uses regulated solicitors or licensed will-writers; you initiate contact rather than being called. If approached, decline and contact a solicitor through a professional body register.\n\nThe free will is bait rather than the product. The appointment maps your assets, family circumstances, and health — exactly the information needed to pitch trusts, funeral plans, and power-of-attorney packages with confident-sounding urgency. Naming their own firm as executor or trustee is the most damaging upsell, because it can hand ongoing control and fees over your estate to an unregulated business your family never chose.\n\nIf a will genuinely needs writing or updating, the safe route is unchanged: choose a regulated solicitor or licensed will-writer yourself, ask for fees in writing before the meeting, and involve a family member you trust. Any adviser who resists either the written quote or the second pair of ears is not one to use.","redFlags":["Unsolicited call or doorstep visit offering a free will","Caller requests detailed personal and financial information at the first appointment","Upsell toward trusts, funeral plans, or other financial products during the meeting","Recommendations to use their firm as executor or trustee","Pressure to sign at the first appointment"],"whatToDoNow":["Decline the call and contact a solicitor through a professional body register","Never sign any document at a first meeting arranged through a cold call","Report pushy will-writing callers to trading standards","If you feel your relatives are being targeted, alert them and suggest using a regulated solicitor"],"faq":[{"question":"Are free will-writing services ever legitimate?","answer":"Some charities and solicitors do offer free will-writing during specific campaigns. These are initiated by the organisation publicly and do not involve unsolicited cold calls to your home."},{"question":"An adviser has already visited my parent and left paperwork — what now?","answer":"Nothing signed under pressure has to stand. Encourage your parent not to proceed, have any documents reviewed by a regulated solicitor before signing, and use any cooling-off period to cancel. Report high-pressure conduct to trading standards."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-subscription-box-that-charged-me-after-a-free-trial-a-scam","url":"https://scamencyclopedia.org/questions/is-a-subscription-box-that-charged-me-after-a-free-trial-a-scam","question":"Is a subscription box that charged me after a free trial a scam?","shortAnswer":"It may be a dark pattern. Some subscription boxes make billing terms clear; others bury auto-renewal in hard-to-find small print.","explanation":"Subscription box free trials are a common method for acquiring paying subscribers. Legitimate services make auto-renewal obvious and allow easy cancellation. However, some operators deliberately obscure the billing terms, make cancellation extremely difficult — requiring phone calls during limited hours, multiple confirmation steps, or both — and continue charging after you believe you have cancelled. This is known as a dark pattern. In more extreme cases, the product is never delivered and the company is entirely fraudulent. If you discover an unexpected charge, check your email for the original sign-up confirmation, find the cancellation method in the terms, and contact your bank for a chargeback if the service misrepresented its billing terms.\n\nDark-pattern operators design each stage to leak a few more customers through: the countdown timer at sign-up, the terms behind a link, the cancellation buried under retention offers. None of this is accidental — the business model prices in the percentage of subscribers who give up trying to cancel. Regulators in several countries have moved against the worst practices, but enforcement lags behind the tactics.\n\nProtect yourself at sign-up rather than after: screenshot the offer page and the terms as shown, diarise the trial end date, and pay with a card rather than a bank debit so chargeback rights apply. If you decide to cancel, do it in writing through a channel that leaves a record, and confirm the cancellation was processed before the next billing date.","redFlags":["Original sign-up page did not prominently display billing terms","Cancellation requires calling a number with limited hours","Charge appears after a free trial with no prior reminder email","Company is unresponsive when you try to cancel","Product never arrived despite charges being taken"],"whatToDoNow":["Check your email for the original sign-up confirmation and billing terms","Contact the company directly and request cancellation in writing","If unsuccessful, contact your card provider about a chargeback","Report the company to consumer protection authorities if terms were misrepresented"],"faq":[{"question":"Can I get a refund for charges after I tried to cancel?","answer":"If you have evidence you cancelled — a confirmation email or screenshot — your bank or card provider may support a chargeback. If terms were hidden, regulators may also help."},{"question":"The company says I never cancelled, but I did — who wins?","answer":"Evidence decides it. A cancellation email, support ticket, or screenshot showing the date usually persuades a card provider to reverse subsequent charges even when the merchant disputes it. This is why cancelling by phone alone is worth avoiding."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-sellers-market-or-buyers-market-real-estate-pitch-hiding-a-scam","url":"https://scamencyclopedia.org/questions/is-a-sellers-market-or-buyers-market-real-estate-pitch-hiding-a-scam","question":"Is an investment seminar promising guaranteed real estate returns a scam?","shortAnswer":"Yes in the vast majority of cases. Real estate seminars promising guaranteed returns or 'insider' methods charge large fees for generic or worthless information.","explanation":"Free or low-cost introductory real estate investment events lead into high-pressure upsells for expensive multi-day courses, coaching programmes, or mentorship packages. Attendees are told that a small number of places remain on the 'advanced' programme and that they must sign up today. The promised strategies are either freely available online, impractical without substantial capital, or involve techniques that are illegal or generate high risk. In some cases, the seminar is a front for selling overpriced or misrepresented property. Real estate investment involves genuine financial risk and is regulated — no seminar can guarantee returns.\n\nThe event itself is engineered: testimonials from 'students' who cannot be verified, staged success stories, and a room-wide rush to the sign-up desk when the discounted price is announced. Presenters commonly claim the fee is trivial against your first deal, which reframes an immediate, certain cost as a future, speculative gain. Financing offers at the back of the room — sign up now on a credit card and pay it off from your profits — convert attendees into debtors before they have seen a single property.\n\nAnything of value the course could teach survives a week of reflection. Take the materials home, verify the presenter's actual track record through public records, and price the same education against books, regulated advice, and free resources before committing anything.","redFlags":["Entry seminar is free but leads to expensive paid-only 'advanced' courses","Guarantees of specific returns or income within a set time","High-pressure environment with a deadline to sign up at the event","Testimonials are delivered by unverifiable participants","Coaching programme costs thousands of dollars or pounds upfront"],"whatToDoNow":["Do not sign up for or pay anything under pressure at a seminar","Research the organisation independently before attending or paying","Consult a licensed financial adviser or solicitor before any property investment","Report high-pressure or misleading seminars to trading standards"],"faq":[{"question":"Are any real estate investment courses legitimate?","answer":"Some are, but they charge realistic fees, make no guarantees, and do not use high-pressure upsells at events. Research the provider independently and check for regulatory registration."},{"question":"They offered a money-back guarantee on the course — does that make it safe?","answer":"Rarely. Such guarantees are typically conditional on completing every module, attending every session, or documenting that you followed the system exactly — conditions designed to be unmeetable. Treat the guarantee as marketing, not protection."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-email-saying-i-owe-tax-and-must-pay-to-avoid-prosecution-real","url":"https://scamencyclopedia.org/questions/is-an-email-saying-i-owe-tax-and-must-pay-to-avoid-prosecution-real","question":"Is an email saying I owe tax and must pay immediately to avoid prosecution real?","shortAnswer":"No. Tax authorities send formal written notices by post and do not threaten immediate prosecution in an email with a payment link.","explanation":"Tax authority phishing emails are among the most reported scam types globally. They use official logos, reference numbers, and threatening language about unpaid tax, penalties, or criminal referral to create panic. The link in the email leads to a fake government payment portal that harvests your banking credentials or card details. A variant involves attaching a fake tax demand PDF. Real tax authorities — the IRS, HMRC, ATO, and others — communicate through official correspondence by post, and your account is accessible through the official tax portal only. They do not threaten immediate prosecution in a single email without prior formal notices, and they never direct you to pay via a link in a message.\n\nThe panic is the mechanism. A prosecution threat triggers exactly the rushed, unchecked response phishing depends on, and the fake portals are often near-perfect copies of the real thing, down to accessibility footers and help links. Some campaigns run the opposite lure — a refund waiting to be claimed — which harvests the same card and identity details through a friendlier door.\n\nWhatever the framing, the safe response is identical: do not interact with the message at all. Open your tax account by typing the official address yourself or using the government's app, and check for correspondence there. A genuine liability will be visible in your account; a scam will not.","redFlags":["Email claims you owe tax and must pay via a link immediately","Threat of immediate arrest, prosecution, or asset seizure","Link does not lead to the official government tax domain","Attached PDF demands urgent payment","No prior correspondence or a tax account entry matching this demand"],"whatToDoNow":["Do not click any link or pay anything","Log in to your official tax account on the government website directly","Forward the email to your tax authority's phishing reporting address","If you entered card details, contact your bank immediately"],"faq":[{"question":"How does a real tax debt notice arrive?","answer":"Genuine tax demands arrive by post to your registered address. You can also view correspondence in your official online tax account. No first notice of a debt arrives by email with a payment link."},{"question":"The email quotes a reference number and my exact name — does that mean it's genuine?","answer":"No. Names pair with email addresses in countless breach datasets, and reference numbers can be invented freely because you have nothing to check them against. Only correspondence visible inside your official tax account counts."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-landlord-who-doesnt-have-a-gas-safety-certificate-running-a-scam","url":"https://scamencyclopedia.org/questions/is-a-landlord-who-doesnt-have-a-gas-safety-certificate-running-a-scam","question":"Is a landlord who doesn't have a gas safety certificate running a scam?","shortAnswer":"Not necessarily a scam, but it is a serious legal violation — and in rental fraud, missing documentation is also used to pressure tenants into substandard arrangements.","explanation":"In many countries, landlords of residential properties with gas appliances are legally required to provide an annual gas safety certificate from a registered engineer. Genuine landlords who lack one may simply be non-compliant rather than deliberately fraudulent, but the absence of safety documentation is also a tactic used by scammers posing as private landlords — they have no documentation because they are subletting a property they are renting themselves, squatting, or advertising a property they don't own. In either case, do not sign a lease or pay a deposit for a property where required safety documentation cannot be provided. Request it as a condition of proceeding.\n\nThe certificate check is useful precisely because it doubles as an ownership check. A legitimate landlord or agent can produce the document quickly, along with deposit protection details and an energy performance certificate; someone subletting without permission or advertising a property they do not control can produce none of them. A pattern of excuses across several documents is a stronger signal than any single missing paper.\n\nBeyond fraud, the safety issue is real: an unchecked gas installation is a carbon monoxide risk. If you are already living in a property without a current certificate, request one in writing, and contact the local housing authority if the landlord does not act. Keep copies of every request you send.","redFlags":["Landlord cannot produce a gas safety certificate on request","Landlord makes excuses — 'engineer coming next week' — rather than showing documents","Property is below typical market quality but rent is high","Landlord discourages questions or insists you sign quickly"],"whatToDoNow":["Make providing the certificate a condition of signing any lease","Do not pay any deposit until you have seen and verified the certificate","Report landlords without certificates to local housing or gas safety authorities","If you suspect the landlord does not own the property, check land registry records"],"faq":[{"question":"Can I ask to see the certificate before signing the lease?","answer":"Yes, and in most jurisdictions you are legally entitled to a copy. A landlord who refuses has either failed their legal duty or is not who they claim to be."},{"question":"What other documents should a genuine landlord be able to show?","answer":"Depending on the country: deposit protection confirmation, an energy performance certificate, electrical safety records, and proof of ownership or an agent's authority to let. A landlord who can produce none of these should be treated as unverified."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-utility-bill-in-my-name-opened-without-my-knowledge-a-sign-of-fraud","url":"https://scamencyclopedia.org/questions/is-a-utility-bill-in-my-name-opened-without-my-knowledge-a-sign-of-fraud","question":"Is a utility bill in my name opened without my knowledge a sign of fraud?","shortAnswer":"Yes. An unexpected utility bill in your name is a strong indicator that your identity has been used to open accounts fraudulently.","explanation":"When a scammer obtains enough personal information — name, date of birth, address, and sometimes a national identity number — they can open utility accounts, phone contracts, or financial products in your name. You may become aware only when a bill arrives for a service you never requested, a debt collection letter follows an unpaid account, or a credit check reveals unknown entries. Acting quickly limits the damage: contact the utility company to flag the fraudulent account, place a notice on your credit file, and report to your national fraud authority. The sooner you act, the easier it is to have fraudulent accounts removed from your credit record.\n\nA single fraudulent utility account is rarely the whole story. Criminals often open a low-scrutiny account first to establish an address history, then use the resulting paperwork to apply for phone contracts, credit cards, and loans. That is why the correct response is a full sweep — every credit report, not just the company that sent the bill — and why monitoring should continue for months afterwards.\n\nKeep a written log of every call, reference number, and letter as you untangle it. Ask each company to confirm in writing that the account was fraudulent and has been removed from your file. If mail has been going to another address, consider whether your post is being redirected or intercepted, and update passwords on accounts that use your address for verification.","redFlags":["Bill arrives for a utility or service you never signed up for","Debt collection letter for an account you don't recognise","Your credit report shows a new account or hard search you did not authorise","You recently shared personal data with an unknown source"],"whatToDoNow":["Contact the utility company and explain the account is fraudulent","Place a protective notice on your credit file with all main credit agencies","Report the identity fraud to your national fraud authority","Check all three credit reports for other accounts you don't recognise"],"faq":[{"question":"How quickly should I act?","answer":"Immediately. Every day a fraudulent account is open, it accumulates debt in your name and potentially damages your credit score. Contact the company and report to the fraud authority the same day."},{"question":"Will a fraudulent account affect my credit score permanently?","answer":"No. Once the lender or utility accepts the account was fraudulent, the entry and any associated missed payments should be removed from your file. Follow up with the credit agencies to confirm the correction has actually been made."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-crypto-exchange-that-has-a-very-professional-website-trustworthy","url":"https://scamencyclopedia.org/questions/is-a-crypto-exchange-that-has-a-very-professional-website-trustworthy","question":"Is a crypto exchange with a very professional-looking website trustworthy?","shortAnswer":"Not necessarily. Professional website design is cheap and easy — it does not verify regulatory compliance or the safety of your funds.","explanation":"Fraudulent crypto exchanges invest in polished branding to build confidence. A professional website, live chat support, animated dashboards, and detailed FAQ pages cost very little to replicate. The real indicators of a legitimate exchange are regulatory registration, proof of reserve audits, transparent company ownership, and a verifiable track record. Many users only discover a platform is fraudulent when they try to withdraw funds, at which point obstacles appear — fees, verification demands, or the site simply goes offline. Before depositing anything, check whether the exchange holds a licence from a recognised financial regulator in your jurisdiction.\n\nFake exchanges also manufacture social proof at scale: sponsored search results, paid placements in app stores, fabricated review scores, and celebrity endorsements that were never given. Some clone the name and branding of a genuine licensed exchange with a slightly different domain, so even a real licence number can be borrowed. Checking the register matters, but so does confirming the domain you are on is the one the regulator actually lists.\n\nThe withdrawal test is the most honest signal available: deposit only a small amount first, then withdraw it fully before trusting the platform with more. A legitimate exchange processes the withdrawal without inventing new conditions. Any platform that meets a withdrawal request with sudden fees, taxes, or verification demands has told you what it is.","redFlags":["No verifiable regulatory licence in any jurisdiction","Only positive reviews on the exchange's own site — no mention in independent news","Interest rates or returns significantly higher than established exchanges","No named executives or verified corporate registration","Withdrawal difficulties or new fees when you try to take out funds"],"whatToDoNow":["Check the exchange name against your national financial regulator's register","Search the exchange name on independent news and consumer complaint sites","Start with a small test amount and verify you can withdraw before depositing more","If withdrawal is blocked, stop depositing and report to your regulator"],"faq":[{"question":"Does appearing in a Google search ad mean the exchange is regulated?","answer":"No. Advertising platforms do not verify financial regulatory status. Fraudulent exchanges advertise on major search engines regularly."},{"question":"The platform shows a licence number on its website — is that enough?","answer":"No. Licence numbers are copied from genuine firms or simply invented. Look the firm up on the regulator's own register, then confirm the website address listed there matches the site you are using exactly."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-free-government-solar-panel-scheme-cold-call-legitimate","url":"https://scamencyclopedia.org/questions/is-a-free-government-solar-panel-scheme-cold-call-legitimate","question":"Is a free government solar panel scheme cold call legitimate?","shortAnswer":"Usually not. Cold calls about free solar panels through a government scheme are frequently sales calls or scams harvesting your personal data and a deposit.","explanation":"Government schemes that subsidise renewable energy improvements do exist, but they are administered through registered installers and housing authorities — not through cold calls promising free panels for qualifying homes. Callers who claim you qualify for a grant typically want to book a surveyor visit, collect personal details for 'eligibility checks', or ask for a small deposit or admin fee. Genuine schemes are found on the official government energy efficiency website and do not require you to act on a cold call. Independent tradespeople cold-calling about free government schemes may also upsell costly 'top-up' products or install substandard equipment.\n\nThe surveyor visit is where the pressure really starts. Once inside your home, a salesperson can spend hours walking through projected savings, subsidy deadlines, and financing paperwork until signing feels easier than refusing. Deposits taken at the door are difficult to recover, and finance agreements signed in haste can commit you to years of payments for equipment that underperforms the promises.\n\nGenuine schemes do not need to find you by phone. If solar or insulation interests you, start from the official government energy-efficiency site, obtain independent quotes from certified installers, and check each firm's accreditation and complaint history yourself. Any offer that cannot wait for that process was not worth having.","redFlags":["Unsolicited call claiming you qualify for a free government scheme","Caller asks for personal details including address and income","Booking fee or survey deposit requested","Urgency — deadline to apply or scheme ends soon","Caller cannot name the specific government scheme or provide its registration"],"whatToDoNow":["Check current government energy efficiency schemes on the official government website","Do not provide personal details or pay any fee to a cold caller","Register with your national do-not-call list to reduce cold calls","Report misleading callers to your consumer protection authority"],"faq":[{"question":"Is a company with an official-sounding name making this call trustworthy?","answer":"Company names are easy to register. Always verify through the official government scheme portal and check the installer's certification on the relevant regulatory body's register."},{"question":"I already gave a cold caller my details — what should I expect?","answer":"Expect follow-up calls, and possibly contact from other firms if your details are sold on as leads. Decline politely, do not confirm further information, and report persistent or misleading callers to your consumer protection authority."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-caller-from-a-tech-company-offering-to-refund-an-overcharge-a-scam","url":"https://scamencyclopedia.org/questions/is-a-caller-from-a-tech-company-offering-to-refund-an-overcharge-a-scam","question":"Is a caller from a tech company offering to refund an overcharge a scam?","shortAnswer":"Yes. Refund scams impersonate tech companies to trick you into giving remote access and then steal money from your bank account.","explanation":"The caller claims to be from a software company and says you were overcharged for a subscription renewal. They send an inflated refund to your account using remote access software to 'process the transaction'. You are then told you received too much money by mistake and must return the surplus by gift card or wire transfer. In reality, the 'refund' is a transfer between your own accounts made to look like extra money arrived, or it is a fraudulent credit that will be clawed back. The money you send back is real and gone. Tech companies do not process refunds via remote access software or ask you to return money by gift card.\n\nThe illusion at the heart of this scam is built during the remote session. While you watch your own screen, the scammer edits the page's displayed numbers or quietly moves money between your accounts, so a fake overpayment appears with theatrical alarm — often blamed on your 'mistake' during the refund form. The guilt and confusion that follow are engineered to make returning the surplus feel like the honest thing to do.\n\nRemote access is the point of no return. Once granted, the caller may also install software that lets them reconnect later or capture credentials. If a session took place, treat the device as compromised: disconnect it, run security scans or seek technical help, change banking and email passwords from a different device, and review recent transfers with your bank.","redFlags":["Unsolicited call claiming you are owed a refund you didn't request","Asked to download remote access software to process the refund","You appear to receive more money than expected","Asked to return the excess by gift card, wire transfer, or crypto","Caller becomes aggressive if you question the process"],"whatToDoNow":["Hang up immediately","If you gave remote access, disconnect from the internet and run a security scan","Check your bank accounts for unauthorised activity","Call your bank if you sent money and report to your national fraud authority"],"faq":[{"question":"Could I genuinely be owed a refund from a tech company?","answer":"Legitimate refunds are processed automatically or through your account portal — not via an inbound call asking for remote access. Contact the company directly if you believe you are owed money."},{"question":"I only watched them work — could they still have taken anything?","answer":"Yes. During a remote session the caller can act faster than you can follow, open windows off-screen, or install persistent access tools. Assume credentials and files were exposed and secure your accounts from a clean device."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-rental-listing-that-wants-a-holding-fee-via-western-union-a-scam","url":"https://scamencyclopedia.org/questions/is-a-rental-listing-that-wants-a-holding-fee-via-western-union-a-scam","question":"Is a rental listing that wants a holding fee via Western Union a scam?","shortAnswer":"Yes, without exception. Western Union is irreversible and untraceable — requesting it for a rental deposit is a guaranteed red flag.","explanation":"Rental scammers know that Western Union transfers, MoneyGram, and similar money service businesses cannot be reversed once collected. They advertise desirable properties at below-market rents, explain that they are abroad or otherwise unavailable to show the property, and ask for a holding deposit or first month's rent via a money transfer service to secure the listing. Once the money is collected — often by an accomplice at a local outlet — it is unrecoverable. No legitimate landlord or letting agency requires payment through a money transfer service. Bank transfers, standing orders through verified agencies, or escrow services are the standard methods.\n\nThis scam persists because it filters for exactly the tenants least able to verify: people relocating from another city or country, students arriving for a new term, and anyone hunting in a tight rental market where good listings vanish in hours. The photographs are lifted from genuine adverts, and the 'landlord abroad' story explains away every request you would normally make — a viewing, a meeting, a signed agreement.\n\nThe rule survives every variation: no viewing, no payment. If distance genuinely prevents you from visiting, have a local contact view the property, or use a reputable agency with a verifiable office. Money service transfers to strangers should be reserved for people you know personally — in a rental transaction they serve only the fraudster.","redFlags":["Any request for rental payment via Western Union or MoneyGram","Landlord says they are abroad and cannot show the property","Rent is significantly below the local market rate","Urgency to pay before viewing","Communication only by email with no phone call offered"],"whatToDoNow":["Refuse to pay by any irreversible money transfer service","Insist on an in-person viewing before any payment","Report the listing to the platform and local police"],"faq":[{"question":"Are other wire services like MoneyGram also unsafe for rental deposits?","answer":"Yes. Any irreversible money transfer service — Western Union, MoneyGram, Ria, or similar — carries the same risk. Use only traceable, protected payment methods."},{"question":"The landlord sent a contract and copies of ID — is that enough to pay?","answer":"No. Contracts cost nothing to produce and identity documents are routinely stolen or forged. Neither proves the sender controls the property. Verification is physical: someone you trust standing inside the property with the keys."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-ai-generated-email-indistinguishable-from-a-real-one","url":"https://scamencyclopedia.org/questions/is-an-ai-generated-email-indistinguishable-from-a-real-one","question":"Can AI generate phishing emails that are indistinguishable from real ones?","shortAnswer":"Yes. AI-written phishing emails have no spelling errors, mimic writing styles accurately, and are increasingly hard to distinguish from genuine messages.","explanation":"Traditional phishing emails were often identifiable by poor grammar or generic greetings. Generative AI tools now allow criminals to produce perfectly written, contextually accurate emails that replicate a company's tone, include your name, and reference real details from your public profiles. Spear-phishing attacks — targeted at a specific individual — use AI to craft emails that reference your employer, recent purchases, or colleagues. Because content quality is no longer a reliable filter, detecting phishing increasingly depends on checking the sender domain, the nature of the request, and verifying through a separate channel. Never judge an email's legitimacy by how well it is written.\n\nAI also collapses the cost of personalisation. Where mass phishing once sent one template to millions, current campaigns can generate a distinct, contextually plausible message for each recipient, drawing on social profiles, company sites, and breach data. Voice cloning and video deepfakes extend the same problem to calls and meetings, which means 'it sounds exactly like them' is no longer verification either.\n\nThe defences that still work are procedural, not perceptive. Verify requests through a second channel you initiate — a phone number you already hold, a fresh browser session to the official site. Use a password manager, which will refuse to autofill on lookalike domains, and enable two-factor authentication so stolen passwords alone are not enough.","redFlags":["Email requests login credentials, payment, or personal data","Sender address domain differs slightly from the official one","Request is urgent and asks you not to contact colleagues","Link destination does not match the stated company","Email references real personal details to seem credible"],"whatToDoNow":["Check the sender's full email domain — not just the display name","Go directly to the official website rather than clicking links","Verify any financial request via a separate phone call","Report suspected phishing to your email provider and the impersonated organisation"],"faq":[{"question":"Is there a technical way to detect AI-written phishing?","answer":"AI detection tools exist but are unreliable. Focus on the behaviour the email requests — legitimate organisations will not ask for passwords or urgent payments by email."},{"question":"If AI phishing is this good, how am I supposed to spot it?","answer":"The burden shifts from spotting fakes to following process: no credentials or payments actioned from inbound messages, verification through known channels, and two-factor authentication everywhere. Applied consistently, those habits defeat even a perfect fake."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-cash-app-or-venmo-request-from-my-landlord-safe","url":"https://scamencyclopedia.org/questions/is-a-cash-app-or-venmo-request-from-my-landlord-safe","question":"Is a Cash App or Venmo request from my landlord safe?","shortAnswer":"It depends. Scammers impersonate landlords to intercept rent payments — always verify any change in payment instructions directly.","explanation":"A common variant of payment diversion fraud targets renters. A message arrives — appearing to come from your landlord — saying that bank account details have changed and future rent should be sent to a Cash App, Venmo, or new bank account. The message may use the landlord's name and be indistinguishable from a genuine contact. In reality the landlord's email or messaging account may have been hacked, or a scammer is impersonating them. If you send rent to the wrong account, recovery is extremely difficult. Always confirm any change in payment details by calling your landlord on a phone number you already have — not one provided in the new message.\n\nThis fraud typically strikes at month end, timed so the request lands just before rent is due and leaves little room for reflection. Compromised email threads are especially convincing because the scammer can reply inside a genuine conversation, quoting real history about the property. Peer-to-peer payment apps appeal to fraudsters because transfers clear instantly and disputes are harder than with card payments.\n\nMake verification your standing habit rather than an exception: any change to payment details — for rent, invoices, or anything else — gets confirmed by voice on a number you already hold before a single payment moves. Genuine landlords understand the call; only a fraudster is inconvenienced by it.","redFlags":["Rent payment method changed without prior notice","Instruction arrives only by email or message, not by phone or letter","New account is a peer-to-peer app rather than a bank account","Reason given for the change is vague — 'new account' or 'bank issues'","Message asks you to update immediately this month"],"whatToDoNow":["Call your landlord on a phone number you already know to verify","Never send rent based on payment change instructions received by message alone","If you sent rent to the wrong account, contact your bank immediately","Report payment diversion fraud to your bank and police"],"faq":[{"question":"What if the message came from the email address I always use for my landlord?","answer":"Email accounts can be hacked. A message from a known address is not a guarantee it came from your landlord. Always verify payment changes by a separate phone call."},{"question":"My landlord genuinely does use payment apps — how do I stay safe?","answer":"Using an app is fine once verified. The risk is in changes: a new username, account, or app requested by message. Confirm every change by phone before paying, and keep the confirmation in writing afterwards."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-unsolicited-email-offering-business-loan-approval-a-scam","url":"https://scamencyclopedia.org/questions/is-an-unsolicited-email-offering-business-loan-approval-a-scam","question":"Is an unsolicited email offering business loan approval a scam?","shortAnswer":"Yes in most cases. Pre-approved business loan emails sent out of the blue are almost always advance-fee or credential phishing scams.","explanation":"Small business owners receive emails promising fast approval for loans they never applied for, often claiming government-backed status or guaranteed rates. When the recipient clicks through, they are either asked to pay an upfront arrangement or insurance fee — which is taken and the loan never materialises — or they are directed to a fake banking portal that steals their credentials and banking details. Legitimate lenders do not pre-approve businesses they have never assessed, and they never ask for fees before funds are released. Genuine government-backed loan schemes are administered through established financial institutions, not through cold emails.\n\nThese campaigns time themselves to cash-flow pressure — tax deadlines, seasonal dips, economic uncertainty — when a fast yes feels like rescue. Everything about the offer is engineered to skip scrutiny: pre-approval flatters, deadlines rush, and official-sounding scheme names borrow authority. Some variants collect extensive company and director information through an 'application', which is later used for invoice fraud or to impersonate your business to its customers.\n\nA legitimate lender can always be verified from outside the email: a regulatory register entry, a working switchboard, a track record you can find independently. If working capital is genuinely needed, approach your bank or a regulated broker directly — the interest cost of legitimate credit is trivial next to an advance fee that vanishes.","redFlags":["Loan offered without you having applied","Claims to be government-backed or guaranteed","Upfront fee required before funds are released","Very short approval window creating urgency","Sender email domain does not match the named institution"],"whatToDoNow":["Do not click links or pay any upfront fees","Verify any claimed lender through official regulatory registers","Report the email to your national fraud reporting service","Seek genuine business finance through your bank or official government schemes"],"faq":[{"question":"What if the email mentions my actual company name?","answer":"Company names, addresses, and registration numbers are public records. Scammers mine company registries to personalise mass emails and appear more credible."},{"question":"The lender says the upfront fee is refundable if the loan falls through — true?","answer":"No. The refundable-fee promise is a standard part of the script, made precisely because the loan will never arrive. Regulated lenders deduct arrangement costs from disbursed funds; they do not collect payments before lending."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-text-claiming-i-have-an-unpaid-parking-fine-real","url":"https://scamencyclopedia.org/questions/is-a-text-claiming-i-have-an-unpaid-parking-fine-real","question":"Is a text claiming I have an unpaid parking fine real?","shortAnswer":"Likely not. Official parking fines arrive by post to the registered keeper — not by text with a payment link.","explanation":"Phishing texts impersonating parking enforcement authorities have become widespread. They claim an unpaid penalty charge notice is outstanding and provide a short-window link to pay. The link leads to a fake payment page that harvests your card details. Genuine penalty charge notices are issued as physical letters to the registered vehicle keeper's address and are administered through official council or national transport authority portals. If you receive a text about a parking fine, do not click the link. Look up the relevant authority independently and check for any genuine notices in your account or by calling them directly.\n\nThese campaigns are sent in enormous volumes because they only need a tiny response rate. The sums demanded are kept small deliberately — low enough that paying feels easier than checking — but the real objective is usually the card data entered on the fake page, which is then used for much larger fraud or sold on. Some variants follow a card entry with a phone call impersonating your bank to 'stop the fraud', extracting security codes while the panic is fresh.\n\nIf you did enter details, act on that assumption: tell your bank immediately, watch for follow-up calls claiming to be from their fraud team, and treat any such call as part of the same attack unless you dialled the number yourself.","redFlags":["Fine arrives by text rather than physical letter","Urgency language warning of escalating charges","Payment URL does not match the official authority domain","No vehicle registration or specific date of alleged offence","Text asks for card details on a third-party payment page"],"whatToDoNow":["Do not click the link","Check for genuine notices on the official council or transport authority website","Forward the text to your national spam reporting number","If you entered card details, contact your bank immediately"],"faq":[{"question":"Could it be from a private parking company?","answer":"Private parking companies also must issue notices by post to the registered keeper. A text demanding payment is not a formal notice and has no legal standing."},{"question":"I genuinely did park somewhere with cameras recently — could the text be real?","answer":"The coincidence changes nothing about the channel. Enforcement bodies issue notices by post to the registered keeper. Check directly with the authority for that location if you are concerned, using contact details you find yourself."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-voip-call-from-an-overseas-number-pretending-to-be-a-local-bank-a-scam","url":"https://scamencyclopedia.org/questions/is-a-voip-call-from-an-overseas-number-pretending-to-be-a-local-bank-a-scam","question":"Is a VoIP call from an overseas number pretending to be a local bank a scam?","shortAnswer":"Yes. Scammers use cheap internet calling services to impersonate banks from anywhere in the world.","explanation":"Voice over IP technology allows anyone to make calls that appear to originate from any country code, often displaying a local or even your specific bank's number on your caller ID. The caller claims to be from your bank's fraud or security department and says suspicious activity has been detected. They then try to extract your online banking credentials, card number, one-time passcode, or instruct you to move funds. No bank initiates a call and then asks you to enter or read out your full security details on the same call. If you receive such a call, hang up and wait at least 10 minutes — scammers can keep the line open — then call your bank from the number on your card.\n\nNumber spoofing means caller ID is a label, not evidence — anyone with cheap software can display your bank's exact number. Well-run operations add background call-centre noise, scripted hold music, and colleagues who 'escalate' you between departments, because every layer of theatre makes the eventual request seem routine. The details they quote about you come from breach data, not from your bank.\n\nOne-time passcodes deserve special caution: a caller who asks you to read out a code that was just texted to you is almost certainly using it to authorise a payment or login at that moment. Banks generate those codes for you to type, never to recite to a person. Whatever the pretext, ending the call and dialling the number on your card costs one minute and defeats the entire setup.","redFlags":["Caller claims to be from your bank's fraud team","Caller ID matches your bank's number","Asked for your full PIN, card number, or online banking password","Told to act immediately or your money will be lost","Call quality is slightly delayed or robotic"],"whatToDoNow":["Hang up without providing any information","Wait 10 minutes or use a different phone line before calling back","Call your bank using the official number on the back of your card","Report the call to your national fraud reporting service"],"faq":[{"question":"Why wait 10 minutes before calling my bank back?","answer":"Landline scammers can hold the line open so your return call connects back to them. Waiting, or using a mobile, ensures the fraudulent call is properly ended."},{"question":"The caller offered to prove themselves by telling me my own account details — convincing?","answer":"No. Details flow to your bank, never from it. Anything a caller recites about you was obtained from breaches or earlier phishing. A genuine bank will happily let you hang up and call back through the official number."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-text-from-a-parcel-company-asking-me-to-pay-a-storage-fee-a-scam","url":"https://scamencyclopedia.org/questions/is-a-text-from-a-parcel-company-asking-me-to-pay-a-storage-fee-a-scam","question":"Is a text from a parcel company asking me to pay a storage fee a scam?","shortAnswer":"Almost certainly yes. Legitimate couriers do not hold parcels for storage fees payable by text link.","explanation":"This is a variant of the parcel delivery phishing attack. A message arrives claiming your package has been held in a warehouse and that a small storage fee — typically under five dollars or pounds — must be paid within 24 hours or the parcel is returned. The link leads to a cloned courier website that collects your card details, which are then used for larger unauthorised transactions. Real couriers may charge customs fees in some countries, but these are communicated formally and never via a click-to-pay text with a countdown timer. Check your actual order tracking directly on the retailer's website before acting on any such message.\n\nThe storage-fee framing is one costume among many — customs duty, redelivery charge, address correction — but the mechanics never change: a small payment, a cloned courier site, and card fields that feed straight to the fraudsters. Online shopping volume makes the lure statistically effective; at any given moment, many recipients genuinely are waiting for a parcel, and the message only needs to land on some of them.\n\nBuild the safe habit of tracking parcels only from the retailer's own order page or the courier's official app, reached by typing the address yourself. Genuine customs charges, where they exist, appear through those official channels with documentation — not through a texted link with a timer.","redFlags":["You were not expecting a delivery that day","The storage fee must be paid via a link in the message","The URL does not match the official courier domain","Countdown timer creating false urgency","No parcel reference number that matches a real order"],"whatToDoNow":["Do not click the link in the text","Track any real orders directly on the retailer's website","Forward the message to your national spam reporting number","If you entered card details, contact your bank immediately"],"faq":[{"question":"What if the sender ID says the name of a real courier?","answer":"Sender IDs are easy to spoof. Any scammer can make a text appear to come from 'DHL', 'FedEx', or 'Royal Mail'. Always verify by going to the official website yourself."},{"question":"I paid the small fee — is losing that amount the end of it?","answer":"Unfortunately not. The fee is incidental; your card details are the prize. Contact your bank, have the card replaced, and watch statements closely — the fraudulent charges that follow are typically far larger than the fee."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-door-to-door-roofer-or-driveway-paver-offering-cheap-work-a-scam","url":"https://scamencyclopedia.org/questions/is-a-door-to-door-roofer-or-driveway-paver-offering-cheap-work-a-scam","question":"Is a door-to-door roofer or driveway paver offering cheap work a scam?","shortAnswer":"Very often. Doorstep roofers and pavers who say they have leftover materials and offer a large discount are frequently running cowboy trader scams.","explanation":"A common doorstep tradesperson scam involves workers who knock on doors claiming to have noticed damaged roof tiles, a crumbling chimney, or deteriorating driveway, and offer to fix it cheaply using 'materials left over from a job nearby'. After collecting a large cash deposit — sometimes the full amount — they do either minimal or no work, use substandard materials that cause future damage, or disappear entirely. High-quality legitimate tradespeople do not solicit work door-to-door. Always get at least three written quotes from independently verified traders, check reviews through a national tradesperson accreditation scheme, and never pay the full amount upfront.\n\nThe 'problem' they spotted is frequently invented or manufactured — some rogue traders photograph other roofs, or dislodge a tile themselves while 'inspecting'. Jobs that do start tend to escalate: a modest repair uncovers 'serious damage' midway, with the price climbing while your roof sits exposed. Older residents are targeted repeatedly, and addresses that pay once are shared among crews as receptive.\n\nA firm, closed-door 'no' is the whole defence. Genuine structural concerns can wait for a verified local tradesperson to inspect, and any legitimate quote survives comparison with two others. If someone claims your roof is dangerous today, that urgency is the sales tactic — a real emergency is confirmed by an independent assessor, not by the person who profits from the work.","redFlags":["Unsolicited knock with a claim of spotting a problem with your property","Offer only valid today or before they leave the area","Request for large cash payment upfront","No written quote, contract, or business address provided","Pressure not to call other tradespeople to compare prices"],"whatToDoNow":["Do not pay anything at the door","Ask for their trading name, address, and registration number","Get written quotes from at least three verified tradespeople","Report aggressive doorstep traders to your local trading standards authority"],"faq":[{"question":"What if I can visibly see the damage they describe?","answer":"The damage may be real but was not caused by the person at the door, or they exaggerated it. Always get an independent assessment from a verified tradesperson before spending any money."},{"question":"They started work before I agreed a final price — do I have to pay?","answer":"Starting work uninvited or without a written agreement is a pressure tactic, not an obligation. Do not hand over cash at the door. Seek advice from trading standards or a consumer rights service before paying anything, and report the trader."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-romance-partner-who-never-asks-me-for-money-definitely-genuine","url":"https://scamencyclopedia.org/questions/is-a-romance-partner-who-never-asks-me-for-money-definitely-genuine","question":"Is a romance partner who never asks me for money definitely genuine?","shortAnswer":"Not necessarily. Some romance scammers operate over months without any financial request, building trust before a large single ask or a more elaborate scheme.","explanation":"The stereotype of a romance scammer as someone who quickly asks for money is outdated. More sophisticated operations invest weeks or months building a genuine-feeling emotional connection. The scammer learns your values, shares your interests, and may even meet over video — deepfake technology makes this possible — before a request emerges. Other patterns involve no financial request at all, but instead gradually involve you in an investment scheme, money mule operation, or drug importation as a 'favour'. The absence of an early financial ask is not evidence of legitimacy — it may simply mean more groundwork is being laid. An inability to meet in person despite a long-running relationship remains a significant warning sign.\n\nThe long game often ends somewhere other than a direct request. A casual mention of profitable trading, a screenshot of gains, an offer to 'teach you' — the investment version of romance fraud lets you volunteer your money rather than asking for it, which feels nothing like being scammed until the withdrawal fails. Favours are the other route: receiving a package, opening an account, moving a payment — each one recruiting you into laundering without the word ever being used.\n\nJudge the relationship by its verifiable substance, not its duration or warmth. Months of daily conversation cost a professional operation very little. A person who cannot ever manage an ordinary meeting, and whose life conveniently prevents every form of verification, should be assessed on that pattern alone.","redFlags":["Long relationship conducted entirely online despite both parties being in the same country","Every attempt to meet in person is cancelled or redirected","Gradual introduction to an 'investment platform' or financial favour without direct money request","Life story contains inconsistencies that surface over time","Video calls use unusual angles, low quality, or brief clips rather than natural conversation"],"whatToDoNow":["Insist on an in-person meeting — a genuine person will make it happen","Reverse image search profile photos","Ask a trusted friend to review the relationship objectively","Do not facilitate any financial transaction or investment on their behalf"],"faq":[{"question":"We have video-called many times — could they still be a scammer?","answer":"Deepfake video technology can produce convincing video calls. Pay attention to whether the calls are always brief, low-quality, or feature the person in unusual or static environments."},{"question":"They've never mentioned money in six months — surely that proves it's real?","answer":"Time invested is not evidence either way; organised operations run many conversations in parallel and patience costs them little. Verification is what counts: an in-person meeting, consistent identity checks, and no financial entanglement of any kind."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-app-store-listing-for-a-crypto-wallet-always-genuine","url":"https://scamencyclopedia.org/questions/is-an-app-store-listing-for-a-crypto-wallet-always-genuine","question":"Is an App Store or Google Play listing for a cryptocurrency wallet always genuine?","shortAnswer":"No. Fake crypto wallet apps make it through both platforms' review processes and steal funds from users who install them.","explanation":"Both the Apple App Store and Google Play have had fake cryptocurrency wallet apps that closely mimic the branding of well-known wallets. When you set up the fake app and enter a recovery seed or fund it, the attackers immediately drain your balance. Some fake apps ask you to enter a seed phrase during setup — a real wallet either generates a new seed for you or asks you to import one only when restoring an existing wallet. Others create their own wallets but send a copy of the private key to the attacker. Always download wallet apps by following a link from the official project website rather than by searching in the app store.\n\nFake wallets climb search results through paid placement and manufactured reviews, so ranking and star ratings are not safety signals. Clones typically differ from the genuine app in tiny ways — a developer name one letter off, a slightly compressed logo, a review history that starts abruptly. The seed-phrase prompt during setup remains the sharpest tell: a fresh wallet generates a new phrase on your device and never needs your existing one.\n\nIf you realise you entered a seed phrase into a suspect app, treat the wallet as fully compromised from that moment. Create a new wallet from a verified app, generate a new phrase, and move assets there immediately — attackers automate draining, so minutes matter. Report the fake app so the store can remove it.","redFlags":["App found by searching the app store rather than following the official site link","App prompts you to enter your existing seed phrase during setup","App name or logo is slightly different from the official wallet","Developer name does not match the official organisation","Few reviews or reviews that seem inconsistent with app quality"],"whatToDoNow":["Only install wallets by following a link from the official project website","Never enter your seed phrase into any app you are not certain is genuine","If you entered a seed phrase, move assets to a new wallet immediately","Report fake apps to the app store using the report feature"],"faq":[{"question":"How do I find the official app link?","answer":"Go to the wallet project's official website — verify it is the correct domain — and follow the download link from there. Do not rely on search results in the app store."},{"question":"The app has thousands of positive reviews — doesn't that make it safe?","answer":"No. Review farms supply ratings cheaply, and some fake apps operate normally at first to accumulate genuine-looking feedback before the stealing begins. Only the official link from the project's verified website tells you which app is real."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-call-saying-my-computer-is-sending-error-reports-to-microsoft-a-scam","url":"https://scamencyclopedia.org/questions/is-a-call-saying-my-computer-is-sending-error-reports-to-microsoft-a-scam","question":"Is a call saying my computer is sending error reports to Microsoft a scam?","shortAnswer":"Yes. This is the classic Microsoft tech support scam. Microsoft does not monitor individual computers and will never call you about errors.","explanation":"Tech support scammers have impersonated Microsoft for over a decade. The call claims your computer is generating error reports, sending malware, or has been flagged by their servers. They direct you to open Windows Event Viewer — which shows routine errors in any computer — to 'prove' the problem exists. You are then asked to grant remote access via AnyDesk, TeamViewer, or a similar tool so they can 'fix' the issue. Once connected, they navigate to your banking or crypto accounts, install malware for future access, or demand payment for fake repairs by gift card or wire transfer. Microsoft's actual support is accessed by you contacting them — they never call unprompted.\n\nThe Event Viewer demonstration deserves particular attention because it convinces so many careful people. Every Windows computer logs routine warnings and errors constantly as part of normal operation, so the caller is guaranteed a screen full of alarming red icons to point at. It is a stage prop that works on any machine, which is exactly why the script relies on it.\n\nThese operations run from call centres working through phone lists, so receiving the call says nothing about your computer — many others received it the same day. If remote access was granted, assume everything on the machine was reachable: have it professionally checked or reset, change important passwords from a different device, and alert your bank if any financial accounts were open during the session.","redFlags":["Unsolicited call claiming to be from Microsoft or Windows","Directed to open Event Viewer and shown 'errors' as proof","Asked to download remote access software","Quoted a fee for repair payable by gift card or wire transfer","Caller has an overseas accent but claims to call from a local Microsoft office"],"whatToDoNow":["Hang up immediately","If you gave remote access, disconnect from the internet and run a full security scan","Change your passwords, especially banking and email","Contact your bank if any financial details were seen or accessed"],"faq":[{"question":"What if the caller knew my name and computer type?","answer":"This information is often available from data breaches or public records. It does not mean the call is from Microsoft. The company never calls customers unprompted about error reports."},{"question":"The 'errors' they showed me looked genuinely serious — were they?","answer":"No. Event Viewer warnings appear on every healthy Windows machine as part of routine logging. Interpreting them as infections is the core deception of this scam — it turns normal housekeeping entries into a crisis."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-online-loan-that-approves-everyone-regardless-of-credit-score-legitimate","url":"https://scamencyclopedia.org/questions/is-an-online-loan-that-approves-everyone-regardless-of-credit-score-legitimate","question":"Is an online loan that approves everyone regardless of credit score legitimate?","shortAnswer":"No. Guaranteed-approval loan advertisements are advance-fee scams that collect upfront fees and never release funds.","explanation":"No legitimate lender approves every applicant regardless of credit history — creditworthiness assessment is a legal requirement for regulated consumer lending. Scam lenders advertise 'guaranteed' approval to attract people who have been refused elsewhere, then require an insurance premium, an arrangement fee, or a government bond to release the funds. Once paid, the loan is never disbursed and the company becomes unreachable. These operations are sometimes run on cloned websites that mimic real credit providers. Any lender that asks for an upfront payment before releasing a loan should be treated as fraudulent — regulated lenders deduct fees from the loan amount or charge after disbursement, not before.\n\nThese operations advertise where financial stress gathers — search results for bad-credit loans, social media money groups, comment threads under debt content. The application itself has value to the criminals even without the fee: it collects identity documents, bank details, and employment history that feed later identity fraud. Victims are frequently re-targeted afterwards by 'recovery agents' claiming they can retrieve the lost fee for another payment.\n\nIf you are being declined by mainstream lenders, safer routes exist: credit unions, regulated bad-credit products, debt advice charities that can negotiate with creditors, and official hardship schemes. Each is slower than a guaranteed yes — which is precisely why the guaranteed yes should never be believed.","redFlags":["Loan approval guaranteed with no credit check","Upfront fee required to release funds","Fee framed as insurance, government bond, or processing charge","Website domain registered recently","Lender not registered with the financial services regulator"],"whatToDoNow":["Do not pay any upfront fee","Verify the lender on the financial regulator's authorised firm register","Seek credit through a regulated bank, credit union, or lending platform","Report guaranteed-approval loan ads to your consumer protection authority"],"faq":[{"question":"Are there any legitimate bad-credit loan options?","answer":"Yes — some regulated lenders offer products for people with poor credit, but they assess applications individually and never guarantee approval in advance or demand fees before paying out."},{"question":"After I refused to pay more, someone offered to recover my fee — genuine?","answer":"No. Recovery offers that follow a loan scam are the same criminals or associates buying victim lists. Genuine recourse runs through your bank, the police, and regulators — none of whom charge upfront fees to investigate."}],"lastReviewed":"2026-08-01"},{"slug":"can-a-qr-code-redirect-me-to-a-site-that-steals-my-login","url":"https://scamencyclopedia.org/questions/can-a-qr-code-redirect-me-to-a-site-that-steals-my-login","question":"Can a QR code redirect me to a site that steals my login?","shortAnswer":"Yes. QR codes can link to any URL — including fake login pages designed to steal your credentials.","explanation":"A QR code is simply a visual encoding of a URL. Scanning one with your phone is equivalent to clicking a link you cannot read in advance. Malicious QR codes placed on flyers, stickers over legitimate codes, or shared digitally can direct you to convincing phishing sites that mimic bank logins, cryptocurrency exchanges, government portals, or social media platforms. You enter your credentials on the fake page, which are immediately captured. Some sites also attempt to install malware through the browser. The risk is heightened when codes appear in unexpected places — emails, random flyers, or stickers placed on restaurant tables or parking meters over the original code.\n\n'Quishing' works because the QR format hides the destination in plain sight and shifts the interaction to your phone — often outside corporate security filters and onto a small screen where address bars are easy to overlook. Payment contexts are the most exploited: parking meters, restaurant menus, invoice attachments, and charging stations, where scanning-and-paying is already the expected behaviour and a swapped sticker harvests card details in seconds.\n\nBring the same scepticism to codes that you would to links in emails. In public settings, glance for stickers layered over original signage; on screens, prefer typing the organisation's known address over scanning. If a scanned page asks for logins or payment, stop and reach the service through its official app or website instead.","redFlags":["QR code sent by email from an unverified sender","Code appears as a sticker applied over another code","Scanned URL shows an unfamiliar or slightly misspelled domain","Page immediately asks for login credentials or payment details","Browser warns of an unsafe or deceptive site"],"whatToDoNow":["Preview the URL before following any QR code link","Do not enter credentials on a page reached via QR code unless the domain is verified","If you entered credentials, change your password and check account activity","Report suspicious QR codes to the venue or platform involved"],"faq":[{"question":"How do I preview where a QR code leads before following the link?","answer":"Most phone camera apps and QR scanner apps display the URL before opening it. Always check the domain before proceeding, and close the tab if the address looks unfamiliar."},{"question":"Is scanning a QR code itself dangerous, or only the website it opens?","answer":"Scanning merely reads the encoded address — the risk begins when the page opens and asks something of you. Preview the URL, and abandon any page requesting credentials or payment that you cannot verify."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-new-contact-on-linkedin-who-wants-to-discuss-investment-a-scammer","url":"https://scamencyclopedia.org/questions/is-a-new-contact-on-linkedin-who-wants-to-discuss-investment-a-scammer","question":"Is a new LinkedIn contact who wants to discuss investment opportunities a scammer?","shortAnswer":"Treat it as suspicious. LinkedIn is heavily targeted by investment and romance-investment scammers who use professional profiles to build credibility.","explanation":"LinkedIn's professional context makes users more susceptible to investment fraud because the platform implies business legitimacy. Scammers create detailed profiles — sometimes copying real professionals — and connect with targets under the guise of networking. After establishing rapport, the conversation moves to a lucrative investment opportunity on a platform the contact recommends. The platform is fraudulent, and deposits are not recoverable. A separate pattern involves romantic interest developing through professional messaging. Red flags include immediate mention of investment returns, profiles with vague employment histories, and insistence that you join a private investment chat group.\n\nThe group chat is a stage. Dozens of 'members' post gains, thank the mentor, and celebrate withdrawals — most or all of them operated by the scam itself. This manufactured consensus is highly effective on a professional platform, where scepticism reads as rudeness and the language of networking softens what is actually an unsolicited financial pitch from a stranger.\n\nThe professional gloss changes nothing about the underlying rule: investment decisions belong with regulated firms you selected yourself, verified through the regulator's register, never with platforms introduced by an inbound contact. If an approach were a genuine business opportunity, it would withstand you declining the chat group, checking registration, and taking independent advice — a scam will not survive any of those steps.","redFlags":["New connection immediately pivots to investment opportunities","Profile has vague employment history or recently created","Photo looks like a stock image or professionally posed headshot","Mentions specific returns or guarantees on an investment platform","Wants to move conversation to WhatsApp or Telegram"],"whatToDoNow":["Do not follow up on any investment recommendation from an unverified contact","Reverse image search the profile photo","Report the profile to LinkedIn","Never invest through a platform recommended solely by a cold LinkedIn contact"],"faq":[{"question":"Could it be a genuine investment professional?","answer":"Regulated investment professionals do not solicit clients through unsolicited LinkedIn messages. Genuine professionals direct you to their firm's official channels."},{"question":"The contact's profile shows a real company and mutual connections — reassuring?","answer":"Not especially. Profiles are assembled from stolen photographs and invented histories, and mutual connections often accepted the same cold request. Verify people through their claimed employer's official channels, not through the platform alone."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-request-to-pay-an-invoice-by-crypto-instead-of-bank-transfer-a-scam","url":"https://scamencyclopedia.org/questions/is-a-request-to-pay-an-invoice-by-crypto-instead-of-bank-transfer-a-scam","question":"Is a request to pay an invoice by cryptocurrency instead of bank transfer a scam?","shortAnswer":"In a business context, a sudden switch to crypto payment is a major red flag and often indicates fraud.","explanation":"Business email compromise and invoice fraud increasingly involve a last-minute request to pay in Bitcoin or another cryptocurrency rather than by the usual bank transfer. Reasons given include 'banking issues', 'faster processing', or 'currency conversion savings'. Crypto payments are irreversible, have no chargeback mechanism, and are difficult to trace. No legitimate mainstream supplier suddenly switches payment method to cryptocurrency for a standard commercial invoice. If you receive such a request, verify by calling your contact at the supplier using a number from your existing records — not any contact information in the email requesting the change.\n\nRequests like this usually follow a genuine compromise somewhere in the chain — a hacked mailbox on either side, or a lookalike domain registered a few characters from the real one. Attackers read invoice threads for weeks before striking, then time the switch to a real payment that is genuinely due, which is why the request so often feels plausible to the person processing it.\n\nProcess is the defence. Payment-detail changes should trigger voice verification with a known contact as a fixed rule, regardless of how routine the email seems, and crypto requests should be treated as presumptive fraud in any business that does not already transact that way. A single verification call is cheaper than any recovery effort — crypto transfers, once confirmed, are effectively gone.","redFlags":["Established supplier suddenly requests crypto instead of their usual bank account","Reason given for the change is vague or technical-sounding","Request came by email only, with no prior discussion","Crypto wallet address provided in the email body","The email domain is slightly different from the usual one"],"whatToDoNow":["Call the supplier using the phone number you already have on record","Do not use any contact details provided in the suspicious email","Report the request to your finance or compliance team","Report suspected business email compromise to your national fraud authority"],"faq":[{"question":"Are any businesses legitimately requesting crypto invoices?","answer":"Some specialist or international businesses do accept crypto, but this is established in advance as a payment method — not introduced suddenly mid-transaction via email."},{"question":"We already paid to the wallet address — is anything recoverable?","answer":"Act immediately: notify your bank, report to your national fraud authority, and alert the genuine supplier that their correspondence may be compromised. Direct recovery of crypto is rare, but fast reporting sometimes enables exchanges to freeze funds and protects you in later disputes."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-online-insurance-quote-that-asks-for-full-payment-before-any-documents-safe","url":"https://scamencyclopedia.org/questions/is-an-online-insurance-quote-that-asks-for-full-payment-before-any-documents-safe","question":"Is an online insurance quote that asks for full payment before sending any documents safe?","shortAnswer":"No. Legitimate insurers provide a full policy schedule and certificate before or immediately after payment — any that refuse are likely ghost brokers.","explanation":"Ghost broking is a widespread insurance scam. A ghost broker poses as a legitimate insurer or broker, collects your premium, and either issues a fake policy document or buys a real policy using false information that renders it void at claim time. You believe you are covered, but when you need to make a claim you discover the policy is worthless. Warning signs include no physical address, no registration with the financial services regulator, payment only by bank transfer or cryptocurrency, and pressure to pay quickly. Always verify an insurer's registration number against your national financial regulator's public register before paying.\n\nGhost broking causes damage that surfaces at the worst possible moment. Driving or operating on a void policy can mean penalties for being effectively uninsured, seized vehicles, and personal liability for accident costs — long after the 'broker' has vanished. Policies bought with falsified details, such as a wrong address or an invented no-claims history, are legally fragile even when a real insurer issued them, because the misrepresentation voids the cover.\n\nCheap quotes spread through social media, student groups, and community networks precisely because word-of-mouth substitutes for verification. Check the seller against the regulator's register, pay by card directly to a firm you have verified, and confirm the policy exists by contacting the insurer named on the documents through its official contact details.","redFlags":["Premium must be paid before any policy documents are issued","No FCA, FCA-equivalent, or state insurance department registration","Quote is significantly cheaper than all other insurers","Payment only by bank transfer, not card","Insurer found through social media rather than a registered comparison site"],"whatToDoNow":["Verify the insurer on your national financial regulator's register before paying","Request a full policy document before completing payment","If you suspect ghost broking, report to your financial regulator and police","Check whether any existing policy you hold is genuine using the same register"],"faq":[{"question":"What if I receive a policy document but it seems slightly wrong?","answer":"Ghost brokers sometimes provide forged documents. Cross-check the policy reference with the insurer named directly, using contact details you source independently."},{"question":"A friend used the same broker and successfully claimed — doesn't that validate them?","answer":"Not reliably. Some ghost brokers place genuine policies for early customers while falsifying details on others, and a policy can operate normally until a claim exposes the misrepresentation. Only the regulatory register verifies a broker."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-limited-time-flash-sale-from-an-unfamiliar-website-safe","url":"https://scamencyclopedia.org/questions/is-a-limited-time-flash-sale-from-an-unfamiliar-website-safe","question":"Is a limited-time flash sale from an unfamiliar website safe?","shortAnswer":"Treat it as suspicious. Flash sale urgency is a common tactic used by fake online stores to rush you into payment before you can verify the site.","explanation":"Scam online stores use countdown timers and 'only 3 left' notifications to prevent shoppers from pausing to research the site. Once you pay — typically by card — the goods either never arrive, arrive as poor-quality imitations, or your card details are harvested for future fraud. Warning signs include a domain registered within the past year, no physical return address, poor or stolen product images, and payment pages that feel slightly off. Trust signals that can be faked include padlock icons (HTTPS protects data in transit but does not validate legitimacy) and copied testimonials. Always search the site name plus 'reviews' or 'scam' before purchasing.\n\nThese storefronts are disposable by design — template sites launched in batches, run for weeks under advertising traffic, then abandoned and relaunched under new names once complaints accumulate. That churn is why a recent domain age matters more than polish: professional product photos and slick checkouts are stolen or templated in minutes, but history cannot be faked.\n\nPayment method is your safety net when judgement fails. A credit card offers chargeback rights; payment platforms with buyer protection add another layer; bank transfers and crypto offer none and should end the transaction. If goods arrive counterfeit or never arrive, dispute promptly with your card provider — waiting narrows your options.","redFlags":["Countdown timer creating false urgency to buy","Domain registered recently with a vague company name","No verifiable physical address or returns policy","Product prices are dramatically below other retailers","Payment page redirects to an unfamiliar domain"],"whatToDoNow":["Search the site name and check consumer review sites before buying","Verify the domain age using a free WHOIS lookup tool","If you have paid, contact your card provider about a chargeback","Report the site to your national consumer authority"],"faq":[{"question":"Does HTTPS mean a website is safe?","answer":"HTTPS means the connection is encrypted, not that the site is legitimate. Scam sites routinely use HTTPS. Always research the retailer separately."},{"question":"The site had a working returns page and live chat — doesn't that suggest a real business?","answer":"Both are standard features of scam storefront templates, and chat can even be staffed until the site is abandoned. History, independent reviews, and a verifiable business address are the signals that cannot be installed with a plugin."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-fake-invoice-sent-to-a-senior-parent-by-mail-a-scam","url":"https://scamencyclopedia.org/questions/is-a-fake-invoice-sent-to-a-senior-parent-by-mail-a-scam","question":"Is a fake invoice sent to a senior parent by mail a scam?","shortAnswer":"Yes. Fraudulent invoices sent by post are common scams targeting older adults, using official-looking formats to demand payment for services never ordered.","explanation":"Older adults receive fraudulent invoices by mail claiming to be from delivery companies, directory services, subscription traps, or charitable organisations they supposedly committed to. The invoice looks official — letterhead, reference numbers, payment slip — and the amount is deliberately modest to seem credible. Some demand renewal fees for services like business directory listings or magazine subscriptions the recipient has no memory of signing up for. Others are outright fabrications. If a family member receives an unexpected bill, search the company name, look for consumer complaints, and call the company's independently verified number before any payment is made.\n\nThis fraud exploits habits of a generation that pays bills promptly and trusts printed correspondence. Once one invoice is paid, the address is marked as responsive and the volume increases — sometimes escalating to fake 'final demands' and threatened debt collection for entirely invented services. Directory-listing and subscription-renewal formats are popular because they mimic obligations a person could plausibly have forgotten.\n\nFamilies can help without taking over: an agreement that any unexpected invoice waits until a second person has seen it removes the time pressure these letters depend on. A mail redirection or regular shared bill review helps where targeting has already begun. Every fake invoice should be reported — enforcement action against these operations is built on volume of complaints.","redFlags":["Invoice for a service the recipient has no memory of ordering","Company name is difficult to search or has many complaints","Amount is deliberately low to seem routine","Payment slip included makes it easy to send a cheque without questioning","Warning that failure to pay will result in debt recovery action"],"whatToDoNow":["Do not pay until you have verified the invoice independently","Search the company name and check consumer review sites","Call the company using a number you find independently — not one on the invoice","Report fraudulent invoices to your national trading standards authority"],"faq":[{"question":"What if the invoice references a specific order number?","answer":"Reference numbers can be invented. Always verify the underlying service independently before paying any unexpected invoice."},{"question":"My parent already paid one — what should we do now?","answer":"Contact their bank about recalling the payment if recent, keep the invoice and envelope as evidence, and report to trading standards. Expect follow-up demands — paying once increases targeting — and agree a family check on future unexpected bills."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-text-saying-my-driving-licence-renewal-fee-is-due-real","url":"https://scamencyclopedia.org/questions/is-a-text-saying-my-driving-licence-renewal-fee-is-due-real","question":"Is a text saying my driving licence renewal fee is due real?","shortAnswer":"Almost certainly not. Official driving licence renewal notices arrive by post and direct you to the official government website — not a payment link in a text.","explanation":"Driving licence renewal phishing texts circulate widely, especially in the weeks before typical renewal ages. They claim a small fee is outstanding and that your licence will be cancelled if you don't act within 24 hours. The link leads to a convincing fake government portal that collects your personal details and card information. Genuine vehicle licensing authorities contact you by post using the address on record, and any online payment is processed only through the officially registered government domain. No legitimate authority sends an urgent driving licence fee demand by SMS.\n\nThe fake portals behind these texts are thorough: they walk you through personal details, licence information, and card entry across several convincing pages, often finishing with a reassuring confirmation screen. That completeness is the danger — victims come away certain they dealt with the real authority, and only discover otherwise when card fraud or identity misuse begins.\n\nLicensing authorities operate on your registered postal address and their own official domain. Renewals are something you initiate, not something demanded through a message with a countdown. Delete the text, and if you are genuinely unsure of your licence status, check it through the official government site — typed into the browser yourself — where any real requirement will be visible.","redFlags":["Text message rather than official postal notice","Short deadline — licence will be cancelled or invalidated","Payment link does not use the official government domain","No reference to your specific licence number or name","Small fee required — designed to seem insignificant enough to just pay"],"whatToDoNow":["Do not click the link","Check your driving licence status directly on the official government website","Forward the text to your national spam reporting number","If you entered card details, contact your bank immediately"],"faq":[{"question":"My licence does need renewing soon — could the text be genuine?","answer":"Renewal timing can be guessed or inferred from data breaches. Regardless, genuine notices arrive by post. Check the official government site directly to confirm your renewal status."},{"question":"I completed the whole form before doubting it — how bad is that?","answer":"Treat it as full exposure: card details plus the identity data a fraudster needs. Tell your bank at once, monitor your credit file for new applications, and be alert for follow-up calls that use the harvested information to impersonate your bank or the licensing authority."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-work-from-home-packing-or-stuffing-envelopes-job-legitimate","url":"https://scamencyclopedia.org/questions/is-a-work-from-home-packing-or-stuffing-envelopes-job-legitimate","question":"Is a work-from-home packing or envelope stuffing job legitimate?","shortAnswer":"No. Envelope stuffing and parcel packing jobs are classic advance-fee or reshipping scams — there is no legitimate version.","explanation":"These job advertisements have circulated for decades in classifieds, job boards, and social media. They promise significant income for simple home-based work. In the advance-fee variant, you pay a starter kit or registration fee and receive instructions to recruit others into the same scheme. In the reshipping variant, you receive packages at your home and forward them to an address — which makes you an unwitting participant in a stolen goods or money laundering operation, potentially exposing you to criminal liability. No employer needs to pay someone to stuff envelopes in their home in the modern era — any such offer is fraudulent.\n\nThe reshipping variant deserves the strongest warning because the harm outlasts the deception. Parcels arriving at your address are typically bought with stolen cards; forwarding them makes your name, address, and signature part of a criminal logistics chain. When investigators trace the goods, the trail ends at you — and 'I thought it was a job' is a stressful defence to have to make, even when true.\n\nThe recruitment side has modernised: polished onboarding portals, contracts, employee handbooks, and 'shift managers' on messaging apps all exist to make the arrangement feel like employment. None of it changes the underlying test — legitimate employers pay you, never the reverse, and no genuine role consists of receiving and re-sending parcels from home.","redFlags":["Promises significant income for minimal, simple tasks","Requires a starter kit, registration, or material fee upfront","Instructions arrive only after payment","Job involves receiving and forwarding packages","Advertised on classified sites with vague company name"],"whatToDoNow":["Do not pay any fee and do not receive packages on behalf of strangers","Report the advertisement to the platform and consumer protection authority","If you have already received packages, contact police for advice on liability"],"faq":[{"question":"What if the ad says the fee is refundable after my first week?","answer":"Refundable fee promises are part of the script. Once paid, the fee is not returned and often the company becomes unreachable."},{"question":"Packages are already arriving at my address — what should I do?","answer":"Stop forwarding immediately, keep all tracking information and correspondence, and contact the police for guidance before returning or disposing of anything. Reporting proactively documents your good faith, which matters if the operation is later investigated."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-social-media-account-offering-cheap-designer-goods-a-scam","url":"https://scamencyclopedia.org/questions/is-a-social-media-account-offering-cheap-designer-goods-a-scam","question":"Is a social media account offering cheap designer goods a scam?","shortAnswer":"Almost always. Accounts selling luxury brands at a fraction of retail price are selling fakes, or will take your money and send nothing.","explanation":"Instagram, TikTok, and Facebook accounts routinely advertise designer handbags, trainers, sunglasses, and clothing at 70–90% off retail prices. In the best case, you receive a low-quality counterfeit. In many cases, payment is taken — often via bank transfer, Zelle, or cryptocurrency — and no item arrives. These accounts often have a short history, a flood of generic five-star comments, and no physical address. Even if an item is received, importing counterfeit goods may expose you to seizure by customs and, in some jurisdictions, legal consequences. Buy designer goods only from the brand's official website or authorised retailers.\n\nThe engagement on these accounts is rented, not earned: follower counts, glowing comments, and unboxing clips are all purchasable, and accounts are discarded and relaunched faster than platforms remove them. Some operations deliver cheap counterfeits on early orders specifically to generate authentic-looking customer content before switching to taking payments for nothing.\n\nIf the price of a luxury item is a small fraction of retail, there is no version of the transaction that ends well — the options are counterfeit goods, seized parcels, stolen card details, or simple theft of the payment. Authenticity has one reliable source: the brand's own site and its listed authorised retailers, where discounts are modest and provenance is real.","redFlags":["Price is dramatically below the official retail price","Account created recently with a curated but thin post history","Comments appear fake — generic phrases and emoji-only responses","Payment by bank transfer, Zelle, or cryptocurrency requested","No physical store address or verifiable business registration"],"whatToDoNow":["Do not purchase — even receiving a fake item carries customs risks","Report the account to the social media platform","If you have paid, contact your bank or card provider for a chargeback"],"faq":[{"question":"What if someone I know bought from them and received the item?","answer":"Counterfeit operations often fulfil small early orders to build a reputation, then take larger payments and disappear. A previous delivery does not guarantee future ones."},{"question":"The seller says the goods are surplus stock direct from the factory — plausible?","answer":"This is a standard counterfeit-trade cover story. Genuine brand surplus moves through official outlet channels, not anonymous social accounts requiring irreversible payment. Treat the claim as confirmation of the problem, not an explanation."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-email-with-my-home-address-threatening-to-expose-me-a-scam","url":"https://scamencyclopedia.org/questions/is-an-email-with-my-home-address-threatening-to-expose-me-a-scam","question":"Is an email with my home address threatening to expose me a scam?","shortAnswer":"Yes. This is a sextortion or extortion scam. The threat is a bluff designed to create panic.","explanation":"Doxxing-style extortion emails include the recipient's real home address — sourced from data breaches or public records — to prove the sender 'knows everything about you'. They claim to have compromising footage, browsing history, or personal secrets and demand payment in cryptocurrency within 24 to 48 hours, or they will send the material to your employer, family, or neighbours. In the vast majority of cases no compromising material exists. The address and sometimes a real password are used purely to make the threat seem credible. Do not pay. Payment invites further extortion and confirms your details are active.\n\nThese emails are sent in vast automated batches, personalised only by mail-merging breach data — your address, an old password, sometimes a phone number. The occasional inclusion of a street-view photo of your home is the same trick performed with mapping tools. Nothing in the message demonstrates access to your devices; if the sender truly had footage, they would show it.\n\nThe healthy response is administrative, not emotional. Update any password the email quoted, and anywhere it was reused, enable two-factor authentication, report the email, and delete it. Payment is the only real danger in the situation — it marks you as responsive, funds the operation, and invites indefinite follow-up demands.","redFlags":["Email contains your real home address or an old password","Demands cryptocurrency payment within a tight deadline","Claims to have installed spyware or accessed your webcam","Threatens to share footage with your contact list","Sender uses an anonymous or auto-generated email address"],"whatToDoNow":["Do not pay — it will not end the harassment","Change any password referenced in the email immediately","Report the email to your national fraud reporting service","Do not reply, which confirms your address is active"],"faq":[{"question":"Should I be worried that they have my address?","answer":"It is alarming, but most home addresses are available through public records or past data breaches. Having your address does not mean they have compromising content about you."},{"question":"The email included a password I really used — doesn't that prove they hacked me?","answer":"It proves the password appeared in a historical data breach, nothing more. Millions of credential pairs circulate from old leaks. Change that password wherever it survives and treat the rest of the message as theatre."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-landlord-who-wont-provide-a-written-tenancy-agreement-a-red-flag","url":"https://scamencyclopedia.org/questions/is-a-landlord-who-wont-provide-a-written-tenancy-agreement-a-red-flag","question":"Is a landlord who won't provide a written tenancy agreement a red flag?","shortAnswer":"Yes. A legitimate landlord will always provide a written tenancy agreement before you pay or move in.","explanation":"Rental scammers frequently ask tenants to move quickly, pay a deposit or first month's rent in advance, and hand over keys — all while promising the paperwork will follow. In practice, the written agreement never arrives because either there is no property to rent or the person advertising it has no right to let it. Without a signed agreement, you have no proof of your tenancy, no recourse for deposit return, and no legal protection. Even for a short-let or room share, a basic written record should be provided before any money changes hands. If a landlord refuses to put anything in writing, treat it as a serious red flag and do not pay.\n\nThe missing paperwork is usually strategic. A written agreement creates evidence — of who let the property, on what terms, and for how much — and evidence is precisely what a fraudulent or unauthorised landlord cannot afford to create. The same logic explains the preference for cash, the reluctance to meet, and the vagueness about deposit protection: every informal element removes a future avenue of recourse.\n\nBefore money moves, insist on the full set: a written agreement, verified ownership, a receipt for every payment, and — where the law requires it — deposit protection details. A genuine landlord produces these as a matter of routine. Someone who calls basic documentation unnecessary is describing the tenancy they intend to give you.","redFlags":["Landlord insists on cash payment before providing paperwork","Agreement is promised after you move in or after payment","Communication only by text or messaging app","Property was advertised below the local market rate","Landlord is 'abroad' and cannot meet in person"],"whatToDoNow":["Refuse to pay any money without a signed written agreement","Verify the landlord owns the property using land registry records","View the property in person with someone you trust","Report suspected rental fraud to the police and housing authority"],"faq":[{"question":"Is a verbal agreement legally binding?","answer":"In some jurisdictions a verbal tenancy has limited legal standing, but it is extremely hard to enforce. Always insist on written documentation before handing over money."},{"question":"I've already moved in without a written agreement — what should I do?","answer":"Build your evidence now: pay by traceable methods, keep every message about rent and repairs, and request a written agreement formally. Local housing services can advise on your rights, which in many places exist even without signed paperwork."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-cryptocurrency-platform-that-shows-growing-profits-but-wont-pay-out-a-scam","url":"https://scamencyclopedia.org/questions/is-a-cryptocurrency-platform-that-shows-growing-profits-but-wont-pay-out-a-scam","question":"Is a cryptocurrency platform that shows growing profits but won't pay out a scam?","shortAnswer":"Yes. A platform that shows impressive balance growth but blocks withdrawals is a classic investment fraud.","explanation":"These platforms — often called 'pig butchering' or 'romance investment' scams — show victims a convincing dashboard of rising returns. When the victim tries to withdraw, they are told they must pay a tax, a fee, a 'withdrawal bond', or that their account has been flagged and needs to be 'verified'. Each payment unlocks a new demand. The profits shown on screen are entirely fictional figures written into the interface; no real trading ever occurs. Once the victim stops paying, contact ends and the platform disappears. No legitimate regulated exchange charges fees that must be paid before withdrawing your own funds.\n\nThe 'taxes' and 'fees' stage is where the scam extracts its largest sums, because by then the victim is defending an investment that feels real. Each payment is framed as the final obstacle, and the platform's 'support desk' produces official-looking notices to justify the next one. Some operations even process one small early withdrawal deliberately, converting a sceptic into an advocate before the door closes.\n\nWhen a withdrawal is refused, the money already deposited is gone from your control — further payments only measure how much more can be taken. Preserve everything: wallet addresses, transaction records, chat history, and the platform's URLs. These details support reports to regulators and police, and they protect you from the follow-on 'recovery agents' who target victims of exactly this fraud.","redFlags":["Platform recommended by a romantic partner or new online friend","Dashboard shows consistent gains regardless of market conditions","Withdrawal blocked unless you pay a tax, bond, or verification fee","Customer support stalls or invents new requirements each time","Platform has no verifiable regulatory licence"],"whatToDoNow":["Stop sending money immediately — additional payments will not unlock a withdrawal","Screenshot the platform, chat logs, and any payment receipts","Report to your national financial regulator and fraud authority","Seek support from a scam recovery charity — not a fee-charging 'recovery agent'"],"faq":[{"question":"Can I ever get my money back from this type of scam?","answer":"Recovery is difficult because crypto transfers are irreversible. Report to your bank and fraud authority promptly — card payments may occasionally be partially recovered but crypto rarely is."},{"question":"Support says my account is frozen for compliance checks and needs a deposit to clear — real?","answer":"No. Genuine compliance checks never require you to deposit more money. This script exists to extract a further payment and will repeat with new justifications for as long as you continue paying."}],"lastReviewed":"2026-08-01"},{"slug":"can-a-scammer-open-a-credit-card-in-my-name-with-stolen-personal-data","url":"https://scamencyclopedia.org/questions/can-a-scammer-open-a-credit-card-in-my-name-with-stolen-personal-data","question":"Can a scammer open a credit card in my name with stolen personal data?","shortAnswer":"Yes. With enough personal data, criminals can apply for credit cards, loans, and other financial products in your name.","explanation":"A credit or identity fraud occurs when a criminal uses your name, date of birth, address history, and national identity number to apply for financial products. This information is frequently available through data breaches, phishing attacks, or social engineering. The criminal runs up debt in your name, damaging your credit score and potentially leaving you responsible if not reported quickly. Many victims first learn of fraudulent accounts through rejected credit applications, unexpected correspondence, or entries on a credit report. Placing a fraud or credit alert with credit reference agencies limits new account openings and notifies you of applications made in your name.\n\nDiscovery is usually late because the fraudster redirects the paper trail — statements go to an address they control, contact numbers are theirs, and the first sign reaching you may be a default notice or a collections call months in. That lag is why routine credit-report checks matter even when nothing seems wrong: a hard search you do not recognise is an early alarm worth acting on.\n\nWhen fraud is confirmed, work systematically: dispute each account in writing with the lender's fraud team, obtain written confirmation of removal, and keep a dated file of every contact. Many jurisdictions offer a protective registration or extended fraud alert for repeat targets — ask the credit agencies what applies where you live.","redFlags":["Unexpected credit card, loan, or utility account correspondence in your name","Unexplained hard searches appearing on your credit report","Credit application rejected for no apparent reason","You recently shared personal details with an unknown source"],"whatToDoNow":["Check your full credit report for unrecognised accounts or searches","Place a fraud alert or credit freeze with all three major credit agencies","Report identity fraud to the police and national fraud authority","Contact any affected lender to dispute fraudulent accounts"],"faq":[{"question":"Am I liable for debt on a fraudulent account?","answer":"Not if you report it promptly. Contact the lender and credit reference agencies as soon as you discover the account. Most lenders write off confirmed identity fraud cases."},{"question":"How did they get enough of my information to pass a credit check?","answer":"Usually by aggregation: a breach supplies some fields, social media and public records fill others, and phishing completes the set. No single leak needs to be catastrophic — which is why limiting what you share and reusing nothing matters."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-text-saying-a-family-member-has-been-in-an-accident-and-needs-money-a-scam","url":"https://scamencyclopedia.org/questions/is-a-text-saying-a-family-member-has-been-in-an-accident-and-needs-money-a-scam","question":"Is a text saying a family member has been in an accident and needs money a scam?","shortAnswer":"Almost always yes. This is a variant of the grandparent or family emergency scam, now increasingly delivered by text or WhatsApp.","explanation":"Family emergency scams have historically been phone calls but are now also sent by text, WhatsApp, and even AI-cloned voice messages. The message claims a son, daughter, grandchild, or parent has been in an accident, arrested, or is in hospital abroad and needs immediate cash — often via wire transfer, cryptocurrency, or gift cards. The instruction may be to 'not tell' other family members to prevent embarrassment. Before sending any money, call the family member on the phone number you already have for them, or call another family member who would know their whereabouts. A few seconds of verification prevents the loss of large sums.\n\nThe scenario is engineered to make verification feel dangerous — the relative is 'in surgery', 'in custody', or 'too ashamed', and a helpful lawyer or officer is standing by to take the payment. Secrecy instructions are the load-bearing element: they isolate you from the one phone call that would collapse the story. Grief, fear, and love are being used as tools, which is why these messages succeed against careful people.\n\nAgree a family verification habit before it is ever needed: a code word, or a rule that money requests are always confirmed by calling the person's known number. If a message arrives, make that call first — a genuine emergency is never worsened by sixty seconds of checking, and a scam rarely survives it.","redFlags":["Unexpected message claiming a relative is in trouble","Instruction not to tell other family members","Request for urgent payment by untraceable method","Voice message sounds like a family member but is slightly off","Follow-up call from a supposed lawyer, officer, or hospital administrator"],"whatToDoNow":["Call the family member directly on their known number before doing anything else","Contact another family member to verify","Do not send money until you have confirmed the situation independently","Report to police if you believe it is a scam"],"faq":[{"question":"What if the voice message sounds exactly like my family member?","answer":"AI voice cloning requires only a few seconds of audio, which is often available from social media. Verify by calling the person on their own number regardless of how convincing the message sounds."},{"question":"The message came from my relative's actual account — how?","answer":"Compromised messaging accounts are common, and a hijacked account sends this exact script to every contact. That is why the safe verification is a voice call to their phone number, not a reply inside the same conversation."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-delivery-driver-asking-for-a-cash-payment-on-the-doorstep-a-scam","url":"https://scamencyclopedia.org/questions/is-a-delivery-driver-asking-for-a-cash-payment-on-the-doorstep-a-scam","question":"Is a delivery driver asking for a cash payment on the doorstep a scam?","shortAnswer":"Treat it with caution. Doorstep cash payment requests can be legitimate customs charges but are also used in delivery scams and distraction burglaries.","explanation":"Genuine customs or import tax charges are sometimes collected on delivery for items shipped internationally, but these are documented on an official customs form accompanying the parcel, can be verified with the postal service, and are typically charged at a known flat rate or percentage. Scammers sometimes pose as delivery drivers — or accompany a legitimate-looking delivery — demanding unexpected cash fees. Some doorstep scams use one person to hold attention while an accomplice enters the property. If a driver demands cash with no paperwork, ask for a formal customs docket, refuse to pay without documentation, and contact the courier company directly to verify.\n\nLegitimate courier operations have moved overwhelmingly to cashless, documented payment precisely because doorstep cash is unaccountable. Genuine customs or handling charges generate a paper trail you can check — a reference number, an official notice, a payment page on the courier's own domain — before anyone stands on your doorstep. An improvised cash demand with none of these is a strong signal on its own.\n\nThe personal-safety dimension matters as much as the money. Distraction techniques rely on drawing you into discussion, so keep the interaction short and the door secured while you verify. Refusing an undocumented payment costs you nothing: a genuine parcel with a genuine charge will follow official channels, and a card left through the letterbox can always be checked later.","redFlags":["Driver demands cash but has no customs or fee paperwork","Amount demanded varies or is negotiable","Driver asks to come inside for any reason","Two people arrive together with only one in uniform","No parcel reference matching any order you placed"],"whatToDoNow":["Ask for written customs documentation before paying anything","Keep the door closed or chain on while verifying","Call the courier company on the number from their official website","Report suspicious doorstep visits to local police"],"faq":[{"question":"Are legitimate customs fees collected on delivery?","answer":"Yes, but they come with official paperwork and can be independently verified with the courier or customs authority. A legitimate driver will wait while you check — a scammer will pressure you to pay quickly."},{"question":"The driver left with my parcel when I refused to pay — did I lose it?","answer":"A genuine held parcel remains retrievable through the courier's official process once any real charge is settled. If the parcel and 'driver' vanish entirely, the demand was fraudulent and refusing was the correct call. Verify through your retailer's tracking either way."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-airdrop-that-asks-me-to-connect-my-wallet-to-claim-tokens-safe","url":"https://scamencyclopedia.org/questions/is-an-airdrop-that-asks-me-to-connect-my-wallet-to-claim-tokens-safe","question":"Is an airdrop that asks me to connect my wallet to claim free tokens safe?","shortAnswer":"No. Connect-to-claim airdrop sites are a common wallet drainer attack that empties your crypto holdings in seconds.","explanation":"Malicious airdrop sites impersonate genuine blockchain projects, celebrity crypto launches, or exchange promotions. When you connect your wallet to claim the promised tokens, you unknowingly sign a transaction that grants the site permission to transfer all assets from your wallet. Wallet drainer smart contracts can sweep an entire portfolio in a single automated transaction before you realise what has happened. Legitimate airdrops from established projects are distributed automatically to eligible wallet addresses — they never require you to connect to an external site and sign a transaction. If a site asks you to connect a wallet to receive something free, it should be treated as a drainer until proven otherwise.\n\nDrainer kits are sold as ready-made criminal software, which is why these sites appear in waves around every major token launch, exchange announcement, and celebrity crypto moment. Hijacked verified social accounts and paid ads supply the traffic; urgency and free money supply the click. The signature request itself is where everything is decided — a wall of technical text that most users approve on reflex.\n\nSlowing down at the signature prompt is the single most protective crypto habit. Read what the transaction actually grants: approvals for tokens you were not expecting, unlimited spending allowances, or blanket permissions over your NFTs are drain permissions, not claim steps. Keeping long-term holdings in a wallet that never touches unfamiliar sites removes most of the risk outright.","redFlags":["Airdrop discovered via social media ad or DM","Site asks you to connect your wallet to claim free tokens","Transaction approval requests are vaguely worded or set to unlimited","Project or token has no established presence before this announcement","Urgent window to claim before tokens run out"],"whatToDoNow":["Do not connect your wallet to an unfamiliar site","If you connected, immediately revoke token approvals via your wallet's approval manager","Move remaining assets to a new wallet address","Report the site to the platform where you found it"],"faq":[{"question":"How do I revoke permissions after connecting to a suspicious site?","answer":"Use a token approval checker tool compatible with your wallet or blockchain. These tools show which contracts have spending permissions and let you revoke them. Act quickly — time matters."},{"question":"Why did the site need any permission at all just to send me tokens?","answer":"It didn't — that is the tell. Genuine distributions send assets to eligible addresses without your involvement. Any 'claim' flow requiring transaction approval is asking you to authorise something, and with drainer sites that something is the removal of your funds."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-car-listing-where-the-seller-is-abroad-and-uses-an-escrow-service-a-scam","url":"https://scamencyclopedia.org/questions/is-a-car-listing-where-the-seller-is-abroad-and-uses-an-escrow-service-a-scam","question":"Is a car listing where the seller is abroad and uses an escrow service a scam?","shortAnswer":"Yes. Sellers claiming to be abroad who offer a special escrow service for vehicle payment are running a well-known car scam.","explanation":"The fake vehicle escrow scam is one of the most consistent online fraud patterns. A car is listed at an attractive price; the seller explains they are abroad due to work, military service, or personal circumstances, and that payment should go through an 'approved escrow service' that will hold the money until the car arrives. The escrow service is entirely controlled by the scammer. Once payment is made, both the seller and the escrow site disappear and no car arrives. Real vehicle purchases at distance use only well-known, independent, verified escrow or payment protection services — never a custom service suggested by the seller. Always view a car in person before paying anything.\n\nThe fake escrow site is the centrepiece of the fraud: professional design, invented protection policies, live 'transaction tracking', and customer support that answers promptly right up until payment clears. Military postings, overseas contracts, and bereavements supply the cover story, and the below-market price supplies the motivation to believe it. Some victims even receive forged shipping documents while being asked for a second payment — 'insurance' or 'customs' — before the nonexistent delivery.\n\nDistance selling of vehicles has legitimate forms, but they all survive verification: established dealers with premises you can check, history-checked vehicles, protected payment, and no objection to independent inspection. A private seller who cannot be met plus a payment channel chosen by that seller is a combination with no safe version.","redFlags":["Seller is abroad and cannot show the vehicle in person","Proposes or insists on a specific escrow service","Price is below typical market value for the model","Communication moves quickly from ad to payment request","Listing photos are stock images or taken in another country"],"whatToDoNow":["Never use an escrow service recommended by the seller","Insist on viewing the vehicle in person before any payment","Report the listing to the platform and trading standards authority","If you have paid, contact your bank and report to police immediately"],"faq":[{"question":"What if the seller offers to let me keep the money if the car doesn't arrive?","answer":"This guarantee is worthless because both the seller and the escrow they control will disappear once payment is sent. It is used to lower your guard."},{"question":"The escrow website looks completely professional — how can I check it?","answer":"Search the service's name with 'reviews' and 'scam', check the domain's age, and see whether any regulator or established marketplace endorses it. Fake escrow sites are new, unendorsed, and exist only in listings by the same 'seller'."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-immigrant-worker-at-extra-risk-from-job-or-housing-scams","url":"https://scamencyclopedia.org/questions/is-an-immigrant-worker-at-extra-risk-from-job-or-housing-scams","question":"Are immigrant workers at extra risk from job or housing scams?","shortAnswer":"Yes. Scammers deliberately target newly arrived workers with fake job offers and overpriced or non-existent accommodation.","explanation":"People new to a country are frequently targeted because they may be unfamiliar with local norms, lack an established credit history for housing applications, have limited local contacts to verify information, and may feel uncomfortable reporting fraud to authorities. Common scams include fake work visa sponsorship offers requiring upfront fees, job offers that turn into labour exploitation or money mule recruitment, and rental listings targeting workers who need housing quickly. It is important to know that reporting fraud in your host country is generally safe — most agencies do not share information with immigration enforcement for civil fraud reports.\n\nThese scams spread through the channels newcomers trust most — community social media groups, diaspora messaging channels, and word-of-mouth referrals — where a shared language and nationality substitute for verification. Passport retention deserves specific mention: an employer or agent holding your documents 'for processing' is a control tactic associated with exploitation, and you are entitled to keep your own identity documents.\n\nBuild verification into every major transaction of your first months: employers checked through official registries and a direct call, housing viewed in person before deposits, visa work handled only by licensed advisers you selected. Workers' rights organisations and migrant support charities exist precisely for these questions and typically help regardless of immigration status.","redFlags":["Job offer requires you to pay a visa sponsorship or processing fee","Employer requests your passport before a signed contract","Rental or room available only to your nationality — found via a community app","Landlord or employer communicates only in your first language through an intermediary","Wage payment is promised after a trial period that keeps extending"],"whatToDoNow":["Verify job offers through the official company website and a phone call","Never pay a fee to obtain a work visa — your employer or a licensed immigration lawyer handles this","Contact a local migrant workers' rights organisation for support","Report fraud to the national fraud authority — this is typically separate from immigration"],"faq":[{"question":"Is it safe for an undocumented person to report a scam?","answer":"In most countries, fraud reporting agencies do not share civil fraud complaints with immigration authorities. Migrant workers' rights groups can advise on reporting options and protections."},{"question":"A community member vouches for the agent — is that reliable?","answer":"Treat vouching as a lead, not verification. Fraud within communities often spreads through genuine, well-meaning referrals — early customers are served correctly precisely so they will recommend. Check licences and registrations independently every time."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-text-from-my-water-or-electric-company-saying-i-owe-money-real","url":"https://scamencyclopedia.org/questions/is-a-text-from-my-water-or-electric-company-saying-i-owe-money-real","question":"Is a text from my water or electric company saying I owe money real?","shortAnswer":"It may be a scam. Utility companies send formal overdue notices by post — text messages with payment links are frequently phishing attacks.","explanation":"Utility phishing texts claim your water, gas, or electricity account is overdue and that service will be cut off unless you pay immediately via a link in the message. The link leads to a fake payment portal that harvests your card details. Some variants target customers on standing payment plans with messages claiming their direct debit failed. Real utility companies do send emails and texts as reminders, but they do not threaten immediate disconnection and provide payment links in the same message without allowing you to log in to your account directly. If you are concerned about your utility balance, log in through the official app or website.\n\nDisconnection is a powerful lever because the consequences feel immediate and physical — no heating, no power, no water. In reality, legitimate suppliers follow a lengthy, regulated path before any disconnection, involving repeated written notices and support options for customers in difficulty. An SMS threatening same-day cutoff compresses that entire process into one message, which is precisely what marks it as fake.\n\nThese campaigns also intensify around price changes, cold spells, and energy support schemes, when utility messages are expected and anxiety is high. A related variant offers rebates or government energy support through a link. In both directions — demand or refund — the official app and website remain the only places to act.","redFlags":["Text threatens immediate disconnection unless you pay today","Link leads to a domain other than the official utility company website","Message asks for card details directly, not through your account portal","You have no prior overdue balance that you are aware of","Sender ID shows the utility company name but the link is unfamiliar"],"whatToDoNow":["Do not click the link","Log in to your utility account through the official app or website","Call the utility company using the number on your bill","Report the text to your national spam reporting service"],"faq":[{"question":"Could this be a real overdue notice?","answer":"It is possible but unlikely if it threatens immediate action via a link. Check your balance directly in the app to be sure, without using the link in the message."},{"question":"The message offered an energy rebate rather than demanding money — same risk?","answer":"Yes. Refund and rebate lures collect the same card and bank details through a friendlier framing. Genuine support schemes are applied through official channels or automatically — never through a link asking for your card to 'receive' money."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-pet-sitting-or-dog-walking-job-found-on-craigslist-safe","url":"https://scamencyclopedia.org/questions/is-a-pet-sitting-or-dog-walking-job-found-on-craigslist-safe","question":"Is a pet-sitting or dog-walking job found on Craigslist or a classifieds site safe?","shortAnswer":"Proceed carefully. Pet care jobs on classifieds sites are frequently overpayment scams or personal-data harvesting operations.","explanation":"The pet care overpayment scam follows a predictable pattern. Someone responds to your pet-sitting ad — or posts their own — and offers more than the advertised rate. They send a cheque for significantly more than agreed and ask you to forward the surplus to a pet transport company or groomer. The cheque bounces days later and you are liable for the full amount forwarded. A separate version involves a job post offering high pay for simple pet care, then asking for extensive personal information — passport, bank details — before 'processing your application'. Legitimate pet care work is arranged in person, payments are made directly at the correct amount, and no employer needs your passport before a single walking shift.\n\nThe overpayment mechanic exploits how cheque clearing actually works: funds appear available within days, but the instrument can bounce weeks later, and by then the surplus you forwarded is unrecoverable — leaving you owing the bank the full amount. The 'travelling client' framing exists to explain both the rush and why everything happens remotely.\n\nSimple working rules make this fraud impossible: agreed amounts only, digital payment received and cleared before work or refunds, no forwarding of funds to anyone, and identity documents shared only with an established platform — never emailed to a stranger. A client who resists any of these basics has identified themselves.","redFlags":["Client offers to pay more than the agreed rate","Cheque or money order used rather than a direct digital payment","Request to forward surplus funds to a third party","Job advert asks for personal ID documents before any work begins","Client is travelling and cannot meet in person before paying"],"whatToDoNow":["Refuse any overpayment and return unexplained surpluses immediately","Never forward money to a third party on behalf of a new client","Verify a client's identity before starting any job","Report overpayment approaches to the classifieds platform"],"faq":[{"question":"Is it safe to accept payment through an app for pet care?","answer":"Digital payment apps are safer than cheques. Use apps with buyer and seller protection, receive payment before starting work for new clients, and only accept the agreed amount."},{"question":"The extra money is showing in my account — doesn't that mean the cheque cleared?","answer":"Not necessarily. Banks release funds provisionally before a cheque fully clears, and a fraudulent one can be reversed weeks later. Money you forwarded in the meantime becomes your loss, which is exactly the mechanism this scam relies on."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-call-saying-my-national-insurance-or-social-security-number-has-been-used-in-crime-real","url":"https://scamencyclopedia.org/questions/is-a-call-saying-my-national-insurance-or-social-security-number-has-been-used-in-crime-real","question":"Is a call saying my National Insurance or Social Security number has been used in a crime real?","shortAnswer":"No. This is a government impersonation scam. Your number has not been suspended, and no agency will call you threatening arrest.","explanation":"This call is one of the most reported scam types worldwide. A robocall or live caller claims to be from the Social Security Administration, HMRC, or another government body and says your national identity number has been linked to drug trafficking, money laundering, or another serious crime. You are warned that your benefits will be suspended or that an arrest warrant is outstanding. To 'protect' yourself, you must confirm your number, transfer funds to a safe account, or stay on the line while the 'investigation' proceeds. No government agency suspends an identity number by phone, threatens immediate arrest for unverified crimes, or asks you to move money or buy gift cards.\n\nThe script leans on authority and isolation: badge numbers, case references, 'federal warrants', and instructions to stay on the line and tell no one — sometimes for hours while you withdraw cash or buy gift cards. Robocall versions filter for engagement, connecting only those who press a key to live operators, which is why merely hanging up ends most attempts.\n\nWorth internalising: identity numbers are not 'suspended', criminal matters are not settled by phone payment, and no agency's remedy for fraud is you moving your own money. If a call leaves lingering doubt, look up the agency's public number yourself and ask — the genuine organisation will confirm the call was not theirs.","redFlags":["Call claims your identity number is linked to criminal activity","Threat of immediate arrest unless you co-operate","Asked to confirm your full identity number to a caller you didn't initiate","Told to withdraw cash or buy gift cards to protect your funds","Caller instructs you not to tell anyone and to stay on the line"],"whatToDoNow":["Hang up immediately","Do not call back any number left in a voicemail","Report to your national fraud reporting service","Reassure any vulnerable family members — this call is always a scam"],"faq":[{"question":"Could my number genuinely have been misused?","answer":"Identity theft does occur, but it is not investigated by phone calls threatening arrest. If you have concerns, contact the relevant government agency using the number on their official website."},{"question":"They mentioned a real court and a case number — should that worry me?","answer":"No. Court names are public and case numbers are invented freely because you cannot check them mid-call. Genuine legal processes reach you through formal written service, not through a phone demand for secrecy and payment."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-sponsored-post-advertising-a-new-crypto-token-launch-a-scam","url":"https://scamencyclopedia.org/questions/is-a-sponsored-post-advertising-a-new-crypto-token-launch-a-scam","question":"Is a sponsored post advertising a new crypto token launch a scam?","shortAnswer":"Extremely often yes. New token launches advertised through social media ads are frequently pump-and-dump schemes or outright rug pulls.","explanation":"A rug pull occurs when developers create a new cryptocurrency token, promote it aggressively to attract buyers, and then drain the liquidity pool — taking all invested funds and abandoning the project. Sponsored posts make a token appear widely endorsed, and influencer promotions lend false credibility. Investors who buy early may see paper gains, but when the developers exit, the token price collapses to near zero. Legitimate blockchain projects have audited smart contracts, publicly identified development teams, and verified listings on established exchanges — not exclusively paid social media promotion. Never invest in a token based solely on a social media advertisement.\n\nVerification theatre is central to these launches: countdown pages, locked-liquidity claims, audit badges from firms that do not exist, and influencer posts that are paid placements rather than endorsements. Engagement is manufactured with bot accounts, and early price charts are engineered to show the steep climb that triggers fear of missing out. None of these signals costs the operators anything real.\n\nApply the checks that cannot be faked cheaply: a named, verifiable team with histories that precede the token; audits confirmed on the auditing firm's own site; liquidity provably locked; and a use case that survives the question of why the project needs a token at all. Most launches promoted through paid social fail the first check immediately — and no answer to the others rescues an anonymous team.","redFlags":["Token launch advertised primarily through paid social media posts","Development team is anonymous or uses pseudonyms only","White paper is vague or plagiarised","No smart contract audit by a recognised firm","Extreme return promises with no explanation of underlying value"],"whatToDoNow":["Do not invest based on a social media advertisement alone","Research the development team and check for an independent audit","If you have invested, be aware that rug pulls can happen suddenly","Report suspected fraudulent token promotions to your financial regulator"],"faq":[{"question":"What is the difference between a rug pull and a pump-and-dump?","answer":"In a pump-and-dump, promoters hype a token they hold and sell when price peaks. In a rug pull, developers explicitly drain the liquidity pool. Both result in investors losing their funds."},{"question":"The token is already up a lot since launch — doesn't that show it's real?","answer":"No. Early price rises are the mechanism, not evidence: thin liquidity and coordinated buying produce dramatic charts that draw in outside money before the exit. By design, the collapse comes after the promotion has done its work."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-game-modification-or-cheat-file-download-safe","url":"https://scamencyclopedia.org/questions/is-a-game-modification-or-cheat-file-download-safe","question":"Is a game modification or cheat file download safe?","shortAnswer":"Often not. Unofficial mod files and cheat tools are a primary delivery method for malware, keyloggers, and account stealers.","explanation":"Gaming communities generate enormous demand for mods, trainers, cheat engines, and skin unlockers. Criminals exploit this by wrapping malware inside seemingly functional files and distributing them via Discord servers, YouTube video descriptions, unofficial forums, and social media. Once run, the file may install a keylogger, steal saved browser credentials, empty your gaming wallet, or give remote access to the attacker. Even files that appear to work correctly may be silently harvesting data. Only install mods from well-established, community-vetted repositories for the specific game — avoid anything that requires you to disable antivirus software to install.\n\nThe 'disable your antivirus' instruction is the moment to walk away — it is framed as avoiding false positives, but it is the malware asking you to open the door. Stolen gaming accounts feed a resale market, and info-stealer logs taken from gaming PCs frequently include saved browser passwords, session cookies, and crypto wallet data, so the blast radius extends far beyond the game.\n\nYoung players are a particular audience for cheat tools, so households benefit from a shared rule: mods come only from the established repository for that game, nothing gets installed with protection switched off, and gaming accounts carry two-factor authentication. If a machine ran a suspect file, treat every password saved on it as exposed and change them from a different device.","redFlags":["Download found in a Discord DM or YouTube video description","Installer asks you to disable antivirus before running","File has an unusual extension or executable with a misleading name","Site has no community history and the only reviews are on the site itself","Tool promises unlimited currency, premium items, or rank boosts"],"whatToDoNow":["Run unknown files through a virus-scanning service before executing","Change gaming and email passwords if you ran a suspicious file","Enable two-factor authentication on all gaming accounts","Report malicious files to the game's official security team"],"faq":[{"question":"Can a mod that many people recommend still be malicious?","answer":"Yes. Reviews can be faked, and files can be updated to add malware after initial positive reviews. Always scan files before running, regardless of community reputation."},{"question":"The file passed my antivirus scan — is it safe to run?","answer":"Not guaranteed. New malware builds circulate before detection signatures catch up, and some stealers evade scanners entirely. Source remains the better defence: an unvetted file from a DM or video description is risky regardless of a clean scan."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-request-for-my-medicare-or-nhs-number-over-the-phone-a-scam","url":"https://scamencyclopedia.org/questions/is-a-request-for-my-medicare-or-nhs-number-over-the-phone-a-scam","question":"Is a request for my Medicare or NHS number over the phone a scam?","shortAnswer":"Yes if unsolicited. Government health agencies do not cold-call you to request your health number or personal details.","explanation":"Your Medicare number (US) or NHS number (UK) is a valuable identifier used to commit healthcare fraud, file false insurance claims, or combine with other stolen details for identity theft. Scammers impersonate health agencies, insurance companies, or survey organisations and claim they need to update records, issue a new card, or check your coverage. Genuine health authorities update records through the health system when you attend an appointment — they do not call you out of the blue to ask for your number. If an unexpected caller requests your health identifier, hang up and contact the agency directly using a number from their official website.\n\nHealth identifiers are durable in a way cards are not — you cannot cancel and reissue your medical identity, so a stolen number can be reused in billing fraud and identity theft for years. The 'free device or screening' variant is worth particular caution: it converts your number into fraudulent claims against the health system, and the equipment, if it arrives at all, is worthless.\n\nExtend the same protection to paperwork: statements and benefit summaries showing services you never received are the visible trace of misuse and worth querying every time. Share your health number only when you initiated the contact — at appointments, through official portals, or on calls you dialled yourself from published numbers.","redFlags":["Unsolicited call claiming to be from Medicare, the NHS, or your insurer","Asks you to confirm or verify your health number or date of birth","Offers a free medical device, supplement, or service in exchange","Urgency — your coverage will lapse unless you act now","Caller ID shows an official health agency name"],"whatToDoNow":["Hang up without providing any details","Contact the health agency using the number on their official website","Report the call to your national consumer protection service","Monitor your health insurance statements for unfamiliar claims"],"faq":[{"question":"What can a scammer do with my Medicare or NHS number?","answer":"It can be used to bill for medical services you never received, steal prescription drugs in your name, or combine with other stolen data for broader identity fraud."},{"question":"I gave my number to a caller — what should I actually do now?","answer":"Notify the health agency or insurer through their official number, ask them to note potential misuse, and review statements carefully for claims you do not recognise. Report the call, and be alert for follow-up contact using the details you provided."}],"lastReviewed":"2026-08-01"},{"slug":"can-a-scammer-set-up-a-direct-debit-from-my-account-with-just-my-bank-details","url":"https://scamencyclopedia.org/questions/can-a-scammer-set-up-a-direct-debit-from-my-account-with-just-my-bank-details","question":"Can a scammer set up a direct debit from my account with just my bank details?","shortAnswer":"In some cases yes. With account number and sort code, a fraudster can attempt to set up unauthorised direct debits in the UK.","explanation":"In countries using the BACS direct debit scheme — primarily the UK — a bank account number and sort code are all that is technically required to initiate a direct debit instruction. Safeguards exist in the form of the Direct Debit Guarantee, which allows you to claim an immediate refund from your bank for any payment not matching your authorisation, but you must spot the charge first. In the US, ACH transactions similarly require only routing and account numbers. If you believe your details have been shared with someone untrustworthy, monitor your account closely, set up transaction alerts, and contact your bank about restricting direct debits. You do not always need to close your account — restrictions can often be applied.\n\nThe practical exposure comes from how routinely these details are shared — every invoice, cheque, and standing-order form reveals them, and fraudsters exploit the gap between a mandate being lodged and you noticing it. Small 'test' collections from unfamiliar names are a common precursor to larger ones, which makes alerts on low-value transactions disproportionately useful.\n\nThe guarantee schemes attached to direct debit systems are strong but reactive: refunds are prompt once claimed, yet the claiming depends entirely on you spotting the payment. A monthly scan of active mandates in your banking app — cancelling anything unrecognised — closes the loop, and unexpected mandate confirmations from companies you have never dealt with deserve a call to your bank the same day.","redFlags":["You shared your account number and sort code with someone untrustworthy","Unknown direct debits appear on your statement","Small test transactions from unrecognised companies","Your details appeared in a data breach"],"whatToDoNow":["Set up transaction alerts with your bank","Review your direct debits and cancel any unrecognised ones","Contact your bank if you suspect unauthorised setup — they can block it","Claim a refund under the Direct Debit Guarantee for any unauthorised payment"],"faq":[{"question":"Should I close my bank account if my details were exposed?","answer":"Not necessarily. Speak to your bank — they can often add restrictions or alerts without the disruption of a full account closure."},{"question":"A company I've never heard of sent a direct debit confirmation letter — what does it mean?","answer":"Someone has attempted to lodge a mandate on your account. Contact your bank immediately to block it, check your statement for collections, and keep the letter — that early notice is exactly how the safeguards are meant to work."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-phone-call-saying-my-broadband-contract-is-ending-and-i-must-renew-a-scam","url":"https://scamencyclopedia.org/questions/is-a-phone-call-saying-my-broadband-contract-is-ending-and-i-must-renew-a-scam","question":"Is a phone call saying my broadband contract is ending and I must renew a scam?","shortAnswer":"It may be. Scammers impersonate telecoms providers to get banking details or remote access under the guise of processing a renewal.","explanation":"Telecom impersonation calls are common, particularly targeting customers whose contracts do genuinely expire around the time of the call. The caller claims to be from your provider and offers to renew at a special rate or process a loyalty discount. They may ask for your bank account details to 'set up the new direct debit', or request remote access to your device to 'run diagnostics'. If you provide bank details, unauthorised transactions follow. If you grant remote access, your device and accounts are compromised. Your real provider will never need to call you to take bank details over the phone for a renewal — you can manage everything in your account online.\n\nTiming is the scam's best asset: contract end dates cluster predictably, and the caller only needs a fraction of recipients to be genuinely near renewal for the pitch to land as plausible. Loyalty-discount and speed-upgrade framings work the same way, and the remote-access variant — 'diagnostics' before your new deal — is the most damaging, converting a sales call into full device compromise.\n\nA clean personal policy removes all ambiguity: account changes, bank details, and app installations happen only on contact you initiate through the provider's published number or app. Genuine offers survive being looked up; a deal that evaporates the moment you say you will call back through official channels was never a deal.","redFlags":["Caller knows roughly when your contract expires","Asks for bank details, card number, or sort code over the phone","Requests you download a remote access app","Offers a deal that expires immediately if you don't commit","Caller ID shows your provider's name"],"whatToDoNow":["Hang up and call your provider directly using the number on their official website","Never give banking or card details to an inbound caller","If you gave access or details, contact your bank and change passwords immediately"],"faq":[{"question":"My contract does end soon — could it be a real call?","answer":"Contract end dates can be guessed or obtained from public breach data. Regardless of whether the timing is accurate, no provider needs to collect bank details by an inbound phone call."},{"question":"The caller quoted my current monthly price correctly — how?","answer":"Typical price points are public and breach data fills gaps, so an accurate-sounding quote is weak evidence. What matters is the channel: an inbound caller asking for bank details or app installs is untrusted regardless of what they know."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-free-iphone-or-prize-offered-in-an-online-quiz-real","url":"https://scamencyclopedia.org/questions/is-a-free-iphone-or-prize-offered-in-an-online-quiz-real","question":"Is a free iPhone or prize offered in an online quiz real?","shortAnswer":"No. Online quiz prize giveaways are data harvesting tools or subscription traps — the prize is not real.","explanation":"You complete a short quiz about your preferences, then a screen congratulates you on being the 'lucky winner' of an expensive prize. To claim it, you are asked to enter your name, email, phone number, and sometimes shipping and card details for a small handling fee. The prize never arrives. Your personal data is sold to marketing lists, you may be enrolled in a recurring subscription, and your card is charged. These ads circulate widely on social media and often use logos of well-known retailers to look official. Legitimate brand competitions always direct you to the retailer's official website and never require card details to claim a prize.\n\nThe quiz format is deliberate engineering: a few minutes of questions creates a sense of having earned the win, and the congratulations page borrows enough real branding to pass a glance. Behind it, the operation monetises three ways at once — sold contact data, hidden subscription enrolment, and harvested card details — so the harm continues long after the page is closed.\n\nA single principle covers every version: winning something you never entered is not a thing that happens, and no genuine prize is released by your card details. If a brand appears to be running a giveaway, its official site and verified accounts will show it; if it is not there, the ad has answered its own question.","redFlags":["You 'won' by completing a short quiz you found via a social media ad","Prize is claimed to be sponsored by a recognisable retail brand","Credit card details required for a small shipping or handling fee","Fine print mentions a subscription or recurring charge","URL does not match the official brand website"],"whatToDoNow":["Do not enter any personal or card details","Report the ad as misleading on the social platform","If you paid a fee, contact your bank and request a chargeback","Check your statements for unwanted recurring charges"],"faq":[{"question":"What if the quiz was on a major social media platform?","answer":"Scammers buy advertising on major platforms. The platform hosting the ad does not guarantee the advertiser is legitimate. Always go directly to the brand's official website to verify any promotion."},{"question":"Recurring charges have started since I claimed a 'prize' — how do I stop them?","answer":"Contact your card issuer to dispute the charges and block the merchant, cancel any subscription named on the statement in writing, and consider a replacement card — harvested details are often reused or resold for further billing."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-charity-asking-for-cryptocurrency-donations-legitimate","url":"https://scamencyclopedia.org/questions/is-a-charity-asking-for-cryptocurrency-donations-legitimate","question":"Is a charity asking for cryptocurrency donations legitimate?","shortAnswer":"Treat it with extreme caution. Very few registered charities accept crypto, and most such requests are outright fraud.","explanation":"Scammers exploit public goodwill during disasters or social media moments by creating fake charity accounts that claim to accept only cryptocurrency donations. Crypto is attractive to fraudsters because transactions are irreversible, anonymous, and cannot be recalled. A small number of large, well-established charities do accept crypto through audited platforms, but this is clearly documented on their official websites. If a charity you have not heard of contacts you on social media and provides a wallet address for Bitcoin or another coin, the money will almost certainly go to a criminal. Verify any charity through your national charity register before donating.\n\nThese operations surge within hours of any disaster, often outpacing legitimate appeals — hijacked or fresh accounts, stolen imagery from news coverage, and wallet addresses posted into trending hashtags and community groups. Emotional urgency is the engine: the request is framed so that pausing to verify feels like withholding help from victims.\n\nGenerosity and verification are compatible. Give through established organisations you can confirm in the charity register, using their official website's donation page, and your gift will do its work. If crypto donation genuinely appeals, the few major charities that accept it document the route clearly on their verified sites — anything arriving through a DM or comment thread is not that.","redFlags":["Charity contacted you first via social media or messaging app","Only payment method is cryptocurrency to a wallet address","Organisation cannot be found in the official charity register","Emotional imagery and extreme urgency to donate now","Account was created recently and has few followers"],"whatToDoNow":["Search the charity name in the official national charity register","Donate directly via the charity's verified website only","If you have donated crypto and suspect fraud, report to the platform and police"],"faq":[{"question":"Can I get a refund on a crypto donation to a fake charity?","answer":"Cryptocurrency transactions are irreversible. Once sent, recovery is extremely unlikely. Your best recourse is reporting to local police and the national fraud authority."},{"question":"The appeal used real footage of the disaster — doesn't that show it's genuine?","answer":"No. Imagery is lifted from news coverage and other appeals within hours of any event. Footage proves the disaster happened, not that the wallet address belongs to anyone helping — only the charity register and official websites establish that."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-whatsapp-message-from-an-unknown-number-saying-hello-dear-a-scam","url":"https://scamencyclopedia.org/questions/is-a-whatsapp-message-from-an-unknown-number-saying-hello-dear-a-scam","question":"Is a WhatsApp message from an unknown number saying 'hello dear' a scam?","shortAnswer":"Almost always yes. This is the opening move of a romance scam, task scam, or investment fraud.","explanation":"Scammers send mass WhatsApp messages to numbers they either purchase or generate randomly, using a friendly greeting such as 'hello dear', 'hi there, do I know you?' or 'sorry, wrong number — but can we still chat?' The goal is to start a conversation. Once engaged, the conversation moves toward romance, friendship, and eventually a request for money or an invitation to join a 'very profitable' investment platform. The friendly small talk can last weeks or months before the scam reveals itself. If you do not recognise the number and there is no credible reason for the message, do not engage.\n\nThose opening messages are sent by the tens of thousands, often from industrial-scale operations, and a reply — any reply — is the only 'qualification' the sender needs. Even a polite 'wrong number' confirms your line is live and attended, moving you onto lists for further contact. The scripts that follow are patient by design: days of small talk, shared photos, and apparent friendship before finances ever surface.\n\nDeleting and blocking without responding is the complete defence, and reporting the number helps the platform disrupt the operation. If a conversation has already progressed, judge it by the trajectory rather than the tone — an accidental contact who stays, deepens the friendship, and eventually mentions investing is following a script, however warm it feels.","redFlags":["Message from an unknown international number","Generic opener that could have been sent to thousands of people","Profile photo shows an unusually attractive person","Conversation shifts to finances, investment, or personal hardship","Persistence despite you saying you don't know them"],"whatToDoNow":["Do not reply","Block and report the number in WhatsApp","Do not share any personal information"],"faq":[{"question":"What if they seem genuinely friendly and say it was a mistake?","answer":"That is part of the script. The 'wrong number' approach is a deliberate tactic to make you feel you should be polite and engage. Blocking is not rude — it is safe."},{"question":"I've been chatting for weeks and they seem completely genuine — now what?","answer":"Apply verification before anything financial ever comes up: a live video call, consistency checks on their story, and absolute refusal of any investment or money topic. If the relationship cools the moment you verify rather than comply, you have your answer."}],"lastReviewed":"2026-08-01"},{"slug":"can-a-scammer-steal-money-through-mpesa-or-mobile-money","url":"https://scamencyclopedia.org/questions/can-a-scammer-steal-money-through-mpesa-or-mobile-money","question":"Can a scammer steal money through M-Pesa or mobile money?","shortAnswer":"Yes. Mobile money fraud is widespread across Africa and Asia, with scammers exploiting reversals, SIM swaps, and fake agent networks.","explanation":"Mobile money platforms like M-Pesa, MTN Mobile Money, and Airtel Money are common fraud targets in markets where they are the primary banking channel. Scammers use several tactics: the 'accidental send' trick (claiming they sent you money by mistake and asking you to reverse it, when no money was actually received), fake agent impersonation (calling you pretending to be a network agent who needs your PIN to 'verify' an issue), SIM swaps that redirect your number to steal incoming codes, and lottery congratulations messages asking you to pay a release fee. Legitimate agents and the network operator will never ask for your PIN or account password.\n\nThe reversal trick works through manufactured urgency and sympathy — the caller is distressed, the 'mistake' needs fixing before some deadline, and a fake confirmation SMS arrives to complete the illusion. Genuine credits change your balance; forged messages do not, which is why the balance check settles every version of the claim in seconds.\n\nSIM-swap protection matters most for anyone whose number anchors their money. Use a SIM lock or PIN where your network offers it, treat unexpected loss of signal as a possible takeover in progress, and act immediately if your phone goes dead without explanation — the window between a swap and drained accounts is short, and the network's fraud line is the first call to make from another phone.","redFlags":["Someone claims to have sent you money by mistake and asks for reversal before the credit appears","Caller claiming to be a network agent asks for your mobile money PIN","SMS announces a prize or bonus that requires a fee to release","You receive a one-time code you did not request","Pressure to act before checking your actual balance"],"whatToDoNow":["Always check your actual balance before reversing any payment","Never share your mobile money PIN with anyone, including agents","Report suspicious calls to your mobile network operator","Contact your network's fraud line if you suspect a SIM swap"],"faq":[{"question":"What is the 'accidental send' trick on M-Pesa?","answer":"A scammer tells you they sent money to your number by mistake and begs you to send it back. Your balance has not changed — they never sent anything. Sending the 'refund' is a direct loss to you."},{"question":"My phone suddenly lost all service — could that be a SIM swap?","answer":"Treat it as one until proven otherwise. Contact your network's fraud line from another phone immediately, ask them to freeze the number and mobile money account, and change passwords on accounts that use that number for codes."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-gcash-or-maya-payment-request-from-a-stranger-a-scam","url":"https://scamencyclopedia.org/questions/is-a-gcash-or-maya-payment-request-from-a-stranger-a-scam","question":"Is a GCash or Maya payment request from a stranger a scam?","shortAnswer":"Very likely yes. Unsolicited payment requests on Philippine mobile wallets are almost always scams.","explanation":"GCash and Maya (formerly PayMaya) are the dominant mobile wallets in the Philippines and are heavily targeted by scammers. Common tactics include fake OTP requests (where a fraudster calls asking you to share a code they triggered, then uses it to access or transfer from your account), buy-and-sell fraud (collecting payment for goods that never arrive), and fake cashback promotions that require you to send a small amount first. Some scams impersonate GCash customer support and request a screen share or remote session. GCash and Maya will never call you to ask for a one-time password or to request payment to 'verify' your account.\n\nOTP theft is the centre of most wallet compromises: the scammer triggers a login or transfer, then manufactures a reason — verification, a refund, a prize — for you to read back the code that authorises it. The code is the transaction; whoever speaks it completes the theft themselves, which is why support staff are trained never to ask for it.\n\nScreen-sharing requests extend the same attack, exposing codes and balances in real time. Keep wallet interactions inside the official app: report through in-app channels, treat inbound 'support' calls as hostile by default, and verify any promotion on the provider's verified pages before sending anything. A legitimate promotion never requires you to pay first.","redFlags":["Stranger sends a payment request without prior agreement","Caller claiming to be GCash support asks for your OTP or PIN","Promotion promises cashback if you send a small amount first","Request to share your screen during a 'support' call","Buyer in an online sale wants to pay via a link you must click"],"whatToDoNow":["Never share a GCash or Maya OTP with anyone","Decline unsolicited payment requests immediately","Report suspicious accounts through the app's report function","Contact official support through the app, not through a number a caller provides"],"faq":[{"question":"Can GCash reverse a payment I made to a scammer?","answer":"GCash investigates disputes but cannot guarantee reversal of completed transactions. Report immediately through the app and file a report with the Philippine National Police Anti-Cybercrime Group."},{"question":"A 'support agent' says my account will be locked unless I verify with the OTP — what now?","answer":"Hang up — that is the theft in progress. Real support never asks for your OTP or PIN. If you already shared a code, change your PIN immediately, check for transfers, and report through the app's official help centre."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-upi-payment-request-from-a-buyer-safe-to-accept","url":"https://scamencyclopedia.org/questions/is-a-upi-payment-request-from-a-buyer-safe-to-accept","question":"Is a UPI payment request from a buyer safe to accept?","shortAnswer":"Requests you receive are payment demands, not incoming money. Accepting a UPI request causes money to leave your account.","explanation":"UPI (Unified Payments Interface), used widely in India via apps such as Google Pay, PhonePe, and Paytm, allows users to send payment requests to others. A common scam exploits confusion between receiving money and approving a payment request. A scammer posing as a buyer says they have sent you payment, then sends a collect request. Approving it sends money from your account to them. Scammers also impersonate bank or UPI support staff and ask you to scan a QR code or approve a request to 'verify' your account. Legitimate buyers send you money — they never send you a request to approve.\n\nThe confusion is engineered through interface familiarity: collect requests, payment confirmations, and QR prompts look similar at a glance, and scammers script the conversation to keep you moving — 'just approve to receive', 'scan this to get your refund', 'enter your PIN to complete the credit'. The PIN is the decisive detail: receiving money never requires it, so any flow that asks for your PIN is sending money out.\n\nMarketplace sellers face this constantly, which makes one habit essential: goods are released only after the amount shows in your bank balance, checked in your own app — never on the strength of a screenshot, an SMS, or a buyer's insistence. Unexpected collect requests should simply be declined and reported within the app.","redFlags":["You receive a UPI collect request from someone who claims to be paying you","Caller claiming to be bank or UPI support sends a request for you to approve","QR code sent to 'receive' payment — scanning it sends money instead","Request comes with urgency to approve before a deadline"],"whatToDoNow":["Never approve an incoming UPI collect request you did not expect","Check your actual balance to confirm money arrived before releasing goods","Report fraud to your UPI app and to the National Cyber Crime portal (cybercrime.gov.in) in India","Freeze the transaction through your bank if you approved in error"],"faq":[{"question":"If I see a payment notification does that mean I have been paid?","answer":"Not necessarily. A collect request notification looks similar to a payment notification. Always check your bank balance directly before assuming funds have arrived."},{"question":"Why did entering my PIN send money when I was supposed to be receiving it?","answer":"Because the PIN authorises outgoing payments — that is its only function. The 'enter PIN to receive' instruction is the core lie of this scam; incoming credits arrive with no action from you at all."}],"lastReviewed":"2026-08-01"},{"slug":"can-a-scammer-reverse-a-pix-payment-and-steal-my-money","url":"https://scamencyclopedia.org/questions/can-a-scammer-reverse-a-pix-payment-and-steal-my-money","question":"Can a scammer reverse a Pix payment and steal my money in Brazil?","shortAnswer":"Yes. Scammers exploit Pix's speed by using fake screenshots and social engineering to get victims to send money before they realise the fraud.","explanation":"Pix, Brazil's instant payment system, settles transactions in seconds and cannot be reversed once completed. Scammers use this finality against victims in several ways. Fake Pix receipt screenshots (comprovante falso) trick sellers into releasing goods before any real payment arrives. Social engineering calls impersonating bank fraud departments claim there is a problem with your account and guide you to 'fix' it by making a Pix to a 'safe account'. Some scams use WhatsApp account takeover to impersonate a contact and ask for urgent Pix transfers. Always verify a Pix credit in your actual banking app, not from a screenshot sent by the counterparty.\n\nFake comprovantes have become sophisticated — correct layouts, plausible timestamps, edited amounts — and sellers handling busy sales days are the deliberate targets, since pressure and a queue of buyers discourage the balance check. The 'safe account' call borrows urgency instead: a supposed fraud emergency in which the fix is you transferring money out, which no genuine bank process ever involves.\n\nSpeed is the attacker's ally and yours: the sooner fraud is reported to your bank, the better the chance the receiving account still holds funds when the formal return mechanism is invoked. Configure the protections your bank offers — nighttime limits, per-transaction caps, trusted contact confirmation — so a compromised moment cannot empty an account.","redFlags":["Buyer sends a screenshot of a Pix receipt before the money appears in your app","Caller claiming to be your bank asks you to Pix money to a recovery account","WhatsApp contact you know suddenly asks for an urgent Pix transfer","Pix key provided does not match the company or person you expect to pay"],"whatToDoNow":["Verify every Pix in your official banking app before releasing goods or services","Never send Pix to an account number provided over the phone by an inbound caller","Report Pix fraud to your bank and to the Banco Central do Brasil","Enable transaction limits and two-factor authentication on your banking app"],"faq":[{"question":"Can the bank reverse a fraudulent Pix I sent?","answer":"Pix is instant and generally irreversible, but banks have a MED (Mecanismo Especial de Devolução) process for fraud cases. Report immediately — the faster you act, the better the chance of recovery."},{"question":"As a seller, how do I safely confirm a Pix payment during a busy day?","answer":"Open your own banking app and confirm the credit in your balance or statement before releasing goods — every time, regardless of queue pressure. No screenshot, notification sound, or buyer reassurance substitutes for seeing the money in your account."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-fake-immigration-lawyer-online-a-scam","url":"https://scamencyclopedia.org/questions/is-a-fake-immigration-lawyer-online-a-scam","question":"Is a fake immigration lawyer or notario I found online a scam?","shortAnswer":"Very often yes. Unlicensed practitioners pose as immigration attorneys and take large fees for applications that are never filed or are filed incorrectly.","explanation":"In the United States, a notario publico is often confused with a licensed attorney — in Latin America the title carries legal authority, but in the US it does not. Scammers exploit this confusion, as well as general unfamiliarity with the immigration system, to charge high fees for visa applications, green card petitions, or asylum filings. The applications may be filed incorrectly, not filed at all, or the practitioner may disappear after payment. Victims lose money and, critically, may miss filing deadlines that damage their immigration case. In the UK, unlicensed immigration advisers operate similarly, taking fees for leave-to-remain applications they are not qualified to submit. Only work with a licensed immigration attorney or an accredited representative registered with the relevant regulatory body.\n\nThe deepest harm in immigration fraud is procedural, not financial. Missed deadlines can extinguish rights that money cannot restore, incorrectly filed applications create records that complicate every future petition, and fabricated claims submitted in your name can be treated as your misrepresentations. Victims often stay silent out of fear their own status will be examined — a fear these operators cultivate deliberately.\n\nVerification is straightforward once you know it exists: attorneys appear in bar association directories, accredited representatives in official registers, and both can be checked before any payment. Insist on a written contract, copies of everything filed, and receipts. If cost drives you toward informal help, non-profit legal services exist in many regions specifically so that affordability never requires trusting the unlicensed.","redFlags":["Practitioner uses the title 'notario' or 'immigration consultant' but cannot show a law licence","Guarantees a positive outcome — no immigration lawyer can guarantee approval","Asks for a large cash payment upfront with no written contract","Cannot produce a registration number with the relevant regulatory authority","Office operates primarily out of a non-legal business such as a tax preparer or travel agency"],"whatToDoNow":["Verify any immigration adviser through the relevant bar association or regulatory register","Request and keep a written contract for all services","Report unlicensed practitioners to your state bar or the relevant authority","Seek help from a non-profit immigration legal services organisation if cost is a concern"],"faq":[{"question":"Can I recover fees paid to an unlicensed immigration adviser?","answer":"Recovery is possible but difficult. Report to consumer protection authorities and seek legal advice — some non-profit organisations offer pro-bono help to victims of immigration fraud."},{"question":"The consultant showed me framed certificates and years of testimonials — reassuring?","answer":"Only the official register matters. Certificates can be printed, memberships invented, and testimonials manufactured or drawn from clients whose cases have not yet failed. Verify the licence with the bar association or regulator directly before paying anything."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-deportation-threat-call-from-an-immigration-officer-real","url":"https://scamencyclopedia.org/questions/is-a-deportation-threat-call-from-an-immigration-officer-real","question":"Is a call from an immigration officer threatening deportation unless I pay real?","shortAnswer":"No. This is a government impersonation scam. Real immigration agencies do not threaten deportation by phone and demand immediate payment.","explanation":"Immigration impersonation calls are among the most frightening scams because they exploit real fears about legal status. A caller claiming to be from immigration enforcement — such as ICE in the US, UK Visas and Immigration, or a similar agency — tells you that your visa has been cancelled, a warrant has been issued, or you will be deported unless you pay a fine immediately, often by wire transfer or prepaid card. Immigration agencies communicate formally through written notices and do not call to demand payment. If you receive such a call, hang up. If you have concerns about your immigration status, contact a licensed immigration attorney.\n\nThese calls concentrate on communities where fear does the persuading — recent arrivals, mixed-status families, people midway through applications — and callers often spoof genuine agency numbers and recite case-file jargon to sound procedural. The tell never changes: government enforcement does not negotiate fines by phone, accept gift cards, or require secrecy from the person being 'investigated'.\n\nPreparation blunts the attack. Knowing that genuine immigration matters arrive as written notices — and that a lawyer, not a caller, is the correct interpreter of any notice — turns a terrifying call into a recognisable script. Sharing that knowledge within your community is one of the few defences that scales, because these operations depend on each victim facing the call alone.","redFlags":["Call demands immediate payment to prevent arrest or deportation","Payment requested by wire transfer, gift card, or cryptocurrency","Caller instructs you to stay on the line and not tell anyone","Caller provides a badge or case number that sounds official"],"whatToDoNow":["Hang up immediately — do not make any payment","Contact a licensed immigration attorney with any genuine status concerns","Report the call to your national fraud reporting service","Share this information with community members who may be targeted"],"faq":[{"question":"Could the call be from a real immigration agency?","answer":"Real immigration agencies serve notices in writing. They do not call to demand immediate payment. If you receive a genuine immigration matter, you will receive written documentation first."},{"question":"The caller knew my visa type and application details — doesn't that make it real?","answer":"No. Application details leak through breaches, phishing, and unscrupulous intermediaries, and callers guess confidently from context. Channel and demand are what identify the scam: written notices are real; phone demands for immediate secret payment are not."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-green-card-lottery-notification-by-email-or-phone-real","url":"https://scamencyclopedia.org/questions/is-a-green-card-lottery-notification-by-email-or-phone-real","question":"Is a Green Card lottery notification I received by email or phone real?","shortAnswer":"Almost certainly not. The only official DV Lottery notification is through the government's own website — never by email, phone, or postal mail.","explanation":"The US Diversity Visa (DV) Lottery — commonly called the Green Card Lottery — is administered by the US Department of State. Legitimate results are checked only at dvprogram.state.gov by the applicant. The government does not notify winners by email, text, or phone. Scammers send congratulatory emails or make calls claiming you have won and then ask for fees to process your immigration paperwork. Paying them results in financial loss and no visa. Even if you never entered the lottery, you may receive such messages — criminals mass-send them hoping to find interested recipients.\n\nFraudulent 'visa agencies' build entire storefronts around the lottery — official-looking portals, application tracking, congratulations letters with seals and case numbers — and charge for each fabricated stage. Some collect passport scans and personal histories during 'processing', converting a fee scam into identity theft. The messages circulate worldwide and in many languages precisely because hope travels further than familiarity with US procedure.\n\nThe programme's real design makes every check simple: entry is free, results are checked only by you on the official site using your own confirmation number, and no third party is notified of a win — so anyone contacting you about winning has, by definition, no knowledge of your entry. That single fact disposes of every variant.","redFlags":["You received an email or phone call saying you won the DV Lottery","A fee is required to claim your green card or continue processing","Message contains urgent deadlines to prevent your prize from lapsing","Email address or sender does not end in .gov"],"whatToDoNow":["Check your actual DV Lottery status only at dvprogram.state.gov","Do not pay any fee to a private company claiming to process your visa","Report the fraud email or call to the FTC and the US State Department"],"faq":[{"question":"Are any companies that help with DV Lottery applications legitimate?","answer":"Some companies assist with completing the (free) application form, but you are not required to use them, and no company can improve your odds. Never pay anyone to 'claim' a win — that step is done entirely through the official government website."},{"question":"I never entered the lottery at all — why am I being told I won?","answer":"Because the messages are sent blind to enormous address lists. The senders have no idea who entered; they rely on some recipients wanting it to be true. Treat any such notification as spam and do not engage."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-subscription-that-charged-me-after-a-free-trial-without-warning-legal","url":"https://scamencyclopedia.org/questions/is-a-subscription-that-charged-me-after-a-free-trial-without-warning-legal","question":"Is a subscription that charged me without warning after a free trial legal?","shortAnswer":"In many cases it is, but consumer protection laws in most countries require clear disclosure of post-trial charges. You may have rights to a refund.","explanation":"Free trial subscriptions must, under consumer law in the UK, EU, US, and Australia, clearly disclose that a paid subscription begins after the trial period. If the terms were buried in fine print, pre-ticked, or not shown at all, you may be entitled to a chargeback or cancellation without penalty. The practice of offering trials that auto-convert to paid plans without a reminder email is restricted in many jurisdictions. Even where it is technically legal, your bank can often initiate a chargeback for undisclosed recurring charges. Act quickly — chargeback windows are typically 60-120 days. If the company makes cancellation deliberately difficult, that may constitute an unfair practice under local consumer law.\n\nWhere the line falls in practice usually depends on disclosure evidence: what the sign-up screen showed, whether the recurring price appeared before payment, and whether a reminder was sent. Screenshots taken when you notice the charge — of the offer page, the terms link, and your account's cancellation options — become the backbone of any dispute, so capture them before cancelling changes what the pages display.\n\nRun both tracks at once rather than sequentially: cancellation and refund request with the merchant in writing, and a dispute with your card issuer citing undisclosed recurring billing. If the merchant obstructs or the bank declines, escalation paths exist — ombudsman services, consumer protection complaints — and companies respond notably faster once a formal complaint is on file.","redFlags":["Trial converted to a paid plan without any reminder email","Cancellation process is hidden or requires a phone call during limited hours","Multiple charges at different amounts from the same merchant","Terms about post-trial pricing were not shown during sign-up"],"whatToDoNow":["Cancel the subscription immediately through the official account settings","Contact your bank or card issuer to dispute the charge","Document the sign-up process and any lack of disclosure","Report to your national consumer protection authority"],"faq":[{"question":"Can I get a refund on a subscription charge I did not expect?","answer":"Yes in many cases, particularly if the charges were not clearly disclosed. Contact your bank to initiate a chargeback and the merchant for a direct refund. Both routes can be pursued simultaneously."},{"question":"The company points to terms I 'agreed to' — does that end my claim?","answer":"Not necessarily. Buried, pre-ticked, or post-payment terms often fail disclosure standards, and banks weigh how the offer was actually presented. Provide your screenshots and describe the sign-up flow — agreement obtained through concealment is exactly what consumer rules target."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-negative-option-billing-subscription-i-cant-cancel-a-scam","url":"https://scamencyclopedia.org/questions/is-a-negative-option-billing-subscription-i-cant-cancel-a-scam","question":"What is negative option billing and can I get my money back?","shortAnswer":"Negative option billing assumes your consent to pay unless you actively cancel. In many countries it is heavily regulated and you may be entitled to a refund.","explanation":"Negative option billing means a company treats your silence or inaction as consent to charge you. This includes free trials that convert to paid plans, pre-ticked boxes for add-on services at checkout, and continuity programmes that ship products and charge monthly unless cancelled. Consumer protection agencies in the US, UK, and EU have strengthened rules requiring clear cancellation mechanisms, advance notice before charges, and express consent. If you were enrolled without clear consent, or if cancelling is made unreasonably difficult — for example, requiring you to call a number that goes unanswered — you have grounds to dispute charges with your bank and report the company to consumer authorities.\n\nThe model's profitability comes from inertia harvesting: charges sized to sit below attention thresholds, billing descriptors that obscure the merchant's name, and cancellation routes engineered to shed a percentage of attempts at every step. Recognising the design helps — the difficulty you are experiencing is the product working as intended, not bureaucratic accident.\n\nWritten records convert frustration into leverage. Date-stamped cancellation requests, screenshots of unanswered phone queues, and statements showing post-cancellation charges give your bank grounds for disputes and give regulators the pattern evidence they act on. Where a merchant is wholly unresponsive, card replacement plus a merchant block severs the billing relationship at your end.","redFlags":["You were enrolled in a plan via a pre-ticked box","Cancellation requires a phone call, a letter, or a visit to a physical store","Company charges you despite a cancellation request you made in writing","Multiple different charge amounts from the same merchant each month"],"whatToDoNow":["Cancel in writing and keep a record of all cancellation attempts","Contact your bank to block future charges from the merchant","File a dispute or chargeback for any charges after your cancellation request","Report to the FTC (US), FCA (UK), or equivalent national authority"],"faq":[{"question":"My bank says I agreed to the charges — what can I do?","answer":"Request the evidence the bank is relying on. If terms were not clearly presented at sign-up, or if you sent a cancellation that was ignored, escalate to the relevant financial ombudsman service."},{"question":"The charges are small — is pursuing them really worth it?","answer":"Yes, twice over. Small recurring charges compound over years, and complaint volume is what triggers regulatory action against the operator. A short session of dispute-filing typically recovers recent charges and stops future ones permanently."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-mlm-opportunity-i-was-invited-to-a-pyramid-scheme","url":"https://scamencyclopedia.org/questions/is-an-mlm-opportunity-i-was-invited-to-a-pyramid-scheme","question":"Is the MLM or network marketing opportunity I was invited to a pyramid scheme?","shortAnswer":"Many MLMs operate as de facto pyramid schemes where the majority of participants lose money. Income primarily from recruiting, not retail sales, is the key warning sign.","explanation":"Multi-level marketing (MLM) companies sell products or services through a network of independent distributors, each of whom recruits others. When income depends primarily on recruiting new participants rather than on actual retail sales to end customers, the structure is functionally a pyramid scheme and is illegal in most countries. The mathematics of exponential recruitment mean that most participants — often more than 99% — lose money once costs such as starter kits, mandatory stock purchases, and training materials are included. Legitimate direct sales companies allow you to earn money selling products to customers who are not distributors. If the person recruiting you focuses mostly on how much you can earn by recruiting others, that is the defining warning sign.\n\nThe recruitment pitch systematically inverts the economics: starter kits and monthly qualifiers are framed as 'investing in your business', unsold inventory as 'stock on hand', and recruitment of friends as 'sharing an opportunity'. Social costs compound the financial ones — participants are coached to prospect their personal relationships, which is where the real price of a failed downline is paid.\n\nThe income disclosure statement, where one exists, is the pitch's antidote: read the median figure rather than the featured stories, and note what the fine print counts as 'income' before expenses. Anyone recruiting you should welcome that scrutiny. Evasion about typical earnings, pressure to commit at an event, or hostility toward the question itself tells you which side of the line the scheme lives on.","redFlags":["Recruiter emphasises income from building your 'downline' more than product sales","You must buy a starter kit or monthly stock to stay active","Earnings claims show exceptional incomes without disclosing that most participants earn little","Products are difficult or impossible to sell to people outside the network","Leaving the scheme means losing your investment in stock"],"whatToDoNow":["Request the company's income disclosure statement — it must show median earnings, not just top earner stories","Calculate all required costs before deciding to join","Report pyramid schemes to your national consumer protection or trading standards authority","If already invested, consider seeking advice from a consumer rights organisation"],"faq":[{"question":"Is there any way to make money in an MLM?","answer":"A small minority do earn money, typically those who joined early or who have large existing networks. The vast majority lose money once all costs are accounted for. Income from retail sales to genuine customers outside the network is the only sustainable model."},{"question":"The products are real and I'd use them myself — doesn't that make it legitimate?","answer":"Real products do not settle the question. The test is where money actually flows: if meaningful income requires building a downline rather than selling to outside customers, the product is functioning as a recruitment vehicle regardless of its quality."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-crypto-wallet-seed-phrase-asked-for-by-support-a-scam","url":"https://scamencyclopedia.org/questions/is-a-crypto-wallet-seed-phrase-asked-for-by-support-a-scam","question":"Is someone asking for my crypto wallet seed phrase for support a scam?","shortAnswer":"Yes, always. No legitimate wallet provider, exchange, or support agent will ever ask for your seed phrase.","explanation":"Your seed phrase (also called a recovery phrase or mnemonic) is the master key to your cryptocurrency wallet. Anyone who has it has complete and permanent control of every asset in that wallet. Scammers pose as wallet support agents on social media, in app store reviews, through fake websites, and in Discord servers, then ask for your seed phrase under the guise of 'restoring your wallet', 'verifying your account', or 'processing a transaction'. Legitimate wallet software such as MetaMask, Ledger, or Trust Wallet never asks for your seed phrase except during the initial setup on your own device. Once a seed phrase is shared, the wallet should be considered permanently compromised — move any remaining assets to a new wallet immediately.\n\nScammers reach victims at their most receptive moment by monitoring public complaints: post about a failed transaction or locked wallet anywhere, and 'support agents' arrive in replies and DMs within minutes. Fake support sites also buy search ads against wallet-help keywords, so even users who search for official help can land on credential-harvesting forms. Genuine support flows one way — you contact them through the app or official site, and they resolve issues without ever needing the phrase.\n\nThe underlying principle is worth stating plainly: a seed phrase is not an account credential that support might legitimately check; it is the wallet itself. Whoever holds it holds the funds, instantly and irreversibly. It belongs written down offline, never typed, photographed, or spoken — and any request for it, however official the requester appears, is the scam announcing itself.","redFlags":["Any person or website asking for your full seed phrase","Support contacted you first through social media or messaging apps","Website URL does not exactly match the official wallet provider","Pop-up or form inside an app requesting your recovery phrase","'Support agent' offers to screen-share to help you enter your phrase"],"whatToDoNow":["Never share your seed phrase with anyone under any circumstances","If you already shared it, transfer all assets to a new wallet immediately","Report the scammer account to the platform and to the legitimate wallet company","Store your seed phrase offline and never photograph or type it into any website"],"faq":[{"question":"Is it safe to enter my seed phrase on the official wallet website?","answer":"No. Official wallets only require your seed phrase in the wallet app itself during a fresh installation or recovery — never on a website. Any website asking for it is phishing."},{"question":"I posted about a wallet problem and helpful 'agents' are messaging me — any real?","answer":"None. Official teams do not initiate DMs to users who posted complaints — that channel belongs entirely to scammers monitoring keywords. Use only the support route inside the official app or website, and report the accounts messaging you."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-hardware-crypto-wallet-sold-on-amazon-or-ebay-safe","url":"https://scamencyclopedia.org/questions/is-a-hardware-crypto-wallet-sold-on-amazon-or-ebay-safe","question":"Is a hardware crypto wallet sold by a third party on Amazon or eBay safe?","shortAnswer":"No. Hardware wallets must be bought directly from the manufacturer. Third-party resellers may sell pre-seeded or tampered devices that drain your funds.","explanation":"Hardware wallets such as Ledger and Trezor are physical devices that store cryptocurrency keys offline. They should only be purchased directly from the manufacturer's official website. Third-party resellers on Amazon, eBay, or other marketplaces have been found selling devices that were pre-initialised with a seed phrase chosen by the seller. The victim sets up the device thinking it is new, moves crypto onto it, and the seller — who knows the seed phrase — drains the wallet. Some resold devices are outright counterfeits. A legitimate new hardware wallet will always generate its own seed phrase during initial setup on your device. If a device came with a pre-written seed phrase or an activation code on a card inside the box, it has been tampered with.\n\nMarketplace structures make this supply-chain attack easy to miss: third-party sellers operate under the platform's trusted brand, listings mingle, and a resealed box passes casual inspection. Beyond pre-seeded devices, tampered units have shipped with modified firmware or altered instructions directing buyers to fake setup sites that capture the freshly generated phrase.\n\nSetup discipline completes what purchasing discipline starts: initialise the device yourself, confirm it generates a brand-new phrase on its own screen, verify firmware through the manufacturer's official application, and never follow setup instructions from paper in the box to a typed URL. The savings from a discounted resold wallet are trivial against the balance it is designed to protect — buy direct, every time.","redFlags":["Wallet was purchased from a marketplace reseller rather than the official manufacturer","Box contained a pre-written seed phrase or recovery card","Device skipped the seed phrase generation step on first use","Packaging was resealed or showed signs of opening"],"whatToDoNow":["Only buy hardware wallets directly from the manufacturer's official website","During setup, the device must generate a new seed phrase — never use one provided in the box","If you received a pre-seeded device, do not transfer any crypto to it","Report counterfeit products to the manufacturer and the marketplace"],"faq":[{"question":"Can I trust an unopened hardware wallet from a well-rated Amazon seller?","answer":"No. Even high-rated sellers have sold pre-seeded wallets. The only safe source is the manufacturer's own website."},{"question":"I've already set up a device bought from a reseller — how do I check it?","answer":"If setup involved any pre-supplied phrase or card, move funds to a safely sourced wallet now. Even if it generated its own phrase, verify the firmware through the manufacturer's official app and consider migrating for certainty."}],"lastReviewed":"2026-08-01"},{"slug":"is-my-instagram-account-at-risk-from-hackers-if-someone-dms-me-a-link","url":"https://scamencyclopedia.org/questions/is-my-instagram-account-at-risk-from-hackers-if-someone-dms-me-a-link","question":"Is my Instagram account at risk if someone DMs me a suspicious link?","shortAnswer":"Yes. Phishing links sent via Instagram DM are the most common way accounts are hijacked and sold or used to scam your followers.","explanation":"Instagram account takeover fraud usually begins with a direct message — often from a compromised account belonging to someone you follow — containing a link. Clicking the link typically leads to a fake Instagram login page that harvests your username and password. Once the attacker has your credentials, they change your password and email, locking you out and using your account to repeat the scam to your followers, run fake brand promotions, or sell the account. Attacks also arrive through fake copyright infringement warnings, collaboration offers, and DMs asking you to vote for someone in a competition. Enable two-factor authentication and never enter your Instagram credentials on any site that is not instagram.com.\n\nCompromise cascades through social graphs: each hijacked account lends its credibility to attacks on every follower, which is why the most dangerous link is one from a friend whose account fell an hour earlier. Messages riff on trust — 'is this you in this video?', voting requests, giveaway tags — and the fake login page finishes the job. Creators and small businesses are prime targets because monetised accounts resell and their audiences can be scammed at scale.\n\nRecovery becomes a race once attackers change your email and password, so prevention is disproportionately valuable: two-factor authentication, no credentials entered from any DM link, and immediate password changes if a link was followed. If a friend's account sends something odd, tell them through another channel — early warning shortens every chain of compromise.","redFlags":["DM containing a link, even from a known account","Message about a copyright complaint or policy violation with an external link","Collaboration or sponsorship offer that requires you to log in on an external site","Link leads to a login page that looks like Instagram but is a different domain"],"whatToDoNow":["Enable two-factor authentication on your Instagram account","Never click login links in DMs — access Instagram only through the app or instagram.com","If your account is taken over, use Instagram's account recovery process immediately","Warn your followers if your account was compromised"],"faq":[{"question":"Can a link steal my account even if I don't log in on the page?","answer":"Some links install malware or exploit browser vulnerabilities, but most Instagram account hijacks involve entering credentials on a phishing page. Not logging in significantly reduces risk."},{"question":"A friend messaged asking me to vote for them via a login link — harmless?","answer":"It is one of the most common hijack lures, and often means the friend's account is already compromised. Never log in through DM links; check with your friend by another channel and report the message if they did not send it."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-facebook-account-hacked-by-a-phishing-quiz-or-game","url":"https://scamencyclopedia.org/questions/is-a-facebook-account-hacked-by-a-phishing-quiz-or-game","question":"Can a Facebook quiz or game hack my account?","shortAnswer":"Quizzes and games that request Facebook login permissions can harvest your personal data. Some are also fronts for phishing credential theft.","explanation":"Facebook quizzes and 'personality games' requesting broad permissions to your account data are a well-documented privacy risk. When you 'Sign in with Facebook' or grant an app permission, you may hand over your name, email, friend list, photos, and more to a third party whose privacy practices are unknown. Some apps sell this data; others use it for targeted phishing or to build social engineering profiles. A separate attack uses quiz-style posts ('What is your mother's maiden name? What was your first pet?') to harvest common security question answers without ever requesting account access. Be extremely selective with any app or quiz that requests Facebook permissions, and regularly audit your connected apps in Facebook settings.\n\nThe data these apps collect outlives the moment of fun: profile details, friend lists, and interaction history feed profiles used for targeted phishing years later, and permissions granted once persist until revoked. The security-question harvest is subtler still — pet names, first schools, and mothers' maiden names gathered through viral posts map directly onto account-recovery questions at banks and email providers.\n\nTwo habits neutralise most of the risk: a periodic sweep of connected apps in your settings, removing anything unfamiliar or unused, and treating personal trivia as security information rather than conversation material. Where a service still relies on security questions, fictional answers stored in a password manager sever the link between your public history and your accounts.","redFlags":["App requests broad permissions such as access to your friends list or messages","Quiz asks questions that match common bank security questions","Third-party site offers to show 'who viewed your profile' in exchange for login access","App was created recently with few reviews"],"whatToDoNow":["Review and revoke app permissions in Facebook Settings under Apps and Websites","Change your Facebook password if you granted broad permissions to an unfamiliar app","Enable two-factor authentication on your Facebook account","Be cautious of posts asking personal trivia that matches security questions"],"faq":[{"question":"Are all Facebook quizzes dangerous?","answer":"Not all are malicious, but any quiz or game requesting Facebook login permissions poses a data privacy risk. The safest approach is to not grant permissions and play only quizzes that require no login."},{"question":"I answered one of those trivia posts publicly — how much does it matter?","answer":"One answer rarely matters alone, but they accumulate across years of posts. Review which accounts use that fact for recovery, change those answers where possible, and prefer two-factor authentication over security questions wherever it is offered."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-breeder-who-only-accepts-payment-via-bank-transfer-for-a-puppy-a-scam","url":"https://scamencyclopedia.org/questions/is-a-breeder-who-only-accepts-payment-via-bank-transfer-for-a-puppy-a-scam","question":"Is a puppy breeder who only accepts bank transfer and won't let me visit a scam?","shortAnswer":"Almost certainly yes. Refusing visits and insisting on bank transfer are the two clearest red flags of a pet scam.","explanation":"Puppy and kitten scams are among the most emotionally damaging frauds. Criminals post photos of desirable breeds at below-market prices, often listing the pet as free to a good home with just transport costs required. When you express interest, excuses are made for why you cannot visit — the breeder is abroad, the puppy is being transported, or viewings are not currently possible. Once you pay, the puppy never arrives and follow-up contact stops. Sometimes a second payment is requested for 'insurance' or 'customs clearance'. Real breeders welcome visits, are registered with breed associations, can provide veterinary records, and accept multiple payment methods. Always meet a pet before paying anything.\n\nThe emotional pull of these scams is deliberate. Scammers choose breeds in high demand, respond warmly, and often send daily updates about 'your' puppy to build attachment before the first payment. Once you feel the animal is already yours, requests for a shipping crate, insurance, or a refundable customs deposit feel like obstacles rather than warning signs — which is why victims often pay a second or third fee even after doubts surface. Treat any breeder you cannot visit as unverified, however professional the website looks, and walk away from anyone who resists a live video viewing.","redFlags":["No in-person viewing allowed before payment","Only payment method is bank transfer or cryptocurrency","Breeder is in a different country or city with no physical address","Price is significantly below market rate for the breed","Additional fees requested after initial payment for transport, insurance, or customs"],"whatToDoNow":["Never pay for a pet you have not met in person","Verify breeder registration with the national kennel club","Use a licensed local rescue or reputable breeder with verifiable references","Report the scam to your national fraud service and the platform where the ad appeared"],"faq":[{"question":"What if the breeder sends me lots of photos and a video?","answer":"Photos and videos are easily stolen from genuine breeders' social media accounts. They do not verify that the animal exists or that you will receive it. An in-person meeting is the only reliable verification."},{"question":"I already paid a deposit — can I get my money back?","answer":"Contact your bank immediately and explain that you were deceived. Bank transfers are hard to reverse, but fast reporting improves your chances and lets your bank flag the receiving account. Report the fraud to your national fraud authority as well, and stop responding to any follow-up fee requests."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-free-pet-adoption-that-needs-a-transport-fee-a-scam","url":"https://scamencyclopedia.org/questions/is-a-free-pet-adoption-that-needs-a-transport-fee-a-scam","question":"Is a free pet adoption listing that only needs a transport fee a scam?","shortAnswer":"Yes. 'Free pet, just pay transport' is the standard opener for a pet shipping scam where no animal exists.","explanation":"Scammers post listings on Craigslist, Facebook Marketplace, and classifieds sites for free purebred dogs, cats, or exotic animals — often claiming the owner is relocating, recently bereaved, or unwell. The only cost is transport or a crate fee. After you agree, a shipping company (controlled by the scammer) contacts you with invoices for transport, crating, insurance, and then a temperature-controlled compartment, airport handling fees, or import clearance. The requests continue until you stop paying. No animal exists. The photos are stolen from genuine pet owners. This scam is particularly targeting people who want exotic or high-value breeds they could not otherwise afford.\n\nThe escalating-fee structure is the heart of this fraud. Each new charge is framed as the very last obstacle between you and the animal, and each is small enough compared with what you have already paid that refusing feels wasteful. This is the sunk-cost trap, and the fees will continue for as long as you keep paying. The moment any transport company asks for a refundable deposit, a special crate, or an insurance payment for a pet you have never seen, stop all contact — there is no animal waiting at the airport.","redFlags":["Purebred or expensive pet offered for free with only a transport charge","Owner is overseas, recently widowed, or otherwise cannot meet","A separate 'pet transport company' contacts you with escalating fees","Requests for money orders, wire transfers, or gift cards","Company providing transport cannot be verified through any official register"],"whatToDoNow":["Do not pay any transport, crating, or customs fee for a pet you have not seen","Search for the images using a reverse image search tool","Adopt locally from a registered rescue organisation or verified breeder","Report the listing to the platform and to your national fraud authority"],"faq":[{"question":"How do I know if the pet transport company is fake?","answer":"Search the company name and address independently. Most scam transport companies have no verifiable physical address, no business registration, and reviews only on their own website."},{"question":"The shipper says my pet is stuck at the airport and needs an insurance payment — is that real?","answer":"No. Airlines and genuine pet transporters do not hold animals hostage pending surprise payments. This message is the standard escalation step of the scam. Stop paying, save the messages as evidence, and report the fraud to the platform and your national fraud authority."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-parcel-that-arrived-addressed-to-me-but-i-didnt-order-it-a-scam","url":"https://scamencyclopedia.org/questions/is-a-parcel-that-arrived-addressed-to-me-but-i-didnt-order-it-a-scam","question":"I received a parcel I never ordered — is it a scam?","shortAnswer":"It may be brushing fraud, where sellers send cheap items to real addresses to post fake reviews, or a preparatory step in a package redirection scam.","explanation":"Receiving unsolicited packages is typically a sign of brushing fraud, where third-party marketplace sellers ship low-value items to real addresses so they can write verified purchase reviews under that address's account. The goods are yours to keep, but it indicates your name and address have been obtained from some source — possibly a data breach. In some cases, unsolicited packages are part of a more sophisticated scam where the recipient is later contacted and told a valuable item was sent by mistake and they should return or redirect it — this leads to money loss through a staged recovery. If you receive something you did not order, report it to the marketplace under whose name it arrived and monitor your account for unauthorised activity.\n\nThe main thing an unsolicited parcel tells you is that your name and address are circulating in datasets you did not consent to, so treat it as a prompt to check your wider account security. Look through your marketplace order history for purchases you did not make, check whether reviews have been posted in your name, and make sure your email account — which usually controls password resets everywhere else — has a strong unique password and two-factor authentication. If a stranger later contacts you about the parcel, especially asking you to return, redirect, or pay for it, break off contact: that follow-up is where the actual money loss happens.","redFlags":["Package arrived with your address but a name you don't recognise","Low-value, lightweight item such as seeds, jewellery, or small toys","Someone contacts you afterwards claiming the item was sent by mistake","Notification that you left a review for a product you never purchased"],"whatToDoNow":["Keep the item — you are under no legal obligation to return unsolicited goods in most countries","Report the unsolicited shipment to the marketplace (Amazon, eBay, etc.) using their brushing report form","Change your marketplace account password and enable two-factor authentication","Do not send any money or redirect any packages based on contact from a stranger"],"faq":[{"question":"Do I have to pay for a parcel that arrived that I didn't order?","answer":"No. In most countries you are not required to pay for or return unsolicited goods. You may keep them as an unconditional gift. Never pay a sender who contacts you after an unsolicited delivery."},{"question":"Does a brushing parcel mean my account was hacked?","answer":"Not necessarily. Brushing usually relies on your name and address alone, which are widely available from data breaches and public records. Still, check your order history and change your password as a precaution, since some brushing campaigns do exploit compromised accounts."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-mail-redirection-order-taken-out-in-my-name-identity-fraud","url":"https://scamencyclopedia.org/questions/is-a-mail-redirection-order-taken-out-in-my-name-identity-fraud","question":"Is a mail redirection taken out in my name without my knowledge identity fraud?","shortAnswer":"Yes. Fraudsters redirect your mail to intercept bank cards, account statements, and sensitive documents to take over your financial accounts.","explanation":"Mail redirection fraud occurs when a criminal files a postal redirection request in your name, diverting your letters to an address they control. With access to your incoming mail, they can intercept new bank cards and PINs, account statements containing card numbers, government correspondence with identity documents, and tax or benefit-related mail. The first sign is often that you stop receiving expected mail. Banks and utilities may begin sending correspondence to an address you do not recognise. If you suspect a redirection has been set up, contact your national postal service immediately, place a fraud alert with credit reference agencies, and notify your bank. In the UK, Royal Mail offers a Mail Redirection Check service.\n\nSpeed matters with this fraud because every day of redirected mail gives the criminal more raw material — a bank statement here, a replacement card there — and account takeovers often begin within days of the redirection starting. Alongside cancelling the redirection, ask each of your financial providers to note the fraud on your file and to require additional verification for any address or contact-detail changes. Going forward, switching to paperless statements for your most sensitive accounts reduces what a future redirection could ever intercept.","redFlags":["Expected post such as bank statements or cards has stopped arriving","Creditors send communications to an address you don't recognise","You receive a confirmation letter for a mail redirection you did not request","Accounts show recent address changes you did not make"],"whatToDoNow":["Contact your national postal service and ask if a redirection is active on your address","Place a fraud alert or protective registration with credit reference agencies","Notify your bank, utility providers, and HMRC or IRS of the suspected fraud","File a report with your national fraud authority"],"faq":[{"question":"How would someone set up a mail redirection in my name?","answer":"With enough personal information — your name, address, and date of birth — a fraudster can request a redirection online or by post. Data breaches and phishing attacks are common sources of this information."},{"question":"How can I tell whether missing post is fraud or just a delivery problem?","answer":"One late letter is usually nothing. A pattern — several expected items missing, especially financial ones, or confirmation letters for changes you did not make — is the signal that matters. A quick call to your postal service to ask whether a redirection is active on your address settles it either way."}],"lastReviewed":"2026-08-01"},{"slug":"can-someone-take-out-a-loan-in-my-name-with-my-stolen-details","url":"https://scamencyclopedia.org/questions/can-someone-take-out-a-loan-in-my-name-with-my-stolen-details","question":"Can someone take out a loan in my name using my stolen personal details?","shortAnswer":"Yes. With enough personal information, fraudsters can apply for loans, credit cards, and finance agreements in your name.","explanation":"Identity-based loan fraud occurs when a criminal uses your name, date of birth, address history, and sometimes a stolen or fabricated copy of a document to apply for credit in your name. The loans are drawn down and never repaid, damaging your credit file and potentially leading to debt collectors contacting you. Lenders are required to perform identity verification, but fraudsters may use synthetic identities (mixing real and fabricated data) or exploit lenders with weaker checks. If you find a loan on your credit report you did not take out, dispute it with the credit reference agency, report to the lender's fraud team, and file a police report as lenders typically require a crime reference number to process a fraud dispute.\n\nDiscovering fraudulent borrowing is unsettling partly because it usually surfaces long after the event — a rejected application, a collector's letter, or a routine credit check reveals debt that has existed for months. Work through it methodically: every fraudulent account gets its own dispute with that lender's fraud team, in writing, referencing your crime reference number. Keep copies of everything. While disputes are open, a fraud alert on your credit file forces extra identity checks on new applications, which blocks the fraudster from opening more accounts while you clean up the existing ones.","redFlags":["Loan or credit agreement appearing on your credit report that you did not apply for","Letters from lenders or debt collectors for accounts you do not recognise","Credit application rejections due to unexplained existing debt","Unusual hard credit searches on your report you did not authorise"],"whatToDoNow":["Obtain your full credit report from all major credit reference agencies","Dispute fraudulent accounts directly with the lender's fraud team","File a police report and obtain a crime reference number","Place a notice of correction or fraud alert with credit reference agencies"],"faq":[{"question":"Am I liable for a loan taken out in my name by a fraudster?","answer":"No, if you can demonstrate the application was fraudulent. Report to the lender's fraud department and the police. Lenders are required to investigate and correct fraudulent accounts."},{"question":"Will a fraudulent loan permanently damage my credit score?","answer":"No. Once a lender accepts that an account was opened fraudulently, it must be removed from your credit file along with the associated searches and missed-payment markers. Your score recovers once the corrections are made, though the dispute process can take some weeks."}],"lastReviewed":"2026-08-01"},{"slug":"what-do-i-do-if-my-identity-has-been-stolen-and-used-for-fraud","url":"https://scamencyclopedia.org/questions/what-do-i-do-if-my-identity-has-been-stolen-and-used-for-fraud","question":"What do I do if my identity has been stolen and used for fraud?","shortAnswer":"Act immediately: alert your bank, place a fraud alert with credit agencies, report to police, and notify any organisations where accounts were opened fraudulently.","explanation":"Identity theft recovery involves several parallel steps. First, contact your bank and credit card providers to flag your accounts and request enhanced monitoring. Second, obtain your credit report and identify every fraudulent account or hard search. Third, contact each lender where a fraudulent account exists and report it to their fraud team — they will freeze the account and investigate. Fourth, place a fraud alert or protective registration with the main credit reference agencies, which makes future applications in your name require additional verification. Fifth, file a report with your national fraud authority and obtain a crime reference number, which you will need for lender disputes. Recovery can take months, but most fraudulent debts are removed once fraud is substantiated.\n\nTreat recovery as a project with a paper trail. Keep a single log of every call, reference number, and letter, because months later you may need to prove to a new lender or debt collector that a given account was already established as fraudulent. Be prepared for the same debt to resurface when it is sold on to another collection agency — a short letter with your crime reference number and the original lender's fraud outcome usually closes it down. Finally, work out how your details were obtained if you can, and close that door: a compromised email account, reused password, or intercepted post left unfixed invites a second round.","redFlags":["Accounts or credit applications you do not recognise on your credit report","Debt collectors contacting you about debts you know nothing about","You were rejected for credit despite having a good history","Mail arriving for you at a different address or mail you expected not arriving"],"whatToDoNow":["Alert all your banks and financial providers immediately","Place a fraud alert with all major credit reference agencies","File a crime report with your national fraud or police authority","Dispute every fraudulent account with the lender's dedicated fraud team"],"faq":[{"question":"How long does it take to clear my credit file after identity theft?","answer":"Each fraudulent account must be disputed individually and can take weeks to months. However, lenders are required to mark disputed accounts as under investigation, which reduces the immediate credit impact while the case is resolved."},{"question":"Should I keep monitoring my credit file after the fraud is resolved?","answer":"Yes. Check your report at least every few months for the following year or two. Fraudsters often retry with details they already hold, and early detection turns a major cleanup into a single phone call."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-tiktok-shop-seller-with-thousands-of-reviews-trustworthy","url":"https://scamencyclopedia.org/questions/is-a-tiktok-shop-seller-with-thousands-of-reviews-trustworthy","question":"Is a TikTok Shop seller with thousands of reviews trustworthy?","shortAnswer":"Not necessarily. Review counts on newer marketplaces can be inflated and do not guarantee product quality or genuine fulfilment.","explanation":"TikTok Shop has grown rapidly as a commerce platform, and with that growth has come a significant rise in counterfeit goods, quality misrepresentation, and review manipulation. High review counts can result from review farms or incentivised reviews for entirely different products. Videos showing a product being used are often produced using samples that differ from what buyers receive. Common problems include clothes that look nothing like the video, electronics with inflated specifications, supplements with unverified ingredients, and items that simply never arrive. Before purchasing, look for reviews with photos or videos from buyers rather than the seller, check the seller's return policy, and consider whether a similar product is available through a retailer with established consumer protections.\n\nA useful habit is to separate the platform's protections from the seller's incentives. Marketplace sellers on fast-growing platforms can spin up a storefront, run it until complaints accumulate, and reopen under a new name — so a seller's account age and the consistency of their reviews across months tell you more than the raw review count. Screenshots of the listing, the video, and the claimed specifications at the time you order are worth keeping for any dispute, because listings are frequently edited or deleted after complaints begin.","redFlags":["Seller account is very new but has an implausibly large number of reviews","Reviews are predominantly short, generic, and without photos","Product is sold at a dramatically lower price than on other platforms","Seller does not offer clear returns or only allows returns to an overseas address","Comments on the video are mostly praise with no critical questions answered"],"whatToDoNow":["Filter reviews to show only those with attached photos or videos","Search the product description for reviews on independent sites","Pay by card where possible to retain chargeback rights","Contact the seller with specific questions before buying expensive items"],"faq":[{"question":"Does TikTok Shop offer buyer protection?","answer":"TikTok Shop has a buyer protection programme, but disputes can be complex. Paying by card adds an additional layer of chargeback rights that exist independently of the platform."},{"question":"The product that arrived is nothing like the video — what should I do?","answer":"Open a dispute through the platform with photos of what you received alongside the listing images, and request a refund for an item not as described. If the seller stalls or the platform rejects the claim, contact your card provider about a chargeback."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-sponsored-instagram-shop-selling-real-products","url":"https://scamencyclopedia.org/questions/is-a-sponsored-instagram-shop-selling-real-products","question":"Is a sponsored Instagram shop ad selling real branded products legitimate?","shortAnswer":"Often not. Sponsored Instagram shop ads frequently lead to counterfeit goods sites that never deliver or deliver poor-quality fakes.","explanation":"Instagram's advertising platform allows anyone to pay to show ads to targeted audiences, and scam webshops routinely use it to promote counterfeit luxury goods, fake electronics, and misleading health products. The sites are professionally designed with stock photography and fabricated reviews. After payment, either nothing arrives, a very poor quality imitation is sent, or a package is returned as undeliverable and no refund is processed. Luxury brand discounts of 70-90% are consistently a sign of counterfeit goods. Before buying from an unfamiliar Instagram shop, check the website's domain age, search for independent reviews, verify there is a real return address, and pay by credit card to retain chargeback rights.\n\nIt helps to understand that appearing in your feed as a paid ad is not an endorsement — ad platforms review advertising at a scale that lets many scam storefronts through, and the same operators simply open new ad accounts when old ones are banned. The store name is often disposable while the product photos are recycled across dozens of sites, which is why a reverse image search on the product photos frequently reveals identical items on known scam domains. Two minutes of checking — domain age, independent reviews, a working contact address — filters out most of these operations.","redFlags":["Ad offers well-known branded goods at discounts of 60-90%","Website was registered recently with a generic-sounding domain","No verifiable physical address or customer service number","Only payment option is a bank transfer, cryptocurrency, or Zelle","Reviews on the website cannot be found anywhere else independently"],"whatToDoNow":["Search the domain name plus 'reviews' or 'scam' before purchasing","Pay only by credit card or a card-backed payment method for chargeback protection","Report counterfeit goods ads using Instagram's ad reporting function","If you received a fake item, report to the brand's official anti-counterfeiting team"],"faq":[{"question":"Can I get a refund from a fake Instagram shop?","answer":"Instagram itself does not provide refunds for purchases from advertisers. Your best option is a credit card chargeback. If you paid by bank transfer, contact your bank about a fraud claim."},{"question":"The site delivered a cheap imitation instead of what was advertised — is that still fraud?","answer":"Yes. Sending an item materially different from what was advertised is misrepresentation, and it is also the deliberate business model of many of these sites because a delivery, even of junk, complicates chargebacks. Dispute the charge as goods not as described with your card provider and include photos."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-korean-or-japanese-skincare-website-from-a-social-media-ad-real","url":"https://scamencyclopedia.org/questions/is-a-korean-or-japanese-skincare-website-from-a-social-media-ad-real","question":"Is a Korean or Japanese skincare website I found through a social media ad trustworthy?","shortAnswer":"Treat with caution. Fake Asian beauty storefronts are a common scam format, selling counterfeit or non-existent products.","explanation":"The global popularity of K-beauty and J-beauty has created a large market for scam storefronts posing as authentic Asian skincare retailers. These websites use professional photography, Korean or Japanese-sounding brand names, and claims of 'trending on social media' to sell low-quality imitations of real products or to collect payment for goods that never arrive. Some sites sell bottles filled with unknown substances that can cause skin reactions. Legitimate Korean and Japanese skincare products are available through established retailers and authorised distributors. If a site offers deep discounts on a brand you can verify on the brand's official website, check whether the official brand authorises that retailer.\n\nCounterfeit skincare carries a physical risk that sets it apart from ordinary shopping fraud: creams and serums of unknown composition go directly on your skin, and reactions to unregulated ingredients can be severe. If a product you suspect is fake has caused irritation, stop using it and seek advice from a pharmacist. On the prevention side, buying through the brand's own site or its listed authorised stockists costs a little more but removes the guessing entirely — the discount on a suspicious storefront is only a saving if a genuine product actually arrives, which for these sites is the exception.","redFlags":["Site was discovered through a heavily discounted social media ad","Domain name is a slight variation of a known brand","No verifiable physical returns address in the country of claimed origin","Reviews are recent, brief, and uniformly positive","Payment is requested upfront with no clear refund policy"],"whatToDoNow":["Verify the product and seller on the brand's official website","Check independent review sites for the domain name","Pay by credit card for chargeback protection","Report counterfeit goods to the brand's intellectual property team"],"faq":[{"question":"How can I find an authorised retailer for a K-beauty brand?","answer":"Most established Korean beauty brands list authorised international retailers on their official website. If a seller is not listed, contact the brand directly to confirm their authorisation."},{"question":"The prices on the official stockist are much higher — why is the difference so large?","answer":"The scam site is not selling the same product at a discount; it is selling either nothing or an imitation of unknown composition. A price far below every authorised retailer is not a bargain signal — it is the strongest sign the goods are not genuine."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-country-specific-investment-scam-targeting-nigerians-or-indians-abroad-common","url":"https://scamencyclopedia.org/questions/is-a-country-specific-investment-scam-targeting-nigerians-or-indians-abroad-common","question":"Are investment scams specifically targeting Nigerian, Indian, or Filipino communities abroad common?","shortAnswer":"Yes. Scammers specifically target diaspora communities using shared language, cultural trust, and community network access.","explanation":"Diaspora investment scams exploit the trust within tightly knit communities of Nigerians, Indians, Filipinos, Chinese, and other groups living abroad. The scammer — often a community member or someone posing as one — promotes an investment platform, often in the community's own language and through trusted channels such as church groups, community Facebook groups, or WhatsApp networks. Because the fraud originates within a trusted social circle, victims are less likely to apply the same scrutiny they would to a cold-call investment pitch. The investments typically mirror current high-interest topics: cryptocurrency, Forex, real estate in the home country, or import-export businesses. Money lost is often remittance-level savings intended to support family.\n\nThese schemes spread further and last longer than cold-call frauds precisely because each victim becomes an unwitting promoter. When early participants are paid 'returns' — actually money from newer investors — they share the good news through the same trusted channels, and their genuine enthusiasm is more convincing than any advertisement. That is why the scheme's collapse tends to sweep through an entire community at once. Applying independent verification to a recommendation from your own community is not disrespect; it is the only defence that works against a fraud designed to travel along the lines of trust.","redFlags":["Investment opportunity shared within a diaspora community group or church","Promoted by someone you know or who claims to know someone you know","Platform uses your community language and claims expertise in home-country markets","Guaranteed returns regardless of market conditions","You are encouraged to recruit others from your community"],"whatToDoNow":["Research any investment platform with the same rigour you would apply to a cold-call pitch","Verify registration with the financial regulator in the country where the platform claims to operate","Do not invest because a trusted community member recommended it — verify independently","Report to your national fraud authority and alert community leaders if a scam is identified"],"faq":[{"question":"Should I confront the community member who recommended the scam?","answer":"They may be a victim themselves who genuinely believes in the scheme. Approach carefully, share your concerns with evidence, and direct them to report alongside you."},{"question":"The person recommending it showed me their withdrawal history — does that prove it works?","answer":"No. Ponzi-style schemes deliberately pay early and small withdrawals to create exactly this proof. The payments come from newer deposits, not from any real investment, and they stop the moment recruitment slows or the operators choose to disappear."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-whatsapp-otp-forwarding-request-from-a-contact-a-scam","url":"https://scamencyclopedia.org/questions/is-a-whatsapp-otp-forwarding-request-from-a-contact-a-scam","question":"If a friend on WhatsApp asks me to forward them a code I just received, is it a scam?","shortAnswer":"Yes. This is account takeover fraud — the code belongs to your friend's WhatsApp, and sending it hands their account to a scammer.","explanation":"WhatsApp account takeover via OTP (one-time password) forwarding is one of the most widespread account scams. The attacker first compromises or poses as one of your contacts, then texts you saying something like 'I accidentally sent a code to your number — can you forward it to me?' The six-digit code that arrives is actually the SMS verification code for your own WhatsApp account or for a WhatsApp account the attacker is registering on a new device. Forwarding the code gives the attacker control of your WhatsApp account, allowing them to impersonate you to all your contacts and repeat the scam. Never forward a verification code you receive to anyone — the person asking is always part of the fraud.\n\nThe scam works because the request arrives from a familiar name and sounds trivially small — forwarding six digits feels like passing on a misdelivered letter. In reality that code is the single key WhatsApp uses to decide which phone owns your account. It is worth understanding the chain reaction too: once your account is taken, every one of your contacts receives the same request apparently from you, which is how a single lapse spreads through families and friend groups within hours. Enabling two-step verification adds a PIN the attacker cannot obtain from any SMS, and it is the one setting that breaks this cycle.","redFlags":["Contact asks you to forward a code you just received by SMS","Message claims the code was sent to your number by mistake","Request is urgent or emotional — 'I really need this right now'","The conversation tone feels slightly off compared to normal"],"whatToDoNow":["Do not forward any code — hang up or ignore the message","If you already forwarded the code, go to WhatsApp settings and re-register immediately","Warn your contacts that your account may have been compromised","Enable two-step verification in WhatsApp settings to add a PIN layer"],"faq":[{"question":"My WhatsApp account was taken over — how do I get it back?","answer":"Re-register on your phone by verifying your number via SMS. This forces the fraudster off your account. Change any linked email account password immediately and notify your contacts."},{"question":"Why would my friend's account send me that message?","answer":"Because their account has already been taken over, or is being spoofed. The attacker works through the victim's contact list impersonating them. Treat any code-forwarding request as a takeover attempt regardless of who it appears to come from, and alert your friend through another channel."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-telegram-channel-claiming-to-sell-leaked-bank-data-real","url":"https://scamencyclopedia.org/questions/is-a-telegram-channel-claiming-to-sell-leaked-bank-data-real","question":"Is a Telegram channel claiming to sell leaked bank or personal data legitimate?","shortAnswer":"These channels are either criminal operations selling genuine stolen data, or fraud themselves — selling fake data to people trying to use it illegally.","explanation":"Telegram channels offering to sell credit card numbers, bank logins, or personal data dumps fall into two categories: genuine criminal marketplaces trading in real stolen data (which is illegal to purchase and use), and scam marketplaces that collect payment for 'data' that is fabricated or already burned. Either way, interacting with these channels exposes you to serious legal risk in most countries — receiving stolen data is a criminal offence in the US, UK, EU, and many other jurisdictions regardless of whether you intend to use it yourself. If you are concerned your own data may have been compromised, use legitimate breach-checking tools such as Have I Been Pwned.\n\nThere is a second layer of fraud aimed at worried consumers rather than would-be buyers: accounts that message you claiming your data is in a specific leak and offering, for a fee, to remove it or show you the file. No one selling stolen data can remove it from circulation, and paying for a 'preview' of your own records simply funds the operation while confirming you are responsive. If you are worried about exposure, the constructive steps are free: check reputable breach-notification services, change passwords on any affected accounts, enable two-factor authentication, and watch your financial statements.","redFlags":["Channel promises to sell credit card details, login credentials, or identity documents","Payment is requested in cryptocurrency before delivery","Channel shares samples of data to 'prove' authenticity","No verifiable identity behind the channel operator"],"whatToDoNow":["Do not purchase from or engage with these channels — this is criminal activity","If you believe your own data is on sale, report to your bank and national fraud authority","Check your exposure using Have I Been Pwned (haveibeenpwned.com)","Report the channel to Telegram using the in-app report function"],"faq":[{"question":"Is it illegal to just look at a data-selling Telegram channel?","answer":"Browsing publicly accessible content may not itself be criminal, but purchasing or downloading stolen data almost certainly is. Do not engage with or pay these channels."},{"question":"Someone messaged me saying my details are in a leak and they can delete them for a fee — should I pay?","answer":"No. Data removal offers from anonymous accounts are extortion. Copies of leaked data circulate indefinitely and no seller can recall them. Block the account, report it, and put your effort into changing passwords and enabling two-factor authentication instead."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-counterfeit-product-sold-in-a-legitimate-looking-package-fraud","url":"https://scamencyclopedia.org/questions/is-a-counterfeit-product-sold-in-a-legitimate-looking-package-fraud","question":"Is buying a counterfeit product that looks exactly like the real thing still fraud?","shortAnswer":"Yes. Buying counterfeit goods is illegal in most countries and funds criminal networks. The buyer may also bear legal risk.","explanation":"Counterfeit goods — from luxury handbags to pharmaceuticals — are a global criminal industry. Even when a counterfeit looks convincing, buyers may face real risks: counterfeit medicines may be ineffective or dangerous, fake electronics may cause fires, and counterfeit cosmetics often contain unregulated or harmful substances. In the UK, EU, and US, knowingly purchasing counterfeit goods can result in civil or criminal penalties in some circumstances. Many online marketplaces have counterfeit goods listed by third-party sellers — even on established platforms. If you suspect you have received a counterfeit, report it to the brand's anti-counterfeiting team and to your trading standards or consumer protection authority.\n\nIf you bought the item believing it was genuine, you are a victim of the fraud rather than a participant, and you have the same dispute rights as with any misdescribed purchase — a chargeback or marketplace refund claim for goods not as described. The distinction that matters legally is knowledge and intent: knowingly buying, importing, or reselling counterfeits is where personal exposure begins. It is also worth reporting rather than just refunding, because marketplace takedowns rely heavily on buyer reports to identify counterfeit sellers hiding among legitimate listings.","redFlags":["Price is significantly below the official retail price for a branded product","Packaging has spelling errors, blurry logos, or feels different from the genuine item","Seller cannot provide proof of authorised distribution","Product arrived from a country not associated with the official manufacturer"],"whatToDoNow":["Report the seller to the marketplace and to the brand's anti-counterfeiting team","Contact your trading standards authority or consumer protection agency","Request a refund through your payment provider if you did not receive what was advertised","Do not use counterfeit medicines or health products — consult a pharmacist"],"faq":[{"question":"Am I liable if I accidentally bought a counterfeit and sold it on?","answer":"Accidentally purchasing and then selling counterfeits can create legal exposure in some jurisdictions, particularly if you received complaints about the goods. Seek legal advice if you are unsure of your position."},{"question":"How can I check whether a marketplace listing is from an authorised seller?","answer":"Many brands publish lists of authorised retailers and marketplace storefronts on their official websites. On the listing itself, check the actual seller name rather than the platform brand, read the seller's other listings and reviews, and be wary of prices well below every authorised outlet."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-online-auction-for-a-car-or-property-a-scam","url":"https://scamencyclopedia.org/questions/is-an-online-auction-for-a-car-or-property-a-scam","question":"Is an online auction for a car or property where I have to pay before viewing a scam?","shortAnswer":"Yes. Requiring payment before viewing a vehicle or property is the defining characteristic of an auction scam.","explanation":"Scammers run fake online auctions for vehicles, heavy machinery, or properties. The listings use real-looking government or auction house branding, claim the items are seized assets or surplus stock, and require a deposit or full payment before you can arrange collection or viewing. Once payment is made, access is blocked, the site disappears, or increasingly creative reasons are given for why you cannot collect yet. Real asset auctions — whether by government agencies, banks, or legitimate auctioneers — always allow inspection before bidding and are registered with verifiable trade bodies. Never pay to view or collect an auction item you have not physically inspected, and verify any auction house through its relevant registration authority.\n\nThese scams borrow credibility from the real world of asset auctions, where seized and surplus goods genuinely do sell below retail — which is exactly what makes the promise plausible. The difference is procedural, and it is absolute: genuine auctioneers publish viewing times, hold items you can inspect, take payment through accountable channels after the hammer falls, and are registered entities you can look up. A fraudulent platform inverts every one of those steps, taking money first and inventing reasons why inspection is impossible. Whenever the sequence is pay first, see later, the outcome is already decided.","redFlags":["Payment required before you can view or inspect the item","Auction platform cannot be verified through an official auctioneer register","Claimed government surplus or seized asset with dramatic price savings","Urgency — auction closes today and no viewings are scheduled","Only payment method is bank transfer or cryptocurrency"],"whatToDoNow":["Never pay to view or collect a vehicle or property you have not inspected","Verify any auction company through its trade association or official register","Search the auction platform name independently for reports of fraud","Report to your national fraud authority and trading standards"],"faq":[{"question":"Can government vehicle auctions really offer such low prices?","answer":"Genuine government auctions exist and do offer savings, but they are listed on official government websites and always allow inspection before bidding. They never require payment before viewing."},{"question":"The auction site shows photos, documents, and even a VIN for the vehicle — is that not proof?","answer":"No. Photos and paperwork are copied from genuine listings, and a real VIN can be attached to a car the seller has never owned. Documentation only means something when you can inspect the physical item and verify the seller's identity independently."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-crypto-mining-app-on-my-phone-that-earns-money-real","url":"https://scamencyclopedia.org/questions/is-a-crypto-mining-app-on-my-phone-that-earns-money-real","question":"Is a crypto mining app on my phone that earns real money legitimate?","shortAnswer":"Almost never. Legitimate cryptocurrency mining requires specialised hardware. Phone mining apps are overwhelmingly data-harvesting tools, malware, or misrepresented schemes.","explanation":"Smartphones lack the computational hardware required to mine established cryptocurrencies such as Bitcoin or Ethereum in any meaningful way. Apps that claim to mine crypto on your phone are either generating a meaningless internal currency with no real value, harvesting your device's processing power and data for the operator's benefit, or collecting payment for a service that never produces a real return. Some apps show a growing balance that requires a payment or referral to 'withdraw' — this is a classic fraud. The only credible phone-based crypto earning projects are proof-of-stake validators or legitimate tap-to-earn games with transparent tokenomics on well-known blockchains — and even these require careful evaluation before any investment of real money.\n\nA reliable way to evaluate any earning app is to ask where the money would come from. Real mining converts electricity and specialised hardware into newly issued coins; a phone contributes so little compute that its share would be worth less than the power it burns. An app promising meaningful mining income therefore has no honest revenue source — which leaves your data, your deposits, or your referrals as the actual product. The growing balance on screen costs the operator nothing to display and is the bait for the deposit-to-withdraw step where the real loss happens.","redFlags":["App claims to mine Bitcoin, Ethereum, or similar established coins on your phone","Balance grows but withdrawals require a minimum deposit or referral","App requests excessive permissions including contacts, location, or camera","No independent reviews outside the app's own page","Company behind the app cannot be verified"],"whatToDoNow":["Delete any mining app that requires payment to withdraw earnings","Revoke permissions granted to the app through your phone settings","Run a security scan on your device to check for malware installation","Report the app to your app store for review"],"faq":[{"question":"What about apps that pay small amounts of crypto for tasks?","answer":"Some legitimate apps reward small amounts of established crypto for completing surveys or watching ads. These earn fractions of a cent and cannot replace mining. Any app promising significant daily earnings from 'mining' on a phone is misleading."},{"question":"The app never asked me for money — is it still harmful?","answer":"Potentially. Free mining apps commonly monetise through invasive data collection, ad fraud using your device, or by building an audience for a later deposit scheme. If the app requested broad permissions, revoke them, delete the app, and change any passwords entered on the same device."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-cold-call-about-a-data-breach-compensation-claim-a-scam","url":"https://scamencyclopedia.org/questions/is-a-cold-call-about-a-data-breach-compensation-claim-a-scam","question":"Is a cold call about a data breach compensation claim a scam?","shortAnswer":"Very often yes. Unsolicited calls about data breach claims are lead generation for unregulated claims companies or outright fraud.","explanation":"After major data breaches, cold callers claim to be law firms or claims management companies and tell you that you are entitled to significant compensation. They ask you to confirm personal details to 'register your claim', charge an upfront fee, or ask you to sign documents giving them a large percentage of any payout. In reality, genuine data breach compensation in most jurisdictions requires you to have suffered documented harm, is typically small, and any legitimate claim can be made through official channels or regulated solicitors without unsolicited calls. Unregistered claims management companies are illegal in the UK under the Financial Guidance and Claims Act. Providing your personal details to cold callers also puts you at risk of further fraud.\n\nThere is an irony at the heart of this scam worth noticing: the caller is offering to help you with a privacy violation while committing one. Whatever details you confirm on the call — full name, address, date of birth, which bank you use — are added to the very kind of dataset the call pretends to remedy, and victims frequently receive waves of follow-up fraud attempts afterwards. Legitimate compensation processes never begin with an inbound call asking you to prove who you are; they begin with you contacting a regulator or regulated solicitor through published channels.","redFlags":["You received a call about compensation for a breach you did not enquire about","Caller asks for personal or financial details to 'register' your claim","Upfront fee required before you receive any compensation","Company cannot show their regulatory authorisation number","Promised payout seems disproportionately large"],"whatToDoNow":["Do not provide personal or financial details to unsolicited callers","If interested in a legitimate claim, contact the relevant data protection authority yourself","Verify any claims company through the relevant regulatory register","Report unsolicited calls to your national spam or fraud reporting service"],"faq":[{"question":"Can I actually claim compensation for a data breach?","answer":"In the UK and EU, individuals can claim compensation for material or non-material harm caused by a data breach under GDPR. However, not all breaches lead to individual payouts. Consult a regulated solicitor or the ICO rather than responding to cold callers."},{"question":"The caller already knew my name and which company leaked my data — does that mean they are genuine?","answer":"No. Breach datasets circulate widely, so knowing you were affected proves nothing about who is calling. Scammers use those very details as credentials. Hang up and, if you want to pursue a claim, start it yourself through the regulator or a regulated solicitor."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-secret-shopper-scam-different-from-a-legitimate-mystery-shopper-job","url":"https://scamencyclopedia.org/questions/is-a-secret-shopper-scam-different-from-a-legitimate-mystery-shopper-job","question":"Is a secret shopper scam different from a legitimate mystery shopping job?","shortAnswer":"Yes. Legitimate mystery shopping pays modest amounts and never involves wire transfers. Scams use the mystery shopper label to recruit money mules.","explanation":"Legitimate mystery shopping companies pay small amounts — typically £10 to £40 per task — for visiting real shops, restaurants, or services and completing evaluation forms. They recruit through established mystery shopping networks and never ask workers to wire or transfer money on behalf of the company. Scam mystery shopper jobs recruit via email, text, or social media with high promised earnings, send a cheque or bank transfer for far more than required, and ask the 'shopper' to evaluate wire transfer services by sending a portion of the money via Western Union or another wire service. The cheque bounces after the wire is sent, and the victim is liable for the full amount transferred. The 'evaluation' role is a cover for money laundering using unwitting mules.\n\nThe cheque mechanism deserves emphasis because it defeats people who think they have checked. When you deposit a cheque, your bank typically makes funds available before the cheque fully clears — often several days before. The scammer relies on that gap: the balance looks real, you wire the 'evaluation' portion, and when the cheque bounces the bank reclaims the full amount from you. The wired money is unrecoverable and you are left covering it. Any job whose first task involves depositing a payment and sending part of it onward is this scam, whatever the branding.","redFlags":["Recruitment by unsolicited email or text message","Assignment involves evaluating a wire transfer or money service","Payment arrives in excess of what you need and you are asked to forward the difference","Cheque or e-transfer arrives before you have signed any contract","Company cannot be found in the Mystery Shopping Professionals Association directory"],"whatToDoNow":["Do not cash the cheque and do not forward any money","Report to your bank if you already cashed the cheque","Report the scam to your national fraud authority","Find legitimate mystery shopping work through verified industry associations"],"faq":[{"question":"How do I find legitimate mystery shopping work?","answer":"Join established networks such as the Mystery Shopping Professionals Association or Ipsos Mystery Shopping. Legitimate companies never require you to handle money transfers or use your own funds."},{"question":"My bank showed the cheque funds as available — how could it still bounce?","answer":"Funds availability and final clearance are different things. Banks release money on a schedule, but a counterfeit cheque can be returned days or even weeks later, at which point the bank reverses the deposit. Available funds are not proof a cheque is genuine."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-high-interest-savings-account-offered-in-a-social-media-ad-legitimate","url":"https://scamencyclopedia.org/questions/is-a-high-interest-savings-account-offered-in-a-social-media-ad-legitimate","question":"Is a high-interest savings account advertised on social media legitimate?","shortAnswer":"Only if it is offered by a regulated bank or building society. Unregulated high-yield accounts advertised on social media are frequently fraud.","explanation":"Social media platforms carry advertisements for savings accounts, bonds, and fixed-term deposits offering rates that significantly exceed the market average. Some of these are clone firms — websites that copy the branding of regulated banks or investment firms to steal deposits. Others are completely fabricated deposit-takers operating without a banking licence. In the UK, any company accepting deposits from the public must be authorised by the Prudential Regulation Authority. In the US, deposits must be held at FDIC-insured institutions. Before placing any savings with an account found through an ad, verify the firm on your national financial regulator's official register. High rates are not themselves a scam indicator, but only regulated entities can legally hold your deposits.\n\nClone-firm fraud is worth understanding in detail because it is designed to survive your first round of checks. The website may quote a genuine registration number, real office address, and the name of an authorised firm — everything matches the register except the contact details, which route to the fraudster. That is why regulators publish official contact details on the register itself: the safe pattern is to find the firm on the register and initiate contact through the details listed there, never through the ad, the email, or the number that approached you.","redFlags":["Rate significantly higher than those offered by regulated banks","Company cannot be found on the financial regulator's official register","Website was created recently and has no physical address","Account requires a minimum deposit that must be wired, not transferred from a linked bank","No deposit protection scheme mentioned or the scheme cited is fictitious"],"whatToDoNow":["Verify the firm on the FCA Register (UK), FDIC BankFind (US), or equivalent in your country","Check whether deposits are covered by a government-backed compensation scheme","Never wire money to an account found through an advertisement without this verification","Report clone firms to your financial regulator immediately"],"faq":[{"question":"What is a clone firm savings scam?","answer":"A clone firm copies the name, logo, and registration number of a real regulated bank or savings provider, then uses it to attract deposits. The money goes to the fraudster, not the real institution."},{"question":"The firm's registration number checks out on the regulator's website — is that enough?","answer":"Not by itself. Clone firms quote real registration numbers belonging to legitimate companies. Compare the website, email domain, and phone number you were given against the contact details on the regulator's register, and contact the firm only through the register's listed details."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-work-from-home-customer-service-job-that-handles-transfers-a-scam","url":"https://scamencyclopedia.org/questions/is-a-work-from-home-customer-service-job-that-handles-transfers-a-scam","question":"Is a work-from-home customer service job that handles client fund transfers a scam?","shortAnswer":"Almost certainly yes. Jobs that involve receiving and forwarding money are money mule operations, which are illegal.","explanation":"Work-from-home customer service, bookkeeping, or payment processing jobs that involve receiving payments into your personal bank account and transferring them onward — keeping a commission — are money mule schemes. The money being transferred is typically stolen from scam victims, and you are being used as the final link in the laundering chain. Being a money mule is a criminal offence in most countries, even if you did not know the money was stolen. Banks actively flag mule accounts, which leads to account closure and can result in prosecution. Legitimate employers never use employee personal accounts to receive and forward client funds. If a job offer involves any element of handling money on behalf of clients, it is a mule recruitment.\n\nRecruiters for these schemes have become adept at making the role sound administrative — 'payment agent', 'transaction coordinator', 'regional finance assistant' — and at supplying plausible paperwork, contracts, and even onboarding calls. None of that changes the underlying structure: legitimate companies move client money through business accounts with regulated payment providers, never through an employee's personal account. That single test cuts through every variation. It also matters that consequences fall on the mule first — it is your account that receives stolen funds and your name on the transfers, while the organisers stay layers away.","redFlags":["Job description mentions receiving payments into your personal account","You keep a percentage commission and forward the rest","Employer found you via a job board or social media rather than a formal application process","Contract or employer details are vague or cannot be independently verified","You are told this is a legitimate financial services role requiring no qualifications"],"whatToDoNow":["Do not accept the job or begin any transfers","Report the recruitment to your national fraud authority","If you have already transferred money, contact your bank immediately and explain the situation","Seek legal advice if you believe you may have been involved in money laundering"],"faq":[{"question":"Can I be prosecuted if I did not know the money was stolen?","answer":"Being unaware of the criminal source of funds can be a defence, but it must be established. If you had reason to suspect something was wrong and continued, that significantly weakens the defence. Report early and cooperate with authorities."},{"question":"I did a few transfers before realising — what should I do now?","answer":"Stop immediately, keep all correspondence, and contact your bank's fraud team yourself before they contact you. Voluntarily reporting, cooperating, and showing you were deceived puts you in the best possible position with both the bank and any subsequent investigation."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-job-in-dubai-or-abroad-requiring-upfront-visa-and-travel-fees-a-scam","url":"https://scamencyclopedia.org/questions/is-a-job-in-dubai-or-abroad-requiring-upfront-visa-and-travel-fees-a-scam","question":"Is a job offer in Dubai or abroad that requires me to pay visa and travel fees upfront a scam?","shortAnswer":"Yes. Legitimate foreign employers bear the cost of visas and relocation. Requiring advance payment from a candidate is a strong scam indicator.","explanation":"Overseas job scams are particularly prevalent for positions claiming to be in Gulf states, Europe, or Australia, targeting workers from South Asia, Southeast Asia, and Africa. The scammer posts a compelling job listing — often for hospitality, construction, nursing, or domestic work — with an attractive salary. Once the applicant expresses interest, they are asked to pay for visa processing, medical examinations, uniform fees, or flights. After payment, the job does not exist, the recruiter disappears, or the worker arrives in a country with very different conditions than promised. Legitimate employers and licensed recruitment agencies bear the cost of legitimate work visas and do not require candidates to pay upfront fees to secure employment.\n\nThese frauds persist because they target hope under economic pressure, and the sums demanded are calibrated to what a hopeful worker can just about raise — often borrowed from family. Beyond the pure fee theft, the worst variants deliver a real journey to a very different reality: confiscated passports, unpaid work, or trafficking situations. That is why verification before payment or travel is not just financial self-defence. Check the employer with the destination country's business registry, confirm the visa pathway with that country's embassy, and treat any recruiter who discourages these checks as the warning itself.","redFlags":["You are asked to pay any fee before starting work or travelling","Recruitment is done entirely online without any verification of the company","Visa or work permit appears to be arranged by a third party rather than the employer","Employment contract is in a language you do not read","Salary is unusually high for the role described"],"whatToDoNow":["Never pay upfront fees to secure a foreign job","Verify any foreign employer through its country's business registration authority","Contact the embassy of the destination country about legitimate visa pathways","Report suspected scam recruitment to your national labour authority"],"faq":[{"question":"Are licensed overseas recruitment agencies allowed to charge fees?","answer":"In some countries, licensed agencies may charge processing fees, but these are regulated and limited. Unregulated agencies charging high upfront fees are a serious risk. Always check an agency's licence with the relevant labour authority."},{"question":"The recruiter sent me an official-looking offer letter and visa documents — can I rely on them?","answer":"No. Offer letters, contracts, and visa paperwork are easily forged and routinely are. Verify the company exists through the destination country's official registry, contact it through independently found channels, and confirm the visa's validity with the embassy before paying anything or booking travel."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-ai-generated-phishing-email-harder-to-spot-than-a-normal-one","url":"https://scamencyclopedia.org/questions/is-an-ai-generated-phishing-email-harder-to-spot-than-a-normal-one","question":"Are AI-generated phishing emails harder to spot than traditional scam emails?","shortAnswer":"Yes. AI-generated phishing emails are better written, more personalised, and lack the spelling errors that were once reliable red flags.","explanation":"Traditional phishing emails were often easy to identify because of poor grammar, spelling mistakes, and generic salutations. Generative AI tools allow scammers to produce polished, grammatically perfect emails that reference personal details scraped from social media or data breaches, mimic the writing style of real organisations, and tailor their approach to specific targets — a technique called spear phishing. These emails may reference your real name, employer, recent purchases, or local news events. Because the linguistic quality of the email no longer provides a reliable signal, recipients must focus on other factors: was this email expected? Does the link go to the official domain? Is there any pressure to act immediately? Always verify unexpected requests by contacting the sender through a known, trusted channel.\n\nThe practical shift is from judging how a message reads to judging what it asks. Every phishing email, however fluent, must eventually request an action that benefits the attacker — click this link, open this attachment, approve this payment, share this code. Those actions can be checked through channels the attacker does not control: typing the known address into your browser, calling a number from your records, or asking the colleague in person. Building that verification habit matters more than spotting linguistic flaws ever did, because the flaws are gone but the requests have not changed.","redFlags":["Email is well-written but requests urgent action outside normal procedure","Sender address is slightly different from the real domain","Link in the email does not go to the official website","Email references personal details that make it feel targeted","Request involves transferring money, providing credentials, or installing software"],"whatToDoNow":["Do not click links in unexpected emails — navigate to the official site directly","Verify any unusual request by calling the organisation on a known number","Report suspected phishing to your IT team and to the organisation being impersonated","Enable multi-factor authentication to reduce the impact of credential theft"],"faq":[{"question":"What can I still look for to identify a phishing email?","answer":"Focus on the sender's actual email domain, the URL of any link, whether the request is unexpected, and whether there is pressure to act urgently. These checks remain reliable even as email quality improves."},{"question":"Will spam filters catch AI-written phishing?","answer":"Filters catch much of it using sender reputation and technical signals rather than writing quality, but targeted messages regularly get through. Treat the inbox as a partially filtered stream, not a safe one, and apply the same verification habits to anything requesting action or credentials."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-deepfake-of-my-own-face-being-used-in-a-scam-possible","url":"https://scamencyclopedia.org/questions/is-a-deepfake-of-my-own-face-being-used-in-a-scam-possible","question":"Can scammers create a deepfake video of my face from my social media photos?","shortAnswer":"Yes. Publicly available photos and videos can be used to generate convincing deepfake content for fraud, extortion, or impersonation.","explanation":"Deepfake technology has reached a level where a realistic video of a person can be generated from a relatively small number of photos. Scammers use this for several purposes: creating fake video evidence to use in sextortion schemes, impersonating individuals in video calls to deceive their employers or family members, and producing fake 'confessions' or embarrassing content to use as leverage. Social media profiles are the primary source of training images. While you cannot fully eliminate your online image, limiting publicly visible photos, especially those that clearly show your face from multiple angles, reduces your exposure. If you discover a deepfake of yourself is being used in fraud or extortion, report it to the platform, law enforcement, and a digital rights organisation in your country.\n\nIf you are targeted, remember that the attacker's leverage depends entirely on your panic — the material is fabricated, and paying does not remove it; it marks you as someone who pays. Preserve everything before it disappears: screenshots, usernames, payment demands, and URLs. Platforms remove synthetic intimate imagery and impersonation content under their policies, and reports are processed faster with clear evidence. Telling someone you trust also matters more than it may feel; extortion depends on isolation, and victims who involve a friend, family member, or the police consistently fare better than those who negotiate alone.","redFlags":["You receive an extortion message accompanied by what appears to be a video of you","A contact reports seeing a video of you that you did not make","Someone impersonating you in a video call is reported by friends or colleagues"],"whatToDoNow":["Do not pay any extortion demand — payment escalates demands","Document the content and report to the platform and to police","Contact a digital rights or anti-revenge-porn organisation in your country for specialist support","Consider tightening privacy settings on social media to limit publicly visible images"],"faq":[{"question":"Is it illegal to create a deepfake of someone?","answer":"Laws vary, but creating deepfakes for fraud, extortion, or non-consensual intimate images is illegal in many countries. Legislation is expanding rapidly. Report to police — this is a recordable crime in most jurisdictions."},{"question":"Should I delete my social media to prevent deepfakes?","answer":"That is a personal call, but you do not need to disappear. Setting accounts to private, trimming publicly visible photos and videos of your face, and being selective about new uploads meaningfully raises the effort required, which redirects opportunistic attackers toward easier targets."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-rental-scam-on-airbnb-or-vrbo-possible-even-with-real-reviews","url":"https://scamencyclopedia.org/questions/is-a-rental-scam-on-airbnb-or-vrbo-possible-even-with-real-reviews","question":"Can I be scammed on Airbnb or Vrbo even if the property has real reviews?","shortAnswer":"Yes. Account takeover fraud on rental platforms allows scammers to hijack established listings with genuine reviews.","explanation":"Rental platform fraud has evolved beyond simply creating fake listings. Account takeover attacks allow fraudsters to compromise the credentials of real hosts with legitimate review histories, then modify payment details or communicate with guests off-platform to redirect payments to themselves. Guests may receive a message claiming there is a problem with the platform's payment system and asking them to pay directly by bank transfer. This bypasses the platform's fraud protection. Always pay exclusively through the official platform's payment system, regardless of what messages you receive. Additionally, be alert to last-minute requests to move communication to WhatsApp or email before booking, as this is a classic indicator that you are no longer dealing with a legitimate account.\n\nThe platform's payment system is not just a convenience — it is the entire protection model. Refunds, rebooking help, and fraud investigation all attach to transactions the platform can see; the moment money moves by bank transfer, you become an ordinary fraud victim with no booking. That is why every version of this scam, whatever the pretext, funnels toward the same request: pay outside the system. Treat the request itself as the diagnosis. A genuine host has no reason to avoid the platform's payments, since the platform pays them automatically after check-in.","redFlags":["Host asks you to pay by bank transfer outside the platform","Communication moves off the platform before payment is complete","Payment instructions change after you have already begun the booking process","Host claims the platform system is down and an alternative payment method is needed"],"whatToDoNow":["Always pay through the official platform payment system — never by direct bank transfer","Keep all communication within the platform's messaging system","Report any request to pay off-platform to the platform's trust and safety team","If you paid off-platform, contact your bank about a fraud claim"],"faq":[{"question":"Does Airbnb's guest protection cover off-platform payments?","answer":"No. AirCover and similar protection schemes only apply to bookings and payments made through the official platform. Off-platform payments receive no protection from the platform."},{"question":"The host offered a discount for paying by bank transfer — is that ever legitimate?","answer":"No. Off-platform payment requests violate the platform's terms precisely because they are the mechanism of this fraud. The discount is bait; what you give up is every protection the platform provides. Decline, keep the conversation in the app, and report the listing."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-person-who-claims-to-be-from-a-famous-family-offering-to-share-wealth-a-scam","url":"https://scamencyclopedia.org/questions/is-a-person-who-claims-to-be-from-a-famous-family-offering-to-share-wealth-a-scam","question":"Is a person who claims to be from a wealthy or royal family and wants to share their wealth with me a scam?","shortAnswer":"Yes. This is a modern variation of the advance fee fraud, one of the oldest and most persistent scam types.","explanation":"Advance fee fraud — also known as 419 fraud — involves a stranger reaching out with a story of vast, inaccessible wealth that they need your help to transfer. In exchange for assisting, you are offered a large share. As the process moves forward, you are asked to pay fees: legal fees, taxes, notary fees, or bribes. Each payment is promised to be the last before the money arrives. The money never arrives. The fees accumulate until you refuse to pay more. Variations now include people claiming to be royals fleeing persecution, oil executives with frozen accounts, lottery administrators, and military officials with discovered gold. The emotional hook — that you are uniquely trusted with a life-changing sum — is constant across all variations.\n\nTwo mechanisms keep victims engaged long past the point where outsiders see the fraud clearly. The first is sunk cost: after the first fee, each new demand is weighed against everything already paid rather than on its own merits, and refusing feels like abandoning the earlier money. The second is manufactured legitimacy — official-looking certificates, letters from 'banks' or 'courts', and co-conspirators playing lawyers and officials. Both mechanisms answer to the same fact: legitimate transfers of real money never require the recipient to pay escalating fees through informal channels first.","redFlags":["Unsolicited contact describing a large sum that needs your help to access","Offer of a share of the money in exchange for assistance","Request for payment of fees before the money can be released","Escalating fees with each approaching 'final' step","Extreme secrecy required"],"whatToDoNow":["Do not respond or send any money","Block and report the sender on whichever platform they used","If you have already paid fees, stop all payments and report to your national fraud authority"],"faq":[{"question":"Can I recover money I paid in an advance fee scam?","answer":"Recovery is rare, particularly when funds were sent by wire transfer or cryptocurrency. Report to your national fraud authority and your bank. Some countries have victim compensation schemes for fraud."},{"question":"They sent official certificates and a contract — could this one be real?","answer":"No. Documents are the cheapest part of the fraud to produce, and elaborate paperwork is a feature of these schemes, not a sign of legitimacy. No genuine institution releases funds to a stranger contingent on personal fee payments through wire services or cryptocurrency."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-car-warranty-or-insurance-offer-by-robocall-a-scam","url":"https://scamencyclopedia.org/questions/is-a-car-warranty-or-insurance-offer-by-robocall-a-scam","question":"Is a robocall about my car warranty or insurance expiring a scam?","shortAnswer":"Almost always yes. Unsolicited robocalls about vehicle warranties are a well-documented mass-scam targeting vehicle owners.","explanation":"Vehicle warranty robocall scams contact millions of car owners with recorded messages claiming their warranty or insurance is about to expire and offering to extend it immediately. When you press to speak to an agent, the caller will attempt to sell a worthless warranty product or collect your card details under the guise of processing a policy. The warranty, if any is provided, typically contains conditions that make it nearly impossible to claim. In the US and UK, unsolicited sales calls for financial products including insurance are regulated, and robocalls for these purposes are often illegal. Your real insurer or warranty provider will contact you in writing well before any expiry and will be identifiable through your policy documents.\n\nThe robocall format itself tells you most of what you need to know. These operations dial numbers by the million; the recording exists to filter for people willing to engage, and pressing a button to 'speak to an agent' or 'opt out' marks your number as live, typically increasing the calls. The economics only work because a tiny fraction of recipients buy — so the agents you reach are trained for maximum pressure. Hanging up without pressing anything costs the operation its filtering signal and costs you nothing, since any genuine warranty or policy question can be settled from your own documents in minutes.","redFlags":["Robocall claims your vehicle warranty or insurance is expiring soon","Caller asks for your vehicle identification number (VIN), card, or bank details","Offer is time-limited and requires you to decide on the call","Company cannot be identified by the name provided","Terms are vague about what the warranty actually covers"],"whatToDoNow":["Hang up — do not press any number or speak to an agent","Check your genuine warranty and insurance expiry from your policy documents","Report robocalls to your national communications regulator","Register on a do-not-call list if one is available in your country"],"faq":[{"question":"How do they know my car is coming out of warranty?","answer":"They often don't — the scripts are generic and designed to sound plausible for any vehicle owner. Sometimes they obtain vehicle registration data from breached databases or purchased marketing lists."},{"question":"Does pressing the opt-out number stop the calls?","answer":"Usually the opposite. Interacting confirms your number is active and answered by a human, which raises its value on call lists. Hang up without pressing anything, block the number, and report the call to your communications regulator."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-buyer-on-facebook-marketplace-who-wants-to-use-paypal-goods-and-services-safe","url":"https://scamencyclopedia.org/questions/is-a-buyer-on-facebook-marketplace-who-wants-to-use-paypal-goods-and-services-safe","question":"Is a Facebook Marketplace buyer who insists on using PayPal Goods and Services safe?","shortAnswer":"Not automatically. The G&S offer can itself be part of a scam involving fake PayPal emails and overpayment or chargeback fraud.","explanation":"PayPal Goods and Services does offer some buyer protection, but it is also exploited by scammers in marketplace sales. In one common version, the 'buyer' sends a fake PayPal confirmation email claiming more than the agreed amount was paid, then asks the seller to refund the difference. There is no real payment. In another version, the buyer genuinely pays via G&S but later files a false 'item not received' or 'item not as described' dispute after receiving the goods, collecting both the item and a PayPal refund. Sellers are more at risk from G&S than buyers. For local marketplace sales of physical goods, cash on collection is the safest option. For remote sales, understand that even genuine G&S payments can be reversed through fraudulent disputes.\n\nThe overpayment version deserves particular attention because it works entirely through a counterfeit email. The 'buyer' never pays anything; they send a message styled as a PayPal notification showing a payment above your asking price, then ask you to refund the difference or pay their 'shipper'. Any money you send is your own. The defence is procedural and simple: money either shows in your PayPal balance when you log in directly, or it does not exist. No legitimate payment scenario ever requires a seller to send their own money onward before a balance has cleared.","redFlags":["Buyer insists on PayPal G&S despite you preferring a local cash sale","Payment confirmation email looks slightly different from genuine PayPal emails","Buyer sends more than the asking price and requests a refund of the difference","Buyer contacts you on WhatsApp rather than through the Marketplace system","Buyer refuses to collect in person despite offering G&S as a 'safer' method"],"whatToDoNow":["For local sales, always prefer cash on collection","Never refund a payment difference before checking your actual PayPal balance","Log in to PayPal directly rather than clicking a link in an email to verify payment","Report suspicious transactions to PayPal's Resolution Centre"],"faq":[{"question":"Can a buyer reverse a PayPal G&S payment after I have sent the item?","answer":"Yes, through a false dispute. PayPal may reverse the payment while the investigation is ongoing. For high-value items, in-person cash on collection eliminates this risk."},{"question":"The PayPal email says the payment is on hold until I send a tracking number — is that real?","answer":"This is a classic fake. PayPal does not hold seller payments pending tracking numbers sent by email, and it never asks you to pay shipping costs to release a buyer's payment. Log in to PayPal directly; if the money is not in your balance, the email is fraudulent."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-email-claiming-my-icloud-account-was-logged-into-from-another-country-real","url":"https://scamencyclopedia.org/questions/is-an-email-claiming-my-icloud-account-was-logged-into-from-another-country-real","question":"Is an email saying my iCloud account was logged into from a different country a scam?","shortAnswer":"It may be a scam phishing email designed to look like an Apple security alert. Check your actual account directly, not through the email link.","explanation":"Apple does send genuine security alerts for new sign-ins to Apple ID accounts, but fraudsters create near-identical phishing emails to trick you into entering your credentials on a fake Apple page. These emails are among the most convincingly designed phishing messages in existence. The key distinction is the link destination: Apple's genuine emails direct you to accounts.apple.com, never to third-party domains. If you receive such an email, do not click any link in it. Instead, go directly to appleid.apple.com in your browser, sign in, and check recent activity under 'Security'. If there is a genuine unfamiliar sign-in, you can revoke access there. Always enable two-factor authentication to prevent unauthorised access even if your password is compromised.\n\nThe reason this template works so well is that it weaponises good security instincts — the alarm you feel at 'someone signed in from another country' is exactly the reflex the attacker wants, because alarmed people click before checking. The correction is to keep the instinct but redirect the action: alarm should always send you to the account itself through your own route, never through the message that raised the alarm. Checked from inside your account, a genuine alert and a phishing email resolve the same way in under a minute, with nothing at risk.","redFlags":["Email contains a link that does not lead to appleid.apple.com or apple.com","Message creates urgency — your account will be locked in 24 hours","Sender email address is not from apple.com","Link in the email requests your Apple ID and password"],"whatToDoNow":["Do not click any link in the email","Go directly to appleid.apple.com and check your sign-in activity","Change your Apple ID password and enable two-factor authentication if you are concerned","Report the phishing email to Apple at reportphishing@apple.com"],"faq":[{"question":"How can I tell a real Apple security email from a fake one?","answer":"The safest approach is to ignore the email entirely and check your account directly at appleid.apple.com. Genuine Apple alerts will also appear within the Apple ID section of your device settings."},{"question":"I clicked the link and entered my Apple ID before realising — what now?","answer":"Change your Apple ID password immediately from your device settings or the official site, enable two-factor authentication if it is not already on, and review your account's active devices and sessions. Also change that password anywhere you reused it, and watch for follow-up phishing."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-online-will-writing-service-that-charges-upfront-safe","url":"https://scamencyclopedia.org/questions/is-an-online-will-writing-service-that-charges-upfront-safe","question":"Is an online will-writing service I found through an ad safe to use?","shortAnswer":"Some are legitimate, but unregulated will-writing services can produce invalid documents. Verify regulation and use a solicitor for complex estates.","explanation":"Online will-writing services vary enormously in quality and legality. In the UK, will writers are not required to be regulated or qualified — meaning anyone can set up a will-writing business. Errors in will formatting, witness requirements, or clarity of instructions can result in a will being declared invalid or estates being distributed in ways the deceased did not intend. Scam operations collect fees for wills that are never produced or produced in legally worthless formats. Even some of the legitimate services use generic templates that do not account for complex assets, non-standard family structures, or tax considerations. For any significant estate, a solicitor regulated by the Solicitors Regulation Authority (UK) or equivalent is the safer choice.\n\nThe consequences of a defective will fall on people who cannot fix them — your family discovers the problem only after your death, when nothing can be re-signed. That asymmetry is what justifies extra care now. Beyond checking regulation and credentials, be wary of business models built on recurring revenue: heavily discounted wills paired with ongoing 'storage' fees, or executor appointments that entitle the company to a percentage of your estate. Both are common and can cost your estate far more than a properly drafted will would have.","redFlags":["Service is not regulated by a recognised legal authority","Price is very low and documentation appears generic or template-only","No qualified solicitor reviews the document before it is finalised","Service refuses to explain its complaint or redress process","Offers additional storage or updating services for recurring fees"],"whatToDoNow":["Check whether the service is a member of the Institute of Professional Will Writers or similar body","Consider using a regulated solicitor for any estate with property, business interests, or complex family arrangements","Ensure your will is properly signed and witnessed according to your jurisdiction's rules","Store the original document safely and tell your executor where it is held"],"faq":[{"question":"Is a DIY or online will always invalid?","answer":"No, if properly executed it can be valid. The risk is that errors in drafting or execution make it invalid without you knowing until it is too late. A qualified solicitor provides certainty."},{"question":"Should I let the will-writing company act as my executor?","answer":"Be cautious. Corporate executor appointments often carry substantial fees, sometimes a percentage of the estate, and your family cannot easily remove the company later. Most people are better served appointing trusted individuals who can hire professional help if needed."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-cold-call-about-solar-panel-grants-for-my-home-legitimate","url":"https://scamencyclopedia.org/questions/is-a-cold-call-about-solar-panel-grants-for-my-home-legitimate","question":"Is a cold call about government solar panel grants available for my home legitimate?","shortAnswer":"Almost never. Solar grant cold calls are typically lead generation for pushy salespeople or outright fraud collecting deposits for undelivered installations.","explanation":"Cold callers claim to represent government-backed solar or insulation grant schemes, visit your home to conduct a fake survey, and then use high-pressure sales tactics to get you to sign up for an installation requiring a deposit or finance agreement. In some cases, installations are done poorly or not at all, and poor-quality equipment is used. Genuine government energy efficiency schemes — such as the Great British Insulation Scheme or the ECO scheme in the UK — are applied for through your energy supplier or local authority, not through inbound cold calls. If you are interested in solar panels, go directly to your local authority or energy provider's website, or use a vetted installer from a scheme such as the Microgeneration Certification Scheme.\n\nHigh-pressure doorstep and phone selling in this sector follows a recognisable script: a 'survey' that always finds your home suitable, a quote presented as subsidised and available today only, and finance paperwork introduced at the kitchen table. Legitimate installers and genuine schemes survive comparison and reflection; pressure to sign immediately exists only to prevent them. Reputable firms expect you to gather multiple quotes, check their certification, and take days or weeks to decide — and solar is a purchase where that patience directly protects a substantial investment bolted to your roof.","redFlags":["Call claims government funding is available specifically for you right now","Caller asks to visit your home for a free survey but then sells products on the visit","Deposit required before any written quote or contract is provided","Installer is not registered with a recognised installation quality scheme","Offer is conditional on signing up on the day of the visit"],"whatToDoNow":["Do not pay a deposit to a cold-call solar company","Research genuine schemes through your energy provider or local authority","Verify any installer against the Microgeneration Certification Scheme or equivalent","Report aggressive or misleading sales practices to your consumer protection authority"],"faq":[{"question":"Are there legitimate solar panel grant schemes?","answer":"Yes, but they are accessed through official channels — your energy provider, local council, or the government website — not through inbound cold calls. Always initiate the contact yourself through official sources."},{"question":"The salesperson says the discounted price is only valid if I sign today — should I?","answer":"No. Sign-today pricing is a pressure tactic, not a real constraint, and it is one of the most reliable markers of a sales operation you should avoid. Any genuine offer from a reputable installer will still be available after you have compared quotes and checked their certification."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-crypto-exchange-registered-in-a-small-country-trustworthy","url":"https://scamencyclopedia.org/questions/is-a-crypto-exchange-registered-in-a-small-country-trustworthy","question":"Is a crypto exchange registered in Vanuatu, Seychelles, or another offshore jurisdiction trustworthy?","shortAnswer":"Registration in low-regulation jurisdictions is a significant risk indicator. Many scam exchanges use offshore incorporation to avoid meaningful oversight.","explanation":"A cryptocurrency exchange's jurisdiction of registration determines which consumer protection and financial regulation it is subject to. Many fraudulent exchanges incorporate in jurisdictions with minimal financial regulation — commonly Vanuatu, the Seychelles, the Marshall Islands, or similar small island states — precisely because they face little oversight or accountability. This does not mean all exchanges in these jurisdictions are fraudulent, but it does mean you have very limited recourse if the exchange steals your funds, blocks withdrawals, or suddenly ceases operations. Established, reputable exchanges typically hold licences from regulators in major jurisdictions such as the UK FCA, EU MiCA, or US FinCEN and are transparent about this on their website. Always verify regulation before depositing any funds.\n\nThe jurisdiction question matters most at the moment things go wrong. While an exchange is operating normally, its registration feels like paperwork; when withdrawals stall, the operator vanishes, or your account is frozen, jurisdiction determines whether any regulator, ombudsman, or court can compel a response. Offshore structures are frequently chosen to ensure the answer is no one. A practical discipline follows: check where an exchange is actually licensed before depositing, prefer platforms answerable to a regulator you could realistically complain to, and keep long-term holdings in wallets you control rather than on any exchange.","redFlags":["Exchange is registered only in a jurisdiction known for minimal regulation","No verifiable regulatory licence from a major financial authority","Unable to find the exchange reviewed on established cryptocurrency media","Customer service is unavailable or unresponsive before you deposit","Withdrawal fees or limits are not clearly published"],"whatToDoNow":["Check the exchange against warning lists published by major financial regulators","Use only exchanges with verifiable licences from your country or a major jurisdiction","Keep only what you actively trade on any exchange — hold long-term assets in a personal wallet","Report suspected fraudulent exchanges to your financial regulator"],"faq":[{"question":"Which exchange registrations are most trustworthy?","answer":"Exchanges regulated by the UK FCA, the EU (under MiCA), ASIC in Australia, or holding US FinCEN registration face meaningful oversight. Regulation does not guarantee against loss, but it provides recourse and requires compliance with anti-fraud standards."},{"question":"The exchange displays a licence certificate on its website — does that settle it?","answer":"No. Verify the claim on the regulator's own register rather than trusting an image on the site, and check that the licence covers the services you are using. Fabricated and irrelevant licences — such as a basic company registration presented as financial regulation — are common."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-broker-promising-to-recover-my-crypto-losses-legitimate","url":"https://scamencyclopedia.org/questions/is-a-broker-promising-to-recover-my-crypto-losses-legitimate","question":"Is a broker or service promising to recover my lost crypto investments legitimate?","shortAnswer":"No. Crypto recovery services are themselves scams that re-victimise people who have already lost money.","explanation":"After losing money to a cryptocurrency scam, victims are often targeted again by recovery scam operators. These services claim to have legal or technical tools to trace and recover stolen cryptocurrency — for an upfront fee. Some pose as law firms, blockchain forensics companies, or government-affiliated agencies. The recovery never happens, and the victim loses their advance payment on top of the original fraud. Real blockchain transactions are largely irreversible, and genuine recovery in rare cases is handled by law enforcement with court orders — not by private companies soliciting you after a loss. If you lost crypto to fraud, report to the police and your national fraud authority, who can liaise with exchanges to freeze proceeds in exceptional circumstances.\n\nRecovery scammers find victims with unpleasant efficiency: they monitor complaint forums, social media posts about losses, and comment sections, and in some cases buy victim lists traded by the original fraudsters — which is why the approach often arrives soon after you have been scammed and seems to know details of your case. Grief and the desire to undo the loss are the levers. It helps to set a firm personal rule at the moment of the first loss: any unsolicited contact offering to recover it, whatever credentials it claims, is the second wave of the same attack.","redFlags":["Service contacted you first, often soon after you reported a scam","Upfront fee required before recovery begins","Claims to have special technical or legal access to recover crypto","Uses official-sounding names or claims government affiliation","Cannot provide verifiable evidence of successful past recoveries"],"whatToDoNow":["Do not pay any recovery service","Report the original fraud and the recovery attempt to your national fraud authority","Contact your bank if any fiat payment was made","Be aware that further contact from recovery services is likely — block these proactively"],"faq":[{"question":"Is there any legitimate way to recover stolen crypto?","answer":"In limited cases, police can obtain court orders to freeze assets at exchanges. This requires a formal crime report and is not guaranteed. No private company can offer meaningful recovery outside of this legal process."},{"question":"A 'blockchain investigator' showed me a report tracing exactly where my funds went — is that credible?","answer":"Tracing tools are real and the report may even be broadly accurate, but tracing is not recovery. Only law enforcement with legal orders can compel an exchange to freeze or return funds. Anyone selling recovery based on a tracing report is monetising your hope, not retrieving your money."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-celebrity-endorsed-health-product-on-a-fake-news-website-real","url":"https://scamencyclopedia.org/questions/is-a-celebrity-endorsed-health-product-on-a-fake-news-website-real","question":"Is a celebrity-endorsed health or supplement product featured on a news website real?","shortAnswer":"No. Fake news websites with fabricated celebrity endorsements are a standard front for fraudulent supplement and health product sales.","explanation":"A sophisticated health product scam presents an article designed to look like a news story from a credible outlet, featuring a celebrity who supposedly endorses a miracle supplement, weight loss product, or health device. The celebrity has not endorsed the product, the news outlet is fake (often using a name very similar to a real broadcaster), and the product makes unsupported health claims. These pages are distributed through social media and paid search ads. Clicking through leads to a subscription trap or a product with no clinical evidence. The celebrities pictured have typically already issued cease-and-desist notices to such sites. Always verify celebrity endorsements by searching the celebrity's official verified social media or looking for press coverage.\n\nThese operations run as conveyor belts: the same page template is reused with a different celebrity, product name, and fake outlet each week, and the ads are targeted at audiences most likely to trust the featured face. The subscription trap on the far side is where the sustained damage happens — the 'trial' you pay a small shipping fee for enrols you in recurring charges buried in terms few people see, and cancelling is deliberately difficult. If you have entered card details on such a page, watch your statements closely and contact your card provider about blocking further charges.","redFlags":["News article features a celebrity endorsement you have not seen on their official channels","Domain name resembles a real outlet but with slight differences","Comments section appears disabled or shows only praise","Product can only be ordered through the article page and not through any pharmacy","Health claims are extreme — reversing diabetes, curing cancer, guaranteed weight loss"],"whatToDoNow":["Do not purchase products from fake news endorsement articles","Search the product name plus 'scam' or 'review' on independent sites","Report the fake news page to the platform carrying the ad","Check health claims against your national health authority or pharmacist"],"faq":[{"question":"Can I trust a health product just because it appears on Amazon or a pharmacy site?","answer":"Amazon carries third-party products with limited vetting. Registered pharmacies are more reliable but still sell legal supplements with unproven claims. Check for independent clinical evidence and consult your doctor."},{"question":"I signed up for a free trial from one of these pages and now I am being charged monthly — what can I do?","answer":"Contact your card provider, explain the misleading enrolment, and ask to block the merchant and dispute the charges. Cancel through any contact route the seller provides and keep evidence of the attempt. Card providers handle these subscription-trap disputes routinely."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-landlord-who-asks-for-rent-in-cash-only-running-a-scam","url":"https://scamencyclopedia.org/questions/is-a-landlord-who-asks-for-rent-in-cash-only-running-a-scam","question":"Is a landlord who only accepts cash rent payments running a scam or breaking the law?","shortAnswer":"Not necessarily illegal, but cash-only rent is a significant risk indicator that offers you no payment record or consumer protection.","explanation":"A landlord demanding cash-only rent payments is not automatically committing fraud, but it is a significant warning sign. Cash leaves tenants without payment records, makes it impossible to prove rent was paid if a dispute arises, and is associated with landlords seeking to hide rental income from tax authorities. In severe cases, it can be part of a fraud where multiple people are renting the same property simultaneously, or where the 'landlord' does not own the property at all. Always insist on a written tenancy agreement and a proper receipt for every cash payment. Ideally, pay rent by bank transfer so you have a permanent payment record. If your landlord cannot provide a tenancy agreement and refuses any traceable payment, do not proceed with the rental.\n\nThe deeper risk behind cash-only demands is what they often signal about the whole arrangement: a landlord avoiding records may also be avoiding deposit protection, safety obligations, and in the worst case may not be the owner at all. Rental fraud where a 'landlord' shows a property they have no right to let — sometimes having viewed it themselves as a fake tenant days earlier — is consistently reported in tight rental markets, and cash completes the disappearance. Ownership verification through the land registry costs little and takes minutes, and a legitimate landlord has no reason to object to it.","redFlags":["Landlord demands cash only with no alternative offered","No written tenancy agreement provided","Landlord cannot prove they own or have authority to let the property","Rent amount or conditions differ from those originally advertised"],"whatToDoNow":["Insist on a written tenancy agreement before paying any money","Prefer bank transfer payments — they create a permanent record","If paying cash, always request a signed and dated receipt","Verify the landlord's identity and ownership through the land registry"],"faq":[{"question":"Can a landlord legally refuse to give me a receipt for cash rent?","answer":"In most jurisdictions, tenants have a right to a receipt for cash payments. A landlord who refuses to provide receipts is giving you no proof of payment and creating grounds for later disputes about arrears."},{"question":"The rent is below market and the landlord wants cash for the deposit today or I lose the flat — should I pay?","answer":"No. Below-market pricing plus urgency plus untraceable payment is the standard rental-fraud combination. A genuine landlord does not need a same-day cash deposit before you have a signed agreement and proof they own the property. Walk away, however good the flat looks."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-binary-options-or-forex-robot-that-trades-automatically-a-scam","url":"https://scamencyclopedia.org/questions/is-a-binary-options-or-forex-robot-that-trades-automatically-a-scam","question":"Is a binary options broker or Forex robot that trades for me automatically a scam?","shortAnswer":"Almost certainly yes. Binary options are banned in many countries, and automated Forex robots consistently underperform their marketing claims.","explanation":"Binary options allow traders to bet on whether an asset will be above or below a price at a fixed time — they were banned by the FCA in the UK, ESMA across Europe, and ASIC in Australia as a result of widespread fraud and the inherent structural advantage held by the broker. Automated Forex trading robots (EAs) are widely marketed with screenshots of enormous historical returns but produce results in live markets that rarely match their backtested performance. Fraudulent robot sellers charge for the software and then push users toward partner brokers who share commission. Once funds are deposited at an unlicensed broker, withdrawal is blocked or delayed indefinitely. Neither product is a reliable path to consistent profits, and most result in loss.\n\nThe sales funnel around these products is as engineered as the products themselves. Social media ads lead to testimonials and lifestyle imagery, then to a 'free' robot or signals group, and finally to the real objective: your deposit at a broker the promoter controls or takes commission from. Early trades often show profits — sometimes real, sometimes simply displayed — to encourage larger deposits before the withdrawal problems begin. Judging any trading product starts with the broker behind it: if the broker is unlicensed, nothing upstream of it matters, because the money has already left the regulated world.","redFlags":["Binary options platform or broker operating without FCA, ASIC, or equivalent licensing","Trading robot sold with screenshots of historical gains and no live-account verification","Withdrawal from the broker requires additional deposits or verification that never completes","Platform contacts you first with an unsolicited offer","Social media ads show lifestyle imagery alongside automated profit claims"],"whatToDoNow":["Do not deposit any funds with an unlicensed binary options or Forex broker","Report the platform to your national financial regulator","If you deposited funds and cannot withdraw, contact your bank about a chargeback","Seek advice from a regulated financial adviser before investing in any automated system"],"faq":[{"question":"Are all Forex brokers fraudulent?","answer":"No. Regulated Forex brokers in major jurisdictions are legitimate financial service providers. The risk lies with unregulated brokers, particularly those approached through social media, that block withdrawals."},{"question":"My account shows profits but the broker keeps finding reasons to delay my withdrawal — what is happening?","answer":"Delayed withdrawals with rotating excuses — extra verification, taxes, minimum trading volumes — are the signature of an unlicensed broker that never intended to pay out. Stop depositing immediately, gather your records, report to your financial regulator, and speak to your bank about disputing card deposits."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-text-from-a-friend-saying-they-need-emergency-bail-money-real","url":"https://scamencyclopedia.org/questions/is-a-text-from-a-friend-saying-they-need-emergency-bail-money-real","question":"Is a text from a friend saying they need emergency bail money a scam?","shortAnswer":"Very often yes. Account takeover and emergency impersonation scams frequently target contacts of hacked accounts with urgent bail or travel requests.","explanation":"Emergency bail money scams operate after a social media or messaging account is hacked. The attacker messages the victim's contacts claiming the account owner is in jail, stuck abroad, hospitalised, or in another emergency, and needs money urgently. The message is designed to trigger emotional reaction before the recipient has time to think critically. In the modern 'friend in trouble' variant, the scammer asks for money by bank transfer, gift cards, or mobile money and provides a reason why you should not call the person — their phone is broken, they are in a restricted area, or calling will make things worse. Always verify an emergency claim by calling the person directly on their usual number before sending any money.\n\nThe scam is engineered around the gap between alarm and verification, and everything in the script — the urgency, the secrecy, the broken phone — exists to keep you inside that gap. Closing it takes one phone call, and it is worth deciding now, calmly, that no emergency money leaves your account without hearing the person's voice through a number you already had. Real emergencies survive a five-minute verification; scripted ones collapse. If the message did come from a friend's real account, your call also delivers the news that their account is compromised, which they need to know urgently anyway.","redFlags":["Message arrives from a known account but feels slightly off in tone or language","Explanation for why you cannot call to verify","Request for an unusual payment method such as gift cards or wire transfer","Extreme urgency — must be done in the next hour","Request to keep the situation private and not tell family"],"whatToDoNow":["Call the person directly on their usual phone number before doing anything","Contact a family member of the person to verify","If the account was hacked, alert the platform and inform other contacts","Never send money in response to an emergency text without voice verification"],"faq":[{"question":"My friend says their phone was taken and they can only text — should I trust that?","answer":"This is a common excuse in the scam script. If your friend genuinely cannot call, they can still have someone else call you on their behalf. Insist on voice confirmation before sending any money."},{"question":"The message came from my friend's real account, not a lookalike — doesn't that prove it's them?","answer":"No. Compromised accounts are the standard vehicle for this fraud — the attacker is typing inside your friend's genuine account after stealing access to it. The account is real; the person is not. Voice verification through a known number is the only check that resolves this."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-student-accommodation-scam-common-for-international-students","url":"https://scamencyclopedia.org/questions/is-a-student-accommodation-scam-common-for-international-students","question":"Are student accommodation scams common, especially for international students?","shortAnswer":"Yes. International students who need housing before arriving in a country are prime targets for rental fraud.","explanation":"International students face a difficult housing market and may need to secure accommodation before arriving, making it impossible to view properties in person. Scammers exploit this by listing properties on student housing platforms and legitimate classifieds sites with attractive prices and often stolen photos of real properties. They ask for a deposit and first month's rent upfront by bank transfer, then disappear. Some scams provide a fake address that the student arrives at to find either occupied by another family or entirely non-existent. The safest approach is to book through your university's verified accommodation service, contact the local authority housing register, or only use landlords who can provide a verifiable lease contract and references from a university housing office.\n\nTiming pressure is the scammer's structural advantage here: listings surge just before term starts, genuine rooms do disappear within days, and applicants several time zones away feel they must secure something immediately. Fraudulent listings are written to amplify that pressure with below-market rents and mentions of other 'interested applicants'. It is worth remembering that losing a genuine room costs you a longer search; losing a deposit to a fake one can cost a term's budget. Universities maintain accommodation services precisely because arriving students are targeted, and even late in the season they can point you to vetted options and emergency housing.","redFlags":["Landlord or agent cannot meet in person or arrange a verified viewing","Price is significantly below comparable local properties","Deposit and advance rent requested by bank transfer before any paperwork","Communication is only by email or text with no phone number or physical address","Landlord is 'abroad temporarily' but can arrange to send keys after payment"],"whatToDoNow":["Use only your university's official accommodation service for initial housing","If using private listings, insist on a video tour with the landlord present and live","Never pay a deposit without a signed tenancy agreement referencing a verifiable property","Report suspected scam listings to the platform and your university's accommodation office"],"faq":[{"question":"My university recommends a private housing portal — is it safe?","answer":"University-endorsed portals are generally safer but are not immune to fraudulent listings. Still verify the landlord and never pay a deposit without a signed contract."},{"question":"I arrived and the address doesn't exist or is occupied — what do I do right now?","answer":"Contact your university's accommodation office immediately — they deal with this scenario and can arrange emergency options. Report the fraud to the police and the listing platform, and notify your bank at once, as fast reporting gives the best chance of tracing the transfer."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-discount-buying-club-or-membership-scheme-a-scam","url":"https://scamencyclopedia.org/questions/is-a-discount-buying-club-or-membership-scheme-a-scam","question":"Is a discount buying club or members-only savings scheme a scam?","shortAnswer":"Often yes. Many discount membership clubs use pyramid-like referral structures, provide illusory savings, and make cancellation deliberately difficult.","explanation":"Discount buying clubs and members-only savings schemes charge a monthly or annual membership fee in exchange for access to discounted products or services. The discounts are often on overpriced goods, savings that disappear when compared to standard retail prices, or benefits that require purchasing from a limited catalogue of partner brands. Some schemes operate a referral commission structure, making them resemble MLMs. Others make cancellation so difficult — requiring written notice within a narrow window — that members are charged for months after they intended to leave. Legitimate discount services such as cashback platforms and verified coupon sites do not require significant upfront membership fees and provide savings that can be verified against external retail prices.\n\nThe arithmetic test is the one these schemes cannot survive: before joining, price three or four items you would actually buy through the club against ordinary retail, subtract the membership fee, and see what remains. Marketing materials avoid that comparison by quoting savings against inflated 'list prices' no one pays. The cancellation terms deserve equal scrutiny before payment, because recurring-fee businesses that make leaving difficult are telling you where their revenue really comes from — retention friction, not member savings.","redFlags":["High upfront or recurring membership fee before any savings can be accessed","Savings are only available on the scheme's own catalogue of goods","Referral bonuses that resemble an MLM commission structure","Cancellation requires written notice within a very narrow window","Savings cannot be independently verified against standard retail prices"],"whatToDoNow":["Calculate whether the membership fee can realistically be recovered through actual savings before joining","Read cancellation terms carefully before providing payment details","Use cashback platforms and public voucher sites as free alternatives","Report schemes with misleading savings claims to your consumer protection authority"],"faq":[{"question":"Are any buying club memberships worth the cost?","answer":"Some warehouse club memberships such as Costco are well-documented sources of genuine savings for high-volume buyers. The key difference is transparency about what is offered, independent price verification, and straightforward cancellation."},{"question":"I have been charged for months after trying to cancel — how do I stop it?","answer":"Send a written cancellation you can evidence, then instruct your card provider or bank to block future payments to the merchant — you can withdraw a continuous payment authority through your bank. Dispute charges taken after your cancellation notice and report the trader to your consumer protection authority."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-sextortion-email-saying-it-has-a-video-of-me-real","url":"https://scamencyclopedia.org/questions/is-a-sextortion-email-saying-it-has-a-video-of-me-real","question":"Is an email claiming to have a video of me visiting adult websites real?","shortAnswer":"Almost always no. Sextortion emails are mass-sent bluffs. No video exists in the overwhelming majority of cases.","explanation":"Mass-sextortion emails claim the sender installed malware on your device while you visited an adult website, recorded your screen and webcam simultaneously, and will send the footage to your contacts unless you pay in cryptocurrency. To make the threat seem credible, some emails include an old password from a data breach or the first few digits of your phone number — details obtained from publicly available breach databases. In the vast majority of cases, no such recording exists. These are bluff campaigns sent to millions of people at once. The payment request is the only goal. Replying, paying, or engaging escalates contact. If the email contains a password you still use, change it immediately and enable two-factor authentication on affected accounts.\n\nUnderstanding the economics removes most of the fear. These campaigns are sent to enormous mailing lists assembled from breach data; the sender has no idea who opened the message, owns no footage, and profits because a small fraction of recipients panic and pay. The leaked password is set dressing — genuinely yours, but harvested from an old breach, not from your device. What actually deserves your attention is that credential exposure: anywhere that password or its variants survive, an attacker could genuinely log in. The email is a bluff; password reuse is the real vulnerability it accidentally points at.","redFlags":["Email claims to have webcam footage of you on an adult website","Bitcoin or crypto payment demand with a wallet address","Email contains an old password or partial phone number to seem credible","Deadline of 24 to 48 hours to pay before footage is released"],"whatToDoNow":["Do not pay and do not reply","If the email contains a real password you still use, change it immediately","Enable two-factor authentication on all accounts that used that password","Report the extortion email to your national fraud authority"],"faq":[{"question":"Should I cover my webcam just in case?","answer":"Covering your webcam is a simple and free precaution with no downside. It does not indicate that you believe the email — it is a standard digital hygiene step recommended by security professionals."},{"question":"The email showed a password I still use — does that mean my computer is hacked?","answer":"Almost certainly not. The password came from a website breach, not from your machine — the same reason it appears in millions of identical emails. Change that password everywhere it is used, enable two-factor authentication, and treat the email itself as spam."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-timeshare-exit-company-a-scam","url":"https://scamencyclopedia.org/questions/is-a-timeshare-exit-company-a-scam","question":"Is a timeshare exit company offering to cancel my timeshare contract a scam?","shortAnswer":"Often yes. Timeshare exit companies frequently take large upfront fees and fail to cancel contracts, leaving owners in the same or worse position.","explanation":"Timeshare exit companies promise to legally extricate you from your timeshare contract — often charging thousands of pounds or dollars upfront. Many of these companies take the fee, use minimal legal effort, and leave the contract unchanged while going out of business or becoming uncontactable. Others instruct clients to stop paying maintenance fees, damaging their credit rating. The timeshare company itself often offers legitimate deed-back or exit programmes that are free or low-cost — but these are not widely advertised. In the UK, many timeshare contracts have a right of rescission period, and consumer protection organisations can provide free advice. Before engaging any exit company, contact a solicitor and the timeshare company itself to explore free or low-cost exit options.\n\nThis market exists because timeshare owners often feel trapped between rising maintenance fees and contracts written to outlast them, and exit companies price their fees against that desperation. The pattern to internalise is that anyone who cold-calls you already knowing you own a timeshare bought that information, and their business is the upfront fee, not the exit. Approach it from the other direction: start with the resort's own exit options, take independent advice on what your contract actually permits, and let any exit service prove its record before money moves — legitimate ones can.","redFlags":["Large upfront fee with guarantees of successful cancellation","Company contacted you first rather than you finding them through research","Advises you to stop paying maintenance fees immediately","Cannot provide verifiable evidence of past successful exits","Uses aggressive sales tactics to sign you up quickly"],"whatToDoNow":["Contact the timeshare company directly about their exit or deed-back programme","Seek advice from a solicitor or consumer protection organisation before paying any exit company","Check the exit company against your national consumer authority's complaint register","Report any company that took fees without delivering exit to your fraud authority"],"faq":[{"question":"Can I cancel a timeshare myself?","answer":"Many timeshare contracts have a statutory right of rescission in the first 14 days. After that, contact the resort directly about exit programmes. A solicitor can advise on your specific contract."},{"question":"The exit company offered a money-back guarantee if they fail — doesn't that remove the risk?","answer":"No. Guarantees are only as good as the company behind them, and exit firms routinely close or become uncontactable before refunds are honoured, sometimes reopening under a new name. An unenforceable guarantee is a sales tool, not protection."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-text-from-royal-mail-or-usps-asking-for-card-details-to-release-a-package-real","url":"https://scamencyclopedia.org/questions/is-a-text-from-royal-mail-or-usps-asking-for-card-details-to-release-a-package-real","question":"Is a text from Royal Mail or USPS asking for my card details to release a package real?","shortAnswer":"No. This is a delivery phishing text — one of the most commonly reported scam types in the UK and US.","explanation":"Smishing (SMS phishing) texts impersonating Royal Mail, USPS, FedEx, UPS, and other carriers tell you that a package is waiting but cannot be delivered until a small customs fee, redelivery charge, or storage fee is paid. The amount is deliberately small — often under £2 or $3 — to make it seem not worth questioning. Clicking the link leads to a fake payment page that harvests your card details for larger fraudulent charges. Royal Mail does charge customs fees on international parcels above a threshold, but these are notified by a physical card left at the address, not by SMS with a payment link. If you have a legitimate outstanding customs charge, log in directly to the carrier's official website to check.\n\nThe small fee is the misdirection; the payment page is the prize. Card details entered there are used or sold for substantially larger fraud, and the follow-up often arrives as a phone call from someone posing as your bank's fraud team, referencing the very details you typed, offering to 'secure' your account. That second stage is where the serious losses happen, so if you have entered details, act on the assumption the card is compromised and be doubly sceptical of any inbound bank call that follows. The text-to-payment-page pattern itself is the tell: carriers notify, but they do not collect payment through SMS links.","redFlags":["Text from a carrier about a package with a payment link","Small fee amount designed to seem trivial","Link does not go to the official carrier website","Text arrives about a package you are not expecting","Sender ID appears as the carrier name but the link domain is unfamiliar"],"whatToDoNow":["Do not click the link","Check any genuine outstanding deliveries through the carrier's official app or website","Report the smishing text to your national spam reporting number (7726 in the UK)","If you entered card details, contact your bank immediately to block the card"],"faq":[{"question":"How do real customs charges from Royal Mail work?","answer":"Royal Mail leaves a physical card at the address with a reference number. You pay the fee online at royalmail.com using that reference — never through a link in a text message."},{"question":"After entering my card details on a delivery page, someone called from my bank about fraud — was that connected?","answer":"Almost certainly, and the call was likely the scammers themselves. Criminals use freshly phished details to impersonate bank fraud teams convincingly. Hang up, wait, and call your bank yourself on the number printed on your card before acting on anything said in an inbound call."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-buy-now-pay-later-plan-for-a-surgery-or-medical-procedure-safe","url":"https://scamencyclopedia.org/questions/is-a-buy-now-pay-later-plan-for-a-surgery-or-medical-procedure-safe","question":"Is a buy-now-pay-later plan offered by a cosmetic surgery or dental clinic safe?","shortAnswer":"The plan itself may be legitimate, but it can be used by unregulated clinics to lock you into debt for procedures that go wrong.","explanation":"Buy-now-pay-later (BNPL) finance offered by cosmetic, dental, or aesthetic clinics can be a legitimate payment option, but it creates specific risks when the clinic is unregulated or the practitioner is not medically qualified. If a procedure goes wrong, you remain liable for the full debt regardless of the outcome. Unregistered clinics offering BNPL may be targeting customers who cannot afford upfront payment — and who are therefore less able to afford the cost of revision surgery if things go wrong. Before signing any BNPL agreement for a medical or aesthetic procedure, verify the clinic's registration with the relevant medical regulator, confirm the practitioner's qualifications, and understand the complaint process and whether the clinic carries professional indemnity insurance.\n\nThe finance structure changes your incentives at the worst moment. Because BNPL approval is quick and the cost is framed as monthly instalments, decisions that deserve weeks of research get made in a consultation designed to close a sale. A useful discipline is to separate the two judgements completely: first, would you choose this clinic and practitioner if you were paying the full amount upfront from savings? Only if that answer is a confident yes should the financing question even begin. Any clinic that leads with the payment plan before the clinical assessment has shown you its priorities.","redFlags":["Clinic cannot provide the practitioner's medical registration details","BNPL approval appears instant without any affordability checks","Clinic has no clear complaint or redress process","Offers are heavily discounted with time pressure to sign before the offer expires","Practitioner is not a registered doctor, dentist, or nurse"],"whatToDoNow":["Verify the practitioner is registered with the relevant medical regulatory body","Ask specifically about the clinic's professional indemnity insurance","Read the BNPL agreement carefully — you remain liable even if the procedure fails","Report unregistered practitioners to your healthcare regulatory authority"],"faq":[{"question":"Can I cancel a BNPL agreement if the procedure was botched?","answer":"BNPL agreements are typically separate from your contract with the clinic. You would need to pursue the clinic for a refund separately while remaining liable to the BNPL provider. Regulated finance agreements have some protections — seek advice from a consumer rights organisation."},{"question":"The clinic is pushing me to sign the finance agreement at the consultation — is that normal?","answer":"It is common but it is not in your interest. A reputable clinic will let you take the agreement away, compare costs, and return after reflection. Pressure to sign on the day is a sales technique, and with medical procedures it is a warning sign in itself."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-email-from-a-foreign-lottery-saying-i-won-real","url":"https://scamencyclopedia.org/questions/is-an-email-from-a-foreign-lottery-saying-i-won-real","question":"Is an email saying I won a foreign lottery I never entered real?","shortAnswer":"No. You cannot win a lottery you never entered. This is an advance fee fraud using a lottery as cover.","explanation":"Foreign lottery scam emails — often claiming to be from a Spanish El Gordo draw, a Dutch Postcode Lottery, or a UK National Lottery prize committee — inform you that your email address was randomly selected in a prize draw and you have won a large sum. To claim your prize, you must contact a claims agent and pay a fee for processing, tax clearance, or legal documentation. Each payment leads to a request for another. The prize never exists. No legitimate lottery selects winners by randomly drawing email addresses — you must purchase a ticket. If you receive such an email, mark it as spam and do not respond.\n\nBeyond the obvious logical problem — you cannot win a draw you never entered — these emails serve a second function even when you never pay a fee: any reply identifies your address as monitored by a human willing to engage, which moves you onto higher-value target lists that are resold among fraud operations. The same applies to calling any number in the email. Silence is the correct response. If you ever want to check whether a lottery claim could be genuine, the only meaningful test is whether you personally bought a ticket for that specific draw; everything else is decoration.","redFlags":["You won a lottery you never entered or purchased a ticket for","Contact a 'claims agent' by a specific email to begin the process","Processing fee, tax clearance, or legal fee required before prize is released","Email address is the entry mechanism — no ticket number referenced","Email has grammatical errors despite claiming to be from an official lottery body"],"whatToDoNow":["Do not respond or pay any fee","Mark the email as phishing or spam","Report to your national fraud authority if you have already sent money"],"faq":[{"question":"What if the email mentions a real lottery like El Gordo?","answer":"Criminals use real lottery names to add credibility. El Gordo and the UK National Lottery do not conduct prize draws by email address. The use of a real name does not mean the email is genuine."},{"question":"I replied before realising — what should I expect now?","answer":"Expect more contact: follow-up emails, phone calls, and possibly different scam formats, since responsive addresses are shared between operations. Stop replying entirely, block the senders, and treat any future 'prize', 'refund', or 'recovery' contact as part of the same campaign."}],"lastReviewed":"2026-08-01"},{"slug":"can-a-phone-scammer-use-my-recorded-voice-to-authorise-transactions","url":"https://scamencyclopedia.org/questions/can-a-phone-scammer-use-my-recorded-voice-to-authorise-transactions","question":"Can a phone scammer record my voice saying 'yes' and use it to authorise transactions?","shortAnswer":"Voice authorisation is rarely used for major transactions, but voice cloning from recorded samples is a growing and more serious threat.","explanation":"The fear that a scammer can use a recording of you saying 'yes' to authorise bank transactions is widely circulated but largely overstated for standard financial transactions — banks use multi-factor verification that a single recorded word cannot bypass. However, the underlying concern about voice recordings is increasingly valid in a different context: AI voice cloning. A recording of even a few seconds of your voice can be used to synthesise convincing fake audio of you saying anything, which can be used in more complex social engineering attacks targeting your employer, family, or bank. The practical advice is not to stay silent on suspicious calls (which can itself be a signal to automated dialers) but to hang up quickly if you suspect the call is designed to obtain a voice recording.\n\nIt is worth separating the viral warning from the real threat model. Banks and payment systems do not authorise transfers on the strength of a recorded syllable, which is why the classic 'say yes' scare has never matched the losses attributed to it. What recorded audio does feed is impersonation: a clip of your natural speech can help clone a voice used to call your relatives or workplace with an emergency story. The defence therefore is not silence on your own phone but preparation of the people around you — shared verification habits, a family code word, and a norm of calling back on known numbers.","redFlags":["Caller asks specific yes/no questions immediately after you answer","Call seems designed to get you to say 'yes', 'confirm', or your full name on record","Robocall that plays silence until you speak to trigger recording"],"whatToDoNow":["If suspicious, hang up — do not stay on the line to avoid speaking","Enable voice biometric protection if your bank offers it","Be aware of AI voice cloning as a more realistic emerging threat","Report suspicious calls to your telecoms provider and national fraud service"],"faq":[{"question":"Should I answer unknown numbers at all?","answer":"Answering and immediately hanging up is low risk. The more significant risk from scam calls is engaging with callers who social-engineer you over time, not from a single syllable being recorded."},{"question":"Is there any harm in talking normally to an unknown caller?","answer":"Ordinary conversation carries little risk by itself. The meaningful risks are what you disclose — personal details, account information — and staying engaged with social engineering. If a call feels like it is fishing for information or keeping you talking without a clear purpose, end it."}],"lastReviewed":"2026-08-01"},{"slug":"is-it-safe-to-send-money-to-someone-i-met-on-a-dating-app-if-i-verified-by-video-call","url":"https://scamencyclopedia.org/questions/is-it-safe-to-send-money-to-someone-i-met-on-a-dating-app-if-i-verified-by-video-call","question":"Is it safe to send money to someone I met on a dating app if I have seen them on video call?","shortAnswer":"No. Video call verification is no longer reliable — deepfake and pre-recorded video tools allow scammers to appear on camera convincingly.","explanation":"Video calls were once considered a reliable way to verify that a person is who they claim to be, but deepfake technology and pre-recorded video tricks have largely removed this certainty. Some scammers use real-time deepfake software that overlays a different face on their own during a video call. Others play a pre-recorded video while chatting by text separately. Requests for money from people met on dating apps — regardless of how much you feel you know them or how convincing they appear on camera — should be treated with extreme caution. No person who has a genuine romantic interest in you should place you in a financial position that creates stress or loss before you have met in person. Meeting in person in a safe public setting remains the only reliable verification.\n\nThe request for money is the point where verification stops mattering anyway, and it deserves to be judged on its own: someone who genuinely cares about you does not route their financial emergencies through a person they have never met. Romance fraud scripts converge on the same shapes — a medical crisis, a customs problem, a frozen account, an investment opportunity — always with a reason you specifically must pay and a reason it must happen now. However real the face on the screen felt, the financial pattern is the identity that matters, and it is the one part of the interaction the scammer cannot disguise.","redFlags":["Video call feels slightly delayed or the person's movements seem unnatural","They cannot respond to unexpected on-screen requests such as writing a note or holding an object","Relationship has moved very fast emotionally before you have ever met","Any request for money, regardless of the reason given"],"whatToDoNow":["Never send money to someone you have only met online regardless of video call history","During a video call, ask them to hold up a piece of paper with your name on it — real-time deepfakes struggle with this","Report suspected scammers to the dating platform","If you have sent money, report to your bank and national fraud authority"],"faq":[{"question":"Is meeting in person always safe if I arrange it?","answer":"Meeting in a well-populated public place is a reasonable step, but it does not by itself mean the person is trustworthy with your money. Financial requests should still be evaluated independently of how a meeting went."},{"question":"They have never asked for money in months of talking — does that mean it's genuine?","answer":"Not necessarily. Long grooming periods are standard in romance fraud, and pig-butchering variants invest months before introducing an investment platform rather than a direct request. Judge any eventual financial suggestion on its own merits, regardless of how much trust has accumulated."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-business-email-with-my-logo-impersonating-my-company-a-crime","url":"https://scamencyclopedia.org/questions/is-a-business-email-with-my-logo-impersonating-my-company-a-crime","question":"Someone is using my company's logo and name to send scam emails — what can I do?","shortAnswer":"This is brand impersonation fraud and is a crime in most jurisdictions. You can report it to email platforms, domain registrars, and law enforcement.","explanation":"Brand impersonation occurs when fraudsters use your company name, logo, and communication style to deceive third parties — often your customers, suppliers, or employees. Common tactics include registering domains with slight misspellings of your name (typosquatting), using your logo in phishing emails, and setting up fake social media accounts. The impact includes financial loss to the victims of the fraud, reputational damage to your business, and possible legal exposure if customers assume you are responsible. You can take action by reporting the impersonating domain to the registrar using a UDRP (Uniform Domain-Name Dispute-Resolution Policy) complaint, filing abuse reports with email providers, and working with a solicitor to send cease-and-desist notices where the impersonator can be identified.\n\nMove quickly on the customer-warning step even though it feels reputationally uncomfortable, because your exposure compounds while the fraud runs: every additional victim who believed they were dealing with you is a future complaint, chargeback, or review attached to your name. A short notice on your website and official channels describing the fraudulent domain, plus a standing statement of how you do and do not request payment, protects customers and creates a record of diligence. Internally, tighten your own payment-change procedures too — impersonators who studied your business for external fraud often try your suppliers and staff next.","redFlags":["Customers reporting receiving invoices or payment requests from a domain similar to yours","An unfamiliar domain registered with your business name","Social media accounts using your logo and name that you did not create","Employees receiving phishing emails that appear to come from within your own company"],"whatToDoNow":["Report the impersonating domain to the registrar and request takedown","Alert your customers through official channels that fraudulent emails are circulating","File a report with your national fraud authority and police","Consider registering common typosquatting variations of your domain as a preventive measure"],"faq":[{"question":"Can my company be held liable for fraud committed using its name?","answer":"Generally no, if you were not involved and take prompt action to warn victims and report the fraud. Document your response carefully in case of any later legal claim."},{"question":"How can I reduce the chance of my business being impersonated in future?","answer":"Register the obvious lookalike domains, set up email authentication (SPF, DKIM, DMARC) so spoofed mail is rejected, monitor for new domains resembling yours, and publish a clear statement of how you invoice and request payment so customers can recognise deviations."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-fake-google-maps-listing-used-to-scam-customers-possible","url":"https://scamencyclopedia.org/questions/is-a-fake-google-maps-listing-used-to-scam-customers-possible","question":"Can scammers create a fake Google Maps listing to intercept customers?","shortAnswer":"Yes. Fraudulent Google Business Profile listings redirect customers to scammers posing as legitimate businesses.","explanation":"Google Business Profile allows anyone to claim or create a listing, and scammers exploit this by creating fake listings for real businesses — particularly locksmiths, plumbers, and financial services — or by hijacking existing legitimate listings and changing the contact phone number. Customers searching for a service find what appears to be a genuine business, call the number, and are directed to a fraudster who either overcharges dramatically or collects payment for a service that is never performed. In the case of locksmiths and plumbers, this fraud frequently targets people in genuine emergencies. Always verify a business's phone number through its official website rather than relying solely on the number shown in Google Maps.\n\nThe emergency-trades version of this fraud has a second act worth knowing: the person who arrives is often a subcontractor of the fake listing operation who quotes far above the phone price once the door is open or the lock is drilled, calculating that a stressed householder will pay rather than prolong the emergency. Agreeing the price and scope in writing before any work starts removes that leverage, and a legitimate tradesperson will not resist it. Where possible, save the verified numbers of a locksmith and plumber while you do not need them — the worst time to vet a trade is mid-emergency.","redFlags":["Phone number in a Google Maps listing differs from the number on the business's official website","Listing was recently created and has very few reviews","Caller gives a very vague location and is evasive about their business address","Price quoted over the phone is dramatically different from the final invoice"],"whatToDoNow":["Verify business contact details through the company's official website, not only through Google Maps","Report fraudulent listings through Google Maps using the 'Suggest an edit' function","For emergency services, ask for a written quote before work begins","Report to your trading standards or consumer protection authority"],"faq":[{"question":"Can legitimate businesses protect their Google Maps listing from being hijacked?","answer":"Yes. Business owners should claim and verify their Google Business Profile, enable ownership protection, and monitor their listing regularly for unauthorised changes to contact details."},{"question":"The locksmith quoted one price by phone and demanded triple after the work — do I have to pay?","answer":"You are generally only bound by what was agreed, and dramatic post-work inflation is a recognised fraud pattern. Do not pay under intimidation — call the police if threatened. Pay by card rather than cash if you pay anything, document everything, and report to trading standards."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-cryptocurrency-wallet-app-that-shows-growing-profits-without-me-doing-anything-real","url":"https://scamencyclopedia.org/questions/is-a-cryptocurrency-wallet-app-that-shows-growing-profits-without-me-doing-anything-real","question":"Is a cryptocurrency wallet app that shows my profits growing without me doing anything real?","shortAnswer":"No. An app that shows consistent growing profits automatically is a scam display — the numbers are fabricated to encourage larger deposits.","explanation":"Fraudulent investment apps and fake cryptocurrency wallets show users a growing balance to encourage them to invest more money. The profits displayed are not real — they are numbers on a screen produced by the app's code to simulate returns. The illusion is particularly effective because the victim can log in at any time and watch their balance increase, making it feel very real. When they try to withdraw, they discover that withdrawals require a tax payment, a verification fee, or are blocked entirely. The money deposited is already gone. This type of fraud is associated with pig butchering scams, where a romance or social media relationship leads the victim to an investment platform controlled by the scammer.\n\nThe dashboard is the entire product. Fabricated balances cost nothing to display, so operators happily show whatever growth keeps deposits flowing, and they will even process a small early withdrawal if it persuades you to invest far more. The stage where the scheme reveals itself — fees, taxes, and verification charges to unlock your own money — is calibrated against your displayed balance, so the demands can be large while still seeming small next to the fictional profits. No legitimate platform charges you additional deposits to release funds; that structure alone identifies the fraud regardless of any other detail.","redFlags":["App was recommended by someone you met online rather than through an official app store or regulator","Profits grow at an implausibly consistent rate regardless of market conditions","Withdrawals require additional payments or verification steps that keep expanding","Customer support is unresponsive or directs you to deposit more to unlock withdrawal","The app cannot be found in the official App Store or Google Play"],"whatToDoNow":["Stop depositing any further funds immediately","Report to your national fraud authority with screenshots of the app and communications","Report to your bank if fiat deposits were made via bank transfer","Do not pay any withdrawal fees — these are additional theft, not legitimate charges"],"faq":[{"question":"Can I get my money back if I deposited into a fake wallet app?","answer":"Recovery is difficult but report immediately. Your bank may be able to initiate a chargeback for card payments or bank transfers. Crypto deposits are extremely difficult to recover."},{"question":"The platform let me withdraw money early on — doesn't that prove it's real?","answer":"No. Small early withdrawals are a deliberate investment by the operators to build trust before soliciting much larger deposits. The test that matters is withdrawing your full balance without new payments, which is exactly what these platforms never allow."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-call-saying-my-child-is-in-trouble-and-needs-money-a-scam","url":"https://scamencyclopedia.org/questions/is-a-call-saying-my-child-is-in-trouble-and-needs-money-a-scam","question":"Is an unexpected call saying my child or grandchild is in trouble and needs money a scam?","shortAnswer":"Almost certainly yes. Family emergency scams exploit fear and urgency to prevent you from verifying before sending money.","explanation":"The grandparent scam — now also targeting parents of adult children — involves a call from someone posing as your child, grandchild, or a person claiming to be their lawyer or police officer, saying they have been arrested, injured, or are in serious trouble. They urge you not to call the family member's regular number and to send money urgently by wire transfer, cryptocurrency, or a courier who will collect cash from your home. The emotional intensity of a worried parent or grandparent prevents rational evaluation. With AI voice cloning, the voice on the initial call may even sound like your family member. The simple defence: hang up and call your family member on their known number directly. Even if their phone is supposedly broken, another family member can verify the situation within minutes.\n\nIf your household includes older relatives, the most valuable time to act is before any call happens. Talk through how the scam works, agree that no money moves for any family emergency without a call-back to a known number, and consider a family code word for genuine crises. Rehearsed responses hold up under pressure far better than improvised ones — which is precisely what the scammers rely on in reverse. It also helps to know the payment channels these scripts favour: couriers collecting cash at the door, gift cards, wire transfers, and crypto ATMs, none of which any real lawyer, court, or hospital uses.","redFlags":["Unexpected call from someone claiming to be a relative in serious trouble","Told not to call the family member's usual number","Money requested urgently by wire, crypto, or cash collection","Voice may sound like your relative (possibly AI-cloned)","Second caller claims to be a lawyer, police officer, or doctor"],"whatToDoNow":["Hang up and call your family member directly on their known number","Contact another family member to verify the situation","Do not send money until you have personally spoken to the family member claiming to be in trouble","Report the call to your national fraud authority"],"faq":[{"question":"What if the voice really did sound like my grandchild?","answer":"AI can clone a voice from public social media audio. The voice alone is no longer proof of identity. Always independently verify through a known contact number, even if this takes a few minutes longer."},{"question":"The caller knew my grandchild's name and details — how?","answer":"Names, relationships, schools, and travel plans are routinely assembled from social media and data breaches, and some callers simply fish — saying 'it's me' and letting the victim supply the name. Personal details prove research, not identity. Verification through a known number is still the only test."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-online-pharmacist-selling-weight-loss-injections-without-a-prescription-safe","url":"https://scamencyclopedia.org/questions/is-an-online-pharmacist-selling-weight-loss-injections-without-a-prescription-safe","question":"Is an online service selling weight loss injections or prescription medication without a GP safe?","shortAnswer":"No. Prescription medication sold without a valid prescription is illegal and potentially dangerous.","explanation":"The popularity of GLP-1 weight loss medications has created a large grey market of online sellers offering prescription drugs without a valid prescription or medical assessment. These sites either sell counterfeit products of unknown composition, genuine products sourced illegally, or conduct a cursory online questionnaire that does not meet the standard of a real medical consultation. The risks include receiving a product of unknown safety, missing contraindications that a doctor would have identified, and having no medical support if you experience side effects. In the UK, all online pharmacies must be registered with the GPhC and display the EU Common Logo. In the US, prescription drugs must be dispensed by a licensed pharmacy following a valid prescription from a licensed prescriber.\n\nThe consultation being skipped is not paperwork — it is the safety mechanism. A prescriber checks contraindications, current medication, dosing, and whether the treatment is appropriate at all, and remains accountable for that judgement; a checkout page checks only that your card works. With injectable medication the stakes compound, because you are trusting not only the substance but its manufacture, storage, and handling. If cost or access is pushing you toward grey-market sellers, raise that directly with a registered clinician — there are often legitimate routes, and an honest conversation is safer than an unlabelled vial.","redFlags":["No prescription or only a very basic online questionnaire required","Pharmacy cannot be verified on the GPhC register (UK) or state pharmacy board (US)","Price is dramatically lower than regulated online pharmacies charge","Products are shipped from overseas without declared manufacturer details"],"whatToDoNow":["Only obtain prescription medication through a registered pharmacy following a valid prescription","In the UK, verify the pharmacy at pharmacyregulation.org and look for the EU Common Logo","Report illegal online pharmacies to the MHRA (UK) or FDA (US)","Consult your GP or a registered specialist for a proper assessment"],"faq":[{"question":"Are all online pharmacies unsafe?","answer":"No. Many registered online pharmacies are legitimate and convenient. The key is checking registration, verifying the prescription process, and ensuring the site displays the required regulatory logo."},{"question":"A seller on social media shows photos of branded pens in pharmacy packaging — is that safe?","answer":"No. Packaging photographs prove nothing about what you will receive; counterfeit packaging is standard in this market, and genuine-looking products may be diverted, expired, or badly stored. Prescription medicine sold through social media is illegal supply, whatever the pictures show."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-auction-site-for-luxury-goods-that-requires-a-joining-fee-legitimate","url":"https://scamencyclopedia.org/questions/is-an-auction-site-for-luxury-goods-that-requires-a-joining-fee-legitimate","question":"Is an auction site for luxury goods or electronics that requires a joining fee legitimate?","shortAnswer":"Almost never. Membership fees for exclusive auction access are a common fraud — the auction is fake or the goods non-existent.","explanation":"Fraudulent auction websites advertise access to government surplus, repossessed luxury goods, or discounted electronics at a fraction of retail price. To 'unlock' bidding access, you must pay a joining fee. After paying, you discover that listed items sell to others, winning requires additional payments, or the items won are never dispatched. In some variants, bids cost money to place (penny auction format) and the site is designed so that you spend more on bids than the item is worth. Genuine government surplus auctions such as those run by GovPlanet or official auction houses do not require joining fees to participate in standard categories, and their registration details and industry accreditation can be verified independently.\n\nThe joining fee model inverts how genuine auctions make money — real auctioneers earn from commissions on completed sales, so access costs them nothing and they want more bidders, not fewer. A platform charging for the right to bid has revealed that bidders, not sales, are its revenue. Penny-auction variants push this further by making every bid a purchase, engineering sunk-cost pressure into the mechanics; whatever you have spent on bids is gone whether or not you win, which keeps people bidding past any rational stopping point.","redFlags":["Joining fee required before you can bid or view item details","Auction platform cannot be verified through an industry trade body","Items appear at dramatically below-market prices with no credible explanation","Bid costs money to place regardless of whether you win","Winning bidders must pay additional handling or release fees"],"whatToDoNow":["Do not pay a joining fee to any auction site you found through an ad","Verify the auctioneer against relevant trade bodies such as NAVA or RICS","Search the auction site name independently for fraud reports","Report to your trading standards or consumer protection authority"],"faq":[{"question":"What is a penny auction and why is it risky?","answer":"Penny auctions charge a fee for each bid placed. The final winning price appears very low, but the combined bid fees paid by all bidders often far exceed the item's value. Most participants lose money."},{"question":"I paid a joining fee and won an item that never arrived — what can I do?","answer":"Dispute both the fee and the item payment with your card provider as services and goods not delivered, keeping screenshots of the listing, your win, and all correspondence. Report the site to your consumer protection authority so the pattern is on record."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-new-app-that-pays-you-to-refer-friends-a-pyramid-scheme","url":"https://scamencyclopedia.org/questions/is-a-new-app-that-pays-you-to-refer-friends-a-pyramid-scheme","question":"Is a new app that pays you to refer friends and build a team a pyramid scheme?","shortAnswer":"If income depends primarily on recruiting rather than on the app's genuine product or service, it has pyramid scheme characteristics.","explanation":"Apps and platforms that pay users primarily through referral bonuses and tiered commission on their referrals' activity resemble pyramid schemes even if they have a nominal product. The structure is identical: early participants recruit others, receive a share of recruits' earnings, who in turn recruit more. When recruitment slows — as it mathematically must — those at the bottom receive nothing. Regulatory bodies in most countries distinguish between legitimate affiliate programmes (where income is based on genuine product sales) and pyramid-like referral schemes (where income depends primarily on recruitment). Look at the income disclosure: if the majority of non-recruiting users earn close to nothing, that tells you the value is in recruitment, not the product.\n\nThe mathematics is the part no marketing can change: recruitment-driven income requires perpetual exponential growth in participants, and every scheme meets the same wall when the pool of willing recruits runs out. By design, the majority of participants join late and sit at the bottom when that happens. A revealing exercise is to describe the app's product to yourself without mentioning earnings or recruiting — if what remains is something few people would pay for or use on its own merits, the product is a costume and recruitment is the business.","redFlags":["You earn commissions from your recruits' recruits, not just your own activity","Emphasis on growing your 'team' or 'network' over using the app's core product","App was launched recently and is growing rapidly through viral referral","Income disclosure shows the majority of users earn under minimum wage"],"whatToDoNow":["Request an income disclosure statement before investing time or money","Calculate whether the core product provides value independently of recruitment","Report pyramid scheme characteristics to your consumer protection authority","Be cautious of apps requiring payment to unlock higher earning tiers"],"faq":[{"question":"Are referral bonuses always a warning sign?","answer":"No. A single-level referral bonus from a legitimate service is normal marketing. The warning sign is when multi-level recruitment commissions form the primary income mechanism, making the product secondary."},{"question":"I am earning well from my referrals right now — why stop?","answer":"Current earnings in a recruitment-driven scheme come from the people below you, and they last only while recruitment accelerates. Beyond the financial cliff, promoting such schemes can carry legal risk and costs you relationships with the people you recruited when it collapses."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-job-test-or-skills-assessment-that-charges-a-fee-legitimate","url":"https://scamencyclopedia.org/questions/is-a-job-test-or-skills-assessment-that-charges-a-fee-legitimate","question":"Is a job application that requires me to pay for a skills assessment or background check a scam?","shortAnswer":"Yes in almost all cases. Legitimate employers never ask candidates to pay for assessments or background checks — this is standard employer cost.","explanation":"Legitimate recruitment processes do not require candidates to pay for skills tests, security clearances, training materials, background checks, or uniform deposits before employment has started. Any job application that introduces a required payment — framed as a background check fee, certification test, starter kit, or equipment deposit — is almost certainly either a scam recruitment operation or is collecting fees as its primary goal, not genuinely hiring. In the rare cases where background checks are a legitimate part of the process (such as for financial services or childcare), the employer bears the cost. If you are asked to pay any amount during a job application, treat it as a strong red flag.\n\nThe employment relationship has a direction: the employer is buying your labour, so money flows toward you. Scam recruitment inverts this while borrowing the costume of process — 'assessments', 'clearances', and 'equipment' make the payment feel like a professional formality rather than the transaction it is. These operations often run entire convincing pipelines, with interviews, offer letters, and onboarding portals, because the production cost is trivial next to fees collected from hundreds of applicants. However real the pipeline feels, the payment request is the moment the costume slips.","redFlags":["Application requires payment for a background check, assessment, or certification","You are told a 'starter kit' or equipment must be purchased before starting","Payment is required before you have received a formal written job offer","Job was found through an unsolicited email or social media message"],"whatToDoNow":["Do not pay any fee during a job application process","Report the recruitment to your national fraud authority and the job board","Verify the employer through independent research — search the company name and contact them through official channels","Alert other applicants if you can, as mass fraud campaigns target many people simultaneously"],"faq":[{"question":"What if the employer says the fee is refunded after I start?","answer":"This is a common part of the script. Legitimate employers have no business model based on collecting refundable fees from candidates. The refund will not come."},{"question":"They sent a contract and offer letter before mentioning the fee — doesn't that make it real?","answer":"No. Documents cost scammers nothing and are produced at scale precisely to make the later fee feel routine. A genuine employer has payroll, procurement, and legal processes that never route a candidate's personal money into the hiring pipeline."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-email-from-my-ceo-asking-me-to-buy-gift-cards-urgently-a-scam","url":"https://scamencyclopedia.org/questions/is-an-email-from-my-ceo-asking-me-to-buy-gift-cards-urgently-a-scam","question":"Is an email from my CEO asking me to urgently buy gift cards and send the codes a scam?","shortAnswer":"Yes. CEO gift card impersonation is one of the most common and consistently effective business email scams.","explanation":"CEO fraud or executive impersonation via email is a well-documented and frequently successful attack. An employee — often in finance, HR, or a support role — receives an email that appears to come from the CEO, managing director, or another senior executive. The message is typically short, informal, and urgent, asking the employee to purchase gift cards immediately as a gift for clients, a bonus for staff, or a confidential business purpose, and to send the codes by reply. The email address is either spoofed to display the executive's name or is a lookalike domain. Gift card codes are untraceable and irreversible. Establish a verbal confirmation policy for all gift card or payment requests — never act on such requests from email alone.\n\nThis fraud targets the workplace's social physics rather than its technology: a junior employee receiving a terse message from the top experiences a cost to questioning it that the scammer is counting on. That is why the durable fix is cultural as much as procedural. A stated policy that gift card and payment requests are always verified by voice — and, critically, visible reassurance from leadership that checking will never be punished — removes the awkwardness the scam depends on. Teams where verifying first is praised rather than merely tolerated simply stop losing money to this script.","redFlags":["Email from an executive asks you to buy gift cards urgently without explanation","Sender email address does not exactly match your company's real domain","Message emphasises secrecy or speed — do not discuss with colleagues","Request came on a Friday afternoon, a holiday, or outside normal working hours"],"whatToDoNow":["Do not buy gift cards without verbal confirmation directly with the executive","Call the executive on their known number — do not use any number provided in the email","Report the email to your IT security team immediately","If cards were already purchased, contact the gift card issuer and your bank"],"faq":[{"question":"Why do scammers ask for gift cards specifically?","answer":"Gift card codes are instantly usable, untraceable, and irreversible. They are the cash equivalent for phone and email fraud because no bank can reverse the transaction once codes are shared."},{"question":"I already sent the gift card codes — is there any way back?","answer":"Act immediately: contact the gift card issuer with the card numbers and receipts and ask them to freeze remaining balances, tell your finance and IT teams, and report to your fraud authority. Speed occasionally saves part of the value, and the incident needs to be on record either way."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-caller-saying-my-car-insurance-is-invalid-and-i-need-to-pay-now-a-scam","url":"https://scamencyclopedia.org/questions/is-a-caller-saying-my-car-insurance-is-invalid-and-i-need-to-pay-now-a-scam","question":"Is a caller saying my car insurance is invalid and I must pay immediately to reactivate it a scam?","shortAnswer":"Very likely yes. Insurance impersonation calls use fear of driving illegally to collect card details or upfront premiums.","explanation":"Car insurance impersonation calls claim your policy has lapsed, was not processed, or contains an error that makes it invalid. The caller urgently requires your card details to reactivate coverage, claiming that driving in the meantime is illegal and that you could face prosecution. This fear is highly effective because driving without insurance is indeed a serious offence in most countries. Your real insurer communicates policy issues through letters, emails, or through your account portal — they do not call demanding immediate card payment without any written notice. If you receive such a call, hang up and contact your insurer using the number on your policy documents or official certificate of insurance.\n\nNotice the shape of the pressure: the caller manufactures a legal emergency — you are uninsured right now — and then offers to resolve it in the same call, if you only hand over card details. Manufactured emergency plus instant resolution is the skeleton of most phone fraud, and recognising the shape is more durable protection than memorising any single script. Your policy's true status is a fact you can check yourself in minutes through your insurer's app, portal, or documents; nothing about that check requires trusting an inbound caller.","redFlags":["Call claims your insurance is invalid and requires immediate payment to reactivate","Caller cannot provide accurate details of your policy, vehicle, or no-claims discount","Payment requested by card over the phone rather than through your account portal","You receive no corresponding written notice from your insurer"],"whatToDoNow":["Hang up and check your policy status through your insurer's official app or website","Call your insurer on the number on your insurance certificate — not any number the caller provides","Report the scam call to your insurer's fraud team and your national fraud authority","If you gave card details, contact your bank to block the card immediately"],"faq":[{"question":"How do I verify my insurance is actually valid?","answer":"In the UK, check your vehicle on askMID.com using your registration number — this shows whether a policy is recorded. In the US, your insurer's app or customer portal shows real-time policy status."},{"question":"The caller quoted my registration and address — doesn't that mean they're my insurer?","answer":"No. Vehicle and address details are available from breaches, marketing lists, and public records, and quoting them is standard technique for building false credibility. Your insurer will not mind you hanging up and calling back through the number on your policy documents."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-check-my-number-on-the-ncoa-database-call-a-scam","url":"https://scamencyclopedia.org/questions/is-a-check-my-number-on-the-ncoa-database-call-a-scam","question":"Is a call claiming I am registered on a do-not-call list and need to update my details a scam?","shortAnswer":"Yes. Legitimate do-not-call registries do not call you to verify or update your registration. Any such call is data harvesting or fraud.","explanation":"The Telephone Preference Service (TPS) in the UK and the National Do Not Call Registry (DNC) in the US allow consumers to opt out of unsolicited sales calls. Scammers exploit awareness of these registries by calling and claiming you are 'due for renewal', that your registration has lapsed, or that you need to verify your number — and asking you to confirm personal details such as your name, address, and date of birth. The TPS and DNC never call you. Your registration either expires without notice or renews automatically and is managed entirely through their websites. Providing personal details to such callers feeds identity theft operations.\n\nThe scam inverts the registry's entire purpose — a service that exists so you hear from fewer strangers becomes the pretext for a stranger's call. That inversion is the tell, and it generalises: any inbound call whose premise is managing, renewing, or protecting something you registered for is asking you to verify your identity to someone who called you, which is backwards. Identity flows the other way — you verify organisations by contacting them through published channels; they do not harvest your details on calls they initiated.","redFlags":["Caller says you are registered on a preference service and need to update your details","Personal information requested over the phone including name, date of birth, or address","Claim that your registration has lapsed and you must re-register now or pay a fee","Any unsolicited call offering to add you to a do-not-call list for a fee"],"whatToDoNow":["Hang up without providing any personal details","Register or check your registration directly through the official TPS or FTC websites","Report the call to your national communications regulator","Block the number to prevent repeat contact"],"faq":[{"question":"Does registering on the TPS or DNC stop all unwanted calls?","answer":"It reduces calls from legitimate UK and US businesses required to comply with the registry, but scammers and overseas callers are not deterred. Caller ID blocking and call-screening apps provide additional protection."},{"question":"What details are safe to give an unsolicited caller?","answer":"None that they could not already know. Confirming your name, date of birth, address, or bank alongside your live phone number assembles exactly the profile identity fraud needs. If a call has any legitimate basis, it survives you hanging up and contacting the organisation through published channels."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-private-number-plate-seller-online-a-scam","url":"https://scamencyclopedia.org/questions/is-a-private-number-plate-seller-online-a-scam","question":"Is a private number plate seller I found online safe to buy from?","shortAnswer":"Only use DVLA-authorised resellers. Many unlicensed private plate sellers take payment for registrations that are already sold or do not exist.","explanation":"Personalised number plate fraud occurs when sellers list plates on unofficial websites that are already sold, do not exist in the available inventory, or belong to someone else. Buyers pay a deposit or full purchase price and receive no plate or documentation. In the UK, all number plate transfers must be processed through the DVLA, and legitimate dealers work through the DVLA's secure online transfer system. Before purchasing from any reseller, verify they are registered with the DVLA as an authorised number plate assignment service. The DVLA operates its own official plate sales website, and reputable trade bodies such as CHERISHED NUMBERS DEALERS' ASSOCIATION list verified members. Never pay a large sum by bank transfer for a plate without a written contract and proof of the seller's DVLA authorisation.\n\nThe registration paperwork is what you are really buying — a personalised registration is a right recorded in the official system, not a physical object, and only the person named on the entitlement documents can transfer it. That is why the certificate question settles most cases: a seller who genuinely holds the registration can show the entitlement document naming them and complete the transfer through the official process, while a fraudster can only offer photos, excuses, and pressure to pay before 'someone else takes it'. Paying anyone who cannot evidence entitlement buys you nothing, whatever price was agreed.","redFlags":["Seller cannot provide proof of DVLA authorisation","Plate is significantly cheaper than on official DVLA or authorised dealer sites","Payment requested by bank transfer with no written contract","Seller cannot provide the DVLA retention certificate for the plate"],"whatToDoNow":["Verify the dealer's DVLA authorisation through the DVLA website","Request and keep all paperwork before making any payment","Use the DVLA's official number plate auction or a CNDA-member dealer for security","Report suspected fraud to the DVLA and your national fraud authority"],"faq":[{"question":"What documentation should a legitimate number plate sale provide?","answer":"A V778 retention document (DVLA) or a V750 certificate of entitlement should accompany any personalised registration sale. The transfer to your vehicle is then completed through DVLA's online service."},{"question":"The seller says the retention certificate is being reissued but wants payment now — should I wait?","answer":"Do not pay. A seller without the entitlement document in hand cannot transfer the registration, and 'being reissued' is a standard stalling line in plate fraud. Agree to complete only when the documentation exists and the transfer can be done through the official process."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-clone-phishing-email-that-looks-identical-to-a-real-one-dangerous","url":"https://scamencyclopedia.org/questions/is-a-clone-phishing-email-that-looks-identical-to-a-real-one-dangerous","question":"What is a clone phishing email and how do I spot one?","shortAnswer":"Clone phishing exactly copies a real email you may have received before, replacing links or attachments with malicious ones. It is one of the hardest phishing types to spot.","explanation":"Clone phishing takes a legitimate email — such as a shipping notification, bank statement, or invoice — that you actually received at some point and produces an almost identical copy. The sender address is spoofed to match the original, the branding is identical, and the only change is that real links are replaced with phishing URLs or the attachment is swapped for a malware file. Because the email closely resembles something you trust and have seen before, it bypasses the scepticism you might apply to a novel approach. The tell-tale sign is that the link destination differs from the legitimate domain — hover over any link before clicking to verify the URL. If in doubt, navigate to the service directly through your browser rather than through any link in an email.\n\nClone phishing marks a shift in what phishing filters and instincts must catch, because familiarity — the strongest trust signal most people use — is exactly what it counterfeits. Your practical defences are habits that do not depend on novelty detection: treating every link as unverified regardless of how familiar the email looks, keeping bookmarks for the services you actually use and reaching them only that way, and being especially careful with 'resend' or 'updated' framing, which exists to explain why you are seeing a message twice. If a cloned email references a real transaction of yours, also consider whether the account that received the original has been compromised.","redFlags":["Email looks nearly identical to a real message you received previously","Subject line is 'Resend' or 'Updated' version of a prior email","Hovering over links reveals a different domain from the real company","Attachment has a new or different filename from the original"],"whatToDoNow":["Hover over links to verify the destination before clicking","Navigate to the service directly rather than through email links","Report the email to the impersonated organisation's phishing address","Mark as phishing in your email client to train spam filters"],"faq":[{"question":"How did the scammer get a copy of the original email?","answer":"Clone phishing often follows account compromise — the attacker reads your mailbox and identifies real messages to clone. It can also use publicly available email templates from known services."},{"question":"Why would attackers bother cloning an email I already acted on?","answer":"Because your past interaction is exactly what makes the clone credible — you recognise the message and remember it being safe. 'Updated invoice' and 'resent notification' framings exploit that memory to lower your guard on the swapped link or attachment."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-sellers-agent-who-asks-for-a-retainer-before-listing-my-property-a-scam","url":"https://scamencyclopedia.org/questions/is-a-sellers-agent-who-asks-for-a-retainer-before-listing-my-property-a-scam","question":"Is an estate agent or property seller who asks for an upfront retainer fee before listing my home a scam?","shortAnswer":"It depends. Some legitimate property services charge upfront fees, but fee-collection without service delivery is a common property fraud.","explanation":"Most high-street estate agents work on a no-sale-no-fee basis, earning commission only when a sale completes. Online estate agents and hybrid models often charge an upfront listing fee in exchange for a lower total cost. Both models are legitimate if clearly explained in writing. The fraudulent version involves a caller or agent collecting a substantial retainer with a promise of a quick sale, premium marketing, or access to an exclusive buyer network — then failing to list the property, becoming uncontactable, or providing services of no value. Before paying any upfront property fee, check the agent is a member of a redress scheme (Property Ombudsman or PRS in the UK), verify their Companies House registration, and get all promises in a written contract.\n\nThe seller-targeting version of this fraud tends to arrive at emotionally loaded moments — probate sales, divorces, relocations — when a quick sale promise carries extra weight, and the promised 'exclusive buyers' are the imaginative flourish that justifies the fee. A grounded comparison helps: reputable online agents publish their packages and prices openly, so any retainer significantly above that market with vaguer deliverables needs a very good explanation. Written contracts, verifiable redress membership, and reviews across independent platforms are the filter; an agent who resists any of the three has answered your question.","redFlags":["Agent cannot be verified through a recognised redress scheme","No written contract provided before payment is required","Upfront fee is unusually high compared to standard online agent packages","Agent contacted you first with promises of a quick or above-market sale"],"whatToDoNow":["Verify membership of a property redress scheme before paying any fee","Check the agent's Companies House registration","Get all promises about marketing and service delivery in a signed contract","Report fraudulent agents to the Property Ombudsman and your national fraud authority"],"faq":[{"question":"What should I check before using an online estate agent?","answer":"Verify their redress scheme membership (TPO or PRS), read independent reviews on platforms such as Trustpilot, and compare their upfront fee against what services are included in writing."},{"question":"The agent claims to have a buyer already lined up for my property — is that plausible?","answer":"It is a common hook and occasionally true, but it costs nothing to claim. Ask for the offer in writing through a contract that ties your fee to actual progress. A genuine buyer survives that formality; a fictional one evaporates."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-payday-loan-that-approved-me-with-no-credit-check-safe","url":"https://scamencyclopedia.org/questions/is-a-payday-loan-that-approved-me-with-no-credit-check-safe","question":"Is a payday loan that approved me instantly with no credit check safe?","shortAnswer":"No-credit-check loan offers are either unlicensed lenders or fee advance scams — both cause serious financial harm.","explanation":"Legitimate lenders are required by regulation to assess affordability before lending, which means genuine credit checks are always part of a legal loan process. Offers of instant approval with no credit check indicate either an unlicensed lender operating outside regulatory requirements — whose terms may include illegal interest rates and aggressive collection — or a fee advance scam where you pay a processing fee before the loan is released, then the lender disappears. In the UK, all consumer credit lenders must be authorised by the FCA. In the US, state-licensed lenders must comply with state usury laws and disclosure requirements. If a lender offers money without any affordability assessment, they are either operating illegally or are about to steal your fee payment.\n\nBoth branches of this trap compound financial difficulty rather than relieving it. The fee-advance version takes money from exactly the people who cannot spare it, sometimes repeatedly — 'the transfer failed, a release fee is needed' — while the unlicensed-lending version delivers real money attached to unlawful rates and collection practices that regulated complaint routes cannot easily reach. The affordability check that no-credit-check offers advertise away is a legal protection for you, not an obstacle: it exists to stop loans that make your position worse. Credit unions and regulated short-term lenders remain the routes that leave you with enforceable rights.","redFlags":["Loan offered with no credit check and instant approval","Upfront fee required before loan funds are released","Lender cannot provide a regulatory authorisation number","Interest rate is not clearly stated in percentage terms before agreement"],"whatToDoNow":["Do not pay any upfront fee to receive a loan","Verify the lender's authorisation on the FCA Register or relevant state regulator","If you need short-term credit, consider a credit union or a community development finance institution","Report unlicensed lenders to your financial regulator"],"faq":[{"question":"Can any legitimate lender offer a loan without a credit check?","answer":"Regulated lenders must assess affordability, which typically involves some form of credit check or income verification. Any claim of 'no check' is either misleading or indicates the lender is unregulated."},{"question":"I paid a release fee and now they are asking for another — will the loan ever arrive?","answer":"No. The fee is the product; there is no loan behind it, and payments will be requested for as long as you continue. Stop paying, keep the messages as evidence, report to your financial regulator and fraud authority, and talk to your bank about the payments made."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-online-car-history-check-from-a-third-party-site-trustworthy","url":"https://scamencyclopedia.org/questions/is-an-online-car-history-check-from-a-third-party-site-trustworthy","question":"Is an online car history check from a third-party website trustworthy?","shortAnswer":"It depends on the provider. Established vehicle history check services provide accurate DVLA-linked data, but copycat sites sell outdated or fabricated reports.","explanation":"Vehicle history checking is a legitimate and important step when buying a used car. In the UK, services such as HPI Check and RAC Vehicle Check access DVLA and insurance data to show outstanding finance, write-off history, stolen vehicle records, and mileage discrepancies. Fraudulent copycat sites have similar-sounding names and professional branding but produce fake reports that show a clean history regardless of the vehicle's actual condition. You may pay for a report only to discover after purchase that the car has outstanding finance or was written off. Before purchasing any vehicle history report, verify the provider is accessing DVLA-approved data and is a member of the relevant trade association. Free partial checks available on gov.uk can also verify basic registration data.\n\nA practical safeguard is to layer your checks rather than trusting one document. The free official vehicle enquiry confirms the basics — make, model, tax and test status — and lets you catch a fake report that contradicts them. A reputable paid check adds finance, write-off, and theft data. Finally, the physical car should agree with all of it: the VIN on the chassis matching the documents, service history that reads coherently, mileage consistent with wear. A fraudulent report can pass one layer, but sustaining the lie across the database, the paperwork, and the physical vehicle is much harder.","redFlags":["Report from an unfamiliar provider you found through a paid search ad","Report is significantly cheaper than established providers","Free report covers comprehensive historical data that typically requires official database access","Provider cannot explain which databases their report draws on"],"whatToDoNow":["Use an established, trade-association-verified provider for any vehicle history check","Cross-reference the VIN and registration number on the free DVLA vehicle enquiry service","Do not purchase a vehicle based solely on a history check from an unverified source","Report fake report providers to your trading standards authority"],"faq":[{"question":"What should a vehicle history check include?","answer":"A reliable check shows outstanding finance, category damage or write-off history, number of previous keepers, mileage anomalies, import/export status, and whether the vehicle is recorded as stolen."},{"question":"The seller handed me a printed history report — should I accept it?","answer":"Never rely on a seller-supplied report; fake and edited printouts are a standard part of car fraud. Run your own check with an established provider using the registration and VIN you read off the car itself, and confirm the basics on the official free enquiry service."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-nft-or-digital-collectible-i-was-airdropped-a-scam","url":"https://scamencyclopedia.org/questions/is-a-nft-or-digital-collectible-i-was-airdropped-a-scam","question":"I received an unexpected NFT or digital token in my wallet — is it a scam?","shortAnswer":"Almost certainly yes. Unexpected NFT airdrops are a common technique used to drain wallets when recipients try to interact with the assets.","explanation":"Airdrop phishing involves sending a fraudulent NFT or token directly to your crypto wallet without your consent. The asset may appear valuable or intriguing. When you try to view it, sell it, or interact with it through a connected marketplace, the transaction you approve — often embedded in the action of viewing or claiming — grants the scammer permission to transfer your real assets. Some malicious NFTs contain code that executes when you interact with them. The safest response is to simply not interact with any NFT or token you did not purchase or explicitly claim. In many wallets, you can hide or burn unwanted tokens without approving any on-chain transaction that could grant permissions.\n\nThe underlying design fact that makes this scam possible is that anyone can send anything to a public wallet address — receipt implies nothing about value or intent, any more than junk mail implies a genuine prize. The danger is concentrated entirely in interaction, and especially in the approval step: a signature that feels like viewing your item can, in the contract's actual terms, be permission for another address to move your tokens. Cultivating a flat rule — unexpected assets are left untouched, and every signature request is read as a permission grant until proven otherwise — removes the attack surface entirely.","redFlags":["An NFT or token appeared in your wallet that you did not purchase or claim","The asset has an enticing name suggesting high value or a prize","Interacting with the asset requires you to approve a contract permission","Asset was sent from an unknown address alongside a link to a website"],"whatToDoNow":["Do not interact with, attempt to sell, or click any links associated with unexpected NFTs","Hide the asset in your wallet's settings without approving any transaction","Review your wallet's connected apps and revoke any unexpected permissions","Report the scam token address to the relevant blockchain explorer community"],"faq":[{"question":"Can I delete an NFT from my wallet safely?","answer":"In most wallets you can hide or 'burn' tokens by sending them to a dead address, but only do this if you are certain it does not require approving a malicious contract. If unsure, simply hide the asset and leave it alone."},{"question":"I think I approved something while trying to sell an airdropped NFT — what now?","answer":"Act quickly: use a token approval checker for your chain to review and revoke permissions granted from your wallet, and consider moving remaining assets to a fresh wallet whose seed phrase has never touched the compromised context. Then stop interacting with the airdropped asset entirely."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-council-tax-or-property-tax-debt-letter-from-an-unknown-bailiff-a-scam","url":"https://scamencyclopedia.org/questions/is-a-council-tax-or-property-tax-debt-letter-from-an-unknown-bailiff-a-scam","question":"Is a council tax or property tax debt letter from a bailiff company I don't recognise a scam?","shortAnswer":"It may be genuine but verify carefully. Scammers send fake enforcement notices to collect non-existent debts.","explanation":"Fake bailiff letters impersonating enforcement agencies are used to scare recipients into paying fictional debts. However, genuine council tax enforcement action does also result in letters from bailiff companies your local authority has contracted with — so dismissing all such letters can create real problems. The key steps are: verify the council tax debt with your local authority directly (using the number on their official website, not any number on the letter), check whether the bailiff company is on the enforcement agent register for your country, and never pay based on a letter alone without this verification. In the UK, any enforcement agent must be certificated by the courts and can be verified through a public register. Fake letters often contain errors in the legal references cited or list fees that do not match official fee schedules.\n\nThe scam works by pointing genuine fear of enforcement at a payment channel the fraudster controls, and its urgency is designed to stop you doing the one thing that resolves everything: checking the debt at source. Your council's records are definitive — either you owe the amount for the period claimed or you do not — and that check also protects you in the genuine case, because real enforcement comes with defined rights, fee schedules, and payment-plan options that a panicked same-day transfer forfeits. Whatever the letter says, money should only ever move through channels you have verified with the council directly.","redFlags":["Letter demands immediate payment without specifying the period or amount of the original debt","Enforcement company cannot be found on the official register","Letter requests cash payment or bank transfer to an individual","Legal references or fee amounts do not match official schedules","Payment address or phone number differs from anything on your council's website"],"whatToDoNow":["Contact your local authority directly to verify whether you have outstanding council tax","Check the enforcement agent against the official registry for your country","If the debt is genuine, you have rights around payment plans and the bailiff's conduct","Report fake enforcement letters to your local authority and fraud authority"],"faq":[{"question":"What rights do I have if a real bailiff comes to my home?","answer":"You have the right to ask for identification, to have the debt verified, and to discuss a payment plan. Bailiffs cannot enter your home by force for most council tax debts. Citizens Advice provides detailed guidance on your rights."},{"question":"The letter threatens a home visit within days — do I need to pay before then?","answer":"No. Verify first, whatever the deadline claims. If the debt is fake, the deadline is theatre; if it is real, contacting the council or the genuine enforcement firm through independently found details lets you arrange payment or a plan with your rights intact."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-work-from-home-transcription-job-a-scam","url":"https://scamencyclopedia.org/questions/is-a-work-from-home-transcription-job-a-scam","question":"Is a work-from-home transcription or data entry job I found online legitimate?","shortAnswer":"Some are legitimate but many work-from-home transcription and data entry jobs are either underpaid labour or outright scams.","explanation":"Legitimate transcription work exists and is offered by established companies, but the space is heavily saturated with misleading opportunities. Some advertise earnings that reflect maximum possible rates for experienced, fast transcribers — not what beginners realistically earn. Others collect application fees or require you to purchase training material or specific software from the company, which is the primary revenue source rather than actual transcription work. Data entry scams similarly collect a registration fee, promise high hourly rates, and either provide no work or work so slow in arriving that it generates minimal income. Red flags include any upfront fee, unrealistically high earnings claims per hour, and companies that cannot be independently verified through business registration searches.\n\nA useful lens is to ask what the company earns from you if no transcription ever happens. Legitimate platforms make nothing until you produce billable work, which is why they test skills, pay published rates, and charge you nothing to join. Fee-charging operations profit at signup, which makes the work itself optional — and often it never materialises beyond a trickle. Realistic expectations protect you from the softer version too: entry-level transcription pays modestly and rewards accuracy and speed built over time, so income promises far above that range are marketing to your hopes, not describing the job.","redFlags":["Application requires an upfront fee for software, training, or registration","Earnings claims are significantly above standard market rates for the work","Company cannot be verified through a business registration search","Work is found through an unsolicited email or social media ad"],"whatToDoNow":["Research the company independently before applying or paying anything","Only apply through established transcription platforms with published reviews","Never pay to apply for or access any transcription or data entry position","Report fraudulent postings to the job board and to your consumer authority"],"faq":[{"question":"Which legitimate transcription platforms can I use?","answer":"Established platforms include Rev, TranscribeMe, and Scribie. None charge workers to join, and all have published rates. Earnings vary considerably based on speed and accuracy."},{"question":"The company says the fee covers certification I need before working — is that standard?","answer":"No. Genuine transcription platforms assess your ability with free skill tests, not paid certificates. A certification fee payable to the same company offering the work is the business model of a fee-harvesting scheme, not a hiring requirement."}],"lastReviewed":"2026-08-01"},{"slug":"is-an-emergency-room-or-hospital-bill-collection-call-from-an-unknown-agency-a-scam","url":"https://scamencyclopedia.org/questions/is-an-emergency-room-or-hospital-bill-collection-call-from-an-unknown-agency-a-scam","question":"Is a collection call about an unpaid hospital or medical bill from an agency I don't recognise legitimate?","shortAnswer":"It may be genuine or it may be medical bill fraud — verify carefully before making any payment.","explanation":"Medical bill collection fraud exploits the complexity and anxiety around healthcare billing. Fraudsters call claiming to represent a hospital or medical provider and demand immediate payment for a bill that either does not exist or that you already paid. They sometimes use partial information about a real visit to sound credible. Genuine medical debt collection does occur and follows a process: you should receive a written Explanation of Benefits from your insurer, a bill from the provider, and only then a collection notice after a defined period of non-payment. Before paying any medical collection call, request a written debt validation notice, verify the bill against your insurer's records, and confirm the collection agency is registered. In the US, the Fair Debt Collection Practices Act requires collectors to provide written validation.\n\nThe request for written validation is your most efficient filter because of how differently the two cases respond to it. A legitimate collector handles validation requests as routine — the documentation exists, and sending it costs nothing but time. A fraudulent caller cannot produce records for a debt that does not exist, so the script escalates instead: consequences shrink to today, discounts appear for immediate payment, and aggression rises when you hold your ground. Escalating pressure in response to a reasonable verification request is itself diagnostic, in medical debt and in every other collection scenario.","redFlags":["Caller demands immediate payment over the phone without prior written notice","Debt relates to a visit you do not remember or dispute","Collection agency cannot provide the original provider and bill date in writing","Caller becomes aggressive when you request written validation"],"whatToDoNow":["Request a written debt validation notice — you have a legal right to this in most jurisdictions","Verify the bill against your insurer's Explanation of Benefits","Contact the hospital's billing department directly to confirm the debt","Report aggressive or potentially fraudulent collection calls to your consumer protection authority"],"faq":[{"question":"Can a medical debt collector take legal action against me?","answer":"Yes if the debt is genuine and has not been paid. However, you have rights including receiving written validation, disputing inaccurate debts, and protection from certain collection tactics. Seek advice from a consumer rights organisation."},{"question":"The caller offered to settle the debt at a big discount if I pay right now — is that a real practice?","answer":"Genuine collectors do negotiate settlements, but never as a now-or-never phone ultimatum before providing written validation. The instant-discount-for-instant-payment structure is a pressure tactic that fraudulent callers use because their opportunity ends when you check."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-stranger-who-bumped-into-me-and-says-my-phone-is-broken-trying-to-scam-me","url":"https://scamencyclopedia.org/questions/is-a-stranger-who-bumped-into-me-and-says-my-phone-is-broken-trying-to-scam-me","question":"Is a stranger who claims my phone screen is cracked or broken trying to scam me?","shortAnswer":"Yes. This is a distraction scam where someone creates a false claim to initiate a conversation that ends in theft or a fake repair payment.","explanation":"Distraction-based street scams take many forms. In the 'broken phone' variant, a scammer approaches claiming your phone screen is cracked or that they saw you drop something. While you are distracted examining your phone, an accomplice steals from your bag or pockets. A separate version involves an 'accidental' collision and subsequent demand for compensation — claiming you broke something or that they were injured. In a third version, the scammer offers to fix the damage but demands payment for parts or labour, delivers no genuine repair, and disappears. Be aware of your surroundings in crowded areas, do not hand your phone to strangers, and step away from anyone who approaches you with unsolicited attention to your possessions.\n\nThese scams work through attention, not deception in any elaborate sense — the story only needs to hold your focus for the seconds an accomplice needs. That is why the correct response feels almost rude: create distance first, engage with the claim afterwards, if at all. A stranger with a genuine concern will tolerate you stepping back and keeping your possessions secured; a team working a routine loses interest fast once your attention returns to your belongings. In crowded transit areas, phones visible in back pockets and open bags do most of the target selection.","redFlags":["Stranger draws your attention to a supposed problem with your possessions","You feel someone brush against you or are jostled in a crowd","Person insists on handling your phone or personal items","Offer to 'fix' a problem for an immediate cash payment"],"whatToDoNow":["Move away from the individual calmly and check your pockets and bags","Report theft to local police and note the description of the individual","Do not hand cash to strangers claiming compensation for an alleged incident","If your real phone is damaged, use an official repair service"],"faq":[{"question":"What should I do if someone demands compensation after a minor collision?","answer":"Stay calm, do not offer money on the spot, and suggest exchanging contact details. If genuine injury occurred, insurance and proper legal channels exist. Scammers typically leave when faced with a calm, non-panicked response."},{"question":"How do these teams typically choose their targets?","answer":"They watch for divided attention and accessible valuables — phones in loose pockets, bags worn open or behind the body, headphones plus screen absorption. Simply keeping valuables zipped and staying aware in crowds removes you from the profile they are scanning for."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-telegram-premium-account-sold-at-a-discount-by-a-stranger-safe","url":"https://scamencyclopedia.org/questions/is-a-telegram-premium-account-sold-at-a-discount-by-a-stranger-safe","question":"Is a Telegram Premium account sold at a discount by a stranger safe to buy?","shortAnswer":"No. Discounted Telegram Premium accounts are purchased with stolen payment cards and deactivated shortly after sale — you lose your money.","explanation":"Discounted Telegram Premium, Netflix, Spotify, and similar subscription accounts are frequently offered in Telegram groups, Discord servers, and online marketplaces. These accounts are either purchased using stolen credit cards — meaning your account will be deactivated when the fraudulent purchase is reversed — or are shared accounts that will have passwords changed once you have paid. Some sellers offer genuine but shared accounts with dozens of simultaneous users, which violates terms of service and results in account closure. Purchasing access to a service through an unofficial channel also means you have no customer support path if something goes wrong. Always subscribe through the official platform.\n\nThe price itself carries the information: subscription services do not wholesale their products to anonymous resellers at a fraction of retail, so a heavy discount can only be funded by stolen payment methods, abused promotional systems, or simple non-delivery. Whichever it is, the account exists on borrowed time, and the platform's fraud systems — chargeback reversal, region checks, credential audits — eventually reclaim it. There is also a quieter risk: logging into an account a stranger provisioned, or handing over your own details for an 'upgrade', can expose your data and linked payment methods to someone whose business is already fraud.","redFlags":["Subscription offered at 50-80% below the official platform price","Seller is an unknown individual on a third-party platform","Account credentials provided immediately after payment with no setup process","Seller cannot explain how they provide the service at such a low price"],"whatToDoNow":["Only subscribe to digital services through the official platform or app store","If you paid for a deactivated account, report to your payment provider for a dispute","Report discount subscription sellers to the platform they are operating on"],"faq":[{"question":"Are family plan sharing arrangements with strangers safe?","answer":"Sharing family plans with non-family members often violates terms of service and gives the plan owner your email address. The owner can remove you at any time. This is a risk not worth taking for minor savings."},{"question":"The seller has lots of positive reviews in the group — doesn't that mean they deliver?","answer":"Reviews in the seller's own group are trivially manufactured, and even genuine ones only mean accounts worked briefly before deactivation. The structural problem — that the account is funded by fraud and will be reclaimed — is unchanged by testimonials."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-romance-scammer-in-another-country-traceable-by-police","url":"https://scamencyclopedia.org/questions/is-a-romance-scammer-in-another-country-traceable-by-police","question":"Can police trace and prosecute a romance scammer operating in another country?","shortAnswer":"It is difficult but not impossible. Cross-border collaboration between agencies does occur, though prosecutions are rare and depend on jurisdiction and resources.","explanation":"The majority of romance scammers operate from countries with limited extradition agreements with Western nations, making prosecution rare even when scammers are identified. Reporting to national fraud authorities such as Report Fraud (UK, formerly Action Fraud), the FBI IC3 (US), or equivalent is still important: it builds the intelligence picture that enables international operations, and in some cases cooperation between Interpol and national police has led to prosecutions of large-scale scam operations. Recovery of money is very difficult but occasionally possible through bank freezing orders if reported immediately before the money is moved. The most important reason to report is to prevent the same scammer victimising others and to obtain a crime reference number for any bank dispute.\n\nIt is worth reframing what a report achieves, because 'prosecution is unlikely' makes many victims stay silent. Reports do three concrete things regardless of any arrest: they trigger the banking-side processes — recalls, account freezes, mule-network flags — that occasionally intercept money and reliably make the fraud infrastructure harder to reuse; they aggregate into the intelligence that lets platforms and police target operations at scale; and they document your case for any dispute or compensation process. Silence, by contrast, protects only the operation. Reporting is also a step many victims describe as reclaiming agency after an experience built on manipulation.","redFlags":["You sent money to someone abroad you have never met and they have gone silent","The platform profile has been deleted or blocked after money was sent","Bank transfer went to an account in a different country from where the person claimed to be"],"whatToDoNow":["Report to your national fraud authority and obtain a crime reference number","Contact your bank immediately — some international transfers can be recalled if reported within hours","Do not send any further money based on a promise of recovery or return of prior funds","Consider seeking emotional support — romance fraud causes significant psychological harm"],"faq":[{"question":"Should I try to confront the scammer to get my money back?","answer":"No. Engaging further risks additional manipulation or threats. Report through official channels. Some agencies do conduct successful operations — your report contributes to that intelligence."},{"question":"I feel too embarrassed to report — is it really worth it?","answer":"Yes. Romance fraud is industrialised manipulation that succeeds against intelligent, careful people, and investigators treat it that way. Your report bolsters cases against networks harming many others, and support organisations exist precisely because the emotional harm is recognised as serious."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-free-credit-score-app-that-asks-for-my-bank-login-safe","url":"https://scamencyclopedia.org/questions/is-a-free-credit-score-app-that-asks-for-my-bank-login-safe","question":"Is a free credit score app that asks for my bank login details safe to use?","shortAnswer":"Only if the app is regulated and uses an FCA-authorised open banking connection. Unregulated apps that store your login credentials pose a serious security risk.","explanation":"Many personal finance apps offer free credit score monitoring and budgeting features that require connecting to your bank account. The safe way to do this is through open banking, a regulated framework where you authorise a connection through your bank's own interface — you never share your banking password with the third-party app. Fraudulent or poorly designed apps, however, ask you to enter your actual bank username and password, which they store and potentially misuse. In the UK, any app using open banking must be FCA-registered. Apps that ask you to enter your bank login rather than redirecting you to an official bank authorisation flow should not be used. Always check the app's registration status and read the data policy before granting access.\n\nThe design difference is easy to check in the moment it matters: a regulated connection hands you to your own bank — its app or login page, with your bank's own authentication — to approve a described, limited, revocable access, while a credential-harvesting app presents username and password boxes inside its own interface. The former never learns your password; the latter exists to learn it. Since your bank's interface is one you know well, the imitation is usually detectable if you are looking. Whenever the flow feels wrong, stop — no free score or budgeting feature is worth your banking credentials.","redFlags":["App asks you to enter your bank username and password directly rather than redirecting to a bank authorisation page","App is not listed on the FCA register or equivalent for your country","Privacy policy is vague about how your data is stored and shared","App was downloaded from outside the official app store"],"whatToDoNow":["Only use apps that connect via your bank's own authorisation page using open banking","Verify the app's FCA registration at register.fca.org.uk","Revoke any previously granted bank connections you no longer use through your bank's settings","Change your banking password immediately if you entered it on an unregulated third-party site"],"faq":[{"question":"Is giving my bank login to a budgeting app ever acceptable?","answer":"No. No legitimate regulated app asks for your full bank login. They use open banking, which only ever asks you to confirm access through your bank's own interface without sharing your password."},{"question":"What does revoking open banking access actually do?","answer":"It cuts off the app's data connection at your bank's side, immediately and without the app's cooperation. Your bank lists active connections in its app or online banking settings; reviewing that list occasionally and removing services you no longer use is good routine hygiene."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-solicitor-asking-me-to-change-completion-payment-details-by-email-safe","url":"https://scamencyclopedia.org/questions/is-a-solicitor-asking-me-to-change-completion-payment-details-by-email-safe","question":"Is an email from my solicitor saying payment details have changed before a house purchase safe?","shortAnswer":"Treat with extreme caution. Conveyancing fraud is a devastating scam where criminals intercept emails and redirect completion funds.","explanation":"Conveyancing fraud — also known as Friday afternoon fraud — is one of the highest-value scams targeting individuals. Criminals monitor email communications between buyers, sellers, and solicitors during a property purchase. Shortly before completion, the buyer receives an email purporting to be from their solicitor with 'updated' bank details for the completion payment. The email may look identical to genuine correspondence. The funds are transferred to the fraudster's account, which is quickly emptied before the fraud is discovered. Banks and solicitors have little ability to recover the funds. Always verify any change to completion payment details by calling your solicitor on a number you already have — never one provided in the email — before making any transfer.\n\nWhat makes this fraud exceptional is the collision of scale and timing: a property completion is for most people the largest transfer they will ever make, executed on a deadline, inside an email thread they have trusted for months. The interception often comes from a genuinely compromised mailbox — yours, the solicitor's, or an agent's — so the fraudulent message can quote real case details and continue a real conversation seamlessly. That is why the defence has to be a fixed protocol rather than judgement: bank details for completion are confirmed by phone on an independently known number, every time, no matter how legitimate the email seems.","redFlags":["Solicitor sends an email saying their bank details have changed","Email arrives close to a completion date when urgency is high","New bank details are for a different account name than your solicitor's firm","Email requests that you confirm the new details by email only"],"whatToDoNow":["Do not use the new bank details until you have verbally confirmed with your solicitor by phone on their known number","Call the solicitor's office, not any number in the suspect email","If funds were already transferred, contact your bank immediately and request an urgent recall","Report to the Report Fraud service (UK, formerly Action Fraud) or your national fraud authority"],"faq":[{"question":"Do solicitors ever legitimately change bank details?","answer":"Very rarely, and they would always confirm such changes by phone and in writing before any transfer was due. Any email-only notification of a bank detail change should be treated as a scam until verbally confirmed."},{"question":"Should I test the account with a small payment first?","answer":"A small test payment, verbally confirmed as received by your solicitor on a known number, is a reasonable extra precaution some firms encourage. But it supplements phone verification of the details, never replaces it — a fraudster controlling the email thread will happily confirm a test payment in writing."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-charity-matching-donation-offer-from-a-social-media-account-real","url":"https://scamencyclopedia.org/questions/is-a-charity-matching-donation-offer-from-a-social-media-account-real","question":"Is a social media post claiming a company will match my charity donation real?","shortAnswer":"Often not. Fake donation matching posts harvest small payments or click-through data without any real corporate matching scheme behind them.","explanation":"Donation matching fraud takes advantage of the emotional appeal of 'double your impact' messaging. A post claims that a named company will match every donation made through a link up to a fixed total. Some posts use real company names without authorisation to add credibility. Clicking through leads to either a fraudulent payment page or a data-harvesting form. Genuine corporate donation matching schemes are announced on the company's own verified website and official communication channels — not primarily through viral social media posts with no corporate verification. Before donating through any matching campaign, verify the campaign on the company's official website and use the official charity's own donation portal.\n\nThe manipulation is efficient because it stacks generosity, urgency, and social proof: doubling your impact, before a deadline, in a post your friends are already sharing. None of those pressures survives the one obvious check — whether the named company announces the campaign anywhere it controls. It is also worth protecting your money's effectiveness, not just its destination: donations made through a charity's own portal arrive with proper receipting and any tax-relief options, while third-party links, even when not fraudulent, can skim fees or strand donations. Generosity travels furthest through the shortest verified path.","redFlags":["Post has no link to the company's official website confirming the matching campaign","Donation is collected through a third-party link rather than the charity's own portal","Post encourages sharing quickly before a 'deadline' expires","The company named cannot be contacted to verify the campaign"],"whatToDoNow":["Verify the matching campaign on the company's official website before donating","Donate through the charity's own verified website rather than a third-party link","Report fraudulent matching posts to the social platform and the named company"],"faq":[{"question":"Do genuine corporate donation matching schemes exist?","answer":"Yes — many large employers match employee charitable donations through payroll giving. These are internal programmes managed through HR, not viral social media links. Public matching campaigns from brands are announced on official corporate channels."},{"question":"A friend shared the matching post — doesn't that make it more trustworthy?","answer":"No. Viral fraud spreads precisely because well-meaning people share it, and your friend is likely a victim of the same post. Verify with the named company's official channels, and if it is fake, let your friend know so they can remove the share."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-package-redirection-scam-text-that-looks-like-dhl-or-amazon-real","url":"https://scamencyclopedia.org/questions/is-a-package-redirection-scam-text-that-looks-like-dhl-or-amazon-real","question":"Is a text from what looks like DHL or Amazon asking me to reroute my package real?","shortAnswer":"Almost certainly not. Package rerouting smishing texts lead to credential-theft pages and card detail harvesting.","explanation":"Package rerouting texts claim that your delivery could not be completed, that an address is incorrect, or that you must choose a new delivery date through a link. The link goes to a convincing fake delivery company page. Some pages only ask for your name, address, and email — data used for targeted phishing — while others ask for card details to pay a small redelivery fee. DHL, Amazon, Royal Mail, and other carriers do send genuine notifications, but genuine ones direct you to their official app or website, not to custom links. If you are expecting a delivery, track it directly in the carrier's official app using the tracking number from your order confirmation email.\n\nThese campaigns are timed and themed to maximise plausibility — they surge around major shopping periods when almost everyone has something in transit, and the carrier named is rotated so that some fraction of recipients will coincidentally be expecting exactly that courier. The coincidence is the trap: the text seems to confirm itself. The tracking-number habit dissolves it, because your genuine shipment has an identity that lives in your order confirmation, not in an inbound message, and checking it takes no longer than reading the text did. Nothing legitimate is ever lost by ignoring the link and checking at source.","redFlags":["Text arrives about a delivery you are not certain you are expecting","Link goes to a domain that does not match the carrier's official website","Small payment required to reschedule delivery","Text asks you to provide personal or payment details to complete the reroute"],"whatToDoNow":["Do not click the link — check your delivery status in the carrier's official app","Track parcels only using tracking numbers from your original order confirmation","Report smishing texts to 7726 (UK) or the relevant spam reporting service in your country","If you entered card details, contact your bank immediately"],"faq":[{"question":"How do I know which carrier has my parcel without clicking the link?","answer":"Your order confirmation email contains the carrier name and tracking number. Go to the carrier's official website or app and enter the tracking number there directly."},{"question":"I get so many delivery texts — how do I manage them safely?","answer":"Adopt one rule: never act through links in delivery messages. Track every parcel from the confirmation email or the carrier's app using your own tracking number. Genuine texts lose you nothing under this rule, and fraudulent ones lose their entire mechanism."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-free-government-broadband-or-phone-upgrade-offer-real","url":"https://scamencyclopedia.org/questions/is-a-free-government-broadband-or-phone-upgrade-offer-real","question":"Is a free government broadband upgrade or affordable connectivity offer by phone or email real?","shortAnswer":"Genuine government broadband schemes exist but are not offered through unsolicited cold calls. Cold-call versions are scams.","explanation":"In the US, the Affordable Connectivity Programme and similar state schemes have provided genuine internet subsidies, and in the UK government-linked schemes have offered subsidised broadband to qualifying households. Scammers use these real programmes as cover for cold calls that collect personal details, payment information, or that push victims toward signing fraudulent broadband contracts. Genuine government broadband assistance requires you to apply through official channels — typically a government website — not to respond to inbound calls. If you receive an unsolicited call about a free broadband upgrade, hang up and find the scheme independently through your government's official website to check eligibility and apply through the correct channel.\n\nSubsidy scams borrow their power from the genuine programme's press coverage — the scheme is real, the eligibility criteria are real, and the caller's only fiction is their connection to it. This structure recurs across benefits, energy discounts, and grants, so the durable defence is a rule about direction of contact rather than knowledge of any particular scheme: government support is something you apply for through official channels, never something that telephones you needing your bank details to release it. When the caller's role is the only unverifiable element, that is the element to treat as false.","redFlags":["Cold call claims you automatically qualify for a government broadband upgrade","Caller asks for personal details including date of birth, National Insurance number, or bank details","Offer requires you to sign a broadband contract on the call","No written confirmation is offered before you are asked to commit"],"whatToDoNow":["Hang up and search for the scheme independently through the official government website","Never provide personal or financial details to inbound callers about any scheme","Report the cold call to your communications regulator","Report to your national fraud authority if personal details were shared"],"faq":[{"question":"How do I check if I qualify for a government broadband or phone subsidy?","answer":"Visit the official government website and search for the specific scheme. In the US, check fcc.gov for the ACP. In the UK, check gov.uk for current digital inclusion schemes. All applications are made online or by post — never by responding to inbound calls."},{"question":"The caller said they were from my broadband provider working with the government — is that a real arrangement?","answer":"Providers do participate in genuine subsidy schemes, but you can only confirm the caller by hanging up and ringing your provider on its official number. If the offer is real, it exists in your account; if not, you have lost nothing but a call."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-business-grant-that-requires-a-processing-fee-upfront-real","url":"https://scamencyclopedia.org/questions/is-a-business-grant-that-requires-a-processing-fee-upfront-real","question":"Is a business grant that requires me to pay a processing or administrative fee upfront real?","shortAnswer":"No. Legitimate government and charitable business grants never require an upfront payment to access funding.","explanation":"Advance fee business grant scams target small business owners and self-employed workers with notifications that they have been pre-selected for a government or charitable grant. To claim it, they must pay an administrative fee, registration cost, or insurance premium. Once paid, the grant never materialises and contact ceases. Genuine business grants — from local authorities, Innovate UK, the SBIR programme in the US, or private foundations — are applied for through formal processes with public criteria. They do not involve pre-selection by cold call or payment of fees before funding is received. Some grant support services legitimately charge to help businesses complete complex applications, but this should always be disclosed in advance and the grant itself never requires the applicant to pay to receive it.\n\nSmall business owners are attractive targets because the premise is plausible — grant programmes genuinely exist, applications are genuinely complex, and a busy owner hearing 'pre-selected' wants it to be true. The structural test cuts through every variation: real funding bodies disburse money through formal award processes and never collect fees from recipients as a condition of release. Keep that separate from legitimate bid-writing consultancy, which charges for labour before any award and makes no promises about outcomes. The fraud is identified by the linkage — pay us, then the grant arrives — because that linkage never exists in genuine funding.","redFlags":["You were pre-selected for a grant you did not apply for","Processing, administrative, or insurance fee required before the grant is released","Offer came through a cold call, text, or email rather than an application process","Grant amount sounds implausibly large relative to any scheme you are aware of"],"whatToDoNow":["Do not pay any fee to access a grant","Search for the grant independently through official government or funding authority websites","Report the scam to your national fraud authority and local trading standards","If you paid a fee, contact your bank about a fraud dispute"],"faq":[{"question":"Where can I find genuine small business grants?","answer":"In the UK, check gov.uk/business-finance-support and your local Growth Hub. In the US, grants.gov and sba.gov list legitimate federal programmes. All applications are free and go through a formal selection process."},{"question":"The 'grant body' has a professional website and a registered company number — doesn't that check out?","answer":"A company registration proves only that a company exists, and websites are trivial to produce. Verify the scheme itself through official government funding portals or your local business support service; a genuine programme is findable through channels the caller does not control."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-crypto-arbitrage-bot-offering-guaranteed-daily-profits-a-scam","url":"https://scamencyclopedia.org/questions/is-a-crypto-arbitrage-bot-offering-guaranteed-daily-profits-a-scam","question":"Is a crypto arbitrage trading bot offering guaranteed daily profits a scam?","shortAnswer":"Yes. No trading system can guarantee daily profits. Crypto arbitrage bot platforms are almost universally fraudulent.","explanation":"Cryptocurrency arbitrage — buying on one exchange and selling for more on another — is a real but competitive trading strategy performed by institutional traders with sophisticated software and split-second execution. It does not produce the consistent daily returns (typically 1-3%) claimed by social media platforms promoting arbitrage bots. These platforms are variants of the investment platform scam: funds deposited are displayed as growing in a dashboard, but withdrawals are blocked or require additional deposits. The 'bot' is software designed to show activity and profit growth — not to trade real funds. Victims are also encouraged to recruit others for commission, giving the scheme an MLM-like referral structure.\n\nThe pitch survives scrutiny badly if you ask who benefits from sharing it. Genuine arbitrage profits shrink as more participants compete for the same price gaps, so anyone holding a working edge has every incentive to keep it quiet and none to retail it through Telegram groups for small deposits. Recruiting the public makes sense only when deposits themselves are the revenue — which the referral commissions confirm, since paying members to bring in members is the geometry of a Ponzi structure, not a trading operation. Consistent daily percentages are the final tell: real trading returns are irregular because markets are.","redFlags":["Platform promises daily returns of 1-5% regardless of market conditions","Access provided through a private link or Telegram group rather than a public exchange","Commission paid for recruiting others into the platform","Withdrawal requires a tax payment, minimum balance, or identity verification that keeps changing","Platform cannot be found reviewed on established cryptocurrency media"],"whatToDoNow":["Do not deposit any further funds","Screenshot all evidence including the platform interface and communications","Report to your national fraud authority and financial regulator","Do not pay withdrawal fees — these are additional fraud, not legitimate charges"],"faq":[{"question":"Are all automated trading bots fraudulent?","answer":"Legitimate algorithmic trading exists, but no automated system can guarantee daily profits in volatile crypto markets. Any product making such a guarantee is misleading by definition."},{"question":"The group shows live trades and daily profit screenshots — could the bot be real?","answer":"Screenshots and dashboards are produced by the platform itself and prove nothing. The decisive tests sit elsewhere: whether the operation is a regulated entity, and whether full withdrawals work without new payments. These platforms fail both, which no volume of screenshots offsets."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-domain-renewal-scam-letter-sent-in-the-post-real","url":"https://scamencyclopedia.org/questions/is-a-domain-renewal-scam-letter-sent-in-the-post-real","question":"Is a letter in the post saying my domain name is expiring from a company I don't recognise real?","shortAnswer":"Almost certainly not from your real registrar. Domain renewal scam letters collect payment to transfer your domain to an overpriced service.","explanation":"Domain renewal scam letters are physical mail sent to businesses and website owners. They look like invoices or renewal notices but are actually solicitations from a different, usually much more expensive, registrar trying to get you to transfer your domain. The letter uses urgent language about expiry and is formatted to resemble a genuine renewal. Paying the invoice transfers your domain to the sending company at rates far above market. In some versions, the domain is actually close to expiry, making the urgency appear legitimate. Your real registrar communicates renewal through the email address on your account. Always renew domains directly through your existing registrar's account panel, not by responding to any postal letter.\n\nThe letters work by exploiting the gap between whoever pays a business's invoices and whoever manages its technical accounts — an office manager sees an official-looking renewal notice with a real domain name and deadline and processes it in good faith. The expiry date is often accurate because registration records are public, which makes the urgency feel verified. The fix is administrative: designate domain management to one owner, document which registrar you actually use, and route any renewal correspondence to that person. Under that arrangement, every postal 'renewal' from an unknown company identifies itself as solicitation the moment it arrives.","redFlags":["Letter is from a registrar company you do not recognise","Payment amount is higher than your current registrar charges","Letter implies urgent action to prevent losing the domain","Payment redirects to a new registrar rather than your existing account"],"whatToDoNow":["Log in to your existing registrar account to check the genuine renewal date","Renew directly through your existing account panel","Do not send any payment in response to the postal letter","Report misleading renewal letters to your consumer protection authority"],"faq":[{"question":"How do I find out when my domain actually expires?","answer":"Log in to your registrar account — the expiry date is listed in your domain management panel. You can also use a WHOIS lookup tool to see the registered expiry date publicly."},{"question":"I paid one of these letters — have I lost my domain?","answer":"Usually not lost, but possibly transferred to an expensive registrar or simply charged for nothing. Check which registrar currently holds the domain, dispute the payment with your bank if no service was delivered, and if a transfer occurred you can move the domain back to a registrar of your choice."}],"lastReviewed":"2026-08-01"},{"slug":"is-a-work-from-home-social-media-manager-job-that-requires-no-experience-a-scam","url":"https://scamencyclopedia.org/questions/is-a-work-from-home-social-media-manager-job-that-requires-no-experience-a-scam","question":"Is a work-from-home social media manager job requiring no experience that pays very well a scam?","shortAnswer":"Very often yes. High-paying, no-experience social media jobs are a common cover for task scams, data harvesting, or money mule recruitment.","explanation":"Genuinely well-paid social media management roles require demonstrable experience, a portfolio, and specific platform knowledge. Jobs advertised as requiring no experience but paying significantly above minimum wage for 'liking posts', 'following accounts', or 'leaving reviews' are either task scams — where a dashboard shows growing earnings that require a deposit to unlock withdrawals — or money mule schemes where you are asked to receive and forward payments as part of a supposed social media advertising budget. Some scams use these roles to harvest your social media account login details, turning your account into a spam operation. Any social media job that requires no demonstrable skills but pays very well should be researched thoroughly before engaging.\n\nThe task-scam variant follows a rhythm worth recognising: small tasks pay out quickly and genuinely at first, a group chat celebrates everyone's earnings, and then a 'premium task' or 'combined order' requires you to deposit your own money to unlock much larger returns. The early payouts and the cheering group — largely accomplices — exist to make that deposit feel safe. From the first request to pay in, the direction of money has reversed and the job has ended, whatever the dashboard shows. Genuine employment never requires you to fund your employer.","redFlags":["Job requires liking, commenting, or following with no creative or strategic element","Pay is significantly above minimum wage for very simple tasks","Job found through a WhatsApp message or social media DM rather than a job board","A deposit or upgrade is required to access higher-paying tasks","You are asked to provide social media login credentials as part of onboarding"],"whatToDoNow":["Never provide social media login credentials to a prospective employer","Do not pay any deposit or upgrade fee for a job","Research the company independently before engaging","Report the scam to your national fraud authority and the platform where you found the job"],"faq":[{"question":"Are there any legitimate entry-level social media jobs?","answer":"Yes, but legitimate roles expect some platform familiarity, writing ability, and are found through standard job boards and career sites. They do not require deposits, promise unrealistic pay for simple tasks, or request your account login."},{"question":"The job paid me real money for the first few tasks — how can it be a scam?","answer":"Early payouts are the acquisition cost of the fraud, spent to make later deposit requests credible. The scheme profits when you pay to unlock bigger tasks and then cannot withdraw. Treat any job that asks you to deposit funds as ended at that moment."}],"lastReviewed":"2026-08-01"},{"slug":"is-this-temu-delivery-text-real","url":"https://scamencyclopedia.org/questions/is-this-temu-delivery-text-real","question":"I got a text about a Temu package needing a fee or address confirmation. Is it real?","shortAnswer":"Almost certainly not. Temu is a real company, but delivery texts asking for a small fee, an address confirmation, or a code are one of the most commonly faked messages there is. Do not tap the link. Check your orders inside the official app instead.","explanation":"Delivery texts are easy to fake because they are short, generic, and arrive at a moment when you probably are expecting something. The message usually says a parcel could not be delivered, an address needs confirming, or a small customs or redelivery fee is outstanding, and it includes a link. The link opens a page built to look like the real marketplace or a courier, and it asks for your address, your card number, and sometimes a one-time code sent to your phone. That code is often the real target, because it can authorise a payment or a login. The message is convincing because it asks for very little, the amount named is usually tiny, and the tone is mildly urgent rather than threatening. The check that settles it: close the message, open the official app yourself, and look at your order list. If no order matches what the text describes, or the order is progressing normally, the text did not come from the marketplace.","redFlags":["A link in the text rather than an instruction to check your orders in the app","A small fee for customs, redelivery, or address correction","A request for a one-time code that was texted to you separately","The sender is a random mobile number or an address that does not match any order confirmation you kept","Pressure to act within hours or the parcel is returned","The page asks for full card details when the app already has your payment method"],"whatToDoNow":["Do not tap the link, reply, or call any number in the message","Open the official app or type the website address yourself and check your order list and its real tracking status","If you already entered card details, contact your bank or card issuer straight away and ask them to block the card and review recent charges","If you entered a password or a code, change that password and any place you reused it, and turn on two-factor authentication","Report the message as junk or phishing in your phone messaging app and delete it","Keep a screenshot of the message and any payment before deleting, in case your bank asks for it"],"faq":[{"question":"I tapped the link but did not enter anything. Am I at risk?","answer":"Usually not much. Simply opening a page rarely does anything on a modern phone, and the risk comes from what you type into it. If you entered nothing and downloaded nothing, you are most likely fine. Close the page, clear it from your browser history, and do not go back to it. If you were prompted to install an app or a profile and you agreed, remove it and run a security scan, because that is the case where real access can be handed over."},{"question":"How can I tell a real delivery notification from a fake one?","answer":"The safest habit is to stop judging the message and check the source instead. Real order updates always exist inside your account, so open the app yourself and look. A genuine platform will not need a card number or a texted code to release a parcel, and it will not depend on you clicking a specific link within a few hours. If the information only exists in the message and nowhere in your account, treat the message as fake regardless of how well it is written."}],"lastReviewed":"2026-07-19"},{"slug":"temu-seller-wants-payment-outside-the-app","url":"https://scamencyclopedia.org/questions/temu-seller-wants-payment-outside-the-app","question":"A Temu seller asked me to pay or take a refund outside the app. Should I do it?","shortAnswer":"No. Temu is a legitimate marketplace, but anyone messaging you can ask you to step outside it, and that step is where protection disappears. Keep the payment and the refund inside the app, on the original payment method, and report the request.","explanation":"On any large marketplace, most items come from third-party sellers, and a small number will try to move you off the platform. The request usually appears right after you ask about an item, a bulk order, or a refund. The pitch sounds reasonable: a direct bank transfer, a payment app, gift card codes, or crypto, offered in exchange for a discount, faster shipping, or a refund that supposedly cannot be processed in the app. It works because the conversation began inside an app you already trust, so the person feels vetted. They are not vetted for anything that happens outside it. Once you pay off-platform there is no order record, no in-app dispute to open, and the payment types they name are chosen precisely because they are difficult to reverse. The check that settles it: a genuine refund for a marketplace order goes back through the platform to your original payment method. If someone needs you to leave the app for it to work, that is your answer.","redFlags":["A request to pay by bank transfer, payment app, gift card codes, or crypto","A refund offered only if you first send money, a fee, or your bank login","Pressure to continue the conversation on a messaging app or by email instead of in-app chat","A discount that only applies if you pay directly","An excuse that the platform is holding funds, is glitching, or charges the seller too much","A refund amount larger than you paid, with a request to send the difference back"],"whatToDoNow":["Decline and keep every message inside the app so there is a record","Check your order and refund status yourself in the official app rather than trusting what the seller says","Report the seller and the conversation through the in-app report option","If you already sent money, contact your bank or the payment provider immediately and ask about a recall or chargeback, and understand that they decide the outcome","If you shared card, bank, or login details, freeze the card and change the password and any reused passwords","Open a dispute or contact platform support about the order itself, and keep screenshots of the messages"],"faq":[{"question":"I already sent the money. Can I get it back?","answer":"Sometimes, and it is worth acting fast, but nobody can promise it. Bank transfers can occasionally be recalled if the receiving bank still holds the funds, and card payments may qualify for a chargeback. Gift card codes and crypto are the hardest to recover. Contact your bank or payment provider today, explain plainly that you were deceived into paying, and ask what recovery route exists. Your bank or card scheme makes the decision, so give them the messages, dates, and amounts."},{"question":"Is the marketplace responsible if a third-party seller does this?","answer":"Platforms generally offer buyer protection for orders placed and paid for through the app, which is exactly why keeping everything in-app matters. If you paid inside the app and the item never arrived or was not as described, open a dispute and let support review it. If you paid outside the app, the platform usually cannot see the transaction at all, so there is nothing for it to refund. Report the seller regardless, because it helps the platform act on the account."}],"lastReviewed":"2026-07-19"},{"slug":"is-this-shein-delivery-text-real","url":"https://scamencyclopedia.org/questions/is-this-shein-delivery-text-real","question":"I got a text saying my SHEIN parcel could not be delivered and I need to pay a small fee. Is it real?","shortAnswer":"Almost certainly not. SHEIN is a real company, but it does not text customers asking for a small redelivery or customs fee through a link. Messages like this are sent in bulk to huge lists, hoping the person reading happens to have a parcel in transit.","explanation":"The message works on timing rather than on information. Clothing parcels move constantly, so a text about a held package lands on plenty of people who really are waiting for something, and that coincidence does most of the persuading. The link opens a page built to resemble a familiar delivery or retailer screen, sometimes with a tracking number already filled in. The fee it asks for is deliberately tiny, because the money is not the goal. The goal is your card number, expiry date, security code and address, which are then used for much larger charges or passed on to others. Some versions follow up by asking for a code your bank has just sent, so they can get past a verification step. The one check that settles it: close the message, open the official app yourself or type the retailer address into your browser, and look at your own orders and tracking there. A real delivery problem shows up inside your account. If your account shows nothing wrong, the text is not real.","redFlags":["A fee for redelivery, customs or address correction is requested by text message","The link uses a shortened address or a lookalike domain rather than the retailer's normal site","Pressure such as your parcel will be returned or destroyed within 24 hours","Full card details are requested on a page you reached from the message","You are asked to read back a verification code your bank sent you","You have no order in transit, or the order number matches nothing you placed"],"whatToDoNow":["Do not tap the link and do not reply to the message","Open the official app yourself, or type the retailer address into your browser, and check your orders and tracking there","If you already entered card details, contact your bank straight away using the number on your card or in your banking app and ask them to block the card","Change the password on any account where you reused the details you typed in, and turn on two-step verification","Report the message to your mobile provider's spam reporting service and delete it","Keep a screenshot of the message and any payment reference in case your bank asks for it"],"faq":[{"question":"I only paid a dollar or two. Does that really matter?","answer":"Yes, and not because of the amount. The small charge exists to make the card details feel harmless to hand over. Once the card number, expiry and security code are captured, they can be tried on much larger purchases or sold to other people. Treat it as a card compromise rather than a small loss: call your bank, ask for the card to be blocked and reissued, and watch your statement over the following weeks."},{"question":"How do I check a delivery message safely in future?","answer":"Never follow the route the message gives you. Open the retailer's official app from your phone's home screen, or type the address into your browser, and look at your order history and tracking there. If you want to check with the courier, find the courier's site yourself rather than using the link or number in the text. Genuine delivery issues are visible through routes you navigate to on your own, so a message that only works through its own link is the warning sign."}],"lastReviewed":"2026-07-19"},{"slug":"shein-reviewer-job-offer-asked-me-to-buy-products-scam","url":"https://scamencyclopedia.org/questions/shein-reviewer-job-offer-asked-me-to-buy-products-scam","question":"Someone offered me a paid job reviewing SHEIN products but I have to buy the items first. Is this a scam?","shortAnswer":"Treat it as a scam. SHEIN is a real retailer, but genuine work never requires you to spend your own money on stock and wait to be repaid. The offer is a recruitment pitch from a stranger using a well known brand name to borrow trust.","explanation":"The approach usually arrives by direct message, group chat or an ad for flexible remote work, and it stays believable because the early stages actually pay. You are asked to buy a cheap item, post a review or complete a simple task, and you receive your money back plus a small bonus. That first repayment is the hook. It proves the arrangement works, so the next task involves a costlier item, then a bundle, then a target you have to hit before anything is released. When you ask for your money, there is a reason it is stuck: a tier you have not reached, a tax to prepay, a mistake you must correct by depositing more. The one check that settles it is simple. Real employers pay you; they do not ask you to fund the work. Any role where your own money must go out first, especially by bank transfer, gift card or crypto, is not a job.","redFlags":["You must buy products or top up a balance with your own money before being paid","Early small payments arrive quickly, then the required amounts climb sharply","Payment is requested by bank transfer, gift card, crypto or a payment app rather than payroll","Recruitment happens entirely in a chat app, with no formal contract or verifiable company details","Withdrawals are blocked until you reach a target, pay a fee or clear a supposed tax","You are told to keep the arrangement private or to hurry before the slot is taken"],"whatToDoNow":["Stop sending money, including any payment described as the final step to unlock your balance","Do not complete another task, even a small one, and do not accept an offer to make good on your losses","Contact your bank or the payment provider you used, tell them you think you were deceived, and ask what recovery options exist in your case; they decide what is possible","Screenshot the chat, the profile, the account details you paid to and any receipts before the conversation disappears","Report the account to the platform where you were contacted, and to your national fraud or cybercrime reporting body","If you shared identity documents or account logins, change those passwords, turn on two-step verification and watch for credit applications in your name"],"faq":[{"question":"They paid me the first two times, so how can it be fake?","answer":"Those early payments are part of the method rather than proof of a real job. Paying out a small amount costs the sender little and buys something valuable: your belief that the system works. It also makes the larger deposits feel like a reasonable risk on a proven arrangement. The pattern to watch is the direction of money over time. If the amounts you send keep growing while the amounts you receive stall, the early payments were the investment, not the wage."},{"question":"Is there any chance I get my money back?","answer":"There may be, and it is worth trying quickly, but no one can promise it. Your bank or payment provider decides whether a recovery attempt is possible, and speed matters because funds move on fast. Call them, say plainly that you were deceived into sending the money, and give them the account details, dates and references. Bank transfers, gift cards and crypto are harder to reverse than card payments, so report those immediately rather than waiting to see what happens."}],"lastReviewed":"2026-07-19"},{"slug":"is-this-robinhood-account-locked-call-real","url":"https://scamencyclopedia.org/questions/is-this-robinhood-account-locked-call-real","question":"I got a call saying my Robinhood account is locked and I need to move my funds to a safe wallet. Is that real?","shortAnswer":"No. Robinhood is a real, regulated brokerage, but it does not call people and tell them to move money or crypto to a safe account or outside wallet. A caller saying that is impersonating support, and any transfer you make that way is very hard to reverse.","explanation":"The scam starts with a phone call, a text, or a pop-up warning that your account has been locked or accessed by someone else. The number on your screen may show a name or an area code that looks plausible, because caller ID can be faked cheaply. The caller sounds calm and procedural, reads back a detail about you that they found elsewhere, and offers to help you secure the balance. The instruction is always the same in the end: approve a transfer, send crypto to a wallet address they read out, or install a screen-sharing app so they can do it for you. It feels convincing because the story matches a fear you already have, and because being told your money is at risk shuts down slow thinking. The one check that settles it: hang up, open the app yourself from your phone's home screen, and look at your account status there. A genuine restriction shows up in the app. It never depends on you calling a number someone gave you.","redFlags":["A caller says your account is compromised and funds must be moved to a safe wallet or holding account","Pressure to act within minutes, or a warning not to tell anyone including your bank","A request to install remote access or screen sharing software so they can help","Being asked to read out a login code, PIN, or recovery phrase","A support number that came from a text, an ad, or a search result rather than the app","Instructions to send crypto to a wallet address, or to buy gift cards to verify your identity"],"whatToDoNow":["End the call. Do not call back the number that contacted you.","Open the official app directly from your phone and check whether any restriction actually exists on your account.","If you shared a code or password, change your password from inside the app and turn on two-factor authentication.","Remove any screen-sharing or remote-access app you were asked to install, and restart the device.","Report what happened through the help section inside the app, and if money left your account, contact your bank or card issuer the same day.","File a report with your national fraud reporting body, and keep screenshots, times, and any wallet address you were given."],"faq":[{"question":"Would real support ever ask me for my login code?","answer":"No. A one-time code exists to prove that you are the person logging in, so anyone who asks you to read it out is trying to get into your account. The same goes for your password, your PIN, and any crypto recovery phrase. Legitimate staff can already see what they need on their side. If a request for a code comes up in a call you did not start, treat that alone as enough reason to hang up."},{"question":"The number matched what I found online. Does that mean it was genuine?","answer":"Not necessarily. Caller ID can be spoofed to display almost any number, and search results and ads can carry support numbers set up by other people. That is why the safer habit is to never dial a number you were given or that appeared beside a search result. Open the app you already have installed and use the help or contact route inside it, so the path to support is one you navigated to yourself."}],"lastReviewed":"2026-07-19"},{"slug":"robinhood-adviser-told-me-to-move-my-money-scam","url":"https://scamencyclopedia.org/questions/robinhood-adviser-told-me-to-move-my-money-scam","question":"Someone who said they work with Robinhood offered to manage my investments if I move my money to another platform. Is this a scam?","shortAnswer":"Almost certainly yes. Robinhood is a legitimate brokerage, but people impersonate it to build trust before steering you onto a different site or wallet they control. Once your money leaves the real app, you are dealing with a stranger, not the company.","explanation":"This one usually begins socially rather than with a warning. Someone messages you on a dating app, a group chat, or a social platform, mentions trading, and drops the name of a well known brokerage to sound credible. Over days or weeks they show screenshots of gains, offer to teach you, and eventually say the real returns are on another platform, a private group, or a wallet they help you set up. That second site often looks polished and shows your balance rising, which is exactly why it works. The trouble appears when you try to withdraw and are told to pay a tax, a fee, or a minimum first. It is convincing because the relationship came first and the pressure came later, and because a familiar company name did the early work of making it feel safe. The check that settles it: nobody genuinely connected to a regulated brokerage will ever move you off that brokerage to trade privately. Any request to transfer out is the answer.","redFlags":["A new online contact brings up trading and name-drops a well known brokerage","Screenshots of profits, or a mentor group promising steady returns","Being asked to move funds to a different site, a private wallet, or a person's account","Withdrawals blocked until you pay a tax, fee, or top-up first","Urgency built around a closing window or a limited opportunity","Any refusal to speak on video, or excuses about why the relationship must stay private"],"whatToDoNow":["Stop sending money now, including any fee you were told is needed to release a withdrawal.","Take screenshots of the profiles, chats, wallet addresses, and any site you were sent to, before anything is deleted.","Check your account only through the official app you installed yourself, and change your password if you shared any details.","Contact your bank or card issuer the same day if funds left through them, and ask what recovery options exist in your case.","Report the accounts to the platform where you met, and report the loss to your national fraud reporting body.","Ignore anyone who later offers to recover your funds for a fee, as that is a common follow-up approach."],"faq":[{"question":"The platform shows my balance going up. Can I still get that money out?","answer":"A rising balance on a site controlled by someone else is just a number on a screen, not funds held for you. That is why withdrawal requests usually meet a new fee, a tax, or a verification payment. Do not send more money to release it. Gather evidence, report it to your bank and to fraud authorities, and let them assess what can be traced. Outcomes vary and no one can promise a recovery."},{"question":"How can I tell whether someone really represents a brokerage?","answer":"Assume they do not, and verify independently. A genuine regulated firm handles your account inside its own app and does not assign a personal mentor through social media or a dating app. There is no legitimate reason to move your money to a separate platform or a private wallet to get better returns. If you want to check a firm or an adviser, look them up through your country's financial regulator using a search you started yourself."}],"lastReviewed":"2026-07-19"},{"slug":"is-this-chime-text-asking-me-to-verify-my-account-real","url":"https://scamencyclopedia.org/questions/is-this-chime-text-asking-me-to-verify-my-account-real","question":"I got a text saying my Chime account is locked and I need to verify it - is this real?","shortAnswer":"Almost certainly not. Chime is a real company, but messages like this are sent in bulk by people impersonating it, and the link or phone number in them leads to a copy of the real thing. Do not tap it. Open the app yourself and check there.","explanation":"These texts and emails go out in bulk to numbers that may or may not belong to actual customers. The sender is guessing, and the people who happen to be waiting on a transfer or who recently saw a declined payment are the ones who react. The message usually says the account is locked, a payment was flagged, or your details need reverifying, and it offers a link to a page that copies the familiar colors and login screen. Anything typed there goes to whoever built the page, including your password and any one-time code you pass along. Other versions skip the link and give a number to call, where a calm, professional voice walks you through moving your balance to a so-called safe account. Nothing about the message can be trusted, because every detail in it was chosen by the sender. The one check that settles it: close the message, open the app already on your phone, and see whether the same alert appears inside it.","redFlags":["A link in the message rather than an instruction to open the app yourself","Urgency about your account being locked, frozen, or closed within hours","A request for your password, PIN, card number, or a code that was texted to you","The sender asks you to move your balance to a different account for safekeeping","The sender address or number looks slightly off, or changes between messages","You are told not to hang up, or not to discuss the call with anyone"],"whatToDoNow":["Do not tap any link in the message and do not call the number it gives you","Open the app directly from your phone, or type the official website address yourself, and look for the same alert there","If you already entered your details, change your password immediately and turn on two-factor authentication","Report the issue through the support option inside the app so there is a record of it","If you sent money or shared a code, contact support through the app straight away and ask what recovery options exist in your case","Forward the text to your mobile carrier's spam reporting shortcode and then delete it"],"faq":[{"question":"I already clicked the link but did not type anything in. Am I in trouble?","answer":"Opening a page is far less serious than entering details on it. If you did not type your login, card number, or a security code, the most likely outcome is nothing at all. Still, change your password from inside the app as a precaution, turn on two-factor authentication if it is off, and watch your transactions for the next couple of weeks. If anything appears that you did not authorize, report it through the app right away."},{"question":"The caller knew my name and the last four digits of my card. Doesn't that prove it was really them?","answer":"No. Details like a name, an email address, or the last digits of a card circulate widely after data breaches and can be bought or pieced together. Someone opening with accurate information is using it to buy your trust in the first few seconds. Genuine support will not need you to prove yourself by reading out a one-time code or moving money. Treat knowledge of your details as neutral, not as proof of who is calling."}],"lastReviewed":"2026-07-19"},{"slug":"someone-on-social-media-says-they-can-unlock-my-chime-account","url":"https://scamencyclopedia.org/questions/someone-on-social-media-says-they-can-unlock-my-chime-account","question":"Someone replied to my post offering to unlock my Chime account for a fee - is that legitimate?","shortAnswer":"No. Chime is a real company, but the person replying to you does not work for it. Accounts under review are handled only through official support inside the app, and no genuine representative will find you on social media or ask for a fee.","explanation":"People post publicly when an account is under review, and those posts are easy to find by searching the company name. Someone then replies from a profile built to look official, using the same logo and a handle that differs by a character or two, and offers to escalate your case. It works because you are already frustrated, you have been waiting, and this is the first reply that sounds like help. The conversation moves to direct messages quickly. From there the ask is one of a few things: a fee paid in gift cards or a transfer to an individual, your login and the code sent to your phone so they can access the account, or a screen sharing session while you log in. Each version ends with less access than you started with. The one check that settles it: no real support team charges a fee to review an account, and none of them need your password or a one-time code to do their job.","redFlags":["The account contacted you first after you posted publicly about a problem","A fee is requested to speed up, escalate, or unlock the case","Payment is asked for in gift cards, crypto, or a transfer to a person's name","The profile handle is a near copy of the official one, or was created recently","You are asked for your password, PIN, or a code sent to your phone","You are pushed to move to a private chat, WhatsApp, or Telegram immediately"],"whatToDoNow":["Stop replying and do not send money, codes, or screenshots of your account","Block and report the profile to the social platform so it can be reviewed","Contact support only through the help section inside the app, or a website address you type yourself","Change your password and enable two-factor authentication if you shared any details","If you paid by card or transfer, contact your card issuer or bank promptly and ask about a dispute - they decide the outcome, but reporting early helps","Keep screenshots of the messages and the profile in case you need them for a report"],"faq":[{"question":"Their profile had the official logo and thousands of followers. How is that not real?","answer":"Logos, banners, and follower counts are all easy to copy or buy, and none of them are verified by the company being imitated. What matters is how the contact started and what is being asked for. A profile that seeks you out after a public complaint, then asks for money or a security code, is behaving in a way no official support channel does, regardless of how the page looks. Judge the request, not the branding."},{"question":"I already paid the fee. Is there anything I can do?","answer":"Act quickly and report it in a few places. Tell whoever moved the money - your card issuer, bank, or the payment app used - and ask what dispute or recovery options apply, since they make that decision. Report the profile to the social platform and file a report with the FTC at reportfraud.ftc.gov. Then contact official support inside the app about your original account issue, which is still handled the normal way. Expect no promises, but reporting early gives you the best chance."}],"lastReviewed":"2026-07-19"},{"slug":"is-this-remitly-transfer-on-hold-fee-message-real","url":"https://scamencyclopedia.org/questions/is-this-remitly-transfer-on-hold-fee-message-real","question":"I got a message saying my Remitly transfer is on hold and I need to pay a fee to release it. Is this real?","shortAnswer":"Almost certainly not. Remitly does not hold a transfer and then ask you to send an extra fee by gift card, crypto, or a separate transfer to release it. Fees are taken at the time you set up the transfer, inside the app.","explanation":"This scam works by copying the look of a real transfer notification. You may genuinely be sending money right now, or waiting on money from family, so a text or email saying the transfer is stuck feels plausible rather than suspicious. The message usually includes a tracking-style reference number, a warning that the funds will be returned or lost within hours, and a link to a page that mirrors the real branding. That page asks for a release fee, a customs or compliance charge, or your login details. Once you pay, a new obstacle appears and another fee is requested. The pressure is the tell: a real transfer that needs attention does not depend on you clicking a link in a message. The one check that settles it is to close the message entirely, open the Remitly app you installed yourself or type the official site into your browser, and look at the transfer status there. If nothing is on hold in your own account, the message is fake.","redFlags":["A fee is demanded by gift card, crypto, or a transfer to a personal account","A countdown or threat that the money will be lost or returned within hours","The link goes to a lookalike domain with extra words or a different ending","You are asked for your password, PIN, or a verification code to release funds","A reference number you do not recognise from any transfer you actually made","The message arrives before you have sent anything at all"],"whatToDoNow":["Do not click the link or call any number written in the message","Open the app you installed yourself, or type the official address into your browser, and check the real transfer status","If you already entered your login details, change your password immediately and turn on two-step verification","Contact support only through the help section inside the app, never through contact details in the message","If you paid a fee, tell your bank or card issuer straight away and ask about a chargeback or recall, and report the message to the company","Keep screenshots of the message, the link, and any payment receipts in case you are asked for them"],"faq":[{"question":"Does a real transfer ever get put on hold?","answer":"Yes, transfers can be paused for identity or compliance checks, and that is normal. The difference is how you find out and what happens next. A genuine hold shows up in your own account when you open the app yourself, and it is resolved by confirming your identity or details through the app, not by paying an extra release fee to an outside account. If a request for money is attached to the hold, treat it as fake."},{"question":"I clicked the link but did not pay anything. Am I at risk?","answer":"Probably not, if you did not type anything in. Risk comes from what you entered, not from the page loading. If you typed your login details, change that password now and any other account using the same one. If you entered card details, contact your card issuer. Run a check for anything you downloaded from the page. Then watch your account for transfers you did not set up and report anything unfamiliar."}],"lastReviewed":"2026-07-19"},{"slug":"someone-asked-me-to-send-money-by-remitly-for-an-emergency","url":"https://scamencyclopedia.org/questions/someone-asked-me-to-send-money-by-remitly-for-an-emergency","question":"Someone I met online asked me to send money through Remitly for an emergency. Should I do it?","shortAnswer":"Slow down before you send anything. Remitly is a real service, but a request to use it from someone you have only met online, or from a family member reaching out in an unexpected way, is a common setup for romance and emergency scams because the money moves fast and is hard to recall.","explanation":"This scam relies on a story rather than a fake website. Over weeks or months, someone builds trust through messages and calls, then a sudden crisis appears: a hospital bill, a stuck shipment, a legal fee, a plane ticket home. The relative version is shorter and sharper, often a message from a new number claiming to be a child or grandchild in trouble who begs you not to tell anyone else. Remittance is named because it reaches another country quickly and lands with a person rather than a business. The emotional pressure is the point, and secrecy is part of the script so nobody talks you out of it. The one check that settles it is contact through a route you already had. Call the person on the number you have saved from before, or reach a relative who would know, and confirm the story independently. Anyone genuine will understand the pause. Anyone who reacts with anger or urgency is telling you what you need to know.","redFlags":["You have never met the person face to face, or video calls are always refused or cut short","You are asked to keep the request secret from family or from staff at your bank","The story escalates and a second, larger request follows the first","You are told to send to a name that is not the person you have been talking to","A new number claims to be a relative and says their old phone is broken","The request arrives with a deadline attached to it, such as before the end of the day"],"whatToDoNow":["Do not send anything today, and say plainly that you need time to check","Call the person on a number you already had saved, not the number that contacted you","Speak to one other person you trust before making any decision","If you have already sent money, open the app and check whether the transfer can still be cancelled, since some transfers can be stopped before they are collected","Contact support through the app and report the transfer as a possible scam, and report it to your local police or fraud reporting service","Stop further contact with the account and keep the messages, names, and receipts"],"faq":[{"question":"Can I get money back if the transfer was already collected?","answer":"Once funds are picked up or delivered, recovery becomes difficult and is not guaranteed. Report it anyway. Contact support through the app as soon as you can and explain that it was a scam, because outcomes depend on timing and on what the payout side can do. If you paid using a card, also tell your card issuer. The company and your bank decide what is possible, so the honest answer is to try quickly rather than assume."},{"question":"They sent me a photo and ID to prove who they are. Does that settle it?","answer":"No. Photos, identity documents, and even short video clips can be copied from other people or generated, so they prove very little on their own. What is harder to fake is a route you control. Call a number you already had, or reach a mutual contact who would know the person. If the only way to reach them is the channel they gave you, treat the identity as unconfirmed no matter what images arrive."}],"lastReviewed":"2026-07-19"},{"slug":"is-this-instacart-shopper-job-offer-real","url":"https://scamencyclopedia.org/questions/is-this-instacart-shopper-job-offer-real","question":"I got an Instacart shopper job offer asking me to pay for equipment first - is it real?","shortAnswer":"That is almost certainly not a real offer. Instacart is a legitimate company, but signing up as a shopper is free and happens inside the official app or website, and a genuine onboarding process does not ask you to pay for a starter kit, a card activation, or training. Any upfront payment request is the scam.","explanation":"Fake shopper-recruitment offers usually arrive by text, social media message, or a job-board reply, and they move fast. You are told you have been approved, sometimes without an interview, and pointed to a chat app to finish onboarding. From there the pitch is a small cost with a large payoff: a fee to activate your payment card, a deposit on an insulated bag or phone holder, a background-check charge, or a payment to unlock high-value batches. Some versions instead send you a check, tell you to deposit it and buy equipment from a specific supplier, then the check bounces days later and the money you sent is gone. It is convincing because gig work genuinely does involve equipment, quick approvals, and app-based onboarding, so the details sound ordinary. The one check that settles it: close the message, open the official Instacart shopper signup yourself, and see whether the process ever asks you for money. It does not. Real gig platforms take a cut of your earnings, they do not charge you to start.","redFlags":["You are asked to pay for equipment, a card activation, a background check, or batch access","The offer arrived unsolicited and you are hired with no real interview or application you remember making","Onboarding moves to a personal chat app, texting thread, or email instead of the official app","Payment is requested by gift card, cryptocurrency, payment app, wire, or a link the recruiter sends","You are sent a check and told to deposit it and forward part of the money to a supplier","There is pressure to act today because slots or batches are about to be released"],"whatToDoNow":["Stop and send no money, and do not deposit or forward funds from any check they sent","Do not click links in the message; type the official Instacart address yourself or use the app store listing","Start a shopper application from that official route and confirm no fee is ever required","If you already paid, contact your bank or card issuer immediately, explain it was a job scam, and ask about a reversal or chargeback - they decide the outcome, and speed helps","If you sent bank details or a photo of your ID, tell your bank, watch your accounts, and consider a credit freeze","Report the message to the platform it arrived on and to your national fraud reporting body"],"faq":[{"question":"Does Instacart ever charge shoppers to get started?","answer":"No. Signing up as a shopper is free through the official app or website, and the company earns from the service side of orders rather than from onboarding fees. There is no legitimate charge for a starter kit, a payment card, training, batch access, or a background check as part of joining. If any message frames a payment as the last step before you can start earning, treat it as a scam regardless of how official the branding looks."},{"question":"They sent me a check for equipment - why is that dangerous?","answer":"A deposited check can show as available funds long before it truly clears. Scammers rely on that gap: you deposit it, send part of the money to a supplier they name, and days later the check is returned as fraudulent. Your bank reclaims the full amount and you are out whatever you forwarded. No legitimate employer needs you to deposit a check and pass money onward. If a check has already arrived, do not deposit it and ask your bank what to do."}],"lastReviewed":"2026-07-19"},{"slug":"is-this-instacart-refund-text-real","url":"https://scamencyclopedia.org/questions/is-this-instacart-refund-text-real","question":"I got a text about a problem with my Instacart order and a refund - is it real?","shortAnswer":"Treat it as fake until you verify it yourself. Instacart is a real company and does send order notifications, but refunds appear as credits in your account and never require you to read out a code, share card details, or move money. The refund framing is the hook.","explanation":"These messages copy the tone of a normal delivery update: an item was out of stock, a payment failed, or a refund is waiting for you. Because most people genuinely have an order in flight or recently completed, the timing feels plausible. Tapping the link opens a lookalike page that asks you to sign in, confirm your card, or enter a one-time code. Handing over that code is what lets someone into your account or authorises a payment. A phone version exists too: a caller says they are processing your refund, asks you to install a screen-sharing app or open your banking app to confirm receipt, then claims too much was sent and asks you to return the difference. The one check that settles it: close the message entirely, open the Instacart app yourself, and look at the order and your account credits. If nothing there matches the message, the message is not from the company. Real refunds show up without you doing anything.","redFlags":["The message asks you to confirm card details, a password, or a one-time code","A link goes to an address that is not the plain official domain, or a shortened link","You are asked to install a screen-sharing or remote-access app so someone can help","The caller says a refund was overpaid and you must return the difference","There is urgency about the refund expiring or the account being locked","Nothing in the official app matches what the message describes"],"whatToDoNow":["Do not tap the link or call the number in the message; open the app you already have installed","Check your order history and account credits inside the app to see whether anything matches","Never share a one-time code, even with someone who says they sent it to verify you","If you already entered details, change your account password, sign out of other sessions, and enable two-factor authentication","Call your bank using the number on your card, report the details as exposed, and ask them to watch or replace the card","Report the message through the official app support channel and forward the text to your carrier spam reporting service"],"faq":[{"question":"How does a real refund appear?","answer":"A genuine refund or credit shows up inside your account and in your order history without any action from you beyond requesting it through the app. You may also get an email confirming it. What will not happen is being asked to confirm your card number, read out a verification code, or approve anything by phone to release the money. If the only evidence of a refund exists in a text message and nowhere in your account, there is no refund."},{"question":"I clicked the link but did not enter anything - am I okay?","answer":"Usually yes. Simply opening a page is far less risky than typing into it. Close the page, and if it prompted you to download anything, do not install it and delete the file. To be safe, change your account password from the official app, turn on two-factor authentication, and check your recent orders and payment methods for anything you do not recognise. If you did enter details, act on the password change and bank call straight away."}],"lastReviewed":"2026-07-19"},{"slug":"is-this-onlyfans-account-verification-email-real","url":"https://scamencyclopedia.org/questions/is-this-onlyfans-account-verification-email-real","question":"Is this OnlyFans account verification email real or a scam?","shortAnswer":"Treat it as a scam until you prove otherwise. OnlyFans is a real company, but real account and age checks happen inside the app or on the site you navigate to yourself, never through a link in an email or DM that asks for card details to prove you are an adult.","explanation":"A fake verification message copies the look of a real platform notice and adds pressure: your account is under review, your payout is on hold, or your age check has expired. The link goes to a lookalike page that mirrors the real login screen closely enough to pass a glance. It asks for your email and password first, then for card details framed as a small verification charge or a temporary hold that will be refunded. Neither is verification. The password gives someone access to your account and any payouts attached to it, and the card details go to a payment form the sender controls. It is convincing because real platforms genuinely do run age and identity checks, so the request does not sound absurd on its face. The check that settles it: close the message, open the app or type the address yourself, and look at your account status there. If nothing is flagged inside your own account, the message was not from the platform.","redFlags":["A link in an email or DM leading to a login page rather than the app you already use","Any request for card or bank details presented as proof of age or identity","Urgency about a suspended account, a frozen payout or an expiring verification window","A sender address or web domain that is close to the real one but not identical","A request for your password, login code or two-factor code by any route","A promise that a small verification charge will be refunded shortly"],"whatToDoNow":["Do not click the link and do not reply to the message.","Open the official app or type the site address yourself, then check your account status and notifications there.","If you entered your password anywhere, change it immediately and change it on any other account using the same password.","Turn on two-factor authentication on the account and on the email address attached to it.","If you entered card details, contact your bank or card issuer directly using the number on your card and ask them about a block or replacement card.","Report the message through the platform's official support or reporting route inside the app."],"faq":[{"question":"Does OnlyFans ever ask for a card to verify your age?","answer":"Age and identity checks on the real platform are handled inside the account itself, and a payment method on file is used for paying for subscriptions, not as a way to prove how old you are. If a message asks you to enter fresh card details on a web page purely to confirm your age, treat that as the giveaway. Check your account status by opening the app yourself rather than following any link you were sent."},{"question":"I clicked the link but did not type anything in. Am I at risk?","answer":"Opening a page is much lower risk than entering details on it. The main thing to confirm is that nothing was submitted and nothing was downloaded or installed. Change your password anyway if you are unsure whether a login form auto-filled, enable two-factor authentication, and check your account for logins or devices you do not recognise. If a file downloaded, do not open it and run a scan with your security software."}],"lastReviewed":"2026-07-19"},{"slug":"onlyfans-subscriber-threatening-to-leak-screenshots-unless-i-pay","url":"https://scamencyclopedia.org/questions/onlyfans-subscriber-threatening-to-leak-screenshots-unless-i-pay","question":"Someone says they have screenshots from my OnlyFans and will send them to my family unless I pay. What do I do?","shortAnswer":"This is sextortion, and it is a crime committed against you. Do not pay and do not send anything more. Paying almost never ends the demand, and in most cases the threat is a pressure tactic aimed at many people at once rather than a targeted plan.","explanation":"The message usually arrives out of nowhere by DM, email or text. It claims the sender has recordings, screenshots or your subscriber history, often lists a relative's name or your workplace to prove reach, and gives a short deadline with a crypto or gift card payment demand. Names and workplaces are frequently pulled from public social profiles rather than from anything the sender actually holds. The pressure works because it targets shame and speed, and because the sender wants you deciding alone in the first ten minutes. Paying tends to mark you as someone who pays, and a second demand usually follows. The one thing that settles your next move is to stop responding and preserve everything: profile name, message text, payment address and timestamps. That record is what a platform report and a police report are built on, and it costs you nothing to gather before you decide anything else.","redFlags":["A payment demand in cryptocurrency, gift cards or a peer-to-peer transfer app","A countdown of hours before material is supposedly sent to your contacts","A refusal to show clear proof, or proof that is only a blurred or cropped thumbnail","Contact arriving off-platform by email or text rather than through the app","Names of relatives or an employer that are visible on your public social profiles","A promise to delete everything permanently once you pay"],"whatToDoNow":["Stop replying. Do not pay, do not negotiate and do not send any further images or information.","Screenshot the whole conversation including the sender profile, any payment address and the timestamps, and save it somewhere outside the app.","Block the sender and report the account through the platform's in-app reporting route.","Lock down your social accounts by setting them to private and reviewing who can see your friend or follower lists.","Report it to your local police or national cybercrime reporting service, and if the person may be under 18 report it to a child protection hotline as well.","Tell one person you trust so you are not carrying the deadline alone, and consider warning close family that a fake message may arrive."],"faq":[{"question":"Should I pay just to make it stop?","answer":"Investigators and support organisations consistently advise against paying, because payment usually leads to further demands rather than an ending. There is also no way to confirm anything is deleted, since a file can be copied any number of times. If you have already paid, you are not out of options: keep the receipt and transaction details, report it to your bank or the payment provider immediately, and include the payment in your police report."},{"question":"Is my OnlyFans account itself compromised if they have screenshots?","answer":"Not necessarily. Anyone who subscribes can screenshot what they see, so a real screenshot does not mean anyone broke into your account. Many of these messages contain no genuine material at all. Either way it is worth checking your account for logins or devices you do not recognise, changing the password, enabling two-factor authentication, and doing the same for the email address linked to the account."}],"lastReviewed":"2026-07-19"},{"slug":"is-this-turo-host-message-asking-me-to-pay-outside-the-app-real","url":"https://scamencyclopedia.org/questions/is-this-turo-host-message-asking-me-to-pay-outside-the-app-real","question":"A Turo host is asking me to pay by bank transfer or Zelle instead of through the app. Is that real?","shortAnswer":"That request is a scam signal, not a normal Turo process. Turo is a real, legitimate company, but anyone can message you claiming to be a host, and payment moved outside the app leaves you with no booking and no protection. Keep every payment inside the official app.","explanation":"The pattern is simple and it works because it sounds like a favour. Someone lists a car at an attractive daily rate, or messages you about a listing you enquired about, then explains that the platform takes a cut, that their account is having a verification issue, or that they can give you a discount if you settle directly. They ask for a bank transfer, a payment app, gift cards, or cryptocurrency, and they often add time pressure by saying another renter is waiting. Once the money leaves by those routes it is generally gone, and because no booking exists in the app there is nothing to dispute and no coverage attached to the trip. It is convincing because the conversation may genuinely start on the platform before moving to text or a messaging app, so the early part feels legitimate. The check that settles it: open the Turo app yourself and confirm a real, paid booking exists under your trips. If the only proof of your rental is a message thread and a payment receipt from your bank, you do not have a booking.","redFlags":["Any request to pay by bank transfer, Zelle, Cash App, gift cards, or cryptocurrency","A discount offered specifically for paying outside the platform","Pressure to decide immediately because someone else supposedly wants the car","The conversation moving quickly to text, WhatsApp, or email away from the app","A price well below comparable cars for the same dates and location","Photos or a listing that cannot be found when you search the app yourself"],"whatToDoNow":["Stop and do not send any payment outside the app, even a deposit or hold","Open the official Turo app yourself and check whether a confirmed booking exists under your trips","Search for the same listing inside the app rather than using a link you were sent","Report the message and the account through the reporting option in the app","If you already paid, contact your bank or payment provider immediately and ask about a reversal or dispute, and keep screenshots of the conversation","Report the loss to your local police or national fraud reporting service so you have a reference number"],"faq":[{"question":"The host said Turo would refund the extra amount later. Is that a thing?","answer":"No. A platform cannot process a refund for money that never passed through it, and no legitimate host would offer a refund route that depends on you paying by transfer first. Treat that promise as part of the pressure. If you are unsure, open the app yourself and use the in-app support option to ask, rather than replying to the person making the promise or calling any number they gave you."},{"question":"I already sent the money. Is there anything I can do?","answer":"There may be, and it is worth acting quickly. Contact your bank or payment provider the same day, say clearly that you were deceived, and ask what recovery options exist for that payment type. Card payments usually have more options than transfers or crypto. Report the account inside the app and file a report with your local fraud reporting service. Nobody can promise recovery, but the sooner you report, the more options stay open."}],"lastReviewed":"2026-07-19"},{"slug":"is-this-turo-damage-claim-demand-a-scam","url":"https://scamencyclopedia.org/questions/is-this-turo-damage-claim-demand-a-scam","question":"I got a message demanding payment for damage after my Turo trip. Is this a scam?","shortAnswer":"It might be genuine, but a demand that arrives by text or email and asks you to pay a person directly is a common scam shape. Real damage claims are handled inside Turo, which is a legitimate company. Verify by opening the app yourself before paying anything.","explanation":"After a trip ends you are primed to expect follow-up, and that is exactly what the scam uses. A message arrives claiming a scratch, a scuff, a warning light, or a cleaning issue was found after you returned the car. It may include photos, an invoice-styled attachment, and a deadline, and it often threatens to escalate to a claim, to your insurance, or to collections if you do not pay quickly. The payment is requested by transfer, payment app, or a link in the message. It is convincing because the trip was real, the timing is right, and the photos may even be of a car that looks like the one you drove. Genuine claims raise and resolve through the platform, with the record visible in your account, and a person on the other end does not get to invoice you directly. The check that settles it: open the Turo app yourself, without using any link or number from the message, and look for a claim recorded against that trip. No claim in the app means no claim to pay.","redFlags":["Payment demanded by transfer, payment app, gift cards, or a link in the message","A short deadline paired with threats of insurance, collections, or legal action","Photos that show damage but no clear tie to your trip dates or the exact vehicle","Contact coming only by text or email rather than appearing in your account","A request to keep the matter between the two of you and settle privately","Amounts that change if you push back or hesitate"],"whatToDoNow":["Do not pay and do not click any link or call any number in the message","Open the official Turo app yourself and check the trip for any recorded claim or charge","Look at your own trip photos and the timestamps from pickup and return, and save them","Reply only through the in-app message thread if you respond at all, and keep it factual","Report the message and the sender through the reporting option in the app","If you already paid, contact your bank or payment provider the same day and ask about a dispute, and file a report with your local fraud reporting service"],"faq":[{"question":"What if the damage claim turns out to be real?","answer":"Real claims still go through the platform, not through a private payment. If a claim exists in your account, respond inside the app, submit your pickup and return photos, and let the process run. Outcomes are decided by the platform and any insurer involved, not by the person messaging you. Paying someone directly does not close a real claim, and it can leave you paying twice."},{"question":"Should I take photos every time to protect myself?","answer":"Yes, and it is the single most useful habit here. Photograph or video the whole exterior, the wheels, the interior, the fuel or charge level, and the dashboard at both pickup and return, with timestamps intact. Upload them through the app where the platform can see them. Timestamped evidence tied to the trip is what settles disputes, and it makes an invented claim very hard to sustain against you."}],"lastReviewed":"2026-07-19"},{"slug":"how-do-i-get-my-money-back-after-a-zelle-scam","url":"https://scamencyclopedia.org/questions/how-do-i-get-my-money-back-after-a-zelle-scam","question":"How do I get my money back after a Zelle scam?","shortAnswer":"Zelle payments are designed to be instant and final, so recovery is difficult — but report to your bank immediately, as authorized-push-payment rules may apply in some cases. Visit /recovery for a step-by-step action plan.","explanation":"Zelle is a peer-to-peer payment network built into most major U.S. bank apps. Because transfers settle within seconds and the funds land directly in another person's bank account, there is no built-in recall mechanism like a credit-card chargeback. If you authorized the payment yourself — even under false pretenses — banks historically treated this as a user error rather than an unauthorized transaction.\n\nHowever, regulatory pressure has pushed many banks to expand their reimbursement policies. If you were tricked by a scammer impersonating your bank, government agency, or utility company, your bank may now classify the transfer as an 'imposter scam' and reimburse you — but this varies by institution and is not guaranteed. Document everything: the recipient's phone number or email, timestamps, and all communications with the scammer.\n\nContact your bank's fraud department as soon as possible — the same day if you can. Ask them to file a claim and request the case be reviewed under the bank's scam reimbursement policy. Provide screenshots of any messages and note that you were deceived into authorizing the payment rather than willingly gifting money.\n\nAlso file a complaint with the Consumer Financial Protection Bureau (CFPB) and the FTC at ReportFraud.ftc.gov. If the scam involved identity fraud or impersonation, report it to your local police as well. A police report strengthens your case with the bank.","redFlags":["Urgency: told you must send money 'right now' or lose your account or prize","Impersonation: caller claimed to be from your bank, the IRS, or Social Security","Instructions to pay via Zelle to 'protect' your own funds","Stranger asking for Zelle payment for an online purchase with no receipt","Person asked you to send multiple payments to 'test' the system","Payment request came from someone you met only online"],"whatToDoNow":["Call your bank's fraud line immediately and report the transfer as a scam","Ask the bank to contact Zelle's network to attempt a recall (rarely succeeds but worth requesting)","File a complaint with the CFPB at consumerfinance.gov/complaint","Report to the FTC at ReportFraud.ftc.gov","File a local police report, especially if impersonation was involved","Change your bank login password and enable two-factor authentication","Visit /recovery for a full checklist of next steps"],"faq":[{"question":"Can Zelle reverse a payment once it is sent?","answer":"Zelle generally cannot reverse completed payments. The only exception is if you sent money to the wrong person by mistake (typo in phone number) and that person has not yet enrolled — in that case the funds may be recoverable. For scam-related transfers, your only recourse is your bank's own reimbursement policy."},{"question":"Will my bank reimburse me for a Zelle scam?","answer":"Many large banks now reimburse customers who were deceived by impersonation scams via Zelle, but policies differ. Contact your bank directly, file a formal fraud claim, and escalate to a supervisor if the first agent declines."},{"question":"What if the scammer is in a different country?","answer":"Zelle is a domestic U.S. service, so funds end up in a U.S. bank account. Law enforcement can subpoena that account, but international recovery is still rare. Filing reports with the FBI's IC3 at ic3.gov is recommended."}],"lastReviewed":"2026-06-10"},{"slug":"can-i-get-money-back-after-a-gift-card-scam","url":"https://scamencyclopedia.org/questions/can-i-get-money-back-after-a-gift-card-scam","question":"Can I get my money back after paying a scammer with gift cards?","shortAnswer":"Gift card payments are almost impossible to reverse — once the PIN is shared, the funds are gone. However, report to the issuer immediately; some retailers can freeze unredeemed cards.","explanation":"Gift cards are one of the top payment methods demanded by scammers precisely because they are near-impossible to trace or recall. When a scammer asks you to buy Google Play cards, iTunes cards, Steam cards, or any other gift card and read them the numbers, they instantly drain the balance and launder it across multiple accounts.\n\nIf you call the gift card issuer (for example, Google, Apple, or Steam) within minutes of sharing the PIN, there is a small chance the balance has not yet been redeemed. Ask them to freeze the card immediately and open a fraud case. Keep your receipts and packaging — the card numbers are your only proof of purchase.\n\nRetailers like Target, Walmart, and CVS have begun training staff to flag suspicious bulk gift-card purchases and some have installed checkout prompts asking whether the buyer is being pressured by a scammer. If you were recently at a store and the purchase was flagged, speak with the store manager, as some retailers have cooperated with law enforcement to track large-scale scam rings.\n\nFile a report with the FTC at ReportFraud.ftc.gov and select 'gift card scam' — the FTC actively pursues gift-card-facilitated fraud and shares data with retailers. Your state attorney general's office is another avenue. While direct reimbursement is unlikely, your report helps protect others.","redFlags":["Government agency, utility, or 'Microsoft support' demanding payment in gift cards","Being told to keep the purchase secret from store employees","Asked to photograph the back of cards and text the numbers","Multiple stores visited to stay under per-store purchase limits","Caller stays on the phone while you buy the cards","Urgency tied to avoiding arrest, deportation, or account suspension"],"whatToDoNow":["Call the gift card issuer's fraud line immediately and report unredeemed cards","Keep all receipts and card packaging as evidence","Report to the FTC at ReportFraud.ftc.gov","Tell the store manager — some retailers have fraud programs","File a police report for your records","Visit /recovery for additional steps"],"faq":[{"question":"Which gift card issuers have the best fraud response?","answer":"Google and Apple have dedicated gift-card fraud teams and have improved response times after FTC pressure. Steam and other gaming cards tend to be harder to recover. Always call the number on the back of the card."},{"question":"Why do scammers always ask for gift cards?","answer":"Gift cards are anonymous, instantly redeemable globally, and have no chargeback mechanism. The scammer never needs a bank account — they sell the PINs on secondary markets within minutes."}],"lastReviewed":"2026-06-10"},{"slug":"can-i-reverse-a-wire-transfer-sent-to-a-scammer","url":"https://scamencyclopedia.org/questions/can-i-reverse-a-wire-transfer-sent-to-a-scammer","question":"Can I reverse a wire transfer I sent to a scammer?","shortAnswer":"Wire transfers can sometimes be recalled within the first few hours if the bank acts quickly — call your bank immediately. After 24 hours the chance drops sharply.","explanation":"A domestic wire transfer typically settles the same business day; an international wire may settle in one to two business days. That settlement window is the only practical opportunity to recover funds. If you realize you have been scammed, call your bank's wire department — not the general customer service line — within minutes and ask them to initiate a wire recall.\n\nYour bank will contact the receiving bank and request a hold and reversal. Success depends on whether the funds are still in the receiving account and whether the receiving bank cooperates. In fraud cases, receiving banks are generally required to cooperate under federal banking regulations, but if the scammer has already withdrawn or moved the money, there is nothing to recall.\n\nFor international wires, the FBI's IC3 and the Financial Crimes Enforcement Network (FinCEN) both accept reports. Large-scale international wire fraud may qualify for the FBI's SWIFT-based clawback program, but this requires rapid reporting and is not a standard consumer service. Time is critical — every hour the money moves further away.\n\nFile reports with the FTC, the FBI's IC3 at ic3.gov, and your state attorney general. If the wire was over $10,000 and you believe it was sent under duress or deception, your bank may have a Suspicious Activity Report (SAR) obligation that can assist law enforcement investigations.","redFlags":["Unsolicited request to wire money to a new or foreign account","Business email compromise: CEO or vendor instructs a wire to an 'updated' account","Real estate closing wire instructions changed at the last minute by email","Romance partner asks for a wire to cover an emergency","Investment platform asks you to wire to a personal account","High pressure to complete the transfer before end of business day"],"whatToDoNow":["Call your bank's wire department immediately — ask for a wire recall","If it was a business email compromise, also call the supposed sender to verify","File a report with the FBI's IC3 at ic3.gov","Report to the FTC at ReportFraud.ftc.gov","Contact your state attorney general's consumer protection division","Preserve all emails, instructions, and wire confirmation slips","Ask your bank to file a SAR if fraud is suspected"],"faq":[{"question":"How long do I have to request a wire recall?","answer":"Speed matters enormously. Call within the first 30-60 minutes for the best chance. After 24 hours on a domestic wire or 48 hours on international, the practical window is largely closed."},{"question":"What is a wire recall and does it always work?","answer":"A wire recall is a formal request from your bank to the receiving bank to return the funds. It works only if the money is still sitting in the receiving account. Scammers often withdraw or chain-transfer funds within hours."}],"lastReviewed":"2026-06-10"},{"slug":"can-i-chargeback-a-credit-card-payment-to-a-scammer","url":"https://scamencyclopedia.org/questions/can-i-chargeback-a-credit-card-payment-to-a-scammer","question":"Can I do a chargeback on a credit card payment made to a scammer?","shortAnswer":"Yes — credit card chargebacks are one of the strongest consumer protections available. File a dispute with your card issuer promptly, citing fraud or non-delivery.","explanation":"Credit cards are the payment method most favorable to scam victims because of chargeback rights under the Fair Credit Billing Act (FCBA) in the U.S. and similar consumer-protection laws in other countries. A chargeback is a forced reversal of a charge initiated by your bank when you dispute a transaction.\n\nFor scam-related disputes, you typically cite one of two reasons: the merchant was fraudulent and the goods or services were never delivered, or the transaction was unauthorized (your card was used without permission). 'Item not received' and 'misrepresentation' are strong grounds. The dispute must generally be filed within 60 days of the statement date in the U.S., though many issuers allow up to 120 days.\n\nTo file, call the number on the back of your card or log into your card portal and select 'dispute a charge.' Provide all evidence: screenshots of what was promised, proof of no delivery, and any communications with the scammer. Your issuer will open an investigation and may issue a provisional credit while it is pending.\n\nBe aware that scammers sometimes use fake merchant names or process payments through legitimate-looking shells to complicate chargebacks. Also note that some services — like gift card purchases made with a credit card — are trickier to dispute because you did receive the cards, just the value was stolen afterward. In those cases, emphasize that you were deceived into making the purchase.","redFlags":["Merchant name on your statement does not match the business you paid","Charge appeared after you 'won' a prize or received a 'free trial' offer","Product or service never arrived after weeks of delay","Subscription you never agreed to keeps charging","Overseas merchant you don't recognize on a card statement","Someone used your card details to make purchases you did not authorize"],"whatToDoNow":["Log into your card account or call the number on the back to file a dispute","Choose 'fraud' or 'item not received' as the reason — explain you were deceived","Gather all evidence: screenshots, emails, receipts, and delivery tracking","Request a new card number if the scammer has your full card details","Monitor your account for additional unauthorized charges","Report to the FTC at ReportFraud.ftc.gov","Visit /recovery for more guidance"],"faq":[{"question":"How long does a credit card chargeback take?","answer":"Most issuers resolve disputes within 30 to 90 days. You may receive a provisional (temporary) credit within a few days while the investigation is open."},{"question":"Can the scammer fight the chargeback?","answer":"Yes — the merchant (or scammer acting as a merchant) can submit evidence to contest the dispute. This is called a rebuttal. Strong documentation on your side improves the odds of winning."},{"question":"What if my credit card dispute is denied?","answer":"You can escalate to your card network (Visa, Mastercard, Amex) for arbitration. You can also file a complaint with the CFPB, which often prompts issuers to reconsider."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-recover-money-lost-in-a-crypto-scam","url":"https://scamencyclopedia.org/questions/how-do-i-recover-money-lost-in-a-crypto-scam","question":"How do I recover money lost in a crypto scam?","shortAnswer":"Cryptocurrency payments are largely irreversible once confirmed on-chain. Focus on reporting to the FTC, FBI, and your exchange — and be wary of 'recovery scams' that target crypto victims.","explanation":"Cryptocurrency transactions are recorded on a public blockchain and are irreversible by design — there is no central authority that can rewind a confirmed transaction the way a bank can. This makes crypto the preferred payment rail for scammers worldwide. If you sent crypto to a scammer's wallet address, the funds cannot be clawed back through any technical mechanism.\n\nHowever, reporting is still valuable for multiple reasons. If you sent crypto from a regulated U.S. exchange such as Coinbase or Kraken, file a fraud report with that exchange immediately. Exchanges can sometimes freeze accounts associated with fraud if law enforcement requests it, and they are required to report suspicious activity. If your exchange wallet was hacked or you were tricked into connecting it to a malicious smart contract, the exchange may have insurance or reimbursement policies — check their terms.\n\nReport to the FBI's IC3 at ic3.gov, the FTC, and your state attorney general. The FBI's virtual asset team has had some success tracking and seizing crypto in high-profile cases, though individual recovery is rare. If the scam involved a fake investment platform, also report to the SEC or CFTC — both agencies pursue crypto fraud and have victim assistance programs.\n\nBe extremely cautious of so-called 'crypto recovery services' advertising online. Nearly all of them are follow-on scams that charge upfront fees and then disappear. Legitimate law enforcement does not charge you to investigate. No private company can reverse blockchain transactions.","redFlags":["Platform shows large fake profits but demands a 'tax' or 'fee' before withdrawal","New online friend or romance interest introduces you to a crypto investment platform","Customer support only reachable via Telegram or WhatsApp","Platform URL looks like a known exchange but has slight spelling differences","Promises of guaranteed daily returns of 5% or more","You are asked to recruit others for bonus rewards (pyramid structure)"],"whatToDoNow":["Report to your crypto exchange's fraud team immediately","File a report with the FBI's IC3 at ic3.gov","Report to the FTC at ReportFraud.ftc.gov","If it was an investment fraud, report to the SEC at sec.gov/tcr","Save the scammer's wallet address and all transaction IDs as evidence","Do NOT pay any recovery service that contacts you afterward","Visit /recovery for next steps"],"faq":[{"question":"Is there any legitimate way to recover stolen crypto?","answer":"Law enforcement agencies have seized and returned crypto in some high-profile cases. On-chain tracing firms such as Chainalysis work with law enforcement, not directly with consumers. Direct consumer recovery is very rare."},{"question":"What is a crypto recovery scam?","answer":"After losing money in a crypto scam, victims are often targeted again by fake 'recovery' services that promise to trace and retrieve funds for an upfront fee. These are secondary scams. If contacted by one, do not pay."},{"question":"Can I report anonymous crypto transactions?","answer":"Yes. Even though crypto is pseudonymous, wallet addresses, exchange KYC records, and on-chain patterns can all be used by investigators. Include all wallet addresses and transaction hashes in your report."}],"lastReviewed":"2026-06-10"},{"slug":"i-gave-a-scammer-my-bank-login-what-should-i-do","url":"https://scamencyclopedia.org/questions/i-gave-a-scammer-my-bank-login-what-should-i-do","question":"I gave a scammer my bank login credentials — what should I do?","shortAnswer":"Act immediately: call your bank's fraud line right now, change your password, and ask them to lock your account. Every minute counts when your login is compromised.","explanation":"Handing over bank login credentials — whether through a fake website, a phishing email, or a tech-support call — is one of the most serious account compromises you can experience. A scammer with your username and password can log in, transfer money, change your contact details so you stop receiving alerts, add themselves as a payee, and potentially take out loans against your name.\n\nCall your bank's 24-hour fraud or security line right now. Do not use any phone number the scammer gave you — look up the number on your card or the bank's official website. Ask them to lock your online banking access, reverse any unauthorized transactions, and issue you new account numbers if money has already moved. Request that they flag your account for elevated monitoring.\n\nIf you used the same password on other sites (email, PayPal, Amazon), change all of them immediately. Criminals who harvest credentials often sell them in bulk or test them across many services — this is called 'credential stuffing.' Enable two-factor authentication on every financial account. Use a unique, strong password for each site; a password manager makes this practical.\n\nCheck your credit reports at annualcreditreport.com for any new accounts opened in your name. Consider placing a free fraud alert or credit freeze with the three major bureaus — Equifax, Experian, and TransUnion — to prevent new credit from being opened. Report the incident to the FTC at IdentityTheft.gov for a personalized recovery plan.","redFlags":["Email or text claiming your account is 'suspended' with a link to log in","Tech support caller who asks to 'verify' your login over the phone","Pop-up warning you to call a number before your device is locked","Caller ID spoofed to show your bank's real number","Website URL that looks like your bank but has a subtle misspelling","Someone asking for a one-time passcode sent to your phone"],"whatToDoNow":["Call your bank's fraud line immediately using the number on your card","Ask the bank to lock your account and reverse unauthorized transactions","Change your banking password and enable two-factor authentication","Change the same or similar password on all other accounts","Check your credit report at annualcreditreport.com","Place a fraud alert or credit freeze with all three credit bureaus","Report to IdentityTheft.gov for a personalized recovery plan"],"faq":[{"question":"Can the bank recover money the scammer transferred after getting my login?","answer":"Transactions made using your own credentials are typically treated as authorized unless you report them quickly. Many banks do reimburse victims of account takeover fraud — especially if you report before the money leaves the banking system."},{"question":"What is two-factor authentication and should I use it?","answer":"Two-factor authentication (2FA) requires a second proof of identity — usually a one-time code sent to your phone — in addition to your password. It stops most account takeover attempts even when your password is stolen. Enable it on every financial account."}],"lastReviewed":"2026-06-10"},{"slug":"i-gave-a-scammer-my-otp-one-time-passcode","url":"https://scamencyclopedia.org/questions/i-gave-a-scammer-my-otp-one-time-passcode","question":"I gave a scammer a one-time passcode (OTP) sent to my phone — what now?","shortAnswer":"Contact your bank or the relevant service immediately — the scammer may have just used that code to access or change your account. Change your password right away.","explanation":"A one-time passcode (OTP) is the second factor of authentication that protects your account even when your password is known. When a scammer tricks you into reading that code aloud — often by impersonating your bank, phone carrier, or an online service — they are bypassing the strongest layer of your account security in real time.\n\nThe moment you realize what happened, call your bank or the relevant service's fraud line and explain that you shared an OTP with an unauthorized person. They can check whether the code was used to change your password, add a new phone number, transfer money, or access sensitive data. Act fast — OTP-based account takeovers typically take less than 60 seconds once the code is obtained.\n\nChange your account password immediately from a trusted device. If the scammer has already changed your email or phone number associated with the account, you will need to use account recovery options and escalate to the company's trust and safety team. Collect any confirmation emails you received during the period — these may show what actions were taken.\n\nReport the incident to the FTC and, if financial loss occurred, to the FBI's IC3. If your phone number itself was ported away (SIM swap), contact your carrier urgently. A SIM swap means your phone number now routes to the scammer's device, giving them all future OTPs and call-based authentication.","redFlags":["Caller claims to be 'verifying your identity' and asks you to read back a code","Text arrives for an action you did not initiate, followed by a call asking for it","Someone urgently needs 'just the six-digit code' to 'protect' your account","The number calling you matches your bank's caller ID exactly (spoofing)","Caller instructs you to 'never share' the code but then asks for it anyway"],"whatToDoNow":["Call your bank or service's fraud line immediately — explain you shared an OTP","Change your account password from a trusted, clean device","Check your account for unauthorized changes (new email, phone, payees, transfers)","Contact your phone carrier if you suspect a SIM swap","Enable app-based authenticator (not SMS) for higher-security 2FA going forward","Report to the FTC at ReportFraud.ftc.gov"],"faq":[{"question":"Can a scammer do anything with just an OTP?","answer":"Yes — a scammer who already has your username and password only needs the OTP to complete a full account login or password reset. They can then lock you out and take over completely within seconds."},{"question":"What is a SIM swap and how do I know if it happened to me?","answer":"A SIM swap is when a scammer convinces your carrier to transfer your phone number to their SIM card. Signs include suddenly losing cell service, calls and texts not arriving, or your carrier asking you to re-activate your SIM."}],"lastReviewed":"2026-06-10"},{"slug":"should-i-report-to-my-bank-or-the-police-first","url":"https://scamencyclopedia.org/questions/should-i-report-to-my-bank-or-the-police-first","question":"Should I report a scam to my bank or the police first?","shortAnswer":"Call your bank first if money is still in transit or your account is at risk — the bank can freeze funds while police reports take time. Then file the police report.","explanation":"When you have just been scammed, the order of actions matters. Your bank or payment provider has the fastest ability to freeze funds, block cards, and initiate recalls — but only within a narrow window. A police report, while important for documentation and potential prosecution, does not stop money from moving. Prioritize the action that protects the most money in the shortest time.\n\nIf you sent money via wire, ACH, or Zelle in the last few hours, call your bank's fraud line first. Ask them to initiate a recall or hold the receiving account. Banks can sometimes act on a same-day basis; police investigations take days or weeks minimum. If your card was fraudulently charged, call to cancel the card and dispute the charge — again, bank first.\n\nOnce your immediate financial exposure is addressed, file a police report at your local police station or through their online reporting portal. A police report number is useful for: filing insurance claims, proving identity theft to creditors, and strengthening your case with the bank. Some bank fraud departments require a police report number before processing a reimbursement claim.\n\nAfter the police report, file with the FTC at ReportFraud.ftc.gov, the FBI's IC3 if the loss is substantial or the scam is internet-based, and any relevant sector regulator (SEC for investment fraud, FCC for phone scams, etc.). Keeping copies of all your reports in one place will simplify follow-up.","redFlags":["You just sent money and are unsure whether it has settled yet","Your card or bank account shows charges you did not make","Scammer has your account credentials and may still be active in your account","You received instructions from the scammer on what to tell the bank","The scammer warned you not to contact police or your bank"],"whatToDoNow":["Call your bank's fraud line first if money is still in transit or in danger","Ask for a wire recall, card cancellation, or account freeze as appropriate","Then file a police report — you will need the report number","File with the FTC at ReportFraud.ftc.gov","If internet-based or large loss, file with FBI's IC3 at ic3.gov","Keep copies of all reports for future reference","Visit /report-a-scam for a full list of reporting agencies"],"faq":[{"question":"Will the police actually investigate my scam case?","answer":"Local police often lack resources to investigate online scams, especially international ones. However, your report contributes to pattern data. For losses over a few thousand dollars, the FBI's IC3 and specialized state cybercrime units are more likely to act."},{"question":"Do I need a police report to file a bank dispute?","answer":"Not always — many banks accept fraud disputes without one. However, having a police report number strengthens your case and is sometimes required for larger reimbursements or identity theft recovery."}],"lastReviewed":"2026-06-10"},{"slug":"i-paid-a-scammer-with-cash-app-can-i-get-it-back","url":"https://scamencyclopedia.org/questions/i-paid-a-scammer-with-cash-app-can-i-get-it-back","question":"I paid a scammer with Cash App — can I get my money back?","shortAnswer":"Cash App payments are generally instant and non-reversible, but you can report the transaction inside the app and contact Cash App Support — some cases qualify for reimbursement under their fraud policy.","explanation":"Cash App, like Venmo and Zelle, is designed for instant peer-to-peer transfers where both parties are willing. Unlike a bank wire, there is no intermediary bank that can be called to recall the transfer. Once a Cash App payment is accepted, the recipient has the money.\n\nThat said, Cash App does have a dispute process. Open the app, tap the clock icon to find the transaction, tap the three-dot menu, and select 'Need Help & Cash App Support.' Report the payment as a scam. Cash App will investigate and, in some cases involving confirmed fraud, may refund the amount. The more evidence you can provide — screenshots of the conversation, the scammer's Cashtag or phone number, and a description of what was promised — the stronger your case.\n\nYou can also file a dispute if the payment was sent in connection with a merchant purchase (not peer-to-peer). Cash App has a Cash Card for debit transactions, and charges made with the Cash Card at merchants follow different dispute rules similar to a debit card dispute.\n\nFile a report with the FTC at ReportFraud.ftc.gov and the Internet Crime Complaint Center at ic3.gov. These filings create a paper trail that can help if law enforcement investigates. If the scammer was impersonating Cash App itself (a common phishing scam), also forward the scam messages to Cash App's phishing email address listed on their support page.","redFlags":["Seller insists on Cash App only and refuses other payment methods","Buyer 'accidentally' overpays and asks you to return the difference","Offer too good to be true — brand-new item at a steep discount for quick Cash App payment","Person met on Facebook Marketplace or Craigslist pushing Cash App urgently","Account claiming to be Cash App support contacts you asking to send a 'test' payment","Someone sends you money unsolicited and claims it was a mistake"],"whatToDoNow":["Open Cash App and report the transaction via the in-app support flow","Provide screenshots and details of the scam to Cash App Support","File a report with the FTC at ReportFraud.ftc.gov","File with the FBI's IC3 at ic3.gov if the amount is significant","Block the scammer's Cashtag and report their account in-app","Monitor your linked bank account for further unauthorized activity"],"faq":[{"question":"What is the Cash App overpayment scam?","answer":"A scammer sends you more money than agreed and then asks you to send back the difference. The original payment is later reversed (it was made with a stolen card), but your 'refund' is real — leaving you out of pocket."},{"question":"Does Cash App have buyer protection like PayPal?","answer":"Cash App does not offer the same level of buyer protection as PayPal Goods and Services. Personal payments on Cash App have no built-in purchase protection. For buying items from strangers, PayPal G&S is safer."}],"lastReviewed":"2026-06-10"},{"slug":"i-gave-a-scammer-remote-access-to-my-computer","url":"https://scamencyclopedia.org/questions/i-gave-a-scammer-remote-access-to-my-computer","question":"I gave a scammer remote access to my computer — what should I do?","shortAnswer":"Disconnect from the internet immediately, then run antivirus software, change all passwords from a different device, and check your bank accounts for unauthorized activity.","explanation":"Remote access scams typically start as fake tech-support calls — someone claiming to be from Microsoft, Apple, your internet provider, or an antivirus company tells you your device has a problem and asks you to install software like AnyDesk, TeamViewer, or Quick Assist. Once you grant access, they can see everything on your screen, install malware, and harvest your saved passwords, financial data, and personal documents.\n\nThe first thing to do is cut the connection: unplug the ethernet cable or turn off WiFi on the affected computer. Then end the remote session through your operating system's task manager or by closing the remote access application. Do not simply close the chat window — make sure the remote software itself is fully terminated.\n\nFrom a separate, clean device (phone, tablet, or another computer), change the passwords for your email, online banking, and any other accounts whose credentials were stored or visible on the compromised machine. Enable two-factor authentication wherever possible. If you suspect the scammer installed malware, run a full scan with reputable antivirus software (Windows Defender is built into Windows and adequate for initial detection). Consider having a professional technician inspect the machine before using it for sensitive tasks again.\n\nCheck your bank accounts and credit card statements for unauthorized charges. If you see any, contact your bank immediately. Call your bank's fraud line even if you don't see charges yet — proactively flag the account. Report the incident to the FTC at ReportFraud.ftc.gov and to your state attorney general.","redFlags":["Unsolicited call claiming your computer is infected or sending error signals","Pop-up warning with a phone number telling you to call immediately","Caller asks you to install AnyDesk, TeamViewer, Quick Assist, or similar tools","Agent navigates to your bank account 'to verify' the problem","Caller shows you 'evidence' of infection using Windows Event Viewer entries","Request to buy gift cards or wire money to 'pay for the repair service'"],"whatToDoNow":["Disconnect the computer from the internet immediately","End the remote access session and uninstall the remote software","From a different device, change passwords for email, banking, and other accounts","Run a full antivirus scan on the affected computer","Call your bank to flag the account for potential fraud","Check all financial accounts for unauthorized activity","Report to the FTC at ReportFraud.ftc.gov"],"faq":[{"question":"Can the scammer still access my computer after I disconnected?","answer":"Not through the remote session itself, but if they installed persistent malware, they may have a backdoor. Run antivirus software and consider a professional inspection. Reinstalling the operating system is the safest option for a high-risk compromise."},{"question":"Did the scammer steal my saved passwords?","answer":"Possibly — scammers often open browser settings to export saved passwords while they have access. Change all important passwords from a different device as a precaution, especially email and banking."}],"lastReviewed":"2026-06-10"},{"slug":"i-sent-money-to-a-romance-scammer-what-now","url":"https://scamencyclopedia.org/questions/i-sent-money-to-a-romance-scammer-what-now","question":"I sent money to a romance scammer — what should I do now?","shortAnswer":"Stop all contact immediately, secure your accounts, and report to the FTC and FBI. While financial recovery is difficult, reporting helps investigators and may protect others.","explanation":"Romance scams involve months or even years of emotional manipulation before a financial request is made. By the time money is sent, many victims feel a genuine emotional bond with a person who does not exist. Recognizing this as a scam can be painful — but stopping the financial loss and protecting your identity are the immediate priorities.\n\nCut off all contact with the person. Block them on every platform where you communicated. This is difficult but necessary — the scammer may continue to contact you with new stories (needing bail money, a sick relative, a final payment) if the channel remains open. Do not send any more money, no matter how compelling the reason given.\n\nIf you shared financial account details, government ID, or passport photos during the relationship, treat your identity as potentially compromised. Contact your bank to discuss the extent of what was shared. Consider placing a fraud alert on your credit file. If the scammer has your Social Security Number or similar national ID, the risk of identity theft is significant.\n\nReport to the FTC at ReportFraud.ftc.gov and the FBI's IC3 at ic3.gov — romance scam reports are actively worked by the FBI's cyber division and have led to arrests. The FTC's database also alerts platforms where scammers operate. Check your bank's policy on romance scam reimbursement — some now treat these as imposter scams and may partially reimburse you.","redFlags":["Person you met online claims to be abroad working (military, oil rig, doctor on deployment)","Relationship escalates very quickly with declarations of love within days or weeks","Person always has an excuse for why they cannot video call or meet in person","First financial request is for a relatively small emergency to 'test the water'","Profile photos are very attractive and seem like stock or model images","Person discourages you from telling friends or family about the relationship"],"whatToDoNow":["Stop all contact and block the person on every platform","Do not send any further money regardless of the reason given","Contact your bank to report any suspicious transfers and discuss what information was shared","Place a fraud alert on your credit if you shared personal identity documents","Report to the FTC at ReportFraud.ftc.gov","File with the FBI's IC3 at ic3.gov","Consider speaking with a counselor — the emotional impact is real and valid"],"faq":[{"question":"Is the person I was talking to a real person at all?","answer":"Romance scammers typically steal photos from real people's social media profiles. The person in the pictures exists, but has nothing to do with the scammer. You can do a reverse image search to confirm the photos appear elsewhere online."},{"question":"My bank says the transfer was authorized — can I still get it back?","answer":"Some banks classify romance scams as imposter fraud and may reimburse under their scam reimbursement policy, especially if the scammer impersonated a real person or institution. File a formal fraud claim and ask for a review under the bank's scam policy."}],"lastReviewed":"2026-06-10"},{"slug":"i-paid-by-bank-transfer-to-a-scammer-can-i-get-it-back","url":"https://scamencyclopedia.org/questions/i-paid-by-bank-transfer-to-a-scammer-can-i-get-it-back","question":"I paid by bank transfer to a scammer — can I get my money back?","shortAnswer":"Contact your bank immediately and ask for a payment recall — the sooner you act, the better the chance of recovery. Report to the FTC and, if needed, your country's banking regulator.","explanation":"A direct bank transfer (ACH in the U.S., Faster Payments or BACS in the UK) moves money between accounts without a card network. Recovery rules differ slightly from wire transfers and credit cards, but the principle is the same: speed is critical.\n\nIn the U.S., ACH transactions can take one to two business days to settle, and there is a brief window during which your bank can recall or return the payment. Call your bank's fraud line as soon as possible and explain that you were deceived into authorizing the transfer. Use the phrase 'authorized push payment fraud' — regulators in many countries now require banks to treat this category more seriously.\n\nIn the UK, the Authorised Push Payment (APP) scam reimbursement scheme (under the Payment Systems Regulator) requires most banks to reimburse victims of APP fraud unless the victim acted with gross negligence. If you are in the UK, contact your bank, then raise a complaint with the Financial Ombudsman Service if the bank refuses. UK victims should also report to the Report Fraud service (formerly Action Fraud).\n\nIn Australia, report to the Australian Competition and Consumer Commission's Scamwatch, and contact your bank about the ePayments Code. Regardless of country, document everything: screenshots of any website or messages that convinced you to pay, the account details you sent to, and the exact date and time.","redFlags":["Online marketplace seller requests bank transfer instead of a secure payment platform","Rental property requires a bank transfer deposit before you view the property","Fake invoice sent to your business with bank details changed from a known supplier","Caller claiming to be HMRC, ATO, or IRS demanding immediate bank transfer","Job offer requiring a bank transfer to 'set up your equipment fund'","Investment platform that only accepts direct bank transfers"],"whatToDoNow":["Call your bank's fraud line immediately — ask for a payment recall or reversal","Mention 'authorized push payment fraud' to trigger the relevant policy review","Report to the FTC (US), Report Fraud (UK), or Scamwatch (AU) as applicable","Keep all evidence: screenshots, emails, the bank account details you paid to","If in the UK, escalate to the Financial Ombudsman if your bank refuses to reimburse","Visit /recovery for a step-by-step guide"],"faq":[{"question":"What is 'authorized push payment fraud' (APP fraud)?","answer":"APP fraud occurs when a scammer tricks you into willingly authorizing a bank transfer to them. Because you technically 'authorized' the payment, banks historically refused to reimburse. Regulators now increasingly require banks to share responsibility and reimburse victims."},{"question":"Is a bank transfer safer than a wire transfer?","answer":"For domestic payments the terms are sometimes used interchangeably, but ACH (bank-to-bank) transfers in the U.S. have slightly longer settlement windows that can help with recalls. Wire transfers are faster and harder to recall."}],"lastReviewed":"2026-06-10"},{"slug":"i-shared-my-id-documents-with-a-scammer","url":"https://scamencyclopedia.org/questions/i-shared-my-id-documents-with-a-scammer","question":"I shared my ID documents with a scammer — what should I do?","shortAnswer":"Report to the FTC's IdentityTheft.gov immediately, place a fraud alert on your credit file, and notify relevant agencies. Document fraud may take months to surface.","explanation":"Sharing government-issued identity documents — passport, driver's license, Social Security card, or national ID — with a scammer creates a long-term identity theft risk. Scammers use these documents to open credit accounts, take out loans, file fraudulent tax returns, apply for government benefits, or create entirely new synthetic identities.\n\nStart by visiting IdentityTheft.gov (run by the FTC) to get a personalized recovery plan and report the theft. This is the U.S. government's official identity theft resource and creates an official record. Place a fraud alert with one of the three major credit bureaus (Equifax, Experian, or TransUnion) — the bureau you contact is required to notify the others. A fraud alert makes it harder for scammers to open new accounts in your name.\n\nFor stronger protection, place a security freeze (also called a credit freeze) with all three bureaus. A freeze completely blocks new credit applications until you lift it, and it is free under federal law. If your Social Security Number was shared, also consider placing a self-lock on your SSN through the IRS's Identity Protection PIN program, which prevents fraudulent tax returns from being filed.\n\nIf your passport or driver's license was shared, notify the issuing agency — the Department of State for passports, your state DMV for driver's licenses. Report the incident to your local police and keep the report number. Monitor your credit reports monthly at annualcreditreport.com for the next year.","redFlags":["Employer, landlord, or 'government official' asks for document photos via text or email","Online loan application requesting both sides of your ID and a selfie holding it","Romance or online relationship asking for ID to 'verify your identity' before meeting","Job posting asking for copies of ID as part of a pre-employment form","Lottery 'prize claim' requiring ID documents to 'release funds'","Rental platform outside a trusted site requesting ID before a viewing"],"whatToDoNow":["Visit IdentityTheft.gov and report the incident for a personalized plan","Place a fraud alert with one credit bureau (they must notify the others)","Place a security freeze with all three credit bureaus: Equifax, Experian, TransUnion","Apply for an IRS Identity Protection PIN at irs.gov/identity-theft-central","Report to your local police and keep the report number","Notify the issuing agency if a passport or driver's license was shared","Monitor credit reports monthly at annualcreditreport.com"],"faq":[{"question":"What can a scammer do with a photo of my driver's license?","answer":"A photo of your driver's license contains your full name, address, date of birth, and ID number. This is enough to open certain financial accounts, take over existing ones, pass identity verification on some platforms, and commit benefit fraud."},{"question":"How quickly will I see fraud if my ID was used?","answer":"Identity fraud from document theft can appear weeks, months, or even years later. Scammers often sell batches of stolen IDs. Regular credit monitoring is essential for catching new fraudulent accounts early."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-get-money-back-after-an-online-shopping-scam","url":"https://scamencyclopedia.org/questions/how-do-i-get-money-back-after-an-online-shopping-scam","question":"How do I get my money back after an online shopping scam?","shortAnswer":"File a chargeback with your credit or debit card issuer if you paid by card — this is usually your strongest option. If you paid via PayPal or a similar service, open a dispute there first.","explanation":"Online shopping scams fall into two broad categories: fake stores that take your money and send nothing (or send a cheap knockoff), and real-looking listings on marketplaces where the seller disappears after payment. Recovery options depend almost entirely on how you paid.\n\nCredit card is the best outcome — file a chargeback under 'item not received' or 'not as described.' Your issuer will dispute the charge with the merchant's acquiring bank. Provide screenshots of the product listing, your order confirmation, and any communications with the seller. Most issuers resolve these within 60 days, and many issue provisional credit while investigating.\n\nDebit card chargebacks follow similar rules but are governed by the Electronic Funds Transfer Act rather than the FCBA. The dispute window is narrower and provisional credit is less automatic. Act within 60 days of the statement date.\n\nPayPal Buyer Protection covers most goods transactions made through PayPal's checkout — open a dispute in the Resolution Center within 180 days. For transactions on major marketplaces like eBay, Etsy, or Amazon, use the platform's built-in dispute process first, then escalate to your payment method if the platform's process fails.\n\nIf you paid by bank transfer, Zelle, or Cash App directly to the seller, your options are limited (see those specific guides). Always prefer paying through a protected method for online purchases.","redFlags":["Price is dramatically lower than the same item on major retailers","Website was created very recently (check WHOIS) and has no physical address","No returns policy listed or returns address is overseas","Payment only accepted via Zelle, Cash App, cryptocurrency, or wire transfer","Reviews are all five stars from accounts with no purchase history","Seller rushes the sale and pressures you to complete before 'stock runs out'"],"whatToDoNow":["File a dispute with your credit or debit card issuer immediately","If paid via PayPal, open a dispute in the Resolution Center","If via a marketplace, use the platform's buyer protection program","Report the fake store to the FTC at ReportFraud.ftc.gov","Report to the marketplace where you found the listing","Check for reviews of the store on scam-reporting sites"],"faq":[{"question":"The website I bought from has disappeared — can I still get a refund?","answer":"If you paid by credit or debit card, yes — the chargeback goes through the card network, not the merchant. You do not need the merchant to cooperate. File the dispute with your card issuer directly."},{"question":"What if I paid extra for 'shipping insurance' and it also disappeared?","answer":"Fake shipping insurance is a common add-on scam. Dispute the full charge including the insurance fee as part of your card chargeback. The insurance was never a real product."}],"lastReviewed":"2026-06-10"},{"slug":"i-paid-a-fake-job-scammer-what-do-i-do","url":"https://scamencyclopedia.org/questions/i-paid-a-fake-job-scammer-what-do-i-do","question":"I paid money to a fake job scammer — what do I do?","shortAnswer":"Report to the FTC and FBI right away and contact your payment provider immediately to attempt a reversal. Fake job scams often involve upfront fees or equipment scams — recovery depends on how you paid.","explanation":"Job scams typically involve one of two payment scenarios: you paid an upfront fee for training materials, background checks, or equipment, and the job never materialized; or you were hired, received a fake check, deposited it, and then sent a portion back via wire or gift card before the check bounced, leaving you liable for the full amount.\n\nIf you paid an upfront fee by credit card, file a chargeback for non-delivery of promised employment services. If the check-overpayment scam is your situation, contact your bank immediately — explain that you deposited a fraudulent check and subsequently sent real money. Some banks will work with you on reversing the outgoing payment if reported quickly, though the deposited check loss is harder to recover.\n\nReport the fake job posting to the platform where you found it — LinkedIn, Indeed, ZipRecruiter, and others have fraud teams that can investigate and remove listings. This is important for protecting other job seekers. File a report with the FTC at ReportFraud.ftc.gov and the FBI's IC3 at ic3.gov.\n\nIf the scam involved the promise of work-from-home income with a 'starter kit' purchase, it may overlap with MLM or pyramid scheme territory. Report to the FTC and your state attorney general's consumer protection division. Keep all email communications, job offer letters, and receipts as documentation.","redFlags":["Job offer requires upfront payment for training materials, background check, or software","Pay is unusually high for minimal qualifications and vague job description","Employer sends a check for more than the agreed starting bonus and asks you to send back the difference","Interview conducted entirely over text or on a messaging app with no video call","Company name is similar to a well-known firm but with slight differences","Offer arrives without you ever applying for the role"],"whatToDoNow":["Contact your payment provider immediately to attempt a reversal","If a check was deposited, call your bank and explain the fraud before withdrawing funds","Report the fake job posting to the platform where it appeared","File a complaint with the FTC at ReportFraud.ftc.gov","File with the FBI's IC3 at ic3.gov","Save all emails, job postings, and payment receipts as evidence"],"faq":[{"question":"A fake employer sent me a check and it bounced — am I responsible for the money I already sent back?","answer":"Under banking law, when you deposit a check you take responsibility for its validity. If the check bounces, your bank will debit your account for the amount. However, you may be partially protected if you report the fraud quickly and the bank investigates. File a police report as evidence that you were defrauded."},{"question":"How do I verify if a company is real before accepting a job offer?","answer":"Search for the company's official website independently (not from the email link), check for their business registration with your state or country, and call them using a number you find yourself. Cross-check the recruiter's email domain against the official website."}],"lastReviewed":"2026-06-10"},{"slug":"can-paypal-reverse-a-payment-to-a-scammer","url":"https://scamencyclopedia.org/questions/can-paypal-reverse-a-payment-to-a-scammer","question":"Can PayPal reverse a payment to a scammer?","shortAnswer":"Yes — PayPal Buyer Protection covers most goods and services purchases. Open a dispute in the Resolution Center within 180 days of the transaction date.","explanation":"PayPal has one of the most comprehensive buyer protection programs among online payment services, but the protection depends entirely on how the payment was labeled. Payments sent as 'Goods and Services' are covered. Payments sent as 'Friends and Family' are not — this is one of the most common traps scammers exploit by pressuring buyers to pay via the personal transfer option.\n\nIf you paid as Goods and Services and did not receive your item, or received something significantly different from what was described, go to your PayPal account, find the transaction, and open a dispute in the Resolution Center. You have 180 days from the date of payment. PayPal will ask the seller to respond within a set window. If the seller cannot prove delivery or does not respond, PayPal typically rules in the buyer's favor and refunds the full amount including shipping.\n\nIf the dispute process with the seller fails, you can escalate to a PayPal Claim. PayPal then makes a binding decision. If PayPal denies the claim and you paid from a linked credit card, you may still be able to file a chargeback directly with your card issuer — though doing both simultaneously can complicate the process.\n\nFor payments made as Friends and Family, your only recourse is a dispute with your bank or card issuer if the payment was funded from a card. If it was funded from your PayPal balance, there is very little recourse and you should report to the FTC.","redFlags":["Seller insists you pay via PayPal Friends and Family to 'avoid fees'","Seller's PayPal account has no feedback history or very recent account creation","Transaction for a high-value item routed through an obscure PayPal link","Email from 'PayPal' asks you to send additional payment to release your order","Buyer sends extra money and asks you to forward some to a 'shipper'"],"whatToDoNow":["Open the PayPal Resolution Center and file a dispute within 180 days","Choose 'Item Not Received' or 'Significantly Not as Described'","If the PayPal claim is denied, escalate to your card issuer if the card funded the payment","Report the scammer's PayPal account using the report button on their profile","File a report with the FTC at ReportFraud.ftc.gov","Visit /recovery for further guidance"],"faq":[{"question":"What is the difference between PayPal Goods and Services and Friends and Family?","answer":"Goods and Services is for commercial transactions and includes Buyer Protection. Friends and Family is for personal transfers with no fees and no buyer protection. Scammers request F&F to prevent disputes. Always use Goods and Services when buying from strangers."},{"question":"How long does PayPal Buyer Protection take?","answer":"PayPal typically resolves disputes within 10 to 30 days. If escalated to a Claim, it can take up to 45 days. You will receive email updates throughout the process."}],"lastReviewed":"2026-06-10"},{"slug":"what-happens-after-i-report-a-scam-to-the-ftc","url":"https://scamencyclopedia.org/questions/what-happens-after-i-report-a-scam-to-the-ftc","question":"What actually happens after I report a scam to the FTC?","shortAnswer":"Your report is added to the FTC's Consumer Sentinel Network, shared with over 3,000 law enforcement partners, and used to identify scam trends — individual recovery is not guaranteed but reporting is still valuable.","explanation":"The Federal Trade Commission does not investigate individual complaints or guarantee that you will get your money back. What the FTC does is aggregate scam reports into a database called Consumer Sentinel, which is accessible to over 3,000 federal, state, and local law enforcement agencies. When many people report the same scam, the FTC uses that data to build enforcement cases against scammers, fine companies, and ban individuals from operating.\n\nFiling at ReportFraud.ftc.gov takes about 10 minutes. You enter details about the scam, the amount lost, the method of payment, and how you were contacted. The system automatically suggests next steps tailored to your situation — for identity theft, it creates an Identity Theft Report and recovery plan at IdentityTheft.gov. For other fraud types, it may suggest specific agencies to contact.\n\nThe FTC also shares data with partner agencies including the FBI, USPS Inspection Service, FCC, and state attorneys general. High-volume scam reports can trigger FTC lawsuits and injunctions against fraudulent companies — these sometimes result in refund programs for victims, though individual payments from these programs are typically small.\n\nReport even if the loss seems too small to matter. The FTC prioritizes cases based on volume and impact — your report combined with thousands of others can move a scam to the top of the enforcement list. Also report to the Internet Crime Complaint Center (ic3.gov) for internet-based fraud and to your state attorney general for local companies.","redFlags":["You have already lost money or provided personal information to a scammer","You received a suspicious call, text, email, or mailing that felt fraudulent","An offer seemed too good to be true and you want to flag it before more people are harmed"],"whatToDoNow":["File at ReportFraud.ftc.gov — it takes about 10 minutes","For identity theft, use IdentityTheft.gov for a full recovery plan","Also report to the FBI's IC3 at ic3.gov for internet-based fraud","Report to your state attorney general for local or regional scams","Keep your FTC confirmation number for your records","Visit /report-a-scam for a full directory of reporting agencies"],"faq":[{"question":"Will the FTC contact me about my report?","answer":"The FTC generally does not follow up with individual reporters or provide case updates. If you are contacted by someone claiming to be from the FTC about your report, it may be a follow-on scam — the FTC does not call individual consumers about fraud reports."},{"question":"Is the FTC report the same as a police report?","answer":"No. An FTC report is a federal consumer complaint database entry. A police report is an official criminal complaint filed with local law enforcement. Both are useful and serve different purposes. Many banks and credit bureaus require a police report number for fraud investigations."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-recover-from-an-investment-scam","url":"https://scamencyclopedia.org/questions/how-do-i-recover-from-an-investment-scam","question":"How do I recover money lost in an investment or trading scam?","shortAnswer":"Report to the SEC, CFTC, or your country's financial regulator immediately. Recovery is possible in some cases through regulatory proceedings, but beware of recovery scams targeting investment fraud victims.","explanation":"Investment scams — including fake forex trading platforms, fake cryptocurrency investment sites, Ponzi schemes, and boiler-room stock fraud — are among the highest-loss scam categories. Victims are often sophisticated individuals who have been persuaded over weeks or months to invest increasing amounts.\n\nThe first step is to preserve all evidence: account statements, website screenshots, emails, chat logs, wire transfer confirmations, and the names or usernames of anyone involved. This evidence is essential for regulators and law enforcement. If you were encouraged to download an app or access a trading portal, screenshot everything before it disappears — scam platforms are frequently taken down once victims start reporting.\n\nIn the U.S., report to the SEC at sec.gov/tcr for investment fraud and to the CFTC at cftc.gov/complaint for futures and forex fraud. Both agencies have victim assistance resources and, in cases where they recover assets through enforcement actions, may distribute funds to victims. Also file with the FBI's IC3.\n\nIf the platform is offshore and unlicensed, recovery through regulatory action is less likely, but reporting is still important. Some countries have cooperative enforcement agreements. Be especially vigilant about 'recovery scammers' who specifically target people who have already lost money in investment fraud — they charge upfront fees, promise to retrieve your funds, and then disappear. These are secondary scams.","redFlags":["Platform shows consistent profits but charges fees or taxes before withdrawal","You cannot withdraw funds you can see in your account","Customer service goes silent or gives excuses when you request a withdrawal","Platform was introduced through a social media contact or messaging app","Returns are unusually high (daily or weekly percentage gains)","You are pressured to recruit others to receive bonuses"],"whatToDoNow":["Preserve all evidence: screenshots, emails, wire receipts, account statements","Report to the SEC at sec.gov/tcr or CFTC at cftc.gov/complaint","File with the FBI's IC3 at ic3.gov","Report to the FTC at ReportFraud.ftc.gov","Contact your bank about any wire transfers made to the scam platform","Do not pay any 'recovery service' that contacts you afterward"],"faq":[{"question":"What is a Ponzi scheme and can victims get money back?","answer":"A Ponzi scheme pays early investors with later investors' money rather than genuine investment returns. When schemes collapse, courts appoint receivers who attempt to recover assets. Victims typically receive cents on the dollar from recovered assets, distributed over years. Reporting quickly improves the receiver's ability to freeze assets."},{"question":"I signed a contract with the investment platform — does that protect me?","answer":"No — contracts with unlicensed or fraudulent investment platforms are not enforceable, and the platform having a contract does not legitimize it. Contracts and regulation documentation can actually be faked. Check if the platform is registered with your country's financial regulator before investing."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-get-money-back-after-a-rental-scam","url":"https://scamencyclopedia.org/questions/how-do-i-get-money-back-after-a-rental-scam","question":"How do I get my money back after a rental scam?","shortAnswer":"If you paid by credit card or PayPal, file a dispute immediately. For wire or bank transfer, contact your bank for a recall. Report the listing to the platform and local police.","explanation":"Rental scams involve fake or hijacked property listings — scammers copy real listings, post them at lower prices, and collect deposits or first-month rent from multiple victims before vanishing. They are particularly common on Craigslist, Facebook Marketplace, and even mainstream rental platforms where listings are user-generated.\n\nRecovery depends on payment method. If you paid by credit card — even for a 'hold' or 'admin fee' — file a chargeback for non-delivery of services. This is usually straightforward. If you paid by bank transfer or wire, call your bank's fraud line immediately and ask for a recall. The window is narrow but worth trying. If paid by Zelle, Cash App, or Venmo, report through those apps and escalate to your bank.\n\nReport the scam listing to the platform where you found it. Provide the listing URL, the scammer's contact information, and your payment receipt. Major platforms take down fraudulent listings and some have victim support programs. Report to the FTC at ReportFraud.ftc.gov and file a police report — you will need it if you were also asked to sign a fraudulent lease, which could complicate your credit or rental history.\n\nIn cases where you physically went to view a property and handed over cash, recovery is very difficult. Future protection: never pay a deposit before verifying with the actual property owner or management company directly, and never wire or cash-transfer money internationally for a rental.","redFlags":["Rent is significantly below market rate for the area","Landlord is abroad and cannot show the property in person","Deposit required before you can view the property","Listing photos appear on multiple sites with different prices","Landlord communicates only via email or messaging apps","Application fee required to be paid by wire transfer or gift card"],"whatToDoNow":["Dispute the charge with your credit card, debit card, or PayPal if paid that way","Call your bank for a wire or bank transfer recall if applicable","Report the fraudulent listing to the platform immediately","File a police report — get the report number","Report to the FTC at ReportFraud.ftc.gov","Visit /recovery for payment-specific guidance"],"faq":[{"question":"I signed a fake lease — do I have any legal exposure?","answer":"A lease signed with a fraudster who did not own the property is not legally binding on you. However, document that you were scammed (police report, screenshots) in case the real landlord has issues with your presence at the property."},{"question":"How can I verify a rental listing is legitimate?","answer":"Cross-check the address on Google Maps and compare to the listing photos. Call the building's management company using a number found independently. Search the property on county tax records to find the real owner. Reverse-image-search the photos to detect duplicated listings."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-get-money-back-after-a-charity-scam","url":"https://scamencyclopedia.org/questions/how-do-i-get-money-back-after-a-charity-scam","question":"How do I get my money back after donating to a fake charity?","shortAnswer":"Credit card donations can be disputed; bank transfers are harder. Report to your state attorney general and the FTC — fake charities are heavily prosecuted at the state level.","explanation":"Fake charity scams peak around disaster events, holidays, and high-profile news stories. Scammers register websites or social media pages mimicking real charitable organizations and collect donations that never reach any legitimate cause.\n\nIf you donated by credit card, file a chargeback for 'misrepresentation' — you were deceived into believing the merchant was a legitimate charity. This is a valid dispute reason. If you donated via PayPal to a Goods and Services transaction, open a dispute in the Resolution Center. If you donated through a genuine fundraising platform that was itself fooled, contact the platform — many have policies to refund donations to fraudulent campaigns.\n\nState attorneys general are the primary enforcers of charity fraud laws in the U.S. — most states require charities to register, and filing with your state AG's consumer protection office can trigger investigations. The FTC also pursues fake charity cases and has run enforcement actions resulting in restitution for donors. File at ReportFraud.ftc.gov and specify it is a charitable solicitation.\n\nFor future giving, verify charities through Charity Navigator, GiveWell, or the BBB Wise Giving Alliance before donating. Give directly through the organization's official website rather than clicking links in emails or social media posts.","redFlags":["Donation request appears immediately after a natural disaster or news event","Charity name is very similar to a well-known organization but with subtle differences","Donation page has no 501(c)(3) number listed or the number does not verify on IRS Tax Exempt Organization Search","Pressure to donate immediately before the fundraiser 'closes'","Social media post with an emotional photo and a link to an unfamiliar payment site","Collector asks for cash donation at an unsolicited public stand"],"whatToDoNow":["Dispute the charge with your credit card issuer citing misrepresentation","If donated via a fundraising platform, contact the platform's trust and safety team","Report to your state attorney general's charity registration division","File with the FTC at ReportFraud.ftc.gov","Report to the IRS at irs.gov/charities if the charity claimed tax-exempt status"],"faq":[{"question":"Can I deduct a donation to a fake charity on my taxes?","answer":"No — tax deductions are only allowed for donations to organizations recognized as tax-exempt by the IRS (or equivalent in your country). If you claimed such a deduction, amend your return. The IRS may already be aware of the fraudulent charity."},{"question":"How do I check if a charity is legitimate?","answer":"In the U.S., search the IRS Tax Exempt Organization Search database at apps.irs.gov/app/eos. Also check Charity Navigator, GiveWell, or the BBB Wise Giving Alliance for independent ratings."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-scam-recovery-scam-and-how-do-i-avoid-it","url":"https://scamencyclopedia.org/questions/what-is-a-scam-recovery-scam-and-how-do-i-avoid-it","question":"What is a scam recovery scam, and how do I avoid it?","shortAnswer":"A recovery scam targets people who have already lost money to fraud, promising to get their money back for an upfront fee — and then stealing that fee too. Never pay anyone upfront to recover lost funds.","explanation":"After suffering a financial scam, many victims search desperately for ways to get their money back. This desperation is exactly what scammers exploit with 'recovery scams' — also called 'reload fraud.' A recovery scammer will contact you by email, phone, social media, or even in search ads, claiming to be a law firm, investigative agency, or specialized fraud recovery service that has already identified the original scammer and can retrieve your funds — for a fee.\n\nThe fee structure varies. Some charge a flat 'registration fee' of a few hundred dollars; others take a percentage upfront; some charge repeated 'processing fees' or 'taxes' as the case progresses. In every case, after you pay, the recovery service stops responding, the website disappears, or new demands for money appear before the funds can be 'released.'\n\nLegitimate law enforcement agencies and government bodies do not charge fees to investigate or assist with fraud cases. Real attorneys take contingency cases for large financial crimes, but reputable ones can be verified through state bar association databases. If anyone contacts you unsolicited about your fraud case — especially if you never published your contact details publicly — treat the approach as very suspicious.\n\nCommon targeting methods include purchasing victim lists from other scammers, scraping court records of civil suits, and monitoring fraud reporting forums. Protect yourself by being skeptical of any outreach you did not initiate, verifying credentials through official directories, and consulting free resources like your state AG or local legal aid organization.","redFlags":["Company contacts you about a previous scam you did not publicly report","Guarantees of full recovery — no legitimate recovery process can guarantee this","Upfront fee required before any investigation or action is taken","Company claims to already have your funds 'ready to release'","Contact comes via WhatsApp, Telegram, or a generic free email address","Website was created very recently and has no verifiable physical address"],"whatToDoNow":["Do not pay any upfront fee to a recovery service","Verify any company through official state or bar association directories","Report the recovery scammer to the FTC at ReportFraud.ftc.gov","Use free government resources: FTC, FBI IC3, and state attorney general","Visit /recovery for legitimate next steps after being scammed"],"faq":[{"question":"Is there any legitimate private recovery service for scam victims?","answer":"Some licensed attorneys and asset-recovery firms do work fraud cases on contingency (no fee unless they win). Verify any firm through your state bar association, check for reviews, and never pay upfront fees. Be especially skeptical of firms that approach you rather than the other way around."},{"question":"How do recovery scammers find their victims?","answer":"They buy lists from other scammers, scrape fraud reporting websites, monitor court records for fraud lawsuits, and use social media to identify people discussing being scammed. Reducing your online footprint about the original scam reduces your exposure to follow-on fraud."}],"lastReviewed":"2026-06-10"},{"slug":"how-long-do-i-have-to-dispute-a-fraudulent-charge","url":"https://scamencyclopedia.org/questions/how-long-do-i-have-to-dispute-a-fraudulent-charge","question":"How long do I have to dispute a fraudulent charge on my credit or debit card?","shortAnswer":"For credit cards in the U.S., you generally have 60 days from the statement date, but many issuers extend this. Debit card windows are narrower — report within 2 business days for the strongest protection.","explanation":"The Fair Credit Billing Act (FCBA) in the U.S. gives you 60 days from the date the statement containing the fraudulent charge was mailed or made available to dispute the charge in writing. However, most credit card issuers accept disputes far beyond this minimum — often 120 days, and sometimes up to 540 days for specific dispute types through Visa or Mastercard arbitration. Check your cardholder agreement for your specific issuer's policy.\n\nFor debit cards, the Electronic Funds Transfer Act (EFTA) applies and the windows are stricter. If you report within 2 business days of discovering the loss, your liability is capped at $50. Between 2 and 60 days, the cap rises to $500. After 60 days with no report, you may be responsible for the full amount. This is why checking your bank statements regularly is so important.\n\nFor both card types, file your dispute in writing (email or the online portal) in addition to calling, as written disputes create a paper trail. The issuer must acknowledge your dispute within 30 days and resolve it within 90 days (two billing cycles) under the FCBA.\n\nOutside the U.S., similar protections exist in the UK under the Consumer Credit Act and in the EU under the Payment Services Directive. UK credit card chargebacks have a 120-day limit through most card networks but a 6-year contractual claim period under Section 75 of the Consumer Credit Act for purchases over £100.","redFlags":["You notice a charge you do not recognize only after several months","A subscription kept charging after you believed it was cancelled","Small test charges (often a few cents) appearing before a larger fraud","Card statement arrives late or account alerts were disabled"],"whatToDoNow":["File a dispute with your card issuer as soon as you identify the fraudulent charge","For debit cards, report within 2 business days for full protection","Submit the dispute in writing via the online portal or email to create a paper trail","Request a new card number to prevent future unauthorized charges","Enable real-time transaction alerts to catch fraud faster in future","Visit /recovery for more guidance"],"faq":[{"question":"What is the difference between a dispute and a chargeback?","answer":"A dispute is your initial request to your card issuer to investigate a charge. A chargeback is the formal reversal process the issuer initiates with the merchant's bank after the dispute is validated. Most consumers use both terms interchangeably, which is fine — filing a dispute starts the process."},{"question":"Can I dispute a charge if I knowingly made the payment but was deceived?","answer":"Yes, if you were materially misled about what you were buying (the product or service was not as described, or was a complete scam), you can dispute on 'misrepresentation' or 'not as described' grounds even if you willingly authorized the initial charge."}],"lastReviewed":"2026-06-10"},{"slug":"i-fell-for-a-tech-support-scam-what-do-i-do","url":"https://scamencyclopedia.org/questions/i-fell-for-a-tech-support-scam-what-do-i-do","question":"I fell for a tech support scam — what should I do?","shortAnswer":"Disconnect from the internet, run antivirus from a trusted tool, change passwords from a different device, and contact your bank if money was paid. Report to the FTC.","explanation":"Tech support scams begin with a pop-up warning, a cold call, or a search ad claiming your computer has a critical error. A fake technician then either talks you through 'fixing' the problem and invoices you, or gains remote access to your machine. Both paths lead to the same outcome: money or data is stolen.\n\nIf the scammer had remote access to your device, treat it as compromised. Disconnect from the internet immediately, end any remote session, and run a full antivirus scan. Windows Defender is adequate for initial detection, but for a thorough check consider a second opinion with Malwarebytes or similar. If you are concerned about persistent backdoors, reinstalling the operating system is the safest option.\n\nIf you paid for the fake service, dispute the charge with your card issuer as quickly as possible. Tech support scams often use legitimate payment processors, making chargebacks successful when filed promptly. If you paid by gift card, call the gift card issuer immediately to report potential fraud.\n\nChange your email password and any other passwords that were visible or stored in your browser during the scam. If the scammer viewed your bank account during the session, call your bank immediately. Enable two-factor authentication on important accounts. File a report with the FTC at ReportFraud.ftc.gov and the FBI's IC3 — tech support scams are actively investigated.","redFlags":["Pop-up warning claiming Microsoft, Apple, or antivirus company detected a virus","Phone number in the pop-up that you are told to call immediately","Unsolicited call from 'Windows Technical Department' about a problem on your computer","Technician shows you Event Viewer 'errors' as proof your computer is infected","Request to install remote access software to 'run diagnostics'","Invoice for hundreds of dollars for a 'support plan' or 'virus removal'"],"whatToDoNow":["Disconnect the device from the internet immediately","End the remote access session and uninstall the software used","Run a full antivirus scan from a trusted tool","Change email and banking passwords from a different device","Dispute any charges made to your credit or debit card","Call your bank if the scammer accessed your account during the session","Report to the FTC at ReportFraud.ftc.gov"],"faq":[{"question":"Did real Microsoft or Apple ever send me this warning?","answer":"No. Microsoft and Apple do not send pop-up warnings with phone numbers to call, and they do not proactively call you about problems on your device. All such warnings are scams. Close the browser, ignore the number, and run your own antivirus scan."},{"question":"I already paid — can I get a refund from the scam company?","answer":"Attempting to call them back often results in a second scam where they 'refund' money by sending too much and asking you to send back the difference. Do not call them. Dispute the charge with your card issuer instead."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-get-money-back-after-a-lottery-scam","url":"https://scamencyclopedia.org/questions/how-do-i-get-money-back-after-a-lottery-scam","question":"How do I get my money back after paying fees in a lottery or prize scam?","shortAnswer":"Lottery and prize fees are almost never recoverable — the scam's design is to collect fees endlessly. Report to the FTC and stop paying immediately to cut your losses.","explanation":"Lottery and prize scams convince victims they have won a large sum and must pay taxes, customs fees, or processing charges before the prize can be released. Each payment is followed by a new 'unexpected' fee, trapping victims in a cycle that can cost tens of thousands of dollars over months or years before they recognize the pattern.\n\nThe fees paid in these scams are typically sent by wire transfer, MoneyGram, Western Union, gift card, or cryptocurrency — all near-unrecoverable methods. The scammers specifically request these because they are instant and irreversible. If any payment was made by credit or debit card, file a dispute immediately, as that is the one exception where recovery is possible.\n\nThe most important action is to stop paying. Each additional payment goes straight to the scammer and is lost. There is no prize. Legitimate lotteries — including all major national and state lotteries — never require advance payment of fees before a prize is released. Taxes on winnings are settled through tax filing, not through wire transfers to third parties.\n\nReport to the FTC at ReportFraud.ftc.gov, the U.S. Postal Inspection Service if any mailings were involved, and the FBI's IC3. If you received calls from a foreign number, also report to the FCC. Document every payment made — amounts, dates, and methods — as this record will be needed for any law enforcement investigation.","redFlags":["Notified that you won a lottery or sweepstakes you never entered","Required to pay taxes, customs fees, or processing charges before receiving winnings","Prize value always just slightly more than what you have paid so far in fees","Contact is via email, WhatsApp, or a foreign phone number","Official-looking paperwork or certificates sent to make the prize feel legitimate","Told to keep the winnings secret until the release is finalized"],"whatToDoNow":["Stop making any further payments immediately","File a dispute with your card issuer if any payment was made by card","Report to the FTC at ReportFraud.ftc.gov","Report to the U.S. Postal Inspection Service if any mailings were involved","File with the FBI's IC3 at ic3.gov","Tell trusted family or friends — this can help you avoid further payments"],"faq":[{"question":"I never entered a lottery — can I still win one?","answer":"No. You cannot win a lottery you never entered. All notifications of lottery prizes for contests you never entered are scams, without exception."},{"question":"The scammer sent me official-looking documents — does that mean it is real?","answer":"No. Scammers can create convincing fake documents including certificates, government seals, and official letterhead. The authenticity of documents must be verified through official channels — not by trusting what was sent to you."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-recover-from-an-elderly-parent-being-scammed","url":"https://scamencyclopedia.org/questions/how-do-i-recover-from-an-elderly-parent-being-scammed","question":"My elderly parent was scammed — how do I help them recover?","shortAnswer":"Report to your bank and Adult Protective Services immediately, then help them through the financial dispute process. Emotional support matters as much as the financial steps.","explanation":"Older adults are disproportionately targeted by scammers because they may have accumulated savings, own property, and in some cases may be experiencing cognitive changes that make them more vulnerable to manipulation. Helping a parent or other elder recover requires sensitivity — many victims feel shame and may initially deny or minimize the scam.\n\nStart with the practical financial steps without making the victim feel at fault. Contact their bank's fraud department on their behalf (with their permission) to report unauthorized transactions and discuss what can be recovered. If the elder has power of attorney granted to you, you can act directly. Ask the bank to add verbal or written alerts for large transfers.\n\nIn the U.S., report to Adult Protective Services (APS) in your state. APS can investigate financial exploitation of elders and connect your family with local resources. The National Elder Fraud Hotline at 1-833-FRAUD-11 (run by the DOJ's Office for Victims of Crime) provides specialized support and referrals. Also file with the FTC and the elder's local police department.\n\nBeyond finances, address the emotional impact. Victims of elder fraud often experience depression, anxiety, and loss of trust. Counseling services and local senior centers can provide support. If cognitive decline appears to be a factor, consult with a doctor — exploitation of a person with diminished capacity may constitute a crime even if they 'consented.'","redFlags":["Parent makes unusual or large transfers to people they recently met","New 'friend' or romantic interest is suddenly very prominent in their life","Parent is secretive about phone calls or online activities","Utility bills go unpaid despite sufficient funds","Unexplained withdrawals from savings or retirement accounts","Parent mentions owing money to the IRS or government as an emergency"],"whatToDoNow":["Contact their bank's fraud department — ask about recent suspicious transactions","Call the National Elder Fraud Hotline: 1-833-FRAUD-11","Report to your state Adult Protective Services agency","File with the FTC at ReportFraud.ftc.gov","File a local police report","Discuss adding fraud alerts or monitoring to financial accounts","Provide emotional support — never blame the victim"],"faq":[{"question":"Is elder financial fraud treated differently by law enforcement?","answer":"Yes — many states have specific elder fraud statutes with enhanced penalties. Federal law also provides extra protections for victims over 55. Financial exploitation of an elder with dementia or cognitive impairment can be prosecuted as financial elder abuse even when funds were 'voluntarily' transferred."},{"question":"How do I protect my parent from being scammed again?","answer":"Set up account alerts for large transactions, consider requiring dual authorization for large transfers, and register their number on the National Do Not Call Registry. Have open, non-judgmental conversations about common scam tactics."}],"lastReviewed":"2026-06-10"},{"slug":"i-was-scammed-on-facebook-marketplace-what-do-i-do","url":"https://scamencyclopedia.org/questions/i-was-scammed-on-facebook-marketplace-what-do-i-do","question":"I was scammed on Facebook Marketplace — what do I do?","shortAnswer":"Report the seller directly to Facebook, dispute any card or PayPal payment, and file with the FTC. Facebook Marketplace has limited buyer protection compared to platforms like eBay.","explanation":"Facebook Marketplace has grown rapidly and hosts millions of transactions, but it historically offered minimal buyer protection for private-seller transactions. Scams on the platform range from non-delivery of items and counterfeit goods to the Zelle/Venmo overpayment scam and fake vehicle or rental listings.\n\nIf you paid by credit or debit card, file a chargeback with your card issuer for non-delivery or misrepresentation. If you paid through Facebook Pay or Meta Pay, report the transaction through the Facebook Help Center and request a refund. Some peer-to-peer Marketplace transactions may qualify for Facebook's Purchase Protection if the transaction was completed through Facebook Checkout — check whether the listing used checkout or directed you off-platform.\n\nIf you were directed to pay via Zelle, Venmo, or Cash App outside of the platform, see the dedicated guides for those payment types. Outside-platform payment requests are themselves a major red flag and disqualify you from any platform buyer protection.\n\nReport the seller's Facebook profile using the report function on their profile or listing. Select 'Something went wrong with a purchase or sale.' This flags the account to Facebook's integrity team and can help remove the scammer faster. Also file with the FTC at ReportFraud.ftc.gov.","redFlags":["Seller insists on payment outside the platform via Zelle, Venmo, or gift card","Item priced far below market value with urgency to sell today","Seller claims to ship and asks for payment before any exchange","Profile was created recently and has few or no reviews","Seller 'accidentally' sends more money than owed and asks for a refund","Buyer or seller wants to conduct the transaction entirely over WhatsApp"],"whatToDoNow":["Report the seller's profile and listing to Facebook using the report function","Dispute the charge with your card issuer or through Facebook Pay if applicable","File with the FTC at ReportFraud.ftc.gov","If the item was mislabeled or counterfeit, report to your state consumer protection office","Review your linked payment accounts for additional unauthorized charges"],"faq":[{"question":"Does Facebook Marketplace have buyer protection?","answer":"Facebook offers Purchase Protection for eligible transactions completed through Facebook Checkout. Transactions handled outside the platform (personal payments, Zelle, etc.) are not covered. Always use Facebook Checkout when available."},{"question":"What is the Facebook Marketplace Zelle overpayment scam?","answer":"A fake buyer contacts you, says they sent too much by accident, and asks you to wire back the difference. The original payment is a scam (often a stolen account or fake payment notification) and your return is real money out of your pocket."}],"lastReviewed":"2026-06-10"},{"slug":"can-i-get-money-back-if-a-scammer-used-venmo","url":"https://scamencyclopedia.org/questions/can-i-get-money-back-if-a-scammer-used-venmo","question":"Can I get money back if I was scammed using Venmo?","shortAnswer":"Venmo payments between individuals are generally final. If paid for goods via Venmo's purchase protection, open a dispute. For personal payments, report to Venmo and your bank.","explanation":"Venmo operates similarly to Cash App and Zelle for personal payments — once sent, the money is in the recipient's account and Venmo does not automatically reverse it. However, Venmo has introduced a Goods and Services category that offers buyer protection similar to PayPal (Venmo is owned by PayPal), with a 180-day dispute window.\n\nIf you used Venmo's Goods and Services option when purchasing an item, open a dispute through the Venmo app within 180 days. Venmo will investigate and, if the seller cannot prove delivery or the item was significantly misrepresented, you should receive a refund.\n\nIf you sent a personal (non-goods) payment, Venmo's terms state personal payments are not covered by purchase protection. In this case, your options are: report the recipient through the Venmo app, contact Venmo Support with evidence of fraud, and file a dispute with your bank or credit card if the payment was funded from a card rather than your Venmo balance.\n\nNote that the overpayment scam is common on Venmo as well. A supposed buyer sends you more than expected, claims it was a mistake, and asks you to send back the difference — their original payment may be from a stolen account and will eventually be reversed, but your 'refund' is permanent. Never send back supposed overpayments without letting the reversal settle first.","redFlags":["Seller insists on personal Venmo payment to avoid fees instead of Goods and Services","Buyer sends you extra money and immediately asks for a portion back","Transaction for a large-value item with no face-to-face meeting","Account created recently with no prior activity or friends"],"whatToDoNow":["If Goods and Services was used, open a dispute through the Venmo app","For personal payments, report the recipient through Venmo Support","If funded from a card, dispute with your card issuer","File with the FTC at ReportFraud.ftc.gov","Visit /recovery for additional guidance"],"faq":[{"question":"What is Venmo Goods and Services protection?","answer":"Venmo Goods and Services is a payment option that adds purchase protection for buyers and seller protections for sellers. Buyers can dispute transactions if the item is not received or is significantly not as described. This is similar to PayPal Buyer Protection."},{"question":"How do I tell if a Venmo payment was made as personal or goods?","answer":"The transaction type is shown in the payment details in your Venmo transaction history. Personal payments show a default user icon; Goods and Services transactions are labeled with a shopping bag icon."}],"lastReviewed":"2026-06-10"},{"slug":"what-should-i-do-if-i-lose-money-to-an-irs-impersonation-scam","url":"https://scamencyclopedia.org/questions/what-should-i-do-if-i-lose-money-to-an-irs-impersonation-scam","question":"What should I do if I lose money to an IRS impersonation scam?","shortAnswer":"Report to the IRS's dedicated impersonation reporting portal, file with the FTC, and contact your payment provider about a potential reversal. The IRS never demands immediate payment by gift card or wire.","explanation":"IRS impersonation scams are one of the most common and distressing types of phone fraud. A caller claims to be an IRS agent, tells you that you owe back taxes, and threatens immediate arrest or deportation if you do not pay immediately by gift card, wire transfer, or cryptocurrency. The IRS never operates this way.\n\nIf you have already paid, start with your payment provider. Gift card payments have a very small window to freeze if the card has not been redeemed — call the issuer immediately. Wire transfers may be recallable if you act within a few hours. Cryptocurrency is near-impossible to recover.\n\nReport the scam to the IRS at phishing@irs.gov and through the Treasury Inspector General for Tax Administration (TIGTA) at tigta.gov. The TIGTA hotline is specifically designed for IRS impersonation reports. Also file with the FTC at ReportFraud.ftc.gov and the FBI's IC3.\n\nSeparately, confirm your actual tax status with the IRS directly by calling 1-800-829-1040. If you genuinely owe taxes, the IRS will send written notices through the mail — not phone calls demanding immediate payment. Clearing up any real tax issues is important so future scam calls do not cause renewed panic.","redFlags":["Caller demands immediate payment to avoid arrest or deportation","Payment requested in gift cards, cryptocurrency, or wire transfer","Caller threatens police will arrive at your door within hours","Call came from a number that appears to be the IRS's official number (spoofed)","Told not to tell anyone about the call or the 'case will be escalated'","Caller offers to 'settle' for a lower amount if you pay right now"],"whatToDoNow":["Call the gift card issuer or your bank immediately if payment was recent","Report to TIGTA at tigta.gov or call 1-800-366-4484","Forward any phishing emails to phishing@irs.gov","File with the FTC at ReportFraud.ftc.gov","Call the real IRS at 1-800-829-1040 to verify your actual account status","File with the FBI's IC3 at ic3.gov"],"faq":[{"question":"How does the real IRS contact you about taxes owed?","answer":"The IRS contacts taxpayers primarily through postal mail. They will never call demanding immediate payment, threaten arrest over the phone, or ask for gift card or cryptocurrency payment. If you receive such a call, it is a scam regardless of what caller ID shows."},{"question":"What if I am actually behind on taxes — could the threat be real?","answer":"Real tax debt is handled through formal written notices and a structured process with appeal rights. Call the IRS directly at 1-800-829-1040 to verify your account status. Real IRS agents will never threaten immediate arrest during a cold call."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-recover-after-a-social-security-scam","url":"https://scamencyclopedia.org/questions/how-do-i-recover-after-a-social-security-scam","question":"How do I recover after falling for a Social Security number scam?","shortAnswer":"Place a credit freeze and fraud alert with all three bureaus, report to the Social Security Administration OIG, and visit IdentityTheft.gov for a personalized recovery plan.","explanation":"Social Security Administration (SSA) impersonation scams involve callers claiming your SSN has been 'suspended' due to suspicious activity, a crime, or drugs found in your name. They demand payment or personal information to resolve the issue — or both. If you provided your SSN, date of birth, or any other identifying information, treat this as a full identity theft incident.\n\nImmediately place a credit freeze with all three major credit bureaus — Equifax, Experian, and TransUnion. This is free and prevents any new credit accounts from being opened in your name. Also place a free fraud alert, which lasts one year and requires creditors to verify your identity before extending credit. For identity theft victims, an extended 7-year fraud alert is available after filing an official report.\n\nFile a report with the SSA's Office of Inspector General at oig.ssa.gov/report or call 1-800-269-0271. This is the official channel for reporting SSA impersonation. Also file with the FTC — for SSN theft, use IdentityTheft.gov which creates an Identity Theft Report and gives you a personalized step-by-step recovery plan.\n\nMonitor the Social Security Administration's website for your earnings record — if a scammer uses your SSN to work illegally, income may be reported under your number, affecting future benefits. You can create a my Social Security account at ssa.gov to monitor this.","redFlags":["Caller says your SSN has been 'suspended' or 'flagged for criminal activity'","You are told a warrant will be issued if you do not call back or pay","Request for full SSN over the phone to 'verify your identity'","Told to purchase gift cards to 'protect' your benefits","Caller ID shows 'Social Security Administration' or a 1-800 SSA number (can be spoofed)"],"whatToDoNow":["Place a credit freeze with Equifax, Experian, and TransUnion","File a report with the SSA OIG at oig.ssa.gov or call 1-800-269-0271","Visit IdentityTheft.gov for a full recovery plan","Apply for an IRS Identity Protection PIN to prevent tax fraud","Monitor your Social Security earnings record at ssa.gov","File with the FTC at ReportFraud.ftc.gov"],"faq":[{"question":"Can the SSA actually suspend your Social Security number?","answer":"No. Social Security numbers cannot be suspended, cancelled, or deactivated. Any caller claiming otherwise is running a scam. The SSA communicates primarily through postal mail."},{"question":"If a scammer has my SSN, can they claim my benefits?","answer":"Benefits typically require more than just an SSN to claim — they require identity verification, address information, and banking details. However, set up a my Social Security online account at ssa.gov to monitor your record and block anyone from creating an account in your name."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-stop-a-subscription-scam-and-get-a-refund","url":"https://scamencyclopedia.org/questions/how-do-i-stop-a-subscription-scam-and-get-a-refund","question":"How do I stop a subscription scam and get a refund?","shortAnswer":"Cancel through your bank or card issuer (block future charges), then dispute past charges as unauthorized. Report to the FTC — subscription trap schemes are an enforcement priority.","explanation":"Subscription scams come in two main forms: 'free trial' traps where buried terms authorize recurring charges, and outright unauthorized subscriptions added to your account without your knowledge. Both are addressable through your card issuer, though the process differs slightly.\n\nFor a free trial that converted to a recurring charge you did not intend, dispute the charges as 'misrepresentation' or 'no authorization for recurring billing.' Many issuers will reverse multiple months of charges if the terms were not clearly disclosed. The FTC has strict rules about what constitutes adequate disclosure for free trials under the Restore Online Shoppers' Confidence Act (ROSCA) — if the subscription terms were buried or unclear, this strengthens your dispute.\n\nFor completely unauthorized subscriptions — charges appearing from companies you never interacted with — file as unauthorized transactions and request a new card number. These are often the result of your card details being compromised or sold.\n\nTo stop future charges, ask your card issuer to block that specific merchant — this is called a merchant block or specific cancellation. For subscriptions, you can also contact the merchant directly (using contact details you find independently, not from the suspicious charge), but direct cancellation does not guarantee a refund for past charges.\n\nReport subscription traps to the FTC at ReportFraud.ftc.gov. The FTC has pursued major enforcement actions against companies using deceptive subscription practices and has distributed refunds to consumers in successful cases.","redFlags":["Fine print on a free trial converts to a paid subscription unless cancelled","Cancellation process is intentionally difficult or non-functional online","Charge appears from a company name you do not recognize","Monthly charge for a service you never agreed to starts after another purchase","Customer service number provided in the charge is non-functional","Multiple small charges from the same merchant in the same month"],"whatToDoNow":["Dispute the charges with your card issuer as unauthorized or misrepresented","Request a new card number to block future charges from this merchant","File a complaint with the FTC at ReportFraud.ftc.gov","Report to your state attorney general's consumer protection division","Review all recurring charges on your statements and cancel any you did not intend"],"faq":[{"question":"What is a 'negative option' or subscription trap?","answer":"A negative option is a billing model where your silence or inaction is treated as consent to continue a subscription. They are legal only when clearly disclosed. The FTC has strict rules — if the terms were buried or unclear, you have grounds to dispute."},{"question":"Can I dispute several months of charges at once?","answer":"Yes — file a dispute for all charges within the timeframe your card issuer allows (often 60-120 days). For older charges, some issuers have extended windows if the subscription was never authorized. Contact your issuer about the full history."}],"lastReviewed":"2026-06-10"},{"slug":"i-was-scammed-on-a-dating-app-what-do-i-do","url":"https://scamencyclopedia.org/questions/i-was-scammed-on-a-dating-app-what-do-i-do","question":"I was scammed on a dating app — what do I do?","shortAnswer":"Report the profile to the dating app, stop all contact, and secure any accounts whose credentials were shared. If money was lost, report to the FTC and FBI.","explanation":"Dating app scams range from romance scams that cultivate emotional investment over weeks before requesting money, to 'pig butchering' cryptocurrency investment scams, to short-term catfish schemes requesting gift cards or wire transfers for supposed emergencies.\n\nImmediately report the profile to the dating app's trust and safety team. All major platforms (Tinder, Bumble, Hinge, Match) have in-app reporting. Provide the profile URL, any messages, and a description of what happened. Platforms take these reports seriously and can ban accounts and flag associated phone numbers or email addresses.\n\nIf you shared personal information — your address, phone number, workplace, social media profiles — be alert to potential stalking or harassment. Consider making those social media profiles private temporarily. If you shared financial account details or identity documents, follow the steps in the relevant guides.\n\nFor financial losses, your options depend on payment method. Credit or debit card payments can often be disputed. Bank transfer, wire, Zelle, or cryptocurrency payments are harder to recover. File a report with the FTC and the FBI's IC3. Dating app fraud is a federal crime if it involves interstate communications and financial fraud.\n\nConsider speaking with a counselor or therapist — the emotional manipulation in dating scams is sophisticated and real psychological harm results.","redFlags":["Match quickly moves the conversation to WhatsApp, Telegram, or another off-app platform","Profile photos are very professional-quality and the person is unusually attractive","Person lives far away and always has a reason they cannot meet","Very rapid emotional escalation — 'I love you' within days or a week","Introduces a cryptocurrency investment platform after gaining your trust","Emergency money request for a hospital bill, travel cost, or unexpected crisis"],"whatToDoNow":["Report the profile to the dating app's trust and safety team","Block all contact immediately on every platform","Secure any personal accounts whose details were shared","Dispute any card payments through your issuer","File with the FTC at ReportFraud.ftc.gov","File with the FBI's IC3 at ic3.gov","Seek emotional support — the harm from manipulation is real"],"faq":[{"question":"What is a pig butchering scam?","answer":"A pig butchering scam (also called sha zhu pan) involves a scammer building a romantic or friendly relationship over weeks, then introducing a fake cryptocurrency investment platform where victims are encouraged to invest increasing amounts until the platform disappears with all their funds."},{"question":"The person on the dating app seems very real — could they be a real person being used?","answer":"The photos and possibly some biographical details may belong to a real person whose identity was stolen. The scammer communicating with you is not that person. You can verify by requesting a live video call — scammers rarely agree to these or use pre-recorded clips."}],"lastReviewed":"2026-06-10"},{"slug":"i-wired-money-for-a-fake-home-closing-what-do-i-do","url":"https://scamencyclopedia.org/questions/i-wired-money-for-a-fake-home-closing-what-do-i-do","question":"I wired money to a scammer during a fake real estate closing — what do I do?","shortAnswer":"Call your bank immediately and ask for a wire recall — real estate wire fraud has a narrow recovery window. Also contact the FBI, which has a specific rapid-response process for these cases.","explanation":"Real estate wire fraud occurs when a scammer intercepts communications between a homebuyer and their title company, attorney, or real estate agent — typically by hacking or spoofing email — and sends fraudulent closing instructions with different wire transfer details. Homebuyers wire their down payment or full purchase amount to the scammer's account.\n\nThis is one of the most financially devastating scams because the amounts involved are typically hundreds of thousands of dollars. It is also one of the few scam types where the FBI has a dedicated rapid-response mechanism. Call the FBI's field office or the Internet Crime Complaint Center at ic3.gov immediately and ask about the FBI's 'Financial Fraud Kill Chain' — this is a process the FBI uses to attempt to halt wire transfers before they clear.\n\nSimultaneously, call your sending bank and the receiving bank if known. Banks can sometimes freeze funds in transit or in the receiving account if they act within hours. Every minute counts. If the wire was initiated same-day, there may still be time.\n\nReport to the FBI's IC3, your state real estate commission, your title insurance company (they may have fraud coverage), and your homeowner's insurance provider. Some title insurance policies cover wire fraud losses — review your policy. After the immediate crisis, work with a real estate attorney to understand your options.","redFlags":["Last-minute email with updated wire transfer instructions for closing","Closing instructions come from a slightly different email address than normal","Wire instructions delivered by someone different from your usual contact","Urgency: told you must wire today or the closing will fall through","Instructions arrive via text or WhatsApp instead of official email","No phone call confirmation of wire details with the title company"],"whatToDoNow":["Call your bank immediately and ask for a wire recall","Contact the FBI's IC3 at ic3.gov and specifically mention real estate wire fraud","Call the receiving bank if you have the account details","Contact your title insurance company to review your fraud coverage","Report to your state attorney general and real estate commission","Preserve all emails and wire instructions as evidence"],"faq":[{"question":"Does title insurance cover wire fraud?","answer":"Standard title insurance policies typically cover defects in title, not wire fraud losses. However, some title insurers offer endorsements or separate wire fraud protection. Check your specific policy and speak to your agent — some companies have made exceptions for wire fraud victims."},{"question":"How can I prevent real estate wire fraud?","answer":"Always call your title company or attorney at a verified number to confirm wire instructions before sending any funds. Treat any last-minute change in wire instructions as highly suspicious. Never trust wire details sent only by email without a phone confirmation."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-the-best-way-to-report-a-scam-text-message","url":"https://scamencyclopedia.org/questions/what-is-the-best-way-to-report-a-scam-text-message","question":"What is the best way to report a scam text message?","shortAnswer":"Forward the text to 7726 (SPAM) — this is the universal short code for all major carriers. Also report to the FTC at ReportFraud.ftc.gov.","explanation":"Scam text messages (smishing) are a rapidly growing category of fraud. Common examples include fake delivery notifications, fake bank alerts, fake prize winners, and government agency impersonations. Reporting them helps carriers block the sending numbers and domains, reducing how many people see the same scam.\n\nForwarding a text to 7726 (which spells SPAM on a phone keypad) is the standard method recognized by the FCC and all major U.S. carriers including AT&T, Verizon, T-Mobile, and others. After forwarding, your carrier will ask you to send the phone number the message came from. This data feeds directly into carrier spam filtering systems.\n\nYou can also report the text to the FTC at ReportFraud.ftc.gov. Select 'unwanted calls, emails, and texts' as the category. The FTC's database is shared with law enforcement and can trigger investigations when the same scam number appears in many reports. If the text contained a link that impersonated a specific brand (bank, delivery company, government agency), also report to that organization's phishing email or abuse team.\n\nIf you clicked a link in the scam text and entered any personal information, treat it as a potential phishing compromise. Change passwords for any accounts you may have logged into, monitor your bank accounts, and place a fraud alert if sensitive identity information was entered.","redFlags":["Text claims a package could not be delivered and asks you to click a link","Text claims your bank account is suspended and asks you to verify immediately","Prize winner notification sent to your phone number without you entering a contest","Text from a strange number using your name and claiming to be a government agency","Shortened link (bit.ly, tinyurl) in a message from an unknown sender"],"whatToDoNow":["Forward the text to 7726 (SPAM) — works on all major U.S. carriers","Report to the FTC at ReportFraud.ftc.gov","Do not click any links in the message","Block the sending number on your phone","If you clicked a link and entered info, change passwords and monitor accounts","Report to the FCC at fcc.gov/consumers/guides/filing-informal-complaint if needed"],"faq":[{"question":"Is it safe to reply to a scam text to say 'STOP'?","answer":"No — replying to a scam text, even with 'STOP,' confirms to the scammer that your number is active. This often results in more scam messages, not fewer. Block the number instead."},{"question":"I clicked a link in a scam text — do I need to do anything?","answer":"If you clicked but did not enter any information, you may be fine — run a security scan on your device just in case. If you entered personal details, passwords, or payment information, act immediately: change passwords and alert your bank."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-recover-after-a-health-supplement-scam","url":"https://scamencyclopedia.org/questions/how-do-i-recover-after-a-health-supplement-scam","question":"How do I recover after falling for a fake health supplement or medical scam?","shortAnswer":"Dispute the charge with your card issuer, report to the FDA and FTC, and monitor your bank for further unauthorized charges if you signed up for a 'free trial.'","explanation":"Health supplement scams typically use one of two models: a fake 'free trial' where you pay only shipping and are then auto-enrolled in a costly monthly subscription, or outright fraudulent products making unsubstantiated medical claims. Both are actionable through your bank and federal regulators.\n\nIf you were caught in a free trial trap, dispute the recurring charges with your credit or debit card issuer. Cite 'misrepresentation of terms' or 'no authorization for recurring billing.' The FTC's ROSCA rules require clear disclosure of subscription terms, and many of these companies operate in violation of those rules — your issuer knows this and is often cooperative. Request a new card number to prevent future charges.\n\nReport to the FDA's MedWatch system at fda.gov/safety/medwatch if the product made false health or medical claims. The FDA actively pursues companies marketing supplements with unproven disease cures. Also report to the FTC at ReportFraud.ftc.gov — health fraud is an enforcement priority and the FTC has brought major cases against supplement scam operators.\n\nIf the product caused any adverse health effects, report to FDA MedWatch as a safety report, not just a fraud report. Keep the product, packaging, and any documentation you received.","redFlags":["Free trial only requires you to pay shipping — monthly subscription buried in fine print","Celebrity or doctor endorsement that cannot be verified","Promised to cure or treat a disease — only FDA-approved drugs can make such claims","Testimonials but no clinical trial data or peer-reviewed research","Contact details on the website are minimal — no physical address","Website uses countdown timers and 'only X left in stock' pressure"],"whatToDoNow":["Dispute recurring charges with your card issuer and request a new card number","Cancel the subscription directly with the company and get written confirmation","Report to the FTC at ReportFraud.ftc.gov","Report false medical claims to the FDA at fda.gov/safety/medwatch","If adverse health effects occurred, report as a product safety concern to the FDA"],"faq":[{"question":"Can a supplement legally claim to cure a disease?","answer":"No. Under U.S. law, only FDA-approved drugs can claim to diagnose, cure, treat, or prevent diseases. Supplements can make 'structure/function' claims (supporting health) but not disease claims. Any supplement promising to cure cancer, diabetes, or other diseases is making an illegal claim."},{"question":"What if the product was sent from overseas?","answer":"Overseas supplement companies are harder to pursue through U.S. regulators, but your card chargeback rights remain the same. File with the FTC and the FDA — both share data with international counterparts in some cases."}],"lastReviewed":"2026-06-10"},{"slug":"i-paid-an-immigration-consultant-who-was-a-scammer","url":"https://scamencyclopedia.org/questions/i-paid-an-immigration-consultant-who-was-a-scammer","question":"I paid an immigration consultant or notario who turned out to be a scammer — what do I do?","shortAnswer":"Report to your state attorney general and immigration authorities. If money was paid by card, dispute the charge. You may also need to take corrective legal action on any bad paperwork filed.","explanation":"Immigration fraud is a particularly harmful category because victims can suffer not only financial loss but also damage to their legal status, missed deadlines, incorrectly filed applications, or even inadvertent perjury through forms they did not understand. 'Notarios,' unauthorized immigration consultants, and fake attorneys target immigrant communities with promises of cheap, fast visa or green card processing.\n\nIn many U.S. states, only licensed attorneys and accredited representatives may charge for immigration legal advice. If you paid a non-attorney for legal services, the business may have violated state law. Report to your state attorney general's consumer protection division and specify 'unauthorized practice of law' or 'immigration services fraud.'\n\nAlso report to the U.S. Department of Justice Office of Immigration Litigation at justice.gov and USCIS at uscis.gov/report-immigration-scam. USCIS maintains a list of authorized representatives and actively investigates fraud. The DOJ accredits organizations that can provide low-cost legitimate immigration help.\n\nIf fraudulent forms were filed with USCIS, you may need to file corrective submissions, responses, or motions to reopen cases. Consult a licensed immigration attorney or a DOJ-accredited representative as soon as possible. The Bar Association in your state can provide referrals. Legal aid organizations often provide free immigration legal services for low-income individuals.","redFlags":["Person claims to be a 'notary' or 'notario' who can file immigration forms — this is not authorized","Guarantees of visa approval or green card in an unusually short time","Significantly lower fees than licensed attorneys (may indicate unauthorized practice)","Asks you to sign blank forms to fill in later","Does not provide copies of applications filed on your behalf","Cannot provide their bar association number or accreditation details when asked"],"whatToDoNow":["Collect all documents, receipts, and copies of any forms that were filed","Report to your state attorney general for unauthorized practice of law","Report to USCIS at uscis.gov/report-immigration-scam","Consult a licensed immigration attorney to assess any damage to your case","Dispute any card charges through your card issuer","Contact a free legal aid organization or DOJ-accredited representative if cost is a barrier"],"faq":[{"question":"What is an 'accredited representative' for immigration purposes?","answer":"DOJ-accredited representatives are non-attorneys who have been approved to represent people in immigration proceedings before USCIS, immigration courts, and the BIA. They work for recognized non-profit organizations. They are different from notarios or general immigration consultants who are not authorized to give legal advice."},{"question":"If I was defrauded, will it affect my immigration application?","answer":"Possibly — if incorrect information was submitted, it could harm your case. A licensed attorney can help you understand your situation and file corrections. Proactively disclosing and correcting errors is generally viewed more favorably than having them discovered later."}],"lastReviewed":"2026-06-10"},{"slug":"can-i-get-money-back-from-a-mlm-pyramid-scheme","url":"https://scamencyclopedia.org/questions/can-i-get-money-back-from-a-mlm-pyramid-scheme","question":"Can I get my money back from a multi-level marketing or pyramid scheme?","shortAnswer":"Refunds from MLM schemes are rarely given voluntarily, but many companies have buy-back policies under FTC guidelines. Pyramid scheme victims may receive restitution in regulatory enforcement actions.","explanation":"Multi-level marketing (MLM) and pyramid scheme losses take several forms: money paid for starter kits or inventory that cannot be sold, ongoing purchases required to maintain distributor status, and recruitment fees. True pyramid schemes — where income depends primarily on recruitment rather than product sales — are illegal under the FTC Act.\n\nMany states and the FTC require MLM companies to have a legitimate buy-back policy allowing distributors to return unsold inventory for at least 90% of purchase price. If the company you joined has such a policy (check the distributor agreement), exercise it immediately and in writing. Keep copies of all communications. If the company refuses to honor their stated policy, this is a violation you can report.\n\nReport to the FTC at ftc.gov/mlm and your state attorney general. The FTC has brought enforcement actions against pyramid scheme operators and, when successful, has distributed refunds to victims. These proceedings take years and payments are often cents on the dollar, but they do occur. State AGs have also successfully pursued MLM fraud cases.\n\nDocument your total losses: startup costs, inventory purchases, training fees, events, and ongoing product requirements. This records your actual investment and supports any regulatory case. If you were recruited with false income claims, those claims are central to any fraud case — save any recorded webinars, presentations, or earnings disclosure documents you were shown.","redFlags":["Income primarily comes from recruiting new members, not selling products","Required to purchase inventory or a starter kit to participate","Earnings disclosure shows the vast majority of participants earn little or nothing","Events, training, and tools are sold at additional cost within the organization","High-pressure recruitment to expand your 'downline' before you earn commissions","Told to recruit friends and family as a 'business opportunity'"],"whatToDoNow":["Request a buy-back of unsold inventory in writing using the company's policy","Document all payments made including kits, events, and product purchases","Report to the FTC at ReportFraud.ftc.gov","File with your state attorney general's consumer protection division","Check for any ongoing class-action lawsuits against the company"],"faq":[{"question":"What is the difference between an MLM and a pyramid scheme?","answer":"A legitimate MLM derives most revenue from actual product sales to end consumers. A pyramid scheme derives most revenue from recruitment fees and requires new participants to keep buying in. The FTC evaluates whether income depends primarily on recruitment — if so, it is likely an illegal pyramid scheme."},{"question":"Can I get a tax deduction for MLM losses?","answer":"Losses from a business that never made a profit can sometimes be deducted if the IRS considers the activity a legitimate business. Consult a tax professional. The IRS 'hobby loss' rules may limit deductions if the activity never earned profit in multiple years."}],"lastReviewed":"2026-06-10"},{"slug":"i-was-targeted-by-a-grandparent-scam-what-do-i-do","url":"https://scamencyclopedia.org/questions/i-was-targeted-by-a-grandparent-scam-what-do-i-do","question":"I was targeted by a grandparent scam and sent money — what should I do?","shortAnswer":"Stop sending money immediately, verify your grandchild is safe by calling them directly, and report to the FTC and local police. If money was sent recently, contact your bank.","explanation":"The grandparent scam is an emergency impersonation scam where a caller pretends to be your grandchild (or a lawyer, bail bondsman, or police officer acting on their behalf), claims the grandchild has been arrested, hurt, or is stranded abroad, and urges you to send money immediately — often by cash courier pickup, wire transfer, or gift card.\n\nThe single most important thing you can do is verify directly with your grandchild. Hang up and call your grandchild on their known phone number, or call another family member who would know their whereabouts. Scammers rely on the panic of the moment to prevent this verification step. If your grandchild is safe at home, the call was a scam.\n\nIf you already sent money via a courier picking up cash, call your local police immediately and describe the courier. Cash courier pickup scams sometimes allow police to intercept the courier if reported quickly. For wire transfers or gift cards, follow the respective recovery processes — contact your bank for a wire recall, or call the gift card issuer to report potential fraud.\n\nReport to the FTC at ReportFraud.ftc.gov and to the FBI's IC3 at ic3.gov. Also report to the USPS Inspection Service if the scam involved mailing cash. File a local police report — your report may help connect the dots in an ongoing investigation.","redFlags":["Caller claims to be your grandchild and sounds upset or different (explains the voice as an injury)","Told to keep the situation secret from other family members","Bail bond or attorney demands cash pickup instead of court payment","Extreme urgency — must pay within the hour","Cash courier comes to your home or you are asked to wire money immediately","Caller convinces you not to verify by creating more distress and urgency"],"whatToDoNow":["Hang up and call your grandchild directly on their known number to verify they are safe","If cash was already handed over, call local police immediately to describe the courier","Contact your bank for a wire recall if money was sent that way","Call gift card issuers if payment was made that way","Report to the FTC at ReportFraud.ftc.gov","File a local police report"],"faq":[{"question":"How did the scammer know my grandchild's name?","answer":"Scammers scrape social media to find family connections and names. They may also simply guess 'Grandma, it's me' and let the victim fill in the name themselves. You can also protect family by keeping social media profiles private."},{"question":"What if the caller's voice sounds exactly like my grandchild?","answer":"AI voice cloning can now replicate a person's voice from a short clip of audio. Even a convincing-sounding voice is not proof of identity. Always verify by calling the person directly on their known number."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-recover-after-a-business-email-compromise-scam","url":"https://scamencyclopedia.org/questions/how-do-i-recover-after-a-business-email-compromise-scam","question":"How do I recover after a business email compromise (BEC) scam?","shortAnswer":"Call your bank's wire department immediately to initiate a recall, then report to the FBI's IC3 within the same business day for the best chance of asset recovery.","explanation":"Business Email Compromise (BEC) is a category of fraud where a criminal compromises a legitimate business email account — typically through phishing or credential theft — and uses it to redirect invoice payments or payroll to a fraudulent bank account. BEC is consistently ranked among the highest-loss fraud categories by the FBI.\n\nTime is the critical variable. The FBI operates the Financial Fraud Kill Chain in partnership with major U.S. banks and overseas financial intelligence units. If you report a BEC-related wire transfer to the FBI's IC3 within the same business day, and the funds have not yet been withdrawn from the receiving account, there is a meaningful chance the FBI can freeze the funds and recover some or all of the money. The longer you wait, the lower the probability.\n\nCall your bank's fraud or wire operations team simultaneously. Provide the exact amount, the receiving bank name and routing number, and the account number if you have it. The sending bank and receiving bank can both take action to freeze and return funds — but only within the settlement window.\n\nAfter the immediate crisis, conduct an email security investigation. Identify how the email account was compromised — typically through a phishing link or a reused password. Reset all compromised account credentials, review your email security settings, enable multi-factor authentication, and brief other employees on BEC tactics to prevent a repeat.","redFlags":["Invoice payment instructions arrive with updated bank details at the last minute","Email from CEO or senior manager requesting urgent wire transfer, bypassing normal process","Vendor 'confirms' a change in their payment details by email only","Slight variation in the sender's email domain (e.g., company.com vs. company-co.com)","Request to keep the transfer confidential from other team members","Urgency framed around closing a deal before end of day"],"whatToDoNow":["Call your bank's wire operations team immediately to request a recall","File with the FBI's IC3 at ic3.gov immediately — same business day if possible","Call the receiving bank if you have the account details","Notify your IT security team to investigate the email compromise","Report to the FTC at ReportFraud.ftc.gov","Preserve all email headers and communications as forensic evidence"],"faq":[{"question":"Who is liable for a BEC loss — the business or the bank?","answer":"Liability depends on whether the business followed the bank's security procedures. If the business authorized the wire themselves (even under false pretenses), the bank may not be liable. However, banks have successfully been held liable when they approved transfers that deviated from established patterns without verification. Consult a commercial attorney."},{"question":"What is the FBI's Financial Fraud Kill Chain?","answer":"The Financial Fraud Kill Chain is an FBI program that enables rapid coordination between the FBI, sending banks, and receiving financial institutions to freeze fraudulent wire transfers. It works only for funds not yet fully disbursed. Reports via ic3.gov with full wire details trigger this process."}],"lastReviewed":"2026-06-10"},{"slug":"can-i-get-money-back-from-a-fake-car-sale","url":"https://scamencyclopedia.org/questions/can-i-get-money-back-from-a-fake-car-sale","question":"Can I get my money back after being scammed in a fake car sale?","shortAnswer":"Recovery depends on how you paid — credit card chargebacks are possible; wire or cash is nearly unrecoverable. Report to the FTC, your state DMV, and the platform where the listing appeared.","explanation":"Vehicle sale scams occur in two main settings: fake listings online where a phantom seller collects a deposit or full payment for a car they do not own, and in-person title fraud where a seller transfers a vehicle with undisclosed liens or a salvaged title. Both cause significant financial harm.\n\nFor online vehicle scams where you sent payment before receiving the car, recovery depends on the payment method. Credit card dispute is your strongest option — file under non-delivery of goods. For wire transfers, call your bank immediately for a recall attempt. For Zelle or Cash App, follow those specific processes. Cash sent to a stranger is almost always unrecoverable.\n\nReport the fraudulent listing to the platform (Craigslist, Facebook Marketplace, AutoTrader, etc.) and provide the listing URL and seller contact information. Platforms can remove the listing and flag the seller's account. Report to the FTC at ReportFraud.ftc.gov.\n\nFor in-person title fraud — if you bought a car only to discover it has undisclosed liens, was declared a total loss (salvage title fraud), or was stolen — report to your state DMV and the local police department. A lien search before purchase through your state's DMV or a title service like CARFAX or AutoCheck would have identified these issues. If the seller misrepresented the vehicle, this may also be civil fraud actionable in small claims court.","redFlags":["Price is significantly below Kelley Blue Book or market value","Seller is out of state and cannot show the vehicle — offers to ship after payment","Transaction through a fake 'vehicle escrow' or 'eBay vehicle protection' service","Seller pressures you to complete payment before a competing buyer takes the car","Title document has been altered or the VIN does not match the car's VIN plate","Seller will not allow a pre-purchase inspection by an independent mechanic"],"whatToDoNow":["Dispute the charge immediately with your card issuer if paid by card","Contact your bank for a wire recall if applicable","Report the fraudulent listing to the platform where it was posted","File with the FTC at ReportFraud.ftc.gov","Report title fraud to your state DMV","File a police report for record-keeping and any civil litigation"],"faq":[{"question":"What is a VIN check and should I do one before buying a used car?","answer":"A VIN (Vehicle Identification Number) check searches databases for a car's history including accidents, title status, odometer readings, and ownership history. Services like CARFAX and AutoCheck provide these reports for a fee. Always run a VIN check before buying any used vehicle."},{"question":"I bought a car with an undisclosed lien — am I responsible for it?","answer":"Generally, a buyer who did not know about a lien is not responsible for it if they purchased in good faith. However, lien holders can repossess the vehicle. You would need to sue the seller in civil court. A title search before purchase would have prevented this."}],"lastReviewed":"2026-06-10"},{"slug":"i-was-tricked-by-an-ai-deepfake-scam-what-do-i-do","url":"https://scamencyclopedia.org/questions/i-was-tricked-by-an-ai-deepfake-scam-what-do-i-do","question":"I was tricked by an AI deepfake or voice clone scam — what do I do?","shortAnswer":"Report to the FBI's IC3 and FTC, secure any compromised accounts, and contact your bank if money was transferred. AI-assisted fraud is an enforcement priority.","explanation":"AI-powered scams use synthetic voice cloning and deepfake video to impersonate trusted individuals — family members, executives, or government officials — making scam communications more convincing than ever. You may have been deceived by a voice that sounded exactly like a family member claiming an emergency, or a video call that appeared to show your company's CEO authorizing an urgent payment.\n\nRegardless of how convincing the deception was, the financial recovery steps are the same as for the underlying fraud type. If money was wired, call your bank immediately for a recall. If paid by gift card, call the issuer. If your account credentials were compromised, change them from a different device. The AI element does not create new recovery mechanisms, but it does strengthen your fraud case by demonstrating sophisticated deception.\n\nReport to the FBI's IC3 at ic3.gov — AI-assisted fraud is an active enforcement area, and the FBI asks specifically about voice or image manipulation in their reporting form. Also report to the FTC at ReportFraud.ftc.gov. If the deepfake impersonated a specific person (your CEO, a family member), notify that person — they may need to alert others who are targeted with the same impersonation.\n\nFor future protection: establish a 'safe word' with family members for genuine emergency calls; confirm unexpected financial requests from executives through a separate verified channel; and be highly skeptical of urgent requests that arrive via unfamiliar communication channels even when the voice or face seems familiar.","redFlags":["Voice sounds exactly like someone you know but the request is unusual","Video call with low resolution, slightly off lip sync, or unnatural blinking","Executive 'video call' authorizes an unusual financial transaction","Grandparent receives a call from a 'grandchild' with a slightly different voice quality","Person you know sends a message from an unexpected platform asking for urgent help","AI-generated image or video of a celebrity promoting an investment"],"whatToDoNow":["Contact your bank immediately if any money was transferred","File with the FBI's IC3 at ic3.gov — note the AI/deepfake aspect","Report to the FTC at ReportFraud.ftc.gov","Notify the person whose likeness or voice was used","Secure any accounts whose credentials were shared","Establish verification protocols (safe words) with family and colleagues"],"faq":[{"question":"Is it possible to detect an AI voice clone on a phone call?","answer":"Current AI voice clones can be very convincing over phone-quality audio. Detection is difficult in real time. The best protection is a pre-arranged 'safe word' that only you and the real person know, asked early in any suspicious call."},{"question":"Can AI deepfakes be used as evidence that I was defrauded?","answer":"Yes — digital forensic analysis can often detect manipulation artifacts in synthetic media. Preserve any recordings, screenshots, or call logs as evidence. The FBI and some academic institutions have deepfake detection capabilities that can be applied in investigations."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-phone-scam-call","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-phone-scam-call","question":"How do I report a phone scam call?","shortAnswer":"Report to the FTC at ReportFraud.ftc.gov and to the FCC at fcc.gov. You can also report to the Do Not Call Registry if applicable. Keep notes on the caller's number and what was said.","explanation":"Phone scam calls — including robocalls, IRS impersonation calls, tech support calls, and social security scams — are the most common consumer fraud contact method in the U.S. Reporting them helps the FTC and FCC identify patterns, take enforcement action, and issue public warnings.\n\nAfter receiving a scam call, note the phone number shown on caller ID (even if you know it may be spoofed), the date and time, what the caller claimed, what they asked for, and any callback number they provided. This information is the core of a useful report.\n\nFile at ReportFraud.ftc.gov. The FTC collects this data in their Consumer Sentinel database and shares it with law enforcement, carriers, and analytics companies that develop call-blocking technology. Each report contributes to the overall picture, even if no individual investigation is opened for your case.\n\nAlso report to the FCC at fcc.gov/consumers/guides/filing-informal-complaint for robocalls or if you believe Do Not Call violations occurred. If the call impersonated a specific company or government agency, report to that organization as well — many have dedicated phishing report pages. For calls that involve specific threats or financial loss, the FBI's IC3 at ic3.gov is also appropriate.","redFlags":["Robocall claims you have won a prize or owe money to the IRS","Caller ID shows a government agency or familiar company number","Caller threatens arrest, deportation, or account suspension","Callback number provided is different from the original caller ID","Caller has personal details about you to make the call seem legitimate"],"whatToDoNow":["Note the caller's number, the time, and the gist of what was said","File a report at ReportFraud.ftc.gov","Report to the FCC at fcc.gov for robocall violations","Block the number on your phone","Never call back numbers provided by suspected scammers","Visit /report-a-scam for a full directory of relevant agencies"],"faq":[{"question":"Does reporting a scam call stop it from happening again?","answer":"Not immediately to you personally — but aggregate reports lead the FTC and FCC to take enforcement action against calling companies, which disrupts the operations of major scam call centers. Carriers use FTC data to improve call-blocking algorithms."},{"question":"Should I call back a suspicious number to warn others?","answer":"No. Calling back scam numbers confirms your number is active, may result in being charged premium rates on some overseas numbers, and puts you back in contact with the scammer."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-recover-from-a-travel-or-vacation-scam","url":"https://scamencyclopedia.org/questions/how-do-i-recover-from-a-travel-or-vacation-scam","question":"How do I recover after falling for a fake travel or vacation scam?","shortAnswer":"Dispute the charge with your credit card or travel platform immediately. Report to the FTC and your state attorney general — travel fraud is a regulated industry in most states.","explanation":"Travel and vacation scams range from fake timeshare presentations and fake hotel booking sites to fraudulent 'free cruise' offers and fake tour operators. If the booking involved a card payment, a chargeback is often the most direct path to recovery.\n\nFor credit card payments, file a dispute as soon as you identify the fraud. Choose 'item not received' if services were not delivered, or 'misrepresentation' if the accommodation or experience was materially different from what was advertised. Document everything: the advertised description, your booking confirmation, and evidence of what you actually received (or did not receive).\n\nFor tickets or bookings through third-party travel sites, use the platform's own dispute process first (Booking.com, Expedia, etc. all have support teams for fraud claims) before escalating to your card issuer. Legitimate booking platforms generally cooperate with fraud claims, especially if they can verify the property or operator did not exist.\n\nIf you paid fees in a timeshare presentation scam or for a vacation club membership, report to your state's attorney general consumer protection division. Most states require travel sellers and vacation clubs to be registered and follow specific disclosure rules. Report to the FTC at ReportFraud.ftc.gov and to the American Society of Travel Advisors if a licensed travel agent was involved.","redFlags":["You won a free cruise or vacation you never entered","Booking site URL is slightly different from the real hotel chain's website","No phone number or address for the travel company beyond an email","Pressure to book within hours to secure a special deal","Timeshare presentation promised a free vacation but required hours of your time and a large purchase","Reviews for the property cannot be found on independent platforms"],"whatToDoNow":["Dispute the charge with your credit card issuer immediately","Use the travel platform's support channel if booked through an OTA","Report to the FTC at ReportFraud.ftc.gov","Report to your state attorney general for travel seller fraud","If a timeshare or vacation club, check if your state has a rescission period to cancel"],"faq":[{"question":"What is a timeshare rescission period?","answer":"Most U.S. states require a cooling-off period (typically 3 to 15 days) during which you can cancel a timeshare contract for any reason and receive a full refund. This is your strongest legal tool if you signed at a high-pressure presentation. Act before the rescission window closes."},{"question":"I booked through a third-party site and the hotel says my reservation does not exist. What do I do?","answer":"Contact the booking platform's customer support immediately. If the platform was fraudulent (not a real OTA), dispute the charge with your credit card. If it was a real OTA that made an error, escalate within that platform — most will either honor the reservation or find alternative accommodation."}],"lastReviewed":"2026-06-10"},{"slug":"i-was-scammed-on-ebay-what-are-my-options","url":"https://scamencyclopedia.org/questions/i-was-scammed-on-ebay-what-are-my-options","question":"I was scammed on eBay — what are my options?","shortAnswer":"Open a case through eBay's Resolution Center — eBay Money Back Guarantee covers most transactions if the item was not received or was not as described. Escalate to your payment method if eBay does not resolve it.","explanation":"eBay offers one of the most established buyer protection programs in e-commerce. The eBay Money Back Guarantee covers most transactions where the buyer pays through eBay's checkout system and the item is not received or is significantly not as described. Coverage requires you to have paid through eBay — if a seller directed you to pay outside the platform, you lose this protection.\n\nTo file a claim, go to your eBay purchase history, find the order, and open a case in the Resolution Center. Select 'I didn't receive my item' or 'Item not as described.' eBay gives the seller a few days to respond, then investigates. If the seller cannot prove delivery or the item is confirmed to be significantly different from the listing, eBay will typically refund you in full including shipping.\n\nIf eBay closes the case in your favor but the refund is not issued promptly, or if eBay denies the claim unfairly, escalate to your payment method. If you paid by credit card through eBay, you can file a chargeback with your card issuer for non-delivery — mention the eBay case ID in your dispute for context.\n\nAlso report the seller's account using eBay's reporting feature and leave factual feedback. Your report helps protect future buyers and may trigger eBay's seller performance review. If the scam involved counterfeit goods or a fraudulent vehicle, additional reporting to the appropriate authorities may be warranted.","redFlags":["Seller has very low or no feedback for a high-value item","Listing description is vague or inconsistent with the photos","Seller asks you to pay via wire transfer, Zelle, or cash outside of eBay's platform","Item arrives with a tracking number showing delivery to a different address than yours","Counterfeit version of a branded product arrives","Seller suddenly closes account after payment but before shipping"],"whatToDoNow":["Open a case in eBay's Resolution Center within the eligible timeframe","Choose 'Item Not Received' or 'Item Not as Described'","If eBay does not resolve it, escalate to your card issuer for a chargeback","Report the seller's account through eBay's reporting function","File with the FTC at ReportFraud.ftc.gov"],"faq":[{"question":"How long do I have to open a case on eBay?","answer":"You must open a claim within 30 days of the latest estimated delivery date (for 'item not received') or within 30 days of receiving the item (for 'item not as described'). Act within these windows — late claims are typically denied."},{"question":"The seller said the package was delivered but I never got it — what do I do?","answer":"If tracking shows delivery but you did not receive the item, contact your carrier to request a delivery confirmation with a signature or GPS location. If the carrier cannot confirm delivery, eBay typically rules in your favor."}],"lastReviewed":"2026-06-10"},{"slug":"someone-hacked-my-email-and-used-it-to-scam-my-contacts","url":"https://scamencyclopedia.org/questions/someone-hacked-my-email-and-used-it-to-scam-my-contacts","question":"Someone hacked my email and used it to scam my contacts — what should I do?","shortAnswer":"Regain control of your account immediately, notify your contacts, and report to the email provider. Change all passwords that used the same credentials.","explanation":"When your email is compromised and used to send scam messages to your contacts, you face two simultaneous problems: a security compromise of your own account and potential damage to your relationships and reputation. Both require prompt action.\n\nFirst, recover your account. Use the email provider's account recovery process (usually a password reset via phone or backup email). Once back in, change the password to a strong, unique one, enable two-factor authentication, review connected apps and revoke any suspicious authorizations, and check mail forwarding rules — scammers often set up forwarding to themselves before being locked out.\n\nNext, notify your contacts that your account was hacked and that any unusual messages (especially those asking for money, gift cards, or containing suspicious links) were not from you. Do this as quickly as possible to prevent people from acting on the scam messages. Use a different email address or phone for this notification since your account may still be compromised.\n\nChange passwords for any other accounts that share the same email and password combination. Check your financial accounts for any changes made using 'forgot password' flows linked to the compromised email. Report the incident to the email provider using their security reporting process. File with the FTC if any financial harm resulted.","redFlags":["You are locked out of your own email account unexpectedly","Contacts report receiving money requests or suspicious links from your address","Your sent folder contains messages you did not write","Mail forwarding rules in your account that you did not create","Password reset attempts you did not initiate","Login notifications from unfamiliar locations or devices"],"whatToDoNow":["Use the email provider's account recovery to regain access","Change your password and enable two-factor authentication","Review and remove any suspicious forwarding rules or connected apps","Notify your contacts immediately about the compromise","Change passwords on other accounts using the same credentials","Check financial accounts for unauthorized changes","Report to the FTC at ReportFraud.ftc.gov"],"faq":[{"question":"Am I liable if someone was scammed using my email account?","answer":"Generally no — you are the victim of the account compromise. Your contacts would pursue the actual scammer, not you. However, act quickly and notify contacts to minimize any harm, which also demonstrates good faith."},{"question":"How can I prevent my email from being hacked again?","answer":"Use a unique, strong password for your email account, enable two-factor authentication (preferably app-based, not SMS), avoid clicking links in suspicious emails, and regularly review your account's connected apps and login activity."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-get-money-back-from-a-gaming-scam","url":"https://scamencyclopedia.org/questions/how-do-i-get-money-back-from-a-gaming-scam","question":"How do I get money back after being scammed in an online game or gaming marketplace?","shortAnswer":"Contact the game platform's support team first — most have policies against scamming and may reverse in-game transactions. For real-money purchases, dispute through your card issuer.","explanation":"Gaming scams occur both within games (item theft, fake trades, skin gambling) and around them (fake game currency sellers, counterfeit game keys, phishing for game account credentials). Recovery options differ significantly between in-game asset theft and real-money losses.\n\nFor real-money purchases — buying game keys, coins, or skins from a third-party seller who then does not deliver — treat this like any e-commerce fraud. If you paid by credit card, file a chargeback for non-delivery. If you paid via PayPal Goods and Services, open a dispute. Cryptocurrency or gift card payments to gaming scammers are very difficult to recover.\n\nFor in-game asset theft where a scammer tricked you into a bad trade or stole your items, contact the game platform's support team (Steam, Epic Games, Riot Games, etc.). Platforms have different policies — Steam historically did not reverse accepted trades, citing terms of service, but some platforms do intervene in documented fraud cases. Provide chat logs, screenshots, and a timeline of the incident.\n\nAccount takeover cases — where someone stole your game account login and drained your inventory or sold your account — are treated more seriously by platforms. Report immediately, provide proof of original ownership (email confirmations, purchase history), and request account recovery. Also change your email password and any other accounts using the same credentials.","redFlags":["Offer to trade game items that seems far too favorable to you","Third-party site selling premium game currency at a steep discount","Trade window shows different items from what was agreed in chat","Link sent in-game claiming to be a 'free skin' or 'item giveaway'","Someone asks for your account details to 'help' with an item transfer","Fake account claiming to be a game developer or moderator"],"whatToDoNow":["Contact the game platform's support team immediately with evidence","Dispute any real-money charges through your card issuer or PayPal","Change your account password and enable two-factor authentication","Report the scammer's profile to the platform","File with the FTC at ReportFraud.ftc.gov if real money was lost"],"faq":[{"question":"Are game items considered real property that can be stolen?","answer":"Legally, game items exist within the game publisher's platform and are typically licensed, not owned. However, theft through deception or account hacking may violate fraud laws, and platforms take serious action against documented thieves."},{"question":"I was scammed buying a game key — the key was already used. What do I do?","answer":"Report to the retailer where you bought the key — legitimate platforms like Steam, Humble Bundle, and Fanatical will replace defective or used keys. If bought from an individual or gray-market site, dispute the charge with your payment provider."}],"lastReviewed":"2026-06-10"},{"slug":"i-was-scammed-by-a-fake-utility-company","url":"https://scamencyclopedia.org/questions/i-was-scammed-by-a-fake-utility-company","question":"I was scammed by someone pretending to be my utility company — what do I do?","shortAnswer":"Call your real utility company to verify your account status, report the scam to the FTC, and contact your payment provider about a reversal if payment was recent.","explanation":"Utility impersonation scams involve callers or door-to-door visitors claiming to represent your electric, gas, water, or phone company. They threaten service shutoff within hours unless immediate payment is made — typically by gift card, wire transfer, or cryptocurrency. The urgency and the fear of losing essential services makes these scams particularly effective.\n\nIf you already paid, first verify your real account status by calling the utility company's official number (found on your bill, not from the caller). If your account is current and no payment was needed, you were scammed. Report the scam to the company's fraud department — most major utilities have dedicated lines for this.\n\nFor gift card payments, call the issuer immediately to attempt a freeze if the card has not been redeemed. For wire transfers, call your bank's fraud line for a recall attempt. For cash paid to a door-to-door visitor, file a police report immediately and contact the utility company.\n\nReport to the FTC at ReportFraud.ftc.gov, selecting 'Imposter Scams' then 'Business/Government Impersonation.' Also report to your state's public utility commission — they track utility fraud complaints and may be able to alert their regulated utilities to issue customer warnings.","redFlags":["Caller claims your service will be shut off within the hour unless you pay immediately","Payment demanded in gift cards, wire transfer, or cryptocurrency","Caller's name and employee ID cannot be verified by calling the utility's main line","Door-to-door visitor asks for immediate payment in cash for a utility issue","Caller ID shows the utility company's real number (can be spoofed)","No written notice preceded the shutoff threat"],"whatToDoNow":["Call your utility company at their official number to verify your actual account status","Call the gift card issuer or your bank immediately if payment was recent","Report to the FTC at ReportFraud.ftc.gov","Report to your state's public utility commission","File a police report for door-to-door cash fraud"],"faq":[{"question":"Do utility companies really shut off service the same day they call?","answer":"No. Real utility companies are required by law in most states to provide advance written notice before disconnection. A same-day shutoff threat from an unexpected caller is a scam."},{"question":"What should I do if a door-to-door utility worker asks me to pay cash?","answer":"Ask for official identification, then call the utility company's main number to verify that a representative is expected at your address. Real utility workers do not collect cash payments. Refuse to pay cash and report the incident to the utility company."}],"lastReviewed":"2026-06-10"},{"slug":"i-sent-money-via-western-union-to-a-scammer","url":"https://scamencyclopedia.org/questions/i-sent-money-via-western-union-to-a-scammer","question":"I sent money via Western Union or MoneyGram to a scammer — can I get it back?","shortAnswer":"Once collected by the recipient, Western Union and MoneyGram payments cannot be reversed. If the transfer has not been picked up yet, call immediately to attempt a cancellation.","explanation":"Western Union and MoneyGram money transfers are designed to be picked up quickly at agent locations worldwide. Once the recipient collects the funds using the transfer control number (MTCN or reference number), the money is gone and cannot be recalled. The window to stop a transfer is therefore very narrow.\n\nCall Western Union at 1-800-448-1492 or MoneyGram at 1-800-926-9400 immediately. Provide the MTCN or reference number, the sender's name, and the amount. Ask whether the transfer has been collected. If it has not, request a cancellation and refund. Western Union and MoneyGram have procedures for this and are required to cooperate with fraud investigations.\n\nBoth companies have faced regulatory action from the FTC for facilitating fraud. Western Union paid $586 million in 2017 to settle FTC charges and established a claims process for fraud victims. If you were victimized by a fraud scheme that used Western Union before 2017, you may still be eligible for restitution through the historic settlement program — check the FTC's Western Union Fraud Claim page.\n\nReport to the FTC at ReportFraud.ftc.gov, the FBI's IC3, and the state attorney general. Western Union and MoneyGram are regulated money transfer businesses — they accept fraud reports and are required by law to report suspicious activity to FinCEN.","redFlags":["Any government agency, lottery, or tech support demanding Western Union or MoneyGram payment","Online seller insisting on money order or wire transfer via these services","Romance contact asking you to send funds via money transfer","Scammer provides a name and city for collection and says to act immediately","Promise of a large payment back once you send a smaller amount"],"whatToDoNow":["Call Western Union at 1-800-448-1492 or MoneyGram at 1-800-926-9400 immediately","Ask whether the transfer has been collected — request cancellation if not","Report to the FTC at ReportFraud.ftc.gov","File with the FBI's IC3 at ic3.gov","Check the FTC's Western Union fraud claim page for historic settlement eligibility"],"faq":[{"question":"Why do scammers always ask for Western Union or MoneyGram?","answer":"These services provide near-instant, anonymous cash collection worldwide with no buyer protection and no chargeback mechanism. Once the MTCN is shared and funds are collected, the transaction is final."},{"question":"Is there a Western Union refund for scam victims?","answer":"Western Union settled with the FTC in 2017 for $586 million and created a victim compensation fund. If you were defrauded via Western Union before that settlement date, visit the FTC's website to check eligibility for the historic claims program."}],"lastReviewed":"2026-06-10"},{"slug":"my-debit-card-was-used-fraudulently-what-are-my-rights","url":"https://scamencyclopedia.org/questions/my-debit-card-was-used-fraudulently-what-are-my-rights","question":"My debit card was used fraudulently — what are my rights?","shortAnswer":"Report to your bank within 2 business days of discovering the fraud for maximum protection. The Electronic Funds Transfer Act limits your liability based on how quickly you report.","explanation":"Debit card fraud protection in the U.S. is governed by the Electronic Funds Transfer Act (EFTA) and Regulation E. Unlike credit cards (which use the FCBA and limit your liability to $50), debit card liability depends heavily on how quickly you report the problem. This makes prompt reporting critically important.\n\nIf you report within 2 business days of learning about the unauthorized use, your maximum liability is $50. Between 2 and 60 days after the statement is sent showing the fraudulent charge, the limit rises to $500. If you wait more than 60 days after the statement, you could lose everything charged after that 60-day window — including funds added to the account after the statement date.\n\nCall your bank's fraud line immediately upon discovering any unauthorized charge. Ask the bank to cancel your current card and issue a new one with a different number. Request that they reverse all unauthorized charges during the investigation period. Banks typically issue provisional credit within a few business days while the investigation is ongoing.\n\nIf your bank denies the claim or fails to credit your account, file a complaint with the Consumer Financial Protection Bureau (CFPB). The CFPB routes complaints directly to the bank and requires a formal response, which often prompts reconsideration. Many banks voluntarily apply the more consumer-friendly credit card rules to debit card fraud even though they are not legally required to do so.","redFlags":["Small test transaction from an unknown merchant followed by a larger charge","ATM skimmer: card reader or PIN cover that feels loose or looks unusual","Charge from a merchant in a city or country you have not visited","Online charge for a subscription you never signed up for","Multiple small charges from the same merchant in rapid succession"],"whatToDoNow":["Call your bank's fraud line immediately — report within 2 business days for full protection","Ask the bank to cancel your card and issue a new number","Request provisional credit while the investigation is open","Review all recent transactions and report every unauthorized charge","File a complaint with the CFPB if the bank does not cooperate","Enable real-time transaction notifications on your account"],"faq":[{"question":"Does the 2-business-day rule apply from when the fraud happened or when I noticed?","answer":"The 2-business-day clock starts from when you learn about the unauthorized transaction — not necessarily when it occurred. This means checking your account regularly is important, since you cannot benefit from a protection window you did not know to use."},{"question":"Why is debit card protection weaker than credit card protection?","answer":"Credit cards use your credit line — fraud means disputing a debt. Debit cards use your actual bank funds — fraud means your money is already gone. Credit card issuers also benefit from strong consumer protection laws that give them incentive to protect users."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-place-a-credit-freeze-after-being-scammed","url":"https://scamencyclopedia.org/questions/how-do-i-place-a-credit-freeze-after-being-scammed","question":"How do I place a credit freeze after being scammed?","shortAnswer":"Contact each of the three major credit bureaus separately — Equifax, Experian, and TransUnion — to place a free security freeze. This is one of the strongest identity theft protections available.","explanation":"A credit freeze (also called a security freeze) prevents any new lender from accessing your credit file to approve a credit application. This means that even if a scammer has your Social Security Number and other personal details, they cannot open credit cards, take out loans, or get utilities in your name while the freeze is active.\n\nPlacing a freeze is free under federal law for all U.S. consumers. You must contact each bureau separately because they do not share freeze instructions. You can place a freeze online, by phone, or by mail. Each bureau will give you a PIN or confirmation code — store this safely because you will need it to temporarily lift the freeze when you apply for credit legitimately.\n\nCredit freezes are permanent until you lift them — they do not expire. Lifting or 'thawing' a freeze can be done for a specific time window (say, one week for a mortgage application) or indefinitely. The freeze does not affect your credit score, and existing creditors can still access your file for routine reviews.\n\nIn addition to the three major bureaus, consider placing freezes with specialty consumer reporting agencies that cover areas like employment screening, insurance, bank accounts, and tenant screening. The CFPB maintains a list of specialty agencies. For maximum protection, also set up a free weekly credit report monitoring at annualcreditreport.com.","redFlags":["You shared your SSN, date of birth, or full ID documents with a scammer","Unauthorized credit accounts appear on your credit report","You received credit cards you never applied for","Lenders contact you about applications you never made","Your credit score unexpectedly dropped with no changes you authorized"],"whatToDoNow":["Freeze your credit at Equifax (equifax.com), Experian (experian.com), and TransUnion (transunion.com)","Store the freeze PINs or confirmation codes in a safe location","Place a fraud alert in addition to the freeze for added creditor notification","Check your credit reports at annualcreditreport.com for existing fraudulent accounts","Report any new fraudulent accounts to the lender and dispute them","Visit /recovery for additional identity protection steps"],"faq":[{"question":"Does a credit freeze affect my existing credit cards?","answer":"No. A freeze only affects new credit applications. Your existing accounts continue to function normally — you can use your current credit cards, and your existing creditors can still review your account."},{"question":"What is the difference between a credit freeze and a fraud alert?","answer":"A fraud alert asks lenders to take extra steps to verify your identity before extending credit — it is a flag, not a block. A credit freeze completely blocks new credit inquiries. Both are free and you can use both simultaneously for stronger protection."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-deal-with-a-scammer-threatening-to-release-my-info","url":"https://scamencyclopedia.org/questions/how-do-i-deal-with-a-scammer-threatening-to-release-my-info","question":"A scammer is threatening to release my information or images — what do I do?","shortAnswer":"Do not pay. Contact the FBI's IC3, report to the platform where contact occurred, and if sexual images are involved, report to the NCMEC CyberTipline. Payment almost always escalates demands.","explanation":"Sextortion and blackmail scams use the threat of releasing private images, data, or damaging information to extort payments. The scammer typically claims to have hacked your device or obtained compromising content through a social media relationship, and demands payment to delete the material. These threats are distressing but paying almost always leads to escalated demands rather than compliance.\n\nDo not pay. In the vast majority of cases, scammers who receive payment simply increase their demands or return weeks later with new threats. The material (if it even exists) typically gets released or not based on factors entirely outside your control — payment does not change this.\n\nReport to the FBI's IC3 at ic3.gov. Sextortion and blackmail are federal crimes, and the FBI investigates actively. Also report to the National Center for Missing and Exploited Children (NCMEC) at missingkids.org/gethelpnow/cybertipline if sexual images of minors are involved. If you are an adult victim, the Cyber Civil Rights Initiative at cybercivilrights.org provides resources for image-based abuse.\n\nReport the account to the platform where the scammer contacted you. Social media platforms and dating apps take image-based blackmail very seriously and can remove accounts and preserve evidence for law enforcement. Document everything: save the messages and any profile information before the account disappears.","redFlags":["Someone claims to have access to your webcam or browsing history","A contact from a dating app or social media threatens to release intimate images","You received an email claiming your device was hacked with 'proof' (often a real old password)","Demand for immediate payment in cryptocurrency or gift cards","Scammer says they will send images to your employer or family"],"whatToDoNow":["Do not pay — it almost always makes things worse","Do not delete the messages — preserve them as evidence","Report to the FBI's IC3 at ic3.gov","Report the account on the platform where contact occurred","If sexual images of a minor are involved, report to NCMEC CyberTipline","Contact the Cyber Civil Rights Initiative at cybercivilrights.org for adult victims"],"faq":[{"question":"The scammer sent me a real old password as 'proof' they hacked me — should I be worried?","answer":"Old passwords in these emails come from data breach databases, not real hacks. Change the mentioned password if you still use it anywhere, but there is no evidence your device is actually compromised. This type of email is a mass-scale scam sent to millions of people."},{"question":"What if the scammer actually has real images of me?","answer":"Report to the FBI's IC3 and the Cyber Civil Rights Initiative regardless. Many U.S. states now have laws making non-consensual distribution of intimate images a crime. The platform where the scammer operates can also proactively hash known images to prevent distribution."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-get-money-back-after-a-puppy-pet-scam","url":"https://scamencyclopedia.org/questions/how-do-i-get-money-back-after-a-puppy-pet-scam","question":"How do I get my money back after a puppy or pet scam?","shortAnswer":"Dispute the charge with your credit card immediately. Report to the FTC and the Internet Crime Complaint Center. Puppy scams are a consistently high-volume fraud category.","explanation":"Pet scams typically involve fake online listings for purebred puppies or other animals at below-market prices. The seller collects a deposit or full payment, then either disappears or creates additional costs — fake 'crate fees,' 'insurance,' or 'customs charges' — to extract more money before eventually going silent.\n\nIf you paid by credit or debit card, file a dispute immediately for non-delivery of goods. This is a straightforward non-delivery case and most issuers will issue provisional credit while investigating. If you paid additional 'fees' after the initial deposit, include all charges in the dispute.\n\nPreserve all evidence: photos from the listing (reverse image search them — scammers steal puppy photos from breeders' social media), email or text exchanges, payment receipts, and the website URL. Scam pet listing websites are frequently taken down, so screenshot everything before reporting.\n\nReport to the FTC at ReportFraud.ftc.gov — pet scams have been a specific enforcement focus. Also report to the Internet Crime Complaint Center at ic3.gov. If the seller used a legitimate platform to list (Craigslist, Facebook, PuppyFind), report the listing to that platform as well. The American Kennel Club also maintains a puppy scam resource and accepts fraud reports at akc.org.","redFlags":["Price is significantly lower than breed standard for the area","Seller says they are overseas and must ship the puppy","Puppy photos appear on multiple websites with different names — check via reverse image search","Additional fees appear after initial payment for 'crate,' 'insurance,' or 'customs'","Seller communicates only via WhatsApp or personal email","No phone number or verifiable physical address for the breeder"],"whatToDoNow":["File a credit card dispute for non-delivery of goods immediately","Preserve all listing screenshots, communications, and receipts","Report to the FTC at ReportFraud.ftc.gov","Report to the FBI's IC3 at ic3.gov","Report the listing to the platform where it was posted","Stop sending any additional fee payments"],"faq":[{"question":"How do I verify a dog breeder is real before paying a deposit?","answer":"Visit the breeder's premises in person if possible. Verify their registration with a kennel club (AKC, UKC, etc.). Request veterinary references. Ask for a video call showing the actual puppies. Legitimate breeders welcome verification."},{"question":"I paid extra fees to get my puppy released from customs — is this normal?","answer":"No. Legitimate pet imports do have customs processes, but a seller who requests successive additional payments for insurance or release fees is almost always running a scam. Stop paying immediately and report to the FTC."}],"lastReviewed":"2026-06-10"},{"slug":"i-was-scammed-by-a-fake-insurance-agent","url":"https://scamencyclopedia.org/questions/i-was-scammed-by-a-fake-insurance-agent","question":"I was scammed by a fake insurance company or fake insurance agent — what do I do?","shortAnswer":"Report to your state Department of Insurance immediately. State regulators actively pursue unlicensed insurers. Dispute premium payments with your card issuer and get legitimate coverage right away.","explanation":"Insurance fraud involving fake companies or unlicensed agents is regulated at the state level. If you purchased insurance (health, auto, home, or life) from an agent or company that is not licensed in your state, your coverage may be void — meaning you could face significant liability in the event of a claim.\n\nContact your state's Department of Insurance as the first priority. State insurance regulators maintain databases of licensed insurers and agents, can verify whether your policy is legitimate, investigate fraud complaints, and can coordinate restitution proceedings. Insurance fraud carries significant criminal penalties.\n\nIf you paid premiums by credit card, file a chargeback for misrepresentation — you paid for insurance coverage that was never real. If you paid by check or bank transfer, report to your bank's fraud team and file with the FTC at ReportFraud.ftc.gov.\n\nIf you had claims denied because the insurer was fake, document all claim-related losses. State guaranty funds cover certain losses when a licensed insurer becomes insolvent, but fake unlicensed insurers may not be covered. Consult a licensed insurance attorney to understand your options.","redFlags":["Insurance premium significantly cheaper than every other quote you received","Agent cannot provide the insurer's state license number when asked","No physical address or license listed on the insurance company's website","Policy documents have spelling errors or unusual formatting","Payment goes to a personal bank account rather than the insurance company directly"],"whatToDoNow":["Report to your state Department of Insurance using their fraud reporting portal","Verify whether your policy is legitimate through the state regulator's database","File a credit card chargeback for misrepresentation if paid by card","Report to the FTC at ReportFraud.ftc.gov","Obtain legitimate replacement insurance immediately if your coverage is void"],"faq":[{"question":"How do I verify if an insurance company is licensed in my state?","answer":"Every state Department of Insurance maintains an online database of licensed insurers and agents. Search by the company name or agent license number. You can also call your state's DOI directly."},{"question":"My car was in an accident and the insurer says my policy is not real — what happens?","answer":"You may be personally liable for the accident damages. Consult an attorney immediately. Report to your state DOI. If you were defrauded in good faith, law enforcement action against the scammer may eventually provide some restitution."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-recover-from-a-student-loan-forgiveness-scam","url":"https://scamencyclopedia.org/questions/how-do-i-recover-from-a-student-loan-forgiveness-scam","question":"How do I recover after falling for a student loan forgiveness or debt relief scam?","shortAnswer":"Report to the FTC and CFPB. Cancel any power of attorney you signed and dispute fees charged by the company with your card issuer. Change your FSA ID credentials immediately.","explanation":"Student loan forgiveness scams target borrowers by offering to eliminate, reduce, or manage their federal student loans for an upfront fee. These services collect fees ranging from a few hundred to several thousand dollars, often while doing nothing — or worse, submitting fraudulent applications or stealing the borrower's Federal Student Aid (FSA) login credentials.\n\nThe most urgent action is to log into your studentaid.gov account and change your FSA ID password. Check whether any unauthorized servicer changes, income-driven repayment plan applications, or other account actions were made. If your FSA ID was changed, contact the Federal Student Aid Information Center at 1-800-433-3243 to recover access.\n\nFile a complaint with the FTC at ReportFraud.ftc.gov and the Consumer Financial Protection Bureau at consumerfinance.gov/complaint — debt relief company fraud is a CFPB enforcement priority. Also report to your state attorney general's office.\n\nIf you signed a power of attorney giving the company authority over your loans, revoke it in writing immediately. Dispute already-collected fees as misrepresentation — the services were either not performed or were available for free through the Department of Education. All federal loan repayment plans and forgiveness programs are free to apply for through studentaid.gov.","redFlags":["Company charges an upfront fee for loan forgiveness that is actually free through the DOE","Guarantees of loan forgiveness without reviewing your specific loan details","Asks for your FSA ID username and password","Tells you to stop making loan payments while the application is pending","Cold call or email about your student loans when you did not seek help"],"whatToDoNow":["Change your FSA ID password at studentaid.gov immediately","Check your loan account for unauthorized changes","Dispute any charges with your card issuer","Revoke any power of attorney signed with the company in writing","File with the FTC at ReportFraud.ftc.gov","File with the CFPB at consumerfinance.gov/complaint"],"faq":[{"question":"Is student loan forgiveness ever really free?","answer":"Yes. Programs like Public Service Loan Forgiveness (PSLF), income-driven repayment forgiveness, and Teacher Loan Forgiveness are all applied for directly through studentaid.gov at no charge. You never need to pay a third party to access federal loan programs."},{"question":"The company enrolled me in an income-driven plan and charged me fees — is that fraud?","answer":"Charging fees to enroll someone in a free federal repayment plan is illegal under the FTC's Telemarketing Sales Rule for most debt relief companies. Report to the FTC and dispute the fees with your card issuer."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-protect-myself-from-being-scammed-again","url":"https://scamencyclopedia.org/questions/how-do-i-protect-myself-from-being-scammed-again","question":"How do I protect myself from being scammed again after being a victim?","shortAnswer":"Enable 2FA on key accounts, set up bank transaction alerts, place a fraud alert, and review your digital footprint. Knowledge and concrete security steps are your best protection.","explanation":"Scam victims are unfortunately at higher risk of being targeted again. Recovery scammers actively seek out recent fraud victims. Scammer networks share victim lists. Building your defenses systematically closes the most common attack vectors.\n\nStart with your accounts. Enable two-factor authentication on email, banking, social media, and any other significant account. Use app-based 2FA (Google Authenticator, Authy) rather than SMS-based 2FA where possible, as SIM swapping can bypass SMS codes. Use a unique, strong password for each account — a password manager makes this manageable without the cognitive burden.\n\nSet up real-time transaction alerts for your bank accounts and credit cards. If unauthorized activity occurs, you will know within seconds rather than weeks. Consider using a credit card for online purchases rather than a debit card, as credit card dispute protections are stronger.\n\nReview your online presence. Scammers use social media to harvest personal information (your full name, family connections, employer, address) that they use to personalize attacks. Review privacy settings on Facebook, Instagram, and LinkedIn. Consider whether your phone number needs to be publicly visible anywhere online.\n\nTell a trusted person — family member, friend, or financial advisor — that you want a second opinion before sending money in response to any unexpected situation. Having someone to call when a compelling story arrives breaks the scammer's time-pressure tactic.","redFlags":["Anyone who contacts you unsolicited offering to help with a previous scam","Requests for new forms of payment you have not used before","Any message creating extreme urgency combined with a request for money","Requests for OTPs, passwords, or account access from anyone you did not contact first"],"whatToDoNow":["Enable two-factor authentication on email, banking, and social media","Use unique passwords for every account — consider a password manager","Set up real-time bank transaction alerts","Place a free fraud alert with one credit bureau","Review privacy settings on social media to limit personal information exposure","Designate a trusted person to consult before making unexpected financial decisions"],"faq":[{"question":"Are scam victims more likely to be targeted again?","answer":"Yes. Victim data is shared and sold between criminal networks. Recovery scammers specifically target people who have recently reported losses. Reducing your public profile about the original scam helps, as does signing up for free credit and identity monitoring."},{"question":"What is the single most effective thing I can do to prevent future scams?","answer":"Enable two-factor authentication on your email account. Email is the master key to almost all your other accounts — if an attacker controls your email, they can reset any password. Securing email with 2FA blocks the vast majority of account takeover attempts."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-file-a-complaint-with-the-cfpb-after-a-scam","url":"https://scamencyclopedia.org/questions/how-do-i-file-a-complaint-with-the-cfpb-after-a-scam","question":"How do I file a complaint with the CFPB after a financial scam?","shortAnswer":"File at consumerfinance.gov/complaint. The CFPB routes complaints directly to the financial company, which must respond within 15 days — it is most effective when your bank or payment company is not cooperating.","explanation":"The Consumer Financial Protection Bureau accepts complaints about financial products and services — banks, credit cards, mortgages, student loans, debt collectors, payment apps, and more. Unlike the FTC (which builds enforcement cases from aggregate data), the CFPB directly routes your complaint to the company and requires them to respond. This makes CFPB complaints particularly effective when your bank is denying your fraud reimbursement claim.\n\nTo file, visit consumerfinance.gov/complaint and select the type of financial product involved. You will be asked to describe the issue, what you want to happen, and to upload supporting documents. The CFPB forwards your complaint to the company, which must respond within 15 days and resolve it within 60 days. You receive the company's response through the CFPB portal and can dispute it if you are not satisfied.\n\nThe CFPB database is public (with personal details removed), and companies know that a large volume of similar complaints can trigger regulatory scrutiny. Filing a CFPB complaint about a bank that denied your fraud reimbursement often prompts the bank to reconsider.\n\nThe CFPB also accepts complaints about non-bank financial companies including payment apps if they are acting in a regulated capacity. If the financial company is unresponsive to your complaint or you believe there is a systemic issue, the CFPB complaint portal is one of the most effective consumer leverage tools available.","redFlags":["Bank denied your fraud reimbursement without a meaningful investigation","Payment app refused to refund a documented scam transaction","Debt collector violated your rights under the FDCPA","Lender made unauthorized changes to your loan terms","Financial company refuses to engage with your dispute"],"whatToDoNow":["File at consumerfinance.gov/complaint and describe the issue clearly","Upload all supporting evidence: bank statements, correspondence, fraud reports","Monitor the CFPB portal for the company's response","If the response is unsatisfactory, dispute it through the portal","Also report to the FTC at ReportFraud.ftc.gov as a parallel action"],"faq":[{"question":"Is the CFPB complaint process the same as a lawsuit?","answer":"No. A CFPB complaint is an administrative process that prompts a company response. It is not legally binding and does not award you money. However, it creates an official record, often prompts companies to reconsider denials, and can trigger regulatory investigations when many similar complaints accumulate."},{"question":"Which financial companies fall under CFPB jurisdiction?","answer":"The CFPB covers banks, credit unions, credit card companies, mortgage servicers, student loan servicers, payday lenders, debt collectors, credit reporting bureaus, and certain non-bank payment companies. If unsure, file the complaint anyway — the CFPB will route it or inform you."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-recover-from-an-advance-fee-scam","url":"https://scamencyclopedia.org/questions/how-do-i-recover-from-an-advance-fee-scam","question":"How do I recover from an advance fee scam?","shortAnswer":"Stop paying immediately — no additional fees will release any promised funds, because they do not exist. Report to the FTC, FBI, and the U.S. Secret Service if significant funds were lost.","explanation":"Advance fee fraud (sometimes called 419 scams) follows a consistent pattern: you are promised a large sum of money — an inheritance, lottery win, business opportunity, or government release of funds — that will be yours as soon as you pay a series of fees (taxes, customs, legal costs). Each fee paid leads to another, as long as the victim keeps paying.\n\nThe promised money does not exist. The fees are the entire scheme. No amount of additional payments will release any funds. The only correct action is to stop sending money completely, regardless of how much has already been lost or how close the promised payout seems. Scammers deliberately make victims feel they are 'almost there' to encourage continued payments.\n\nIf any payments were made by credit card, file chargebacks for misrepresentation. For wire transfers or gift cards, follow the relevant specific recovery guides. Report to the FTC at ReportFraud.ftc.gov, the FBI's IC3 at ic3.gov, and if significant funds were lost, the U.S. Secret Service's Financial Crimes Division, which actively investigates advance fee fraud.\n\nPreserve all communications — emails, chat logs, documents sent by the scammers. These help investigators identify criminal networks. Also be aware that some advance fee schemes escalate to impersonating law enforcement, threatening victims with legal action for 'money laundering.' These threats are completely fake.","redFlags":["Unexpected notification of a large inheritance or lottery win you never entered","Business opportunity to help move large funds overseas in exchange for a large commission","Each fee paid leads to a new unexpected fee before funds can be released","Elaborate fake documentation (fake government letters, legal certificates)","Asks you to keep the opportunity secret from family and advisors"],"whatToDoNow":["Stop all payments immediately — the promised funds do not exist","Dispute any credit card charges for misrepresentation","Report to the FTC at ReportFraud.ftc.gov","File with the FBI's IC3 at ic3.gov","If losses are significant, also report to the U.S. Secret Service Financial Crimes Division","Preserve all emails and documents as evidence"],"faq":[{"question":"The scammer threatened to arrest me for 'money laundering' — is this real?","answer":"No. This is a common escalation tactic to frighten victims who have paid money into continuing to cooperate or paying 'legal fees.' Real law enforcement does not threaten people by phone or email demanding payments to avoid arrest. Cease all contact with the scammer."},{"question":"I sent identity documents to the scammer as part of the process — what now?","answer":"If you shared identity documents, follow the steps in the identity document scam guide: place a credit freeze, file with IdentityTheft.gov, and monitor your credit. The scammer may use or sell your documents for identity fraud."}],"lastReviewed":"2026-06-10"},{"slug":"what-should-i-do-if-i-sent-money-by-mistake-to-wrong-person","url":"https://scamencyclopedia.org/questions/what-should-i-do-if-i-sent-money-by-mistake-to-wrong-person","question":"What should I do if I accidentally sent money to the wrong person?","shortAnswer":"Contact your bank or payment app immediately — the faster you act, the better the chance of recovery. Accidental transfers are treated differently from scam transfers and some platforms have direct reversal options.","explanation":"Sending money to the wrong person — through a typo in a phone number, email address, or account number — is a genuine mistake that can sometimes be corrected, especially if you act quickly before the recipient spends the funds.\n\nFor bank transfers and wires, call your bank immediately and explain the accidental transfer. Provide the exact amount, the intended and actual recipient details, and the date and time. Your bank can contact the receiving bank and request a voluntary return of the funds. Most recipients who received money by mistake are cooperative, but the bank process formalizes it.\n\nFor Zelle, Venmo, and Cash App, in-app notifications to the recipient are the primary tool. Zelle specifically includes a 'Request' feature that sends the recipient a message asking for the funds back. Many accidental recipients return money promptly. If they do not, Zelle and PayPal have dispute processes, though these are less robust for voluntary-transfer disputes than for outright fraud claims.\n\nFor credit card or PayPal errors in a merchant transaction, the merchant typically has an obligation to process a refund for obvious billing errors. Contact them directly first. If they refuse, you can dispute through your card issuer on grounds of billing error under the FCBA.\n\nNote: if someone claims you accidentally sent them money and asks you to send it back, be cautious — this is a common scam tactic. Verify through your own bank records, not through messages from the other party.","redFlags":["Someone contacts you claiming you sent them money and asks you to verify personal details","The 'wrong' recipient contacts you asking for money back via a different method than the original","You are asked to accept a payment from a stranger and forward most of it on"],"whatToDoNow":["Call your bank or payment app immediately and explain the accidental transfer","For Zelle or Venmo, use the in-app request feature to ask the recipient to return the funds","Do not send additional money to 'correct' the error — only banks can process true reversals","If the recipient refuses to return funds, file a formal dispute with your bank","Keep records of all communications with the recipient as evidence"],"faq":[{"question":"Is it illegal for someone to keep money sent to them by mistake?","answer":"In most jurisdictions, keeping money you know was sent to you by mistake is not legal — it can constitute unjust enrichment and the sender has a legal right to recover it. A small claims court case is an option if the recipient refuses to return the funds voluntarily."},{"question":"I typed the wrong account number for a wire — can the bank recover the funds?","answer":"Banks can contact the receiving institution and request a return. Whether it succeeds depends on whether the account existed, whether the funds are still there, and whether the receiving bank cooperates. Accidental wire errors have a higher recovery rate than fraud-related ones because the receiving party typically has no motivation to keep money they know is not theirs."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-scam-and-stay-anonymous","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-scam-and-stay-anonymous","question":"Can I report a scam anonymously without giving my personal details?","shortAnswer":"Yes — the FTC and FBI's IC3 accept anonymous reports. Some detail helps investigators but you are not required to provide your name or contact information.","explanation":"Many scam victims hesitate to report because they feel embarrassed, fear retribution, or simply want to protect their privacy. The good news is that both the FTC and the FBI's IC3 accept reports from people who prefer not to share their personal information.\n\nAt ReportFraud.ftc.gov, the FTC allows you to submit a report without creating an account or providing your contact information. The data you submit about the scam — the scammer's phone number, website, payment method, and what happened — is valuable regardless of whether your name is attached. The FTC uses aggregate data, so even an anonymous report contributes to enforcement patterns.\n\nThe FBI's IC3 at ic3.gov similarly does not require full personal identification for a standard complaint. However, if you want law enforcement to potentially follow up with you (if they build a case and need your testimony), providing contact information improves that possibility.\n\nFor reports to your state attorney general, some require contact information to investigate individual cases. However, you can still report purely to flag the scam for the public record. Charity Navigator, the Better Business Bureau, and similar watchdog organizations also accept reports, and their databases are publicly visible — which can protect others even without individual follow-up.\n\nIf you have concerns about retaliation from a specific scammer who knows your identity, mention this context in your FBI IC3 report — the FBI's victim assistance program can advise on safety.","redFlags":["You are aware of an ongoing scam affecting others but have not lost money yourself","You want to flag a suspicious company or website without providing personal details","You have already reported elsewhere and want to flag additional agencies without repeating personal information"],"whatToDoNow":["File an anonymous report at ReportFraud.ftc.gov — no account required","File with the FBI's IC3 at ic3.gov — personal details are optional","Report scam websites to the Anti-Phishing Working Group at reportphishing.antiphishing.org","Flag suspicious listings to the relevant platform (eBay, Facebook, Craigslist)","Visit /report-a-scam for a full directory of reporting options"],"faq":[{"question":"Does anonymous reporting actually help if I provide no contact information?","answer":"Yes. The FTC uses anonymized complaint data to identify patterns, take enforcement action, and issue public warnings. Your report of a specific scam phone number or website, even without your name, adds to the volume of evidence investigators use to build cases."},{"question":"I am afraid the scammer will retaliate if I report — is this a real risk?","answer":"Retaliation from scammers against individual reporters is rare — most scam operations are running hundreds or thousands of targets simultaneously and have no way to identify which victim filed a specific report. If you have a specific safety concern, contact local law enforcement or note it in your FBI IC3 report."}],"lastReviewed":"2026-06-10"},{"slug":"is-text-saying-my-parcel-is-held-a-scam","url":"https://scamencyclopedia.org/questions/is-text-saying-my-parcel-is-held-a-scam","question":"Is a text message saying my parcel is held and I need to pay a fee a scam?","shortAnswer":"Almost certainly yes. Legitimate couriers do not send unsolicited texts demanding payment to release a package, and this is one of the most common smishing (SMS phishing) scams in circulation.","explanation":"Parcel-holding texts typically claim to be from a well-known courier — UPS, FedEx, Royal Mail, DHL, or a national postal service — and say your delivery is suspended due to an unpaid customs fee, re-delivery charge, or address correction. The fee is usually a small amount, typically under $5, designed to seem plausible and to lower your guard.\n\nClicking the link takes you to a convincing counterfeit website that harvests your payment card details. The real danger is not the small fee but the card number you hand over, which is then used for much larger unauthorised charges. Some versions also install malware on Android devices.\n\nLegitimate couriers handle customs fees through the official import process and send invoices by post or through their official app. They do not text random links requiring immediate card payment. If you are expecting a genuine delivery, go directly to the courier's official website — type the address yourself — and track the parcel using your reference number.\n\nIf you have already entered card details, contact your bank immediately to report the transaction as fraud and request a card replacement. Most banks will refund unauthorised charges when reported promptly.","redFlags":["Text arrives from a random mobile number or shortcode, not an official company sender ID","The link uses a suspicious domain that is not the courier's official website","You are not actually expecting any delivery","The fee amount is suspiciously small to seem trivial","The message creates urgency such as 'collect within 24 hours or it is returned'","The payment page asks for your full card number, expiry, and CVV"],"whatToDoNow":["Do not click the link or enter any payment details","If you are expecting a parcel, track it directly on the courier's official website","Forward the text to your national scam-reporting SMS line (e.g. 7726 in the UK and US)","Block the sending number on your phone","If you already entered card details, call your bank's fraud line immediately","Report the scam text to your national consumer protection agency"],"faq":[{"question":"What if I already clicked the link but did not pay?","answer":"You may still be at risk if the site attempted to install malware. Run a security scan on your device, clear your browser cache, and monitor your accounts for unusual activity."},{"question":"Can these texts be reported to the courier named in the message?","answer":"Yes. Most major couriers have a dedicated phishing report email address, such as phishing@dhl.com. Reporting helps them pursue takedowns of fake sites."},{"question":"Why is the fee always so small?","answer":"A tiny fee reduces suspicion and increases the chance you will enter your real card details. The fraudsters then use those details for much larger purchases elsewhere."}],"lastReviewed":"2026-06-10"},{"slug":"is-job-offer-paying-500-dollars-a-day-from-home-a-scam","url":"https://scamencyclopedia.org/questions/is-job-offer-paying-500-dollars-a-day-from-home-a-scam","question":"Is a job offer paying $500 a day to work from home a scam?","shortAnswer":"Most likely yes. Unsolicited job offers promising unusually high daily pay for easy remote work are a classic advance-fee or money-mule recruitment scam.","explanation":"These offers appear in social media DMs, WhatsApp messages, email, and even on legitimate job boards through fake employer accounts. The pitch emphasises high pay, flexible hours, and no experience needed. Common cover stories include data entry, product reviewing, social media liking, or 'Amazon store management.'\n\nOnce you express interest, the 'employer' asks you to pay for training materials, a background check, equipment, or a starter kit. After you pay, the contact disappears or invents a reason you need to pay again. Alternatively, the job turns out to involve receiving money into your bank account and forwarding it on — which makes you an unwitting money mule, which is a serious criminal offence in most countries.\n\nGenuine employers never charge candidates money before they start work. Legitimate remote jobs that pay $500 or more per day typically require specialised professional skills and go through established recruitment channels with verifiable company details, contracts, and onboarding processes.\n\nIf you received such an offer, search for the company name plus the word 'scam' before responding. Look up the company on official business registries and confirm that the recruiter's email domain matches the company's real website.","redFlags":["Contacted out of nowhere, often through WhatsApp or Telegram","No interview process or only a brief text-based 'interview'","Asked to pay upfront for training, equipment, or registration","Vague job description such as 'likes and reviews' or 'simple tasks'","Employer cannot provide a verifiable physical address or company registration number","Payments promised via cryptocurrency, gift cards, or informal money transfer"],"whatToDoNow":["Do not pay any money or provide bank account details","Search the company name plus 'scam' and check reviews on sites like Glassdoor","Verify the company on your country's official business registry","Report the listing to the job platform where you found it","If you already paid, report it to your bank and national fraud agency","Warn friends and family if the offer arrived via social media"],"faq":[{"question":"Are there any legitimate high-paying work-from-home jobs?","answer":"Yes, but they require verifiable skills such as software development, copywriting, or consulting, and are found through reputable platforms like LinkedIn, Indeed, or direct company career pages — not unsolicited messages."},{"question":"What is a money mule and why is it a problem for me?","answer":"A money mule receives stolen funds and transfers them to another account on behalf of criminals. Even if you did not know the money was stolen, you can face criminal charges, account freezing, and a lasting impact on your financial record."}],"lastReviewed":"2026-06-10"},{"slug":"is-crypto-giveaway-doubling-my-money-a-scam","url":"https://scamencyclopedia.org/questions/is-crypto-giveaway-doubling-my-money-a-scam","question":"Is a crypto giveaway that promises to double my coins a scam?","shortAnswer":"Yes, without exception. No legitimate person or organisation has ever run a crypto giveaway that genuinely doubles coins sent to them. Every single one is a theft.","explanation":"Crypto doubling giveaways typically impersonate famous figures — tech executives, celebrities, or respected crypto personalities — and announce that for a limited time, any amount of cryptocurrency sent to a wallet address will be returned doubled. They spread via hacked social media accounts, YouTube livestreams using deepfake or recycled footage, and paid advertisements.\n\nThe mechanics are simple: you send coins, the fraudster keeps them, and nothing comes back. The 'double return' never happens. These scams have collectively stolen vast sums from victims worldwide, with losses documented in the hundreds of millions of dollars across multiple years.\n\nNo exchange, charity event, or celebrity has a legitimate reason to ask you to send cryptocurrency first and receive more back. This dynamic — send first to get more — is economically absurd and is always a scam regardless of how professional the website looks or how many fake comments show 'testimonials.'\n\nCrypto transactions are irreversible. Once you send coins to a scam wallet, there is no mechanism to recover them through the blockchain. Your only recourse is reporting to law enforcement and hoping for a coordinated takedown.","redFlags":["Impersonates a well-known company, celebrity, or public figure","Claim that you must send crypto first to receive more back","Countdown timer or 'limited slots remaining' pressure","Comments section filled with fake success stories","Promoted via a hacked social account or suspicious YouTube stream","Wallet address changes if you look more than once — sign of mass rotation"],"whatToDoNow":["Do not send any cryptocurrency to the address","Report the post or stream to the platform immediately","If you believe a real person's account has been hacked, alert them directly through another channel","If you already sent funds, report to your local cybercrime unit","Document the wallet address and screenshot the scam page for your report","Warn others in relevant communities to prevent further victims"],"faq":[{"question":"Why do these scams keep appearing even though they are well known?","answer":"Because they work on a small percentage of victims, and the low cost of launching them means fraudsters profit even with a tiny conversion rate. New victims encounter them daily."},{"question":"Can the stolen crypto ever be traced?","answer":"Blockchain transactions are publicly traceable, and law enforcement agencies increasingly use blockchain analytics to follow funds. However, recovery is rare because fraudsters quickly move coins through mixers or overseas exchanges."}],"lastReviewed":"2026-06-10"},{"slug":"is-tech-support-popup-saying-my-computer-is-infected-a-scam","url":"https://scamencyclopedia.org/questions/is-tech-support-popup-saying-my-computer-is-infected-a-scam","question":"Is a pop-up warning saying my computer is infected and I must call a number a scam?","shortAnswer":"Yes. These are tech support scam pop-ups. No legitimate antivirus or operating system company sends browser pop-ups telling you to call a phone number.","explanation":"Tech support pop-ups are designed to look like official Microsoft, Apple, or antivirus warnings. They often freeze your browser, play a loud alarm sound, and display a toll-free number to call. The pop-up cannot actually be closed by clicking the X, which adds to the panic.\n\nIf you call the number, a convincing 'technician' answers and asks to take remote control of your computer using legitimate tools like AnyDesk or TeamViewer. Once connected, they show you normal system logs and pretend these are signs of infection to justify charging hundreds of dollars for fake 'removal' services or unnecessary software subscriptions. Some also install real malware or steal files while connected.\n\nMicrosoft, Apple, and legitimate security companies do not reach out to consumers via browser pop-ups asking them to call a number. If your computer has a real problem, your installed antivirus software will notify you through its own application interface, not through a browser window.\n\nTo close a frozen pop-up, press Alt+F4 on Windows or Command+W on Mac. If that does not work, force-quit the browser entirely. Run a scan with your real antivirus software afterward to confirm nothing malicious was installed from the page.","redFlags":["Browser freezes and cannot be closed normally","Loud alarm or robotic voice claiming your computer is compromised","A phone number to call for 'immediate support'","Mimics the logo and colour scheme of Microsoft, Apple, or a known security brand","Claims to be from your ISP or government saying illegal activity was detected","Urgency language such as 'do not shut down your computer'"],"whatToDoNow":["Do not call the number on the pop-up under any circumstances","Force-close the browser: Alt+F4 on Windows, Command+Q on Mac, or use Task Manager","Run a full scan with your genuine, installed antivirus software","Clear your browser's cache and check for any unwanted browser extensions","If you already gave remote access, disconnect from the internet immediately and run a security scan","If you paid by card, contact your bank to dispute the charge"],"faq":[{"question":"What if I already gave the caller remote access but did not pay?","answer":"Assume the worst. Change all passwords immediately, especially for email and banking. Scan your computer with legitimate security software, and consider taking it to a trusted local technician for a full review."},{"question":"Why can I not close the pop-up normally?","answer":"Fraudulent pages use JavaScript code that prevents the browser's normal close behaviour. Force-quitting the browser bypasses this entirely."},{"question":"Is the pop-up itself a virus?","answer":"Usually not — it is a web page designed to look alarming. However, some pop-up pages attempt to download actual malware, so running a scan after encountering one is always advisable."}],"lastReviewed":"2026-06-10"},{"slug":"is-unexpected-refund-deposited-into-my-account-a-scam","url":"https://scamencyclopedia.org/questions/is-unexpected-refund-deposited-into-my-account-a-scam","question":"Is an unexpected refund that appeared in my bank account a scam?","shortAnswer":"It could be. Unexpected deposits are a hallmark of the overpayment scam, where the money will later be reclaimed — leaving you out of pocket if you spent it or sent any of it back.","explanation":"In the classic overpayment scam, a stranger contacts you — often posing as a buyer of something you listed for sale, or as someone who made a payment error — and says they accidentally sent you too much money. They ask you to keep a portion and send the rest back. The original deposit often comes via a cheque, which appears in your account before clearing. When the cheque bounces days later, the bank reverses the funds, but any real money you sent back is gone.\n\nA related version involves criminals who have compromised another person's account sending funds to yours as part of a money laundering chain. You are then asked by a stranger to forward the money on. This makes you a money mule and can lead to account freezing and criminal investigation, even if you had no knowledge of the crime.\n\nA third scenario is pure error — real overpayments do happen — but the safe response is the same: do not spend the money, do not send any of it back without speaking to your bank first, and contact the sending institution through official channels to understand the source.\n\nIf you receive an unexpected deposit, call your bank directly using the number on the back of your card. Never use contact details provided by the person who told you about the deposit.","redFlags":["Someone contacts you claiming to have sent you money by mistake","The deposit arrived via a cheque or money order rather than a bank transfer","You are asked to send a portion of the money back, often to a different account","You are asked to convert the funds to gift cards or cryptocurrency before sending","The sender is a stranger or someone you met recently online","The amount deposited is suspiciously round or large"],"whatToDoNow":["Do not spend the money and do not send any of it to anyone","Call your bank directly using the number on your card to report the unexpected deposit","Ask your bank to place a hold on the funds until their origin is confirmed","Do not use contact details or account numbers provided by the person who told you about the deposit","If the person is pressuring you, block them and report to your national fraud line","Keep records of all communications about the deposit"],"faq":[{"question":"What if the bank says the money is mine to keep?","answer":"Banks can still reverse funds after telling you they have cleared if a fraud claim comes in later. Do not treat unexpected money as yours until your bank explicitly confirms in writing that it is."},{"question":"Can I get in trouble if I spent the money accidentally?","answer":"You may be required to repay the amount even if you spent it in good faith. This is why keeping the funds untouched pending bank confirmation is the safest approach."}],"lastReviewed":"2026-06-10"},{"slug":"is-romance-match-asking-for-money-a-scam","url":"https://scamencyclopedia.org/questions/is-romance-match-asking-for-money-a-scam","question":"Is a romance match I met online who is now asking me to send money a scam?","shortAnswer":"Yes, almost certainly. Someone you have never met in person asking for money — regardless of the reason given — is the defining behaviour of a romance scam.","explanation":"Romance scams begin with a convincing online persona, typically on a dating app, social media, or even a gaming platform. The scammer builds genuine emotional intimacy over days or weeks before an emergency arises: a medical crisis, a business deal gone wrong, travel costs to come and meet you, or a lucrative investment opportunity they want to share. Every request for money is accompanied by a plausible story and reassurances of love.\n\nScammers operate from scripts refined over years and often manage multiple victims simultaneously. The photos they use are stolen from real people, and reverse-image searching the profile pictures is one of the fastest ways to identify a fake account. AI-generated images are increasingly used and are harder to detect this way.\n\nThe requests start small and escalate. Each payment is followed by another crisis requiring more money. Victims sometimes send tens of thousands of dollars before realising what is happening. When you stop sending money, the relationship ends abruptly — confirming what was really going on.\n\nIf your online partner has never video-called in real time, always has an excuse to avoid meeting in person, or seems too perfect to be true, treat these as serious warning signs. You deserve to have your feelings taken seriously, and the best way to protect yourself is to confirm the person is real before the relationship deepens.","redFlags":["Never willing to video call in real time or always has camera problems","Professes strong feelings very quickly — love-bombing early in the relationship","Their profile photos match results from a reverse-image search of other people","Always has a reason they cannot meet in person despite planning to","First money request tied to an emotional emergency like medical bills or a stuck business payment","Asks you to keep the relationship private or not discuss it with family","Encourages you to invest in crypto or other assets through a platform they recommend"],"whatToDoNow":["Stop sending money immediately and do not send any more regardless of the explanation","Do a reverse-image search of their profile photos using Google Images or TinEye","Tell a trusted friend or family member about the relationship to get an outside perspective","Report the profile to the platform where you met them","Report the scam to your national fraud agency or consumer protection body","If you sent money recently, contact your bank to try to recall the payment","Seek emotional support — being deceived in this way is genuinely distressing"],"faq":[{"question":"What if we have been talking for months and it feels very real?","answer":"Scammers invest months or even years in building relationships because the payoff is larger. The length of time does not confirm authenticity — consistent refusal to video call or meet in person is more meaningful than the duration."},{"question":"Can the money I sent be recovered?","answer":"Recovery is difficult. Bank transfers and crypto payments are hard to reverse. Report immediately and ask your bank whether a recall is possible. Specialist recovery services that charge upfront fees are themselves often scams."},{"question":"Is it my fault for being scammed?","answer":"No. These operations are run by professional fraudsters who exploit normal human needs for connection. Falling for a romance scam is not a sign of naivety; it is a sign that a skilled deceiver targeted you."}],"lastReviewed":"2026-06-10"},{"slug":"is-this-website-selling-designer-goods-at-huge-discounts-legit","url":"https://scamencyclopedia.org/questions/is-this-website-selling-designer-goods-at-huge-discounts-legit","question":"Is a website selling designer goods at huge discounts legit?","shortAnswer":"Almost never. Websites offering branded goods at 70-90% off retail are typically selling counterfeits, or will take your money and ship nothing at all.","explanation":"Counterfeit goods sites are built to look like genuine discount retailers. They invest in professional photography (stolen from real brands), convincing brand logos, fake reviews, and secure-padlock HTTPS certificates — none of which verify the business is legitimate. Prices are set low enough to tempt bargain-hunters but high enough to seem plausible as a sale.\n\nOutcomes range from receiving a poor-quality fake that bears a passing resemblance to the real thing, to receiving the wrong item entirely, to receiving nothing at all. Card details entered on these sites are also at risk of being harvested for separate fraud.\n\nThe age and reputation of a website are among the most reliable signals. A site registered within the past 12 months, lacking any verifiable business address, with no findable customer service history, and carrying only five-star reviews that all sound alike is almost certainly fraudulent. Legitimate discount retailers have traceable histories, return policies, and real customer complaints mixed in with positive reviews.\n\nBefore buying from an unfamiliar site, check the domain age (tools like WHOIS provide this), search the site name plus 'reviews' or 'scam,' look for the site on Trustpilot or similar independent review platforms, and verify that a real return address exists.","redFlags":["Prices are 70% or more below known retail value for luxury or branded items","Site was registered within the past year and has no review history","No verifiable physical business address or company registration","Reviews are overwhelmingly five-star and sound templated","Contact is only through a web form or email — no phone number","Social media links lead to empty or newly created pages","Checkout requires a wire transfer, cryptocurrency, or gift card payment"],"whatToDoNow":["Check the domain age using a WHOIS lookup tool before purchasing","Search the site name plus 'review' and 'scam' to find other customers' experiences","Look the site up on independent review platforms such as Trustpilot","Verify the business address using a map service to confirm it exists","If you already ordered and received counterfeits or nothing, dispute the charge with your card issuer","Report the site to your national trading standards or consumer protection agency"],"faq":[{"question":"Does HTTPS mean the site is safe?","answer":"No. HTTPS only means the connection between your browser and the site is encrypted. It says nothing about the honesty of the business operating the site. Fraudulent sites routinely use HTTPS."},{"question":"What if I paid by credit card — can I get a refund?","answer":"Yes, credit card chargebacks are one of the best protections against non-delivery or misrepresented goods. File a dispute with your card issuer as soon as possible, typically within 60 to 120 days of the transaction."}],"lastReviewed":"2026-06-10"},{"slug":"is-government-text-saying-i-owe-taxes-and-face-arrest-a-scam","url":"https://scamencyclopedia.org/questions/is-government-text-saying-i-owe-taxes-and-face-arrest-a-scam","question":"Is a text or call saying I owe back taxes and will be arrested if I do not pay immediately a scam?","shortAnswer":"Yes. Tax authorities in every country communicate via official post, not surprise phone calls or texts threatening immediate arrest. This is one of the most common government impersonation scams.","explanation":"Government impersonation scams mimic the IRS, HMRC, the ATO, or equivalent tax agencies. The caller or message claims you have unpaid taxes and that a warrant has been issued for your arrest, which will be executed unless you make immediate payment. The pressure to act fast is deliberate — panic clouds judgment.\n\nThe payment demand almost always involves methods that real government agencies never use: iTunes or Google Play gift cards, cryptocurrency, wire transfers to unknown accounts, or payments via app. Real tax agencies accept payment through official government portals, cheques, or bank transfers to published accounts.\n\nReal tax disputes begin with formal written notices mailed to your registered address. If you do owe taxes, there is an established process of written correspondence, formal appeals, and payment plans — not a surprise phone call demanding gift cards within the hour.\n\nIf you are genuinely unsure whether you owe taxes, hang up and contact the tax authority directly using the number published on their official government website. Never use a callback number provided by the caller.","redFlags":["Demands immediate payment to avoid arrest, deportation, or licence suspension","Requires payment via gift cards, wire transfer, or cryptocurrency","Caller is aggressive, threatening, or refuses to let you call back later","The contact number is not a verified government number","First contact was a call or text rather than formal written notice","Asks you to keep the matter secret from family or advisers"],"whatToDoNow":["Hang up or ignore the message immediately","Never provide payment or personal details to the caller","Look up the real tax authority number from the official government website","Call that number directly to confirm whether any genuine debt exists","Report the scam call to your national scam reporting line and telecom regulator","If you already paid with gift cards, keep the cards and receipts as evidence"],"faq":[{"question":"Will the real tax authority ever call me?","answer":"Tax authorities do sometimes call, but only after establishing a written correspondence trail. They will never demand gift card payment or threaten immediate arrest on a first contact call."},{"question":"I paid with gift cards — can I recover the money?","answer":"Recovery is very difficult. Contact the gift card issuer immediately with your receipt, as some issuers have fraud teams that can occasionally freeze unused card balances. Report to your national fraud agency."}],"lastReviewed":"2026-06-10"},{"slug":"is-recruiter-on-linkedin-asking-for-personal-details-before-interview-legit","url":"https://scamencyclopedia.org/questions/is-recruiter-on-linkedin-asking-for-personal-details-before-interview-legit","question":"Is a recruiter on LinkedIn asking for my personal details before scheduling an interview legit?","shortAnswer":"Likely not. Legitimate recruiters do not need your Social Security number, passport details, or bank information before an initial interview has even taken place.","explanation":"Fake recruiter profiles on LinkedIn are sophisticated. They typically have a profile photo, several connections, and a plausible job history. They reach out with an attractive-sounding role and move quickly to 'confirm your identity' before scheduling your interview, requesting government ID numbers, date of birth, address, and sometimes banking details for 'direct deposit setup.'\n\nThe information collected enables identity theft and can be used to open fraudulent credit accounts, file false tax returns, or access financial accounts. Once handed over, this data cannot be recalled.\n\nLegitimate hiring processes request personal details only after a job offer has been accepted, and they do so through official HR channels — a company email address with the real domain, a formal onboarding portal, or in-person at the company's office. Initial contact by a recruiter involves nothing more than a CV and perhaps a brief questionnaire.\n\nTo verify a recruiter, search for them on LinkedIn and check whether they are actually connected to the company they claim to represent. Look up the company's real HR or careers page and reach out independently to confirm the role exists.","redFlags":["Requests government ID, SSN, or passport number before any interview","Asks for bank account details for payroll before you have an offer","Profile was created recently and has few connections or endorsements","The job offer sounds very well paid for minimal described responsibilities","Communicates primarily via WhatsApp or personal email rather than company channels","Interview is conducted entirely by text or email with no video or voice call"],"whatToDoNow":["Do not provide any personal or financial details until a formal offer is in place","Independently verify the job listing on the company's own website","Contact the company's HR department directly using a number from their official site","Check the recruiter's LinkedIn profile for signs of fabrication","Report the suspicious profile to LinkedIn","If you already shared identity documents, place a fraud alert with the major credit bureaus"],"faq":[{"question":"Is it ever normal to provide ID before an interview?","answer":"No. Background checks and ID verification happen after a job offer, as part of a formal onboarding process. Any request before an interview is a red flag."},{"question":"What if the company name checks out when I search it?","answer":"Scammers impersonate real companies. Always contact the real company directly through their official website contact page — do not rely on contact details the recruiter provides."}],"lastReviewed":"2026-06-10"},{"slug":"is-prize-notification-saying-i-won-a-lottery-i-did-not-enter-a-scam","url":"https://scamencyclopedia.org/questions/is-prize-notification-saying-i-won-a-lottery-i-did-not-enter-a-scam","question":"Is a notification saying I won a lottery or prize draw I never entered a scam?","shortAnswer":"Yes, always. You cannot win a lottery or competition you never entered, and any 'prize' that requires you to pay fees or provide financial details first is a scam.","explanation":"Lottery and prize scams are among the oldest frauds in existence and remain effective because winning money is a powerful emotional hook. They arrive by email, letter, SMS, or social media message and claim you have won a life-changing sum from a well-known organisation — often using real company names like a national lottery, a soft-drink brand, or an international bank.\n\nThe catch follows quickly: to claim your prize you must pay an 'administrative fee,' 'customs charge,' 'tax advance,' or 'processing fee.' Once you pay, another fee is invented. Some victims pay repeatedly over months before realising the prize does not exist. Others hand over bank details to receive the 'transfer,' which results in unauthorised withdrawals instead.\n\nThe law in virtually every country requires that legitimate competitions be free to enter and free to claim. Legitimate prizes are also announced through verifiable official channels — not unsolicited messages from strangers.\n\nIf you want to verify whether a brand is running a real promotion, go directly to that brand's official website and social media accounts. Anything that requires upfront payment to claim a prize is a scam.","redFlags":["You have no memory of entering the competition named","You are asked to pay fees to release your winnings","The notification demands secrecy or says prizes expire within hours","Uses names of real well-known companies but comes from unofficial contact details","Asks for your bank account details to transfer the prize","The prize amount is implausibly large relative to the competition described"],"whatToDoNow":["Ignore and delete the notification","Do not pay any fee regardless of the explanation given","Do not provide bank account or personal details","If a known brand name is misused, report it to that company's official fraud line","Report to your national consumer protection or fraud reporting agency","Warn friends and family — these often spread through forwarded messages"],"faq":[{"question":"What if the letter or email looks very official?","answer":"Official appearance is easy to fake with a printer and copied logos. Authenticity must be confirmed through the organisation's own verified contact channels, not through the document itself."},{"question":"Is there such a thing as a real unclaimed prize?","answer":"Real unclaimed prizes are held by verified organisations and can be confirmed on their official website. They never require advance fees and do not contact winners through unsolicited mass messaging."}],"lastReviewed":"2026-06-10"},{"slug":"is-seller-on-facebook-marketplace-asking-for-payment-by-bank-transfer-safe","url":"https://scamencyclopedia.org/questions/is-seller-on-facebook-marketplace-asking-for-payment-by-bank-transfer-safe","question":"Is a seller on Facebook Marketplace asking me to pay by direct bank transfer safe?","shortAnswer":"It carries significant risk. Bank transfers to unknown private sellers offer little buyer protection, and Marketplace scams requesting transfers before delivery are common.","explanation":"Facebook Marketplace connects buyers with local and national sellers, but the platform does not verify seller identities or guarantee transactions paid outside its official checkout. When a seller insists on a bank transfer instead of Marketplace checkout, PayPal, or a protected payment method, you lose the consumer protection those systems provide.\n\nCommon scenarios: the item never arrives after you pay, the item arrives and is significantly not as described, or the seller disappears entirely. High-value items like electronics, vehicles, and concert tickets are the most common targets. Scammers also create convincing fake listings for items they do not own, collecting payments from multiple buyers.\n\nAnother version asks you to pay by Zelle, Venmo, or CashApp — all of which are considered 'friends and family' style payments that are difficult or impossible to reverse. Legitimate resale does happen on these platforms, but insistence on transfer-only payment from a new account with few reviews is a warning sign.\n\nFor any significant purchase, prefer Marketplace's built-in checkout for shipped items, use a credit card where possible, meet in person for local pickups, and inspect the item before handing over payment.","redFlags":["Seller insists on bank transfer, Zelle, or CashApp and will not accept other payment","Account was created recently and has no reviews or selling history","Price is significantly below market value for the item described","Seller is unwilling to video call showing the item or meet locally","Asks for payment before you can inspect or collect the item","Listing photos appear in reverse-image searches from other sites"],"whatToDoNow":["Use Marketplace's official checkout or a credit card for any financial protection","For local pickups, meet in a public place and inspect the item before paying","Do a reverse-image search of listing photos to check they are original","Check the seller's profile creation date and review history","If you already paid and received nothing, report to Facebook and your bank immediately","File a report with your national consumer protection agency"],"faq":[{"question":"Is it always a scam if they want a bank transfer?","answer":"Not always — some legitimate private sellers prefer transfers. The risk level depends on the value, whether you can inspect first, and how established the seller's profile appears. For high-value items, always prefer in-person inspection and protected payment."},{"question":"What if I paid by Zelle and was scammed?","answer":"Zelle transfers are difficult to reverse because the network is designed for trusted transactions. Report to Zelle, your bank, and the FTC. Some banks may offer limited help if fraud is provable, but recovery is not guaranteed."}],"lastReviewed":"2026-06-10"},{"slug":"is-investment-opportunity-promising-guaranteed-high-returns-legit","url":"https://scamencyclopedia.org/questions/is-investment-opportunity-promising-guaranteed-high-returns-legit","question":"Is an investment opportunity promising guaranteed high returns with no risk legit?","shortAnswer":"No legitimate investment can guarantee high returns with no risk. This promise is the defining characteristic of a Ponzi scheme or investment fraud.","explanation":"All real investments carry some level of risk, and returns are never guaranteed. When someone promises both high returns and zero risk, they are either lying or have no understanding of how investing works. In practice, these promises almost always indicate a Ponzi scheme, a pyramid scheme, or outright fraud.\n\nIn a Ponzi scheme, early investors are paid returns using money from newer investors, creating the illusion of a successful fund. The scheme collapses when recruitment slows and there is not enough new money to pay existing participants. Those who got in last — often the most vulnerable — lose everything.\n\nThese offers spread through social media, encrypted messaging groups, and word of mouth within communities. They often leverage trust — your friend, a religious or cultural community contact, or a respected local figure vouches for the opportunity. This makes it harder to be sceptical.\n\nLegitimate investment products are regulated, their operators are licensed, and their historical performance is verifiable. Before investing, check that the firm is registered with your country's financial regulator and search its name in the regulator's public database.","redFlags":["Promises guaranteed returns, especially high ones like 10-30% per month","Claims there is no risk or that funds are fully insured","You were introduced by a friend in a community group — affinity fraud pattern","Operator is not registered with the financial regulator","Withdrawals are difficult or require recruiting other investors first","Strategy is vague or described as proprietary and unexplainable","Pressure to recruit others to earn higher returns"],"whatToDoNow":["Do not invest before verifying the firm's registration with the financial regulator","Search the company name on your regulator's official investor alert list","Ask for a copy of the prospectus or audited accounts and have them reviewed independently","If you have already invested, request a full withdrawal in writing","Report to your national financial regulator if you believe it is fraudulent","Warn others in any community where it is circulating"],"faq":[{"question":"What is the difference between a Ponzi scheme and a pyramid scheme?","answer":"In a Ponzi scheme, returns are paid from new investor money without participants needing to recruit. In a pyramid scheme, participants must recruit others to earn returns. Both are fraudulent and unsustainable."},{"question":"What if my friend genuinely made money from it?","answer":"Early investors in Ponzi schemes do receive real payments — that is what makes the scheme convincing. Your friend's returns were funded by other victims' deposits, and the scheme will eventually collapse."}],"lastReviewed":"2026-06-10"},{"slug":"is-call-claiming-to-be-my-bank-about-suspicious-activity-a-scam","url":"https://scamencyclopedia.org/questions/is-call-claiming-to-be-my-bank-about-suspicious-activity-a-scam","question":"Is a call claiming to be my bank warning about suspicious activity on my account a scam?","shortAnswer":"It may be a legitimate bank call or it may be bank impersonation fraud — sometimes called authorised push payment fraud. You should always hang up and call your bank back using the official number.","explanation":"Bank impersonation calls are among the most convincing scams because they start with plausible information. Fraudsters use data from previous breaches to name your bank, last transaction, or even partial card numbers, which creates a false sense of authenticity. They then ask you to take urgent action — transferring your money to a 'safe account,' confirming a one-time passcode, or reading out full card details to 'freeze suspicious transactions.'\n\nNo legitimate bank will ever ask you to move your money to a safe account. Banks do not create safe accounts during fraud investigations. They also will not ask you to read back a one-time passcode you just received — that OTP is the only security standing between a fraudster and your account.\n\nCalls can be spoofed to show your bank's real phone number on caller ID, making them appear entirely genuine. This is why you cannot trust caller ID alone. The safest response to any unexpected bank call is to thank the caller, hang up, wait a few minutes (some fraudsters stay on the line), and call the number on the back of your card.\n\nIf an urgency-driven bank call asks you to do anything unusual with your money or credentials, treat it as fraud.","redFlags":["Asks you to transfer money to a new 'safe' account","Asks you to read back a one-time passcode that just arrived","Asks for your full PIN, full card number, or online banking password","Creates urgency by saying your money will be stolen if you do not act immediately","Caller ID shows your bank's real number — this can be spoofed","Discourages you from hanging up or verifying through another channel"],"whatToDoNow":["Hang up immediately if the caller asks for passwords, PINs, or to move money","Wait a few minutes before calling back on a different phone line if possible","Call the number on the back of your bank card to speak to real fraud staff","Tell your bank about the suspicious call so they can log it","Check your account for any unauthorised transactions","Report the call to your national fraud reporting line"],"faq":[{"question":"My bank's actual phone number appeared on caller ID. Is it still fake?","answer":"Yes, it can be. Caller ID spoofing technology allows any number to be displayed, including your bank's genuine number. Caller ID is not proof of identity."},{"question":"What if I already gave them my OTP?","answer":"Contact your bank immediately. An OTP that has been shared should be treated as compromised. Your bank may be able to freeze pending transactions if you call within minutes."}],"lastReviewed":"2026-06-10"},{"slug":"is-charity-asking-for-donations-after-disaster-legit","url":"https://scamencyclopedia.org/questions/is-charity-asking-for-donations-after-disaster-legit","question":"Is a charity asking for donations after a natural disaster or emergency legit?","shortAnswer":"It may not be. Fake charity solicitations surge immediately after major disasters, mimicking real organisations to divert donations. Always verify before giving.","explanation":"Disaster fraud is one of the most widespread forms of charity scam. Within hours of a major earthquake, flood, or humanitarian crisis, fraudulent organisations appear with names close to those of established charities, fake websites, and social media donation links. They exploit the moment when public generosity is highest and verification is hardest.\n\nTactics include creating websites that closely mimic UNICEF, Red Cross, or other trusted names; running paid social media advertisements with heart-wrenching imagery; and sending mass emails pretending to be from known charities requesting donations to specific relief funds.\n\nThe charity registration number is your fastest check. In most countries, registered charities have public entries in a national charity regulator database. If a soliciting organisation cannot produce a registration number, or if that number does not match any record in the official database, the organisation should be treated with extreme suspicion.\n\nAnother safe practice is to give directly through a charity's official website by typing the URL yourself — never through a link in an unsolicited email or social media advertisement. Established charities such as the Red Cross, Doctors Without Borders, and major domestic disaster relief organisations have well-documented track records and transparent financials.","redFlags":["Solicitation arrives immediately after a disaster through social media ads","Organisation name is similar to but slightly different from a known charity","Cannot provide a charity registration number when asked","Requests donation via wire transfer, cryptocurrency, or gift card","Website was registered within the past few weeks","High-pressure language urging immediate donation before verification"],"whatToDoNow":["Look up the charity on your national charity regulator's official database","Donate directly through the charity's official website, typed manually","Do not click donation links in unsolicited emails or social media ads","If you suspect a fraudulent charity, report it to the charity regulator","Share verified donation links to help others give safely","Consider donating to organisations with multi-year track records for the disaster region"],"faq":[{"question":"How do I find a charity's registration number?","answer":"Search your country's charity regulator website. In the US, the IRS Exempt Organizations database lists registered 501(c)(3) organisations. In the UK, use the Charity Commission register. In Australia, use the ACNC register."},{"question":"Is it safe to donate through GoFundMe or similar crowdfunding sites?","answer":"Crowdfunding platforms verify some campaign details but not all. For disaster relief, established registered charities are more accountable than individual campaigns, which vary greatly in legitimacy."}],"lastReviewed":"2026-06-10"},{"slug":"is-free-trial-that-requires-my-card-details-a-scam","url":"https://scamencyclopedia.org/questions/is-free-trial-that-requires-my-card-details-a-scam","question":"Is a free trial offer that requires my credit card details a scam?","shortAnswer":"Many are legitimate, but 'free trial' offers that bury subscription charges in fine print or make cancellation difficult are a form of billing scam. Know the terms before you enter your card.","explanation":"Negative-option billing is a legal but often deceptive practice where entering card details for a free trial automatically enrols you in a paid subscription when the trial period ends. The charge amount and the cancellation process may be buried in the terms and conditions, making it easy to miss until a large charge appears on your statement.\n\nMore aggressive versions are outright scams: you are charged the full subscription amount immediately despite the free trial promise, the cancellation function on the website does not work, and customer service is unreachable. Some sites also sell your card details to third parties, who add further unauthorised charges.\n\nThe clearest warning signs are: no easy-to-find cancellation option, a contact page with only a web form and no phone number, ambiguous pricing language, and an extremely low trial price that implies a high post-trial charge.\n\nBefore entering card details for any free trial, read the cancellation policy, note the trial end date, set a calendar reminder, and check reviews. Some people use virtual card numbers or privacy-focused card services that allow you to set spending limits or cancel a specific merchant's access without changing your main card.","redFlags":["Cancellation process requires calling a hard-to-reach phone number or mailing a letter","Trial price is very low but post-trial subscription charge is buried in fine print","Company has many complaints about difficulty cancelling","Website lacks a physical address or clear contact details","Terms auto-enrol you in additional products you did not consciously choose","Offer requires more personal information than is needed for a trial"],"whatToDoNow":["Read the full terms before entering your card, especially the cancellation policy","Set a calendar reminder a day before the trial ends to cancel if you wish","Screenshot the terms confirming the trial period and cancellation method","If charged unexpectedly, contact the company first, then dispute with your card issuer","Report deceptive subscription practices to your consumer protection agency","Consider using a virtual card with a spending limit for free trials"],"faq":[{"question":"Can I dispute the charge if I forgot to cancel?","answer":"You can try, but issuers may decline if you agreed to the terms. Disputes are more successful when the company misrepresented the terms or made cancellation functionally impossible."},{"question":"Are all negative-option trials scams?","answer":"No. Many legitimate streaming and software services use free trials with auto-renewal. The difference is transparency — legitimate services clearly disclose the charge date, amount, and a simple cancellation path."}],"lastReviewed":"2026-06-10"},{"slug":"is-rental-listing-with-very-low-rent-asking-for-deposit-before-viewing-a-scam","url":"https://scamencyclopedia.org/questions/is-rental-listing-with-very-low-rent-asking-for-deposit-before-viewing-a-scam","question":"Is a rental listing with unusually low rent that asks for a deposit before I can view the property a scam?","shortAnswer":"Almost certainly yes. Requiring a deposit before a viewing is a near-universal signal of rental fraud. You should never pay money to see a property you have not yet inspected in person.","explanation":"Rental scams typically involve a landlord or agent posting a listing for a desirable property at below-market rent, then explaining that the property is currently unavailable to view because they are abroad, the keys are with a property manager, or access requires a refundable security deposit first. Once the deposit is paid, the contact disappears.\n\nScammers often use real property photographs scraped from legitimate listings or estate agent websites, making the listing look authentic. They may also send convincing fake lease agreements and reference letters. Some operate across platforms simultaneously, collecting deposits from multiple victims for the same property.\n\nLegitimate landlords and letting agents in every country allow prospective tenants to view the property before any money changes hands. Paying a holding deposit is sometimes legitimate after you have viewed a property and decided you want it — but it is never required simply to arrange a viewing.\n\nBefore responding to any rental listing, reverse-image search the photographs to check whether they are duplicated across multiple listings or on estate agent websites under a different address.","redFlags":["Rent is significantly below comparable properties in the area","Requires a deposit or 'viewing fee' before you can see the property","Landlord claims to be abroad or otherwise unable to meet in person","Rushes you to commit quickly to avoid losing the property to other applicants","Communication is only via email or messaging app with no phone call","Property photos appear on other listings under different addresses when searched"],"whatToDoNow":["Never pay any money before viewing a property in person","Reverse-image search the listing photos to check for duplication","Verify the property address exists and matches the photos using map services","Contact local letting agents to check whether the property is actually being rented","If you already sent a deposit, report it to police and your bank","File a report with your national housing or consumer protection authority"],"faq":[{"question":"What if the landlord sends a signed contract before asking for money?","answer":"Contracts and official-looking documents can be forged easily. The test is simple: do not pay until you have physically viewed and confirmed the property exists as described."},{"question":"Is a 'holding deposit' to reserve a viewing ever legitimate?","answer":"No. Viewing a property is free. A holding deposit to reserve a property after viewing is a recognised practice in some markets, but it should only happen after you have visited in person and confirmed everything is as advertised."}],"lastReviewed":"2026-06-10"},{"slug":"is-app-asking-me-to-deposit-crypto-to-unlock-trading-profits-a-scam","url":"https://scamencyclopedia.org/questions/is-app-asking-me-to-deposit-crypto-to-unlock-trading-profits-a-scam","question":"Is a trading app asking me to deposit more cryptocurrency to unlock my profits a scam?","shortAnswer":"Yes. This is a pig-butchering or crypto trading scam. Your displayed profits do not exist, and any further deposit you make will also be stolen.","explanation":"Pig-butchering scams — named after the practice of fattening a pig before slaughter — involve building a relationship over weeks, often through a wrong-number text or dating app, before introducing you to a cryptocurrency trading opportunity. You are guided to a convincing trading platform, often an app or website that closely mimics legitimate exchanges.\n\nYour initial small deposit appears to grow rapidly on the platform's dashboard. When you attempt a withdrawal, you are told you must pay a tax advance, maintenance fee, or deposit more funds to reach a minimum threshold before withdrawals are processed. Every payment unlocks a new obstacle. The platform and your new contact disappear once you stop paying.\n\nThe trading dashboard is entirely fabricated. Balances are numbers on a screen controlled by the fraudsters, not real asset positions. No real trading occurs. The app or website is hosted and taken down quickly, often replaced by an identical platform under a new name.\n\nLegitimate regulated cryptocurrency exchanges — Coinbase, Kraken, Binance, and similar — never require you to deposit additional funds to withdraw your existing balance. If you are being told otherwise, the platform is fraudulent.","redFlags":["Platform introduced by a stranger you met through a random message or dating app","Your balance appears to grow very quickly and consistently","Withdrawals are blocked pending taxes, fees, or minimum deposit thresholds","The app or website is not listed in any major app store","Customer support only exists within the app, not through external channels","Your contact becomes unavailable when you ask to withdraw funds"],"whatToDoNow":["Stop all deposits immediately — no further payment will unlock your withdrawal","Do not pay any claimed tax or fee — it will not result in a payout","Capture screenshots of the platform, your balance, and all communications","Report to your national cybercrime or fraud unit","Report to your country's financial regulator — platforms operating without a licence are illegal","Contact your bank or card issuer for any fiat deposits that may still be recallable"],"faq":[{"question":"My profits on the platform look real — how can they all be fake?","answer":"The platform is a convincing front-end interface. The numbers displayed are controlled by the fraudsters and bear no relation to any actual market. Think of it as a video game balance."},{"question":"Is there any legal action I can take?","answer":"Yes — report to your national cybercrime unit, financial regulator, and the FBI's Internet Crime Complaint Center (IC3) if you are in the US. Coordinated law enforcement actions have recovered funds in some large cases, though individual recovery is uncommon."}],"lastReviewed":"2026-06-10"},{"slug":"is-call-saying-my-social-security-number-has-been-suspended-a-scam","url":"https://scamencyclopedia.org/questions/is-call-saying-my-social-security-number-has-been-suspended-a-scam","question":"Is a call saying my Social Security number has been suspended due to suspicious activity a scam?","shortAnswer":"Yes. Social Security numbers cannot be suspended, and the Social Security Administration does not call people to report criminal activity linked to their SSN.","explanation":"This scam follows a consistent script: an automated or live caller claims to be from the Social Security Administration, says your SSN has been used in criminal activity or has been suspended, and warns that a warrant has been or will be issued for your arrest. You are directed to press a button or call a number to resolve the issue immediately.\n\nThe goal is to frighten you into handing over your Social Security number in full, your date of birth, or a monetary payment described as a bond, fine, or safe-account deposit. These details are then used for identity theft, or the money is simply taken.\n\nSocial Security numbers are permanent — they cannot be suspended or deactivated. The SSA primarily communicates by postal mail. If you have a genuine query about your account, the SSA does occasionally make outbound calls in specific limited circumstances, but they will never demand immediate payment or threaten arrest on a first call.\n\nIf you are concerned about your Social Security record, call the official SSA helpline at 1-800-772-1213 or visit ssa.gov directly.","redFlags":["Automated message claiming your SSN is suspended","Threat of immediate arrest or deportation","Caller asks you to 'verify' your SSN","Demands payment via wire transfer, gift cards, or cryptocurrency","Asks you to stay on the line and not tell anyone about the call","Caller ID shows an official-looking government number — this can be spoofed"],"whatToDoNow":["Hang up immediately without pressing any number or providing any information","Do not call back the number the recording provides","If concerned about your SSN, call the real SSA at 1-800-772-1213","Report the scam call to the FTC at ReportFraud.ftc.gov","Report to the SSA's Office of the Inspector General at oig.ssa.gov","Place a fraud alert with the credit bureaus if you believe your SSN has been compromised"],"faq":[{"question":"Can my Social Security number actually be suspended?","answer":"No. The SSA does not suspend SSNs. This premise is entirely fabricated to create alarm."},{"question":"What if the caller knew some of my real personal details?","answer":"Personal data from previous breaches is widely available on criminal marketplaces. Knowing your name, partial address, or date of birth does not mean the caller is who they claim to be."}],"lastReviewed":"2026-06-10"},{"slug":"is-email-from-my-ceo-asking-me-to-buy-gift-cards-urgently-a-scam","url":"https://scamencyclopedia.org/questions/is-email-from-my-ceo-asking-me-to-buy-gift-cards-urgently-a-scam","question":"Is an email from my CEO asking me to urgently buy gift cards on behalf of the company a scam?","shortAnswer":"Almost certainly yes. This is a business email compromise scam, sometimes called a CEO fraud. No legitimate company uses gift cards for business payments.","explanation":"CEO fraud begins with an email that appears to come from a senior executive — your CEO, CFO, or director — addressed to an employee who handles finances or has purchasing authority. The email explains that a confidential, time-sensitive business matter requires immediate purchase of gift cards from a major retailer. The recipient is asked to buy the cards, scratch off the PIN codes on the back, and email or text the codes directly.\n\nThe email address is either spoofed to look like the executive's real address or uses a domain one character different from the company's real domain. The urgency and the request for secrecy ('do not mention this to other colleagues') prevent the target from pausing to verify.\n\nGift card codes are as good as cash and untraceable once redeemed. Companies never use gift cards for legitimate business transactions. If your CFO genuinely needed an emergency payment, they would use the company's established banking channels with proper authorisation.\n\nWhenever you receive an unusual financial request by email, verify it verbally by calling the executive directly on a number you already know — not a number provided in the email.","redFlags":["Request for gift card purchase by email, often described as a personal favour","Email asks you to keep the purchase confidential from other colleagues","Sender's email domain is slightly different from the real company domain","Unusual urgency and explanation that normal channels cannot be used","Asks you to photograph or type out gift card PIN codes and send them","The tone is uncharacteristic of how the executive normally communicates"],"whatToDoNow":["Do not purchase any gift cards without verbal confirmation from the executive","Call the executive directly using a number you already have saved — not one in the email","Report the email to your IT or security team immediately","If you already purchased cards, call the gift card issuer to report fraud before the codes are redeemed","Forward the phishing email to your national fraud reporting agency","Document the incident for your company's security records"],"faq":[{"question":"My company has no formal fraud training — what should I do now?","answer":"Raise the issue with management and suggest implementing a dual-authorisation policy for any payment over a threshold, plus a verbal confirmation rule for unusual requests."},{"question":"What if I already sent the codes before realising?","answer":"Call the gift card issuer immediately with your receipt. Some issuers have fraud teams that can freeze unused card balances. Report to your company and to the FTC. Recovery is possible but time-sensitive."}],"lastReviewed":"2026-06-10"},{"slug":"is-online-seller-with-no-reviews-or-contact-details-legit","url":"https://scamencyclopedia.org/questions/is-online-seller-with-no-reviews-or-contact-details-legit","question":"Is an online seller with no reviews and no clear contact details legit?","shortAnswer":"Treat it with strong caution. Absence of reviews and a missing or vague contact page are among the clearest signals that a shopping site is either brand-new and unproven or actively fraudulent.","explanation":"A site with no customer reviews could be newly established, in which case it is simply unproven — or it could be a scam site that has been online only weeks before it disappears. The distinction matters because scam shopping sites are intentionally cycled quickly: they appear, collect payments, never ship orders, and are replaced by an identical site under a new domain.\n\nContact information is a fundamental transparency signal. Legitimate businesses provide a physical address, a working phone number or live chat, and a real email address. A site that offers only a web contact form — particularly one that goes unanswered — or lists an address that does not verify on a map is not meeting the basic standards of a legitimate retailer.\n\nOther checks worth running: domain age via WHOIS lookup, the presence of a returns and refund policy, and whether the site appears in any independent review database. Payment via credit card is preferable to debit or transfer for any unknown seller, since credit card chargebacks give you a recovery path if the order does not arrive.\n\nBeing the first customer on a legitimate new site is a real possibility, but the risk is higher than buying from an established seller. Reserve that risk for small-value purchases or use a payment method that offers buyer protection.","redFlags":["No customer reviews anywhere on the site or on independent review platforms","Contact page has only a form with no address, phone number, or named business","Domain registered very recently — within weeks of your visit","Prices are significantly below market for the products offered","No identifiable social media presence or pages with no posts","Returns policy is missing or states no returns accepted"],"whatToDoNow":["Check domain age using a WHOIS tool before purchasing","Search the site name on independent review platforms","Verify the contact address using a map service","Use a credit card for any purchase to enable chargeback if needed","Start with a small-value test order if you choose to proceed","If an order does not arrive, dispute with your card issuer and report to consumer protection"],"faq":[{"question":"Is a padlock icon and HTTPS enough to trust a site?","answer":"No. HTTPS indicates an encrypted connection but says nothing about the honesty of the business. Fraudulent sites routinely use HTTPS."},{"question":"Should I always avoid new sites with no reviews?","answer":"Not necessarily, but proceed cautiously. Use a credit card, keep the transaction small, and do not be surprised if fulfilment is slower or customer service less responsive than established retailers."}],"lastReviewed":"2026-06-10"},{"slug":"is-offer-to-help-recover-money-i-already-lost-to-a-scam-legit","url":"https://scamencyclopedia.org/questions/is-offer-to-help-recover-money-i-already-lost-to-a-scam-legit","question":"Is an offer to help me recover money I already lost to a scam legit?","shortAnswer":"Almost certainly not. Recovery fraud, also called a reload scam, specifically targets people who have already been scammed by offering fake recovery services — and then taking more money.","explanation":"After falling victim to a scam, many people search desperately for ways to recover their funds. Fraudsters monitor scam-related forums, social media posts, and even reports filed with authorities to identify these victims and approach them with recovery offers. They pose as lawyers, government recovery agencies, blockchain tracing firms, or cybercrime specialists.\n\nThe recovery service asks for an upfront fee, which it describes as a legal retainer, government filing charge, or tracing cost. After you pay, they invent additional charges — court costs, release fees, conversion fees — before eventually disappearing. In some cases they gather further personal and financial details that enable additional identity fraud.\n\nNo legitimate law firm or recovery specialist charges large upfront fees before achieving any results. Real cryptocurrency tracing firms do exist and may work on contingency or post-recovery fee arrangements, but they operate transparently with verifiable registration details and do not contact scam victims unsolicited.\n\nIf you want to pursue recovery, report to your national fraud authority and speak to a regulated solicitor or attorney through a referral from your local bar association — not through an unsolicited outreach.","redFlags":["Contact you unsolicited after you posted about being scammed","Promises specific recovery amounts or guarantees of success","Requires large upfront fees before any work is demonstrated","New fees keep appearing after the initial payment","Claims to be a government agency but cannot be verified on official registries","Communicates only through messaging apps with no verifiable office"],"whatToDoNow":["Do not pay any upfront fee to any recovery service that contacted you unsolicited","Report the original scam to your national fraud authority","Consult a regulated solicitor or attorney through a verifiable bar association referral","Contact your bank about any bank transfers that may still be recallable","Report the recovery fraud separately — it is a distinct crime","Seek support from scam victim advocacy organisations"],"faq":[{"question":"Are there any legitimate scam recovery services?","answer":"Legitimate options include your bank's fraud team, your national fraud reporting authority, regulated legal professionals, and in some countries specialist cybercrime investigators. None of them contact victims unsolicited."},{"question":"Why do I keep getting contacted by recovery services after reporting a scam?","answer":"Fraudsters monitor complaint databases, online forums, and social media for scam reports to identify vulnerable targets. Being re-targeted after a scam is extremely common."}],"lastReviewed":"2026-06-10"},{"slug":"is-email-saying-my-account-will-be-closed-unless-i-verify-details-a-scam","url":"https://scamencyclopedia.org/questions/is-email-saying-my-account-will-be-closed-unless-i-verify-details-a-scam","question":"Is an email saying my account will be closed unless I verify my details immediately a scam?","shortAnswer":"Very likely. Urgent account-closure threats sent by email are a classic phishing technique designed to make you hand over login credentials or personal data.","explanation":"Phishing emails impersonating banks, PayPal, Amazon, Apple, Google, and similar platforms warn that your account has been locked, suspended, or scheduled for closure due to unusual activity, failed verification, or an overdue action. A button or link in the email takes you to a convincing copy of the service's login page where your entered credentials are captured by the fraudsters.\n\nThe email mimics the genuine service's branding very closely — logo, colour scheme, footer links, and sender name. However, hovering over the link or inspecting the actual sender email address usually reveals a domain that is not the real company's. Common tricks include replacing an 'l' with a '1,' appending '-support' to the real domain, or using entirely unrelated domains.\n\nLegitimate companies do sometimes send account alerts, but they never ask you to enter your login credentials or financial details by clicking an email link. If your account has a genuine problem, the issue will be visible when you log in directly through the service's real website — typed manually — not only through an email link.\n\nIf you received such an email, go to the service's website by typing the address yourself or using your saved bookmark. If there is a real account issue, it will be visible in your account settings.","redFlags":["Email creates urgency with a countdown or same-day deadline","Sender's actual email address does not match the company's real domain","Link URL in the email does not lead to the company's real website","Poor grammar, spelling errors, or slightly off-brand formatting","Asks you to enter your password or full card number via the email link","Generic greeting such as 'Dear Customer' rather than your real name"],"whatToDoNow":["Do not click any link in the suspicious email","Go to the service directly by typing its URL in your browser","Log in to check whether any real account action is required","Forward the phishing email to the spoofed company's abuse address (e.g. phishing@paypal.com)","Report to your national cybersecurity authority","If you already entered credentials, change your password and enable two-factor authentication immediately"],"faq":[{"question":"How do I check the real sender address?","answer":"In most email clients, clicking the sender name reveals the actual email address. Look for anything that is not the company's official domain. Even small variations like 'paypai.com' or 'amazon-billing.net' are fake."},{"question":"What if I already clicked and entered my details?","answer":"Go to the real service immediately and change your password. Enable two-factor authentication. If you entered financial details, contact your bank. Report the incident to the company that was impersonated."}],"lastReviewed":"2026-06-10"},{"slug":"is-gig-task-app-paying-me-to-like-videos-and-follow-accounts-a-scam","url":"https://scamencyclopedia.org/questions/is-gig-task-app-paying-me-to-like-videos-and-follow-accounts-a-scam","question":"Is a gig app that pays me to like videos, follow accounts, or complete tasks a scam?","shortAnswer":"Most of these are scams. Legitimate gig work does exist, but apps promising easy money for social media tasks are almost always designed to eventually steal deposits from you.","explanation":"Task-based scams typically operate through messaging apps like Telegram or WhatsApp and present as legitimate gig economy platforms. You are asked to complete simple tasks — liking a YouTube video, following an Instagram account, leaving a review — and shown a small payment credited to your account balance. For the first few tasks, small withdrawals may even be permitted to build trust.\n\nThe trap springs when you are offered 'combo tasks' or 'VIP tasks' that promise much higher returns but require you to deposit your own funds first. Your deposited money and all accumulated balance become inaccessible until you complete more tasks or pay more fees. The platform eventually stops responding entirely.\n\nA key tell is that any legitimate marketplace paying for social engagement — which exists in limited forms on regulated influencer platforms — would not require you to deposit money. You should never need to put money in to earn money from a task app.\n\nIf you want genuine gig work, use established platforms with verifiable company registrations, public terms of service, and documented payment records from real users on independent review sites.","redFlags":["Initial tasks are easy and small payments appear in your balance","Introduced by a stranger through a messaging app","After some tasks, you are invited to 'premium' or 'VIP' tasks requiring a deposit","Withdrawal is blocked until you complete more tasks or deposit more","Platform only accessible via a specific app or link not in a major app store","The deposited funds and earnings both disappear when you stop paying"],"whatToDoNow":["Stop depositing funds immediately","Screenshot all communications, task records, and payment history","Report the platform to your national cybercrime unit","If you deposited via bank transfer, ask your bank whether a recall is possible","Report the app to the messaging platform through which you were recruited","Warn others in the group or channel where you found the opportunity"],"faq":[{"question":"The first few withdrawals worked — does that mean it is real?","answer":"No. Allowing small early withdrawals is a deliberate trust-building tactic. The profit for the scammer comes later when you deposit significant funds."},{"question":"Are there any real paid social media task opportunities?","answer":"Some regulated influencer marketing platforms pay creators for content, but these require an established audience and never require upfront deposits. Casual 'like and earn' tasks paying anonymous users per action is not a legitimate business model."}],"lastReviewed":"2026-06-10"},{"slug":"is-person-on-dating-app-asking-me-to-invest-in-crypto-with-them-a-scam","url":"https://scamencyclopedia.org/questions/is-person-on-dating-app-asking-me-to-invest-in-crypto-with-them-a-scam","question":"Is someone I met on a dating app asking me to invest in cryptocurrency with them a scam?","shortAnswer":"Yes. This is the classic setup for a pig-butchering scam, one of the most lucrative fraud types in operation today. The romantic relationship is entirely manufactured to set up the investment theft.","explanation":"The person you met may have a polished profile, engaging conversation, and apparent genuine interest in you. After building rapport over days or weeks, they casually mention that they have been making excellent returns on a cryptocurrency platform — often framed as a tip from a relative who works in finance. They offer to guide you through getting started, just to help you.\n\nThe platform they direct you to looks professional and shows impressive returns. You are encouraged to invest more. As with all pig-butchering operations, the platform is controlled by the fraudsters and your balance is fiction. When you try to withdraw, obstacles appear until you eventually stop depositing and both the contact and the platform disappear.\n\nThe romantic connection is not incidental — it is the core mechanism. By the time the investment pitch arrives, you have developed trust, affection, and a psychological investment in the relationship. This makes you much more willing to take financial risks and much more reluctant to acknowledge warning signs.\n\nThe rule is simple: any romantic or social connection that leads to a crypto investment recommendation should be treated as a scam by default, regardless of how genuine the relationship feels.","redFlags":["Met on a dating app or social platform and moved to private messaging quickly","Conversation naturally leads to the topic of their investment success","They offer to help you use a specific platform or app","The platform is not a major known exchange","Your returns look impressive very quickly","Withdrawals are blocked by fees, taxes, or deposit requirements","They become evasive or unavailable when you ask for the withdrawal"],"whatToDoNow":["Stop all interaction with the person and the platform","Do not deposit additional funds under any circumstances","Search the platform name plus 'scam' to find other victims' accounts","Report to the dating platform that the profile is being used for fraud","Report to your national cybercrime authority with all communication records","If fiat money was involved, contact your bank immediately"],"faq":[{"question":"Why did the person seem so genuinely interested in me if it was all fake?","answer":"Pig-butchering scammers follow detailed scripts and spend significant time building authentic-feeling connections. This is their profession, and they are skilled at it. Your emotional response was real — theirs was a performance."},{"question":"Can I recover anything I invested?","answer":"Cryptocurrency sent to fraudulent platforms is rarely recoverable through the blockchain. Report to law enforcement and your bank for any payment methods where recall might be possible. Contact a regulated financial solicitor for larger losses."}],"lastReviewed":"2026-06-10"},{"slug":"is-email-from-a-nigerian-prince-offering-to-share-millions-a-scam","url":"https://scamencyclopedia.org/questions/is-email-from-a-nigerian-prince-offering-to-share-millions-a-scam","question":"Is an email from someone claiming to offer me millions from an overseas fortune in exchange for help a scam?","shortAnswer":"Yes, without exception. This is an advance-fee fraud, one of the oldest scam formats still operating. No fortune exists, and any fees you pay will simply be stolen.","explanation":"Advance-fee fraud — historically known as the Nigerian Prince scam or 419 fraud after the Nigerian criminal code section that covers it — has been in continuous operation for decades and adapts to current events. The scenario changes: an unclaimed inheritance, a stranded diplomat's funds, a wrongly frozen lottery prize, a business investment requiring a partner. The structure never changes: you are promised a large share of a vast sum in exchange for helping to move it, and small upfront fees are required to unlock the transfer.\n\nFees are requested for lawyers, bank charges, customs clearance, government certificates, or bribes. Each payment is followed by a new obstacle requiring another payment. Some victims pay for months or years before giving up. Emotional manipulation is layered in — the fraudster presents themselves as trusting you with a secret and becomes upset if you express doubt.\n\nNo real fortune is waiting. The correspondence is entirely fabricated. If money were genuinely stuck in a foreign bank, the owner could hire a local attorney without involving a random stranger from another country.\n\nThese emails are still sent in vast volumes because the conversion rate, however small, is enough to make the operation profitable. If you receive one, delete it.","redFlags":["Promise of a large sum of money in exchange for a small upfront fee","Elaborate story explaining why a stranger needs your help specifically","Each fee payment triggers a new reason another fee is required","Emotional pressure — appeals to your kindness, trust, or greed","Requests for secrecy to protect the transaction","Email address or contact is a free webmail account unrelated to any organisation named"],"whatToDoNow":["Delete the email and do not respond at all","Block the sender's address","Report to your national fraud reporting service","If you have already paid fees, report to local police and your bank","Do not send any further money regardless of the story offered","Warn elderly relatives who may be more susceptible to these approaches"],"faq":[{"question":"Why do these scams still work if they are so well known?","answer":"Even with widespread awareness, the volume of messages sent is so large that a tiny conversion rate generates significant revenue. Many recipients are elderly, isolated, or encountering the scam for the first time."},{"question":"Is it safe to reply just to see what they say?","answer":"No. Replying confirms your address is active and increases the volume of scam mail you will receive. In some cases, replies have led to targeted follow-up scams."}],"lastReviewed":"2026-06-10"},{"slug":"is-payday-loan-lender-asking-for-upfront-insurance-fee-a-scam","url":"https://scamencyclopedia.org/questions/is-payday-loan-lender-asking-for-upfront-insurance-fee-a-scam","question":"Is a payday loan lender asking for an upfront insurance or processing fee before releasing my loan a scam?","shortAnswer":"Yes. Legitimate lenders deduct fees from loan proceeds — they never require an upfront cash payment before releasing funds. This is a loan fee scam.","explanation":"Loan fee scams target people in financial difficulty who are actively searching for credit. Fraudsters advertise guaranteed loans with no credit check and only require a small fee — described as insurance, administration, or government levy — to release the funds. After the fee is paid, the lender invents further fees, or simply disappears.\n\nThe victims are often people who have been refused credit by legitimate lenders and are desperate for funds, making them especially vulnerable to the promise of guaranteed approval. The scam works precisely because it exploits this vulnerability.\n\nNo regulated lender in any jurisdiction requires an upfront cash payment before releasing a loan. Legitimate fees are disclosed in advance under the loan agreement and are deducted from the loan amount on disbursement, not collected separately beforehand. Lenders who ask you to pay before you receive funds are operating fraudulently.\n\nIf you need a loan, use lenders regulated by your country's financial authority. In the US, verify lenders with your state banking regulator. In the UK, check the FCA register. Avoid any lender not listed on an official regulatory register.","redFlags":["Guarantees loan approval regardless of credit history","Requires an upfront fee described as insurance, tax, or processing before funds are sent","Operates only via messaging app or email with no verified address","Is not listed on a national financial regulator's register","Each payment you make triggers a new reason funds cannot yet be released","Loan details provided verbally or informally rather than in a formal written agreement"],"whatToDoNow":["Do not pay any upfront fee to a lender before receiving funds","Check the lender's registration on your national financial regulator's website","If you have already paid a fee, report to your bank and national fraud authority immediately","Seek credit through regulated lenders, credit unions, or government assistance programmes","Report the fraudulent lender to your financial regulator","Document all communications for your report"],"faq":[{"question":"What if they show me a loan agreement with my name on it?","answer":"Fake loan documents are easy to produce. The presence of a document does not confirm the lender is real. The only reliable check is confirming their registration with the financial regulator."},{"question":"Are online payday lenders all fraudulent?","answer":"No. Legitimate online payday lenders are registered with financial regulators and never collect upfront fees before releasing funds. Always verify registration before applying."}],"lastReviewed":"2026-06-10"},{"slug":"is-unknown-app-asking-for-my-seed-phrase-to-connect-my-crypto-wallet-a-scam","url":"https://scamencyclopedia.org/questions/is-unknown-app-asking-for-my-seed-phrase-to-connect-my-crypto-wallet-a-scam","question":"Is an app or website asking for my crypto wallet seed phrase to connect or verify my wallet a scam?","shortAnswer":"Yes, always. Your seed phrase is the master key to your wallet. Any request for it is an attempt to steal all your funds instantly.","explanation":"A seed phrase — also called a recovery phrase or mnemonic — is typically 12 to 24 words that give complete control over a crypto wallet. Anyone who has your seed phrase has total, irreversible access to every asset in that wallet. No legitimate wallet connection process, decentralised app, or exchange ever requires your seed phrase to connect.\n\nScammers create fake wallet-connection interfaces, counterfeit 'official' migration portals, or airdrop claim pages that prompt you to enter your seed phrase for 'verification.' The pages look identical to legitimate services and often appear at the top of search results through paid advertising. Once entered, an automated script drains your wallet within seconds.\n\nLegitimate wallet connection uses cryptographic signing — you approve a transaction with a click and your wallet signs it internally. No words are ever typed out. If you are ever asked to type your seed phrase anywhere outside the initial wallet backup process you completed when setting up the wallet, it is fraud.\n\nStore your seed phrase only on paper or an offline medium, never digitally or in the cloud. Treat a request for your seed phrase as you would treat a request for your bank's master PIN: under no legitimate circumstances should it ever be shared.","redFlags":["Any interface asking you to type in your seed phrase","Described as 'wallet verification,' 'migration,' 'sync,' or 'airdrop claim'","Site found through a paid advertisement on a search engine","Rushed by a message saying your wallet is under threat","Cannot connect via normal wallet signing — only the phrase will work","The URL is a variation of a well-known wallet or exchange name"],"whatToDoNow":["Close the page immediately without entering any words","Never type your seed phrase into any website or app","If you already entered it, move all funds to a freshly generated wallet immediately","Report the phishing site to Google Safe Browsing and to the platform it impersonated","Revoke any wallet approvals you may have granted to suspicious contracts via a revoke tool","Report to your national cybercrime authority"],"faq":[{"question":"What if I need to recover my wallet on a new device — is it safe to enter the phrase then?","answer":"Only enter your seed phrase directly into your wallet's own official app during the device recovery process, with no screen sharing active and no observers. This is the only legitimate use case."},{"question":"How quickly will my wallet be drained if I enter the phrase on a phishing site?","answer":"Automated bots monitor compromised seed phrases and can drain wallets within seconds of entry. There is no time to reverse it once it happens."}],"lastReviewed":"2026-06-10"},{"slug":"is-utility-company-call-threatening-to-cut-off-my-power-unless-i-pay-now-a-scam","url":"https://scamencyclopedia.org/questions/is-utility-company-call-threatening-to-cut-off-my-power-unless-i-pay-now-a-scam","question":"Is a call threatening to cut off my electricity or gas unless I pay right now a scam?","shortAnswer":"Very likely yes. Utility disconnection scams impersonate power and gas companies and demand immediate payment to avoid same-day service termination.","explanation":"Utility impersonation scammers call or send automated messages claiming to be from your electricity, gas, or water provider and warning that your service will be cut off in a matter of hours unless you make an immediate payment. The calls create intense urgency and sometimes spoof the real utility company's phone number on caller ID.\n\nPayment is demanded through unusual methods — prepaid debit cards, cryptocurrency kiosks, gift card codes, or money transfer services — none of which real utility companies accept. Real disconnection processes follow a regulatory path with multiple written notices sent over weeks, and payments are accepted through official channels including account portals and regulated payment processors.\n\nBusinesses are targeted as frequently as households, with callers arriving during busy trading hours to maximise panic. The amount demanded is typically sized to feel urgent but not implausible given a commercial energy bill.\n\nIf you receive such a call, hang up and check your account balance directly on your utility provider's official website or app. If you do owe a balance, call the number on your paper bill to make a payment through official channels.","redFlags":["Threatens same-day or same-hour disconnection","Demands payment via prepaid card, gift card, or cryptocurrency","Caller ID shows the utility company's real name but behaviour is unusual","Discourages you from calling the utility company to verify","Amount demanded seems suspiciously large or round","Agent is aggressive, does not pause for questions, and insists on immediate action"],"whatToDoNow":["Hang up the call and do not make any payment through the caller's instructions","Log into your account on your utility provider's official website to check your balance","Call the number on your paper bill or the provider's official website to verify","If you already paid via gift cards, call the issuer immediately and report to the utility company's fraud team","Report the scam call to your national consumer protection or fraud reporting body","Report to the utility company's fraud team so they can warn other customers"],"faq":[{"question":"Can real utility companies cut power off with no notice?","answer":"No. Regulated utilities are required to give multiple formal written notices before any disconnection. Same-day cutoff without prior written notice is not permitted by regulators in any major market."},{"question":"What methods do real utility companies accept for payment?","answer":"Online account portals, phone payments to an automated system using their official number, direct debit, and in some cases in-person payment at licensed agents. Never cryptocurrency, gift cards, or wire transfers to unknown accounts."}],"lastReviewed":"2026-06-10"},{"slug":"is-car-listed-for-sale-online-at-way-below-market-price-a-scam","url":"https://scamencyclopedia.org/questions/is-car-listed-for-sale-online-at-way-below-market-price-a-scam","question":"Is a car listed for sale online at well below market price a scam?","shortAnswer":"It is a significant warning sign. Below-market vehicle listings are frequently fraudulent, particularly when the seller is unavailable in person or requests payment before delivery.","explanation":"Vehicle fraud is one of the highest-value categories of online consumer fraud. Scam listings appear on major classified sites and social media, often using photographs of real vehicles taken from dealership websites or previous legitimate listings. Prices are set attractively below market — sometimes dramatically so — justified by a vague explanation such as a job relocation, divorce, or urgent sale.\n\nThe seller is typically unavailable to meet in person, either because they are abroad, in the military, or claim the car is being held by a shipping or escrow company. They propose that you pay a deposit or full amount via bank transfer, and the car will be delivered once payment clears. No delivery ever occurs.\n\nSome versions use a fake escrow service that the seller controls, showing you a convincing 'transaction held' page while your money goes directly to them. Real escrow services used for private vehicle sales are rare and always independently selected, not suggested by the seller.\n\nFor any significant private vehicle purchase, insist on viewing and test-driving the vehicle in person before any money changes hands, and arrange an independent vehicle history check through an official registration service.","redFlags":["Price is significantly below comparable vehicles","Seller cannot meet in person — always abroad, military, or otherwise unavailable","Proposes shipping after payment rather than viewing first","Recommends a specific escrow service you have never heard of","Communication is only via email or messaging app","Vehicle history check turns up no results matching the described vehicle"],"whatToDoNow":["Never pay for a vehicle you have not physically inspected","Insist on a test drive in person before any deposit is made","Run a history check using your country's official vehicle registration service","Reverse-image search the listing photos to check for duplicates on other sites","If you already paid and received nothing, report to police and your bank immediately","File a report with your consumer protection agency and the platform hosting the listing"],"faq":[{"question":"Is a below-market price always a scam?","answer":"Not always — genuine urgent sales do happen. But the combination of a below-market price and an unavailable seller who wants payment before any viewing is a very high-risk combination."},{"question":"What is a fake escrow service?","answer":"A fake escrow site is controlled by the scammer. It shows you a convincing interface suggesting your funds are safely held, while actually transmitting them directly to the fraudster. Always choose your own independent escrow service if escrow is needed."}],"lastReviewed":"2026-06-10"},{"slug":"is-ticket-seller-on-social-media-asking-for-payment-by-bank-transfer-legit","url":"https://scamencyclopedia.org/questions/is-ticket-seller-on-social-media-asking-for-payment-by-bank-transfer-legit","question":"Is a ticket seller on social media asking me to pay by bank transfer for sold-out event tickets legit?","shortAnswer":"Extremely risky. Social media ticket resellers have no accountability, and bank transfer gives you no recourse if the tickets turn out to be fake or never arrive.","explanation":"Ticket fraud spikes around popular concerts, sports finals, and festival events when official sales have sold out. Fraudsters create posts or respond to 'looking for tickets' posts offering face-value or slightly above face-value tickets, communicating through social media DMs or WhatsApp.\n\nThey ask for payment by bank transfer, Venmo, or CashApp, then either deliver counterfeit tickets, deliver nothing at all, or claim the transfer did not arrive. In some cases they sell the same ticket to multiple buyers. Because payment was outside any ticket platform's protection system, the buyer has little recourse.\n\nA second common variant involves genuine-looking ticket PDF attachments or screenshot images that are fabricated or duplicated from real tickets with different barcodes. At the venue, the ticket scans as invalid, and the buyer is denied entry.\n\nFor secondary tickets, use platforms that offer buyer guarantees — Ticketmaster's resale marketplace, StubHub, SeatGeek, and similar services that verify ticket validity and refund buyers if tickets are found to be fraudulent. If you must buy privately, insist on in-person exchange of the physical ticket at the venue on the day of the event, after confirming its validity at the box office.","redFlags":["Seller contacted you through social media DMs or messaging apps","Requests bank transfer, Venmo, or CashApp rather than a ticketing platform","Tickets are for a massively oversubscribed event that sold out quickly","Seller is unwilling to use a protected resale platform","Ticket images or PDFs are provided upfront — these may be fabricated","Seller has no verifiable profile history or prior sales record"],"whatToDoNow":["Only buy resale tickets through verified platforms with buyer guarantees","If buying privately, insist on meeting at the venue box office before payment","Do not pay by bank transfer for event tickets","If you already paid and received fake or no tickets, report to your bank and police","Report the seller's profile to the social media platform","Alert others in any fan community group to warn them of the seller"],"faq":[{"question":"What if the seller has positive comments on their social media post?","answer":"Comments can be fabricated by the seller or by accomplices. They carry no weight as evidence of legitimacy. Only use platforms with independent verified review systems."},{"question":"Can a chargeback help if I paid by debit card?","answer":"Debit card chargebacks are less straightforward than credit card chargebacks but may be possible under certain schemes. Contact your bank immediately and report the transaction as fraud."}],"lastReviewed":"2026-06-10"},{"slug":"is-text-from-hmrc-or-irs-saying-i-have-a-tax-refund-waiting-a-scam","url":"https://scamencyclopedia.org/questions/is-text-from-hmrc-or-irs-saying-i-have-a-tax-refund-waiting-a-scam","question":"Is a text message from HMRC or the IRS saying I have a tax refund waiting a scam?","shortAnswer":"Yes. Tax authorities do not notify refunds via text message with a link to click. These are phishing texts designed to steal your bank or personal details.","explanation":"Tax refund text scams are timed around peak filing and assessment periods when many people are genuinely expecting refunds. The message typically claims a refund has been processed and provides a link to a form where you enter your bank account details to receive the payment, or it mimics an official login page to harvest your tax account credentials.\n\nSome versions claim you owe a small additional amount before a larger refund can be processed, combining an advance-fee element with the phishing component. Others direct you to a page where you are asked to verify your national insurance number, date of birth, or other personal information.\n\nHMRC in the UK, the IRS in the US, and most other tax authorities communicate refunds through post, official online account portals, or bank direct credit — never through unsolicited text messages with links. HMRC specifically publishes guidance stating it will never text links asking you to claim a refund.\n\nIf you are due a refund, log in to your tax account directly through the official government website. Your refund status will be visible there without clicking any external link.","redFlags":["Text claims you have a refund and includes a link to click","Link leads to a form asking for bank account details or login credentials","Message creates urgency — 'claim within 24 hours or it expires'","Sent from an unknown number, not an official shortcode","Message contains spelling errors or unusual phrasing","Asks for more personal information than a refund payment would require"],"whatToDoNow":["Do not click the link","Forward the text to your tax authority's official phishing number (e.g. 60599 for HMRC in the UK)","Delete the message after reporting it","Check your genuine refund status on the official tax authority website","If you already entered bank details, contact your bank immediately","Report to your national cybersecurity agency"],"faq":[{"question":"Does HMRC ever text me?","answer":"HMRC does send some notification texts, but they never contain links asking you to enter bank details or personal information. If in doubt, log in to your government gateway account directly."},{"question":"What if the amount mentioned matches what I am genuinely owed?","answer":"Scam messages are sometimes personalised using data from previous breaches. A correctly stated refund amount does not confirm the message is legitimate."}],"lastReviewed":"2026-06-10"},{"slug":"is-pet-seller-online-requiring-payment-before-i-can-see-the-animal-a-scam","url":"https://scamencyclopedia.org/questions/is-pet-seller-online-requiring-payment-before-i-can-see-the-animal-a-scam","question":"Is an online pet seller requiring full payment before I can collect or meet the animal a scam?","shortAnswer":"Very likely yes. Online pet fraud is widespread, particularly for puppies and kittens. Payment before seeing the animal in person is the single clearest warning sign.","explanation":"Pet scams became significantly more prevalent during periods of high demand for pets. Fraudsters post listings with photographs of adorable puppies or kittens at attractive prices and explain that the animal is with a transport company, at a facility, or with a carer and cannot be viewed until a deposit secures your place. After payment, additional fees for transport, vaccination, insurance, or a climate-controlled crate emerge. Eventually all contact stops.\n\nPhotographs are typically stolen from legitimate breeder websites or social media. Reverse-image searching them is often enough to identify a scam. Listings frequently use breed names misspelled in predictable ways to avoid search filters.\n\nLegitimate breeders and rescue organisations welcome prospective owners to visit the animal before purchase. They can provide documentation of vaccinations, microchipping, and breeder registration. A breeder who insists on payment before a visit has no legitimate reason for doing so.\n\nIf you want a pet, visit the animal in person at the breeder's home or the rescue's facility, verify the animal exists as described, and confirm the breeder's registration with an official breed club or licensing authority before any money changes hands.","redFlags":["Seller will not allow an in-person visit before payment","Animal is described as being with a transport or 'government clearance' company","Fees keep appearing after the initial payment — transport, insurance, crate","Photos reverse-image search to other sites or breeders","Seller communicates only via messaging app with no verifiable address","Price is unusually low for the breed described"],"whatToDoNow":["Never pay for a pet you have not seen in person","Reverse-image search all listing photos","Verify the breeder through your national breed club or livestock licensing authority","If you already paid and no animal exists, report to police and your bank","Report the listing to the platform where it appeared","Alert pet community groups to prevent further victims"],"faq":[{"question":"What if the seller offers a video call to show the animal?","answer":"Video calls can be pre-recorded or show a different animal from a different location. In-person visits are the only reliable verification. An offer to video call is a reassurance tactic, not a substitute for seeing the animal."},{"question":"Are rescue organisations also faked?","answer":"Yes. Fake rescue organisation listings do appear, often claiming the animal is abroad and needs rehoming fees. Verify any rescue through official registration databases and physically visit their facility."}],"lastReviewed":"2026-06-10"},{"slug":"is-instagram-account-dm-offering-me-a-sponsored-post-deal-legit","url":"https://scamencyclopedia.org/questions/is-instagram-account-dm-offering-me-a-sponsored-post-deal-legit","question":"Is an Instagram DM from a brand account offering me a sponsored post deal legit?","shortAnswer":"Many are not. Fake brand collaboration offers on Instagram are used to harvest personal details, sell you products at a discount you must buy first, or steal login credentials.","explanation":"Influencer fraud DMs mimic genuine brand partnership outreach, which does happen — so the premise is not inherently implausible. The fraud versions, however, have tells: the account offering the deal has a username similar to but not identical to the real brand, a small follower count, few posts, and was created recently.\n\nThe most common outcome is that you are asked to purchase a product at a 'brand discount' using your own money upfront, with a promise that the brand will reimburse you plus send your fee. The product never arrives, the reimbursement never happens, and the account disappears. Another version sends you a link to 'sign a contract' that is actually a phishing page harvesting your Instagram login.\n\nLegitimate brand partnerships are negotiated through official brand email addresses, influencer marketing platforms like AspireIQ or Later, or talent managers. Brands with real budgets do not ask creators to purchase products with their own money as a first step.\n\nIf a deal sounds interesting, research the brand independently, contact their official marketing email to verify, and never click external links from DMs without verifying the source.","redFlags":["Account username is slightly different from the real brand's verified account","Asks you to purchase the product with your own money to be reimbursed later","Sends a link to an external contract or payment page via DM","Promises unusually high payment for a small following","The account has few posts, no verification badge, and was created recently","Contract requires your social media login credentials"],"whatToDoNow":["Do not click any links sent in the DM","Search for the brand's verified official account and compare usernames","Contact the brand directly through their official website contact page to verify","Report the fake account to Instagram","If you already paid for a product or shared credentials, report to Instagram and your bank","Change your Instagram password and enable two-factor authentication if credentials were shared"],"faq":[{"question":"How do real brand deals work?","answer":"Real brands contact creators through official email domains, established influencer platforms, or talent agencies. They send formal briefs, contracts, and pay after content is approved — they never ask you to fund purchases upfront."},{"question":"What if the account has thousands of followers?","answer":"Follower counts can be purchased cheaply. A large following is not evidence of legitimacy. Check for a verified badge on the real brand's page and compare the account you were contacted from."}],"lastReviewed":"2026-06-10"},{"slug":"is-website-offering-cheap-prescription-medication-without-a-prescription-safe","url":"https://scamencyclopedia.org/questions/is-website-offering-cheap-prescription-medication-without-a-prescription-safe","question":"Is a website offering prescription medication at very low prices without requiring a prescription safe?","shortAnswer":"No. Sites selling prescription drugs without a prescription are operating illegally and the products may be counterfeit, contaminated, or entirely different to what is labelled.","explanation":"Rogue online pharmacies are a significant public health problem. They advertise prescription medications — often for conditions like erectile dysfunction, anxiety, or pain management where people may feel uncomfortable consulting a doctor in person — at prices far below regulated pharmacy rates. No prescription is required, and sometimes no consultation of any kind is offered.\n\nThe risks are serious: medications may be counterfeit with no active ingredient, underdosed, overdosed, or contaminated with dangerous substances including heavy metals or unlabelled compounds. In some cases the credit card information you enter is also stolen. Some sites send nothing at all.\n\nPrescription requirements exist because these medicines require medical supervision to be used safely. Drug interactions, contraindications, and dosing are patient-specific. Bypassing that process is a health risk, not just a regulatory technicality.\n\nLegitimate online pharmacies are registered with the relevant national pharmacy authority and require a valid prescription issued by a licensed practitioner. In many countries, a list of verified online pharmacies is published by the regulatory body. Always verify before ordering any medication online.","redFlags":["No prescription required for a known prescription medication","Prices dramatically below normal pharmacy rates","Pharmacy not listed on the national pharmacy regulator's verified register","Contact is only through a web form with no verifiable address","Domain registered very recently","Checkout requires wire transfer or cryptocurrency rather than standard payment"],"whatToDoNow":["Do not purchase medication from unverified online pharmacies","Check whether the pharmacy is registered with your national pharmacy regulator","Speak to your own doctor or a registered telehealth service if cost is the barrier","If you already received medication from a suspect site, consult a pharmacist before taking it","Report the site to your national medicines regulator and consumer protection agency","If you entered card details, monitor your account and report to your bank"],"faq":[{"question":"Are all cheap online pharmacies fraudulent?","answer":"No. Some licensed online pharmacies offer genuine savings by operating efficiently. The key differentiator is whether they are registered with the regulatory body and require a valid prescription."},{"question":"What if the medication I received looks identical to the real thing?","answer":"Counterfeit medications are manufactured specifically to look authentic. External appearance tells you nothing about content. Only purchase from verified, regulated sources."}],"lastReviewed":"2026-06-10"},{"slug":"is-person-asking-me-to-cash-a-cheque-and-wire-part-of-it-back-a-scam","url":"https://scamencyclopedia.org/questions/is-person-asking-me-to-cash-a-cheque-and-wire-part-of-it-back-a-scam","question":"Is a person asking me to cash a cheque for them and wire part of the money back a scam?","shortAnswer":"Yes, always. This is the classic cheque overpayment or money mule scam. The cheque will bounce after you have already sent real money.","explanation":"This scam takes many forms but has one constant mechanism. You are given a cheque — perhaps for a freelance job, a Craigslist sale, a scholarship, or a random stroke of luck — that is larger than expected. You are asked to deposit it and send a portion back via wire transfer, MoneyGram, Western Union, or gift card codes.\n\nBanks typically show deposited cheque funds within one to two business days, which can lead you to believe the cheque has cleared. In reality, cheque clearing can take up to two weeks, and fraudulent cheques are often drawn on real accounts without authorisation. When the cheque is eventually returned unpaid, the bank reverses the funds from your account — but the money you wired is already gone and unrecoverable.\n\nYou are liable for the returned cheque and the funds you sent. This is true even if you acted in good faith. The law treats you as the account holder responsible for cheques you deposit.\n\nNever wire money or send gift card codes based on a cheque that has not fully and finally cleared — which, in practice, means waiting far longer than funds appearing in your account balance.","redFlags":["Cheque is for more than the agreed amount with a request to send the difference back","You are asked to wire money or send gift card codes before the cheque fully clears","The payer is a stranger or someone you met online","The story justifying the overpayment is complicated or changes","You are asked to use a wire service or gift cards rather than a traceable method","Payer is insistent or creates urgency around sending the money back"],"whatToDoNow":["Do not send any money until a cheque has fully and finally cleared — typically weeks, not days","Ask your bank specifically whether the cheque is fully and finally cleared before sending funds","If you are suspicious, decline to deposit the cheque and return it","If you already sent money, report to your bank and to the wire service used","File a report with your national fraud authority","If a real employer or buyer is involved, contact them through independently verified channels to confirm the cheque's legitimacy"],"faq":[{"question":"If the money appeared in my account, does that mean the cheque cleared?","answer":"No. Banks make funds provisionally available before cheques are fully cleared. True clearance can take up to ten business days. Funds showing in your balance is not a guarantee."},{"question":"Am I legally responsible for the returned cheque even if I did not know it was fake?","answer":"In most countries, yes. The account holder bears responsibility for cheques deposited into their account. This is why the scam is so effective — your good faith does not protect you from the bank's reversal."}],"lastReviewed":"2026-06-10"},{"slug":"is-mlm-opportunity-requiring-me-to-buy-products-and-recruit-others-legit","url":"https://scamencyclopedia.org/questions/is-mlm-opportunity-requiring-me-to-buy-products-and-recruit-others-legit","question":"Is a business opportunity that requires me to buy products and recruit others to earn income legit?","shortAnswer":"It could be a legal MLM or an illegal pyramid scheme. The key question is whether income comes primarily from real product sales or from recruiting new participants.","explanation":"Multi-level marketing companies operate legally in many countries when income is genuinely derived from retail product sales. However, many MLM operations function economically as pyramid schemes even if structured to pass legal review: the majority of participants lose money, and the main path to significant income is recruiting a downline rather than selling products to real consumers.\n\nWarning signs of a scheme that tilts toward fraud: high mandatory starter kit costs, pressure to maintain a monthly purchase quota to remain 'active,' inventory loading where you are encouraged to stockpile products you have not yet sold, and income presentations that focus almost entirely on recruitment bonuses rather than retail margins.\n\nFTC research on US MLMs found that a significant majority of participants earn little to no money, and many lose money after accounting for required purchases. The income disclosures that legitimate MLMs are required to publish often show median annual earnings well below what is presented at recruitment events.\n\nIf you are considering joining, read the official income disclosure statement published by the company, calculate the cost of required purchases, and honestly assess the realistic size of your personal retail market — not the theoretical market presented at the pitch.","redFlags":["Large mandatory starter kit or initial product purchase","Monthly minimum purchase required to receive commissions","Income presentations focus primarily on recruitment bonuses","Upline members pressure you to buy more inventory than you can sell","Income disclosure statement shows most participants earning nothing","Products are significantly overpriced compared to equivalent market alternatives"],"whatToDoNow":["Read the company's official income disclosure statement before joining","Calculate total required purchases versus realistic personal retail sales","Search the company name plus 'FTC' or 'pyramid scheme' to review any regulatory actions","Consult an independent financial adviser before investing significant money","If already involved, sell existing stock and stop purchasing at minimum quotas","Report genuinely deceptive income claims to your consumer protection agency"],"faq":[{"question":"What is the difference between an MLM and a pyramid scheme?","answer":"In theory, an MLM generates income from genuine retail sales to end consumers outside the network. A pyramid scheme generates income primarily from recruiting fees. In practice, many MLMs operate economically like pyramid schemes even if technically structured otherwise."},{"question":"Can I make money in an MLM?","answer":"A small number of people, typically those at the top of the structure, do earn significant income. The vast majority do not. Income disclosure statements are required by law in many countries and show this distribution honestly."}],"lastReviewed":"2026-06-10"},{"slug":"is-call-from-border-force-or-customs-saying-a-parcel-in-my-name-contains-drugs-a-scam","url":"https://scamencyclopedia.org/questions/is-call-from-border-force-or-customs-saying-a-parcel-in-my-name-contains-drugs-a-scam","question":"Is a call from someone claiming to be border force or customs saying a package in my name contains illegal items a scam?","shortAnswer":"Yes. Border force and customs agencies do not telephone members of the public to warn them about suspicious packages and demand immediate payment or personal details.","explanation":"This scam follows a pattern similar to other government impersonation fraud. A caller claiming to be from customs, border control, or law enforcement says that a package in your name has been intercepted and found to contain illegal items — drugs, counterfeit goods, or prohibited materials. You are told that you face serious charges unless you cooperate immediately.\n\nCooperation typically involves paying a fee to have the package 'investigated' rather than prosecuted, providing your identity documents for clearance purposes, or making a payment to a 'legal fund' to manage the case. Some versions tell you to purchase gift cards and read out the codes to cover bail or legal processing costs.\n\nReal customs seizures result in formal written notices, legal processes, and representation through official channels. Officers do not call random phone numbers demanding immediate payment to resolve criminal matters. If a package genuinely contained illegal items and was traced to you, you would receive formal legal correspondence, not a surprise phone call with a payment demand.\n\nHang up and, if concerned, call the official number for your national customs or border agency published on the government website.","redFlags":["Caller claims a package in your name contains illegal items","Demands immediate payment to avoid prosecution","Asks for gift cards, wire transfer, or cryptocurrency","Threatens immediate arrest if you hang up","Caller is aggressive and will not allow you to seek legal advice first","Refuses to provide a case number you can verify through official channels"],"whatToDoNow":["Hang up immediately without making any payment","Do not provide any personal documents or financial information","Call your national customs agency on the number published on their official government website to verify","Report the call to your national police non-emergency line and fraud reporting service","If you paid, report to your bank and request a recall where possible","Block the calling number"],"faq":[{"question":"What if the caller knows personal details about me like my address?","answer":"Personal details are widely available from data breaches and data brokers. Knowing your address or name does not confirm the caller is a government official."},{"question":"Could I really face charges for a parcel I did not send?","answer":"It is theoretically possible for your name to be used on a fraudulent shipment, but this is resolved through formal legal processes — not through telephone demands for immediate payment."}],"lastReviewed":"2026-06-10"},{"slug":"is-student-loan-forgiveness-offer-requiring-a-processing-fee-a-scam","url":"https://scamencyclopedia.org/questions/is-student-loan-forgiveness-offer-requiring-a-processing-fee-a-scam","question":"Is a student loan forgiveness offer that requires me to pay a processing fee a scam?","shortAnswer":"Yes. Legitimate government student loan forgiveness programmes are free to apply for. Any service charging a fee to apply on your behalf is taking your money for something you can do yourself at no cost.","explanation":"Student loan relief scams proliferate whenever government loan forgiveness programmes are in the news. They target borrowers who are anxious about their debt and may not be familiar with the official application process. Callers, emails, and websites claim to be affiliated with the Department of Education or equivalent government body and offer to process your forgiveness application for a fee, often several hundred dollars.\n\nThe fee is either pure theft — the company takes your money and disappears — or it charges you for a service that is entirely free: submitting the application forms available on the official student loan servicer's website. Some go further and ask for your Federal Student Aid login credentials, which are then used to take over your account, change your contact information, and redirect any repayment or correspondence.\n\nGovernment loan forgiveness programmes are applied for directly through your loan servicer or through the official federal student aid website. No legitimate third party needs to be paid to access these programmes, and any organisation claiming to represent the government and charging fees is acting fraudulently.\n\nIf someone asks for your FSA ID credentials, treat this as a serious red flag — your login grants full access to your federal loan account.","redFlags":["Charges a fee for a government programme that is free to apply for","Claims to be affiliated with the Department of Education or loan servicer","Asks for your Federal Student Aid login details","Promises guaranteed forgiveness regardless of your eligibility","Pressures you to sign power of attorney documents","Contact came unsolicited through email, social media, or phone"],"whatToDoNow":["Do not pay any fee or provide FSA login credentials","Check official forgiveness programmes directly on studentaid.gov or your servicer's website","If you already provided credentials, change your FSA ID password immediately","If you paid a fee, report to the FTC and your state attorney general","File a complaint with the Consumer Financial Protection Bureau","Contact your loan servicer directly to confirm your application status"],"faq":[{"question":"Is it ever worth using a third-party student loan consultant?","answer":"Regulated financial advisers can legitimately provide guidance on repayment options for a fee. However, they cannot provide access to any programme that you cannot access yourself for free, and they should never ask for your loan servicer login."},{"question":"How do I know which forgiveness programmes I actually qualify for?","answer":"The official studentaid.gov website (US) lists all federal programmes with eligibility criteria. Your loan servicer can also advise you at no charge."}],"lastReviewed":"2026-06-10"},{"slug":"is-email-saying-i-was-caught-viewing-adult-content-and-must-pay-a-scam","url":"https://scamencyclopedia.org/questions/is-email-saying-i-was-caught-viewing-adult-content-and-must-pay-a-scam","question":"Is an email saying I was caught viewing adult content and must pay to prevent the video being shared a scam?","shortAnswer":"Yes. This is called sextortion or webcam blackmail email fraud. In the vast majority of cases, the sender has no video and is bluffing entirely.","explanation":"Sextortion emails are sent in enormous volumes to addresses harvested from data breaches. They typically include a password that you once used — found in the breach data — as 'proof' that your computer was compromised. The email claims that malware was installed during your browsing, that your webcam was activated, and that the sender captured footage of you viewing adult content.\n\nYou are given a deadline, typically 24 to 72 hours, to pay a specified amount in Bitcoin to prevent the video being sent to your contacts. The email often includes your real name, location, or part of a password to lend credibility.\n\nIn the vast majority of cases there is no video. The sender has your email address and an old password from a breach database, and that is the entirety of their leverage. The technique is a bluff applied at industrial scale — millions of emails are sent because even a tiny response rate generates significant revenue.\n\nIf you recognise the password mentioned, it is worth changing that password anywhere you still use it, and enabling two-factor authentication. But paying has no benefit — it marks you as someone who pays, and further demands will follow.","redFlags":["Email contains one of your old or current passwords","Claims your webcam was activated and you were recorded","Demands Bitcoin payment within a short deadline","Threatens to send the alleged video to your email contacts or social media","Claims to have installed keylogging or screen-capture malware","Sender address is a random string — not anyone you know"],"whatToDoNow":["Do not pay anything — payment invites further demands","Do not reply to the email","Change the password mentioned in the email on any account where you still use it","Enable two-factor authentication on important accounts","Run a malware scan on your device for peace of mind","Report the email to your national cybercrime reporting centre"],"faq":[{"question":"How did they get my password?","answer":"Passwords appear in large breach databases — compilations of credentials from past hacks of sites like LinkedIn, Adobe, MyFitnessPal, and thousands of others. These databases are bought and sold on criminal marketplaces."},{"question":"What if there is a genuine video from a real interaction?","answer":"Real sextortion, involving an actual compromising image or video obtained through a relationship, is different and more serious. Report it to law enforcement and, if you are under 18, to CEOP or your country's equivalent child protection authority."}],"lastReviewed":"2026-06-10"},{"slug":"is-online-travel-booking-site-with-very-low-prices-legit","url":"https://scamencyclopedia.org/questions/is-online-travel-booking-site-with-very-low-prices-legit","question":"Is an online travel booking site with extremely low prices for flights or hotels legit?","shortAnswer":"Possibly not. Fraudulent travel booking sites take payment for reservations that do not exist, leaving travellers stranded with no booking and no refund.","explanation":"Travel scam sites mimic legitimate booking platforms and may appear near the top of search results through paid advertising. They list flights, hotels, and package holidays at prices that are noticeably lower than established platforms, collect payment, and issue confirmation emails for bookings that either do not exist or were never actually made with the airline or hotel.\n\nThis is discovered when the traveller tries to check in and finds no reservation under their name, or receives an email days before departure saying the booking has been cancelled with no refund offered. Some sites also harvest passport details, date of birth, and payment card information for identity fraud.\n\nLegitimate discount travel does exist — airlines sell last-minute fares and some specialist aggregators have genuine supplier relationships. The distinction lies in verifiability: can you find the booking in the airline's or hotel's own system using the confirmation reference provided? Calling the airline or hotel directly and quoting the booking reference should confirm its existence.\n\nAlways book through official airline and hotel websites, or through well-established platforms with substantial independent review histories. If a price looks impossibly low, assume you are not getting a discount but instead paying for a booking that does not exist.","redFlags":["Prices are dramatically below what major established platforms show","Site was registered recently or has no independent review history","Booking confirmation reference does not match the airline or hotel's records","Requests payment via wire transfer, cryptocurrency, or unusual payment methods","Customer service is unresponsive or only reachable via messaging app","Terms state that all sales are final with no refunds under any circumstances"],"whatToDoNow":["Verify any booking by calling the airline or hotel directly and quoting the reference","Use well-established booking platforms with documented refund policies","Pay by credit card to enable chargebacks if the booking does not exist","If a booking cannot be verified, report to your card issuer immediately","Report the site to your national consumer protection body and trading standards authority","File a complaint with the platform where you found the site"],"faq":[{"question":"Are there real ways to find genuine cheap flights?","answer":"Yes. Flexible date searches on established aggregators like Google Flights, Skyscanner, and Kayak find real cheap fares. Booking directly on the airline's website confirms the booking is genuine."},{"question":"What if the site has a customer service phone number?","answer":"Fake sites sometimes list phone numbers that are never answered or are answered by people who take additional payments under false pretences. Verify the booking by calling the airline or hotel directly using a number from their official website."}],"lastReviewed":"2026-06-10"},{"slug":"is-message-saying-my-netflix-payment-failed-and-account-will-be-cancelled-a-scam","url":"https://scamencyclopedia.org/questions/is-message-saying-my-netflix-payment-failed-and-account-will-be-cancelled-a-scam","question":"Is a message saying my Netflix or streaming service payment has failed and my account will be cancelled a scam?","shortAnswer":"It is likely a phishing message. These are sent to millions of people hoping to catch genuine subscribers off guard and steal their payment card details.","explanation":"Streaming service phishing messages mimic the visual design of Netflix, Disney+, Spotify, Amazon Prime, and other platforms. They warn that a payment has failed and that your account will be suspended or cancelled unless you update your payment information immediately. The link leads to a convincing fake login page where your email, password, and payment card number are harvested.\n\nThese messages succeed because subscribers do occasionally have genuine payment issues, making the premise plausible. The text is designed to trigger concern without giving you time to think carefully. Senders rely on the instinct to act immediately rather than to verify.\n\nThe simplest check is to open the streaming service in a new tab by typing its address yourself, or to open its app on your phone, and look at your account and billing page directly. If there is a genuine payment problem, it will be visible there — you do not need to click the link in the message to resolve it.\n\nLegitimate services also send payment failure notifications from known sender domains and direct you to log in through their standard app or website, not through a link embedded in an urgent message with a deadline.","redFlags":["Urgent payment failure or account cancellation warning","Link in the message does not lead to the service's real domain","Message arrived from an email address unrelated to the service","Grammar, formatting, or logo quality does not match genuine service emails","Payment update form on the linked page asks for more than just card details — also requests social security number or passport","Message threatens a specific short deadline to act"],"whatToDoNow":["Do not click the link in the message","Open the streaming service directly by typing its address or using your app","Check your billing settings in your account directly","If your payment genuinely failed, update it through the official app or website","Forward phishing emails to the streaming service's abuse address","Report the message to your email provider as phishing"],"faq":[{"question":"I clicked the link and my account details look fine — am I safe?","answer":"If you clicked and entered credentials or card details on the fake page, change your streaming service password immediately and contact your card issuer. Account details appearing normal does not mean you are safe."},{"question":"How do legitimate streaming services handle real payment failures?","answer":"They typically retry the payment automatically, notify you via email from their official domain, and direct you to your account settings to update details. They do not threaten immediate cancellation with same-day deadlines."}],"lastReviewed":"2026-06-10"},{"slug":"is-qr-code-in-a-public-place-leading-to-a-payment-page-safe","url":"https://scamencyclopedia.org/questions/is-qr-code-in-a-public-place-leading-to-a-payment-page-safe","question":"Is scanning a QR code in a public place that leads to a payment or login page safe?","shortAnswer":"QR codes can be tampered with to redirect to fraudulent sites. Always verify the URL before entering any credentials or payment details after scanning.","explanation":"QR code fraud — sometimes called quishing — involves placing fraudulent QR code stickers over legitimate ones in public places: parking meters, restaurant menus, charging stations, and information boards. When scanned, the fraudulent code redirects to a convincing fake payment page or login portal that harvests your financial or account details.\n\nThe deception is effective because QR codes display as an opaque image — you cannot preview the URL before scanning. Most people scan and follow the link without checking the address bar on their phone carefully. By the time the fake page loads, it looks plausible enough to proceed.\n\nAlways check the URL in your browser's address bar after scanning a QR code and before entering any information. If the URL does not match the expected organisation's official domain, do not proceed. In parking situations, look for signs that a sticker has been placed over an original code — edges of the sticker may be visible.\n\nSome browsers and phone camera apps now offer QR code URL preview before following the link. Using one of these adds a layer of protection.","redFlags":["QR code is a physical sticker that looks placed over another code","URL after scanning does not match the expected organisation's official domain","Page asks for payment details immediately with no prior account verification","URL contains misspellings or uses a subdomain like 'pay.council-parking.someotherdomain.com'","No contact information or branding on the payment page beyond a logo","Code was in an unusual location or appeared at a location not known for QR-based payments"],"whatToDoNow":["Always check the URL in your browser before entering any information","If in a parking or payment context, look for the service provider's official app instead","Report tampered codes to the venue or organisation responsible for the location","If you already entered payment details, contact your bank immediately","Report to your national cybercrime authority and consumer protection body","Take a photo of the tampered code as evidence for the report"],"faq":[{"question":"Is there a safe way to scan QR codes?","answer":"Use a QR scanner app or phone camera that shows you the URL before opening it, check the URL carefully, and only proceed if it matches the expected official domain."},{"question":"Are QR scams only in physical locations?","answer":"No. Fraudulent QR codes also appear in phishing emails, printed mail, and social media posts. The same rule applies: verify the URL before entering any details."}],"lastReviewed":"2026-06-10"},{"slug":"is-sponsored-ad-on-social-media-for-a-brand-i-like-always-from-the-real-brand","url":"https://scamencyclopedia.org/questions/is-sponsored-ad-on-social-media-for-a-brand-i-like-always-from-the-real-brand","question":"Is a sponsored ad on social media for a product I like always from the real brand?","shortAnswer":"No. Social media ad systems can be exploited by fraudulent advertisers using stolen brand imagery. Sponsored ads do not guarantee the seller is the real brand.","explanation":"Brand impersonation through paid social media advertising is a significant and growing problem on major platforms. Fraudulent advertisers purchase sponsored placements using the real brand's logo, product photography, and name — often claiming an exclusive sale, overstock clearance, or going-out-of-business discount. The ad looks indistinguishable from a genuine brand advertisement.\n\nClicking the ad leads to a counterfeit website. Consumers who purchase receive counterfeits, incorrect items, or nothing. Card details entered may also be harvested for additional fraud.\n\nPlatforms do have fraud detection systems, but fraudulent ads still slip through and may run for hours or days before removal. The sponsored label in an ad indicates only that someone paid for the placement — it does not verify the advertiser's identity or the legitimacy of their goods.\n\nBefore purchasing from a sponsored ad, navigate to the brand's real website by searching for it in a new tab rather than clicking the ad directly. Compare the URL carefully. If you want a deal, look for it on the brand's official site or their verified social media accounts.","redFlags":["Ad promises a very large discount, clearance sale, or 'last chance' deal","URL in the ad or linked site does not match the brand's official domain","Ad page was created recently with few followers or likes","Product photos are watermarked or of inconsistent quality","Checkout page asks for unusual personal information beyond delivery and payment","No verifiable return address or customer service contact on the site"],"whatToDoNow":["Do not click ads directly — navigate to the brand's official site in a new tab instead","Compare the URL of the ad destination to the brand's known official domain","Report suspicious ads to the platform using the report feature on the ad itself","If you already ordered, dispute with your card issuer and report the site to consumer protection","Contact the real brand to let them know their identity is being impersonated","Check independent review platforms before purchasing from any unfamiliar destination"],"faq":[{"question":"Do social media platforms verify their advertisers?","answer":"Platforms have advertiser verification policies, but they are imperfect and fraudulent ads regularly bypass them. A sponsored label does not certify legitimacy."},{"question":"What should I do if I see a fake ad for a brand I know well?","answer":"Use the report function on the ad to flag it to the platform, and consider notifying the real brand through their official website so they can also pursue a takedown."}],"lastReviewed":"2026-06-10"},{"slug":"is-person-claiming-to-be-a-soldier-overseas-asking-to-store-valuables-with-me-a-scam","url":"https://scamencyclopedia.org/questions/is-person-claiming-to-be-a-soldier-overseas-asking-to-store-valuables-with-me-a-scam","question":"Is a person claiming to be a soldier or aid worker overseas asking me to store valuables or receive a package on their behalf a scam?","shortAnswer":"Yes. This is a variant of romance or advance-fee fraud using a military or humanitarian cover story. No genuine soldier or aid worker needs a stranger to receive packages or funds.","explanation":"Military romance scams build on the romance scam template with additional elements designed to explain why the person cannot meet in person, why they need financial help, and why they need you to receive something on their behalf. Claiming to be a soldier, surgeon, oil rig worker, or international aid worker provides cover for all of these requirements.\n\nIn the package variant, you are asked to receive and forward a package containing valuables, cash, or jewellery. The package may actually arrive and contain something of apparent value — at which point you are asked to forward it, making you an unknowing parcel mule. Alternatively, the package never arrives but you are asked to pay 'customs fees' to release it, which is a direct advance-fee theft.\n\nReal US military personnel have access to banking services and official logistical support. They do not need civilians to hold assets or receive packages. Real international aid workers similarly operate through established organisational channels.\n\nIf you met someone online who introduced any of these elements, conduct a reverse-image search of their photos, which almost always reveals the identity of the real person whose images were stolen.","redFlags":["Claims to be a soldier, surgeon, or aid worker stationed abroad","Has never been available for a real-time video call","Asks you to receive a package and forward it to another address","Asks for money to pay 'customs fees' to release a package in transit","Romantic relationship escalated very quickly","Requests financial help for emergency medical care or travel to come home"],"whatToDoNow":["Do not receive, store, or forward any packages on behalf of online contacts you have never met","Do not pay customs or release fees for packages from online contacts","Reverse-image search all photos shared by the person","Stop all financial transactions with the contact immediately","Report the profile to the platform where you met them","Report to your national fraud authority"],"faq":[{"question":"What if they have video of themselves in uniform?","answer":"Video can be pre-recorded or use footage stolen from a real service member's social media. A fixed video is not the same as a live real-time video call. Always insist on an unscripted live call."},{"question":"Is being a parcel mule dangerous even if I did not know about it?","answer":"Yes. Forwarding packages containing contraband, stolen goods, or proceeds of crime can make you liable even if you did not know the contents. Do not receive or forward packages for strangers."}],"lastReviewed":"2026-06-10"},{"slug":"is-facebook-profile-asking-me-to-send-a-small-amount-to-receive-a-much-larger-sum-a-scam","url":"https://scamencyclopedia.org/questions/is-facebook-profile-asking-me-to-send-a-small-amount-to-receive-a-much-larger-sum-a-scam","question":"Is a Facebook profile offering to send me a large sum of money if I send a small amount first a scam?","shortAnswer":"Yes, without exception. Sending money to receive more money from a stranger is the core mechanic of advance-fee fraud. No legitimate windfall works this way.","explanation":"Social media versions of advance-fee fraud use Facebook, Instagram, and WhatsApp to contact targets with promises of blessing, inheritance, lottery winnings, or charitable distributions. They typically feature profiles of apparently wealthy individuals who claim to be giving away money as a spiritual act, inheritance distribution, or grant from an aid organisation.\n\nThe initial ask is small — perhaps $20 to $50 — to cover 'processing' or to prove your account is active. Once paid, the amount required escalates until you stop paying. Some versions claim you are in a 'whitelist' for a grant but must pay a release fee to access it.\n\nThis operates identically to all advance-fee fraud regardless of the platform it uses. The promise of receiving more money in exchange for a small payment has no legitimate version. Money is not distributed this way by any real person, charity, government, or religious organisation.\n\nReport these profiles to Facebook and warn anyone who may have engaged with them. Profiles often appear to have been hacked from real people's accounts, and the account holder may not know their identity is being misused.","redFlags":["Promises a large sum in exchange for a small upfront payment","Profile was created recently or has few genuine personal posts","Story involves unclaimed inheritance, blessing money, or charity grants","Each payment triggers a new fee before the 'large sum' is released","Communication moves quickly to private messaging apps","Claims from the profile to be giving money away for spiritual or philanthropic reasons"],"whatToDoNow":["Do not send any money","Report the profile to Facebook as a scam","If the profile appears to belong to someone you know, contact them directly through another channel to warn them","If you already sent money, report to your bank and national fraud authority","Block the profile and any associated contacts","Warn others who may have seen the posts"],"faq":[{"question":"What if the profile says it is a verified giveaway organisation?","answer":"Verification marks can be faked or the profile may use a name similar to a real organisation. Independently search the organisation's official website to see whether any giveaway is listed."},{"question":"Is there any way to get my money back?","answer":"Report to your bank immediately, especially if you used a card. For bank transfers or gift cards, recovery is harder. Report to the FTC, Report Fraud (UK), or equivalent national body."}],"lastReviewed":"2026-06-10"},{"slug":"is-door-to-door-charity-collector-asking-for-cash-legit","url":"https://scamencyclopedia.org/questions/is-door-to-door-charity-collector-asking-for-cash-legit","question":"Is a door-to-door person collecting cash donations for a charity legit?","shortAnswer":"Treat with caution. Legitimate charities do use door-to-door fundraisers, but so do fraudsters pretending to represent charities. Never give cash — always donate through verified channels.","explanation":"Door-to-door charity fraud involves individuals claiming to collect for well-known charities or for local causes. They may carry clipboards, wear branded clothing, and have professional-looking paperwork. Some carry identification that looks official but cannot be verified on the doorstep.\n\nThe tell is the request for cash. Legitimate charity fundraisers who operate in most countries are required to be registered with a fundraising regulatory body and are not supposed to accept cash. They typically collect direct debit mandates or direct you to an online giving page. Cash on the doorstep benefits no charity — it goes directly into the collector's pocket.\n\nAnother version asks you to commit to a direct debit by handing over bank details. While this can be legitimate, you should always verify the charity's registration and set up the direct debit yourself through the charity's official website rather than handing your details to a stranger at the door.\n\nIf you want to support the cause claimed, thank the caller, close the door, and donate directly through the charity's official website using a verifiable charity number.","redFlags":["Collector accepts or requests cash donations","Cannot produce a charity registration number when asked","Charity registration number does not match records in the national charity database","Asks for your full bank details on the doorstep","Applies pressure to decide immediately before you can check","Organisation name is close to but slightly different from a well-known charity"],"whatToDoNow":["Never give cash to door-to-door collectors","Ask for the charity's registration number and verify it in the national database","If you want to donate, go to the charity's official website directly after the caller leaves","Report unregistered or suspicious door-to-door collectors to your local authority","In the UK, report to the Fundraising Regulator; in the US, report to your state attorney general","If you already gave cash, file a report with your consumer protection agency"],"faq":[{"question":"What if they have a visible ID badge?","answer":"ID badges can be printed at home. The only reliable check is the charity's registration number verified against the national charity regulator's database — which you can only do after the caller leaves."},{"question":"Are all door-to-door fundraisers fraudulent?","answer":"No. Registered charities do use doorstep fundraising, particularly for direct debit sign-ups. The red flag is a cash request, not the visit itself."}],"lastReviewed":"2026-06-10"},{"slug":"is-whatsapp-message-from-unknown-number-claiming-to-be-my-child-in-trouble-a-scam","url":"https://scamencyclopedia.org/questions/is-whatsapp-message-from-unknown-number-claiming-to-be-my-child-in-trouble-a-scam","question":"Is a WhatsApp message from an unknown number claiming to be my child who lost their phone and needs money urgently a scam?","shortAnswer":"Almost certainly yes. This is a family emergency impersonation scam and it is one of the fastest growing fraud types targeting parents and grandparents.","explanation":"The family emergency scam begins with a WhatsApp message from an unfamiliar number: 'Mum, it's me. I dropped my phone in the toilet/it was stolen/I broke it. This is my temporary number. Please don't call the old one.' Once you accept the story, the new 'child' explains a financial emergency — stranded abroad, owing money to a mechanic, needing rent paid instantly — and asks for a bank transfer.\n\nThe scam works by exploiting parental protective instinct and the chaos of an apparent emergency. The fraudster may know your child's name from social media. They maintain pressure and urgency to prevent you from pausing to verify.\n\nThe simplest check: end the conversation and call your child on the number you already have saved, or contact them through another family member. If they genuinely cannot be reached, try one more known contact before taking any financial action. In the vast majority of cases, your child is entirely fine and unaware of the message.\n\nNever transfer money to an unknown account based solely on a WhatsApp conversation, regardless of how convincing the story sounds.","redFlags":["Message from an unknown number claiming to be a family member","Explains immediately why the old number cannot be called","Urgent financial need requiring immediate bank transfer","Requests to keep the contact private for now","Cannot provide any details only your real family member would know when asked","Story escalates or additional financial requests follow the first"],"whatToDoNow":["End the WhatsApp conversation immediately","Call your child's known number or reach them through another family member","Ask the alleged child a specific personal question only they could answer","Do not transfer any money until you have verified the identity through a reliable channel","If you already transferred money, contact your bank immediately to request a recall","Report the scam to the Report Fraud service (UK, formerly Action Fraud), the FTC (US), or your equivalent national body"],"faq":[{"question":"What if I asked a question and they gave a correct answer?","answer":"Scammers research targets on social media. They may know names, birthdays, siblings, and other details. The verification that really matters is reaching the real person on a known number."},{"question":"Can anything be done if money was already sent?","answer":"Contact your bank immediately. Many banks have fast recall processes for bank transfers if alerted within hours. Report to local police and your national fraud authority."}],"lastReviewed":"2026-06-10"},{"slug":"is-app-or-website-offering-ai-stock-trading-guaranteed-returns-a-scam","url":"https://scamencyclopedia.org/questions/is-app-or-website-offering-ai-stock-trading-guaranteed-returns-a-scam","question":"Is an app offering AI-powered stock trading with guaranteed returns a scam?","shortAnswer":"Almost certainly yes. No algorithm — AI-powered or otherwise — can guarantee stock market returns. This is a fraudulent investment platform using technology buzzwords to add credibility.","explanation":"AI trading scams have surged alongside increased public awareness of artificial intelligence. They present as next-generation investment tools that use machine learning to generate consistent profits, often claiming returns of 5-10% per week or similar figures that no legitimate fund or algorithm achieves reliably.\n\nThe platform may show a convincing dashboard of trades, portfolio growth, and withdrawal history. Deposits are accepted freely. Withdrawals, however, become blocked at the point when you attempt them — requiring taxes, minimum balance maintenance, upgrade fees, or additional deposits to unlock.\n\nLegitimate algorithmic trading tools used by real financial institutions do not make guaranteed return promises, are not sold to retail investors through social media advertisements or messaging app groups, and do not block withdrawals. Regulated investment platforms also require financial conduct authority registration or equivalent.\n\nThe 'AI' component in these scams is marketing language only. No AI tool changes the fundamental impossibility of guaranteed investment returns. Before depositing on any trading platform, verify its registration with your national financial regulator and search for independent reviews outside the platform's own controlled channels.","redFlags":["Promises guaranteed or very high weekly returns","Marketed as AI-powered or using unexplained algorithmic 'signals'","Found through social media advertising or messaging app groups","Not registered with a national financial regulatory authority","Withdrawals require deposits, fees, or upgrades","Platform was only recently established and has no independent review history"],"whatToDoNow":["Do not make any further deposits","Verify the platform's regulatory registration with your national financial authority","Document all transactions and platform communications","Report to your financial regulator and cybercrime authority","Do not pay withdrawal fees — these are additional theft, not access to real funds","Contact your bank about any fiat payments made to the platform"],"faq":[{"question":"Do any legitimate AI trading tools exist?","answer":"Algorithmic and quantitative trading tools do exist and are used by professional firms. They do not promise guaranteed returns, are not sold to retail investors via social media ads, and their operators are licensed."},{"question":"What if the platform is based in another country where my regulator has no jurisdiction?","answer":"This is a common feature of fraudulent platforms. Operating from a jurisdiction with light regulation does not make them legitimate. Report to both your local authority and INTERPOL's financial crimes unit."}],"lastReviewed":"2026-06-10"},{"slug":"is-profile-asking-for-a-steam-gift-card-to-continue-an-online-game-match-a-scam","url":"https://scamencyclopedia.org/questions/is-profile-asking-for-a-steam-gift-card-to-continue-an-online-game-match-a-scam","question":"Is an online gaming contact asking me to send Steam gift cards or game credits to continue playing with them a scam?","shortAnswer":"Yes. Requesting gift cards to continue a gaming interaction is a scam regardless of the cover story. Gift cards are used because they are untraceable and non-refundable.","explanation":"Gaming scams often target younger players and young adults who are active in online multiplayer communities. A player you have been gaming with — or a stranger who befriended you — makes a request for Steam gift cards, Roblox credits, Fortnite V-Bucks, or similar in-game currency, justified by a story: their parent's credit card stopped working, they are locked out of their account, they will pay you back next week, or they need the cards to access a premium server together.\n\nSome versions involve a romance element — a relationship developed through a gaming platform that eventually leads to financial requests. Others are straightforward transactional: send the codes now and they will be returned with extras later.\n\nGift card and game currency codes, once sent, are redeemed instantly and cannot be reversed. The recipient is never someone you will meet, and the repayment never happens. These scams disproportionately affect teenagers who may not yet recognise the signs.\n\nNo legitimate gaming interaction requires you to purchase and share gift card codes with another player. If someone is asking for this, they are running a scam regardless of how long you have known them online or how much you enjoy gaming together.","redFlags":["Gaming contact asks you to buy and share gift card codes","Story explains why they cannot purchase the cards themselves","Promises to repay you or give you in-game rewards in return","Request follows a period of building friendship or an online romance","Becomes upset or manipulative if you hesitate or ask questions","Account was created recently or the person has no verifiable outside identity"],"whatToDoNow":["Decline the request and do not purchase any gift cards","If you already sent codes, report to the card issuer and gaming platform","Report the account on the gaming platform for fraud","Talk to a trusted adult if you are a young person who was targeted","Block the account if the person becomes aggressive or manipulative","Report to your national cybercrime reporting line"],"faq":[{"question":"What if I have been gaming with this person for months?","answer":"The length of an online relationship does not confirm the person's identity or intentions. Gift card requests from any online contact are a clear scam signal regardless of history."},{"question":"Can parents protect their children from gaming scams?","answer":"Yes. Discussing how gift card requests work and why they are always scams is one of the most effective protections. Parental controls that limit in-game purchases also reduce the risk of impulsive responses."}],"lastReviewed":"2026-06-10"},{"slug":"is-email-offering-me-work-as-a-mystery-shopper-legit","url":"https://scamencyclopedia.org/questions/is-email-offering-me-work-as-a-mystery-shopper-legit","question":"Is an unsolicited email offering me paid mystery shopping work legit?","shortAnswer":"Most unsolicited mystery shopper emails are scams. They lead into cheque overpayment fraud where you deposit a fake cheque, buy gift cards, and send the codes — leaving you with a bounced cheque and lost money.","explanation":"Legitimate mystery shopping exists as a market research practice, but it operates through established agencies, pays modest amounts, and is never accompanied by a cheque for hundreds of dollars and instructions to purchase gift cards and wire money.\n\nThe scam version begins with an unsolicited email offering $300-$500 to evaluate a money transfer service or check-cashing facility. A cheque is sent ahead of the assignment. Your task is to deposit the cheque, withdraw cash, and use it to buy gift cards or send a wire transfer — then report on the experience. You keep a modest fee.\n\nThe cheque is fraudulent. It appears to clear initially, but returns unpaid days later. The money you sent via wire or loaded onto gift cards is gone. You owe the bank the full amount of the returned cheque. Real mystery shopping assignments never involve depositing money you were sent — they involve observing service quality and completing a short questionnaire.\n\nIf you are interested in legitimate mystery shopping, search the Mystery Shopping Providers Association for accredited agencies. Real work is modest in pay and involves no financial transactions on the shopper's part.","redFlags":["Contacted out of nowhere about a mystery shopping opportunity","Sent a cheque in advance of any work","Instructed to buy gift cards or wire money as part of the 'assignment'","Assignment involves evaluating a money transfer or currency exchange service","Told to keep the matter confidential","Assignment pays unusually well compared to legitimate mystery shopping"],"whatToDoNow":["Do not deposit the cheque","Do not purchase any gift cards or send any wire transfers","Return the cheque or destroy it — depositing it starts the fraud cycle","Report the scam email to your national fraud authority","If you already deposited and sent money, contact your bank immediately","File a report with the FTC (US), Report Fraud (UK, formerly Action Fraud), or equivalent national body"],"faq":[{"question":"What does legitimate mystery shopping involve?","answer":"Real mystery shoppers visit a business, assess the service using a defined checklist, and submit a report online. They are reimbursed for any purchase made during the visit and paid a modest fee. No cheques are sent and no money is transferred."},{"question":"Is there a way to verify a mystery shopping company?","answer":"Check the Mystery Shopping Providers Association (MSPA) membership list. Member agencies adhere to industry standards and operate transparently."}],"lastReviewed":"2026-06-10"},{"slug":"is-visa-or-immigration-consultant-charging-large-fees-before-any-application-filed-legitimate","url":"https://scamencyclopedia.org/questions/is-visa-or-immigration-consultant-charging-large-fees-before-any-application-filed-legitimate","question":"Is a visa or immigration consultant charging large upfront fees before filing any application legitimate?","shortAnswer":"It may be a scam. Immigration fraud involves large upfront payments for services that are never delivered or for applications that are not submitted properly.","explanation":"Immigration and visa fraud targets people in vulnerable situations — those hoping to move to a new country, reunite families, or regularise their immigration status. The stakes are enormous and the process is genuinely complex, making people willing to pay significant fees to someone who appears knowledgeable.\n\nFraudulent immigration consultants take upfront fees, provide little or no service, and then disappear or invent reasons why the application has been delayed. Some actually submit applications with errors that result in refusals, and then charge additional fees to file appeals. Others use fake letterheads and invented application reference numbers to create the appearance of work being done.\n\nLegitimate immigration legal advice is provided by regulated solicitors, attorneys, and in some countries licensed immigration advisers. In the US, anyone representing you for immigration purposes must be an attorney or an accredited representative of a USCIS-recognised organisation. Unaccredited 'consultants' often operate illegally.\n\nBefore paying anyone for immigration help, check their professional registration. In the UK, advisers must be registered with the OISC. In the US, use only attorneys licensed by a state bar or USCIS-accredited representatives. Government immigration agencies publish their own free guidance.","redFlags":["Consultant cannot demonstrate professional registration or accreditation","Promises guaranteed visa approval — no legitimate adviser can guarantee outcomes","Requires large cash payments upfront with no written fee agreement","Cannot provide a verifiable office address or professional contact details","Discourages you from contacting the immigration authority directly","Reference or case numbers given cannot be verified through official channels"],"whatToDoNow":["Verify the consultant's registration with the relevant professional body","Request a written fee agreement before paying anything","Check the immigration authority's official website for free guidance on your application","If you believe fraud has occurred, report to your national consumer protection authority","Seek help from a non-profit immigration assistance organisation if cost is a barrier","Report immigration fraud to the immigration authority's dedicated fraud reporting line"],"faq":[{"question":"Can I do an immigration application myself without a consultant?","answer":"Many immigration applications can be submitted without legal representation using guidance published by the immigration authority. For complex cases, use a verified, registered legal professional."},{"question":"What if the consultant says they have a contact inside the immigration department?","answer":"This claim is a red flag. No legitimate adviser claims to have an insider who can influence decisions. Immigration decisions are made through a regulated process and no shortcut of this kind exists."}],"lastReviewed":"2026-06-10"},{"slug":"is-health-supplement-ad-claiming-to-cure-or-reverse-a-serious-disease-legit","url":"https://scamencyclopedia.org/questions/is-health-supplement-ad-claiming-to-cure-or-reverse-a-serious-disease-legit","question":"Is a health supplement ad claiming to cure or reverse a serious disease like diabetes or cancer legit?","shortAnswer":"No. Regulated medicines require clinical trial evidence and regulatory approval. Supplements making disease cure claims are either illegal or unproven, and they can be dangerous.","explanation":"Health product fraud is among the most harmful category of consumer scam because victims may delay or forego proven medical treatment in favour of a fraudulent product. Ads claiming that a supplement, extract, tea, or device cures cancer, reverses diabetes, eliminates dementia, or cures other serious conditions make claims that, if true, would have required clinical trials and regulatory approval before going to market.\n\nRegulatory agencies like the FDA in the US and the MHRA in the UK require proof of safety and efficacy before any product is marketed as a medicine. Supplements are allowed to claim general wellness benefits but not to claim they treat, cure, or prevent specific diseases. When a product makes disease cure claims without this approval, it is operating illegally.\n\nBeyond the legal issue, the practical danger is real: people delay seeking proper medical treatment, spend significant money on ineffective products, and in some cases take supplements that interact dangerously with prescribed medications.\n\nIf you are interested in complementary health approaches, discuss them with your doctor before purchasing. Any product making specific disease reversal claims should be reported to your national medicines regulator.","redFlags":["Claims to cure, reverse, or eliminate a specific named disease","Testimonials of dramatic recoveries from serious conditions","Marketed with phrases like 'what doctors do not want you to know'","Sold through a landing page without reference to clinical trials or regulatory approvals","Sold only online and not through licensed pharmacies","Extremely high prices with limited evidence of ingredient sourcing or quality control"],"whatToDoNow":["Do not purchase health products making unlicensed disease cure claims","Discuss any supplement with your doctor before taking it, especially if you have a medical condition","Report disease cure claims to your national medicines regulator","If you already purchased, do not take the product without consulting a pharmacist","Seek a refund and report to your card issuer if the product was misrepresented","Check whether the product appears on any safety warning lists published by your regulator"],"faq":[{"question":"What about supplements that only claim to 'support' health rather than cure a disease?","answer":"General wellness claims are regulated differently and some are permitted. The red line is specific disease treatment or cure claims. Even general claims should be assessed critically and discussed with a healthcare provider."},{"question":"How do I check whether a product has been flagged by a regulator?","answer":"The FDA in the US publishes a database of tainted products and warning letters at fda.gov. The UK MHRA publishes a list of products under investigation. Your national medicines regulator will have equivalent resources."}],"lastReviewed":"2026-06-10"},{"slug":"is-new-cryptocurrency-or-token-offering-big-early-investor-returns-a-scam","url":"https://scamencyclopedia.org/questions/is-new-cryptocurrency-or-token-offering-big-early-investor-returns-a-scam","question":"Is a new cryptocurrency or token offering huge returns to early investors a scam?","shortAnswer":"It has strong scam indicators. Most new token launches targeting retail investors with guaranteed returns are either rug pulls or pump-and-dump schemes.","explanation":"Fraudulent cryptocurrency token launches are structured to extract money from early buyers before the operators abandon the project. In a rug pull, developers raise funds through a new token sale, then withdraw liquidity and disappear — leaving the token worthless. In a pump-and-dump, insiders hold a large portion of the supply, hype the token to create buying pressure, sell their holdings at the peak, and exit while retail investors are left with a collapsed price.\n\nThe pitch always involves early-investor advantages: low entry price, guaranteed multipliers, limited supply, celebrity endorsements, or a revolutionary technology that will disrupt an established industry. Artificial urgency is created to prevent due diligence.\n\nLegitimate blockchain projects do exist, but they are distinguishable by transparent developer identities, open-source audited code, and reasonable token economics. Projects where the development team is anonymous, the smart contract is unaudited, and marketing material focuses entirely on returns rather than technology should be treated as high-risk by default.\n\nBefore investing in any new token, look for a third-party smart contract security audit, research the team's verifiable professional backgrounds, check independent community discussions rather than the project's own channels, and never invest more than you are prepared to lose entirely.","redFlags":["Promises of multiplied returns for early investors","Development team is anonymous or pseudonymous with no verifiable background","No independent smart contract security audit","Large percentage of token supply held by insiders with no vesting schedule","Marketing focused on returns rather than technology or use case","Celebrity or influencer promotion without clear disclosure of paid sponsorship"],"whatToDoNow":["Research the team's verifiable identities through independent sources","Locate and review any third-party smart contract audit before investing","Check the token's distribution — large insider holdings with no lock-up are a rug pull risk","Look for discussion on independent forums rather than the project's own social channels","If you already invested, consider your exposure and evaluate based on facts not hope","Report suspected fraud to your financial regulator"],"faq":[{"question":"What is a rug pull?","answer":"A rug pull occurs when developers of a new cryptocurrency project withdraw all liquidity from the token pool and disappear, leaving investors holding tokens with no buyers and no value."},{"question":"Does a celebrity endorsement mean a token is legitimate?","answer":"No. Celebrity crypto endorsements are often paid promotions with limited or no due diligence performed by the celebrity. Some are outright fraudulent. Always research independently."}],"lastReviewed":"2026-06-10"},{"slug":"is-linkedin-message-about-a-grant-or-funding-opportunity-i-qualify-for-a-scam","url":"https://scamencyclopedia.org/questions/is-linkedin-message-about-a-grant-or-funding-opportunity-i-qualify-for-a-scam","question":"Is a LinkedIn message saying I qualify for a business grant or government funding a scam?","shortAnswer":"Very likely yes. Unsolicited messages claiming you have been selected for a grant or business fund are a common advance-fee fraud delivered through professional networking platforms.","explanation":"Grant fraud on LinkedIn exploits the professional credibility of the platform. Scammers create convincing profiles of grant administrators, economic development officers, or representatives of well-sounding foundations. They send personalised messages suggesting your business profile caught their attention and you qualify for a specific funding amount.\n\nAfter expressing interest, you are told that a processing fee, government registration charge, or administrative deposit is required to release the grant. The amount escalates after each payment. In some versions, you are asked to provide detailed business and personal financial information which is then used for identity fraud.\n\nReal government grants and business funding programmes do not work this way. They are applied for through published competitive processes, with clearly defined eligibility criteria, official application portals, and no upfront fees. Any 'grant' that requires you to pay money to receive money is a scam.\n\nIf you receive such a message, search the grant name and the organisation through government business support databases. In the US, grants.gov lists all federal grant opportunities. In the UK, businessfinanceguide.co.uk provides verified funding options.","redFlags":["Unsolicited LinkedIn message saying you have been pre-selected","Grant requires an upfront processing or registration fee","The granting organisation cannot be verified in official government databases","Application process is handled entirely through direct messages","Urgency around a deadline before the grant is reallocated","Fees increase after each payment with new obstacles to releasing funds"],"whatToDoNow":["Do not pay any processing fees","Search the grant name on official government funding databases","Report the LinkedIn profile as fraudulent","If you already paid fees, report to your bank and national fraud authority","Contact your local small business development centre or equivalent for verified grant information","File a report with the FTC, Report Fraud (formerly Action Fraud), or equivalent national body"],"faq":[{"question":"Are there real business grants I can apply for?","answer":"Yes. Government business grants are publicly advertised through official channels and require competitive applications, not fee payments. Your local economic development agency can direct you to legitimate programmes."},{"question":"Why does the scammer message me on LinkedIn specifically?","answer":"LinkedIn provides detailed professional profiles that allow scammers to craft personalised-sounding messages and gives their own fraudulent profiles an air of professional legitimacy."}],"lastReviewed":"2026-06-10"},{"slug":"is-a-deepfake-video-call-from-someone-claiming-to-be-a-celebrity-offering-investment-advice-a-scam","url":"https://scamencyclopedia.org/questions/is-a-deepfake-video-call-from-someone-claiming-to-be-a-celebrity-offering-investment-advice-a-scam","question":"Is a video call or video featuring a celebrity recommending a specific investment or crypto platform a scam?","shortAnswer":"Very likely yes. AI-generated deepfake videos impersonating celebrities to promote fraudulent investments are a rapidly growing scam type.","explanation":"Deepfake investment fraud uses AI tools to generate realistic-appearing video of well-known figures — tech founders, financial commentators, news anchors, or celebrities — appearing to endorse specific investment platforms or cryptocurrency opportunities. These videos circulate as social media advertisements, YouTube previews, or direct messages.\n\nThe quality of deepfakes has improved rapidly. Earlier versions had obvious visual artefacts — flickering edges, unnatural mouth movements, odd blinking — that are becoming less apparent with newer models. Audio synthesis has also improved, making voices convincing. Viewers who are unfamiliar with deepfake technology are less likely to notice tell-tale signs.\n\nThe investment platform promoted in these videos follows the same pattern as all fraudulent platforms: deposits are welcomed, profits appear on a dashboard, and withdrawals are blocked by escalating fee demands. The platform is entirely fraudulent.\n\nIf a celebrity appears to be promoting an investment, search their official verified social accounts to see whether they have posted about it. Most celebrities explicitly disclaim these deepfakes when they come to their attention. Any investment promoted only through viral video content rather than through a regulated financial advice channel should be treated with extreme suspicion.","redFlags":["Celebrity promoting an investment seems slightly unnatural — lip sync slightly off, blinking unusual","Promotion found in a social media ad or direct message rather than official channels","The celebrity has no history of promoting financial products or this specific platform","Platform is not registered with any financial regulator","Comments on the video are all overwhelmingly positive and sound scripted","Clicking the link leads to an investment platform with no regulatory registration"],"whatToDoNow":["Do not invest in any platform promoted only through viral video content","Search the celebrity's official verified accounts to see if they acknowledge the promotion","Report the video to the platform as deepfake fraud","Verify investment platform registration with your national financial regulator before depositing","If you already invested, stop deposits and report to your financial regulator","Share awareness of the deepfake to help others avoid it"],"faq":[{"question":"How can I tell if a video is a deepfake?","answer":"Look for unnatural blinking, lip movements that do not perfectly match audio, inconsistent lighting on the face, or visual artefacts around hair and glasses edges. However, with improving technology, visual detection is becoming unreliable — context and verification matter more."},{"question":"Do celebrities ever legitimately endorse investment products?","answer":"Rarely, and when they do it is through verified official channels with legally required disclaimers. Any celebrity endorsement of a specific investment platform should be verified through their official social media and checked against regulatory requirements."}],"lastReviewed":"2026-06-10"},{"slug":"is-insurance-policy-being-sold-over-the-phone-at-a-very-low-price-legit","url":"https://scamencyclopedia.org/questions/is-insurance-policy-being-sold-over-the-phone-at-a-very-low-price-legit","question":"Is an insurance policy being sold to me over the phone at an unusually low price legit?","shortAnswer":"Treat with serious caution. Ghost insurance scams sell fake policies that provide no coverage, and extremely low prices may indicate stripped-down coverage or outright fraud.","explanation":"Insurance fraud operates in two main ways. In ghost policy fraud, a caller poses as an insurance broker or company representative, collects premiums for a policy that does not exist, and the victim discovers the fraud only when they make a claim and find no record with any real insurer. In the second model, the policy technically exists but is with an unlicensed or financially unstable carrier whose claims will never be paid.\n\nUnusually low premiums are achieved through several means: coverage exclusions so extensive that almost no real claim would be approved, deductibles set so high that they exceed the likely claim value, or simply a policy that is entirely fabricated. Real insurance pricing reflects actuarial risk, and prices that deviate substantially from established market rates warrant investigation.\n\nAlways verify that an insurance company and any broker selling on their behalf are registered with your national financial regulator. In the US, insurance is regulated at state level and state insurance commissioner offices maintain registers. In the UK, check the FCA register.\n\nAsk for the policy document and company registration details before paying any premium, and read the exclusions carefully. If a sale was conducted by phone without a written policy document being available for review, this is a red flag.","redFlags":["Premium is dramatically below market rate for equivalent coverage","Cannot provide the insurance company's official registration number","Caller is pushy and creates urgency to sign up before you can research","Policy documents are vague, poorly written, or arrive only after payment","Company cannot be found on any insurance regulator's database","Claims process described as unusually simple or informal"],"whatToDoNow":["Ask for the insurance company name and registration number before paying","Verify the company on your state or national insurance regulator's database","Request full policy documents before committing to any payment","Compare the quote against established insurers for the same coverage","If you already paid and have no legitimate policy, report to your financial regulator","Contact your national consumer protection agency to file a complaint"],"faq":[{"question":"What is a ghost policy?","answer":"A ghost policy is a fraudulent insurance document sold for a real premium that covers nothing because the 'insurer' is not real or is not licensed. The victim has no coverage and typically discovers this only at claim time."},{"question":"How do I find a legitimate insurance broker?","answer":"Use your national financial regulator's register of authorised firms. In the US, your state insurance commissioner maintains this list. In the UK, the FCA register lists authorised insurance intermediaries."}],"lastReviewed":"2026-06-10"},{"slug":"is-google-listing-phone-number-for-a-business-always-the-real-number","url":"https://scamencyclopedia.org/questions/is-google-listing-phone-number-for-a-business-always-the-real-number","question":"Is the phone number on a Google listing for a business always the real business's number?","shortAnswer":"Not always. Google Business listings can be edited by third parties through a process called listing hijacking, replacing real contact details with scammer numbers.","explanation":"Google Business Profile listing hijacking is a form of fraud where bad actors claim ownership of or edit a legitimate business's listing and replace the phone number with one they control. A person searching for a bank, airline, customer service number, or utility company may call the number displayed in the Google result and reach a fraudster rather than the real business.\n\nThe fraudsters who answer impersonate the business's customer service, often collecting payment details, account information, or facilitating scam transactions. Victims have no reason to be suspicious because they found the number through a search result that displayed the real business name and address.\n\nThis type of attack is especially effective against financial institutions, airlines, and large consumer brands where people urgently need to call for account issues or travel problems.\n\nAlways verify a phone number by going to the business's official website directly — typed manually — and using the contact number listed there. For financial institutions, the safest number is the one printed on the back of your card or on a statement you received in the post. Do not rely solely on search engine results for contact numbers when the call involves financial or account information.","redFlags":["Number found only in a Google listing, not confirmed on the business's actual website","When you call, the response does not match the expected business's greeting or hold music","Agent asks for more information than expected for a routine query","Number leads to an overseas-sounding call centre for a locally-focused business","Agent suggests actions inconsistent with the company's known policies","You cannot verify the number matches what is on the company's official website"],"whatToDoNow":["Always cross-reference phone numbers with the business's own official website before calling","For banking or financial queries, use the number on the back of your card","If you gave sensitive details to a suspicious caller, contact the real company immediately","Report listing hijacking to Google through the Business Profile reporting function","Notify the business directly so they can reclaim their listing","Report to your national consumer protection agency if financial harm occurred"],"faq":[{"question":"How do fraudsters get edit access to a real business's Google listing?","answer":"Google Business Profile allows listing owners to grant access to others. Fraudsters submit change requests claiming to represent the business, sometimes succeeding if Google's verification process is not rigorous enough."},{"question":"Are other search engines also vulnerable?","answer":"Yes. Bing and other directories can also carry incorrect contact details, whether through listing hijacking or simply outdated information. Always verify numbers on the business's own website."}],"lastReviewed":"2026-06-10"},{"slug":"is-money-transfer-request-from-a-friend-whose-account-was-hacked-a-scam","url":"https://scamencyclopedia.org/questions/is-money-transfer-request-from-a-friend-whose-account-was-hacked-a-scam","question":"Is a money transfer request from a friend saying they are stuck and need urgent help a scam?","shortAnswer":"Very likely yes. Hacked social media and email accounts are used to send convincing emergency money requests to the victim's real contacts.","explanation":"When a social media account, email address, or messaging app account is compromised, fraudsters send money requests to everyone in the contact list. The message appears to come from your friend, uses their name and writing style, and describes an emergency — stranded at an airport without access to funds, a medical bill, a stolen wallet.\n\nThe request is designed to exploit trust. You are inclined to help because the message appears to come from someone you know and care about. The urgency prevents you from pausing to verify.\n\nThe reliable fix is simple: before sending any money, contact your friend through a completely different channel — call their phone number, use a different messaging app, or contact a mutual friend — to confirm the emergency is real. If the account was hacked, your friend will tell you so and you will have prevented the loss. If the emergency is genuine, your friend will appreciate the quick call.\n\nNever send money based solely on a social media or email message without verbal confirmation, regardless of how convincingly the account mirrors your friend.","redFlags":["Unexpected money request from a friend through social media or messaging app","Friend describes being stranded, robbed, or in a medical emergency","Request asks you to send money via PayPal, Venmo, or wire transfer quickly","Message language or phrasing is slightly different from how your friend normally writes","Friend is uncontactable by other means despite the urgency described","Asks you to keep the request between the two of you"],"whatToDoNow":["Do not send any money before verifying by calling or using a different channel","Call your friend on their known phone number directly","If you cannot reach them, contact a mutual friend to check on them","If the account is confirmed hacked, help your friend notify the platform","If you already sent money, contact your payment provider immediately","Report the hacked account to the platform"],"faq":[{"question":"My friend confirmed via the same message app that they need help — is that enough?","answer":"No. The same compromised account can be used to respond to your verification attempts. Only a voice or video call, or confirmation through an entirely separate communication channel, is reliable."},{"question":"How do I help my friend recover a hacked account?","answer":"Direct them to the platform's account recovery process. Most major platforms have a dedicated page for reporting account compromise and recovering access. Acting quickly reduces the window for further fraud from their account."}],"lastReviewed":"2026-06-10"},{"slug":"is-online-course-promising-to-make-me-rich-with-dropshipping-or-affiliate-marketing-legit","url":"https://scamencyclopedia.org/questions/is-online-course-promising-to-make-me-rich-with-dropshipping-or-affiliate-marketing-legit","question":"Is an online course promising to teach me to make thousands per week through dropshipping or affiliate marketing legit?","shortAnswer":"Most high-priced online courses making specific income promises are questionable at best. The business models they teach are real, but the promised earnings are typically not achievable by the vast majority of students.","explanation":"Online business education courses are a legal industry, and dropshipping and affiliate marketing are genuine business models that some people do make money from. The problem is with courses that make specific earnings claims — '$5,000 per week in your first month,' 'replace your salary in 30 days' — which are presented as typical rather than exceptional outcomes.\n\nMany courses are priced in the hundreds or thousands of dollars, rely on aspirational lifestyle marketing rather than verified graduate results, and teach information freely available in online resources. The real business model is selling the course rather than the business model described inside it. Some are structured as upsells, where additional 'advanced' content is constantly sold after the initial purchase.\n\nThis is not always fraud in the legal sense — the information provided may have some value — but the earnings claims made in marketing are often misleading. Checking for independently verified student results and income disclosure statements is important.\n\nBefore purchasing any business education course, look for independent reviews on forums outside the course creator's own community, check whether an income disclosure statement is provided, and consider whether the content is available through lower-cost alternatives.","redFlags":["Specific high income promises in the marketing material","Instructor's wealth is demonstrated through lifestyle imagery rather than audited results","No income disclosure statement showing typical student earnings","Course is heavily marketed through paid social media ads","Frequent upsells required to access 'advanced' material after initial purchase","No refund policy or a very restricted refund window"],"whatToDoNow":["Search for independent reviews on forums like Reddit before purchasing","Ask for an income disclosure statement showing typical student outcomes","Check whether equivalent information is available through free or lower-cost sources","If the earnings claims were misleading, report to your consumer protection agency","Request a refund within the refund window if the content did not match claims","File a chargeback with your card issuer if a refund is refused and claims were false"],"faq":[{"question":"Are dropshipping and affiliate marketing real ways to earn money?","answer":"Yes, they are real business models. However, typical results for most people who try them are modest, and success requires significant time, testing, and ongoing effort — not what most course sales pages suggest."},{"question":"Is a high price a sign that a course is better?","answer":"Not necessarily. Course price reflects marketing investment and perceived value, not content quality or student outcomes. Independent reviews of course content and graduate results are more meaningful."}],"lastReviewed":"2026-06-10"},{"slug":"is-call-from-my-internet-provider-saying-my-connection-will-be-cut-unless-i-pay-now-a-scam","url":"https://scamencyclopedia.org/questions/is-call-from-my-internet-provider-saying-my-connection-will-be-cut-unless-i-pay-now-a-scam","question":"Is a call from my internet provider saying my connection will be cut off unless I pay a past-due amount right now a scam?","shortAnswer":"Very likely a scam. Internet providers follow formal disconnection processes with written notices. Calls demanding immediate payment to prevent same-day disconnection are impersonation fraud.","explanation":"Telecom and internet provider impersonation scams work similarly to utility scams: a caller claims to be from your ISP, cable company, or mobile provider and says your account is significantly past due and service will be terminated within the hour unless you pay immediately.\n\nThe call is designed to create enough panic that you make a payment before thinking clearly. Payment is demanded via methods real companies never use: gift cards, wire transfers, cryptocurrency, or prepaid debit cards. In some cases the caller also requests access to your account to 'verify your details,' which is then used for account takeover.\n\nYour ISP has your email address, your phone number on file, and your postal address. Legitimate disconnection processes involve multiple written and electronic notices over weeks, not surprise calls with one-hour ultimatums. The call may spoof your provider's real number on your caller ID, but this does not make it genuine.\n\nHang up, check your account balance on your provider's official app or website, and call the number on your bill if you have any concern about your account status.","redFlags":["Threatens immediate service termination within hours","Demands payment via gift card, cryptocurrency, or wire transfer","Creates urgency and discourages you from verifying through other channels","Caller ID shows your provider's name but behaviour is inconsistent with their normal approach","Asks for account login credentials to 'update payment details'","Amount demanded does not match any balance shown in your account portal"],"whatToDoNow":["Hang up and do not make any payment through the caller's instructions","Check your account balance on your provider's official app or website","Call the number on your bill to speak with real customer service","If you already gave payment details or gift card codes, report to your bank","Report the call to your national telecoms regulator and fraud reporting service","Block the number that called you"],"faq":[{"question":"Does my internet provider ever call about overdue bills?","answer":"Some providers do make outbound calls about overdue accounts, but they will not demand gift card payment or threaten immediate disconnection on a first call. They will direct you to the standard payment portal and allow time to respond."},{"question":"What if my service actually does get cut off after I hung up?","answer":"If your service was genuinely terminated, log in to your account or call customer service on the number from your bill. Real termination would be consistent with notices previously received in writing."}],"lastReviewed":"2026-06-10"},{"slug":"is-email-from-paypal-saying-i-have-an-invoice-for-a-purchase-i-did-not-make-a-scam","url":"https://scamencyclopedia.org/questions/is-email-from-paypal-saying-i-have-an-invoice-for-a-purchase-i-did-not-make-a-scam","question":"Is an email from PayPal saying I have an invoice for a purchase I did not make a scam?","shortAnswer":"It is likely a PayPal invoice scam. Fraudsters can send real PayPal invoices for purchases you never made, hoping you will call the number in the invoice and be manipulated into sending money.","explanation":"A sophisticated variant of PayPal phishing involves sending an actual PayPal invoice — a real transaction notification generated within PayPal's system — for a product you never ordered, often something high-value like tech equipment or cryptocurrency. The email is genuinely from PayPal's email system, so it passes email authentication checks.\n\nThe invoice typically includes a fraudulent customer service phone number and a note encouraging you to call if the charge is not recognised. When you call, the 'PayPal agent' attempts to take control of your computer remotely, collect your banking details, or walk you through sending a 'refund' that actually transfers your own money out.\n\nBecause the email genuinely originates from PayPal's notification system, it looks identical to a real PayPal notification. The fraud is in the phone number and the follow-up call, not in the email itself.\n\nIf you receive an invoice for something you did not purchase, log in to your PayPal account directly through the PayPal app or website — never through the email — and check whether an invoice actually exists there. If it does, report and decline it through your PayPal account. Call PayPal's official customer service number from their website, not a number printed in the email.","redFlags":["Invoice for a high-value item you never ordered","Invoice includes a phone number to call if unrecognised","Email appears genuinely from PayPal but the content is alarming","Sense of urgency — the charge will process in a few hours if not cancelled","Phone number in the invoice is different from PayPal's published customer service number","Caller or invoice note asks you to call to 'cancel' the transaction"],"whatToDoNow":["Do not call any phone number in the invoice","Log in to your PayPal account directly and check your transaction history and open invoices","If the invoice appears, decline it through your PayPal account settings","Report the fraudulent invoice to PayPal's official fraud team","Call PayPal customer service using the number from PayPal's official website if needed","Report to the FTC at ReportFraud.ftc.gov"],"faq":[{"question":"How can a scam use a real PayPal email?","answer":"PayPal's invoicing system allows any PayPal account to send invoices to any email address. Scammers create PayPal accounts specifically to send fraudulent invoices that generate genuine PayPal notification emails."},{"question":"Will PayPal charge me if I ignore the invoice?","answer":"Ignoring an invoice sent to your email does not result in a charge to your account. Only you initiating a payment through your logged-in PayPal account results in a charge."}],"lastReviewed":"2026-06-10"},{"slug":"can-the-irs-demand-gift-card-payment","url":"https://scamencyclopedia.org/questions/can-the-irs-demand-gift-card-payment","question":"Can the IRS demand I pay a tax debt using gift cards?","shortAnswer":"No. The IRS and equivalent tax agencies in other countries never accept gift cards as payment and will never call demanding immediate payment this way.","explanation":"Tax agencies accept payment through official government portals, bank transfers, cheques payable to the treasury, or authorised payment processors. Gift cards — iTunes, Google Play, Amazon, or any retailer — are not government-approved payment instruments and are explicitly rejected by every legitimate tax authority.\n\nThe reason scammers prefer gift cards is practical: once you read out the code, the value is transferred instantly and is virtually impossible to trace or recover. Scammers impersonating tax officials create urgency by threatening arrest, deportation, or licence suspension to prevent you from pausing and checking facts.\n\nThe IRS sends multiple written notices before taking any collection action. It does not initiate contact by phone demanding same-day payment. In the UK, HMRC operates similarly — written contact first, with formal appeal rights. No tax authority anywhere in the world will threaten arrest on a first phone call for outstanding tax.\n\nIf you receive such a call, note the caller's name, badge number, and any reference they give, then call the official agency number independently to verify whether any debt actually exists.","redFlags":["Caller claims to be from the IRS, HMRC, or another tax agency","Demands immediate payment by gift card, wire transfer, or cryptocurrency","Threatens arrest, deportation, or immediate legal action","Tells you to buy gift cards and read the numbers over the phone","Refuses to send written documentation of the alleged debt","Asks you not to discuss the matter with anyone"],"whatToDoNow":["Hang up and do not purchase any gift cards","Look up the official tax agency number independently and call to verify","Report the call to the agency's fraud hotline (e.g., IRS phishing@irs.gov)","Report to the FTC at reportfraud.ftc.gov or your country's equivalent","If you already bought gift cards, call the card issuer immediately to report fraud","Keep a record of the call details for any follow-up report"],"faq":[{"question":"How does the IRS actually contact people about tax debts?","answer":"The IRS sends written notices by mail first. It does not initiate collection contact via email, text, or unsolicited phone calls. Any phone contact comes after written correspondence, and you always have the right to appeal."},{"question":"I already bought the gift cards but have not read the codes yet — what should I do?","answer":"Do not read the codes to anyone. Keep the cards and receipts, then contact your bank and the card retailer immediately. Report the incident to the FTC and your local police."}],"lastReviewed":"2026-06-10"},{"slug":"can-police-ask-me-to-hand-over-cash-to-protect-it","url":"https://scamencyclopedia.org/questions/can-police-ask-me-to-hand-over-cash-to-protect-it","question":"Can police ask me to hand over my cash or valuables to protect them from fraud?","shortAnswer":"No. Police officers do not collect cash or valuables from members of the public as a fraud-protection measure. This request is a scam known as a police impersonation fraud.","explanation":"Genuine police forces investigate fraud; they do not ask you to withdraw large sums of cash or hand over jewellery so they can 'keep it safe' during an ongoing operation. Police never request that you keep an investigation secret from family or other officers. The entire premise — that giving your valuables to a stranger protects them — is designed to exploit trust in authority.\n\nThis scam frequently targets older adults. The caller claims to be a detective investigating corrupt bank employees or counterfeit currency, and insists that you must not tell branch staff the real reason for a withdrawal. They may send a courier to your door to collect the cash or ask you to leave it in an agreed location.\n\nPolice will never ask you to test marked notes by depositing them in your own account, never request you to participate in a covert sting by handing over your savings, and never tell you to distrust other official services. Real undercover operations do not recruit random members of the public by cold calling.\n\nIf you receive such a call, hang up and dial your local emergency or non-emergency police number from a different phone or after waiting several minutes, because fraudsters sometimes stay on the line to intercept your call.","redFlags":["Caller claims to be a detective or senior police officer","Asks you to withdraw cash or gather jewellery for safekeeping","Tells you not to tell bank staff or family why you are withdrawing money","Says a courier will collect items from your home","Insists the operation is top secret and you must not verify the call","Provides a badge number but refuses to confirm it through official channels"],"whatToDoNow":["Hang up immediately and do not hand over any money or valuables","Wait at least five minutes before calling anyone, then use a different phone","Call your local police non-emergency line to report the call","Tell a trusted family member or neighbour what happened","If a courier arrives at your door, do not answer and call police","Report to your national fraud reporting service"],"faq":[{"question":"What if the caller offers a police crime reference number?","answer":"A crime reference number can be invented. Always verify by calling the police directly on a number you look up independently — not a number given to you by the caller."},{"question":"Why do fraudsters stay on the line after you hang up?","answer":"On older landline systems a caller can sometimes hold the line open for a short period. Waiting a few minutes or using a mobile phone prevents the fraudster from intercepting your follow-up call."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-court-demand-payment-to-avoid-arrest-warrant","url":"https://scamencyclopedia.org/questions/can-a-court-demand-payment-to-avoid-arrest-warrant","question":"Can a court contact me and demand immediate payment to avoid an arrest warrant?","shortAnswer":"No. Courts communicate through formal written summons and due process. Unsolicited calls demanding instant payment to cancel an arrest warrant are always fraudulent.","explanation":"Judicial systems operate through documented procedures. If you miss a court date or have an outstanding fine, you will receive written notice sent to your registered address and you have formal rights to respond, appeal, and arrange payment through official channels. No court clerk calls individuals unexpectedly asking for immediate wire transfers or gift cards to prevent arrest.\n\nScammers posing as court officials exploit the fear of legal consequences. They may claim you missed jury duty, failed to pay a fine, or are wanted for a serious offence. The threat of imminent arrest pressures victims to act before they can think clearly or verify the claim.\n\nLegitimate court notices include a case number, jurisdiction, and instructions for contacting the court through verified channels. Real courts never demand payment over the phone, never accept cryptocurrency or gift cards, and never tell you to keep the call confidential.\n\nIf you are unsure whether you have any outstanding legal matters, contact your local court directly using a number from the official government website, or consult a lawyer. Do not use contact information given by the caller.","redFlags":["Unsolicited call claiming you have an outstanding warrant","Demands immediate payment by wire, gift card, or cryptocurrency","Provides no written documentation or verifiable case number","Creates extreme urgency and threatens arrest within hours","Instructs you to keep the call secret","Offers to resolve the warrant privately over the phone"],"whatToDoNow":["Do not pay anything over the phone","Note any names, case numbers, or details provided","Look up the court or agency on the official government website and call directly","Consult a lawyer if you are genuinely concerned about any legal matter","Report the call to your national fraud authority","Warn family members who might be targeted by similar calls"],"faq":[{"question":"Is there any situation where a court would call me?","answer":"Some courts may call to confirm appointments already established through written correspondence. They will never demand unsolicited payment over the phone and will always be able to direct you to written records of your case."},{"question":"What if the caller knows my name, address, and last four digits of my Social Security number?","answer":"Personal information is widely available from data breaches and public records. Knowing your details does not make a caller legitimate. Always verify through official channels independently."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-utility-company-demand-same-day-payment-to-avoid-disconnection","url":"https://scamencyclopedia.org/questions/can-a-utility-company-demand-same-day-payment-to-avoid-disconnection","question":"Can a utility company call and demand same-day payment or they will disconnect my service today?","shortAnswer":"No. Legitimate utility providers follow regulated disconnection procedures that require written notice and allow time to dispute or pay. A same-day shutoff threat by phone is a scam tactic.","explanation":"Gas, electricity, and water providers are typically regulated entities that must follow formal disconnection procedures. These procedures involve sending multiple written bills, payment reminders, and a formal disconnection notice before any service is interrupted. This process usually spans weeks or months, not hours.\n\nScammers impersonating utilities use the threat of immediate disconnection to panic customers into paying quickly via untraceable methods such as prepaid debit cards, wire transfers, or cryptocurrency. The fear of losing heating or electricity — especially in extreme weather — makes this a particularly coercive tactic.\n\nA genuine utility company calling about an overdue account will offer you multiple payment options through their official website or phone system, allow you to call back on the number printed on your bill, and will never demand payment exclusively in gift cards or prepaid cards. They will also be able to provide verifiable account information that matches your billing history.\n\nIf you receive such a call, hang up and use the number on your most recent paper or digital bill to call the utility company directly and check your actual account status.","redFlags":["Caller threatens disconnection within hours unless you pay immediately","Demands payment by gift card, prepaid debit card, or wire transfer","Will not allow you to call back on the official billing number","Cannot confirm specific account details that match your records","Uses aggressive or threatening language to prevent delay","Claims a technician is already en route to disconnect you"],"whatToDoNow":["Hang up and do not provide any payment details","Call the utility company using the number on your bill or official website","Check your account balance online or through the official app","Report the scam call to your utility provider's fraud team","Report to your national consumer protection agency","If vulnerable family members are targeted, set up account alerts on their behalf"],"faq":[{"question":"Are there any legitimate emergency disconnection situations?","answer":"Safety-related disconnections for gas leaks or electrical hazards are handled by engineers on-site, not by billing calls. You would never be asked to make a payment to prevent a safety shutoff."},{"question":"The caller mentioned my account number — does that mean the call is real?","answer":"Account numbers are sometimes available through data breaches or your discarded mail. An account number alone does not verify the caller is from your utility. Always call back on the official number."}],"lastReviewed":"2026-06-10"},{"slug":"can-an-employer-ask-me-to-pay-a-fee-before-starting-a-job","url":"https://scamencyclopedia.org/questions/can-an-employer-ask-me-to-pay-a-fee-before-starting-a-job","question":"Can a legitimate employer ask me to pay a fee before I can start a job?","shortAnswer":"No. Legitimate employers pay you — they never charge fees for hiring, training materials, background checks, or equipment before you start work.","explanation":"In a genuine employment relationship, all onboarding costs are borne by the employer. Background checks, training, uniforms, and equipment are employer expenses. Even where a worker eventually purchases their own tools or pays for professional certifications, this is done on the worker's initiative through independent providers — not as a precondition of being hired.\n\nAdvance-fee job scams use convincing fake job postings, professional-looking offer letters, and plausible reasons for the upfront payment: registration fees, clearance fees, insurance bonds, visa processing charges, or the cost of a work-from-home kit that is 'mailed to you after payment.' Once you pay, communication ceases or the fraudster invents more fees.\n\nBe especially cautious with jobs that were unsolicited, pay unusually high wages for simple tasks, and request payment through untraceable methods like wire transfer, cryptocurrency, or gift cards. Legitimate recruiters and employers always provide verifiable contact details, registered business addresses, and references you can independently check.\n\nResearch any company name through official business registries and search engines before providing personal information or money. If you found the job through a job board, report suspicious postings so they can be removed.","redFlags":["Asked to pay a registration, processing, or clearance fee before starting","Offer arrived unsolicited via email, text, or social media","Salary is unusually high for unspecified or simple remote work","Company cannot be verified through official business registries","Payment demanded by gift card, wire transfer, or cryptocurrency","Offer letter contains spelling errors or generic branding","Interviewer only communicates via messaging app, never video or phone"],"whatToDoNow":["Refuse the payment request and do not send any money","Research the company through official registries and independent search","Contact the supposed employer through independently verified contact details","Report the job posting to the platform where you found it","Report the scam to your national employment or consumer protection agency","Warn others by leaving a review on job sites if appropriate"],"faq":[{"question":"What about paying for my own professional certifications before a job?","answer":"Some industries require workers to hold certifications before applying. However, reputable employers always specify this in the job ad and never collect the certification fee themselves. You should pay accredited institutions directly, not the hiring company."},{"question":"Is a refundable deposit for equipment ever legitimate?","answer":"Genuine employers occasionally require equipment deposits for expensive items, processed through payroll or formal HR paperwork — never by gift card or personal bank transfer. Any request for a deposit before your first day via an informal payment method is a red flag."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-landlord-charge-a-deposit-before-viewing-a-property","url":"https://scamencyclopedia.org/questions/can-a-landlord-charge-a-deposit-before-viewing-a-property","question":"Can a landlord ask for a deposit or payment before I have viewed the property?","shortAnswer":"No legitimate landlord requires a financial deposit before an in-person viewing. Any request for money before you have seen the property is a strong indicator of a rental scam.","explanation":"In a genuine rental transaction, a landlord or letting agent shows you the property, you submit an application, references are checked, and only then — after both parties have agreed terms — is a holding deposit or security deposit requested. The sequence matters: viewing always precedes any financial commitment.\n\nRental listing scams are common on classified ad sites and social media. A fraudster posts photos of a desirable property at a below-market price, then claims they are currently overseas or managing the property remotely and cannot arrange a viewing without a prior payment. Common pretexts include an 'application fee,' 'key deposit,' or 'security hold' to reserve the property while they return.\n\nOnce payment is made, the scammer disappears or invents reasons to request more money. The property either does not exist, belongs to someone else, or is legitimately for rent through a different agent. Reverse-image searching photos from the listing often reveals the images are stolen from other listings.\n\nNever transfer money for rental purposes before verifying the landlord's identity, confirming their legal right to let the property, and completing an in-person or video-verified viewing.","redFlags":["Landlord requests a deposit or fee before any viewing is arranged","Claims to be overseas and unable to meet in person","Rental price is significantly below market rate for the area","Listing photos appear on multiple unrelated platforms","Communication is only through messaging apps with no verifiable identity","Asks for payment by wire transfer, gift card, or cryptocurrency","Lease or tenancy agreement contains inconsistencies or generic templates"],"whatToDoNow":["Refuse any payment request before an in-person viewing","Reverse-image search the listing photos","Verify the landlord's ownership through land registry records where available","Arrange a viewing in person or via live video call with the landlord present","Use a reputable letting agency with a physical office when possible","Report the listing to the platform and to your local consumer protection authority"],"faq":[{"question":"Is an application fee from a letting agency ever legitimate?","answer":"In some countries and US states, small administrative fees from licensed letting agents are permitted, but these are disclosed upfront, receipted, and collected through formal channels after a viewing — not as a precondition of seeing the property."},{"question":"The landlord sent me a signed lease — does that mean the rental is real?","answer":"Lease documents can be fabricated easily. A signed document does not prove the landlord owns the property or has the right to rent it. Always verify ownership independently before transferring any money."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-delivery-company-charge-a-fee-to-release-a-parcel","url":"https://scamencyclopedia.org/questions/can-a-delivery-company-charge-a-fee-to-release-a-parcel","question":"Can a delivery company charge me a fee to release a parcel or package?","shortAnswer":"Legitimate couriers may collect genuine customs duties at the door, but unexpected 'release fees' demanded by text or email — especially when you are not expecting a parcel — are almost always a scam.","explanation":"Genuine customs duties and import taxes are assessed by government customs agencies and may be collected by the courier on the agency's behalf. These charges appear on official customs documentation, reflect the declared value of the item, and can be verified through the national customs authority's website using the parcel's tracking number.\n\nParcel delivery scams use SMS or email messages mimicking well-known couriers. They claim a package could not be delivered due to an outstanding fee — typically a small amount to seem plausible. The link in the message leads to a fake payment page that harvests card details, after which the victim's card is charged repeatedly or sold.\n\nRed flags include messages about parcels you were not expecting, fees that cannot be verified against a real tracking number, and payment pages that look slightly different from the courier's official website. Legitimate couriers will redelivery notification through their official apps and websites, not through suspicious shortened links.\n\nIf you receive a delivery notification and are unsure whether it is genuine, visit the courier's official website directly and enter the tracking number provided to check its status without clicking any link in the message.","redFlags":["Text or email about a parcel you are not expecting","Requests a small fee to release or redeliver a package","Contains a link to a payment page rather than directing you to the official website","Tracking number does not appear on the courier's real website","Payment page asks for full card details including CVV","Sender's email domain does not match the official courier domain"],"whatToDoNow":["Do not click any links in the message","Go directly to the courier's official website and enter the tracking number","If the tracking number shows nothing, the message is likely fraudulent","Report the phishing message to the courier's official fraud team","Report to your national cyber security agency","If you entered card details, contact your bank immediately to block the card"],"faq":[{"question":"How do I tell if a customs duty charge is real?","answer":"Real customs charges come with official customs documentation showing the assessment. You can verify the tracking number on the courier's official website and cross-check with your national customs authority. Genuine duties are never collected via anonymous payment links."},{"question":"I clicked the link but did not enter payment details — am I safe?","answer":"Merely clicking a link can sometimes install tracking software, but the main risk is if you entered personal or card details. Run a malware scan on your device and monitor your accounts for unusual activity."}],"lastReviewed":"2026-06-10"},{"slug":"can-an-immigration-office-demand-a-fee-to-process-a-visa","url":"https://scamencyclopedia.org/questions/can-an-immigration-office-demand-a-fee-to-process-a-visa","question":"Can an immigration office contact me and demand an urgent fee to process or save my visa application?","shortAnswer":"No. Immigration authorities communicate through official case portals and written correspondence. Unexpected calls demanding urgent fees to save a visa are always scams.","explanation":"Government immigration agencies publish clear, fixed fee schedules on their official websites. All fees are paid through verified government payment portals, never by phone to an individual officer. If your application has an issue, you receive written notice through your registered case portal or by mail, with defined deadlines and appeal rights.\n\nImmigration fraud preys on the fear of losing a visa or facing deportation. Scammers pose as immigration officers, claim your application is about to be cancelled, and demand an immediate payment to correct the issue. They may know your name, nationality, and visa category — obtained from data breaches or from social media research — which makes the call seem credible.\n\nLegitimate immigration offices never accept payment over the phone, never tell you the situation is so urgent that you cannot take time to verify the call, and never demand untraceable payment methods. An officer who tells you that you will be detained or deported if you do not pay within the hour is not a government official.\n\nIf you have a genuine concern about your immigration status, log into your official case portal or contact the agency through verified contact details listed on the official government website.","redFlags":["Caller claims your visa or residency status is about to be cancelled","Demands immediate payment by wire, gift card, or cryptocurrency","Creates extreme urgency and threatens deportation or detention","Cannot direct you to a verifiable case reference in an official portal","Instructs you not to contact a lawyer or family member","Knows personal details but cannot provide official case documentation"],"whatToDoNow":["Do not pay anything and do not provide personal documents over the phone","Log in to your official immigration case portal to check your actual status","Contact the immigration authority using numbers from the official government website","Consult an accredited immigration lawyer if you have genuine status concerns","Report the call to the immigration authority's fraud hotline","Report to your national anti-fraud authority"],"faq":[{"question":"What if the caller offers to email me official-looking documents?","answer":"Fraudulent government documents are easy to fabricate. An emailed document with official logos does not prove legitimacy. Always verify your status through the official government portal independently."},{"question":"I am on a visa and worried about my status — how can I check safely?","answer":"Log in to the official government immigration portal using the URL you bookmarked when you first applied. Do not follow links from emails or calls. A licensed immigration attorney can also verify your status securely."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-bank-ask-me-to-share-my-one-time-passcode","url":"https://scamencyclopedia.org/questions/can-a-bank-ask-me-to-share-my-one-time-passcode","question":"Can my bank ever ask me to share my one-time passcode (OTP) over the phone?","shortAnswer":"No. Banks and financial services never ask you to read back an OTP they sent you. If someone calls asking for your OTP, they are attempting to access your account.","explanation":"One-time passcodes are a second layer of security specifically designed to ensure only you — the account holder physically holding the registered device — can authorise a transaction. The entire security model breaks down if the code is shared. Banks know this, which is why their messages and apps typically contain explicit warnings such as 'Never share this code with anyone, including bank staff.'\n\nThe attack works like this: a fraudster has obtained your account credentials through phishing or a data breach. They initiate a login or transaction on your account, which triggers your bank to send you a genuine OTP. They then call you — often already knowing your name and partial account details to seem credible — and request the code under the pretext of verifying your identity or reversing a fraudulent transaction.\n\nOnce you read out the OTP, the fraudster completes the login or transaction within the seconds the code is valid. They may then change your password, set up new payees, or drain your account before you realise what happened.\n\nNo legitimate bank representative, customer service agent, or fraud department employee will ever ask for your OTP. If you receive such a call, hang up and change your passwords immediately. Contact your bank through the official app or the number on your card.","redFlags":["Caller says they need your OTP to 'verify your identity' or 'reverse a fraud'","A text from your bank arrives moments after or during the call","Caller knows your name, last four card digits, and account balance","Creates urgency by claiming your account is being drained right now","Asks you to stay on the line while you check the message","Caller ID appears to show your bank's genuine number"],"whatToDoNow":["Hang up without reading the OTP to anyone","Change your online banking password immediately","Check your account for any unauthorised transactions","Call your bank on the number on the back of your card","Ask the bank to review recent login attempts and flag suspicious activity","Report the call to your national fraud authority"],"faq":[{"question":"What if the text message says the OTP is for my own verification?","answer":"The bank sends the OTP to verify that the person requesting access has possession of your registered device. The message is addressed to you — but the fraudster triggered it. Never share it."},{"question":"I shared my OTP and an unauthorised transaction went through — what do I do?","answer":"Call your bank immediately using the number on your card and report it as fraud. Ask them to freeze the account and reverse the transaction if possible. Document the call details for your fraud claim."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-tech-support-agent-ask-me-to-install-remote-access-software","url":"https://scamencyclopedia.org/questions/can-a-tech-support-agent-ask-me-to-install-remote-access-software","question":"Can a tech support agent legitimately ask me to install remote access software on my computer?","shortAnswer":"Only if you initiated the support call through an official channel. Unsolicited calls claiming to detect viruses on your computer and asking you to install remote-access tools are always scams.","explanation":"Remote access tools are legitimate when used by IT departments supporting employees on company devices, or by consumer tech support services where you initiated the contact by calling the official support number. The key distinction is who initiated the contact and whether you can verify the caller's identity through official channels.\n\nTech support scams typically start with a pop-up warning saying your computer has a virus, a cold call claiming to be from a well-known tech company's support team, or an alarming message telling you to call a specific number. Once the victim calls or agrees to help, the scammer requests remote access to 'diagnose' the problem.\n\nWith remote access, the scammer can show you fabricated diagnostic screens designed to look alarming, 'discover' non-existent problems, and then demand payment for bogus repairs — often hundreds of dollars. They may also install malware, steal passwords from the browser, or access financial accounts while screen-sharing.\n\nMajor technology companies do not proactively monitor individual home computers and do not call customers unsolicited to warn about infections. If you did not initiate the support contact, treat any request for remote access as a fraud attempt.","redFlags":["Pop-up or call says your computer has a virus and provides a phone number to call","Caller claims to be from a well-known tech company's support department","Asks you to download a remote access application such as AnyDesk or TeamViewer","Shows you system logs or diagnostic screens claiming they prove infection","Demands a payment by gift card, wire, or cryptocurrency to fix the problem","Asks for access to your bank or financial accounts to process a refund"],"whatToDoNow":["Close the pop-up using Task Manager if necessary and do not call the number","Never install software at the request of an unsolicited caller","If you already installed remote access software, disconnect from the internet immediately","Run a scan with reputable antivirus software","Change passwords to your email, bank, and other important accounts from a clean device","Report the scam to your national cybersecurity authority"],"faq":[{"question":"I already gave them remote access — what should I do now?","answer":"Disconnect your computer from the internet immediately by unplugging the network cable or disabling Wi-Fi. Change all passwords from a different device. Contact your bank to monitor for unauthorised access. Have the computer checked by a trusted professional."},{"question":"How do I tell if a tech support call is from a real company?","answer":"Hang up and call the company's official support number listed on their website. Do not call back numbers provided in pop-ups or by unsolicited callers. Real companies will have a record of any prior contact you have made."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-bank-ask-me-to-pay-a-fee-to-release-a-refund","url":"https://scamencyclopedia.org/questions/can-a-bank-ask-me-to-pay-a-fee-to-release-a-refund","question":"Can a bank or financial company ask me to pay a fee to release a refund owed to me?","shortAnswer":"No. Legitimate refunds from banks or financial institutions are credited directly to your account. Any request to pay a fee to receive money owed to you is a scam.","explanation":"Refund release fees are a classic advance-fee fraud pattern. The scammer tells the victim that a large sum of money — an overpayment, a compensation award, a tax rebate, or a prize — is being held and will be released as soon as a small processing fee is paid. Once the fee is paid, a new fee is invented, and the cycle continues until the victim stops paying or runs out of money.\n\nLegitimate financial refunds — whether from a bank, a court settlement, a government agency, or a consumer protection authority — are processed through established accounting systems. They do not require you to fund any part of the release process. If a fee were genuinely required, it would be deducted from the refund itself, not charged upfront to you.\n\nBe particularly sceptical if you were contacted out of the blue about money you were not expecting. Scammers often fabricate context — a class action settlement you are supposedly part of, an unclaimed inheritance, or a data breach compensation scheme — to make the refund seem plausible.\n\nIf you are owed a genuine refund from a bank or financial provider, the process will be initiated by the institution through official channels, with no upfront cost to you.","redFlags":["Asked to pay a fee before a refund, rebate, or compensation can be released","The refund is larger than you expected or were not anticipating","Each fee payment is followed by a request for another fee","Payment must be made by wire, gift card, or cryptocurrency","Contact arrived unsolicited by email, text, or social media","The company or authority cannot be verified through independent research"],"whatToDoNow":["Refuse the fee request and do not send any money","Research the company independently using official registries and search engines","If you believe a genuine refund is owed, contact the institution directly through verified channels","Report the contact to your national consumer protection or fraud authority","If you have already paid fees, report to your bank and request a chargeback if paid by card","Keep records of all communications for any fraud report"],"faq":[{"question":"What if I was genuinely part of a class action settlement?","answer":"Real class action settlements are administered by court-appointed claims administrators. They notify claimants through official legal notices and the settlement website. You never pay fees to receive your settlement payment."},{"question":"The refund amount is correct and matches a real overpayment — could it still be a scam?","answer":"Yes. Fraudsters research their victims and can know the approximate amount of a legitimate refund from data breaches or prior conversations. Verify by contacting the institution directly through numbers on your official statements."}],"lastReviewed":"2026-06-10"},{"slug":"can-hmrc-threaten-arrest-for-unpaid-tax-on-first-contact","url":"https://scamencyclopedia.org/questions/can-hmrc-threaten-arrest-for-unpaid-tax-on-first-contact","question":"Can HMRC threaten me with immediate arrest for unpaid tax the first time they contact me?","shortAnswer":"No. HMRC does not threaten arrest on a first contact, and certainly not by phone. Immediate arrest threats for tax debt are a hallmark of impersonation scams.","explanation":"HM Revenue and Customs follows a defined compliance and enforcement process. It issues formal written assessments, provides time to respond or appeal, and offers payment plans before any enforcement action is taken. Criminal prosecution for tax matters is reserved for deliberate fraud cases and follows a lengthy formal investigation — not a sudden phone call.\n\nScammers impersonating HMRC are active year-round and intensify around self-assessment deadlines. They call, text, or email claiming you owe an immediate tax debt and that you will be arrested, have a county court judgment registered, or have your assets seized if you do not pay within hours. The urgency prevents you from verifying the claim through official channels.\n\nHMRC will never demand payment by vouchers, gift cards, cryptocurrency, or bank transfer to a personal account. It will never threaten criminal prosecution on a first contact call. It will always be willing to give you the official helpline number so you can call back and verify. Any caller who refuses to allow you to verify the call is not from HMRC.\n\nIf you receive such a communication and are unsure whether you have a tax liability, log into your HMRC Personal Tax Account at gov.uk or call the official HMRC helpline.","redFlags":["First contact threatens immediate arrest or criminal prosecution","Demands same-day payment to avoid a warrant being issued","Requests payment by gift card, cryptocurrency, or personal bank transfer","Cannot confirm the debt through your HMRC Personal Tax Account","Caller refuses to allow you time to verify or consult a tax adviser","Uses aggressive or threatening language throughout the call"],"whatToDoNow":["Hang up without providing any personal or payment information","Log into your HMRC Personal Tax Account at gov.uk to check your actual status","Call the HMRC helpline on the number listed at gov.uk to verify any alleged debt","Report the scam to the Report Fraud service (UK, formerly Action Fraud) at reportfraud.police.uk","Forward any suspicious HMRC emails to phishing@hmrc.gov.uk","Report suspicious texts to 7726 (SPAM) on your mobile"],"faq":[{"question":"How does HMRC actually contact people about tax debts?","answer":"HMRC uses letters, your Personal Tax Account, and sometimes phone calls — but phone calls come after written contact and you always have the right to verify the debt and arrange payment without threat of immediate arrest."},{"question":"I received a letter, not a call — could that still be a scam?","answer":"Fraudulent HMRC letters do exist. Check the address, reference number, and contact details against those on the official gov.uk website. Genuine HMRC letters will direct you to your Personal Tax Account, not to a third-party payment service."}],"lastReviewed":"2026-06-10"},{"slug":"can-social-security-administration-suspend-my-number","url":"https://scamencyclopedia.org/questions/can-social-security-administration-suspend-my-number","question":"Can the Social Security Administration suspend my Social Security number?","shortAnswer":"No. Social Security numbers cannot be suspended or deactivated. Calls claiming your SSN has been suspended are an impersonation scam.","explanation":"The Social Security Administration does not have the authority or mechanism to suspend or deactivate a Social Security number. Your SSN is a permanent identifier. The SSA may update your earnings record, process benefit claims, or flag an SSN for investigation — but it does not suspend numbers and would never inform you of this by an unsolicited automated or live call.\n\nThis scam has been one of the most prevalent government impersonation frauds. The robocall or live caller claims your SSN is linked to criminal activity, drug trafficking, or money laundering, and that it has been or will be suspended unless you call back immediately. Some variants claim law enforcement has already obtained a warrant for your arrest.\n\nThe SSA communicates primarily by mail. It does not call to demand immediate action, does not threaten arrest over the phone, and does not ask for payment by gift card or wire transfer. If you have a genuine question about your benefits, visit ssa.gov or call the official SSA helpline.\n\nIf someone calls claiming to be from the SSA and threatening consequences, hang up and report the call to the SSA's Office of the Inspector General.","redFlags":["Automated or live call says your SSN has been or will be suspended","Claims your number is linked to criminal activity","Threatens arrest or legal action unless you call back immediately","Asks you to verify your SSN over the phone","Demands payment to 'clear' your SSN or resolve criminal flags","Callback number is not the official SSA number (1-800-772-1213)"],"whatToDoNow":["Hang up immediately","Do not call back the number provided","Report the call to the SSA Office of Inspector General at oig.ssa.gov","Report to the FTC at reportfraud.ftc.gov","If you gave personal information, consider placing a fraud alert on your credit","Check your Social Security earnings record at ssa.gov/myaccount"],"faq":[{"question":"What does a genuine SSA call look like?","answer":"The SSA occasionally calls for scheduled follow-ups to claims already in progress. These calls come after written correspondence and the agent will not demand immediate action or payment. You can always hang up and call 1-800-772-1213 to verify."},{"question":"I gave them my SSN during the call — what should I do?","answer":"Place a fraud alert with the three major credit bureaus immediately. Consider a credit freeze. Monitor your credit reports for new accounts opened in your name and report any fraud to the FTC."}],"lastReviewed":"2026-06-10"},{"slug":"can-an-employer-ask-for-bank-login-to-set-up-payroll","url":"https://scamencyclopedia.org/questions/can-an-employer-ask-for-bank-login-to-set-up-payroll","question":"Can a new employer ask for my online banking login to set up payroll direct deposit?","shortAnswer":"No. Payroll direct deposit requires only your bank account number and routing number — never your online banking username or password.","explanation":"Setting up direct deposit is a routine HR task that requires two pieces of information: your bank's routing number (publicly available and specific to the bank) and your personal account number. Both are printed on your checks and visible in your online banking app. That is all a payroll department needs to send money to your account.\n\nNo employer, payroll provider, or HR platform ever needs access to your online banking portal. Your login credentials are used to authenticate you to the bank and could be used to transfer money out of your account, access financial statements, or set up new transactions — none of which are payroll functions.\n\nIf an interviewer or HR contact requests your banking login for any purpose, this is either a fraud attempt or an extremely poorly designed process that you should refuse and report. Legitimate employment onboarding uses a direct deposit authorization form that you fill out with your account and routing numbers, often countersigned with a voided check.\n\nBe alert to job scams that use payroll setup as the entry point for account takeover or money mule recruitment.","redFlags":["Asked for your online banking username and password","Told it is needed to 'verify' your account or set up payroll","Request comes via text, messaging app, or informal email","Job offer arrived unsolicited and pay is unusually generous","Employer rushes the payroll setup before your first day","Asks you to 'test' the payroll system by receiving and forwarding money"],"whatToDoNow":["Refuse the request and never share banking login credentials","Provide only your account number and routing number on an official payroll form","Verify the employer independently before sharing any bank information","If the job offer seems suspicious, research the company through official registries","Report suspicious job offers to the platform where you found them","Report to your national employment or fraud authority if you believe it is a scam"],"faq":[{"question":"What information is safe to give an employer for payroll?","answer":"Your bank account number, routing number, and account type (checking or savings) on a signed direct deposit authorization form is all that is needed. Some employers accept a voided check instead."},{"question":"What is a money mule and how does payroll relate to it?","answer":"Money mule scams recruit people to receive funds into their account and forward them elsewhere. Fraudsters sometimes pose as employers and use fake payroll setup as the pretext for gaining account access or sending you money to forward."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-government-grant-agency-charge-a-fee-to-claim-a-grant","url":"https://scamencyclopedia.org/questions/can-a-government-grant-agency-charge-a-fee-to-claim-a-grant","question":"Can a government grant agency charge me a fee to claim a government grant?","shortAnswer":"No. Legitimate government grants are applied for through official portals at no upfront cost to you. Any fee to claim or activate a grant is a scam.","explanation":"Government grant programmes are funded by public money specifically to support businesses, researchers, or individuals — not to generate revenue through application fees. Eligibility criteria, application processes, and deadlines are published on official government websites. Successful applicants receive funds without paying any portion upfront.\n\nGrant fraud typically works by impersonating a government agency, claiming the victim has been pre-selected for a grant, and then charging a processing, insurance, or tax fee to release the funds. The 'grant' is fictional, and the fees — paid by wire transfer or gift card — go directly to the scammer.\n\nSome variations use legitimate-sounding grant names or mimic real programmes that actually exist. The test is simple: if money is requested from you before you receive the grant, it is a scam. Real grants involve an application review, approval notification, and fund disbursement — all without you paying a processing fee.\n\nIf you are interested in genuine grant opportunities, research them exclusively through official government portals and consult your local small business development centre or equivalent authority.","redFlags":["Told you have been pre-selected or already approved for a grant","Required to pay a fee before funds can be released","Contact arrived unsolicited by phone, text, or social media","Grant name cannot be verified on the official government website","Fee must be paid by wire transfer, gift card, or cryptocurrency","Agent pressures you to act quickly before the grant expires"],"whatToDoNow":["Do not pay any fee","Search for the grant name on the official government website independently","Report the contact to the government agency being impersonated","Report to your national consumer protection or fraud authority","If you paid fees, contact your bank or card issuer about a chargeback","Warn small business networks or community groups about the scam"],"faq":[{"question":"Are there any legitimate grant application fees?","answer":"Some private foundations charge small processing fees, and these are disclosed upfront on official application portals. Government grants do not charge fees. When in doubt, contact the agency directly to verify the programme exists."},{"question":"I applied for a real grant and received a request for a fee — is this normal?","answer":"No. If you applied through an official portal and are now being asked for a fee by someone contacting you directly, your application information may have been exposed or the contact is fraudulent. Contact the granting agency directly to verify."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-landlord-ask-me-to-pay-rent-by-wire-transfer-only","url":"https://scamencyclopedia.org/questions/can-a-landlord-ask-me-to-pay-rent-by-wire-transfer-only","question":"Can a landlord insist I pay rent exclusively by wire transfer or cryptocurrency?","shortAnswer":"Legitimate landlords rarely insist on wire transfer or cryptocurrency as the only accepted method. This restriction — especially before you have met in person — is a red flag for rental fraud.","explanation":"Most genuine landlords and letting agents accept a range of traceable payment methods: standing orders, bank transfers, online rent portals, or sometimes cheques. None of these are secret or difficult to trace. A landlord who refuses all options except wire transfer, prepaid debit cards, or cryptocurrency is either running a scam or engaging in practices that should make you very cautious.\n\nIn established rental relationships, bank transfers are perfectly normal and legitimate. The red flag is the combination of an insistence on untraceable methods plus an unusual setup — such as a landlord you have never met in person, a property you have only seen in photos, and a lease signed remotely without identity verification.\n\nCryptocurrency and wire transfers to personal accounts are preferred by fraudsters because they are fast, final, and nearly impossible to reverse or trace. Once the money is sent, recovering it is extremely difficult even with law enforcement involvement.\n\nIf you are entering a new rental arrangement, insist on meeting the landlord in person, verifying their identity and ownership of the property, and using a payment method that creates a clear paper trail. Use official banking portals rather than third-party money transfer apps where possible.","redFlags":["Insists on wire transfer, cryptocurrency, or prepaid cards as the only payment option","Landlord refuses to meet in person or verify identity","Property was never viewed in person before signing","Rental price is significantly below market rate","Landlord based overseas and communicating only via messaging apps","Lease agreement lacks professional formatting or contains inconsistencies"],"whatToDoNow":["Insist on an in-person meeting and property viewing before any payment","Verify the landlord's identity and ownership through land registry records","Use a tracked bank transfer through official banking portals and keep records","Never transfer rent before receiving keys and confirming the tenancy is legitimate","Report suspicious listings to the rental platform","Consult a tenants' rights organisation if you have concerns about an existing arrangement"],"faq":[{"question":"Is it ever acceptable for a landlord to accept cryptocurrency?","answer":"Some landlords do accept cryptocurrency legally. The concern is when it is the only option and combined with other red flags such as no in-person contact and a below-market price. Cryptocurrency has no consumer protection equivalent to a chargeback."},{"question":"My landlord now only accepts Venmo or Zelle — is that normal?","answer":"Peer-to-peer payment apps are increasingly used for rent but offer limited fraud protection. Ensure you have a signed lease, a receipt for each payment, and that the recipient's account details match the landlord's verified identity before using them."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-pension-provider-ask-me-to-move-pension-to-a-new-scheme-urgently","url":"https://scamencyclopedia.org/questions/can-a-pension-provider-ask-me-to-move-pension-to-a-new-scheme-urgently","question":"Can a pension provider contact me and ask me to urgently transfer my pension to a new scheme?","shortAnswer":"Legitimate pension providers do not cold-call you urging immediate transfers. Unsolicited contact pressuring you to move your pension quickly is a pension liberation or pension scam.","explanation":"Pension transfers are significant financial decisions that authorised pension advisers treat with extensive due diligence. Legitimate providers and Independent Financial Advisers (IFAs) will explain the transfer process, provide a Key Facts document, and allow you time to consider your options. They are regulated and will have verifiable authorisation with the relevant financial regulator.\n\nPension scams often promise higher returns, early access to pension funds, or a special one-time opportunity that expires soon. They may describe the scheme as a legitimate SIPP (Self-Invested Personal Pension) or overseas investment vehicle. Once you transfer, your pension enters an unregulated scheme, often invested in high-risk or non-existent assets, and you may lose everything.\n\nPension transfers almost always come with tax implications. Accessing your pension before the minimum age typically triggers a large tax charge. Scammers downplay or ignore this, presenting the transfer as tax-free when it is not.\n\nBefore making any pension transfer, verify the provider and adviser with your national financial regulator, take independent advice, and be extremely cautious of any scheme that was unsolicited or promises unusually high returns.","redFlags":["Unsolicited call or email about transferring your pension","Promises of higher returns than typical market rates","Claims you can access your pension before the minimum retirement age tax-free","Pressure to decide quickly or the opportunity will expire","Adviser cannot be verified on the official financial regulator's register","Transfer is to an overseas or unfamiliar scheme with no recognised oversight"],"whatToDoNow":["Do not transfer your pension based on an unsolicited contact","Verify any adviser on your national financial regulator's register","Contact your existing pension provider to discuss the transfer proposal","Take independent financial advice from a regulated IFA","Report the contact to your financial regulator and fraud authority","Check the regulator's warning list for known scam pension schemes"],"faq":[{"question":"Can I access my pension early through a legitimate scheme?","answer":"In most countries the minimum pension access age is set by legislation (e.g., 55-57 in the UK). Early access schemes typically incur large tax charges. Any promise of penalty-free early access should be treated with extreme scepticism."},{"question":"How do I check if a pension adviser is regulated?","answer":"In the UK, check the FCA Register at register.fca.org.uk. In the US, check FINRA's BrokerCheck. Always verify using the register itself, not a link provided by the adviser."}],"lastReviewed":"2026-06-10"},{"slug":"can-an-online-marketplace-seller-ask-me-to-pay-outside-the-platform","url":"https://scamencyclopedia.org/questions/can-an-online-marketplace-seller-ask-me-to-pay-outside-the-platform","question":"Can a seller on an online marketplace ask me to pay outside the platform?","shortAnswer":"No legitimate seller on a reputable marketplace needs you to pay outside its protected checkout. Off-platform payment requests are a hallmark of marketplace fraud.","explanation":"Established online marketplaces provide buyer protection, escrow services, or dispute resolution systems that cover transactions made through their official checkout. These protections do not apply to payments made outside the platform — by bank transfer, PayPal Friends and Family, Venmo, gift card, or any other channel the marketplace did not facilitate.\n\nScammers who post fake listings need you off the platform because their listing would be flagged or removed if an official transaction is attempted. Common pretexts include a broken payment system, saving on platform fees, preferring a faster method, or claiming the official system does not work for international buyers.\n\nOnce you pay outside the platform, you have no recourse through the marketplace's buyer protection. If the item does not arrive or is not as described, the platform cannot refund you. Bank transfers and peer-to-peer payments are also very difficult to reverse.\n\nAlways complete transactions through the marketplace's official checkout and never share personal contact details with a seller before a transaction is established through the platform.","redFlags":["Seller asks you to pay via bank transfer, gift card, or peer-to-peer app","Claims the marketplace payment system is temporarily broken","Offers a discount for paying outside the platform","Asks you to communicate via personal email or messaging app before any transaction","Listing price is significantly below comparable items","Seller has few reviews or a newly created account"],"whatToDoNow":["Decline any off-platform payment request","Complete all transactions through the marketplace's official checkout","Report the seller and listing to the marketplace","If you already paid outside the platform and did not receive the item, report to the platform and your payment provider","Report the fraud to your national consumer protection authority","Leave a review warning other buyers if the platform allows it"],"faq":[{"question":"What about paying a seller on Facebook Marketplace by bank transfer?","answer":"Facebook Marketplace has buyer protection for purchases made through Facebook Checkout. Payments by private bank transfer are not covered. For high-value items, meet in person and pay cash, or use the platform's protected checkout."},{"question":"Is PayPal Goods and Services safer than PayPal Friends and Family?","answer":"Yes. PayPal Goods and Services covers eligible purchases through PayPal's Purchase Protection. Friends and Family is intended for personal payments and has no buyer protection — which is why scammers request it."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-charity-legitimately-demand-an-upfront-donation-fee","url":"https://scamencyclopedia.org/questions/can-a-charity-legitimately-demand-an-upfront-donation-fee","question":"Can a charity legitimately ask me to pay a processing fee before my donation goes through?","shortAnswer":"No. Legitimate charities never require donors to pay a fee before a donation is processed. Processing fees on a real donation platform are deducted from the donation itself.","explanation":"When you donate to a legitimate charity through their official website or a verified fundraising platform, any card processing fees are either absorbed by the charity or deducted transparently from the donation amount. You are never asked to pay an additional fee upfront before your donation reaches the charity.\n\nCharity donation scams ask for a fee to 'process', 'verify', or 'match' your donation. They may claim the fee unlocks a corporate matching gift or government match that will multiply your contribution. Once the fee is paid, no matching donation materialises and your original contribution may also be lost.\n\nDisaster relief periods see a spike in charity impersonation. Scammers create convincing fake charity names, websites, and social media profiles that mimic real organisations responding to recent events. Emotional urgency around a natural disaster or humanitarian crisis reduces the time people take to verify where their money is going.\n\nDonate exclusively through the charity's official website (type the address directly), established platforms like JustGiving or GoFundMe with verified charity accounts, or by cheque to the charity's registered address.","redFlags":["Asked to pay a fee before your donation can be processed or matched","Charity cannot be found on the official charity regulator's database","Donation request arrived unsolicited by phone, text, or social media","Payment requested by gift card, wire transfer, or cryptocurrency","Website was created recently and uses vague language about its mission","No registered charity number or equivalent is provided"],"whatToDoNow":["Do not pay any processing fee","Verify the charity on the official regulator's database before donating","Donate through the charity's official website by typing the address directly","Report fraudulent charity solicitations to your national charity regulator","Report to your consumer protection or fraud authority","If you already paid, contact your bank or card provider about recovery options"],"faq":[{"question":"How do I check if a charity is legitimate?","answer":"In the UK, search the Charity Commission register at register-of-charities.charitycommission.gov.uk. In the US, check GuideStar or Charity Navigator, or look up the EIN at the IRS Tax Exempt Organization Search."},{"question":"Are GoFundMe campaigns automatically trustworthy?","answer":"GoFundMe campaigns are created by individuals and are not independently verified. Donate to campaigns run by people or organisations you can independently verify. GoFundMe does have a refund policy for certain cases of fraud."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-bank-fraud-team-ask-me-to-test-my-account-by-withdrawing-cash","url":"https://scamencyclopedia.org/questions/can-a-bank-fraud-team-ask-me-to-test-my-account-by-withdrawing-cash","question":"Can a bank fraud team ask me to test my account by withdrawing cash and handing it to an agent?","shortAnswer":"No. This is a common courier fraud script. Bank fraud teams do not send agents to collect cash from customers as part of any test or investigation.","explanation":"Legitimate bank fraud investigations are conducted entirely through the bank's internal systems. When there is a genuine concern about fraudulent activity on your account, the bank freezes transactions, contacts you through secure messaging within the banking app, and asks you to visit a branch or call the official helpline. No test involves physically withdrawing cash and handing it to a stranger.\n\nCourier fraud variants tell you that your bank's systems are compromised and that cash is the only safe option. They may instruct you to go to a branch and withdraw a large sum, tell you to give a convincing reason to the cashier if asked, and then hand the cash to a 'secure agent' who will arrive at your door or meet you outside the bank.\n\nBranch cashiers are trained to spot this scenario. If a cashier asks why you are making a large withdrawal, it is entirely appropriate to tell them the truth — the caller specifically telling you to lie to branch staff is one of the clearest signs of a scam.\n\nNever withdraw cash, transfer funds, or hand over valuables on the instruction of an unsolicited caller regardless of what authority they claim to represent.","redFlags":["Told to withdraw cash to test whether the bank's systems are compromised","Instructed to give the cashier a false reason for the withdrawal","An agent will collect the cash from you at home or near the bank","Caller tells you not to mention the investigation to branch staff","Urgency created by claiming your account is being drained now","Caller already knows your account balance or recent transactions"],"whatToDoNow":["Refuse the request and hang up","Tell the branch cashier the full story if you are already at the bank","Call your bank on the number on the back of your card to report the call","Do not open the door to any courier claiming to collect on the bank's behalf","Report the incident to your national fraud reporting service","Alert elderly family members or neighbours who may be targeted"],"faq":[{"question":"Why would a scammer want me to lie to the bank cashier?","answer":"Bank cashiers are trained to intervene when they suspect courier fraud. The scammer instructs you to lie specifically to prevent the intervention that could save your money. The instruction to deceive branch staff is itself one of the clearest warning signs."},{"question":"The caller knew which bank I use — how?","answer":"Your bank name may be visible from discarded statements, known from prior contact, or obtained from a data breach. Knowledge of which bank you use does not make the caller legitimate."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-debt-collector-threaten-immediate-arrest-for-unpaid-debt","url":"https://scamencyclopedia.org/questions/can-a-debt-collector-threaten-immediate-arrest-for-unpaid-debt","question":"Can a debt collector threaten me with immediate arrest if I do not pay right now?","shortAnswer":"No. Debt collectors cannot have you arrested for unpaid civil debts. Threats of immediate arrest to pressure payment are illegal in most jurisdictions and a common debt collection scam tactic.","explanation":"In most countries, unpaid consumer debts — credit cards, medical bills, personal loans — are civil matters, not criminal ones. Creditors pursue collection through civil courts, which can result in judgments, wage garnishment, or asset liens, but these processes take time and require legal proceedings with due notice to you.\n\nIllegal debt collection tactics, including threats of arrest, imprisonment, or deportation for unpaid civil debts, are prohibited under consumer protection laws such as the Fair Debt Collection Practices Act in the United States. Legitimate debt collectors are required to identify themselves, provide written verification of the debt, and inform you of your rights to dispute.\n\nScam debt collectors use fake agency names, invent debts you do not owe, and use threats of immediate arrest to panic you into paying quickly by wire transfer or gift card before you can verify the claim. They often target people who do have some real debt, making the call seem plausible.\n\nIf you receive such a call, ask for the collector's name, company, address, and a written verification of the debt. A legitimate collector will provide this; a scammer will become more aggressive or hang up.","redFlags":["Threatens immediate arrest for an unpaid civil debt","Refuses to provide written verification of the debt","Demands same-day payment by gift card, wire transfer, or cryptocurrency","Cannot provide a verifiable company name and registration","Claims to be a law firm or government agency","Threatens to contact your employer or family immediately"],"whatToDoNow":["Do not pay anything until the debt is verified in writing","Request the collector's name, company, and mailing address","Pull your credit report to check whether the debt appears as a genuine account","Consult a consumer rights organisation or lawyer about your options","Report illegal collection tactics to your national consumer protection agency","If the debt is real, contact the original creditor directly to negotiate"],"faq":[{"question":"Can I actually be arrested for a credit card debt?","answer":"In almost all countries, you cannot be arrested simply for owing a credit card or consumer debt. You could face civil court consequences if a judgment is obtained against you and you then defy a court order, but that is a lengthy process — not an immediate arrest."},{"question":"What is debt validation and how do I request it?","answer":"Under the FDCPA (US) and similar laws elsewhere, you have the right to request written validation of any debt within 30 days of first contact. The collector must pause collection activity until they provide verification."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-prize-notification-charge-a-fee-to-claim-winnings","url":"https://scamencyclopedia.org/questions/can-a-prize-notification-charge-a-fee-to-claim-winnings","question":"Can a prize notification legitimately ask me to pay a fee to claim my winnings?","shortAnswer":"No. Legitimate lottery and prize winnings are paid in full with no upfront fee. Any notification that requires payment before you receive your prize is a scam.","explanation":"When you enter and win a legitimate prize draw, lottery, or competition, the prize is delivered or transferred to you in full at no cost. Administration costs, taxes, and handling fees are absorbed by the organiser or handled through the tax system — they are never charged upfront to the winner as a precondition of receiving the prize.\n\nAdvance-fee prize scams work by convincing you that you have won a large sum, then introducing escalating reasons why fees must be paid: processing fees, insurance bonds, customs clearance for physical prizes, tax withholding deposits, or legal fees. Each payment is followed by a new obstacle requiring another payment.\n\nA key diagnostic: if you did not enter a competition, you cannot have won it. Prize notifications for lotteries you never entered are universally fraudulent. Even if you did enter something, verify the win by contacting the organiser through independently verified contact details — not the contact information in the prize notification.\n\nTaxes on prize winnings, where they apply, are handled through your annual tax return or withheld by the organiser on your behalf. You do not pay them upfront to a prize administrator in order to receive your money.","redFlags":["Notified of a win for a competition you do not recall entering","Asked to pay a fee to release, process, or insure your prize","Prize value is very large and the fee is described as a small proportion","Contact arrived unsolicited by email, text, or social media","Payment required by wire transfer, gift card, or cryptocurrency","Organiser uses a free email address rather than an official domain"],"whatToDoNow":["Do not pay any fee to claim a prize","Verify the competition through the organiser's official website independently","If you cannot find the competition or organiser, the notification is fraudulent","Report the scam to your national fraud authority","Report to the platform or email provider where the contact was received","Warn friends and family, especially older relatives who are commonly targeted"],"faq":[{"question":"What about tax on lottery winnings — do I ever pay that upfront?","answer":"In the US, large lottery winnings have federal and state tax withheld by the lottery operator before payout. Winners do not send separate tax payments to a prize administrator. In many other countries, lottery winnings are tax-free."},{"question":"I was told the prize was held up by customs — is that possible?","answer":"Physical prizes can technically be held at customs, but legitimate competition organisers handle this directly. You would never be asked to pay customs fees to an individual by gift card or wire transfer."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-bank-ask-me-to-convert-savings-to-cryptocurrency-to-protect-them","url":"https://scamencyclopedia.org/questions/can-a-bank-ask-me-to-convert-savings-to-cryptocurrency-to-protect-them","question":"Can my bank ask me to convert my savings to cryptocurrency to protect them from fraud?","shortAnswer":"No. Banks will never instruct you to convert money to cryptocurrency. This instruction is a fraud tactic used to move your funds into an untraceable form.","explanation":"Banks hold your deposits in regulated, insured accounts specifically because these are the safest way to hold money. Cryptocurrency is not covered by bank deposit guarantee schemes and is highly volatile. No legitimate bank would ever direct a customer to move savings into cryptocurrency for any reason, let alone for 'protection.'\n\nThis instruction combines two well-established fraud tactics: the 'safe account' script and investment fraud. Fraudsters tell victims their bank account is compromised and that the only way to protect their money is to withdraw it and convert it to cryptocurrency at a Bitcoin ATM or exchange. Once converted, the victim is told to send the cryptocurrency to a 'secure wallet' controlled by the scammer — at which point the funds are irretrievably gone.\n\nBitcoin ATMs are a common endpoint for this fraud because they allow large sums to be transferred quickly and pseudonymously. Some jurisdictions have introduced warnings at Bitcoin ATMs precisely because of these scams.\n\nNo bank, government body, law enforcement agency, or legitimate financial adviser will ever tell you to convert your savings to cryptocurrency as a safety measure. If you receive this instruction, treat it as a definitive fraud signal.","redFlags":["Told to convert savings to cryptocurrency to protect them from fraud","Instructed to use a Bitcoin ATM or specific exchange","After converting, told to send the crypto to a provided wallet address","Call arrived unsolicited claiming to be from your bank or a government agency","Caller knows some of your account details and uses them to seem credible","Urgency created by claiming your account is under active attack"],"whatToDoNow":["Refuse the instruction and hang up","Call your bank on the number on the back of your card to verify the situation","If you already converted and sent cryptocurrency, report to your bank immediately","Report to your national fraud authority — recovery is very difficult but report for others","Contact a Bitcoin ATM operator if the conversion was recent, as some can freeze transactions","Alert your bank and local police as quickly as possible"],"faq":[{"question":"Can cryptocurrency be recovered once sent?","answer":"Cryptocurrency transactions on public blockchains are irreversible once confirmed. Reporting quickly to law enforcement and the exchange used may result in an account freeze if the scammer has not yet moved the funds, but recovery is rare."},{"question":"What if the caller said the bank itself recommended the Bitcoin ATM?","answer":"No bank endorses or recommends Bitcoin ATMs for protecting savings. This is a fabricated detail designed to make the instruction seem legitimate. Your bank will confirm this if you call them on the official number."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-job-recruiter-ask-for-national-id-and-passport-before-an-interview","url":"https://scamencyclopedia.org/questions/can-a-job-recruiter-ask-for-national-id-and-passport-before-an-interview","question":"Can a job recruiter legitimately ask for my passport and national ID before an interview?","shortAnswer":"Legitimate employers verify identity documents after a job offer is accepted, not before an initial interview. Requests for identity documents at the application stage are a red flag.","explanation":"Genuine employers verify your right to work by checking original identity documents after you have accepted a formal job offer, typically on your first day or during onboarding. This is a legal requirement in many countries but is always conducted in person, not by asking you to send scanned copies of your passport and national ID to someone you have never met before an interview.\n\nIdentity document fraud uses job postings as a pretext to collect passport scans, national ID numbers, and sometimes selfies holding the document. This information is sufficient to open bank accounts, apply for credit, or sell identity packages on fraud markets. The 'employer' may conduct a convincing fake interview to build trust before the document request is made.\n\nBe particularly alert to job offers that arrived unsolicited, that pay unusually well for minimal qualifications, and that request documents before any verifiable formal offer is made. Legitimate recruitment agencies are registered businesses with verifiable addresses and staff.\n\nIf you are concerned about your right-to-work verification process, consult your country's official employment guidance or a labour rights organisation.","redFlags":["Asked to provide passport or national ID scans before a formal job offer","Document request comes before any in-person or video-verified interview","Job arrived unsolicited via email, social media, or messaging app","Recruiter cannot be verified through the agency's official website","Pay is unusually high for the described role and qualifications","Request comes with a tight deadline creating pressure"],"whatToDoNow":["Refuse to send document scans to unverified recruiters","Research the recruitment agency through official business registries","Request a video interview and verify the interviewer's professional identity","Only provide identity documents in person after a verified job offer","Report suspicious job postings to the platform and employment authority","If you already sent documents, place a fraud alert on your credit and notify your bank"],"faq":[{"question":"Is it ever acceptable to provide documents before starting work?","answer":"Some background check processes begin after a conditional offer is made, handled through accredited third-party screening companies with clear data protection policies. This is different from sending raw scans to an individual recruiter before any offer is formalised."},{"question":"I sent my passport scan — what should I do now?","answer":"Report to your national identity fraud authority. Place a fraud alert or credit freeze. Monitor your accounts for new credit applications or unusual activity. In some countries, you can request a note on your passport record."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-water-company-ask-for-bank-details-on-an-unsolicited-call","url":"https://scamencyclopedia.org/questions/can-a-water-company-ask-for-bank-details-on-an-unsolicited-call","question":"Can a water company call me out of the blue and ask for my bank details to update direct debit?","shortAnswer":"No. Legitimate utility companies do not cold-call customers asking for full bank details. If you need to update payment details, call the number on your bill or log into your account online.","explanation":"Utility companies do sometimes call customers to discuss accounts, but calls specifically requesting your bank account number, sort code, or full card details are not initiated by genuine providers. If your direct debit needs updating, the provider sends written correspondence or a secure message through your online account, and you make changes through the official portal.\n\nScammers targeting utility customers often have partial information — they may know your name, address, and which provider you use — which makes the call feel legitimate. They ask for 'verification' of bank details, which they then use to set up fraudulent direct debits or sell the information.\n\nA genuine utility representative calling you can be challenged: tell them you will call back on the official number. A legitimate representative will welcome this. A scammer will try to dissuade you or create urgency to prevent you from taking that step.\n\nIf you receive such a call and are uncertain, end the call politely, wait a few minutes, and dial the customer service number on your bill or official website to check whether your account actually needs attention.","redFlags":["Unsolicited call asking for bank account or card details","Caller creates urgency by saying your direct debit has failed","Caller discourages you from calling back on the official number","Asks for more than the last four digits of your account to 'verify' you","Call comes from an unknown or withheld number","Cannot confirm specific account details that match your billing records"],"whatToDoNow":["End the call and do not provide any bank or card details","Call your utility provider using the number on your bill","Check your account portal to see whether any payment issue actually exists","Report the suspicious call to your utility provider's fraud team","Report to your national consumer protection or fraud authority","Consider registering with the Telephone Preference Service to reduce unsolicited calls"],"faq":[{"question":"How do I safely update my direct debit with a utility company?","answer":"Log in to your account on the utility's official website and update payment details there, or call the number on your bill and initiate the change yourself. Never provide details in response to an inbound call."},{"question":"What if the caller already knows my account number?","answer":"Account numbers can be obtained from discarded statements or data breaches. Knowledge of your account number does not verify the caller is from your utility. Call back on the official number to check."}],"lastReviewed":"2026-06-10"},{"slug":"can-the-medicare-office-demand-a-new-card-fee","url":"https://scamencyclopedia.org/questions/can-the-medicare-office-demand-a-new-card-fee","question":"Can the Medicare office call and charge me a fee to issue a new Medicare card?","shortAnswer":"No. Medicare cards are issued free of charge. Any call asking you to pay for a new card is impersonating Medicare.","explanation":"Medicare cards in the United States are issued and replaced free of charge by the Social Security Administration. You can request a replacement card online at ssa.gov, by calling the official Medicare helpline, or at a Social Security office — at no cost in any case. The same principle applies to equivalent health insurance identity documents in other countries.\n\nScammers posing as Medicare or equivalent agencies call seniors and claim the government is issuing new cards and that a processing or shipping fee is required. They may also use the call to collect Medicare numbers, Social Security numbers, or bank details under the guise of 'verifying your account to send the new card.'\n\nYour Medicare number is as sensitive as your bank account number. It can be used to submit fraudulent medical claims in your name, which is Medicare fraud. Never give your Medicare number to an unsolicited caller.\n\nIf you believe you need a replacement card, go to the official website directly or call the Medicare helpline number published on the official government site.","redFlags":["Call claims a new Medicare card is being issued and a fee is required","Asks you to verify your Medicare number, Social Security number, or bank details","Creates urgency by claiming your current card will be deactivated","Demands payment by gift card or wire transfer","You did not initiate any contact with Medicare","Caller ID shows a government-style number but the call was unsolicited"],"whatToDoNow":["Hang up and do not provide any personal information or payment","Request a replacement card at ssa.gov or the official Medicare helpline","Report the call to the HHS Office of Inspector General at 1-800-HHS-TIPS","Report to the FTC at reportfraud.ftc.gov","Monitor your Medicare Summary Notice for any claims you did not authorise","Alert elderly family members to this specific scam script"],"faq":[{"question":"How do I get a genuine Medicare replacement card?","answer":"Visit ssa.gov/medicare or call 1-800-MEDICARE (1-800-633-4227). Replacement is free and takes about 30 days by mail. You can also create a My Social Security account to manage your benefits online."},{"question":"I gave out my Medicare number — what should I do?","answer":"Report to the Senior Medicare Patrol in your state and the HHS Inspector General hotline. Review your Medicare Summary Notices for unfamiliar claims. You may be able to request a new Medicare Beneficiary Identifier."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-phone-company-ask-for-an-activation-fee-to-keep-your-number","url":"https://scamencyclopedia.org/questions/can-a-phone-company-ask-for-an-activation-fee-to-keep-your-number","question":"Can my phone company call and ask for an activation fee to keep my number active?","shortAnswer":"No. Mobile and phone carriers do not charge spontaneous activation fees to keep existing numbers active. This is a billing scam or impersonation tactic.","explanation":"Active mobile numbers are maintained automatically as long as your account is in good standing. Carriers do not introduce new fees mid-contract by calling you and demanding immediate payment to prevent deactivation. If there is a genuine billing issue, you receive a notification through your account, by email, or by text, and you have time to resolve it through official channels.\n\nThis scam works by creating fear of losing your phone number — which for many people is a significant inconvenience affecting their contacts, two-factor authentication accounts, and professional identity. The urgency makes victims pay quickly without verifying.\n\nScammers may also use this pretext to phish for your account credentials or personal identification details, which they then use for SIM swapping — transferring your number to a device they control to intercept OTPs sent to your number.\n\nIf you receive such a call, hang up and check your account status through the carrier's official app or website. Any genuine billing issue will be reflected there, and you can address it safely through official channels.","redFlags":["Unsolicited call claiming your number will be deactivated unless you pay a fee","Demands immediate payment by card, gift card, or wire transfer","Creates urgency by claiming deactivation will occur within hours","Asks for your account PIN or online login credentials","Fee amount seems arbitrary and cannot be found on your account statement","Caller refuses to let you call back on the official carrier number"],"whatToDoNow":["Hang up and check your account status in the carrier's official app","Call the carrier's official customer service number on their website","If there is a genuine balance issue, pay through the official app or website","Report the scam call to your carrier's fraud department","Report to your national communications regulator","Enable account security features such as a transfer PIN to prevent SIM swapping"],"faq":[{"question":"What is SIM swapping and how does this relate to it?","answer":"SIM swapping involves tricking a carrier into transferring your phone number to a SIM card controlled by a fraudster, who then uses it to receive your OTPs and take over your accounts. Calls seeking your account PIN or credentials may be the first step."},{"question":"How do I protect my phone number from being transferred without my consent?","answer":"Set up a port-freeze or SIM lock with your carrier. Create a unique account PIN that is different from your voicemail PIN. Use an authenticator app rather than SMS for two-factor authentication where possible."}],"lastReviewed":"2026-06-10"},{"slug":"can-an-insurance-company-demand-a-premium-top-up-before-paying-a-claim","url":"https://scamencyclopedia.org/questions/can-an-insurance-company-demand-a-premium-top-up-before-paying-a-claim","question":"Can an insurance company demand I pay an additional premium top-up before they will pay my claim?","shortAnswer":"No. Legitimate insurers do not require additional premium payments as a condition of paying a valid claim. This demand is a sign of fraud or a disreputable company.","explanation":"Insurance contracts are legal agreements. When you make a valid claim, the insurer's obligation to pay is defined by the policy terms and is not contingent on you making additional unsolicited premium payments. If there is a genuine issue with your policy — such as an outstanding premium — the insurer addresses this through formal written communication with defined timeframes and your right to respond.\n\nThis type of demand can arise in two ways: an outright scam where you have purchased a fake policy from a fraudulent company, or aggressive tactics from a real company that may be operating illegally. In either case, you are entitled to reject the demand and escalate to your insurance regulator.\n\nInsurance fraud is particularly common for travel and health coverage sold by unofficial brokers. Policies sold at suspiciously low prices and purchased through unofficial channels may turn out to be worthless when you try to claim — or the 'insurer' may demand additional payment before processing.\n\nAlways purchase insurance through regulated brokers and authorised insurers. Check registration on your national insurance regulator's database. If a claim payment is being withheld, contact the regulator's complaints department.","redFlags":["Insurer demands additional payment before paying a claim you already submitted","Payment demand arrives by informal channels such as a personal call or message","Policy was purchased at an unusually low premium through an unofficial channel","Insurer cannot be found on the national regulator's register","Payment required by wire transfer, gift card, or cryptocurrency","Insurer becomes uncontactable after receiving the additional payment"],"whatToDoNow":["Refuse the demand and do not pay","Review your original policy documents for the claims process","Contact the insurer through the official number on your policy documents","Verify the insurer on your national insurance regulator's register","File a complaint with your national insurance regulator or ombudsman","Seek legal advice if a significant claim is being wrongly withheld"],"faq":[{"question":"Can an insurer deduct an outstanding premium from a claim payment?","answer":"Some policies allow insurers to offset outstanding premiums against a claim payment, but this must be stated in the policy terms and is done through a formal adjustment — not through a demand for an additional payment before any funds are released."},{"question":"How do I check if an insurance company is legitimate?","answer":"In the UK, check the FCA Register. In the US, verify through your state's Department of Insurance. In the EU, check your national financial supervisory authority. Only purchase through verified, regulated brokers."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-university-or-college-ask-for-a-fee-to-confirm-enrolment","url":"https://scamencyclopedia.org/questions/can-a-university-or-college-ask-for-a-fee-to-confirm-enrolment","question":"Can a university contact me and ask for a fee to confirm or secure my enrolment offer?","shortAnswer":"Legitimate universities collect enrolment deposits through verified official portals after an offer is formally issued. Unsolicited calls or emails requesting a fee to secure your place are a student scam tactic.","explanation":"University admissions processes are transparent and conducted through official channels. Where enrolment deposits are required, they are described clearly in the official offer letter, collected through the institution's secure payment portal, and receipted to your student account. You never pay a deposit in response to an unsolicited outreach.\n\nStudent admissions scams impersonate universities, scholarship programmes, or student loan administrators. They target prospective students with offers that appear to be from real institutions, then charge a fee to secure the place, process the scholarship, or expedite the loan application. Once paid, the scammer disappears or invents further fees.\n\nInternational students are disproportionately targeted because they are navigating unfamiliar systems, fees, and processes. Fraudulent offers for popular courses at well-known universities exploit the aspiration to study abroad.\n\nAlways verify admissions correspondence by logging into the official university application portal. Never transfer money in response to an emailed or texted instruction without confirming the payment details match those published on the institution's official website.","redFlags":["Unsolicited offer or confirmation requesting an immediate fee","Payment required by wire transfer, gift card, or cryptocurrency","Offer cannot be verified through the official university application portal","Email domain does not exactly match the university's official domain","Very short deadline to pay or the place will be withdrawn","Offer is for a popular course with no reference to your application history"],"whatToDoNow":["Log in to the official application portal to verify the offer","Contact the university admissions office through the official website contact page","Never make payments through links in emails — use the official payment portal","Report suspicious offers to the institution's admissions fraud team","Report to your national education authority or fraud reporting service","Alert other applicants in online communities about the specific scam"],"faq":[{"question":"Is an enrolment deposit at a university ever legitimate?","answer":"Yes. Many universities require a deposit after accepting an offer, stated clearly in the offer letter and paid through the official student portal. The key is that you initiate payment through the verified portal, not in response to an inbound request."},{"question":"What if the email address looks like the official university domain?","answer":"Scammers use spoofed or very similar domains (e.g., adding a hyphen or changing a single letter). Always navigate directly to the university website and log in to your account to verify any fee request."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-romance-partner-online-ask-for-money-to-come-visit-you","url":"https://scamencyclopedia.org/questions/can-a-romance-partner-online-ask-for-money-to-come-visit-you","question":"Can someone I met online legitimately ask for money to buy a flight to come and visit me?","shortAnswer":"People you genuinely know might ask for help with travel costs, but someone you have only met online who asks for money before you have ever met in person is almost certainly running a romance scam.","explanation":"Romance scams are one of the most emotionally and financially devastating fraud types. The scammer invests weeks or months building an online relationship — daily messages, apparent intimacy, shared plans for the future — before introducing a financial need. The travel request is often the first test: a relatively plausible amount to fund a flight to visit you.\n\nThe pattern that follows involves the travel being cancelled due to an emergency at the last minute, a new financial crisis, or a complication requiring more money. Each crisis is designed to extract further payments while maintaining the emotional bond. Victims may send tens or hundreds of thousands in total before realising the other person does not exist.\n\nOnline-only relationships where the other person has never accepted a live video call with you present, has photos that reverse-image search reveals belong to a different identity, or provides inconsistent personal details warrant extreme caution regardless of how genuine the emotional connection feels.\n\nBefore sending money to anyone you have not met in person, video-call them live, verify their identity independently, and speak to a trusted friend or family member about the relationship.","redFlags":["You have never met in person or on a live unscripted video call","Person is consistently unable to meet despite claiming to want to visit","Requests money before a first in-person meeting","Travel plans are always cancelled due to an emergency","Profile photos appear in a reverse-image search under a different name","Relationship escalated very quickly to expressions of love and future plans"],"whatToDoNow":["Do not send money to someone you have not met in person","Request a live, unscripted video call before any financial discussion","Reverse-image search their profile photos","Discuss the relationship with a trusted friend or family member","Report the profile to the platform where you met","Report to your national fraud authority if money has already been sent"],"faq":[{"question":"What if we have been talking for months — surely that means it is real?","answer":"Romance scammers invest significant time precisely because the financial payoff justifies it. Duration of contact is not a reliable indicator of legitimacy. The diagnostic tests are: have you met in person, and have you video-called live where you could ask them to do something spontaneous?"},{"question":"Can I recover money sent in a romance scam?","answer":"Recovery is difficult but report immediately to your bank and fraud authority. Wire transfers and gift card payments are hardest to recover. Some victims have recovered funds through bank intervention when reported quickly."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-financial-regulator-contact-me-to-recover-scam-losses","url":"https://scamencyclopedia.org/questions/can-a-financial-regulator-contact-me-to-recover-scam-losses","question":"Can a financial regulator contact me and offer to recover money I lost in a scam?","shortAnswer":"Genuine regulators do not proactively contact scam victims to offer personal recovery services. Unsolicited offers to recover your scam losses are almost always a secondary scam called a recovery or refund scam.","explanation":"Recovery scams target people who have already lost money to fraud. The scammer poses as a government financial regulator, law enforcement officer, or specialist recovery firm and claims to have located your funds or to have the legal authority to retrieve them. A fee is required upfront to process the recovery.\n\nThis is a particularly cruel tactic because it exploits the victim's existing distress and renewed hope. The fees are described as legal expenses, government processing charges, or release bonds. After each payment, another obstacle is introduced. The 'regulator' or 'recovery firm' is entirely fictitious, and the original funds are never returned.\n\nLegitimate financial regulators investigate fraud patterns, issue warnings, and work with law enforcement on systemic cases. They do not proactively contact individual victims to offer personalised recovery services, and they never charge fees for this. If you are owed a refund from a regulated institution, that process is initiated through your complaint to the institution and the regulator's formal dispute resolution system.\n\nIf you lost money in a scam and want to explore recovery, contact your bank immediately, file a report with your national fraud authority, and consult a licensed legal professional — not someone who contacts you unsolicited.","redFlags":["Unsolicited contact claiming to be a regulator offering to recover your lost funds","Requires an upfront fee to initiate or complete the recovery","Claims to have already located your money and just needs a small release fee","Organisation cannot be verified on the official regulator's website","Previous scam victim support groups you used were how they found you","Promises a specific recovery amount or timeline"],"whatToDoNow":["Do not pay any upfront fee for recovery services","Verify the organisation on the official regulator's website independently","Report the approach to the regulator being impersonated","Report to your national fraud authority","Explore legitimate recovery options through your bank and official complaint channels","Be cautious of recovery firms even when they are real — only use accredited advisers"],"faq":[{"question":"Are there any legitimate fraud recovery services?","answer":"Some law firms and licensed financial investigators assist with fraud recovery, particularly for large or complex cases. These services are transparent about their fees, have verifiable professional credentials, and never guarantee outcomes. Avoid any that contact you unsolicited."},{"question":"What legitimate options do I have to recover money from a scam?","answer":"Report to your bank immediately — banks sometimes reverse or recall transactions. File with your national fraud authority. If you paid by card, request a chargeback from your card provider. Consult a solicitor or attorney for significant losses."}],"lastReviewed":"2026-06-10"},{"slug":"can-hmrc-accept-payment-by-voucher-or-retail-gift-card","url":"https://scamencyclopedia.org/questions/can-hmrc-accept-payment-by-voucher-or-retail-gift-card","question":"Can HMRC or any tax authority accept payment by retail voucher or gift card?","shortAnswer":"No. No legitimate tax authority anywhere accepts retail vouchers or gift cards as payment. This demand is universally fraudulent.","explanation":"Tax authorities accept payment exclusively through official government payment portals, bank transfers to designated government accounts, cheques payable to the relevant authority, and sometimes in-person cash at authorised payment points. The specific methods vary by country but consistently exclude retail gift cards, iTunes codes, Google Play vouchers, or any retail voucher.\n\nThe mechanics explain why: gift card payments are instantly accessible, untraceable, and irreversible. They are the preferred payment method for criminals across many fraud types precisely because recovery is essentially impossible once codes are shared. Any organisation demanding this payment method is operating outside legitimate financial channels.\n\nThis script is used globally. In the US it is often attributed to IRS impersonators, in the UK to HMRC, in Australia to the ATO. The script adapts to local conditions but the core elements — tax debt, threat of immediate consequences, and gift card payment — remain consistent.\n\nIf you are ever unsure whether a tax demand is genuine, the single most reliable check is to log into your official tax account and look for any corresponding record of the debt. Genuine debts have paper trails.","redFlags":["Caller demands payment of a tax debt by retail gift card","Specific card types requested such as iTunes, Google Play, or Amazon","Told to buy cards at a pharmacy, supermarket, or convenience store","Caller stays on the line while you purchase and read out the codes","Threatens arrest or legal action if you do not comply immediately","Cannot confirm the debt through your official tax account"],"whatToDoNow":["Refuse and hang up — do not purchase any gift cards","If you are already at the store, tell the cashier — many are trained to intervene","Log into your official tax account to verify whether any debt exists","Report the call to the tax authority's fraud hotline","Report to your national consumer protection or fraud authority","If you already sent codes, report to the gift card retailer and your local police"],"faq":[{"question":"Why do scammers specifically want gift cards?","answer":"Gift card codes convert to untraceable value instantly. They can be used online immediately after the code is received, cannot be reversed by a bank, and are difficult for law enforcement to trace internationally."},{"question":"Can the gift card codes be recovered after they have been used?","answer":"Generally no, once the codes are redeemed. Report to the card retailer immediately if the codes have not yet been used — some issuers can freeze the balance. Report to police and fraud authorities regardless of outcome."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-bank-ask-you-to-act-as-a-mystery-shopper-to-test-staff","url":"https://scamencyclopedia.org/questions/can-a-bank-ask-you-to-act-as-a-mystery-shopper-to-test-staff","question":"Can a bank hire me as a mystery shopper to test staff by withdrawing and sending money?","shortAnswer":"No. Banks do not recruit mystery shoppers through unsolicited calls or emails to test branches by handling real money. Mystery shopper banking scams are a form of advance-fee and money mule fraud.","explanation":"Legitimate mystery shopping companies are hired by retailers and service organisations to evaluate customer experiences. They ask shoppers to observe service quality, make small test purchases, or report on cleanliness — not to withdraw and wire large sums of real money to test a bank or money transfer service.\n\nThe mystery shopper banking scam recruits victims by cheque or bank transfer, sending an overpayment and asking the 'shopper' to keep a small fee and wire the remainder. The initial payment turns out to be a fraudulent cheque or stolen bank transfer. By the time it bounces or is reversed, the victim has already sent their own real money to the scammer.\n\nA variant asks the victim to evaluate a money transfer service like Western Union or MoneyGram by sending a real transfer and reporting on the experience. The money is sent to a scammer-controlled account and is lost.\n\nA separate but related variant asks the victim to buy gift cards as part of the 'mystery shopping task' and report the codes. Again, the initial payment is fraudulent and the victim loses the cost of the gift cards.\n\nNo bank hires mystery shoppers through unsolicited communications to handle real customer funds. Any such offer should be refused.","redFlags":["Unsolicited offer to work as a bank or money transfer mystery shopper","Told to withdraw cash, wire money, or buy gift cards as part of the job","Payment arrives before any work is done, often by cheque","Asked to keep a small amount and forward the rest","Task involves sending money internationally","Job found through a generic job board or unsolicited email"],"whatToDoNow":["Decline the offer immediately","Do not cash or deposit any cheque received","Report the job offer to the platform where it was posted","Report to your national fraud authority","If you already deposited a cheque, contact your bank immediately to reverse it","Report to the FTC or equivalent consumer protection authority"],"faq":[{"question":"Are legitimate mystery shopping jobs real?","answer":"Yes. Genuine mystery shopping roles involve reporting on service quality and sometimes making small purchases with a pre-approved budget. They are found through established companies on accredited directories, not through unsolicited emails, and they never involve wiring money."},{"question":"Why is depositing a fraudulent cheque a problem for me?","answer":"Banks make funds available before a cheque fully clears, which can take weeks. When the cheque bounces, the bank reverses the credit and you owe the bank the full amount — even though you already sent the money elsewhere."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-government-benefits-office-ask-for-cash-to-continue-payments","url":"https://scamencyclopedia.org/questions/can-a-government-benefits-office-ask-for-cash-to-continue-payments","question":"Can a benefits office ask me to pay cash to continue receiving my government benefits?","shortAnswer":"No. Government benefit payments are never conditional on recipients paying a cash fee. Any such demand is impersonation fraud.","explanation":"Social welfare systems are designed to support people who qualify for assistance. There is no mechanism in any government benefit programme whereby recipients must pay a fee to continue receiving payments. Benefits may be adjusted based on eligibility reviews, but these reviews are conducted through formal written processes with appeal rights — not through surprise phone calls demanding cash.\n\nThis scam is particularly harmful because it targets people who are already in financially vulnerable situations. Callers posing as benefits agency staff claim that payments are being suspended due to a compliance issue, overpayment, or review, and that a fee will resolve the matter immediately. Victims may pay out of fear of losing essential income.\n\nGovernment benefits agencies communicate through postal letters and secure online accounts. They do not demand same-day cash payments or ask beneficiaries to pay via gift card, wire transfer, or at a specific retail location. If your benefits are genuinely being reviewed, you will receive written notification with a formal process for responding.\n\nIf you receive such a call, contact the benefits agency directly using the number on your official correspondence or the official government website to check your actual account status.","redFlags":["Caller claims your benefits will be suspended unless you pay a fee immediately","Demands cash, gift card, or wire transfer payment","No written notice has been received about any review or suspension","Caller cannot provide a verifiable case reference in your official account","Urgency created by claiming payments will stop within hours","Instructs you not to discuss the matter with family or a benefits adviser"],"whatToDoNow":["Do not pay any fee and hang up","Log into your official benefits account portal to check your status","Call the benefits agency on the number listed in your official correspondence","Report the fraudulent call to the agency's fraud hotline","Report to your national fraud authority","Alert a benefits adviser or citizens advice bureau if you have concerns about your entitlements"],"faq":[{"question":"Can overpayments of benefits be recovered by the agency?","answer":"Yes — genuine overpayment recovery is handled through formal written notices and repayment plans, typically deducted from future payments. You would never be asked to pay a separate fee to prevent payment suspension."},{"question":"What if the caller knows my National Insurance or Social Security number?","answer":"These numbers can be obtained through data breaches or fraudulent online forms. Knowledge of your number does not make the caller legitimate. Always verify through official channels."}],"lastReviewed":"2026-06-10"},{"slug":"can-an-energy-company-offer-a-refund-by-asking-for-card-details","url":"https://scamencyclopedia.org/questions/can-an-energy-company-offer-a-refund-by-asking-for-card-details","question":"Can an energy company call to offer me a refund and ask for my card details to process it?","shortAnswer":"No. Legitimate energy companies credit refunds to your account or send a cheque. Calls asking for card details to process a refund are phishing attempts.","explanation":"When an energy account is in credit — from an overpayment, a direct debit adjustment, or a billing correction — the provider credits the balance to your next bill or, if you request a cash refund, sends it to the bank account already associated with your direct debit, or by cheque. They never need your card details to send you money.\n\nThis scam works because refund calls feel benign — you are being given money, not asked to send it. But providing card details supposedly 'to receive' a refund gives the fraudster all the information needed to make fraudulent purchases on your card. In some variants, the caller also collects your card's security code and billing address.\n\nSome versions of this scam are more elaborate: the caller sends you a small amount first (described as a test payment) and then asks you to confirm your card details to receive the full refund. The small credit is a legitimate-seeming anchor that builds false trust.\n\nIf you believe you are owed a refund from your energy provider, call the number on your bill and request the refund yourself. Check your online account to see whether a credit balance exists. The provider will process it to your registered payment method without needing any additional card details from you.","redFlags":["Unsolicited call claiming you are owed an energy refund","Asks for your card number, expiry, and CVV to process the refund","Caller cannot confirm the exact refund amount from your account records","Small test payment appears before the main refund is discussed","Creates urgency by claiming the refund will expire","Callback number does not match the official customer service number"],"whatToDoNow":["End the call and do not provide any card details","Log into your energy account to check whether a credit balance exists","Call the provider's official number to request any genuine refund","If you provided card details, contact your bank to block the card","Report the incident to your energy provider's fraud team","Report to your national consumer protection authority"],"faq":[{"question":"How does an energy company actually process a refund?","answer":"Most providers credit the balance to your next bill. If you want cash back, they typically refund to the bank account linked to your direct debit, which they already hold. Some send a cheque. None require you to provide new card details."},{"question":"What if a small amount did appear in my account — is the refund real?","answer":"A fraudster can send a very small transfer as a trust-building tactic. The appearance of a small credit does not mean the larger refund offer is legitimate. Verify through your energy account independently."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-courier-company-ask-for-a-customs-pin-by-text-to-release-parcel","url":"https://scamencyclopedia.org/questions/can-a-courier-company-ask-for-a-customs-pin-by-text-to-release-parcel","question":"Can a courier company send me a customs PIN by text and ask me to share it to release a parcel?","shortAnswer":"No. Customs PINs or release codes sent by a courier and then requested back are a form of OTP phishing — the code is designed to give someone else access to your account or payment, not to release a parcel.","explanation":"Genuine parcel release procedures never involve a code being sent to you and then collected by phone. If a parcel genuinely requires customs clearance, you receive official documentation from the national customs authority, and you make any required payment through official portals. The process is between you and the customs agency — not mediated by a stranger calling you.\n\nThe 'customs PIN' script is a variant of OTP fraud. A fraudster who has your details initiates some kind of account action — creating a fraudulent account, attempting a transaction, or triggering a verification — that causes a genuine code to be sent to your phone. They then call posing as a courier, claim the code was sent to release your parcel, and ask you to read it back.\n\nSharing the code hands the fraudster access to whatever the code was protecting — an account, a payment, or a service registration. It does not release any parcel.\n\nReal courier companies direct you to their official tracking portal to manage any delivery issues. They do not call and ask you to read back codes you have just received.","redFlags":["Unexpected text with a code followed by a call asking you to read it back","Caller claims the code is needed to release a parcel","You are not expecting a parcel","Caller creates urgency claiming the parcel will be returned if you delay","The tracking number provided does not appear on the courier's official website","Caller asks for additional personal or payment information alongside the code"],"whatToDoNow":["Never read back a code to an unsolicited caller","If you did share the code, contact the relevant service provider immediately","Check what account or service the code may have been for","Report the call to the courier company being impersonated","Report to your national cybersecurity authority","Monitor your accounts for any unauthorised activity"],"faq":[{"question":"What is a genuine parcel customs clearance process?","answer":"If a parcel is held at customs, you receive a formal notice from the customs authority citing the parcel's tracking number, the goods, and any duties assessed. Payment is made through the official customs portal or to the courier's verified account — never by reading a code."},{"question":"I read the code back — what might have been compromised?","answer":"The code could have verified a new account registration, reset a password, or authorised a payment in your name. Check for any accounts created with your phone number and any unexpected transactions across your financial accounts."}],"lastReviewed":"2026-06-10"},{"slug":"can-an-employer-ask-me-to-use-my-own-account-to-receive-client-payments","url":"https://scamencyclopedia.org/questions/can-an-employer-ask-me-to-use-my-own-account-to-receive-client-payments","question":"Can a legitimate employer ask me to receive client payments into my personal bank account and forward them?","shortAnswer":"No. This is the defining feature of a money mule arrangement, which is illegal and can result in your bank account being closed and your facing criminal charges.","explanation":"Legitimate businesses receive payments into their own corporate accounts. They do not recruit employees to receive funds on their behalf into personal accounts and then forward them, minus a commission. Any 'employer' proposing this arrangement is using you as a money mule — a person whose account is used to move the proceeds of crime.\n\nMoney mule recruitment often uses convincing job postings for remote financial processing roles, payment handling positions, or 'account manager' titles. The pay is attractive — often a percentage of each transaction — and the work seems simple. But the funds flowing through your account are stolen money from fraud victims, and you are facilitating their laundering.\n\nIn most jurisdictions, you can face criminal prosecution for money laundering even if you claim not to have known the money was stolen. Banks that detect suspicious transaction patterns close the account and may add the holder to industry fraud databases, preventing future account opening.\n\nIf you are ever asked to receive money on behalf of an employer into your personal account and transfer it elsewhere, refuse and report the 'employer' immediately.","redFlags":["Job involves receiving money into your personal bank account","Asked to deduct a commission and forward the remainder","Employer explains this is to avoid high business transfer fees","Transaction amounts are large and irregular","Job was found through an unsolicited email or social media approach","Employer is difficult to verify through official business registries"],"whatToDoNow":["Refuse the role immediately","Report the job offer to the platform where it was found","Report to your national fraud and financial crime authority","If you have already received and forwarded money, contact your bank immediately","Seek legal advice if you have already participated in any transfers","Report to your national police economic crime unit"],"faq":[{"question":"Am I responsible if I did not know the money was stolen?","answer":"Claiming ignorance is a defence in some circumstances, but courts assess whether you should reasonably have known the arrangement was suspicious. The lack of a legitimate business reason for routing funds through personal accounts is a significant factor."},{"question":"What happens to my bank account if I am identified as a money mule?","answer":"Banks close accounts involved in suspected money laundering and may report the account holder to regulators. Industry-wide databases can flag your name, making it difficult to open accounts at other banks."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-visa-processing-agent-guarantee-approval-for-a-fee","url":"https://scamencyclopedia.org/questions/can-a-visa-processing-agent-guarantee-approval-for-a-fee","question":"Can a visa processing agent guarantee my visa will be approved if I pay them a fee?","shortAnswer":"No visa agent or immigration lawyer can guarantee a visa approval — visa decisions rest solely with the government authority. Any guarantee of approval is either false advertising or a scam.","explanation":"Visa applications are assessed by government immigration officials according to their country's laws and the applicant's individual circumstances. The decision is made by the government, not the applicant's representative. Accredited immigration lawyers and registered visa advisers can prepare your application, advise on eligibility, and help you present your documents — but no agent has the power to ensure an outcome.\n\nScam visa agents charge large fees specifically for their supposed ability to 'guarantee' approval. They may claim to have connections inside the immigration authority, a track record of 100% success, or special processing routes unavailable through official channels. None of these claims are legitimate. If approval is not forthcoming, the agent may request additional fees, blame the applicant for incomplete documents, or simply disappear.\n\nAdditionally, using an unregistered agent to submit visa applications can result in your application being rejected, or in cases of fraudulent documentation, a permanent ban from the destination country.\n\nAlways use registered immigration advisers who appear on your country's official register of regulated professionals, and file applications through official government portals where possible.","redFlags":["Agent guarantees visa approval in exchange for a fee","Claims special access or connections inside immigration authorities","Charges significantly more than official government fees","Cannot be verified on the official register of immigration advisers","Requests payment in cash, cryptocurrency, or gift cards","Application is submitted through unofficial channels rather than the government portal"],"whatToDoNow":["Do not pay for a guaranteed approval — it cannot be delivered","Check the agent's registration on the official regulated adviser register","Apply through official government immigration portals where possible","Consult a regulated immigration lawyer or accredited adviser for complex cases","Report unregistered agents to your immigration authority","Report scam agents to your national consumer protection or fraud authority"],"faq":[{"question":"What can a legitimate immigration adviser actually do?","answer":"A registered adviser can review your eligibility, help you compile complete and accurate documentation, advise on the correct visa category, and in some cases represent you in appeals. They cannot influence the decision itself."},{"question":"Is using an unlicensed agent illegal?","answer":"In many countries, charging for immigration advice without being registered is a criminal offence. Using an unlicensed agent also risks having your application prepared incorrectly or fraudulently, which can result in rejection or a ban."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-bank-security-team-ask-you-to-delete-your-banking-app","url":"https://scamencyclopedia.org/questions/can-a-bank-security-team-ask-you-to-delete-your-banking-app","question":"Can a bank security team ask me to delete my banking app as part of a security check?","shortAnswer":"No. A genuine bank security team would never ask you to delete your banking app. This instruction is designed to remove the secure channel you could use to verify the caller's identity.","explanation":"Your bank's mobile app is a secure, authenticated communication channel. It allows you to verify your balance, receive fraud alerts, and contact the bank through verified messaging. Asking you to delete it eliminates your ability to independently check whether there is a genuine security issue and strips away a layer of protection during the conversation.\n\nThe likely motive: the scammer does not want you to see a notification in the app that might reveal their activity — such as an OTP for a transaction they are initiating, or a fraud warning your bank has flagged. Deleting the app removes these safety alerts during the critical window of the call.\n\nGenuine bank security calls may ask you to change your password, enable two-factor authentication, or review recent transactions. They will not tell you to uninstall security software, delete your app, or reduce the number of security layers protecting your account.\n\nIf you receive such an instruction, treat it as a definitive red flag. End the call and contact your bank through its official app or the number on your card.","redFlags":["Told to delete your banking app as a security precaution","Asked to uninstall other security apps or disable two-factor authentication","Instruction given during an unsolicited call about account security","Caller knows recent transactions or balance but call was not initiated by you","Asked to stay on the line while you carry out the instruction","Caller discourages you from using the app to verify the situation"],"whatToDoNow":["Refuse and end the call","Open your banking app independently to check for any genuine alerts","Call your bank on the number on the back of your card","Check whether any transactions were attempted during the call","Report the call to your bank's fraud team","Report to your national fraud authority"],"faq":[{"question":"What should I do if I already deleted the app?","answer":"Reinstall the app from the official app store using your existing credentials, check for any unauthorised transactions, and call your bank to report the incident. Change your passwords from a clean device as a precaution."},{"question":"Why would a scammer want me to delete the app before accessing my account?","answer":"Modern banking apps push real-time fraud alerts and OTP notifications. Deleting the app means you will not see the notification when the scammer triggers a suspicious action on your account, giving them more time before you notice."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-landlord-ask-for-last-months-rent-before-signing-a-lease","url":"https://scamencyclopedia.org/questions/can-a-landlord-ask-for-last-months-rent-before-signing-a-lease","question":"Can a landlord legitimately ask for both a security deposit and last month's rent before I sign a lease?","shortAnswer":"Collecting a security deposit and first and last month's rent before lease signing is a legitimate and common practice in many markets, but only after an in-person viewing and with a formal, signed agreement.","explanation":"In many rental markets — particularly in North America and parts of Europe — landlords routinely collect first month's rent, last month's rent, and a security deposit at lease signing. This is legal and protects the landlord against non-payment at the end of the tenancy. The practice is regulated in most jurisdictions with statutory limits on deposit amounts and rules about how they must be held.\n\nThe important distinctions are the stage at which money is requested and the formality of the transaction. Legitimate landlords collect these funds at lease signing — after you have viewed the property, had the lease reviewed, and both parties have agreed terms. The transaction is documented with a receipt and the deposit is held in a regulated account.\n\nProblems arise when: money is requested before any lease is signed or viewing is offered, the landlord is a person you cannot verify in a face-to-face meeting, the amounts exceed statutory limits, or payment is required by untraceable methods. These are signals that the 'landlord' may not own the property or intend to honour the agreement.\n\nAlways insist on a written lease before any financial commitment, request a receipt, understand your local deposit protection rules, and verify the landlord's identity and ownership.","redFlags":["Asked for deposits before a lease is signed or a viewing arranged","Landlord cannot meet in person to sign the lease","Total amount collected exceeds statutory limits for your jurisdiction","Payment requested by gift card, cryptocurrency, or wire to a personal account","Lease document is informal or lacks key legal clauses","Landlord cannot verify ownership of the property"],"whatToDoNow":["Arrange an in-person viewing and meeting before paying anything","Request and review the lease before any financial commitment","Verify the landlord's ownership through official land registry records","Obtain a receipt for any deposit paid and confirm the deposit protection scheme","Know your local laws regarding maximum deposit amounts and refund rights","Report suspicious listings to the rental platform and consumer protection authority"],"faq":[{"question":"How do I verify a landlord's ownership of a property?","answer":"In the UK, check the Land Registry at gov.uk/search-property-information-land-registry. In the US, check your county assessor or recorder's office. In most countries, property ownership records are publicly accessible."},{"question":"What is a deposit protection scheme?","answer":"Many countries require landlords to hold security deposits in government-backed or insured schemes that protect the tenant's funds. In England, for example, landlords must register deposits with an approved scheme within 30 days of receiving them."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-courier-ask-you-to-sign-a-tablet-with-your-card-details","url":"https://scamencyclopedia.org/questions/can-a-courier-ask-you-to-sign-a-tablet-with-your-card-details","question":"Can a delivery courier ask me to enter or sign my debit card details on a device to confirm delivery?","shortAnswer":"No. Couriers confirm delivery through package signatures, photo evidence, or app confirmations — not by collecting card details. Any delivery requiring card data entry at the door is fraudulent.","explanation":"Standard parcel delivery confirmation requires your signature on a device, a photo of the delivered package, or a unique collection code. None of these steps involve your card details. If payment is required on delivery — for cash-on-delivery orders, customs duties, or similar — this is arranged through the retailer or courier's official system, not collected manually by a driver at the door.\n\nFraudulent door-to-door payment collection attempts exploit the fleeting interaction with a courier. The fake courier presents a device that appears to be a payment terminal but is harvesting card details or processing an unauthorised charge. Real delivery drivers use devices provided and managed by their employer and cannot accept arbitrary payments.\n\nIf a driver at your door claims a payment is due for a parcel and you were not expecting any such charge, ask for written documentation, decline to pay at the door, and contact the retailer and courier through official channels to verify whether any charge is legitimate before paying through the official system.\n\nBe especially cautious if you did not order anything, if the charge amount is not what you expected, or if the payment terminal does not look like an official courier device.","redFlags":["Courier asks you to enter card details into a handheld device at the door","Payment is demanded for a parcel you were not expecting","Amount differs from any expected delivery charge","Device looks informal or has no visible official branding","Courier cannot provide official documentation for the charge","Driver becomes aggressive or pressures immediate payment"],"whatToDoNow":["Decline to enter card details and do not accept the parcel under these conditions","Ask for written documentation of any delivery charge","Contact the retailer or courier through official channels to verify the charge","Report the incident to the courier company's fraud or security team","Report to your local police and consumer protection authority","If you entered card details, contact your bank immediately to block the card"],"faq":[{"question":"What are legitimate reasons for paying at the door on delivery?","answer":"Cash-on-delivery orders are arranged at purchase time and documented in your order confirmation. Customs duties may be collected in some countries, with official paperwork. None of these require you to enter card details into an unverified handheld device."},{"question":"How do I report a suspicious delivery driver?","answer":"Note the vehicle registration, courier company branding, and any identifying details. Report to the courier company using the number on their official website, and to the police if you believe a crime was attempted."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-tax-authority-email-a-link-to-claim-a-tax-refund","url":"https://scamencyclopedia.org/questions/can-a-tax-authority-email-a-link-to-claim-a-tax-refund","question":"Can a tax authority email me a link to click in order to claim a tax refund?","shortAnswer":"No. Tax authorities do not email links to click for refund collection. Refund notification emails containing links are phishing attempts regardless of how official they appear.","explanation":"Tax refunds, where they are owed, are processed automatically by the tax authority and deposited to your registered bank account or sent by cheque. There is no action you need to take via a link in an email to claim a refund. If your bank details need updating, you do this through the secure login on the official government website — not by clicking an emailed link.\n\nTax refund phishing emails are perennial and spike around the end of the tax year when people are expecting refunds. They mimic the visual design of official tax agency communications and create a sense of entitlement — 'you are owed money' is a compelling hook. The link leads to a credential-harvesting page or a form collecting bank details that are then used for fraud.\n\nSigns that an email is not from a real tax authority: the sender's email domain is not the official government domain, the email contains grammatical errors, the link URL is different from the official website address, or the email was unexpected.\n\nIf you believe you are owed a tax refund, log directly into your official tax account at the government website — type the address yourself or use a bookmarked link — and check your account there.","redFlags":["Email claims you are owed a tax refund and asks you to click a link","Sender's email address is not an official government domain","Link URL does not match the official tax authority website","Email asks for bank details, card details, or login credentials","Refund amount specified is unusually precise but you did not file for one","Email contains spelling or grammatical errors"],"whatToDoNow":["Do not click any links in the email","Forward the phishing email to the tax authority's phishing report address","Log into your official tax account directly to check for any genuine refund","Report the phishing email to your national cybersecurity authority","If you clicked and entered details, change your tax account password immediately","Contact your bank if you shared any financial details"],"faq":[{"question":"How does the IRS or HMRC actually notify me of a refund?","answer":"In the US, the IRS sends a check or direct deposit and notifies you via your IRS online account or mailed notice. In the UK, HMRC notifies through your Personal Tax Account or a P800 tax calculation letter. Neither uses email links to collect your bank details."},{"question":"The email has my correct name and partial address — is it still a scam?","answer":"Personalised phishing emails are common. Your name and partial address are obtainable from many sources. The safest rule is: never follow email links to claim money. Always log into the official portal directly."}],"lastReviewed":"2026-06-10"},{"slug":"can-an-immigration-officer-ask-for-a-bribe-to-fast-track-my-application","url":"https://scamencyclopedia.org/questions/can-an-immigration-officer-ask-for-a-bribe-to-fast-track-my-application","question":"Can an immigration officer contact me and ask for a bribe to fast-track my visa or residency application?","shortAnswer":"No legitimate government official solicits bribes. Any contact requesting an unofficial payment to expedite your application is either corruption or, more commonly, an impersonation scam.","explanation":"Government immigration officials operate under strict anti-corruption laws. They do not contact applicants directly to offer expedited processing in exchange for unofficial payment. All communication happens through official case portals or formal correspondence, and processing timelines are determined by application type and workload — not by informal arrangements.\n\nIf someone claiming to be an immigration officer contacts you and suggests that a 'fee,' 'gift,' or 'contribution' will accelerate your case, this is almost certainly a scam. The fraudster may appear to have knowledge of your application details, making the approach feel credible. They exploit the anxiety that comes with waiting for an important visa decision.\n\nActual corruption by government officials does occasionally occur, but it is not conducted through cold calls to applicants. If you encounter or suspect genuine corruption, the appropriate response is to report it to the government's internal affairs or oversight body — not to pay.\n\nNever pay any unofficial fee. Document the approach thoroughly and report it to the immigration authority's fraud hotline and your national anti-corruption body.","redFlags":["Official contacts you and hints that a payment could speed up your case","Requests an unofficial cash payment, gift card, or wire transfer","Offers a specific new processing timeline in exchange for payment","Contact is made through personal phone or email rather than official channels","Instructs you to keep the communication confidential","Cannot be identified through the official immigration office directory"],"whatToDoNow":["Refuse any payment request","Document the contact: date, method, caller details, and what was said","Report to the immigration authority's fraud or integrity hotline","Report to your country's anti-corruption or public integrity body","Consult a registered immigration adviser about your application status","Report to your national fraud authority if money was demanded"],"faq":[{"question":"What can I do if my immigration application is taking longer than expected?","answer":"Contact the immigration authority through official channels to request a status update. Some countries have ombudsman services for delayed applications. A registered immigration adviser can also advise on escalation routes."},{"question":"How do I report suspected corruption by an immigration official?","answer":"Report to the internal affairs or professional standards division of the relevant government department. In the US, report to the DHS Office of Inspector General. In the UK, report to the Home Office's anti-corruption unit."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-health-insurer-ask-for-a-co-pay-by-gift-card-before-an-appointment","url":"https://scamencyclopedia.org/questions/can-a-health-insurer-ask-for-a-co-pay-by-gift-card-before-an-appointment","question":"Can a health insurer or clinic ask me to pay my co-pay or appointment fee by gift card before I arrive?","shortAnswer":"No. Medical co-pays and appointment fees are collected at reception or through verified billing portals — never by gift card before the appointment.","explanation":"Healthcare providers collect co-pays and appointment fees in person at reception, through their official patient portal, or by invoice sent to your billing address. These are formal billing transactions that generate receipts and are recorded against your medical account. Gift card payments are not accepted by any legitimate healthcare provider and have no mechanism for official billing records.\n\nThis scam typically targets patients through fake appointment confirmation messages or calls claiming a co-pay must be paid in advance by gift card to hold the appointment. The victim buys the card and reads the code to the caller. The appointment does not exist or was never booked.\n\nA variant involves calls to existing patients of real medical practices, using the practice name to seem legitimate and claiming a balance is overdue. The fraudster has identified the practice from public records or directories and is cold-calling patients.\n\nAlways verify any billing communication by calling the healthcare provider on the number listed on their official website or your insurance card — never the number in an unexpected message.","redFlags":["Told to pay a co-pay or medical fee by gift card before attending","Contact arrived via text or call rather than through the patient portal","Appointment reference cannot be found in your patient account","Payment deadline is very short","Caller cannot confirm other details of your account such as your GP or previous visits","Amount differs from your known co-pay or excess"],"whatToDoNow":["Do not purchase any gift cards","Log into your patient portal to verify the appointment and any balances","Call the healthcare provider using the number on their official website","Report the contact to the healthcare provider's billing or fraud team","Report to your national health fraud authority","If gift cards were purchased, report immediately to the card retailer"],"faq":[{"question":"Can a medical practice charge a deposit for specialist appointments?","answer":"Some private practices require deposits for specialist or new-patient appointments, collected through their secure patient portal or by card over the phone through an official booking system. Gift cards are never a legitimate option."},{"question":"What if the call comes from the same number as my real clinic?","answer":"Phone numbers can be spoofed. Call back the clinic on a number you source independently — from their website or your insurance card — to verify whether the request is genuine before making any payment."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-landlord-ask-you-to-sign-a-lease-and-pay-before-viewing","url":"https://scamencyclopedia.org/questions/can-a-landlord-ask-you-to-sign-a-lease-and-pay-before-viewing","question":"Can a landlord ask me to sign a lease and pay a deposit without ever seeing the property?","shortAnswer":"Signing a lease and paying before any viewing is a serious red flag for rental fraud. No legitimate rental transaction should require financial commitment before you inspect the property.","explanation":"The sequence of a legitimate rental transaction is: listing published, viewing arranged and conducted, application submitted, references checked, lease offered and reviewed, lease signed by both parties, and only then deposits and first rent collected. Compressing this by asking for signatures and payment before a viewing is abnormal and legally risky for you as a tenant.\n\nBeyond the scam risk, signing a lease without viewing could bind you to a property with undisclosed defects, a location different from what was described, or conditions that do not match the listing. In some jurisdictions, leases signed under fraudulent misrepresentation may be voidable, but recovering funds paid is still difficult.\n\nRemote rental fraud commonly uses this pattern: a landlord says they are abroad and will mail the keys after you pay and sign electronically. The property in the listing is real — it belongs to someone else whose images were stolen — but the 'landlord' has no right to rent it. After paying, you receive nothing.\n\nRequire a live video viewing with the landlord present in the property before any financial commitment. Verify ownership. If a landlord will not accommodate a viewing, walk away.","redFlags":["Landlord refuses or is unable to arrange any form of viewing","Claims to be overseas and will send keys after payment","Asks for lease signature and deposit via email or messaging app before viewing","Rental price is attractive but viewing is not possible","Photos are unusually professional and appear elsewhere on the internet","Landlord becomes evasive or aggressive when viewing is requested"],"whatToDoNow":["Insist on a viewing — in person or via live video with the landlord present in the property","Verify property ownership through land registry records","Do not sign or pay anything until after a verified viewing","Report suspicious listings to the rental platform immediately","If you have already paid, report to your bank and national fraud authority","Report to your local police if a significant sum has been lost"],"faq":[{"question":"Is a live video viewing sufficient instead of in-person?","answer":"A live video call where the landlord physically walks through the property and responds to your directions in real time provides a reasonable level of assurance. A pre-recorded video tour does not — it could show any property. Combine video viewing with ownership verification."},{"question":"What if the listing says only remote viewing is available?","answer":"This is a significant red flag in the residential rental market. If no in-person or live video viewing is possible, the risks are too high to proceed with any financial commitment."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-tech-company-offer-you-money-to-test-their-payment-system","url":"https://scamencyclopedia.org/questions/can-a-tech-company-offer-you-money-to-test-their-payment-system","question":"Can a tech company pay me to test their payment system by sending and receiving money?","shortAnswer":"No legitimate tech company recruits random members of the public to test payment systems using real money. This is a money mule recruitment tactic.","explanation":"Technology companies test payment infrastructure using dedicated test environments, dummy accounts, and internal QA teams. They do not recruit consumers through social media or job boards to process real money transfers as a form of payment system testing.\n\nThis script is used to recruit money mules. The recruited 'tester' is asked to receive money (often from a fraud victim or another mule) into their account and then transfer it to a specified account, retaining a small percentage as 'commission' or 'payment for testing.' The funds flowing through the account are stolen, and the mule may be prosecuted for money laundering.\n\nThe offer is often made convincingly, with a website, terms and conditions, and even a contract that makes it look like a legitimate gig economy role. None of these trappings make the underlying transaction legal.\n\nIf you receive, forward, and profit from stolen money, ignorance is not always a defence. The safest rule is that any role requiring you to move money through your personal account for a third party is a role to refuse and report.","redFlags":["Offered payment to receive and forward money through your personal account","Described as testing a payment or fintech system","Commission is a percentage of each transaction processed","Job found through social media, unsolicited message, or informal advert","Company cannot be verified through official business registries","Transaction amounts are large and irregular"],"whatToDoNow":["Decline immediately and do not participate","Report to your national financial intelligence or fraud authority","Report the job advertisement to the platform where it appeared","If you already participated, contact your bank immediately and seek legal advice","Cooperate fully with authorities if your account has been flagged","Be transparent with your bank about any suspicious transactions you processed"],"faq":[{"question":"How do legitimate technology companies test payment systems?","answer":"They use sandbox environments with test card numbers and dummy accounts. All testing is internal or with vetted professional partners. Real money never flows through personal consumer accounts in a test programme."},{"question":"What is the legal risk if I participated without knowing it was a scam?","answer":"Money laundering laws in many countries apply even if the person did not know the money was criminal proceeds, if they were reckless or should have known. Seek independent legal advice immediately if you have processed payments for a third party."}],"lastReviewed":"2026-06-10"},{"slug":"can-an-online-casino-or-gaming-site-charge-a-fee-to-withdraw-winnings","url":"https://scamencyclopedia.org/questions/can-an-online-casino-or-gaming-site-charge-a-fee-to-withdraw-winnings","question":"Can an online casino or gaming site charge me a fee to withdraw my winnings?","shortAnswer":"Legitimate regulated casinos do not charge upfront fees to release winnings. Fee demands before withdrawals are a gambling scam tactic and may also indicate the site is unlicensed.","explanation":"Regulated online casinos may have minimum withdrawal thresholds or wagering requirements — conditions specified in their terms and conditions at registration. They may also deduct standard processing fees from the withdrawal itself. What they do not do is demand an upfront payment from you before releasing funds you have already won.\n\nFraudulent or unlicensed gambling sites use the 'withdrawal fee' tactic to extract additional money from players after they have won. The fees are described as taxes, administrative charges, verification costs, or regulatory levies. Once paid, a new fee is invented, or the site becomes unresponsive.\n\nSome fake gambling platforms present convincing winnings screens to entice deposits, then lock the account until fees are paid. The winnings were never real — they were shown specifically to prompt further payment.\n\nAlways check whether a gambling site is licensed by your national gambling regulator before depositing. Licensed sites have verifiable licence numbers, transparent terms and conditions, and dispute resolution processes. Unlicensed sites have no regulatory obligation to pay out.","redFlags":["Charged a fee upfront before a withdrawal can be processed","Multiple fees arise in sequence each time you attempt to withdraw","Site cannot be found on the national gambling regulator's licence register","Winnings are very large and appeared quickly after a small deposit","Customer support is unresponsive or only available via messaging app","Terms and conditions are difficult to find or written in vague language"],"whatToDoNow":["Do not pay any upfront withdrawal fee","Check the site's licence on the official gambling regulator's register","If licensed, raise a formal complaint through the site's dispute resolution process","Report unlicensed sites to your national gambling authority","Report the withdrawal fee tactic to your consumer protection authority","Dispute any charges with your bank or card provider if fees were paid by card"],"faq":[{"question":"Are there any legitimate reasons a casino would hold my withdrawal?","answer":"Licensed casinos may hold withdrawals for identity verification (KYC), wagering requirement compliance, or fraud review. These are internal reviews — not requirements for you to pay a fee. Any hold should be clearly explained and resolved through official support."},{"question":"How do I find out if an online casino is licensed?","answer":"Check the licence number displayed at the bottom of the casino's website against the official register of the claimed regulator (e.g., UK Gambling Commission, Malta Gaming Authority). A missing or unverifiable licence number is a serious red flag."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-bank-ask-for-your-full-password-over-the-phone","url":"https://scamencyclopedia.org/questions/can-a-bank-ask-for-your-full-password-over-the-phone","question":"Can a bank employee or security team ever ask for my full online banking password over the phone?","shortAnswer":"No. Banks never ask for your full password. Legitimate security verification asks for specific characters from a memorable word — not the complete password.","explanation":"Online banking passwords are hashed and stored in a form that bank employees cannot see, even if they wanted to. There is no legitimate operational reason for a bank employee to request your full password. Their verification systems use partial memorable words, PIN verification, or app-based authentication — none of which require you to disclose your complete password.\n\nFraudsters call posing as bank security staff and ask for your full password under the pretext of confirming your identity before dealing with a security issue. With your password, they can log in to your account, access financial information, and potentially transfer funds or change security settings.\n\nA related variation asks for your Personal Identification Number (PIN) — the four- or six-digit number for your physical card. Banks never ask for this either. Your PIN should never leave your memory under any circumstances.\n\nIf a caller asks for your full password, full PIN, or tells you to enter them on any device other than your own verified banking interface, end the call immediately and contact your bank through the official number on your card.","redFlags":["Caller asks for your full online banking password","Caller asks for your card PIN","Told to enter your password on a website or device provided by the caller","Call was unsolicited and relates to a security issue on your account","Caller says they need the password to 'reset' or 'verify' your account","Creates urgency by claiming your account has been accessed by someone else"],"whatToDoNow":["Refuse and end the call immediately","Change your online banking password straight away","Call your bank on the number on the back of your card","Check your account for any unauthorised activity or changes","Report the call to your bank's fraud team","Report to your national fraud authority"],"faq":[{"question":"What does a genuine bank security verification look like?","answer":"Genuine bank verification typically asks for specific characters from a memorable word (e.g., the third and fifth character), date of birth, and partial account details. They never ask for complete passwords, full card numbers, or full PINs."},{"question":"I gave my full password — what should I do immediately?","answer":"Change the password immediately from a device you trust. Call your bank on the official number to report the call and ask them to review for any unauthorised access. Enable any additional security settings available."}],"lastReviewed":"2026-06-10"},{"slug":"can-an-employer-pay-you-in-advance-and-ask-you-to-buy-supplies","url":"https://scamencyclopedia.org/questions/can-an-employer-pay-you-in-advance-and-ask-you-to-buy-supplies","question":"Can a new employer pay me in advance and ask me to buy equipment or supplies with the money?","shortAnswer":"No legitimate employer sends money in advance and then asks you to purchase and forward equipment or supplies. This is a cheque fraud or money mule pattern.","explanation":"Genuine employers purchase their own equipment and supplies through their own corporate accounts or procurement systems. They do not send employees an upfront payment and ask them to personally buy items and send them to a third address or transfer the change. This arrangement serves no legitimate operational purpose.\n\nThe scam works by sending a cheque or bank transfer that appears real. The employee is asked to buy gift cards, electronics, or supplies with the money and send the items or transfer the change. The original payment is later reversed (a fraudulent cheque bouncing, or an unauthorised transfer being recalled), leaving the victim out of pocket for the goods or cash they forwarded.\n\nA variation involves being asked to buy and post items to an overseas address. This exposes the victim to potential customs and import law issues and, if the goods were purchased with stolen funds, possible receiving of stolen goods charges.\n\nAlways be sceptical of any work arrangement that involves receiving money and then spending or forwarding it on behalf of an employer you have not verified in person.","redFlags":["Employer sends money and asks you to buy equipment or gift cards with it","Items must be sent to a specific third-party address","Job involves handling money or goods on behalf of a remote employer","Payment arrives before your first day by cheque or unexpected bank transfer","Employer rushes you to make purchases before the payment can be verified","Role was found through an unsolicited message or generic job board post"],"whatToDoNow":["Do not spend or forward any funds received in this way","Contact your bank to verify the payment is genuine and has fully cleared","Research the employer through official business registries","Refuse to purchase anything on behalf of an unverified employer","Report the job to the platform and your national fraud authority","If you already sent goods or money, report to police and your bank immediately"],"faq":[{"question":"What is a fake cheque scam?","answer":"A fake cheque scam sends a fraudulent cheque that appears to clear initially in your bank account. You are asked to spend or forward part of the money. When the cheque is ultimately returned unpaid, your bank reverses the credit and you lose the funds you already spent."},{"question":"What if the bank says the funds are available in my account?","answer":"Funds being available is not the same as a cheque having fully cleared. Cheques can take several weeks to be definitively confirmed as genuine. An available balance early in the process does not mean the payment is real."}],"lastReviewed":"2026-06-10"},{"slug":"can-an-online-investment-platform-require-a-tax-payment-before-withdrawal","url":"https://scamencyclopedia.org/questions/can-an-online-investment-platform-require-a-tax-payment-before-withdrawal","question":"Can an online investment platform require me to pay a tax or fee before I can withdraw my profits?","shortAnswer":"No legitimate investment platform withholds your funds pending an upfront tax payment from you. This is a standard exit barrier used in investment and crypto fraud.","explanation":"When you earn taxable investment profits, tax is reported through your annual tax return and paid to the national tax authority — not to the investment platform before you can access your money. The platform may issue you a tax statement at year end, but it does not collect taxes on behalf of governments by requiring you to pay a platform fee before a withdrawal.\n\nFraudulent investment platforms show impressive unrealised profits on your dashboard to encourage further deposits. When you attempt to withdraw, a sequence of exit barriers appears: a tax payment, an insurance deposit, a verification fee, or a regulatory compliance charge. Each payment is followed by another barrier. The profits on the screen were never real.\n\nThis pattern is extremely common in romance-based investment scams (pig butchering), crypto investment fraud, and forex scams. The 'tax requirement' is designed to extract the maximum possible amount from victims who have already committed emotionally and financially to the platform.\n\nIf a platform you invested with requires any upfront payment before allowing a withdrawal, consult an independent financial adviser and report the platform to your national financial regulator before making any further payment.","redFlags":["Told you must pay a tax, fee, or deposit before withdrawing profits","Multiple sequential barriers appear each time you attempt to withdraw","Platform is not registered with any verifiable financial regulator","Investment returns are unusually high and consistent","Platform was introduced through a romantic partner or online community","Customer support only available through messaging app, never phone or official portal"],"whatToDoNow":["Do not make any further payments to the platform","Check the platform's registration with your national financial regulator","Consult an independent financial adviser","Report the platform to your financial regulator and fraud authority","Preserve all evidence: screenshots, chat logs, transaction records","Contact your bank about any transactions to the platform for potential recovery"],"faq":[{"question":"Is it possible my investment profits are real and the tax is legitimate?","answer":"Legitimate tax obligations on investment profits are settled through your personal tax return with your national tax authority — not through a payment to the platform. If the platform claims otherwise, it is almost certainly fraudulent."},{"question":"What is a pig butchering scam?","answer":"Pig butchering is a type of fraud where a scammer builds a romantic or friendly relationship over weeks or months before introducing a fraudulent investment opportunity. Victims are 'fattened' with small gains before the platform locks their funds and demands fees to withdraw."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-government-ask-for-a-fee-to-register-a-business-online","url":"https://scamencyclopedia.org/questions/can-a-government-ask-for-a-fee-to-register-a-business-online","question":"Can a government agency charge a fee to register my business online?","shortAnswer":"Governments do charge registration fees, but only through official portals. Unsolicited calls or emails charging for business registration are impersonation scams targeting new entrepreneurs.","explanation":"Business registration with government companies houses, revenue authorities, or trade registers does involve fees. These are published on the official government website, paid through the official portal, and generate official documentation. The process is initiated by you — the business owner — not by the government contacting you.\n\nScams targeting new businesses mimic official registration authorities and contact owners shortly after they incorporate, knowing that regulatory compliance is often confusing for new entrepreneurs. They claim a fee is needed to activate a licence, comply with a regulation, or be added to an official directory. The fee is paid to a private company that provides no real benefit.\n\nSome schemes are marketed as optional compliance services (workplace poster suppliers, fake registry inclusions) that imply a regulatory requirement which does not exist. Others outright impersonate official bodies.\n\nAlways initiate business compliance actions yourself through official government websites. Treat any unsolicited contact claiming a regulatory fee is due as a potential scam, and verify through official channels before paying.","redFlags":["Unsolicited contact claiming a registration or compliance fee is outstanding","Contact arrived shortly after you registered a new company","Organisation cannot be found on the official government website","Invoice or demand looks official but has minor design or address discrepancies","Fee must be paid by wire, gift card, or unusual method","Threats of deregistration or penalties if not paid immediately"],"whatToDoNow":["Do not pay without verifying independently","Check the official companies register website for any genuine outstanding requirements","Search the organisation name with the word 'scam' to check for known fraud warnings","Report to your national companies house or business registration authority","Report to your national fraud or consumer protection authority","Alert your local chamber of commerce to warn other new businesses"],"faq":[{"question":"How do I find out what genuine fees I owe for my business?","answer":"Log in to the official government business registration portal and check your account for any outstanding requirements. All genuine fees are listed there with payment instructions. Do not rely on invoices that arrive by post or email unless you can verify them against your official account."},{"question":"Are workplace compliance poster suppliers legitimate?","answer":"Most businesses are legally required to display certain notices, but the posters themselves are freely downloadable from the relevant government authority. Firms charging significant fees for mandatory poster subscriptions are selling something you can get for free."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-crypto-exchange-freeze-your-funds-and-demand-taxes-before-release","url":"https://scamencyclopedia.org/questions/can-a-crypto-exchange-freeze-your-funds-and-demand-taxes-before-release","question":"Can a crypto exchange freeze my funds and demand I pay taxes before releasing them?","shortAnswer":"No legitimate crypto exchange withholds your funds pending an upfront tax payment. This is a standard exit barrier in crypto investment fraud.","explanation":"Regulated cryptocurrency exchanges provide the infrastructure for buying, selling, and withdrawing digital assets. They do not collect taxes on your behalf, and they certainly do not withhold your funds until you pay a tax to the exchange itself. Crypto gains are reported on your tax return to your national revenue authority — an entirely separate process.\n\nFraudulent exchanges — many of which look identical to legitimate platforms — show users a positive account balance that they cannot access. When withdrawal is attempted, the exchange claims a tax liability must be settled with the platform before the funds are released. This is a fabricated barrier designed to extract additional real money from the victim.\n\nThe exit barrier can be presented as a tax, an anti-money-laundering compliance deposit, an account upgrade fee, or an insurance bond. Each payment is followed by another requirement. The funds displayed in the account were never real — they were a calculated display designed to maximise how much the victim will pay to 'unlock' them.\n\nIf you cannot withdraw your funds from a crypto platform without paying an upfront fee, treat the platform as fraudulent and report it immediately.","redFlags":["Exchange says you must pay taxes to the platform before withdrawing","Multiple sequential fees appear when you attempt to withdraw","Platform is not listed on a verified exchange ranking service","High, consistent returns that seem too good to be true","Platform was introduced by someone online you have not met in person","Customer support only responds through messaging apps"],"whatToDoNow":["Stop depositing any further money immediately","Do not pay the tax or fee demanded","Research the exchange on independent crypto review forums","Report to your national financial regulator","Report to your national fraud authority with all transaction evidence","Consult a fraud recovery specialist if significant funds are involved"],"faq":[{"question":"What does a legitimate crypto exchange do when you withdraw?","answer":"A legitimate exchange processes your withdrawal to your verified wallet or bank account after standard KYC checks are complete. They may have a minimum withdrawal threshold or processing time, but they do not collect taxes or compliance fees from you."},{"question":"Can I recover crypto sent to a fraudulent exchange?","answer":"Recovery of crypto is extremely difficult and rarely successful. Report immediately to your national fraud authority and provide all transaction hashes and platform details. Some law enforcement agencies have specialist crypto tracing units."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-landlord-ask-you-to-use-a-specific-wire-service-for-rent","url":"https://scamencyclopedia.org/questions/can-a-landlord-ask-you-to-use-a-specific-wire-service-for-rent","question":"Can a landlord require me to pay rent through a specific wire transfer service to a personal name?","shortAnswer":"Legitimate landlords accept standard bank transfers to business or personal accounts associated with the property. Insistence on a specific wire service to a name you cannot verify is a red flag.","explanation":"Rent can legitimately be paid by bank transfer, standing order, cheque, or online rent collection platforms. In each case, the payment details — account name, number, and sort code or routing number — should correspond to a verifiable entity: the landlord's name matching the lease, or a letting agency's business account.\n\nRequiring payment through a specific informal wire service (such as Western Union, MoneyGram, or informal money transfer operators) to a name you cannot independently associate with the property or letting agency removes traceability and all consumer protection. Once sent, these transfers are virtually impossible to reverse.\n\nThis is particularly used in rental scams where the fraudster knows you cannot meet in person. The legitimate rent collection methods create paper trails; informal wire services do not. A landlord who insists on this method despite being unable to explain why, or who cannot provide verifiable banking details, should be treated as a serious risk.\n\nAlways ensure payment details match the landlord's verified identity and are consistent with the tenancy agreement. Use your bank's standard transfer system and keep all payment records.","redFlags":["Told to pay rent through Western Union, MoneyGram, or similar informal services","Recipient name cannot be matched to the landlord's verified identity","Landlord cannot explain why standard bank transfer is not possible","Rental arrangement was established without an in-person meeting","Property was not viewed before payment details were provided","Lease document does not specify standard banking details"],"whatToDoNow":["Refuse to use informal wire services for rent payment","Request payment details for a standard bank transfer","Verify the bank account owner matches the landlord's identity","Review your lease to confirm the correct payment details are documented","Report suspicious rental arrangements to the platform and consumer authority","Seek advice from a tenants' rights organisation if you have concerns"],"faq":[{"question":"Are peer-to-peer payment apps acceptable for rent?","answer":"Apps like Venmo, Zelle, or PayPal are increasingly used for rent, but ensure the receiving account name matches the landlord's verified identity and that the transaction is documented. These apps offer limited fraud protection compared to bank transfers."},{"question":"What is the safest payment method for rent?","answer":"A direct bank transfer (standing order or faster payment) from your account to a verified account in the landlord's name, with a clear reference, creates the best audit trail and offers the most recovery options if a dispute arises."}],"lastReviewed":"2026-06-10"},{"slug":"can-an-employer-ask-for-your-social-security-number-in-a-first-message","url":"https://scamencyclopedia.org/questions/can-an-employer-ask-for-your-social-security-number-in-a-first-message","question":"Can a recruiter or employer ask for my Social Security number in their very first message to me?","shortAnswer":"No. Legitimate employers collect Social Security numbers for payroll and tax purposes after a job offer is accepted and during formal onboarding — not in the first outreach message.","explanation":"Social Security numbers (and equivalent national identifiers in other countries) are sensitive personal data used for tax reporting and background checks. Collecting this number is a formal, documented step that occurs late in the hiring process — after interviews, reference checks, and a formal written offer of employment. The process is conducted through secure HR systems with clearly stated purposes.\n\nA request for your SSN in the initial contact message — before any interview, before any offer, and before any established relationship with the employer — has no legitimate purpose and is almost certainly a data harvest for identity fraud or a precursor to synthetic identity fraud.\n\nScammers use plausible job listing contexts to make the request seem routine. They may claim it is needed for a background check, a security clearance pre-screen, or a formal HR system registration. None of these require your SSN at the first-contact stage.\n\nProtect your SSN carefully. Provide it only to verified employers, through secure official HR systems, after a job offer is formalised and you have independently verified the company's identity.","redFlags":["First contact requests your Social Security or national ID number","Request comes before any verified interview or formal offer","Request arrives via informal email or messaging app","Job offer was unsolicited or arrived without a prior application","Company cannot be verified through official business registries","Request is accompanied by urgency or a deadline"],"whatToDoNow":["Refuse to provide your SSN at this stage","Independently verify the company through official registries and their official website","Proceed with the application through verified channels only","If the request seems fraudulent, report the job posting to the platform","Report identity harvest attempts to your national fraud authority","If you already provided your SSN, place a fraud alert on your credit immediately"],"faq":[{"question":"When is it appropriate to provide my SSN to a new employer?","answer":"After accepting a formal written offer and during the official onboarding process, typically via a secure HR portal or W-4 form. The employer should have a verifiable business identity, a physical address, and an established HR process."},{"question":"What can someone do with my SSN?","answer":"Your SSN can be used to open new credit accounts, file fraudulent tax returns to claim your refund, apply for government benefits, or create a synthetic identity. Place a credit freeze with all three major bureaus if your SSN has been exposed."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-subscription-service-charge-you-for-cancelling-your-free-trial","url":"https://scamencyclopedia.org/questions/can-a-subscription-service-charge-you-for-cancelling-your-free-trial","question":"Can a subscription service legitimately charge me a fee to cancel a free trial?","shortAnswer":"No. Legitimate free trials either convert to a paid subscription or end without charge. A fee to cancel a free trial is deceptive billing practice and in many countries is illegal.","explanation":"Genuine free trial offers allow you to use a service for a defined period, after which they either charge you automatically for the first billing cycle (if you provided payment details) or simply end. Cancellation of a free trial before the billing date converts no charge. There is no legitimate reason to charge a separate cancellation fee for a free trial.\n\nDeceptive subscription billing uses confusing trial terms to obscure what happens at the end of the trial period: small print that makes cancellation difficult, cancellation fees buried in long terms and conditions, or charges framed as 'processing fees' for cancelling. Consumer protection laws in many countries specifically prohibit negative option billing that is not clearly disclosed at the point of sign-up.\n\nIf a service attempts to charge you for cancelling a free trial, challenge the charge with your bank or card provider as unauthorised. Review the original sign-up terms to assess whether the fee was disclosed. If it was not, you have grounds for a chargeback.\n\nBefore signing up for free trials, note the trial end date, set a calendar reminder, and understand the cancellation process. Avoid using a debit card for trials — a credit card or virtual card number provides better chargeback protection.","redFlags":["Charged a fee for cancelling a free trial subscription","Cancellation fee was not clearly disclosed at sign-up","Customer service makes cancellation unreasonably difficult","Charge appeared immediately when you attempted to cancel","Company responds to cancellation requests with new offers rather than processing the cancellation","Terms and conditions for the trial were very long and hard to find"],"whatToDoNow":["Document your cancellation request and the charge","Contest the charge with your bank or card provider as an unauthorised or undisclosed fee","Report the service to your national consumer protection authority","Review the sign-up terms to support your chargeback claim","Cancel the card used for the trial to prevent further charges","Leave a review warning other consumers about the billing practice"],"faq":[{"question":"What is negative option billing?","answer":"Negative option billing converts a free trial to a paid subscription automatically unless the consumer actively cancels. It is legal when clearly disclosed upfront but illegal when the conversion terms are hidden or not clearly stated at the point of sign-up."},{"question":"How do I cancel a subscription if the company is making it difficult?","answer":"Try every available channel: email, phone, and website. Document all attempts. If the service continues to charge you after a documented cancellation request, dispute the charges with your card provider and report to your consumer protection authority."}],"lastReviewed":"2026-06-10"},{"slug":"can-police-ask-you-to-help-them-catch-a-scammer-by-sending-crypto","url":"https://scamencyclopedia.org/questions/can-police-ask-you-to-help-them-catch-a-scammer-by-sending-crypto","question":"Can police ask me to send cryptocurrency to help them catch a scammer targeting my account?","shortAnswer":"No. Police do not ask members of the public to send cryptocurrency to assist law enforcement operations. This is a law enforcement impersonation scam.","explanation":"Law enforcement agencies conduct undercover operations through trained personnel, with legal authorisation, and using controlled funds — not by recruiting random members of the public to send their personal savings in cryptocurrency. No police force has a procedure that requires a victim or witness to transfer their own assets as part of an operation.\n\nThis scam combines the authority of law enforcement with the urgency of a current threat to your finances. A caller posing as a police officer claims they have identified a scammer who has already accessed your accounts and the only way to protect your money or contribute to the arrest is to move it to a cryptocurrency account they control.\n\nThe instruction to send crypto to 'hold' your money safely while the operation proceeds is identical to the 'safe account' fraud script, with cryptocurrency substituted for a bank transfer. Once the crypto is sent, the funds are gone.\n\nIf you are ever told by a caller that sending your own money will help police catch a criminal, hang up immediately. Legitimate police operations do not work this way, and any officer claiming otherwise is not a real officer.","redFlags":["Caller claiming to be police asks you to send cryptocurrency to assist an operation","Claims your funds will be protected by being converted to crypto","Urgency created by claiming a criminal is actively accessing your accounts","Asks you not to tell your bank or family about the operation","Provides a wallet address to send your funds to","Contact was unsolicited and call was unexpected"],"whatToDoNow":["Hang up immediately without sending any funds","Call your local police non-emergency number to report the call","Contact your bank to check whether your accounts show any unusual activity","Report to your national fraud authority","If you already sent cryptocurrency, report to the exchange and police immediately","Alert family members who may also be targeted"],"faq":[{"question":"Do police ever need money from the public to catch criminals?","answer":"No. Criminal operations are funded through government budgets and authorised processes. A police officer who asks a member of the public to personally fund or participate in a financial operation by sending their own money is not acting within any legitimate law enforcement framework."},{"question":"What if the caller transfers me to someone who sounds like a real detective?","answer":"Call transfers to add authority figures are a common tactic in this scam. Multiple voices, formal language, and badge numbers are all fabricated. The only way to verify police contact is to call the relevant station independently using a number you look up yourself."}],"lastReviewed":"2026-06-10"},{"slug":"can-an-mlm-company-charge-you-to-join-before-you-can-earn","url":"https://scamencyclopedia.org/questions/can-an-mlm-company-charge-you-to-join-before-you-can-earn","question":"Can a legitimate multi-level marketing company require me to buy products or pay fees before I can start earning?","shortAnswer":"Legitimate direct sales companies do not require significant upfront purchases or fees as a condition of participation. Mandatory large buy-ins are a hallmark of pyramid schemes.","explanation":"Direct selling regulations in many countries require that MLM companies offer participants the right to earn income based primarily on selling products to genuine end consumers — not from recruiting other participants or from mandatory product purchases. Where a genuine retail market exists, participation costs are modest and products purchased can be sold at profit.\n\nProblematic schemes require large initial inventory purchases (sometimes called 'starter kits' worth hundreds or thousands), continuous monthly purchase quotas to remain eligible for commissions, and income that depends more on recruiting than on selling to end consumers. When the income structure means that most participants can only profit by recruiting others, the scheme is functioning as a pyramid.\n\nBefore joining any direct sales or MLM opportunity, research the company's income disclosure statement, which should reveal the median earnings across all participants — not just the top performers. In most schemes, the majority of participants earn very little or lose money after accounting for their product purchases.\n\nAsk explicitly how much of the income comes from sales to people outside the organisation versus from mandatory purchases by participants. A high ratio of internal consumption to external retail sales is a warning sign.","redFlags":["Required to purchase a large starter kit or inventory before earning anything","Must maintain monthly purchase quotas to be eligible for commissions","Income presentations focus on recruitment earnings rather than retail margins","Income disclosure shows very low median earnings across participants","Pressure to recruit family and friends immediately upon joining","Products are priced significantly higher than comparable retail alternatives"],"whatToDoNow":["Request and review the company's income disclosure statement before investing","Research the company through independent consumer review sites and the FTC","Calculate whether you could realistically sell the products to genuine end consumers at profit","Consult with current or former participants through independent forums","If you have already joined and lost money, report to your consumer protection authority","Seek a refund through the company's return policy or small claims court if appropriate"],"faq":[{"question":"What is an income disclosure statement and where do I find it?","answer":"It is a document MLM companies are required or encouraged to publish showing the distribution of earnings across all active participants. Search the company name plus 'income disclosure statement.' Median annual income is often well below minimum wage when the investment in products is accounted for."},{"question":"Is there a difference between an MLM and a pyramid scheme?","answer":"Legally, MLMs sell real products to genuine end consumers. Pyramid schemes generate returns primarily from participant recruitment or mandatory internal purchases. In practice, the line can be thin — the income structure and the reality of whether products actually move to end consumers determine which category a scheme falls into."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-bank-ask-you-to-lie-to-the-teller-about-why-you-are-withdrawing","url":"https://scamencyclopedia.org/questions/can-a-bank-ask-you-to-lie-to-the-teller-about-why-you-are-withdrawing","question":"Can a bank fraud investigator ask me to lie to the bank teller about why I am making a withdrawal?","shortAnswer":"No. Any instruction to deceive bank staff is a definitive sign of fraud. Genuine fraud investigations do not require customers to mislead employees.","explanation":"Branch cashiers are a last line of defence against courier fraud and safe account scams. Banks train them specifically to ask questions when a customer is making an unusually large cash withdrawal, particularly for elderly customers or those who seem distressed or scripted. The question 'What are you using this for?' is a safeguard designed to protect you.\n\nFraudsters know this, which is why their scripts include instructions on what to tell the cashier. Common cover stories include 'home renovations,' 'buying a car privately,' or 'investing in property' — answers designed to avoid triggering a fraud intervention. The caller may threaten that revealing the real reason will compromise the operation or endanger the outcome.\n\nA genuine bank fraud investigator, police officer, or any legitimate professional has no reason to need you to deceive a bank employee. The instruction to lie to bank staff is the scammer removing the one intervention that could save your money.\n\nIf you are at a bank branch and feel you have been coached on what to say to the cashier, tell the cashier the truth. Tell them you received an unusual call asking you to withdraw money and you are not sure if it is legitimate. The cashier can help, and no legitimate process will be harmed by your honesty.","redFlags":["Given a script to recite to the bank cashier when withdrawing","Told not to mention the real reason for the withdrawal to branch staff","Cashier asks questions and caller tells you to dismiss their concern","Any caller who needs you to deceive bank employees to complete a transaction","Large cash withdrawal is part of a 'test' or 'operation'","Caller monitors the call while you are at the branch"],"whatToDoNow":["Tell the branch cashier the truth immediately","Do not complete the withdrawal if you feel pressured by a call","Ask the branch to contact the bank's fraud team on your behalf","End the phone call while still in the branch if safe to do so","Report the incident to your bank's fraud team","Report to your national fraud authority"],"faq":[{"question":"Why does the bank cashier ask about large cash withdrawals?","answer":"Banks are required by anti-money-laundering regulations to report suspicious transactions, and they have training to identify fraud victims. Their questions are protective. Answering honestly can prevent you from losing your savings."},{"question":"What if the caller says the bank is in on the fraud and I should not trust staff?","answer":"This is a deliberate tactic to remove the last safeguard. No legitimate investigation would require you to distrust all branch staff. This instruction alone is confirmation that the caller is a fraudster."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-social-media-platform-charge-a-fee-to-verify-your-account","url":"https://scamencyclopedia.org/questions/can-a-social-media-platform-charge-a-fee-to-verify-your-account","question":"Can a social media platform or its staff contact me and charge a fee to verify or restore my account?","shortAnswer":"Official verification badges are applied through the platform's own process — never through a direct payment to someone contacting you. Anyone charging a fee to verify or restore your account is impersonating the platform.","explanation":"Social media platforms that offer account verification manage the process through their own applications, submitted by users through account settings. Some platforms offer paid verification tiers through their official subscription plans — visible and priced transparently on the platform's official website. Neither process involves a platform staff member contacting you individually and requesting a fee.\n\nAccount restoration for hacked or disabled accounts is handled through the platform's own appeals or support process — typically automated, with human review for complex cases. This process is free. No platform representative will contact you via email or direct message offering to restore your account for a payment.\n\nScammers exploit account loss anxiety by posing as platform support and offering to reinstate or verify accounts for a fee. They may create convincing fake support profiles, use official-looking email domains that differ by one character, or contact you through social engineering within the platform itself.\n\nIf your account is disabled or hacked, use the official account recovery tools on the platform's help centre page. Never pay a fee to an individual for account access.","redFlags":["Someone contacts you offering to verify or restore your account for a fee","Sender's email or profile does not exactly match the official platform identity","Verification offer arrived unsolicited by DM or email","Urgent timeline is given before the account is permanently lost","Fee required by gift card, wire, or cryptocurrency","Offer came through a third-party app or external link"],"whatToDoNow":["Do not pay any fee","Use the platform's official help centre and account recovery tools","Report the impersonating account or email to the platform","Enable two-factor authentication to protect your account from future compromise","Report the scam to your national cybersecurity or fraud authority","Alert the platform's official security team through verified channels"],"faq":[{"question":"Are paid verification programmes on social media legitimate?","answer":"Some platforms (such as X Premium, Meta Verified) offer paid subscription tiers that include a verification badge. These are managed through your account settings and billed through the platform's official payment system — never through an individual contacting you."},{"question":"My account was hacked — how do I recover it legitimately?","answer":"Use the official account recovery tool on the platform's login or help centre page. This typically involves verifying your identity through a registered email or phone number. The process is free. If you cannot access your email, the platform usually has an ID verification route."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-bank-text-message","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-bank-text-message","question":"How do I spot a fake bank text message?","shortAnswer":"Fake bank texts create false urgency about account problems and ask you to click a link or call a number — your real bank never needs you to verify details by text.","explanation":"Fraudsters send texts that mimic your bank's name, sometimes appearing in the same thread as genuine messages because they spoof the sender ID. The goal is to panic you into clicking a link that leads to a fake login page where your credentials are harvested, or to call a number staffed by the fraudster.\n\nThe most reliable tell is the action they want you to take. A genuine bank alert says 'your card ending 1234 was used at Tesco — reply Y to confirm or N to dispute.' A fake alert says 'your account is suspended — verify now at bit.ly/bank-confirm' or 'call us immediately.' That combination of threat plus external link is the signature.\n\nCheck the URL in any link before tapping. Real bank domains are short and exact — yourbank.co.uk or yourbank.com. Fake ones add hyphens, swap letters, or use a subdomain like yourbank.secure-login.net where the real domain is secure-login.net, not yourbank.co.uk.\n\nIf you receive a suspicious bank text, open your bank's official app or call the number on the back of your card independently. Never call back a number given in the text and never type your full password into a page you reached from a text link.","redFlags":["Link domain does not exactly match your bank's official website","Message asks you to 'verify', 'confirm' or 'update' account details by clicking","Urgent tone: 'your account will be closed', 'unauthorised access detected'","Sender is a generic mobile number rather than a named short-code","Text contains spelling errors or awkward phrasing","The message asks for your full PIN or password"],"whatToDoNow":["Do not tap any link in the text","Open your bank's official app and check your account directly","Call the number on the back of your debit or credit card","Forward the text to 7726 (SPAM) in the UK, or report to the FTC in the US","Delete the text after reporting it","If you did click the link, change your online banking password immediately and tell your bank"],"faq":[{"question":"Can scammers make their text appear in my real bank's thread?","answer":"Yes. They spoof the alphanumeric sender ID your bank uses. Appearing in the same thread is not proof of legitimacy — always verify through the bank's official app or card-back number."},{"question":"What if I already tapped the link?","answer":"Close the page immediately. Change your online banking password, then ring your bank's fraud team using the number on your card."},{"question":"Does two-factor authentication protect me?","answer":"Partly. Smishing attacks often try to steal the OTP in real time through a fake site. Never enter an OTP on a page you reached from a text link."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-delivery-sms","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-delivery-sms","question":"How do I spot a fake delivery SMS?","shortAnswer":"Fake parcel texts claim a delivery failed and ask you to pay a small fee or update your address via a link — real carriers do not charge re-delivery fees by text.","explanation":"Parcel delivery scams, sometimes called smishing, exploded as online shopping grew. Fraudsters send a text pretending to be Royal Mail, UPS, FedEx, DHL, or another carrier. The message says your parcel could not be delivered and you must pay a small holding fee or confirm your address to release it. The fee is low on purpose — the real goal is your card details.\n\nThe link leads to a convincing copy of the carrier's website. Once you enter your card number for the 'fee', criminals either charge larger amounts immediately or sell the details. Some variants also install malware if you tap the link on an Android device.\n\nReal carriers send tracking links from their own domain (royalmail.com, ups.com, fedex.com). They do not add unexpected fees after dispatch, and they do not demand payment to release a parcel held in customs via a text link — that process uses official letters or portal logins.\n\nIf you are expecting a parcel, go directly to the carrier's website by typing the address yourself or using a bookmark, and enter your tracking number there. Never follow a link from an unsolicited text.","redFlags":["Fee required to release or redeliver the parcel","Link domain is not the carrier's exact official domain","No tracking number mentioned, or tracking number does not match any real shipment","Message comes from a mobile number rather than a carrier short-code","Urgency: 'parcel will be returned in 24 hours'","Website asks for full card details including CVV to pay a tiny amount"],"whatToDoNow":["Do not tap the link or pay the fee","Visit the carrier's official website directly in your browser","Check your emails for a genuine dispatch confirmation with a tracking number","Forward the text to 7726 in the UK or report it to the FTC in the US","If you paid the fee, contact your bank immediately to dispute the charge","Check your bank statement for follow-on fraudulent charges"],"faq":[{"question":"What if the text mentions a real retailer I ordered from?","answer":"Fraudsters can buy data showing recent shoppers and personalise the text. Still verify through the carrier's official site."},{"question":"Can I get a refund if I paid the fake fee by card?","answer":"In many cases yes — report it to your bank as an unauthorised or fraudulent transaction. Act quickly, within 24 hours if possible."},{"question":"Are these texts illegal?","answer":"Yes, sending fraudulent texts is a criminal offence. Reporting to the Report Fraud service (UK) or the FTC (US) helps authorities track patterns."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-irs-letter","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-irs-letter","question":"How do I spot a fake IRS letter?","shortAnswer":"Fake IRS letters use urgent threats about arrest or immediate payment that the real IRS never makes — the IRS always allows time to question a notice and never demands gift cards.","explanation":"Government impersonation is one of the most reported scam categories in the United States. Fraudsters send letters (and emails) designed to look like official IRS correspondence, complete with agency seals, case numbers, and legalese. The aim is to frighten you into paying a fabricated tax debt or handing over personal details that enable identity theft.\n\nThe IRS follows a predictable, rights-protecting process. When you owe tax, you receive a series of notices before any enforcement action. These notices quote your specific tax year, explain the calculation, give you at least 30 days to respond, and refer you to an official IRS.gov web address. A letter demanding same-day payment under threat of immediate arrest does not come from the real IRS.\n\nPayment method is the biggest tell. The IRS accepts cheque, bank transfer to the US Treasury, and online payment at IRS.gov. It never asks for iTunes gift cards, wire transfers to a private account, cryptocurrency, or 'processing fees' via prepaid debit cards. If any letter directs you to pay in these ways, it is a scam.\n\nYou can verify any IRS notice by calling the IRS directly at 1-800-829-1040, not any number printed on the letter. You can also log in to your IRS Online Account at IRS.gov to see your actual balance.","redFlags":["Threatens arrest, deportation, or police action if you do not pay today","Demands payment by gift card, cryptocurrency, or wire transfer","Includes a phone number or website different from IRS.gov / 1-800-829-1040","Requests personal information such as your full Social Security number by return email","No IRS notice number (CP or LTR code) or the notice number does not match any correspondence in your IRS Online Account","Grammatical errors or formatting inconsistent with official government stationery"],"whatToDoNow":["Do not pay or call any number in the letter","Log in to your IRS Online Account at IRS.gov to check your actual balance","Call the IRS directly on 1-800-829-1040 to verify","Report the letter to the Treasury Inspector General at TIGTA.gov","File a report with the FTC at ReportFraud.ftc.gov","If you paid, contact your bank or the gift card issuer immediately"],"faq":[{"question":"Can the IRS contact me by email?","answer":"No. The IRS initiates contact by postal mail only. Any email claiming to be from the IRS is a phishing attempt."},{"question":"What if I owe real back taxes — how do I know this letter is fake?","answer":"Log in to IRS.gov and check your balance. If you genuinely owe, your account will show it and you can arrange payment safely on that site."},{"question":"Is there a way to check a specific IRS notice number?","answer":"Yes. Search the notice number (e.g. CP2000) on IRS.gov to read the official description. Real notices are all documented there."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-hmrc-letter","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-hmrc-letter","question":"How do I spot a fake HMRC letter or text?","shortAnswer":"Fake HMRC contacts threaten immediate arrest or promise a surprise tax refund and ask you to click a link or call a number — HMRC never demands same-day payment or sends refunds via text link.","explanation":"HMRC impersonation is the most commonly reported government scam in the UK. Fraudsters impersonate HMRC by letter, email, and text, running two main narratives: you owe unpaid tax and face arrest if you do not pay immediately, or you are owed a refund and must click a link to claim it. Both are designed to create strong emotion — fear or excitement — that overrides your normal caution.\n\nThe real HMRC sends written letters to your registered address before taking any enforcement step. It gives you specific deadlines measured in weeks, not hours. Genuine letters quote your Unique Taxpayer Reference (UTR) or National Insurance number in a partially masked form (e.g. ending in 4567). They do not demand you call a premium-rate number or pay via bank transfer to an account you have never seen before.\n\nFor the 'refund' variant, real HMRC refunds go back to the bank account you used to pay your tax, or by cheque to your address — they are never claimed by following a text link and entering your card details. Any message saying you have a refund waiting at a link that asks for card information is a phishing attack.\n\nVerify any HMRC contact through your Government Gateway account at gov.uk, or call HMRC on 0300 200 3300 (a number you type yourself, not one copied from the suspicious message).","redFlags":["Threat of immediate arrest or bailiffs unless you pay the same day","Text or email claiming a tax refund you did not apply for","Link goes to a domain other than gov.uk","Request to pay via bank transfer, gift voucher, or iTunes card","Premium-rate or non-standard phone number (not 0300 200 3300)","Email address ending in anything other than @hmrc.gov.uk"],"whatToDoNow":["Do not click any links, call numbers in the message, or make any payment","Log in to your Government Gateway account at gov.uk to check your actual tax position","Forward suspicious texts to 60599 and emails to phishing@hmrc.gov.uk","Report it to the Report Fraud service (formerly Action Fraud) on 0300 123 2040 or reportfraud.police.uk","If you paid, call your bank immediately and report to the Report Fraud service"],"faq":[{"question":"Does HMRC ever text or email me?","answer":"HMRC does send some automated texts about tax credits and self-assessment reminders, but they never include a link asking for payment or personal details."},{"question":"Can I tell if a call is really HMRC?","answer":"Caller ID can be spoofed. If someone phones claiming to be HMRC, hang up and call 0300 200 3300 yourself from a different phone."},{"question":"What if I gave my bank details?","answer":"Contact your bank immediately and ask them to reverse any payment or block the account. Then report to the Report Fraud service."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-invoice","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-invoice","question":"How do I spot a fake invoice?","shortAnswer":"Fake invoices insert fraudulent bank details into legitimate-looking bills or charge for goods and services never ordered — always verify new payment details by phone before paying any invoice.","explanation":"Invoice fraud takes two main forms. In the first, criminals intercept or impersonate a real supplier and send a duplicate invoice with fraudulent bank account details swapped in. The buyer pays what looks like a normal bill but the money goes to the fraudster. This is especially common in business-to-business settings but also affects individuals using tradespeople or lawyers.\n\nThe second form is the bogus invoice — a bill for something you never ordered, such as a directory listing, advertising space, or office supplies. These often arrive by email or post and look official enough that an accounts department might pay without checking. They rely on volume: even a low payment rate across thousands of recipients generates profit.\n\nFor the bank-account-swap variant, the tell is a change to payment details that arrives by email without being confirmed by phone. Legitimate suppliers rarely change their bank details, and when they do they will confirm it through a second channel. An email alone — even one that looks exactly like your supplier's address — is not enough. Check the email header: if the sender domain is one letter off from the real company (yoursupp1ier.com instead of yoursupplier.com), it is a spoofed address.\n\nFor unsolicited invoices, check your purchase order records. If no one in your organisation placed the order referenced, treat it as fraudulent. Ask the company sending it for a signed copy of the original contract — legitimate companies will have one; fraudsters will not.","redFlags":["Bank account or sort code different from what you have paid before","Change to payment details arrived only by email with no phone confirmation","Invoice for goods or services you did not order","Sender email domain has a subtle typo compared to the real supplier","Extreme urgency: 'pay within 24 hours or face late fees'","Invoice number or date format inconsistent with previous genuine invoices"],"whatToDoNow":["Do not pay until you have verified new payment details by phone using a number you already have","Compare the invoice against previous genuine invoices from the same supplier","Ask your supplier to confirm the change in writing on official letterhead","Report bogus invoices to Trading Standards (UK) or the FTC (US)","If you already paid, contact your bank immediately — faster payment fraud can sometimes be recalled","Notify your accounts team to be vigilant for similar attempts"],"faq":[{"question":"Can invoice fraud happen even with a supplier I trust?","answer":"Yes. Fraudsters may hack or spoof your supplier's email account. Always verify bank detail changes by calling a number you already hold."},{"question":"Are unsolicited invoice senders breaking the law?","answer":"Sending an invoice for goods not ordered with intent to receive payment is fraud. Report it rather than paying or ignoring it."},{"question":"What is mandate fraud?","answer":"Mandate fraud is the technical name for the bank-account-swap attack. The victim authorises payment to a fraudulent account believing it is a legitimate supplier."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-login-page","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-login-page","question":"How do I spot a fake login page?","shortAnswer":"Fake login pages copy the look of real websites but sit on different domains — always check the full URL in your browser bar before entering any password.","explanation":"Phishing login pages are designed to be visually identical to the real site they impersonate. Criminals copy the HTML, CSS, and images of a well-known service — a bank, an email provider, a social network — and host the copy on a lookalike domain. When you enter your credentials, they are sent straight to the attacker while you are usually redirected to the real site to avoid suspicion.\n\nThe domain name is the most reliable indicator. Real sites use their exact registered domain as the final authority in the URL. Common tricks include adding a word (secure-, login-, verify-) before the real name, using a different top-level domain (.net instead of .com), using homoglyphs (rn instead of m, 0 instead of o), or putting the real brand name as a subdomain of a fake domain: paypal.com.fakesite.net. In this example the actual domain is fakesite.net.\n\nBrowser padlock icons only confirm the connection is encrypted — they do not confirm the site is legitimate. A phishing page can have a valid padlock. Focus on the domain name itself, not the padlock.\n\nAdditional tells include a login form that appears in an unexpected context (an email that says your password expired and shows a login box inside the email body), a page that asks for extra information a genuine login never requests (your card number, mother's maiden name), or autofill not working because your password manager does not recognise the domain.","redFlags":["Domain name does not exactly match the official website you expect","Brand name appears as a subdomain of an unfamiliar domain","You reached the page by clicking a link in an email or text rather than typing the address","Password manager does not autofill your credentials","Page asks for information beyond username and password (card details, national ID)","HTTPS padlock is present but the URL looks unfamiliar"],"whatToDoNow":["Close the tab without entering any information","Navigate to the real site by typing the address yourself or using a bookmark","If you already entered your password, go immediately to the real site and change your password","Enable two-factor authentication on all important accounts","Report the phishing URL to Google Safe Browsing (safebrowsing.google.com/safebrowsing/report_phish/) and to the site being impersonated","Check your account for unauthorised logins or changed settings"],"faq":[{"question":"Does a padlock mean the site is safe?","answer":"No. HTTPS only encrypts the connection. A fraudulent site can have a valid SSL certificate. The domain name is what matters."},{"question":"Can my password manager protect me?","answer":"Yes, indirectly. Password managers only autofill on the exact domain they saved. If autofill does not trigger, treat that as a warning sign."},{"question":"What if the URL looks right but something still feels off?","answer":"Trust your instinct. Open a new tab, type the address manually, and log in there instead."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-qr-code","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-qr-code","question":"How do I spot a fake QR code?","shortAnswer":"Fake QR codes redirect you to phishing sites or prompt app installs — always preview the URL before opening it and be suspicious of QR codes stuck over the top of official ones.","explanation":"QR codes are designed for convenience, which makes them useful for scammers: most people scan first and look at the URL second, if at all. Fraudsters place fake QR code stickers over legitimate ones in parking meters, restaurant tables, gym check-ins, or charity collection boxes. They also distribute them in emails, text messages, and printed flyers.\n\nWhen scanned, the code redirects to a phishing page that may mimic a payment portal, a login page, or a fake app download. In parking meter attacks the victim thinks they are paying legitimately but the money goes to the fraudster. In email phishing, organisations increasingly use QR codes to bypass email link scanners — the scanner checks the email for links but cannot inspect a QR code image.\n\nThe best defence is to preview the destination URL before tapping 'open' — all modern smartphone cameras show the URL before launching the browser. Look for the same red flags you would on any suspicious link: domain mismatches, unexpected subdomains, URL shorteners hiding the destination, or a .com domain pretending to be a government or council service that would use .gov.uk.\n\nPhysically, look for signs that a sticker has been placed over the original — a sticker that is slightly misaligned, has bubbled edges, or peels up is suspicious. Report tampered QR codes to the venue immediately.","redFlags":["QR code appears as a sticker placed on top of existing printed material","Scanned URL uses a link shortener (bit.ly, tinyurl.com) hiding the real destination","Destination domain does not match the organisation that displayed the code","URL preview asks you to log in, pay, or download an app from an unrecognised source","Code received in an unsolicited email or text message","Sticker edges are misaligned, bubbled, or partially lifting"],"whatToDoNow":["Always read the URL preview before opening it","Do not download apps from QR codes — use the official app store instead","Report tampered QR codes to the venue or business","If you already opened the URL and entered data, treat it as a phishing incident and change your passwords","Report the phishing site to your country's cybercrime authority"],"faq":[{"question":"Can a QR code install malware just by scanning it?","answer":"Scanning itself is safe — the camera reads the pattern. The risk is in opening the destination URL or downloading a file from it. Treat the URL as you would any link."},{"question":"Are QR code payments in restaurants safe?","answer":"Usually, if the code is printed on the venue's official menu and the URL matches the venue's domain. Be cautious with codes on removable stickers."},{"question":"Is there a QR code scanner that checks for phishing?","answer":"Some dedicated QR scanning apps (Kaspersky QR Scanner, Trend Micro QR scanner) check URLs against phishing databases. Your built-in camera app does not."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-app","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-app","question":"How do I spot a fake app in an app store?","shortAnswer":"Fake apps mimic popular ones with near-identical icons and names to steal credentials or charge hidden subscriptions — check the developer name, review count, and publish date before installing.","explanation":"Fake apps appear in the Apple App Store and Google Play despite both platforms' review processes. They typically impersonate banking apps, utility apps, VPNs, or popular games. The icon and name are nearly identical to the real app; the difference is usually in the developer name or a very new publication date.\n\nOnce installed, these apps may display a convincing login screen that harvests your credentials, show intrusive ads, install additional malware, or enrol you in a subscription you did not consciously agree to. Some fake VPN apps route your traffic through the fraudster's servers, exposing everything you type.\n\nThe developer name is your strongest signal. Search the real app's official website to confirm who publishes it. For example, the real Chase Bank app is published by 'JPMorgan Chase & Co.' not 'Chase Bank LLC' or a similar variation. A developer with only one app, no history, and a generic-sounding company name is suspicious.\n\nAlso check the review count and publication date. A genuine major banking app has hundreds of thousands of reviews accumulated over years. A fake published last month will have far fewer, and the reviews that exist may read as generic or suspiciously uniform. Low download counts relative to how popular the real app should be are also a warning sign on Android.","redFlags":["Developer name differs from what the real company's website lists","App published very recently with very few reviews","Reviews are generic, all five-star, and posted within days of each other","App requests permissions irrelevant to its function (a calculator asking for contacts)","Icon or name has subtle differences from the genuine app","App is not linked from the official company website"],"whatToDoNow":["Uninstall the suspicious app immediately","Change passwords for any accounts whose login screen was shown by the app","Check for unauthorised subscription charges and cancel them through your device's subscription settings","Install the genuine app by following a link from the company's official website","Report the fake app to the app store using the 'report' option on its listing","Run your device's built-in malware scan if available"],"faq":[{"question":"Can I trust apps that are featured or 'Editors' Choice'?","answer":"Featured status adds credibility but is not a guarantee. Always verify the developer name against the real company's website."},{"question":"Are fake apps more common on Android or iOS?","answer":"Both platforms have issues. Google Play's open model has historically allowed more fake apps, but Apple's App Store is not immune."},{"question":"What if I already used the fake app for banking?","answer":"Contact your bank immediately, change your password on the real app, and ask your bank to monitor for suspicious transactions."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-online-store","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-online-store","question":"How do I spot a fake online store?","shortAnswer":"Fake online stores lure you with prices far below market value and either never ship, send counterfeits, or steal your card details — check domain age, returns policy, and contact details before buying.","explanation":"Fraudulent online shops are built quickly using template platforms, copied product images from legitimate retailers, and prices set 40-80% below market value to attract bargain hunters. They are heavily promoted through social media ads, often using images stolen from real brands. After payment — usually via card or bank transfer with no buyer protection — you receive nothing, a poor counterfeit, or an unrelated cheap item.\n\nThe domain is often newly registered (weeks old) and uses unusual extensions (.shop, .store, .top) rather than .com or the country code you expect. Look up the domain age using a WHOIS tool — a brand-new domain selling luxury goods is a major warning sign. Real stores establish a trading history over months or years.\n\nLegitimate returns policies are specific: a named address, a clear process, and a reasonable timeframe. Fake stores either have no returns section, paste a generic policy with no physical address, or list a contact email only, with no phone number. Try clicking 'About Us' and 'Contact' — these pages on fake stores are often sparse or copied from other sites.\n\nPayment method matters significantly. Card payments and PayPal Goods & Services offer chargeback rights. Fake stores often push bank transfer, cryptocurrency, or unusual payment apps that offer no recourse. Any store that refuses card payment or strongly discounts for bank transfer should be treated with extreme caution.","redFlags":["Prices dramatically lower than any legitimate retailer","Domain registered recently (check with a WHOIS tool)","No physical address, working phone number, or company registration number","Only accepts bank transfer, cryptocurrency, or gift cards","Product images are watermarked or belong to a known legitimate retailer","No genuine customer reviews on independent platforms like Trustpilot","Returns policy is missing or lists a non-existent address"],"whatToDoNow":["Do not place an order if you spot multiple red flags","Search for the store name plus 'scam' or 'review' before buying","Check the domain age at a free WHOIS service","If you already paid by card, contact your bank to dispute the transaction as soon as you suspect fraud","Report the fake store to the trading standards authority in your country","Report the social media ad that led you there to the platform"],"faq":[{"question":"Can a social media ad lead to a scam store?","answer":"Yes, frequently. Fraudsters buy paid ads on Instagram, Facebook, and TikTok targeting people interested in fashion, electronics, or pets. The platform does not vet the advertiser's store."},{"question":"What if I received something but it is counterfeit?","answer":"You are still entitled to a chargeback for 'goods not as described'. Contact your card issuer and report the counterfeit to your country's intellectual property enforcement body."},{"question":"Is a site secure if it has a padlock?","answer":"The padlock only means the connection is encrypted. Fake stores routinely have valid SSL certificates. Focus on domain age, contact details, and price plausibility."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-charity-appeal","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-charity-appeal","question":"How do I spot a fake charity appeal?","shortAnswer":"Fake charity appeals spring up after disasters and use emotional images and vague names to divert donations — verify the charity's registration number before giving.","explanation":"Fraudulent charity appeals are most common in the days immediately following a major disaster, conflict, or viral humanitarian story. Fraudsters register names that sound similar to well-known charities or invent entirely new ones. They use professionally edited images and social media shares to build credibility before legitimate organisations have had a chance to respond.\n\nA genuine registered charity in the UK has a charity number listed on the Charity Commission register (register-of-charities.charitycommission.gov.uk). In the US, charitable organisations must file with the IRS and most states — you can verify them at IRS Tax Exempt Organization Search or your state's charity registration database. If a collector or fundraising page cannot give you a registration number, treat it with caution.\n\nDonation method is another key indicator. Legitimate charities accept card payments through established platforms (JustGiving, GoFundMe, their own website) and provide a receipt. Requests for donation via gift card, cryptocurrency, direct bank transfer to a personal account, or cash-in-an-envelope are not how registered charities operate.\n\nEmotional manipulation is a core tactic. Fake appeals use extreme images, aggressive deadlines ('act in the next two hours'), and vague claims about how funds are used. Real charities explain their programmes, publish annual reports, and can tell you how a donation is allocated.","redFlags":["Charity name cannot be found on an official register (Charity Commission, IRS)","Fundraising page was created hours or days after a breaking news event","Donations requested via gift card, cryptocurrency, or personal bank account","No website, no physical address, no verifiable track record","Extremely emotive language with no programme or allocation detail","Collector pressures you to donate on the spot without time to verify"],"whatToDoNow":["Search the charity's name on your country's official charity register","Donate through the charity's own official website or a known platform like JustGiving","If you already donated to a suspicious appeal, report it to your charity regulator","Report fake charity pages to the fundraising platform (JustGiving, GoFundMe) directly","Alert the legitimate charity being impersonated so they can issue a warning"],"faq":[{"question":"Is GoFundMe safe for legitimate charity donations?","answer":"GoFundMe is a reputable platform but hosts personal campaigns that are not vetted charities. Always read the organiser's history and check for updates that show real relief activity."},{"question":"What if a colleague is collecting door-to-door?","answer":"Legitimate street and door-to-door fundraisers in the UK must carry a Local Authority licence or fundraising badge. Ask to see it, and verify the charity registration number before donating."},{"question":"Can I get a refund if I donated to a fake charity?","answer":"Rarely. Card chargebacks are possible if the donation was recent. Report the fraud to the Report Fraud service or the FTC so authorities can pursue the fraudster."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-job-recruiter","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-job-recruiter","question":"How do I spot a fake job recruiter?","shortAnswer":"Fake recruiters offer jobs with unusually high pay for minimal qualifications and eventually ask for fees or personal documents — legitimate employers never charge candidates to apply or onboard.","explanation":"Fraudulent job postings and fake recruiters target people who are actively job hunting and therefore highly motivated to engage. The initial contact usually comes via LinkedIn, Indeed, or email, and offers an attractive role with above-market salary and vague requirements. The 'recruiter' communicates urgently, skips normal interview steps, and extends an offer very quickly.\n\nThe scheme unfolds in one of two directions. In the fee-based version, you are told you need to pay for a background check, training materials, equipment, or a DBS certificate before you can start. Once paid, the recruiter disappears. In the data-harvesting version, you are asked to provide extensive personal details — passport scan, National Insurance or Social Security number, bank details for 'payroll setup' — which are then used for identity fraud.\n\nAuthentic recruiters and employers never ask candidates to pay fees. Background checks and DBS certificates are arranged by the employer at their cost after an offer. Payroll details are collected through official HR systems after you have verified your employment contract with a named company.\n\nVerify recruiter identity by looking them up on LinkedIn and checking that their profile has a plausible history and connections. Search the company name independently — do not click links the recruiter sends — and call the company's listed phone number to confirm the vacancy exists.","redFlags":["Salary far above market rate for the stated role and experience","Job offer extended without a proper interview","Request to pay fees for background checks, training, or equipment","Asks for passport scan, bank details, or National Insurance number before contract","Recruiter profile has few connections, no work history, or was created recently","Communication only on personal email or WhatsApp, not a company address","Vague job description that could apply to almost anyone"],"whatToDoNow":["Do not pay any upfront fee","Verify the recruiter on LinkedIn and check their employment history","Search the company name independently and call their listed number","Report fake job listings to the platform (LinkedIn, Indeed) and to Report Fraud (formerly Action Fraud) or the FTC","If you shared personal documents, consider placing a fraud alert with the credit bureaus","Warn others by leaving a review on a job site or scam-reporting portal"],"faq":[{"question":"Is it normal to interview only over text or chat?","answer":"Genuine employers at least video-interview candidates before offering a job. Text-only recruitment with a quick offer is a strong warning sign."},{"question":"What if the company name looks real?","answer":"Scammers use real company names. Always go to the company's website independently to verify they are hiring for the role described."},{"question":"What are 'work from home reshipping' job scams?","answer":"These ask you to receive parcels and forward them abroad, making you an unknowing money mule for goods purchased with stolen cards. Participation can lead to police investigation."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-romance-profile","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-romance-profile","question":"How do I spot a fake romance profile?","shortAnswer":"Fake romance profiles use stolen photos, claim to be abroad, quickly move to private messaging, and eventually ask for money — no legitimate partner needs funds before meeting you.","explanation":"Romance scams exploit the human desire for connection. A fraudster — often part of an organised criminal group — creates an attractive profile using photos taken from someone else's social media. They invest weeks or months building genuine emotional intimacy before the money request arrives. By then the victim is deeply attached.\n\nProfile images can be checked using Google Reverse Image Search or TinEye. If the same photo appears under a different name elsewhere online, the profile is using stolen images. However, some operations use AI-generated photos that do not appear in any database. In these cases you rely on other signals: inconsistencies in the backstory, a refusal to video call (or calls that are very brief with convenient technical problems), and a physical location that is always conveniently remote.\n\nThe money request follows a recognisable script. It may start small — a minor emergency, a sick relative, a plane ticket to finally visit you. Once paid, the story evolves and the requests escalate. In the 'pig butchering' variant, the romance leads to a fake investment opportunity where you are encouraged to commit increasingly large amounts before the platform vanishes.\n\nTrust your instincts. If someone you have only met online is professing strong love unusually quickly, refusing to video chat, or steering every conversation toward money, those are the hallmarks of a romance scam regardless of how genuine the messages feel.","redFlags":["Profile photo appears in reverse image search under a different name","Person claims to be working abroad in a high-status role (military, oil rig, doctor)","Moves very quickly to declarations of love and intense emotional bonding","Refuses or repeatedly cancels video calls","Asks for money for emergencies, travel, or investment","Suggests moving communication off the dating app to WhatsApp or email","Story has inconsistencies — ages, locations, or dates that do not add up"],"whatToDoNow":["Do not send money under any circumstances","Reverse image search their profile photos","Ask for a live video call — a genuine person will agree","Tell a trusted friend or family member and listen to their reaction","Report the profile to the dating platform","Report to the Report Fraud service (UK, formerly Action Fraud) or the FTC (US) — even if you did not lose money","If you sent money, contact your bank immediately and seek support from a victim helpline"],"faq":[{"question":"Can I be scammed by someone I have met in person once?","answer":"Yes. Some romance scammers do meet victims once, often to increase trust before escalating money requests."},{"question":"What is pig butchering?","answer":"Pig butchering is a romance-meets-investment scam: the fraudster slowly gains trust ('fattens you up'), then introduces a fake crypto or trading platform and encourages growing deposits before disappearing."},{"question":"Why do victims feel ashamed to report romance scams?","answer":"Scammers are professionals at emotional manipulation. Feeling deceived does not mean you were naive — these schemes succeed against intelligent, successful people. Reporting helps prevent more victims."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-crypto-exchange-email","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-crypto-exchange-email","question":"How do I spot a fake crypto exchange email?","shortAnswer":"Fake crypto exchange emails mimic real platforms to steal your login or trick you into sending funds to a 'verification wallet' — legitimate exchanges never ask you to send crypto to prove ownership.","explanation":"Cryptocurrency exchanges are a prime target for impersonation because their users hold significant assets and are accustomed to emails about deposits, withdrawals, and account security. Fraudsters send emails that look identical to communications from Coinbase, Binance, Kraken, or other major platforms, using copied logos, fonts, and formatting.\n\nThe two most common attack types are login phishing and 'wallet verification' fraud. In login phishing, the email claims your account has been suspended, a withdrawal was initiated, or unusual activity was detected. You are directed to a fake login page that captures your email, password, and two-factor code in real time, using them immediately to log in to the real exchange and drain your account.\n\nIn wallet verification fraud, the email claims your account requires verification and instructs you to send a small amount of cryptocurrency to a 'verification address'. This is pure theft — no legitimate exchange has ever asked users to send crypto to prove wallet ownership. Ownership is verified cryptographically through the platform, never by outbound transfer.\n\nCheck the sender domain carefully. Real exchanges use their own exact domain for all communications. A sender like security@coinbase-alert.com or no-reply@binance.security is not from the real company. The real domains are @coinbase.com and @binance.com. If in doubt, log in to the exchange by typing the URL yourself and check the notifications section there.","redFlags":["Sender domain is not the exchange's exact official domain","Email asks you to send cryptocurrency to 'verify' your wallet","Claims your account will be closed unless you act within hours","Login link goes to a domain that is not the exchange's official website","Requests your seed phrase, private key, or full password","Email came without you taking any action — unsolicited security alerts"],"whatToDoNow":["Do not click any links in the email","Log in to the exchange by typing its address directly in your browser","Check the exchange's official notification centre for any real alerts","Enable two-factor authentication if not already active","Report the phishing email to the real exchange's security team","If you entered credentials, immediately change your password and 2FA and move funds to a secure wallet"],"faq":[{"question":"Can two-factor authentication protect me from these attacks?","answer":"Partially. Some phishing attacks capture your 2FA code in real time and use it immediately. Use a hardware key (YubiKey) rather than SMS-based 2FA where possible."},{"question":"What if I already sent crypto to the verification address?","answer":"Cryptocurrency transactions are irreversible. Report the fraud to the exchange, Report Fraud, or the FTC. Recovery is not typically possible but reporting helps track criminal operations."},{"question":"Should I use the same email for my crypto account as everything else?","answer":"No. Using a unique email address for your exchange account means phishing attempts targeting it are easier to identify, as you rarely receive email there."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-paypal-email","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-paypal-email","question":"How do I spot a fake PayPal email?","shortAnswer":"Fake PayPal emails mimic payment notifications or security alerts to steal your login — check that the sender is @paypal.com and log in directly rather than through any link.","explanation":"PayPal is one of the most impersonated brands in phishing email campaigns. The platform's universal use makes the impersonation plausible to a wide audience. Fraudulent PayPal emails typically claim a payment was sent to you and you need to log in to accept it, that unusual activity was detected and your account is limited, or that a payment was made from your account and you should click to dispute it.\n\nA payment-notification phish is particularly effective in a commercial context: if you sell things online you are expecting payment notifications, so a convincing PayPal email in your inbox prompts immediate action. The link goes to a fake PayPal login page that captures your email and password.\n\nPayPal's real emails always address you by your full name as registered — not 'Dear Customer' or 'Dear PayPal User'. The sender domain is always @paypal.com, never @paypal-security.com, @my-paypal.com, or similar. Any link in a genuine PayPal email goes to paypal.com — hover over any link before clicking to see the destination.\n\nFor business sellers, fraudsters also send fake 'payment received' emails that mimic PayPal but ask you to ship the goods before the money clears. Always log in to your actual PayPal account to verify any payment before shipping.","redFlags":["Email addresses you as 'Dear Customer' rather than your name","Sender domain is not @paypal.com","Link in the email goes to any domain other than paypal.com","Email claims you received a payment you were not expecting","Urgency about account suspension or limited access","Asks you to provide card details or bank account to 'restore' your account"],"whatToDoNow":["Do not click any link in the email","Open PayPal in a new tab by typing paypal.com","Check your balance and notifications there directly","Forward the suspicious email to spoof@paypal.com","Delete the email after reporting it","If you entered your credentials, change your PayPal password immediately and check linked payment methods"],"faq":[{"question":"What if I got an email saying I received a large unexpected payment?","answer":"This is a common seller scam. Log in to paypal.com directly. If the money is not genuinely in your balance, the email is fake. Never ship goods based on an email alone."},{"question":"Does PayPal reimburse phishing victims?","answer":"PayPal's Purchase Protection covers buyers for items not received or significantly not as described. Phishing losses are not automatically covered but report the fraud to them anyway."},{"question":"Can I report the phishing email to PayPal?","answer":"Yes. Forward the email to spoof@paypal.com. PayPal investigates these and takes action against abusive domains."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-microsoft-email","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-microsoft-email","question":"How do I spot a fake Microsoft email or support call?","shortAnswer":"Fake Microsoft contacts claim your computer is infected or your account is blocked and push you to install remote-access software or buy gift cards — Microsoft never contacts you unsolicited about device problems.","explanation":"Microsoft impersonation runs across two channels: email phishing and unsolicited phone calls. The email variant typically claims your Microsoft account has been compromised, a subscription has renewed unexpectedly, or a device registered to you is showing warning signs. The call variant claims to be from 'Microsoft Support' and says your computer is sending error reports.\n\nIn the email version, you are directed to a fake Microsoft login page, or to a phone number staffed by the scammers. In the phone version, you are persuaded to install remote desktop software (AnyDesk, TeamViewer) so the fraudster can 'check your system'. Once connected, they show you false error screens from Windows Event Viewer, demand a fee, and sometimes steal stored passwords or install malware.\n\nMicrosoft's legitimate services contact you through notifications inside your Microsoft Account dashboard (account.microsoft.com) or through the Windows activation system, not unsolicited emails or cold calls. They never ask you to pay for virus removal via gift card, cryptocurrency, or wire transfer.\n\nIf you receive a call, hang up. If you receive an email, log in to account.microsoft.com in a new tab and check your security alerts there. Never install remote-access software at the request of a caller you did not initiate contact with.","redFlags":["Unsolicited phone call claiming to be from Microsoft about your computer","Email sender domain is not @microsoft.com","Caller or email asks you to install AnyDesk, TeamViewer, or similar software","Demands payment by gift card for 'tech support' or 'virus removal'","Pop-up or email claims your computer is 'blocked' and shows a phone number","Urgency about account suspension or device being hacked"],"whatToDoNow":["Hang up immediately if the call is unsolicited","Do not install any software the caller requests","Log in to account.microsoft.com directly to check your real account status","If you already granted remote access, disconnect the software and run Windows Defender full scan","Change all passwords on the device that was accessed","Report to the Report Fraud service (UK, formerly Action Fraud) or the FTC (US)"],"faq":[{"question":"What if I see a real Windows error message with a phone number?","answer":"Legitimate Windows error messages do not include phone numbers. A pop-up with a call-to-action phone number is a browser-based scareware page. Close it with Task Manager if needed."},{"question":"I already gave them remote access — what now?","answer":"Immediately disconnect (uninstall or close the remote software), then change all passwords, enable 2FA, and run a full antivirus scan. Monitor bank accounts for unauthorised activity."},{"question":"Can they actually see my computer is infected without access?","answer":"No. Cold callers claiming your computer is 'sending error signals to Microsoft' are lying. This is a script — they have no knowledge of your device."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-amazon-email","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-amazon-email","question":"How do I spot a fake Amazon email?","shortAnswer":"Fake Amazon emails claim your account is suspended or an order was placed in your name — always check your actual Amazon account rather than clicking any link in the email.","explanation":"Amazon is one of the most frequently impersonated brands in phishing attacks because nearly everyone has an account and expects to receive order or account emails. The fake versions mimic Amazon's visual design closely, using the familiar orange arrow logo and matching colour scheme.\n\nThe most common fakes fall into three types. Account-suspension phishing claims your account has been locked due to unusual activity and prompts you to click a 'verify account' link. Order phishing claims a suspicious purchase was made and invites you to dispute it via a link. Prime renewal phishing claims your membership renewal failed and you must update your payment method.\n\nAll three lead to fake Amazon login pages designed to steal your email, password, and ultimately your credit card details. The sender email is the clearest immediate signal: genuine Amazon emails come from domains like @amazon.co.uk, @amazon.com, or @amazon-order-notifications.com — Amazon does own several subdomains. Emails from @amazon-support-help.com, @amazon.security-check.net, or any hyphenated variant are not from Amazon.\n\nFor any account concern, close the email and go directly to amazon.com or the Amazon app. Check your orders and account settings there. Real suspension issues and billing problems will be visible in your account, not only in an email.","redFlags":["Sender domain is not an official Amazon domain","Email claims an order was placed that you do not see in your real account","Link goes to a domain other than amazon.com or amazon.co.uk","Email requests your full payment card details or password","Urgency about account closure unless you act in 24 hours","Email addressed to 'Dear Customer' rather than your name"],"whatToDoNow":["Close the email and go to amazon.com directly in your browser","Check 'Your Orders' and account notifications for any real issue","Forward phishing emails to stop-spoofing@amazon.com","If you entered your credentials, change your Amazon password and remove any unauthorised payment methods","Enable two-step verification on your Amazon account","Check your linked payment cards for unauthorised charges"],"faq":[{"question":"Amazon actually does use several email domains — how do I know which are real?","answer":"Amazon's official help centre lists all legitimate domains it uses, including amazon-order-notifications.com. If a domain is not listed there, do not trust it."},{"question":"What if the email contains my real name and partial order details?","answer":"Data breaches mean fraudsters sometimes have partial account information. A real name or order fragment does not confirm legitimacy — verify directly in your account."},{"question":"What is the gift card scam version of fake Amazon emails?","answer":"Some fake Amazon emails claim you must buy Amazon Gift Cards to restore your account or avoid a charge. Amazon never requires gift card purchases to resolve account issues."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-social-security-email","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-social-security-email","question":"How do I spot a fake Social Security Administration email or call?","shortAnswer":"The SSA never suspends your Social Security number by phone or email — any contact claiming your number has been deactivated is a scam.","explanation":"Social Security impersonation is one of the top scam categories in the United States. Fraudsters call or email claiming to be from the Social Security Administration and tell you that your Social Security number has been 'suspended' or 'compromised' and was used in criminal activity. They threaten arrest unless you confirm your details or make an immediate payment.\n\nThe Social Security Administration does not suspend Social Security numbers. It does not arrest people. It does not demand immediate payment in any form. When the SSA needs to contact you it sends a letter to your registered address and gives you time to respond. If it calls you at all (which is rare), it is usually in response to a request you made — never to threaten you.\n\nPayment requests reveal the scam clearly. The SSA has no mechanism to receive gift cards, cryptocurrency, wire transfers to foreign accounts, or money orders through unofficial channels. A government representative demanding any of these forms of payment is not a government representative.\n\nYou can verify your actual Social Security record through your my Social Security account at ssa.gov. The AARP Fraud Watch Network helpline (877-908-3360) provides free guidance for anyone who has received a suspicious contact.","redFlags":["Caller claims your Social Security number has been 'suspended' or 'deactivated'","Threatens arrest, deportation, or legal action unless you pay immediately","Requests payment by gift card, wire transfer, or cryptocurrency","Asks you to confirm your full Social Security number over the phone","Email sender is not from an @ssa.gov domain","Caller ID shows 'Social Security Administration' — this can be spoofed"],"whatToDoNow":["Hang up or delete the email without engaging","Verify your real Social Security status at ssa.gov","Report the contact to the SSA Office of Inspector General at oig.ssa.gov","File a report with the FTC at ReportFraud.ftc.gov","Tell elderly relatives — this scam disproportionately targets older adults","If you paid, contact your bank or the gift card issuer immediately"],"faq":[{"question":"Can the real SSA ever call me?","answer":"In limited circumstances the SSA may call if you have an existing claim, but it will never threaten arrest or demand payment. If unsure, hang up and call the SSA directly on 1-800-772-1213."},{"question":"I gave them my Social Security number — what should I do?","answer":"Place a fraud alert with the major credit bureaus (Equifax, Experian, TransUnion), file a report with the FTC, and monitor your credit report for new accounts opened in your name."},{"question":"Why does the caller ID show a government number?","answer":"Caller ID spoofing is trivially easy with VoIP technology. Seeing 'Social Security Administration' on caller ID is no evidence that it is a genuine call."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-phishing-email-in-general","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-phishing-email-in-general","question":"How do I spot a phishing email in general?","shortAnswer":"Phishing emails create false urgency, impersonate trusted brands, and contain links or attachments designed to steal your credentials or install malware — slowing down and checking the sender address protects you.","explanation":"Phishing emails work by exploiting the conditions most likely to make you act without thinking: urgency, authority, and fear. A well-crafted phishing email is indistinguishable from the real brand's communications in terms of logos and layout, which is why looking beyond the visual presentation is essential.\n\nThe first check is the sender's email address, not just the display name. A display name can read 'PayPal Security Team' while the actual address is paypal@security-updates-now.com. Click or tap on the sender name to reveal the full address. If the domain does not exactly match the company's official domain, treat the email with deep suspicion.\n\nNext, hover over any link without clicking. The URL shown at the bottom of your email client or browser reveals the true destination. Look for the actual domain at the end of the URL path — not in a subdomain or prefix. If you are unsure, do not click. Open the company's site in a separate tab by typing the address.\n\nAttachments in unexpected emails are equally dangerous. A PDF, Word document, or ZIP file from an unverified sender can contain malware that installs silently when opened. Be especially wary of files asking you to 'enable macros' or 'enable content' — this is a standard malware delivery mechanism.","redFlags":["Email creates extreme urgency — account will be closed, arrest is imminent, parcel on hold","Sender display name matches a known company but the email address domain does not","Link destination (shown on hover) goes to an unexpected domain","Generic greeting such as 'Dear User' or 'Dear Customer'","Unexpected attachment, especially one asking to enable macros","Grammar or spelling errors that a professional company would not have","Asks for your password, security questions, or full card number by email"],"whatToDoNow":["Do not click links or open attachments","Report the email to your email provider using the 'Report phishing' option","Forward UK phishing emails to report@phishing.gov.uk","Forward US phishing emails to phishing-report@us-cert.gov and to the brand being impersonated","Block the sender and delete the email","If you did click, change passwords for any account involved and enable 2FA"],"faq":[{"question":"Can a phishing email infect my device just by opening it?","answer":"Reading plain text emails is safe. Risk comes from clicking links or opening attachments. HTML email images can confirm your address is active, but do not install malware by themselves."},{"question":"My company has spam filters — can phishing still reach me?","answer":"Yes. Sophisticated phishing emails pass spam filters by using legitimate email infrastructure or clean domains. No filter is 100% effective."},{"question":"What is spear phishing?","answer":"Spear phishing targets a specific person using personalised details (your name, employer, recent activity) to seem more credible. The same verification steps apply: check the sender address and go to the site directly."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-utility-bill-scam","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-utility-bill-scam","question":"How do I spot a fake utility bill or energy scam email?","shortAnswer":"Fake energy and utility emails threaten supply disconnection unless you pay immediately through a link — real suppliers send paper bills and never cut supply without proper written notice.","explanation":"Energy and utility impersonation scams peak during periods of price volatility or following government subsidy announcements. Fraudsters send emails or texts purportedly from electricity, gas, or water suppliers claiming you have an overdue balance and your supply will be cut within hours unless you pay online immediately through the provided link.\n\nLegitimate utility suppliers follow a regulated disconnection process that involves multiple paper letters over weeks, not an immediate cut following a single email. In the UK, energy suppliers must follow Ofgem rules; in the US they are regulated by state commissions. Any claim that your electricity will be cut in 24 hours because of an email you just received does not reflect how utilities actually operate.\n\nA second variant exploits government energy rebate schemes. When subsidies are announced, fraudsters impersonate the energy company or even a government body and email you to 'apply' for a rebate, harvesting your bank details in the process. Legitimate rebates are applied to your account automatically or processed through channels your supplier confirms independently.\n\nVerify any overdue balance claim by logging in to your supplier's account portal through a bookmarked address, or by calling the number on a paper bill you have received in the post.","redFlags":["Threat of supply disconnection within hours via an email","Link in the email goes to a domain that is not your supplier's exact official site","Offer of a government energy rebate that requires your bank details","Sender address is not the official supplier domain","You have no overdue balance visible in your online account","Request to pay by bank transfer rather than through the account portal"],"whatToDoNow":["Log in to your supplier account directly through a bookmark or typed address","Call the supplier's official customer service number from a paper bill","Do not click the payment link in the suspicious email","Report energy scam emails to the National Cyber Security Centre (UK) or FTC (US)","If you paid, contact your bank immediately to dispute the transaction"],"faq":[{"question":"Do real energy suppliers ever email me about overdue bills?","answer":"Yes, but they always direct you to log in to your account portal — they do not provide a one-click payment link in the email. Verify the balance in your portal before paying anything."},{"question":"How do I claim a legitimate government energy discount?","answer":"In the UK, legitimate schemes like the Warm Home Discount are applied through your supplier directly — you do not need to enter bank details to claim them. Check gov.uk for official scheme details."},{"question":"What if I pay the wrong amount to a fake account?","answer":"Report to your bank immediately. Faster payments can sometimes be recalled within 24 hours. Also report to the Report Fraud service (UK) or the FTC (US)."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-job-offer-email","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-job-offer-email","question":"How do I spot a fake job offer email?","shortAnswer":"Fake job offer emails promise remote roles with high pay and ask for personal data or fees before employment — a real job offer comes after an interview and never requires an upfront payment.","explanation":"Unsolicited job offer emails claim to have found your CV and want to offer you an immediate position. The role sounds ideal — remote, well-paid, flexible — and the hiring process appears very straightforward. No traditional interview is required, often just a brief online questionnaire or a short text exchange with a 'hiring manager'.\n\nThe fraudulent intent emerges in two ways. First, the 'employer' may request personal documents — passport scan, proof of address, National Insurance or Social Security number — for 'background checks' or 'payroll setup' before any signed contract exists. These details are used for identity theft. Second, you may be asked to purchase equipment, pay for training, or buy a DBS check or work permit through a specific provider. These fees disappear with the job offer.\n\nA third variant is the cheque overpayment scheme: you are sent a cheque for your first month's salary plus a 'bonus' or 'equipment fund', asked to deposit it and wire a portion back. The cheque bounces days later, and you owe the full amount you wired.\n\nLegitimate employers conduct proper interviews, provide a formal contract before requesting sensitive documents, and never ask new employees to pay fees or purchase equipment through external links. Verify the company name independently and call their listed HR number before responding to any such email.","redFlags":["You did not apply for this role but received a direct offer","Salary is extraordinarily high for the role described","No proper interview — only a quick chat or online form","Asks for passport, bank details, or government ID before a contract exists","Requires payment for equipment, training, or certification through a specific vendor","Sends an overpayment cheque and asks you to forward the difference","Company cannot be verified through an independent web search"],"whatToDoNow":["Do not provide personal documents or pay any fee","Search the company name and job title independently to verify the role exists","Call the company's listed HR number — not a number in the email","Report the email to the Report Fraud service (formerly Action Fraud) or the FTC and to the job board it came from","If you already shared documents, file a fraud alert with credit bureaus","If you deposited a cheque, call your bank immediately before wiring any funds"],"faq":[{"question":"Can headhunters approach me without a prior application?","answer":"Yes, genuine headhunters do reach out on LinkedIn and by email. The difference is that a legitimate headhunter introduces the company, discusses the role in detail, and schedules a real interview — they never ask for fees or documents upfront."},{"question":"What if the company name is real but the email address looks off?","answer":"Fraudsters use real company names to gain credibility. Verify the job role on the company's actual careers page and call their switchboard to confirm the vacancy."},{"question":"What is a money mule job scam?","answer":"Money mule roles present as legitimate payment processing or logistics jobs. You are asked to receive money in your bank account and transfer it onward. This is money laundering and can lead to criminal prosecution."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-tech-support-pop-up","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-tech-support-pop-up","question":"How do I spot a fake tech support pop-up?","shortAnswer":"Fake tech support pop-ups display alarming security warnings with a phone number — legitimate security software never asks you to call a number to resolve a threat.","explanation":"Tech support pop-ups (also called scareware) appear in your browser as full-screen or near-full-screen warnings claiming your computer is infected with viruses, your data is being stolen, or your Windows licence has expired. They are designed to look like official Microsoft, Apple, or antivirus alerts. A loud alarm sound often accompanies the message to increase panic.\n\nThe pop-up instructs you to call a displayed phone number 'immediately' to receive help. If you call, the 'technician' will ask you to install a remote-access application (AnyDesk, TeamViewer, LogMeIn) so they can 'clean your computer'. They then show you genuine but harmless Windows logs as 'evidence of infection' and charge a fee — often several hundred pounds or dollars — for fake cleaning services.\n\nThese pop-ups are delivered through malicious advertising on legitimate websites (malvertising) or through visiting compromised sites. They are browser-based and do not mean your computer is infected. You can usually close them by pressing Escape, closing the browser tab with keyboard shortcuts (Ctrl+W), or using Task Manager to end the browser process if the page is truly locked.\n\nReal antivirus and security software notifies you through its own application interface, not through a browser pop-up with a phone number. Apple and Microsoft do not send security warnings to your browser with a call-to-action number.","redFlags":["Full-screen browser alert with a phone number to call","Warning accompanied by a loud alarm or siren sound","Message claims to be from Microsoft, Apple, or a named antivirus company","Pop-up cannot be closed by normal means (designed to feel locked)","Caller asks you to install remote access software","Fee demanded for virus removal or system cleaning"],"whatToDoNow":["Press Escape or Ctrl+W to close the tab — do not call the number","If the browser appears locked, use Task Manager (Ctrl+Shift+Esc) to end the browser process","Run a genuine antivirus scan (Windows Defender or a reputable third-party tool) for peace of mind","Clear your browser's cache and check your browser extensions for anything unfamiliar","Report the pop-up origin to the NCSC (UK) or IC3 (US)","If you already called and gave remote access, disconnect immediately, change all passwords, and run a full scan"],"faq":[{"question":"Does seeing the pop-up mean my computer is already infected?","answer":"Usually not. Pop-up scareware is delivered by malicious ads or compromised websites. Closing it and running a scan is normally sufficient."},{"question":"I cannot close the pop-up — has my browser been hacked?","answer":"No. Some scareware prevents normal closing using JavaScript. Press Ctrl+Shift+Esc to open Task Manager and end your browser process. Your files are safe."},{"question":"I paid over the phone — can I get the money back?","answer":"If you paid by card, contact your bank to dispute the charge as a fraudulent service. Report to the Report Fraud service or the FTC. Act within 24 hours for the best chance of recovery."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-lottery-email","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-lottery-email","question":"How do I spot a fake lottery or prize notification email?","shortAnswer":"You cannot win a lottery you never entered — any email claiming you have won a prize and asking for fees or bank details to release it is a scam.","explanation":"Advance-fee lottery fraud is one of the oldest email scams. The message congratulates you on winning a large prize — often from an international lottery, a brand promotion, or a charity raffle you have no memory of entering. To claim your prize, you are told you must pay a small processing fee, release tax, legal fee, or courier charge. Once paid, a new fee appears. The prize never arrives.\n\nThe 'brand promotion' variant impersonates well-known companies — Coca-Cola, Microsoft, Apple — claiming they selected your email address in a promotional draw. A related form uses a 'Google Lottery' or 'UN Lottery' premise. None of these run such promotions.\n\nThere are also prize emails that harvest personal information rather than fees. You are asked to confirm your identity to claim the prize, providing your date of birth, National Insurance number, bank account, and passport scan. These are used for identity fraud.\n\nLegitimate lotteries you did not enter do not pay prizes. Real brand promotions are advertised publicly, require entry, and do not contact winners by unsolicited email requesting fees. If you genuinely believe you may have won a competition you entered, contact the organiser through their official website — never through contact details in a prize email.","redFlags":["You have no recollection of entering the lottery or competition","Prize is very large (hundreds of thousands) with no public announcement","You must pay a fee, tax, or release charge to receive the winnings","Email address and name of the lottery cannot be verified through an independent search","Asks for your bank account to transfer winnings before you have verified legitimacy","Urgency: offer expires in 48 hours if you do not respond"],"whatToDoNow":["Delete the email without responding","Never pay any fee to 'release' a prize","Search the lottery name and 'scam' to see if others have reported it","Report to the Report Fraud service (UK, formerly Action Fraud) or the FTC (US)","If you paid fees, contact your bank and report to authorities"],"faq":[{"question":"What if the email claims I entered years ago and forgot?","answer":"Legitimate lottery operators do not hold unclaimed prizes indefinitely waiting to notify winners by email. This is a scripted line to overcome your scepticism."},{"question":"Can a winning notification ever be real?","answer":"If you genuinely entered an official national lottery (UK National Lottery, Powerball) and won, the operator contacts you through the official account you created — not by cold email. Verify at the operator's official website."},{"question":"What is a 'guaranteed prize' email?","answer":"Emails saying 'You are a guaranteed winner' and directing you to a website to 'claim' are either lead generation (you entered personal data for nothing) or outright fraud. Leave the page."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-investment-opportunity","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-investment-opportunity","question":"How do I spot a fake investment opportunity online?","shortAnswer":"Fake investments promise guaranteed above-market returns with no risk — no legitimate investment can guarantee profits, and any platform demanding secrecy or speed is a scam.","explanation":"Investment fraud has migrated substantially online, with fraudsters running professional-looking trading platforms, crypto investment sites, and forex bots that show compelling fake returns. The sites are sophisticated: they have charts, account dashboards showing your growing balance, and polished customer support. The 'returns' you see are entirely fictional numbers on a screen — no real investment is happening.\n\nThe recruitment often starts on social media or dating apps. Someone contacts you, builds a relationship or trust, then mentions how well they are doing with a particular platform. They offer to help you get started and guide your early trades. Returns look spectacular. You are encouraged to deposit more. When you eventually try to withdraw, the platform introduces fees, taxes, or minimum balance requirements. Finally it goes dark.\n\nPressure to act quickly is a universal tell. Legitimate financial advisers and regulated investment platforms give you time to read prospectuses, consider risks, and seek independent advice. A platform that says the opportunity closes tomorrow, or that you should not mention it to your bank or family, is removing the checks that would expose the fraud.\n\nIn the UK, check that any investment firm is authorised by the FCA using the Financial Services Register at register.fca.org.uk. In the US, check FINRA BrokerCheck and the SEC's investment adviser database. Investing through an unauthorised firm means you have no regulatory protection if things go wrong.","redFlags":["Guaranteed returns or 'no risk' claims — no legitimate investment guarantees profit","Returns far above what regulated markets offer","Pressure to invest quickly before the opportunity closes","Told to keep the investment secret from your bank or family","Withdrawal requests are refused or subjected to additional fees","Firm is not listed on FCA register (UK) or SEC/FINRA database (US)","Platform or adviser found through social media or a dating app"],"whatToDoNow":["Do not invest until you have verified FCA or SEC authorisation","Ask for a prospectus and read it before committing any money","Seek advice from an independent, regulated financial adviser","Report suspected unauthorised investment activity to the FCA (scamsmart.fca.org.uk) or SEC","If you already invested, contact your bank to explore chargeback options and report to authorities"],"faq":[{"question":"What is a Ponzi scheme?","answer":"A Ponzi scheme pays 'returns' to early investors using money from new investors rather than actual investment gains. It collapses when new money stops coming in."},{"question":"Can I recover money from an investment scam?","answer":"Recovery is difficult but not impossible. If you paid by card or bank transfer, report it immediately for a possible chargeback. Regulatory authorities sometimes run compensation schemes."},{"question":"What is clone firm fraud?","answer":"Clone fraud involves fraudsters copying the details of a legitimate FCA-authorised firm to appear official. Always call the real firm using numbers from the FCA register, not from the fraudster's communications."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-nft-or-crypto-airdrop","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-nft-or-crypto-airdrop","question":"How do I spot a fake NFT or crypto airdrop?","shortAnswer":"Fake airdrops and NFT giveaways ask you to connect your wallet and sign a transaction that drains your funds — no legitimate airdrop asks you to pay gas fees or approve outgoing transfers.","explanation":"Airdrop scams exploit the widespread practice in the crypto space of distributing free tokens to wallet holders to build community. Fraudsters announce a fake airdrop impersonating a well-known project and invite holders to 'claim' tokens. The claim process requires you to connect your wallet to a malicious site and sign a transaction. That transaction is not a claim — it is an approval for the fraudster's contract to transfer all the assets in your wallet.\n\nAnother variant sends unsolicited NFTs to your wallet. Merely receiving them is harmless, but the NFT's metadata contains a link to a site where you are prompted to 'list' or 'sell' it. That site again asks for a wallet connection and a blanket spend approval.\n\nThe gas-fee variant asks you to send a small amount of ETH or BNB first to 'activate' your claim. Once sent, the coins are gone. No legitimate airdrop requires you to pay anything or to sign an approval transaction that grants outbound access to your funds.\n\nVerify airdrops exclusively through the project's official website (typed manually or from a known bookmark) and its official Twitter/X or Discord announcements. Cross-check the contract address against the project's published addresses before signing anything. Use a separate wallet with minimal funds for interacting with new protocols.","redFlags":["Airdrop requires you to approve a transaction spending your existing tokens","You must pay gas or a fee before claiming free tokens","Announcement came via a DM, not official project channels","Website URL differs slightly from the official project domain","Transaction involves an unknown contract address not listed on the project site","Urgency: 'claim expires in 2 hours'"],"whatToDoNow":["Revoke any wallet approvals you signed immediately using a tool like Revoke.cash or Etherscan's token approval tool","Verify airdrops through the project's official website only","Report the fraudulent site to MetaMask or your wallet provider","Report crypto fraud to the Report Fraud service (UK, formerly Action Fraud), the FTC or IC3 (US), and the project's security team","Move remaining assets to a fresh wallet address if you connected a compromised wallet"],"faq":[{"question":"Can I safely view an unsolicited NFT in my wallet?","answer":"Viewing it in your wallet is generally safe. The risk is clicking any link embedded in the NFT metadata or on a connected marketplace. Never interact with unsolicited NFTs."},{"question":"What is a wallet-drainer?","answer":"A wallet-drainer is a malicious smart contract that, once approved, can transfer ERC-20 tokens or NFTs out of your wallet. The approval you sign is what grants the permission."},{"question":"How do I check what approvals my wallet has granted?","answer":"Use Revoke.cash or Etherscan's Token Approval Checker. Connect your wallet and revoke any approvals from contracts you do not recognise."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-rental-listing","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-rental-listing","question":"How do I spot a fake rental property listing?","shortAnswer":"Fake rental listings use photos from real properties, offer below-market rents, and ask for a deposit before you have viewed the property in person — never pay before an in-person viewing.","explanation":"Rental fraud is rampant on classifieds sites, Facebook groups, and even on platforms like Zillow or Rightmove where fraudsters list properties that are not theirs. They copy photos and descriptions from genuine listings and undercut the real market rent to attract large numbers of enquiries. The listings often claim the landlord is abroad and cannot show the property in person.\n\nThe deposit scam works in two stages. First, the fraudster builds enough rapport to make the deal feel legitimate — descriptions are detailed, communication is friendly, references to the neighbourhood are specific. Then they ask for a holding deposit to 'secure' the property, often explaining that other applicants are competing. Once paid (usually by bank transfer or gift card), the landlord becomes unavailable and the listing disappears.\n\nVerify listings through reverse image search: paste the main property photo into Google Images or TinEye and check whether it appears under other addresses or listings. If the same photos appear for a different property or city, you are looking at a stolen listing.\n\nFor any rental, insist on an in-person viewing before paying anything. See the landlord's proof of ownership (title deeds or mortgage statement). In the UK, a legitimate landlord or letting agent should be registered with a redress scheme. In the US, verify ownership through county property records.","redFlags":["Rent is significantly below comparable properties in the area","Landlord claims to be abroad and cannot show the property in person","Photos appear in reverse image search under a different address","Requests a holding deposit before any viewing has taken place","Insists on payment by bank transfer, cryptocurrency, or gift card","Listing contains unusually urgent language about multiple competing applicants"],"whatToDoNow":["Refuse to pay any deposit without an in-person viewing","Reverse image search all property photos","Verify the landlord's ownership through local land registry or county records","Report fake listings to the platform they appeared on","Report to the Report Fraud service (UK, formerly Action Fraud) or the FTC (US)","If you paid a deposit by bank transfer, contact your bank within 24 hours for a possible recall"],"faq":[{"question":"Is it safe to pay a holding deposit by bank transfer?","answer":"Only if you have physically viewed the property and verified the landlord's ownership. Never pay a deposit without both steps."},{"question":"What if the listing is on a reputable platform?","answer":"Platforms like Rightmove and Zillow allow agents and landlords to post listings but do not independently verify every property. Fraudsters exploit this."},{"question":"What rights do I have if I lose a deposit to fraud?","answer":"Report to your bank immediately as an authorised push payment fraud — UK banks have reimbursement codes that may cover your loss. In the US, contact the FTC and your state attorney general."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-visa-or-immigration-agent","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-visa-or-immigration-agent","question":"How do I spot a fake visa or immigration agent?","shortAnswer":"Fake immigration agents promise guaranteed visas, charge high fees, and either disappear or file applications that were never valid — use only lawyers or advisers registered with the relevant authority.","explanation":"Immigration fraud exploits vulnerable people in high-stakes situations — those who urgently need visas, work permits, or asylum support. Fraudsters pose as immigration lawyers, consultants, or agents who can guarantee outcomes that the real immigration system cannot guarantee. They charge large upfront fees and either vanish, submit a fraudulent or incomplete application in your name, or string you along with invented delays.\n\nIn the UK, anyone who gives immigration advice for payment must be registered with the Office of the Immigration Services Commissioner (OISC) or be a solicitor, barrister, or regulated legal professional. You can search for registered advisers at gov.uk/find-an-immigration-adviser. Anyone operating outside this framework is breaking the law, and any advice or application they submit may damage your real case.\n\nIn the US, only immigration attorneys (licensed state bar members) and accredited representatives (approved by the Department of Justice Board of Immigration Appeals) may charge for immigration help. Notarios publicos in Latin American countries have legal status — in the US they do not, and they frequently impersonate lawyers and cause irreparable harm to applications.\n\nRed flags include guarantees of visa success, demands for original documents that are then held as leverage, requests for payment in cash only, and no written contract. Before paying anyone, verify their credentials through the official regulator.","redFlags":["Agent 'guarantees' a visa or positive outcome — no legitimate adviser can guarantee this","Not listed on OISC register (UK) or EOIR accreditation list (US)","Asks for original documents such as passports without providing a receipt","Charges in cash only and refuses to provide a written contract","Cannot name a specific application category or legal basis for your case","Uses social media ads or door-knocking to solicit clients"],"whatToDoNow":["Verify the adviser on the OISC register (UK) or EOIR accreditation list (US) before paying","Always get a written contract listing fees, services, and timelines","Keep copies of all documents — never hand over originals without a signed receipt","Report unregistered advisers to the OISC (UK) or contact a legitimate immigration lawyer","If you have already paid and suspect fraud, contact the immigration authority directly about your case status"],"faq":[{"question":"Is a 'notario' in the US the same as a notary public?","answer":"No. In the US, a notary public can only certify document signatures — they cannot provide legal advice. The term 'notario' is used to mislead Spanish-speaking communities into thinking they have qualified legal representation."},{"question":"Can I submit a visa application myself?","answer":"Yes, for most standard visa categories you can apply directly through the government's official visa portal without using an agent. This is often the safest option."},{"question":"What if a fake adviser already submitted an application in my name?","answer":"Contact the relevant government immigration body immediately. In some cases fraudulent or badly prepared applications can be withdrawn; in others you may need a qualified lawyer to remedy the situation."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-health-supplement-store","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-health-supplement-store","question":"How do I spot a fake health supplement or medical product website?","shortAnswer":"Fake health supplement sites sell counterfeit or unregulated products with exaggerated medical claims — verify that supplements are properly registered and sold by a licensed retailer before buying.","explanation":"The online market for vitamins, supplements, and alternative health products is large and lightly regulated, making it attractive to fraudsters who sell counterfeit, adulterated, or entirely fabricated products. Fake sites may clone the branding of well-known supplement brands or invent new ones with scientific-sounding names and official-looking certifications that do not exist.\n\nThe most dangerous category is counterfeit prescription medicines. Sites selling prescription drugs without requiring a valid prescription are operating illegally in most jurisdictions. The tablets may contain no active ingredient, wrong dosages, or genuinely harmful substances. Many such sites use spam email, social media ads, and search engine results to find customers.\n\nVerification steps are straightforward. In the UK, legitimate online pharmacies display a registered pharmacy logo that links to the General Pharmaceutical Council register — clicking it confirms the pharmacy is real. In the US, look for the VIPPS (Verified Internet Pharmacy Practice Sites) seal from NABP. Any site selling prescription medicines without these marks should be avoided.\n\nFor supplements specifically, exaggerated health claims ('cures cancer', 'burns 30lbs in a week') are illegal and a mark of either fraudulent products or unlicensed operations. Genuine supplement companies make qualified claims within regulatory guidelines.","redFlags":["Claims to cure or treat specific diseases — supplements cannot legally make these claims","Sells prescription medication without a prescription","No registered pharmacy seal or the seal link does not go to an official register","Price dramatically lower than established retailers","Poorly designed website with no physical address, registration number, or phone number","Checkout only accepts bank transfer or cryptocurrency"],"whatToDoNow":["Verify online pharmacy registration on the GPhC register (UK) or NABP VIPPS list (US)","Purchase supplements from established retailers or directly from the manufacturer's official website","Report illegal prescription drug sites to the MHRA (UK) or FDA (US)","If you took a product and experienced side effects, seek medical advice and report to your national medicines regulator"],"faq":[{"question":"Are all cheaply priced supplements fake?","answer":"Not necessarily — genuine retailers run sales. But if the price is far below all other legitimate retailers and the site lacks verifiable credentials, the risk is high."},{"question":"What is a GPhC logo and how do I verify it?","answer":"The GPhC (General Pharmaceutical Council) provides a logo to registered online pharmacies. Clicking it takes you to their register confirming the pharmacy. If the logo is just an image with no clickable verification, it is fake."},{"question":"Can counterfeit supplements be dangerous?","answer":"Yes. Counterfeit products have been found to contain incorrect ingredients, harmful contaminants, or undisclosed pharmaceutical substances. Always buy from verified sources."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-insurance-policy","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-insurance-policy","question":"How do I spot a fake insurance policy?","shortAnswer":"Fake insurance policies accept your premium but issue worthless documents — verify that your insurer is authorised by the FCA (UK) or state regulator (US) before paying.","explanation":"Ghost broking is the most common form of insurance fraud affecting consumers directly. A fake broker — often operating through social media or classified ads — offers unusually cheap car, travel, or home insurance. They either issue a completely forged policy document, buy a genuine policy but immediately cancel it after pocketing your payment, or enter false information to get a cheap genuine quote they then mark up.\n\nThe consequence becomes apparent when you make a claim or are stopped by police and your policy is found to be invalid. A ghost-brokered car insurance policy means you have been driving uninsured even though you believed yourself to be covered. For travel insurance, a fake policy means your medical costs abroad are not covered.\n\nAuthorisation is the key check. In the UK, all insurance brokers must be authorised by the FCA — verify at register.fca.org.uk. For motor insurance specifically, verify your policy on the Motor Insurers' Bureau database (askMID.com) after purchase: it should appear within 48 hours. If it is not on there, something is wrong. In the US, check your state insurance department's website to verify insurer licensing.\n\nPrices well below the market average and pressure to pay in cash or by bank transfer are consistent red flags. Legitimate insurers accept card payment and provide policy documents from a named, authorised entity.","redFlags":["Premium dramatically below every legitimate quote you received","Insurer or broker not listed on the FCA register or state insurance department list","Policy documents arrive as editable Word files or contain poor formatting","Broker insists on cash or bank transfer payment only","Policy does not appear on the Motor Insurance Database within 48 hours","Broker found through social media or WhatsApp rather than an established comparison site"],"whatToDoNow":["Check the broker and insurer on the FCA register (UK) or state regulator (US) before paying","For car insurance, check askMID.com a day or two after purchase to confirm it is registered","Do not accept edited Word documents as policy proof — demand formal PDF documents","Report ghost brokers to the Insurance Fraud Bureau (UK) via Cheatline 0800 422 0421","If you discover your policy is fake, purchase genuine cover immediately to avoid driving uninsured"],"faq":[{"question":"What is ghost broking?","answer":"Ghost broking involves fraudsters selling fake or cancelled insurance policies, usually below market price. Buyers believe they are insured but are not, which can lead to criminal prosecution for driving without insurance."},{"question":"Can a comparison site link to a ghost broker?","answer":"Legitimate comparison sites like Compare the Market, GoCompare, and MoneySuperMarket only list FCA-authorised providers. Ghost brokers typically operate off-platform through social media."},{"question":"I already made a claim and the insurer does not exist — what do I do?","answer":"In the UK, you may be able to claim through the Financial Services Compensation Scheme if an authorised insurer goes insolvent. Report the fraud to the IFB and Report Fraud immediately."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-pet-listing","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-pet-listing","question":"How do I spot a fake pet sale or puppy scam listing?","shortAnswer":"Fake pet listings show adorable photos and low prices but require upfront deposits before you have seen the animal in person — never pay for a pet you have not met.","explanation":"Pet fraud surged during periods of increased demand for companion animals. Fraudsters create listings on classified sites and Facebook groups with photos of puppies or kittens that are either stock images, stolen from legitimate breeders, or AI-generated. They advertise below typical market prices to attract volume. Once you make contact, they collect a deposit to 'reserve' the animal.\n\nAfter the deposit, complications emerge: the animal needs vaccinations, the transport company has a fee, a crate must be purchased. Each story generates a new payment request. The animal never arrives. In some cases the fraudster uses a real animal photographed and then re-listed repeatedly, collecting deposits from multiple victims simultaneously.\n\nVerify the seller by asking for a video call showing the specific animal being sold alongside a live identifier — hold up a piece of paper with your name on it, or ask them to show a current newspaper. A genuine breeder will do this without hesitation. A fraudster will make excuses.\n\nFor registered breeders, verify Kennel Club registration in the UK or AKC papers in the US. Puppies should only be sold from 8 weeks of age, and a reputable breeder will invite you to visit before any payment is made. Any breeder who will not allow a visit is a major red flag.","redFlags":["Seller refuses or cannot arrange an in-person viewing","Photo reverse image search shows the same animal listed elsewhere or as a stock photo","Price significantly below the typical market rate for the breed","Requires a deposit by bank transfer before you have seen the animal","Post-deposit requests for additional transport, vaccination, or crate fees","Seller claims to be moving abroad or gives a sad backstory to pressure a quick purchase"],"whatToDoNow":["Do not pay any deposit without meeting the animal in person","Reverse image search all photos of the animal","Ask for a live video call with identifying proof","Report fake listings to the platform and to the RSPCA or ASPCA","Report to the Report Fraud service (UK, formerly Action Fraud) or the FTC (US)","If you paid a deposit, contact your bank immediately for possible recall"],"faq":[{"question":"What if the seller says they are a licensed breeder?","answer":"Ask for the Kennel Club or AKC registration number and verify it directly on those organisations' sites. A genuine number is a much stronger signal than a claim alone."},{"question":"Is it safe to buy a pet through an online marketplace?","answer":"Platforms like Pets4Homes and Gumtree list legitimate sellers but cannot vet every listing. Always meet the animal in person. The same applies to social media group listings."},{"question":"What is Lucy's Law?","answer":"Lucy's Law (UK, 2020) bans third-party pet sales of puppies and kittens under six months. Legitimate sellers must be the breeder or an approved rescue centre. Any third-party seller is operating illegally."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-student-loan-relief-offer","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-student-loan-relief-offer","question":"How do I spot a fake student loan relief or forgiveness offer?","shortAnswer":"Fake loan relief companies charge upfront fees to access forgiveness programmes that are free to apply for directly — never pay a third party to lower or discharge your federal student loans.","explanation":"Student loan debt affects millions of people, making them a prime target for third-party companies that promise faster relief, access to 'secret' forgiveness programmes, or help navigating forgiveness applications. In reality, all US federal student loan forgiveness programmes — Public Service Loan Forgiveness, income-driven repayment forgiveness, and any broad relief — are administered free of charge through your loan servicer or directly at studentaid.gov.\n\nFraudulent companies charge upfront fees of hundreds or even thousands of dollars. They may ask you to sign a power of attorney so they can communicate with your servicer on your behalf, then redirect your loan payments to themselves. They may also promise outcomes that do not exist — complete discharge for private loans, guaranteed approval for PSLF — and do nothing while collecting fees.\n\nYour loan servicer (MOHELA, Nelnet, Aidvantage, etc.) is required to help you enrol in forgiveness programmes and income-driven repayment plans at no charge. The official portal is studentaid.gov. Any website that is not studentaid.gov and promises to 'apply for you' for a fee is unnecessary at best and fraudulent at worst.\n\nIf you have already signed an agreement with a third party, you can revoke any power of attorney with your servicer, update your contact information, and cancel the payment arrangement.","redFlags":["Charges an upfront fee to apply for forgiveness or repayment plans that are free","Claims to have exclusive access to programmes or knowledge your servicer does not","Asks you to sign a power of attorney to manage your loan on your behalf","Promises guaranteed loan discharge for private loans","Asks you to redirect loan payments to a third-party account","Website is not studentaid.gov but claims to be affiliated with the Department of Education"],"whatToDoNow":["Apply for any federal forgiveness programme directly at studentaid.gov — it is free","Revoke any power of attorney filed with your servicer","Report the company to the CFPB at consumerfinance.gov and to your state attorney general","If you paid fees, attempt a credit card chargeback for 'services not as described'","Contact your servicer to update your contact address and payment account details"],"faq":[{"question":"Are there any legitimate student loan relief companies?","answer":"Non-profit credit counsellors and some HUD-approved agencies provide free financial guidance. You should never pay upfront fees to a for-profit company to access government programmes."},{"question":"Can private student loans be forgiven?","answer":"Private loans are not eligible for federal forgiveness programmes. Any company claiming to forgive private loans through a federal programme is either misinformed or fraudulent."},{"question":"What is a student loan servicer and how do I contact mine?","answer":"Your servicer is the company assigned to manage your federal loans. Log in to studentaid.gov to see who your servicer is and find their official contact details."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-social-media-giveaway","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-social-media-giveaway","question":"How do I spot a fake social media giveaway?","shortAnswer":"Fake giveaways impersonate celebrities or brands, ask you to share, follow, and enter personal details, then harvest data or charge a 'shipping fee' for the prize — real brand giveaways never require payment.","explanation":"Social media giveaway fraud works in two ways. In the data-harvesting version, a fake account mimicking a celebrity, influencer, or brand posts a giveaway that asks you to follow, share, and comment — sometimes also to fill in an external form with your name, email, phone number, and address. These details are sold as leads or used for targeted phishing.\n\nIn the fee-based version, winners are 'selected' and contacted via DM. They are told they have won a prize but must pay a small shipping or customs fee to receive it. Once paid, the fraudster disappears. Some victims are charged repeatedly with escalating justifications before they realise no prize exists.\n\nVerify giveaways through the official account of the brand or celebrity. A verified blue tick alone is not sufficient — verified accounts get hacked and fake accounts sometimes obtain verification. Look at the account history, follower count, and whether the post links back to an official website. Real brand giveaways are announced through official press releases or the brand's website, not only through a single social media post.\n\nNever pay shipping or customs fees to receive a prize. Genuine giveaway organisers absorb these costs. Any request for payment after 'winning' means the giveaway was fraudulent.","redFlags":["Account has few posts, low engagement relative to follower count, or was created recently","Winner must pay shipping or handling fees to receive the prize","Giveaway asks for financial details or government ID to 'verify' you","Post uses urgent language: 'last chance', 'winner must respond in 24 hours'","Link in the post goes to an external site unrelated to the brand","External site asks you to complete surveys, download apps, or enter payment details"],"whatToDoNow":["Do not pay any fee to claim a prize","Verify the account against the brand's official website or known verified account","Report the fake account to the social media platform","Report to the Report Fraud service (UK, formerly Action Fraud), the FTC (US), or relevant national authority","If you entered personal details, be alert for follow-on phishing using that information"],"faq":[{"question":"Can a hacked celebrity account run a real giveaway?","answer":"Celebrities do run genuine giveaways, but they never require payment and are always announced across multiple channels simultaneously. A DM out of the blue saying you won is a scam."},{"question":"What if the giveaway only asked for my email?","answer":"Your email can be used for phishing and sold as a marketing lead. Use a separate disposable email address for any giveaway entry to limit exposure."},{"question":"Are Instagram giveaways regulated?","answer":"In many countries, prize promotions must follow rules (UK CAP code, US FTC guidelines) requiring clear terms, a genuine selection process, and no purchase necessary. Fake giveaways ignore these requirements."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-subscription-cancellation-email","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-subscription-cancellation-email","question":"How do I spot a fake subscription cancellation or renewal email?","shortAnswer":"Fake subscription emails claim a large auto-renewal is about to charge and ask you to call or click to cancel — they are phishing for your card details or bank login.","explanation":"Subscription renewal phishing exploits the fact that most people have multiple subscriptions they cannot easily track. The fraudulent email claims that your account — for a VPN, antivirus package, or technical support membership — is about to auto-renew for a large amount (often several hundred pounds or dollars). The amount is large enough to cause alarm but not so extreme as to be obviously fake.\n\nYou are given a phone number to call to cancel. When you call, a 'customer service agent' asks you to log in to your bank account to process the cancellation, or guides you to a website where you enter your card number to receive a 'refund'. Both paths give the fraudster your financial credentials.\n\nAn alternative version includes a link that goes to a fake cancellation portal requiring your card details to 'verify your identity'. Some variants ask you to install remote-access software so the agent can 'process the cancellation directly from their system'.\n\nCheck your actual subscriptions in your account settings for the service named. If you do not have a subscription to the named service, the email is certainly fraudulent. If you do have a subscription, cancel it through the service's own website — never by calling a number from an email.","redFlags":["Large auto-renewal amount you do not recognise","Asks you to call a phone number to cancel","Cancellation link goes to a domain unrelated to the named service","Asks for your card number or bank login to process a 'refund'","Sender email domain does not match the named service's official domain","Service you 'subscribed to' is one you have no account with"],"whatToDoNow":["Check your real subscriptions in your account settings for the named service","Do not call any number listed in the email","Cancel subscriptions directly through the official website you access by typing the address","Report the phishing email to the brand being impersonated and to your email provider","If you gave card details, contact your bank to cancel the card and dispute any charges"],"faq":[{"question":"How do I check what I am actually subscribed to?","answer":"On iOS: Settings > your name > Subscriptions. On Android: Google Play > Profile > Payments and subscriptions. On a computer: check your email for historical subscription confirmations."},{"question":"What if I never subscribed but received this email?","answer":"It is almost certainly phishing. Mark it as spam. A company cannot bill you for a subscription you never established."},{"question":"Is it ever safe to call a number in an email?","answer":"Very rarely. If you must call, search for the company's phone number independently on their official website rather than using any number from the email."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-gaming-item-store","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-gaming-item-store","question":"How do I spot a fake gaming item or skin store?","shortAnswer":"Fake gaming item stores steal your account credentials or take payment for items that never arrive — only buy in-game items through official in-game stores or verified marketplace platforms.","explanation":"The market for in-game cosmetics, skins, and items in games like CS2, Fortnite, and FIFA Ultimate Team is enormous, creating a large shadow market of unofficial sellers. Fraudulent third-party sites exploit this by offering items at discount prices, requiring you to log in with your Steam, Epic Games, or EA account credentials. Once entered, those credentials are harvested and used to take your account and any valuable items it holds.\n\nSome sites go further with a trade-scam approach: you list an item to sell and the buyer proposes a trade through the game's official system but with a substituted item in the final confirmation — relying on you accepting quickly without reading the details. Others operate as simple fake storefronts: you pay, receive a tracking number that goes nowhere, and the item or currency never arrives.\n\nThe 'free skin generator' variant asks for your account credentials to 'generate' items that do not exist through official means. No third-party website can add items to your game account by knowing your username and password — this is simply not how game servers work. Any tool claiming otherwise is a credential phishing tool.\n\nOnly buy in-game currency and items through the official in-game store or the game publisher's website. If you use peer-to-peer trading platforms, use well-established ones with escrow services and a verifiable reputation, and always carefully read trade confirmation screens before accepting.","redFlags":["Requires your actual game account login credentials","Claims to be a 'free skin generator' or 'coin generator'","Prices dramatically below the in-game store or major trading platforms","Recently registered domain with no community reputation","Checkout accepts only cryptocurrency or gift cards","No terms of service, refund policy, or contact information on the site"],"whatToDoNow":["Change your game account password immediately if you entered it on a suspicious site","Enable two-factor authentication on your game account","Check for unauthorised purchases through the publisher's account management page","Report the fake site to the game publisher's security team","Report to the Report Fraud service (UK, formerly Action Fraud), the FTC (US), or your gaming platform's fraud team"],"faq":[{"question":"Is Steam Community Market safe?","answer":"Steam's own Community Market and Trade system is legitimate, but third-party sites that require you to enter your Steam credentials are not. Always log in to Steam directly at steampowered.com."},{"question":"What if I fell for a trade scam and lost an expensive item?","answer":"Steam trades are generally irreversible. Report the trade scammer to Steam Support and to Valve; they maintain anti-fraud databases and may be able to restrict the receiving account."},{"question":"Can game publishers ban my account for using third-party trading sites?","answer":"Yes. Many publishers' terms of service prohibit unauthorised trading. Beyond the ban risk, unauthorised sites expose you to theft."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-travel-booking-site","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-travel-booking-site","question":"How do I spot a fake travel booking website?","shortAnswer":"Fake travel sites offer extremely cheap flights or hotels, charge your card, and issue worthless or non-existent booking confirmations — use ATOL-protected agencies or book directly with carriers.","explanation":"Fraudulent travel booking websites mimic well-known comparison and booking platforms to sell non-existent or already-cancelled holiday packages, flights, and hotels. After payment you receive a confirmation that looks genuine. The problem surfaces when you contact the airline or hotel directly, or arrive at your destination, and discover no booking exists.\n\nThe sites are often discovered through sponsored search results or social media ads. They are designed to appear immediately above genuine results, and the URL may look plausible at first glance. Prices are set just low enough to be enticing but not so low as to be obviously fraudulent.\n\nIn the UK, travel agents selling package holidays must hold ATOL protection (Air Travel Organiser's Licence), and you should receive an ATOL certificate at the time of booking. The ATOL number can be verified at the CAA website (caa.co.uk). Booking flights only (not packages) directly with the airline removes middlemen entirely.\n\nAlways search the agency name before booking. Sites like Trustpilot and Which? carry reviews from genuine customers. A booking agent with no reviews or with reviews that all appeared in a short window and are uniformly glowing should be verified more carefully.","redFlags":["Prices significantly below all other legitimate booking platforms","No ATOL certificate offered for package holidays (UK)","Website has no physical address, company registration number, or landline phone number","Booking confirmation cannot be verified by the airline or hotel directly","Payment only accepted by bank transfer","Domain registered very recently or using an unusual TLD"],"whatToDoNow":["Verify any booking directly with the airline or hotel using their official website or phone number","Check the agency's ATOL number at caa.co.uk (UK) before paying","For card payments, contact your bank immediately if the booking is unverifiable","Report fake travel sites to the CAA (UK), FTC (US), or national consumer authority","If you are already abroad with no valid accommodation, contact the local tourist authority for emergency assistance options"],"faq":[{"question":"Is booking.com a safe platform?","answer":"Booking.com is a legitimate, established platform. Scams on it typically involve individual property owners listing fake accommodation — Booking.com provides dispute resolution in those cases."},{"question":"What does ATOL protection actually cover?","answer":"ATOL covers you if an ATOL-licensed travel company fails financially. It does not cover fraud by a completely unauthorised company — which is why verifying the ATOL number before booking is essential."},{"question":"Can I get a chargeback for a fraudulent travel booking?","answer":"Yes, for card payments you can typically dispute via your card's chargeback process on grounds of 'goods not as described' or 'services not received'. Act as soon as you discover the fraud."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-ticket-seller","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-ticket-seller","question":"How do I spot a fake ticket seller or event ticket scam?","shortAnswer":"Fake ticket sellers offer sold-out or premium tickets that turn out to be counterfeit, duplicated, or non-existent — only buy from official box offices or verified secondary market platforms.","explanation":"Event ticket fraud peaks around popular concerts, sports finals, and festivals that sell out quickly. Once tickets are sold out officially, demand for secondary market tickets is high and prices rise significantly. Fraudsters exploit this by advertising non-existent tickets on classified ad sites, Facebook groups, and Twitter, often at face value or slightly above to seem like a genuine favour.\n\nCounterfeit tickets are another common problem: high-quality print fakes or digitally manipulated barcodes. At the venue, the scanner rejects the barcode or the first person who used it already entered. Duplicated tickets are equally problematic — a real ticket sold to multiple buyers, only the first of whom gains entry.\n\nThe safest purchases are from the official box office or the event promoter's designated resale partner. Fan-to-fan resale platforms that hold the seller accountable (Twickets, AXS Official Resale, Ticketmaster Fan-to-Fan) offer more protection than private sales. No ethical seller will pressure you into an immediate cash transfer without giving you any way to verify the ticket first.\n\nFor digital tickets, request to see the ticket in the original app (Ticketmaster, AXS) before paying. Screenshots of tickets are trivially easy to fake. If the seller cannot show you a live barcode on the app, do not buy.","redFlags":["Seller insists on bank transfer or cash and will not use a secure platform","Ticket provided only as a screenshot rather than in an official app","Seller cannot show the ticket on the original ticketing app live on camera","Price seems oddly low for a high-demand, sold-out event","No verifiable identity for the seller and communication only via private message","Seller is extremely urgent and says another buyer is waiting"],"whatToDoNow":["Buy only from official box offices or the event's authorised resale partner","Ask to see the ticket live on the ticketing app via video call before paying","If you paid and were defrauded, report to the Report Fraud service (UK, formerly Action Fraud) or the FTC (US)","Contact your bank if you paid by card to dispute the transaction","Report the seller's listing to the platform it was posted on"],"faq":[{"question":"What is a legitimate secondary ticket market?","answer":"Platforms like Twickets and Ticketmaster Fan-to-Fan cap resale prices at face value and verify sellers. They offer refunds if tickets are invalid. These differ from unregulated classified ads."},{"question":"Can I tell if a ticket barcode is genuine before attending?","answer":"Some official apps let you verify the event and seat allocation before the door opens. Check the event's FAQ or the ticketing company's help centre for their verification tools."},{"question":"My ticket was rejected at the door — what can I do?","answer":"If bought through an authorised resale platform, contact their support immediately — many have guarantees and replacement processes. If bought privately, report to the Report Fraud service and your bank."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-mlm-business-opportunity","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-mlm-business-opportunity","question":"How do I spot a fake MLM or pyramid scheme opportunity?","shortAnswer":"Pyramid and MLM scams promise income primarily through recruiting others rather than selling products — if the money flows from recruitment not sales, it is not a legitimate business.","explanation":"Multi-level marketing (MLM) and pyramid scheme recruitment typically arrives through social media messages, networking events, or connections who appear to be doing very well financially. The pitch emphasises financial freedom, flexible hours, and being your own boss. You are invited to a presentation where the income opportunity is explained using impressive income projections.\n\nThe key distinction between a legitimate direct sales business and an illegal pyramid scheme lies in whether income is generated by selling products to end customers outside the business, or primarily by recruiting new participants who pay to join. In a pyramid structure, recruitment fees fund the 'earnings' of earlier participants. This is mathematically unsustainable and illegal in most jurisdictions.\n\nTo evaluate any opportunity, ask for the company's income disclosure statement — legitimate MLMs are required to publish them in the US, and they typically show the median annual income for participants. These documents frequently reveal that the majority of participants earn very little or actually lose money after expenses. If no disclosure statement exists, or the recruiter deflects the question, that is a significant warning.\n\nAlso scrutinise the start-up cost. Legitimate employment never requires you to buy inventory before you can work. Large starter kit requirements (hundreds or thousands of dollars of product) that are difficult to refund, combined with pressure to recruit your personal network, are the signature of a pyramid or poorly structured MLM.","redFlags":["Income is primarily earned through recruiting new members, not selling to outside customers","Large upfront inventory purchase required to start","Pressure to recruit family and friends as your first customers","No published income disclosure statement, or statement showing most earn little","Products are priced uncompetitively and would not sell without the recruitment angle","High-pressure recruitment at presentations with limited time to research"],"whatToDoNow":["Request the company's income disclosure statement before signing anything","Search the company name plus 'pyramid scheme' and 'income disclosure'","Consult an independent financial adviser before investing any money","Report suspected pyramid schemes to the FTC (US) or Trading Standards (UK)","If you already joined and want out, review the refund policy — most legitimate MLMs have a cooling-off period"],"faq":[{"question":"Is all multi-level marketing illegal?","answer":"No. A legitimate MLM generates income primarily from product sales to genuine end consumers. A pyramid scheme generates income primarily from recruitment fees. The line is whether retail sales to non-participants can sustain the business."},{"question":"What is the difference between a starter kit and a scam?","answer":"A small, reasonably priced starter kit with samples and marketing materials can be legitimate. A requirement to purchase thousands of dollars of inventory to qualify for commissions is a red flag."},{"question":"Can I trust income claims from the recruiter?","answer":"Income claims must be backed by the company's official income disclosure. A recruiter's personal story or screenshots are not representative. Always ask for the average."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-tax-refund-email","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-tax-refund-email","question":"How do I spot a fake tax refund email?","shortAnswer":"Governments do not issue tax refunds by asking you to click an email link and enter your bank details — real refunds are credited automatically or by cheque to your registered details.","explanation":"Tax refund phishing is a high-volume fraud category that peaks around the end of the financial year in both the UK (April) and the US (April filing deadline). The email claims you are owed a refund and directs you to a convincing clone of the HMRC or IRS website where you enter your bank account details to 'receive' the money. The fraudster then uses those details to drain your account or redirect future legitimate refunds.\n\nSome variants ask for card details rather than account details, framing the transaction as a 'refund' going to your card. A refund going to a card you enter on a website is never how government tax agencies operate — they credit the bank account linked to your tax record, not a card number you supply on a form.\n\nReal refund processes: HMRC refunds go to the bank account registered with HMRC or by cheque — you can update your bank details only through your Personal Tax Account at gov.uk. The IRS issues refunds to the account on your filed return or by cheque — not to card numbers provided via email link.\n\nIf you believe you are owed a refund, log in to your Personal Tax Account (gov.uk) or IRS Online Account (irs.gov) to check your actual position.","redFlags":["Email directs you to click a link and enter bank account or card details to receive a refund","Sender email is not from @hmrc.gov.uk or @irs.gov","Link goes to a domain other than gov.uk or irs.gov","Refund amount is a round number with no reference to your specific tax calculation","Urgency: 'refund expires in 48 hours if not claimed'"],"whatToDoNow":["Do not click any link or provide bank details in response to the email","Log in to your tax account at gov.uk or irs.gov to check your real position","Forward the email to phishing@hmrc.gov.uk (UK) or phishing@irs.gov (US)","Report to the Report Fraud service (UK, formerly Action Fraud) or the FTC (US)","If you submitted your details, change your banking passwords and notify your bank"],"faq":[{"question":"How does HMRC notify me of a real refund?","answer":"HMRC sends a letter to your registered address informing you of a refund. It may then be paid automatically to the account on file. It does not email you a link to claim it."},{"question":"What if I already entered my bank details?","answer":"Contact your bank immediately and ask them to monitor for suspicious activity or to change your account details. Report to HMRC and Report Fraud."},{"question":"Can a genuine tax refund go to a different bank account than usual?","answer":"Only if you have logged in to your Personal Tax Account and updated your bank details yourself. A refund cannot be redirected by filling in a form from an email link."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-coupon-or-discount-code-site","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-coupon-or-discount-code-site","question":"How do I spot a fake coupon or discount code website?","shortAnswer":"Fake coupon sites harvest your email and personal data, install browser extensions that track your shopping, or charge for 'membership' to access codes that do not work.","explanation":"Discount-hunting is extremely common, and fraudsters have built an entire ecosystem of fake coupon websites to exploit it. Some are straightforward data collectors: you must register with your email, name, and sometimes phone number to access a code that is either expired, invalid, or identical to codes freely available elsewhere. Your data is then sold.\n\nA second category installs browser extensions that claim to automatically apply coupons. Some legitimate extensions do this (Honey, Capital One Shopping), but malicious lookalikes collect your browsing history, shopping behaviour, and sometimes intercept forms to harvest typed data. The extension name is similar to a trusted one but is from an unverified developer.\n\nA third model is the paid membership scam: you pay a monthly fee to access an exclusive members-only discount club. The codes provided are either widely available for free or do not work at checkout. These subscriptions are difficult to cancel and often buried in confusing terms.\n\nFor browser extensions, only install from developers with a long, verifiable history and a large user base. Check the permissions requested — a coupon extension needs to see shopping sites but does not need access to your entire browsing history or the ability to read content on every page you visit.","redFlags":["Registration required for codes that are normally publicly available","Browser extension requests unusually broad permissions","Paid membership required to access discount codes","Code site is not associated with the retailer being discounted","Codes consistently expire immediately or do not work at checkout","Site uses alarming checkout messages like 'your items are about to sell out'"],"whatToDoNow":["Use coupon codes only from the retailer's own website or well-known, established platforms","Audit your browser extensions and remove any you do not recognise or no longer use","Unsubscribe from any coupon membership before the next billing cycle","If you shared personal details, monitor for spam and phishing targeted at you","Report fake extension clones to the browser's extension store"],"faq":[{"question":"Is the Honey browser extension safe?","answer":"Honey (now owned by PayPal) is a well-known, legitimate coupon extension. Exercise caution with lesser-known extensions that mimic its interface or promise similar functionality from an unverified developer."},{"question":"How do I safely find discount codes?","answer":"Check the retailer's own website, their email newsletter sign-up, and established platforms with a long track record. Many retailers offer first-order discounts through their own checkout flow."},{"question":"Can a browser extension steal my passwords?","answer":"A malicious extension with permission to read page content can log keystrokes including passwords on any site. Only install extensions from verified developers with a transparent privacy policy."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-government-grant-email","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-government-grant-email","question":"How do I spot a fake government grant or benefit payment email?","shortAnswer":"Fake government grant emails promise free money you must claim by entering your bank details — governments do not distribute grants or benefits through unsolicited emails requiring a link to claim.","explanation":"Government grant fraud mimics the language of real subsidy schemes — energy rebates, cost-of-living payments, business grants, stimulus cheques — and sends emails or texts claiming you are eligible for a payment. The message asks you to click a link, verify your identity, and enter your bank account details so the payment can be transferred to you.\n\nReal government payments do not work this way. In the UK, cost-of-living payments and energy rebates are applied to your qualifying benefits or energy account automatically by HMRC or the Department for Work and Pensions. The IRS in the US similarly deposits stimulus and child tax credit payments to the bank account on file with your tax return. No link-clicking is required.\n\nGovernment agencies occasionally do send letters or log into their portals asking you to update bank details if you move, but this is always done through a portal you navigate to yourself (gov.uk personal tax account, ssa.gov, benefits.gov) — never by clicking a link in an unsolicited email.\n\nSearch any grant scheme name through official government websites (gov.uk, usa.gov, benefits.gov) to verify it exists before taking any action. If you cannot find the scheme by official name in an official source, treat the email as fraudulent.","redFlags":["Email claims you are entitled to a grant or payment you have not applied for","Must click a link and provide bank details to receive the payment","Sender email is not from a .gov.uk or .gov domain","Grant name cannot be verified on official government websites","Limited time to claim — 'payment expires in 72 hours'","Website asks for your full National Insurance or Social Security number"],"whatToDoNow":["Do not click any link or enter bank details","Search the scheme name on gov.uk (UK) or usa.gov (US) to verify it exists","Forward suspicious emails to phishing@hmrc.gov.uk (UK) or the FTC (US)","Report to the Report Fraud service (UK, formerly Action Fraud) or ReportFraud.ftc.gov (US)","If you submitted your details, contact your bank and the relevant government department"],"faq":[{"question":"How do I know if I am eligible for a real government payment?","answer":"Check eligibility on the government's official website (gov.uk/benefits or benefits.gov). Do not rely on emails or social media posts to learn about eligibility."},{"question":"Are there real government grants for individuals?","answer":"Yes — energy efficiency grants, start-up loans, and hardship funds exist. They are applied for through official portals, not claimed via email links."},{"question":"What if the email says it is from my local council?","answer":"Local authorities occasionally contact residents, but they will always direct you to log in to your council portal with your existing account — not to a new external link requiring your bank details."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-crypto-wallet-recovery-service","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-crypto-wallet-recovery-service","question":"How do I spot a fake crypto wallet recovery service?","shortAnswer":"Fake recovery services ask for your seed phrase to 'recover' lost crypto — sharing your seed phrase gives complete control of your wallet to the fraudster immediately.","explanation":"Crypto recovery scams target people who have already lost access to a wallet or lost funds to a previous scam. They advertise on Reddit, Twitter, YouTube comments, and in response to public posts asking for help. The service claims to use technical expertise or legal processes to recover lost cryptocurrency.\n\nFor wallet recovery — where you lost access to a wallet you own — the only thing that can restore access is your seed phrase or private key. No third party can recover your funds without it. A 'service' asking for your seed phrase is simply taking your wallet. Anyone who has your seed phrase has complete and instant access to every asset in that wallet, permanently. There is no legitimate reason to share it.\n\nFor funds lost to a scam — where money was stolen — recovery is rarely possible. Blockchain transactions are irreversible. A service claiming to trace and recover stolen crypto is almost certainly running a second-stage fraud: they charge an upfront 'investigation fee' and either disappear or keep charging for fabricated 'progress'. Law enforcement agencies and specialist blockchain analysis firms can in rare cases help with large-scale thefts, but they do not solicit victims through YouTube comments.\n\nIf you have been contacted by a recovery service, the fact that they found you (rather than you finding them through official channels) is itself a red flag. Legitimate professional services have verifiable credentials, do not advertise in comment sections, and do not ask for fees upfront or for your seed phrase.","redFlags":["Asks for your seed phrase or private key at any point","Found you in a comment section or DM after you posted about a loss","Demands an upfront fee before beginning recovery work","Claims guaranteed recovery of stolen crypto","Cannot provide verifiable credentials, professional registration, or public case history","Asks you to send additional crypto to 'unlock' your funds"],"whatToDoNow":["Never share your seed phrase with anyone under any circumstances","Report the recovery scammer to the platform they contacted you through","Report to the Report Fraud service (UK, formerly Action Fraud), IC3 (US), or your national cybercrime authority","For genuine wallet access issues, consult the wallet software's official support documentation","Seek advice from verified blockchain analysis firms only through their official websites"],"faq":[{"question":"Is there any legitimate way to recover a lost seed phrase?","answer":"If you wrote it down incorrectly, specialist software tools like Btcrecover can attempt partial recovery if you know most of the words. No third party needs to see your phrase to run such tools."},{"question":"Can a lawyer recover stolen crypto for me?","answer":"In very large-scale fraud cases, law enforcement with court orders and specialist blockchain tracing firms have had successes. These do not apply to smaller losses and do not involve sharing your seed phrase."},{"question":"What is a 'second hit' recovery scam?","answer":"A second hit is when scammers specifically target known victims of previous crypto fraud with recovery offers. They share victim lists with affiliated fraudster groups. If you lost crypto, expect follow-on approaches."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-online-auction-listing","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-online-auction-listing","question":"How do I spot a fake online auction listing?","shortAnswer":"Fake auction listings use stock photos, push buyers to pay outside the platform, and then vanish — never pay for an auction item through bank transfer or gift card outside the auction site.","explanation":"Online auction fraud on platforms like eBay typically involves listing a desirable item — a smartphone, games console, or car — at an attractively low price. The seller encourages you to buy immediately via their 'Buy It Now' option or to communicate outside the platform where they can request payment by bank transfer or cryptocurrency, bypassing any buyer protection.\n\nPhotos are often stock images or copied from other listings. Ask the seller to send a photo of the item next to a piece of paper with your username written on it. A genuine seller can do this in minutes. A fraudster cannot, and will find reasons to delay or decline.\n\nBuyer protection on platforms like eBay covers purchases made through the platform's checkout using an accepted payment method. The moment a seller asks you to pay by bank transfer, outside PayPal (claiming it avoids fees), or via gift card to 'save money', you lose all protection and have very little recourse if the item never arrives.\n\nFor high-value items, also check the seller's feedback history. A newly created account selling expensive goods, or an older account with feedback for cheap items suddenly selling a car, should be scrutinised. Hacked eBay accounts with good feedback are used for this scam.","redFlags":["Seller asks for payment by bank transfer, cryptocurrency, or gift card outside the platform","Photos are stock images with no identifying features of the actual item","Seller will not provide a personalised photo with your username","Newly created account or account with feedback only for low-value items selling something expensive","Asks you to contact them directly via WhatsApp or email to arrange payment","Price is extremely low relative to comparable current listings"],"whatToDoNow":["Pay only through the auction platform's official checkout","Never make payment off-platform via bank transfer or cryptocurrency","Report suspicious listings to the platform before bidding","If defrauded, file a claim through the platform's buyer protection programme","Report to the Report Fraud service (UK, formerly Action Fraud) or the FTC (US)"],"faq":[{"question":"Does eBay buyer protection always cover me?","answer":"eBay's Money Back Guarantee covers purchases made through eBay checkout with an accepted payment method. Off-platform payments are excluded."},{"question":"What is a second-chance offer scam?","answer":"After a genuine auction ends, fraudsters email the losing bidder claiming the winner backed out and offering the item at the bid price. They request off-platform payment. This is not an official eBay second-chance offer."},{"question":"How do I verify a seller's feedback is genuine?","answer":"Examine individual feedback entries — look for variety of buyers, multiple categories, and a timeline that shows consistent activity over months or years, not a burst of feedback just before the listing."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-ai-chatbot-investment-scam","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-ai-chatbot-investment-scam","question":"How do I spot a fake AI chatbot or AI-powered investment scam?","shortAnswer":"Fake AI investment tools promise algorithmic profits with no risk — they display fabricated dashboard numbers and prevent withdrawals once you have deposited.","explanation":"As artificial intelligence became a mainstream topic, fraudsters began branding investment platforms as AI-powered trading bots, algorithmic wealth systems, or machine-learning arbitrage tools. The branding leverages public fascination with AI to make implausible returns seem technically plausible. The platform looks sophisticated, with live charts, account dashboards showing growing balances, and a chatbot or 'AI advisor' that provides personalised guidance.\n\nThe returns shown on the dashboard are entirely fabricated. The underlying platform is not making any trades. When a victim tries to withdraw, they are told they must pay a tax, unlock fee, or compliance charge first. These charges are also fraudulent — paying them just adds to the loss before the platform closes.\n\nRecruitment often begins through social media ads showing 'proof of earnings' screenshots, through romance connections that transition into investment advice, or through influencer endorsements (sometimes made by real influencers whose images are used without consent, sometimes AI-generated deepfakes). If a famous person appears in a video or ad promoting a specific trading platform, verify through their official channels that the endorsement is real.\n\nNo AI trading system can guarantee profits. Markets are inherently uncertain. Any platform claiming its AI 'never loses' or earns above realistic market returns without explaining the underlying investment strategy is making a false claim.","redFlags":["Guaranteed profits from an AI trading system","Returns significantly above realistic market rates presented as routine","Platform was introduced through a social media connection or dating app","Celebrity endorsement in an ad that cannot be verified on the celebrity's official channels","Withdrawals blocked pending a 'tax' or 'compliance fee'","Platform not registered with FCA (UK), SEC/CFTC (US), or relevant national regulator"],"whatToDoNow":["Verify the platform's authorisation on FCA register or SEC EDGAR before investing","Do not pay any fee to 'unlock' or 'release' funds — it is an additional theft","Report to the FCA ScamSmart tool (UK) or SEC (US)","Gather all evidence: email addresses, platform URLs, screenshots, transaction records","Contact your bank if you transferred money and seek legal advice about recovery options"],"faq":[{"question":"Are there any legitimate AI trading tools?","answer":"Regulated algorithmic trading tools exist and are used by professional investors, but they do not guarantee profits and are not sold through social media DMs or dating apps."},{"question":"What is a deepfake celebrity endorsement?","answer":"Fraudsters create AI-generated video content showing celebrities (Elon Musk, Martin Lewis) endorsing investment platforms. Always verify endorsements on the celebrity's verified social media channels."},{"question":"Can I recover money lost to an AI investment scam?","answer":"Potentially through a card chargeback if payment was made by card. Report to the Report Fraud service and the FCA — they maintain lists of known scam firms that may inform regulatory action."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-bank-call","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-bank-call","question":"How do I spot a fake call from my bank?","shortAnswer":"Fraudsters impersonate bank fraud teams and create urgency to move your money to a 'safe account' — your real bank will never ask you to transfer your own money for safety reasons.","explanation":"Authorised push payment (APP) fraud often starts with an unsolicited call from someone claiming to be your bank's fraud team. They tell you that your account has been compromised and that you must urgently move your money to a 'safe account' they provide. They may also say they are sending a courier to collect your card and PIN. Both requests are fraudulent.\n\nReal banks never instruct customers to transfer their own money to another account for security. If fraud has occurred on your account, the bank freezes the compromised account and issues a new one — they do not ask you to move money yourself. A bank would also never send a courier to collect your card. These are scripts unique to criminals.\n\nCaller ID spoofing allows fraudsters to display your bank's genuine phone number on your phone. This makes the call feel authentic. Some fraudsters stay on the line while you hang up — if you call back immediately on the same handset, you may remain connected to the fraudster rather than reaching a new line. Always wait a few minutes and call from a different phone, or use a different line.\n\nBanks use a variety of legitimate ways to contact you — text alerts about specific transactions, in-app notifications, and letters. But all of them give you time to verify. No genuine banking contact demands that you move money in the next few minutes.","redFlags":["Caller asks you to transfer your own money to a 'safe' or 'holding' account","Caller wants to send a courier to collect your card and PIN","Urgency: fraudsters are draining your account right now, act immediately","Caller tells you not to hang up or not to tell your bank","Asks you to download an app or give a one-time passcode","Caller ID shows your bank's number but the request is unusual"],"whatToDoNow":["Hang up, wait five minutes, then call your bank from a different phone using the number on your card","Never transfer your own money at a caller's request, even if they know your personal details","Never give a one-time passcode to anyone who called you","Report impersonation calls to your bank's fraud line and to Report Fraud (UK, formerly Action Fraud) or the FTC (US)","If you transferred money, notify your bank immediately — some APP fraud can be recalled quickly"],"faq":[{"question":"Why does the caller ID show my real bank's number?","answer":"Phone networks allow sender ID fields to be set to any alphanumeric string. Fraudsters routinely spoof bank numbers. Caller ID alone does not verify a caller's identity."},{"question":"My bank already called me before — can they not call me again?","answer":"Yes, your bank does call customers, but it will never ask you to move your own money or give your PIN. If a request is unusual, end the call and verify by calling back independently."},{"question":"What is the UK reimbursement scheme for APP fraud?","answer":"Under the Payment Systems Regulator's 2024 rules, UK banks must reimburse most APP fraud victims up to a cap, unless the victim ignored clear warnings. Report immediately to maximise your chances."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-police-impersonator-scam","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-police-impersonator-scam","question":"How do I spot a fake police or law enforcement call?","shortAnswer":"Fake police calls demand immediate payment of a fine or threaten arrest — real police do not collect fines by phone and do not demand cryptocurrency or gift cards.","explanation":"Police impersonation scams typically threaten the target with arrest over an outstanding fine, missed jury duty, unpaid court fee, or involvement in a criminal investigation. The caller insists that you must pay a specific amount immediately to avoid being detained, sometimes offering to 'settle the matter quietly' without further legal involvement.\n\nPayment is requested in ways that real law enforcement never uses: gift cards, cryptocurrency, wire transfers to private accounts, or cash placed in an envelope. Real fines and court fees are paid through official government portals or by cheque payable to the court — not to a private individual's account or via an iTunes card.\n\nSome variants combine police impersonation with warrant scams: the caller claims there is an active arrest warrant in your name and that you must pay to have it cleared. Genuine warrants are served in person by uniformed officers — they are not cleared by phone payment.\n\nIf you receive such a call, ask for the officer's badge number and the station name, then end the call and dial 999 (UK) or 911 (US) to verify. If the original number was genuine police, the police will know about it.","redFlags":["Demands immediate phone payment of a fine in gift cards or cryptocurrency","Threatens arrest unless payment is made in the next hour","Offers to 'settle quietly' for a cash payment instead of formal process","Caller ID shows a police station number but the request is non-standard","Cannot or will not provide verifiable badge number and station address","Claims a warrant exists for your arrest and can be resolved by phone"],"whatToDoNow":["Hang up and call the police non-emergency line independently to verify","Do not make any payment by phone regardless of the threat","Report the scam call to the Report Fraud service (UK, formerly Action Fraud) or the FTC (US)","Note the number, time, and content of the call as evidence","Alert elderly relatives who may be more vulnerable to this threat"],"faq":[{"question":"Can police legitimately call me about a fine?","answer":"Police may call as part of investigations, but they do not collect fines by phone and do not demand immediate payment to avoid arrest. Any such demand is a scam."},{"question":"What if I missed jury service?","answer":"Missing jury service results in a formal letter from the court, not an immediate phone call demanding payment. If you have missed a summons, contact the court directly through its official number."},{"question":"What is a badge number check?","answer":"Any genuine police officer will give you their badge (warrant card) number and station. You can then call 101 (UK non-emergency) to verify that number is assigned to an active officer at that station."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-payslip-or-employment-verification","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-payslip-or-employment-verification","question":"How do I spot a fake payslip or fake employment verification?","shortAnswer":"Fraudulent payslips and reference letters are used in mortgage and rental applications — verify employment directly with the listed employer using a number you find independently, not one provided by the applicant.","explanation":"Document fraud in mortgage and rental applications typically involves fabricated or altered payslips, bank statements, and employment reference letters. These are submitted to convince a lender or landlord that the applicant earns more than they do, has been employed longer than they have, or holds a position they do not hold. This type of fraud can also be used against the applicant — a fraudster may use someone's genuine documents altered with fraudulent figures.\n\nFor lenders and landlords, the key verification step is to call the applicant's employer directly using a number from a public company directory — not the number on the reference letter. Ask to verify employment, start date, and salary band. Genuine employers have a standard process for this; an unexpected number, reluctance to confirm, or inconsistency between the letter and the HR response are warning signs.\n\nThe design of fake documents has become more sophisticated as editing tools have improved. However, inconsistencies persist: incorrect PAYE tax codes for the stated salary, National Insurance deductions that do not match the gross pay, company logos in poor resolution, or formatting inconsistent with documents from other applicants at the same employer are all tells.\n\nFor applicants who suspect their own identity or documents have been misused, a credit report check will often reveal applications made in their name that they did not initiate.","redFlags":["Company phone number on the reference letter is a mobile or non-registered number","PAYE tax and NI deductions inconsistent with the stated gross salary","Employer cannot be verified through an independent directory listing","Font, spacing, or logo quality inconsistent within the same document","Gross pay is a round number every month with no variation for overtime or deductions"],"whatToDoNow":["Call the employer using a number from Companies House, LinkedIn, or an industry directory","Request the applicant's last three months of bank statements showing salary credits","Run the document through anti-fraud document verification tools if available","Report document fraud to the Report Fraud service (UK, formerly Action Fraud) or the FBI (US)","If you are a victim of identity document fraud, file a police report and alert credit bureaus"],"faq":[{"question":"Can I legally verify an applicant's employment?","answer":"Yes, with the applicant's consent (which should be part of any rental or credit application form). This is standard practice and any genuine applicant will expect it."},{"question":"Are fake payslips common in rental applications?","answer":"Document fraud in rental applications is a known problem reported by letting agents. Most professional letting agencies use reference checking services that verify employment, income, and identity."},{"question":"What if someone used my details to apply for credit?","answer":"Place a CIFAS protective registration in the UK (cifas.org.uk) or a fraud alert with US credit bureaus. Review your credit report for accounts you do not recognise."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-escrow-service","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-escrow-service","question":"How do I spot a fake escrow service in an online transaction?","shortAnswer":"Fake escrow sites are created by scammers to simulate a neutral third party — they collect your payment and hand nothing to the seller or the buyer.","explanation":"Escrow is a legitimate service in which a trusted third party holds payment until both buyer and seller have fulfilled the transaction conditions. In online transactions for high-value items — vehicles, domain names, expensive electronics — genuine escrow reduces risk for both parties. Fraudsters exploit the credibility of this concept by creating fake escrow sites and proposing their use during negotiations.\n\nThe scam works in both directions. A seller may propose a fake escrow site to a buyer: the buyer deposits funds, the site confirms receipt, the 'escrow' is never released to the seller, and the funds disappear. Alternatively, a buyer proposes the fake escrow to a fraudulent seller who is in on the scheme: the buyer ships the goods after seeing a fake confirmation, and the money disappears without the buyer ever receiving payment.\n\nLegitimate escrow services for online transactions are few and well-known. In the US, Escrow.com is widely cited as the primary legitimate option. In the UK, escrow is used in property transactions through regulated solicitors. Any other site proposed during a negotiation — particularly one you have never heard of — should be researched thoroughly before use.\n\nKey verification: search the escrow company name, check that it has been operating for multiple years, verify it is registered with the relevant financial regulator, and look for reviews on independent platforms. Do not rely on the trust marks or regulatory logos on the site itself, which are easily fabricated.","redFlags":["Escrow service was suggested by the other party rather than you initiating it","Escrow site was registered recently or has no verifiable operating history","Site's regulatory seal links to an image rather than a live register check","No phone number, physical address, or company registration on the site","Other party is unusually eager to use this specific escrow service","Service not listed in any independent review or financial regulator database"],"whatToDoNow":["Research any proposed escrow service independently before using it","Verify the site's registration date and regulatory status","Prefer to use only well-established escrow services with verifiable histories","Report fake escrow sites to the Report Fraud service (UK, formerly Action Fraud) or the FTC (US)","If you deposited funds to a fake escrow, contact your bank immediately"],"faq":[{"question":"Is all escrow fraud the same scheme?","answer":"No. Some versions target buyers, others sellers, and some involve both parties as victims of a third-party escrow operator. The common thread is a fake or fraudulent escrow website."},{"question":"How do I verify Escrow.com is legitimate?","answer":"Escrow.com is licensed by the California Department of Financial Protection and Innovation. You can verify this on the DFPI's website. It has a verifiable operating history going back many years."},{"question":"What if the transaction involves a vehicle purchase?","answer":"For vehicle purchases, use an in-person transaction or a solicitor-managed transfer. Never use an unfamiliar online escrow service for a vehicle sale arranged through a classifieds site."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-prize-redemption-website","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-prize-redemption-website","question":"How do I spot a fake prize redemption website?","shortAnswer":"Fake prize sites tell you that you have won through a survey, scratch card, or loyalty programme and ask for a processing fee or card details — real prizes do not require payment to release.","explanation":"Prize redemption fraud combines the appeal of winning with the friction of a 'small' payment designed to feel like a reasonable administrative step. The entry point is usually a survey completion page, a scratch card in a branded mailer, or a pop-up on a website claiming you are the millionth visitor. All lead to the same end: a convincing prize notification page.\n\nThe site typically displays a specific cash amount, a holiday, or an expensive product you have 'won'. To proceed, you are asked to enter a small processing or postage fee. When you enter your card details, the fee is charged — and either additional charges follow, or your card details are used for larger fraudulent transactions later.\n\nBranded surveys are a related variant: you are invited to take a short survey for a well-known brand and offered a gift as compensation. The survey is real but the gift collection requires your card details for a 'nominal shipping fee'. The gift never arrives and your card is misused.\n\nLegitimate prize promotions in the UK are regulated by the Committee of Advertising Practice (CAP). They must have open entry, must not require purchase, and must never charge fees to claim. In the US, FTC regulations prohibit requiring payment or purchase as a condition of winning a prize. Any fee requirement to collect a prize is illegal in these jurisdictions.","redFlags":["You must pay a processing, shipping, or administration fee to receive your prize","Prize site was reached through a pop-up claiming you are a specially selected visitor","The brand running the promotion cannot be verified through its official website","Card details are requested before the prize is dispatched","Prize terms and conditions reference an unfamiliar governing body"],"whatToDoNow":["Do not pay any fee to claim a prize","Search the promotion name plus 'scam' before engaging","Report fake prize sites to the Advertising Standards Authority (UK) or FTC (US)","Report to the Report Fraud service (UK, formerly Action Fraud) or ReportFraud.ftc.gov (US)","If you entered card details, contact your bank and monitor for follow-on charges"],"faq":[{"question":"Are all online survey rewards fake?","answer":"No. Legitimate market research panels (YouGov, Ipsos i-Say) pay modest rewards through verified platforms. The difference is they do not ask for card details for delivery."},{"question":"What is the 'millionth visitor' pop-up?","answer":"It is a common scareware/prize lure that appears on compromised or ad-supported websites. It is never real — the counter is randomly generated to create the impression of personal selection."},{"question":"Can a brand really select me randomly in a survey reward?","answer":"Major brands do run real customer appreciation promotions, but they announce them publicly through their official channels and never require card details to claim."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-account-verified-email","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-account-verified-email","question":"How do I spot a fake 'account verification required' email?","shortAnswer":"Fake account verification emails create urgency about account suspension and link to credential-harvesting pages — verify your account status by typing the site address directly, never via a link.","explanation":"Account verification phishing is one of the most versatile attacks because it can be applied to almost any service: banks, email providers, social networks, streaming platforms, e-commerce accounts, or cloud storage. The email says your account requires immediate reverification due to suspicious activity, a policy update, new security requirements, or an unconfirmed detail.\n\nThe urgency is calibrated to be just uncomfortable enough to prompt action without triggering scepticism: 'your account will be restricted in 48 hours', rather than 'your account will be deleted in one hour'. The link leads to a convincing replica of the service's login page, and sometimes also mimics a verification form that collects additional personal details.\n\nIdentifying clues: the sender email address domain does not exactly match the service; the link destination shown on hover does not match the official domain; the form asks for more than just username and password (security questions, payment card details, date of birth); and your password manager does not autofill the credentials.\n\nFor any account concern, the correct action is to navigate to the service by typing its address or using a saved bookmark, log in, and check whether a genuine notification exists in your account dashboard. If nothing is shown there, the email was phishing.","redFlags":["Sender address does not match the official domain of the service","Link goes to a domain other than the official service URL","Form asks for more than username and password — card details, answers to security questions","Password manager does not autofill credentials on the linked page","Account notification does not appear in your actual account dashboard","Generic greeting rather than your registered name"],"whatToDoNow":["Do not click the link — navigate to the service by typing its address","Check your account dashboard for any real verification request","Report the phishing email to the service using their official abuse address","Forward UK phishing emails to report@phishing.gov.uk","If you entered credentials, change your password immediately and enable 2FA"],"faq":[{"question":"Why do services need to verify my account?","answer":"Legitimate verification is triggered by specific events: a new device login, a change to your details, or a new regulatory requirement. It appears in your account notifications, not only in an email."},{"question":"What should I do if I genuinely need to verify an account?","answer":"Log in directly at the service's official URL, navigate to account settings or security, and complete any genuine verification steps there."},{"question":"Can two-factor authentication stop this type of attack?","answer":"2FA significantly raises the bar for attackers but does not eliminate risk from real-time phishing attacks. Avoid entering OTP codes on pages you reached from unexpected emails."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-customs-fees-demand","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-customs-fees-demand","question":"How do I spot a fake customs fee demand?","shortAnswer":"Fake customs notices ask you to pay import duties via a link before a parcel is released — real customs authorities send official paper notices and process fees through official government portals.","explanation":"Customs fee fraud exploits the growing volume of international parcel deliveries and the genuine existence of import duties on goods from outside your country's customs zone. When a real duty is owed, the carrier or customs authority notifies you by official letter and holds the package pending payment through a government portal.\n\nFraudsters send emails or texts claiming to be from HMRC, US Customs and Border Protection, or a carrier's customs clearance team, stating that a small duty is owed before your parcel can be released. The amount is typically small — a few pounds or dollars — because a low fee reduces the resistance to paying. The link goes to a convincing fake payment page that collects card details.\n\nKey distinguishing features: genuine customs notices from HMRC arrive by letter and reference a specific commodity code and declared value. In the US, CBP typically does not notify individuals by email for small personal imports. If a carrier is handling customs clearance on your behalf, they will contact you through a channel you established when booking with them, not through a generic text.\n\nYou can verify any genuine customs matter through HMRC's official customs portal (gov.uk) or through your carrier's account portal by logging in directly.","redFlags":["Text or email asking for customs payment through a link rather than an official portal","Link goes to a domain other than gov.uk, cbp.gov, or the carrier's exact official domain","No tracking number or import reference matching an actual incoming parcel","Fee must be paid within 24 hours or the parcel will be returned","Payment page asks for full card details for a very small fee"],"whatToDoNow":["Do not click the link or make payment through the message","Check your carrier's official account portal for any genuine customs hold","Contact HMRC or CBP through their official websites if you believe a genuine duty is owed","Forward suspicious texts to 7726 (UK) or report to the FTC (US)","If you already paid, contact your bank to dispute the charge"],"faq":[{"question":"Do I ever owe customs fees on parcels?","answer":"Yes. In the UK, import duty and VAT apply to goods over a certain value from outside Great Britain. Genuine notifications come by official letter or from your carrier through an established portal."},{"question":"Is it normal for a courier to text about customs?","answer":"Some legitimate carriers send SMS updates, but they direct you to their official app or website — they do not include a payment link in an SMS."},{"question":"What if I am expecting a parcel from abroad and I receive this message?","answer":"Even if you are expecting a parcel, go directly to the carrier's official site to check its status. The coincidence of receiving the message while expecting a parcel is exploited by fraudsters who send high volumes hoping to match expectations."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-whatsapp-verification-code-request","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-whatsapp-verification-code-request","question":"How do I spot a fake WhatsApp verification code request?","shortAnswer":"Fraudsters posing as friends or WhatsApp support ask for your six-digit verification code to take over your account — never share a verification code sent to your phone with anyone.","explanation":"WhatsApp account takeover is typically executed through a social engineering call or message from someone pretending to be a friend or family member. They claim that they accidentally sent a verification code to your number, or that WhatsApp support needs your code to fix a problem. In reality, the code was sent because they are trying to register your phone number in WhatsApp on a new device — your code is the final step.\n\nOnce an attacker has your WhatsApp account, they can read your messages, contact all your saved contacts posing as you, and most commonly, ask those contacts for urgent money transfers — continuing the cycle of fraud.\n\nVerification codes sent by WhatsApp are explicitly labelled 'DO NOT SHARE THIS CODE' in the message itself. WhatsApp support never proactively contacts users asking for their code, and legitimate friends never have a reason to need your phone's verification code.\n\nIf your account is taken over, you can recover it by re-entering your phone number in the WhatsApp app, receiving a new verification code, and logging in. Enable two-step verification in WhatsApp Settings > Account > Two-step verification to prevent future takeovers.","redFlags":["Anyone asks for the six-digit code WhatsApp sent to your phone","Message claims WhatsApp sent the code to your number 'by accident'","Someone claiming to be WhatsApp support asks for your verification code","Contact you recognise asks for a code in an unexpectedly urgent way","Your WhatsApp suddenly logs you out on your own device"],"whatToDoNow":["Never share your six-digit code with anyone","If you shared the code, immediately log in to WhatsApp on your phone — you will receive a new code and regain access","Enable two-step verification in WhatsApp Settings","Alert your contacts that your account may have been compromised","Report the takeover to WhatsApp through their in-app support"],"faq":[{"question":"Can WhatsApp accounts be recovered after takeover?","answer":"Yes. Open WhatsApp, enter your phone number, and request a new code. WhatsApp will verify your phone number and restore your account, logging out the attacker."},{"question":"What is two-step verification on WhatsApp?","answer":"Two-step verification adds a six-digit PIN that must be entered when registering your number on a new device, in addition to the SMS code. This means stealing the SMS code alone is not enough."},{"question":"My friend was impersonated — what should I do?","answer":"Alert your friend through another channel (phone call). Do not send money or click any links in messages from the compromised account until your friend confirms they are back in control."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-mortgage-broker","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-mortgage-broker","question":"How do I spot a fake mortgage broker or loan fee fraud?","shortAnswer":"Fake mortgage brokers collect upfront arrangement fees for loans that never materialise — legitimate FCA-authorised brokers take fees at completion, not before a decision in principle.","explanation":"Mortgage and loan fee fraud targets people who have been declined by mainstream lenders and are therefore more willing to work with a broker who seems to offer a path forward. The fraudulent 'broker' claims access to specialist lenders willing to lend despite credit problems, but requires an upfront arrangement fee before the application can be submitted.\n\nOnce the fee is paid (often several hundred to a few thousand pounds), the broker either disappears or continues stalling — requesting additional documents, citing processing delays, and sometimes asking for further fees before any loan offer ever arrives. No loan exists. The fees are lost.\n\nAll genuine mortgage brokers operating in the UK must be authorised by the FCA. You can search for any broker at register.fca.org.uk. Authorised brokers typically take their fee at completion (from the mortgage proceeds or the lender), not as a large upfront cash payment before any application is placed.\n\nIf a broker demands a significant fee before showing you any loan documentation, terms, or decision in principle, treat this as a serious red flag. Also search the FCA's warning list of known scam firms at fca.org.uk/consumers/warning-list — it lists unauthorised operators by name.","redFlags":["Large upfront fee required before any loan application, offer, or decision in principle","Broker not listed on FCA register or state financial regulator database","Claims to guarantee loan approval despite poor credit","Fee must be paid by bank transfer to a personal account, not a company account","Application process is vague — no specific lender named, no paperwork provided","Broker found through a social media ad or unsolicited call"],"whatToDoNow":["Verify the broker on the FCA register before paying any fee","Check the FCA warning list for the company name","Never pay an upfront fee without a written agreement specifying what it covers","Report unauthorised brokers to the FCA (report.fca.org.uk) and Report Fraud (formerly Action Fraud)","If you paid, contact your bank immediately to explore a recall or chargeback"],"faq":[{"question":"Do any legitimate brokers charge upfront fees?","answer":"Some authorised brokers charge a modest administration or application fee. The key difference is that they are FCA-authorised, named in a written agreement, and the fee is proportionate — not several hundred pounds before any application is placed."},{"question":"What is an advance fee loan scam?","answer":"Advance fee loan fraud involves paying fees in advance for a loan that never arrives. The fees are framed as insurance, processing, or security — all are non-existent requirements of legitimate lending."},{"question":"Can guaranteed loan offers exist?","answer":"No legitimate lender can guarantee approval before conducting affordability and credit checks. Any guarantee of loan approval is a hallmark of either fraudulent or irresponsible lending."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-car-listing","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-car-listing","question":"How do I spot a fake used car listing?","shortAnswer":"Fake car listings use genuine photos at below-market prices and push for deposit payments before viewing — never pay for a vehicle you have not physically inspected and test driven.","explanation":"Vehicle fraud on classified sites is among the highest-value consumer fraud categories. Fraudsters list desirable used cars — premium brands, low mileage, competitive price — using photos taken from genuine listings elsewhere. They claim to be based abroad or unable to show the car in person, and offer to ship it after a deposit is paid.\n\nSome variants use the honest-looking 'escrow' approach: the seller proposes a fake escrow service to reassure the buyer. After the buyer deposits funds to the fake escrow and is 'confirmed', the seller claims the car will be shipped. Neither the car nor the funds materialise.\n\nFor in-person scams, a car that does exist may have a cloned number plate matching a legitimately taxed and MOT'd vehicle, masking an untested or accident-damaged car. Always run a full HPI or DVLA check on the registration number before purchase, check the VIN on the dashboard against the V5C logbook, and verify the logbook against the DVLA database.\n\nAny seller who cannot meet you at the car's actual location for a viewing and test drive should be treated with maximum caution. A legitimate private seller has nothing to lose from showing their vehicle.","redFlags":["Price significantly below market value for the make, model, and mileage","Seller claims to be abroad and proposes shipping after deposit","Photos reverse-image-search to a different listing or a stock photo site","Seller pushes a specific escrow or payment service","V5C logbook address does not match the viewing location","VIN on dashboard does not match VIN in the V5C logbook"],"whatToDoNow":["Never pay any deposit without physically viewing and test-driving the car","Run an HPI check or DVLA check on the registration","Verify V5C logbook authenticity through DVLA","Pay by card where possible for chargeback protection if collection is local","Report fake vehicle listings to the platform and to Report Fraud (UK, formerly Action Fraud) or the FTC (US)"],"faq":[{"question":"What is an HPI check?","answer":"An HPI (Hire Purchase Information) check reveals whether a car has outstanding finance, has been reported stolen, has been written off, or has a mileage discrepancy. It is an essential pre-purchase step."},{"question":"Is it safe to buy a car on Facebook Marketplace?","answer":"Many legitimate private sales happen there, but fraud is also common. The same rules apply: in-person viewing, HPI check, and no upfront deposits before inspection."},{"question":"What is clocking a car?","answer":"Clocking means fraudulently reducing the recorded mileage on a vehicle to inflate its value. An HPI check and service history review help identify clocked vehicles."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-email-from-my-boss","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-email-from-my-boss","question":"How do I spot a fake email from my boss or CEO asking for a transfer?","shortAnswer":"CEO fraud emails impersonate senior executives asking for urgent bank transfers or gift card purchases — verify any financial request by calling the requester directly on a known number.","explanation":"CEO fraud, also known as business email compromise, is a targeted attack where an employee in finance or accounts receives an email that appears to be from the CEO, CFO, or another senior executive asking for an urgent, confidential wire transfer. The request bypasses normal approval processes because of the implied authority of the sender and the instruction to keep it confidential.\n\nThe fraudster either compromises the executive's real email account or spoofs their email address so that the display name shows the executive's name while the actual address is from an external domain. In more sophisticated versions, the domain is registered to look nearly identical to the company's real domain (company-name.net instead of company-name.com).\n\nThe instruction is almost always: act fast, do not tell colleagues, it is confidential. These three elements — speed, secrecy, and authority — are engineered to prevent the employee from applying the verification steps that would expose the fraud.\n\nThe right response is always to verify any payment request through a separate channel — by calling the supposed requester on a number you already have, walking to their office, or using your company's internal communication system. No genuine urgent transfer request should override this simple check.","redFlags":["Sender email domain differs from your company's official domain","Request for urgency combined with unusual secrecy ('do not discuss with colleagues')","Payment instruction is to a bank account not previously used","Request arrived outside normal business processes or approval workflows","Requester is allegedly travelling and cannot be contacted by normal means"],"whatToDoNow":["Call the supposed requester directly on a known number before making any transfer","Do not reply to the suspicious email — call instead","Report internally to your finance director and IT security team","If a transfer was made, instruct your bank to attempt a recall immediately","Report to the Report Fraud service (UK, formerly Action Fraud) or the FBI IC3 (US)"],"faq":[{"question":"How do fraudsters know who our CEO is?","answer":"Company websites, LinkedIn, Companies House filings, and press releases make executive names and roles publicly available. Fraudsters research targets before attacking."},{"question":"What if the email comes from the CEO's real address?","answer":"Executive email accounts are frequently compromised through phishing. A genuine email address is not proof of a genuine request. Verify by phone regardless."},{"question":"Can employees be held liable for CEO fraud transfers?","answer":"Liability typically rests with the organisation, but employees who bypass internal controls may face disciplinary action. Verification steps exist precisely to protect staff as well as company funds."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-deepfake-video-scam","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-deepfake-video-scam","question":"How do I spot a deepfake video used in a scam?","shortAnswer":"AI-generated deepfake videos are used to impersonate celebrities, executives, and family members in investment and emergency scams — unnatural facial movement, audio sync issues, and requests verifiable by other channels are key tells.","explanation":"Deepfake video technology uses artificial intelligence to place a real person's face onto a different body or to generate an entirely synthetic person speaking scripted content. In scam contexts, deepfakes are used to create fake celebrity endorsements for investment platforms, fake video calls from executives authorising transfers, and 'virtual kidnapping' videos showing a family member in distress.\n\nCommon visual and audio artefacts in AI-generated video include flickering or blurring at the edges of the face, unnatural blinking patterns (too regular or absent), slight audio desynchronisation where lip movements do not quite match the words, oddly smooth skin texture, inconsistent lighting between the face and background, and hair that looks artificial or merges poorly with the background.\n\nHowever, deepfake quality is improving rapidly. Relying solely on visual detection is increasingly unreliable. The most robust approach is to verify the content through an independent channel: if a video of a celebrity endorsing a platform is shared on social media, check that celebrity's official accounts for any mention of the product. If an executive appears in a video call requesting an action, call them back on a known number.\n\nFor 'virtual kidnapping' scenarios — where you receive a video or audio of a loved one in distress asking for ransom — call the person directly on their own number before doing anything else. In the vast majority of cases they will answer and be safe.","redFlags":["Facial blurring or flickering at the edges when the person turns their head","Audio does not quite sync with lip movements","Celebrity endorses a product or platform you cannot find on their verified channels","Skin appears unnaturally smooth or the hair merges oddly with the background","Video call executive makes an unusual request and cannot be reached by other means to confirm","Emotional urgency — distress, kidnapping claim, investment window closing"],"whatToDoNow":["Verify celebrity endorsements on their official verified social media accounts","Call back any executive through a known number to verify video call requests","Call family members directly on their own phones before responding to distress videos","Report deepfake investment ads to the platform and to the FCA (UK) or FTC (US)","Report deepfake-enabled fraud to the Report Fraud service (UK, formerly Action Fraud) or the FBI IC3 (US)"],"faq":[{"question":"Can I use software to detect deepfakes?","answer":"Deepfake detection tools exist (Microsoft Video Authenticator, Deepware Scanner) but are not foolproof, especially against high-quality fakes. Verification through independent channels is more reliable than technical detection alone."},{"question":"Are all AI-generated videos scams?","answer":"No. AI video tools have legitimate creative uses. The key question is whether the video is being used to misrepresent a real person to extract money or personal information."},{"question":"What is voice cloning in scams?","answer":"Voice cloning creates a synthetic replica of a person's voice from a short audio sample. It is used in phone scams where you appear to hear a family member or executive's voice. The same verification principle applies: call back independently."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-educational-credential-service","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-educational-credential-service","question":"How do I spot a fake degree or educational credential service?","shortAnswer":"Fake degree mills sell worthless diplomas from invented or unaccredited institutions — verify any qualification by checking the institution's accreditation with the relevant national body.","explanation":"Degree mills are organisations that sell academic degrees and diplomas with little or no academic study required. They operate online, often from jurisdictions with minimal oversight, and produce convincing documents bearing the name of a fictitious university or one registered in a state with no meaningful quality control.\n\nSome degree mills impersonate real universities. Others invent names designed to sound prestigious (British University of Advanced Sciences, International College of Management) and register as companies rather than as educational institutions. A third type exploits the existence of genuine foreign institutions by issuing certificates that have no relationship to the named university.\n\nThe harm is twofold: to the purchaser (who may rely on a worthless credential to seek employment or professional registration, only to have it discovered) and to employers and the public who are misled about a person's qualifications.\n\nIn the UK, accredited universities are listed on the UK Register of Learning Providers (ukrlp.co.uk) and recognised by the Quality Assurance Agency (QAA). In the US, accreditation is carried out by bodies recognised by the Department of Education (ed.gov). If an institution's accreditor is not listed in these databases, the qualification has no recognised standing.","redFlags":["Degree awarded based on 'life experience' rather than academic study","Institution is not listed on an official national register of recognised providers","Process is entirely online with no real coursework, exams, or attendance","Diploma issued within days or weeks of payment","Institution name cannot be found in press, alumni communities, or academic literature","Accreditation claimed from bodies not recognised by official national authorities"],"whatToDoNow":["Verify any institution on the UK Register of Learning Providers or the US Department of Education database","Check the accrediting body's own recognition status before trusting it","Report suspected degree mills to the QAA (UK) or to accreditation authorities in the relevant country","If you already purchased a credential, seek advice from a legitimate career counsellor about genuine qualification pathways"],"faq":[{"question":"Can an employer detect a fake degree?","answer":"Many employers use verification services that contact the institution or check against accredited institution databases. Fake degrees from unrecognised institutions are increasingly identified, with serious consequences for the holder."},{"question":"Is buying a degree illegal?","answer":"In many jurisdictions, using a fake or unaccredited degree to gain employment or professional registration is fraud. Simply purchasing one may also be illegal depending on the country."},{"question":"What is an accreditation mill?","answer":"An accreditation mill is a fake accrediting body set up to give an appearance of legitimacy to degree mills. It has no recognition from genuine national education authorities."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-cashback-reward-email","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-cashback-reward-email","question":"How do I spot a fake cashback or reward points email?","shortAnswer":"Fake cashback emails claim your points are about to expire and ask you to click a link to redeem them — real loyalty programmes show your balance in your account and do not expire points through email links.","explanation":"Loyalty programme phishing exploits the wide participation in rewards schemes offered by supermarkets, airlines, credit cards, and retailers. The email claims you have a balance of points about to expire and must click to redeem them before a deadline. The urgency is designed to prompt rapid action.\n\nThe phishing link leads to a fake version of the loyalty programme's login page. Your credentials are harvested and used to redeem real points in your account or to access linked payment information. Some variants go further and ask you to verify your card details to 'unlock' the points.\n\nReal loyalty programmes display your point balance in your account when you log in. They may send expiry reminders, but they direct you to log in at the official site — not to verify your account through a link by entering your card number. Most major schemes do not expire points on the timelines suggested by these emails.\n\nVerify any claim by logging in to the loyalty programme's app or website directly. Check your actual balance and the real expiry policy. If your email's link destination differs from the official domain of the programme, delete the message.","redFlags":["Link goes to a domain other than the loyalty programme's official site","Email asks for card details or CVV to 'activate' or 'unlock' points","Urgency: points will be lost in 24-48 hours","Email arrives without you taking any action in the programme recently","Sender email domain does not match the programme's official brand domain","Point balance shown differs from what you see when you log in directly"],"whatToDoNow":["Log in to the loyalty programme directly through the official app or typed address","Check your real balance and expiry terms there","Report the phishing email to the loyalty programme's fraud team","Delete the email","If you entered your credentials, change your password immediately and check for unauthorised redemptions"],"faq":[{"question":"Do loyalty points actually expire?","answer":"Some programmes do expire inactive points after a period without activity. The way to check is through the programme's official website, not by clicking an email link."},{"question":"Can loyalty account details be used for financial fraud?","answer":"In some schemes, points can be exchanged for gift cards or cash. Fraudsters who access your loyalty account may redeem your points or use linked payment methods for purchases."},{"question":"What if the email contains my real member number?","answer":"Member numbers are sometimes exposed in data breaches. A correct member number does not confirm that an email is from the genuine programme — verify through the official app."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-linkedin-message-from-a-recruiter","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-linkedin-message-from-a-recruiter","question":"How do I spot a fake recruiter message on LinkedIn?","shortAnswer":"Fake LinkedIn recruiters use sparse profiles with stock photos, offer vague well-paid roles, and eventually request personal data or fees — verify recruiter profiles and company listings before sharing any information.","explanation":"LinkedIn's professional reputation makes it a credible channel for fraudulent recruitment. Fake recruiter profiles look superficially plausible — they list employment at real companies, have a profile photo, and send a well-written connection request followed by a job message. However, the profile was created recently, has few connections, and lists employment without an actual company page link.\n\nThe recruitment process that follows typically bypasses normal interview steps. After a brief chat, a job offer or 'interview' is extended and you are asked to complete an onboarding form requiring your date of birth, National Insurance number, bank details for payroll, and a passport scan. These are then used for identity fraud.\n\nAlternatively, the process mirrors the fee-based recruitment scam: you are told that an enhanced DBS check, background investigation, or training programme must be paid for upfront. Once paid, contact ceases.\n\nVerify recruiter profiles by checking the profile's connection history, looking for the company on LinkedIn's company pages and seeing whether the recruiter appears in its employee list, and searching the company's official website for careers pages listing the vacancy. Call the company's switchboard to ask if the recruiter is a genuine employee.","redFlags":["Profile created recently with few connections relative to claimed seniority","Profile photo is a stock image (verifiable via reverse image search)","Job offer made without substantive interview steps","Asks for personal documents, National Insurance number, or bank details before contract","Requires upfront payment for background check, training, or equipment","Company the recruiter lists cannot be found with the recruiter's name in its employee directory"],"whatToDoNow":["Reverse image search the recruiter's profile photo","Search LinkedIn for the company and see if the recruiter is listed as an employee","Call the company's main number independently to verify the vacancy and the recruiter","Report suspicious profiles to LinkedIn using the 'Report' option","Do not share sensitive personal data until you have a signed employment contract from a verified entity"],"faq":[{"question":"Do real recruiters cold-contact people on LinkedIn?","answer":"Yes, genuine headhunters regularly send cold messages. The difference is that their profile has a verifiable history, they discuss real roles in detail, and they do not ask for money or sensitive data before an offer."},{"question":"What if the recruiter works at a real company I can look up?","answer":"Fraudsters list real company names on fake profiles. Call the company's HR department independently to confirm the recruiter's identity and the vacancy."},{"question":"Is it safe to list personal details on a LinkedIn profile?","answer":"Keep personal contact details (phone, home address) off your public profile. Use LinkedIn's messaging and applications through the platform rather than providing your personal email to unsolicited contacts."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-computer-virus-warning","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-computer-virus-warning","question":"How do I spot a fake computer virus warning email?","shortAnswer":"Fake virus warning emails claim malware was detected on your device and offer a one-click removal link — real antivirus software never notifies you by email asking you to click an external link to clean your device.","explanation":"Email-based virus warning phishing uses fear of malware to prompt hasty action. The email claims to be from your antivirus provider, Microsoft Defender, or 'your internet service provider' and states that a virus, spyware, or hacker access was detected on your device. You are directed to click a link to run a scan, remove the threat, or call a support number.\n\nThe link leads to one of two outcomes: a credential-harvesting page disguised as a security scan, or a malicious download that installs the actual malware the email claimed to be warning you about. The support number routes to a tech-support scam operation.\n\nReal antivirus software like Windows Defender, Malwarebytes, Norton, or Bitdefender alerts you through its own application interface — a notification in the system tray or an in-app alert when you open the software. It does not send you an email asking you to click a link to remove a detected threat.\n\nYour internet service provider does not monitor your device for viruses and does not send you detection alerts. If your ISP has reason to contact you (e.g. your IP address is sending spam from a botnet), they contact you through your account portal, not by an email with a one-click fix link.","redFlags":["Email claims malware was detected and offers a one-click removal link","Sender purports to be an antivirus brand but the email address domain does not match","Link goes to a site unrelated to the named antivirus provider","Support phone number provided in the email","Claims your ISP detected suspicious activity on your device","Urgent language about immediate data loss or account compromise"],"whatToDoNow":["Do not click any link in the email","Open your antivirus software directly from your system tray to run a real scan","Report the phishing email to the brand being impersonated and to your email provider","Delete the email","If you clicked the link, run a full antivirus scan and check for newly installed programmes"],"faq":[{"question":"Can opening the email itself infect my device?","answer":"Reading a plain text or HTML email is not enough to install malware. The risk comes from clicking links or downloading attachments."},{"question":"My real antivirus found a threat — how does it actually notify me?","answer":"Genuine antivirus notifications appear as a pop-up or system tray alert from the installed application, or as a banner within the antivirus app when you open it. They do not arrive by email."},{"question":"What if my ISP sends a legitimate security notice?","answer":"Your ISP may send genuine emails about your account, but they will direct you to your account portal using a link matching their official domain — not to a third-party scan tool or phone number."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-banking-app-overlay","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-banking-app-overlay","question":"How do I spot a fake banking app overlay or screen-reading malware?","shortAnswer":"Banking trojans display a fake login overlay on top of your real banking app to steal credentials — keep your device updated, only install apps from official stores, and use your bank's official app rather than browser login where possible.","explanation":"Mobile banking malware (banking trojans) works differently from web phishing. Rather than directing you to a fake site, it installs an application on your Android device that monitors which apps you open. When you open your banking app, it displays an identical-looking fake overlay on top of the real app. You type your credentials into the overlay — thinking it is the real app — and they are transmitted to the fraudster.\n\nSome banking malware also captures one-time passcodes by reading SMS messages. Combined with stolen credentials, this gives the attacker everything they need to log in to your bank account and approve transfers.\n\nAndroid devices are primarily affected because they allow app installation from outside the official Play Store. iOS is significantly more restricted. Infection typically comes from malicious APK files shared through social media, WhatsApp messages, or through fake QR codes linking to file downloads disguised as security updates.\n\nThe overlay is designed to be visually perfect, so visible detection is difficult. Behavioural tells include the keyboard appearing before you have tapped a text field, slight delays before the overlay appears, or the overlay appearing even when you have no internet connection (it is stored locally and displays offline). Keeping your operating system and banking app updated, using Google Play Protect, and never installing APK files from outside the Play Store are the main defences.","redFlags":["Banking app appears to reload or refresh before showing the login screen","Keyboard appears without you tapping a field","You installed an app from outside the official Play Store recently","Received a WhatsApp or SMS link to a security update APK","Your bank notified you of a login from an unfamiliar device"],"whatToDoNow":["Do not enter your credentials if the app behaviour feels unusual","Run a malware scan using Google Play Protect (Settings > Security > Play Protect)","Remove any recently installed apps from outside the Play Store","Contact your bank immediately if you believe credentials were captured","Perform a factory reset if malware is confirmed, and then change all banking passwords"],"faq":[{"question":"Is iPhone less vulnerable to banking trojans?","answer":"iOS's strict app installation controls make banking trojans much rarer on iPhones. The attack surface is primarily Android devices that install APK files from outside the Play Store."},{"question":"How do I check if an app is from the official Play Store?","answer":"Go to Settings > Apps > [App Name] > Advanced > App details. If the source is listed as Play Store, it is official. Any other source means it was sideloaded."},{"question":"Does my bank's app have any protection against overlays?","answer":"Many major banking apps include overlay detection that blocks the app from loading if another app is drawing on top of it. Keep your banking app updated to benefit from the latest protections."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-spot-a-fake-inheritance-or-windfall-email","url":"https://scamencyclopedia.org/questions/how-do-i-spot-a-fake-inheritance-or-windfall-email","question":"How do I spot a fake inheritance or windfall email?","shortAnswer":"Inheritance and windfall emails claim a distant relative or anonymous benefactor left you a large sum and ask for fees to release it — this is the classic advance-fee fraud and no such inheritance exists.","explanation":"Inheritance fraud, a variant of the advance-fee scam (historically known as the Nigerian Prince fraud or 419 fraud), is one of the longest-running email scam formats and remains common because it targets a universal human hope — unexpected financial improvement. The email is typically from a lawyer, banker, or official claiming that a person sharing your surname has died with no known heirs and that you are entitled to their estate.\n\nTo 'claim' the inheritance, you are told to pay a series of fees: legal costs, probate fees, transfer taxes, foreign exchange commissions, anti-money-laundering charges, and bank release fees. Each payment reveals a new required fee. The amount you have already paid is used as psychological leverage — 'you have come this far, it would be a shame to stop now'. The inheritance never arrives.\n\nLegitimate unclaimed estates do exist and are administered by government bodies. In the UK, the Treasury Solicitor's Bona Vacantia division lists unclaimed estates publicly at gov.uk. In the US, unclaimed property is administered by state governments. No legitimate estate administration requires you to pay fees upfront to an unknown overseas account.\n\nIf you receive such an email, the only safe action is to delete it. There is no legitimate prize waiting. Even if you engage to 'investigate', the fraudster will use any information you provide to tailor more convincing follow-up messages.","redFlags":["Claims you are the heir to a large estate from a person you do not know","Requires upfront fees for legal processing, tax, or bank release","Sender is a foreign lawyer, banker, or official you have no prior relationship with","Estate amount is very large — millions — with little plausible backstory","Requests your bank account details to 'transfer' the funds","Successive fees appear after each payment with a new justification"],"whatToDoNow":["Delete the email without responding","Do not pay any fee regardless of how many you have already paid","Check legitimate unclaimed estates at gov.uk/unclaimed-estates (UK) or your state's unclaimed property portal (US)","Report to the Report Fraud service (UK, formerly Action Fraud) or the FTC (US)","If you have already paid fees, contact your bank and report to authorities — ongoing payments will only increase your loss"],"faq":[{"question":"Could there really be an unclaimed estate I am entitled to?","answer":"It is possible but rare. Check legitimate unclaimed estate registers through official government websites — not through an email from an unknown foreign lawyer."},{"question":"Why do these scams still work if they are so well known?","answer":"Advance-fee fraud succeeds through emotional engagement over time. Once a victim has paid some fees, sunk-cost psychology makes it hard to accept that the inheritance will never arrive."},{"question":"What if the email includes real-looking legal documents?","answer":"Documents are trivially easy to fabricate using publicly available legal templates. A convincing document is not evidence that the inheritance is real."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-pay-by-bank-transfer-to-marketplace-seller","url":"https://scamencyclopedia.org/questions/is-it-safe-to-pay-by-bank-transfer-to-marketplace-seller","question":"Is it safe to pay by bank transfer to a marketplace seller?","shortAnswer":"Bank transfers offer almost no fraud protection — once the money leaves your account, it is extremely difficult to recover. Use a payment method with buyer protection whenever possible.","explanation":"Bank transfers, including wire transfers and direct bank-to-bank payments, are irreversible by design. When you pay a legitimate business by card, your bank can initiate a chargeback if the goods never arrive or the seller is fraudulent. No equivalent mechanism exists for a standard bank transfer — the receiving bank has no obligation to reverse the payment, and your own bank cannot force a refund.\n\nFraudsters who operate fake marketplace listings specifically request bank transfer because it gives them a clean exit. Once the funds clear, they disappear, and your avenue for recovery is limited to reporting to your bank, the police, and potentially pursuing civil litigation — a slow and uncertain process.\n\nThere are narrow legitimate scenarios where bank transfer is appropriate: paying a well-known, established business you have dealt with before, paying within a secure platform that holds funds in escrow, or making a transfer to someone you know personally. Even then, always verify account details through a second channel before sending.\n\nThe safest alternative for marketplace purchases is a credit card or a platform-backed payment system such as PayPal Goods and Services, which both offer dispute resolution. If a seller insists on bank transfer and declines all other options, treat that insistence as a strong warning sign.","redFlags":["Seller refuses credit card, PayPal, or platform-native checkout and demands bank transfer only","Price is unusually low compared with identical listings elsewhere","Seller communicates outside the marketplace platform via personal email or messaging apps","Account was created very recently or has no verified reviews","Seller creates urgency, claiming another buyer is waiting or the item will sell today","Bank details provided differ from those shown on the platform profile"],"whatToDoNow":["Prefer credit card or a buyer-protected payment service such as PayPal Goods and Services","If you have already paid by transfer and suspect fraud, call your bank immediately to request a recall — time is critical in the first 24 hours","Report the listing and seller to the marketplace platform","File a report with your national fraud reporting body and local police","Keep all message records, screenshots of the listing, and transfer confirmation as evidence","Contact your bank's fraud team even if time has passed — some recoveries are still possible via bank-to-bank cooperation"],"faq":[{"question":"Can my bank reverse a bank transfer if I was scammed?","answer":"Banks can attempt a voluntary recall through interbank messaging, but there is no guarantee. Success rates drop sharply after 24-48 hours and fall near zero once the recipient withdraws the funds. Always call your bank the moment you realise you have been defrauded."},{"question":"Is bank transfer safe when paying a business I already know?","answer":"Established businesses with verifiable contact details pose far lower risk, but always re-confirm the sort code and account number directly via the company's official website before transferring. Invoice redirect fraud involves criminals intercepting emails and changing payment details."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-click-a-link-in-a-delivery-text","url":"https://scamencyclopedia.org/questions/is-it-safe-to-click-a-link-in-a-delivery-text","question":"Is it safe to click a link in a delivery text message?","shortAnswer":"Delivery text scams are among the most common phishing methods in use today. Unless you initiated a tracked delivery and the link matches the carrier's official domain, do not click it.","explanation":"Fake delivery notifications — sometimes called 'smishing' — impersonate parcel carriers such as national postal services or major couriers. The message typically claims a package could not be delivered and directs you to a link to reschedule or pay a small customs fee. The link leads to a convincing fake website that harvests card details, personal information, or login credentials.\n\nThe small fee element is psychologically effective because it seems trivial. Victims enter their card details to pay a pound or a dollar and unknowingly hand over their full card number, expiry, CVV, and billing address to criminals who then charge large amounts or sell the data.\n\nTo check whether a delivery notification is genuine, open a fresh browser tab and type the carrier's official website address directly, or use the tracking number in the message by entering it yourself on the official site. Avoid clicking any link in an unexpected text, even if the sender's name looks familiar — SMS sender names can be easily spoofed.\n\nIf you have children or elderly relatives who receive parcels regularly, explain this specific scam to them. The format is highly convincing and the fake sites are often near-pixel-perfect copies of real carrier websites.","redFlags":["You were not expecting a delivery or have no outstanding orders","The link goes to an unusual domain rather than the carrier's official address","Message asks for a small customs or redelivery fee before showing any tracking information","Spelling or grammar errors in the message body","The sender number is a regular mobile number rather than a short code or verified business sender","The website reached via the link requests card details immediately"],"whatToDoNow":["Do not click the link — instead, go directly to the official carrier website and enter the tracking number manually","If you already clicked and entered card details, contact your bank immediately to freeze the card","Report the smishing message to your national spam SMS reporting service","Forward the suspicious text to 7726 (SPAM) in the US and UK as a quick report","Delete the message and block the sender number","Check your bank statements over the following weeks for unauthorised charges"],"faq":[{"question":"What if I clicked the link but did not enter any information?","answer":"Simply loading a malicious page can sometimes trigger drive-by downloads, but this is less common than credential harvesting. Run a reputable malware scan on your device, ensure your browser is up to date, and monitor your accounts for unusual activity."},{"question":"How can I tell if a delivery text is real?","answer":"Check whether you are genuinely expecting a delivery. If so, copy the tracking number (not the link) and paste it into the official carrier website. Legitimate carriers never require payment through a link sent in an SMS."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-use-public-wifi-for-banking","url":"https://scamencyclopedia.org/questions/is-it-safe-to-use-public-wifi-for-banking","question":"Is it safe to use public Wi-Fi for banking?","shortAnswer":"Using public Wi-Fi for banking carries real risk. An attacker on the same network can potentially intercept your session or redirect your traffic. Use mobile data or a VPN instead.","explanation":"Public Wi-Fi in cafes, airports, hotels, and shopping centres is shared infrastructure you have no control over. Attackers can set up rogue hotspots with convincing names — 'Airport Free WiFi' — that look identical to the venue's legitimate network. Once you connect, all unencrypted traffic passes through their device.\n\nModern banking apps and websites use HTTPS, which encrypts data in transit. However, attackers can use SSL-stripping techniques on unprotected networks to downgrade connections, or they can use a man-in-the-middle proxy to intercept your session token even after you have authenticated. Session hijacking can allow an attacker to operate your account without ever knowing your password.\n\nThe practical risk varies. A sophisticated attacker is required to exploit most modern banking sessions, so casual use on reputable public networks is unlikely to result in compromise. But the risk is not zero, and the consequences of a bank account takeover are severe. The safest habit is to switch to your mobile carrier's data network for any financial activity when away from a trusted home or work network.\n\nIf you must use public Wi-Fi, a reputable VPN (virtual private network) encrypts all your traffic before it reaches the hotspot, making interception far harder. Enable two-factor authentication on your banking apps so that even a compromised password alone is insufficient.","redFlags":["Multiple similarly named hotspots available in the same location (one may be a rogue clone)","The Wi-Fi network does not require any login or venue code to join","Your device warns that the network's security certificate is untrusted","The connection redirects you unexpectedly before reaching your bank's site","Banking session logs show logins from unfamiliar locations or devices"],"whatToDoNow":["Switch to mobile data for any banking or financial transactions when on the go","Install a reputable VPN and activate it whenever you use public Wi-Fi","Enable two-factor authentication on all banking and financial apps","Check your banking app's recent login history regularly for unrecognised access","Keep your device's operating system and banking app updated to patch known vulnerabilities","If you suspect your session was compromised, change your banking password immediately and contact your bank"],"faq":[{"question":"Does HTTPS protect me completely on public Wi-Fi?","answer":"HTTPS encrypts the content of your connection, but it does not prevent all attacks. Rogue hotspots can issue fake certificates, and some older apps or sites may allow insecure fallbacks. HTTPS is necessary but not sufficient on untrusted networks."},{"question":"Is the public Wi-Fi at a reputable hotel safer than at a random cafe?","answer":"Brand reputation offers no technical security guarantee. Both types of network can be misconfigured or have rogue access points nearby. Treat all public Wi-Fi the same — use a VPN or mobile data for sensitive transactions."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-scan-a-qr-code-on-a-parking-meter","url":"https://scamencyclopedia.org/questions/is-it-safe-to-scan-a-qr-code-on-a-parking-meter","question":"Is it safe to scan a QR code on a parking meter?","shortAnswer":"QR codes on parking meters and other public fixtures are frequently tampered with by fraudsters. Criminals place stickers over the genuine code, redirecting you to a fake payment page that steals your card details.","explanation":"QR code fraud — sometimes called 'quishing' — has grown sharply as contactless payments became mainstream. Parking meters are a prime target because they are often unattended, located in busy public areas, and associated with small, routine payments that victims may not scrutinise closely.\n\nThe attack is simple: a criminal prints a QR code sticker linking to a convincing clone of the genuine parking payment site, then sticks it over or next to the legitimate code. When you scan and pay, you receive no parking confirmation (or a fake one), and your card details go directly to the fraudster. The fake sites often capture full card information, billing address, and sometimes ask for driving licence details under the pretence of verification.\n\nVisually inspect any QR code before scanning. If the code appears to be a sticker placed on top of the original surface, is peeling at the edges, or is positioned slightly off-centre, treat it as suspect. Where possible, use the meter's keypad interface or a parking app you have downloaded independently from your device's official app store, not from a QR code.\n\nMunicipalities and parking operators are increasingly aware of this fraud and some have moved to tamper-evident QR codes or printed official app names directly on meters. Always look for the official app name on the meter and search for it directly in your app store rather than scanning.","redFlags":["The QR code looks like a sticker placed over the original meter surface","Edges of the code are peeling, bubbling, or showing signs of a layer underneath","The website reached after scanning is not the known official parking app domain","The site asks for more personal information than just card details and parking duration","You receive no official parking receipt or confirmation number after paying","The QR code is positioned in an unusual location on the meter"],"whatToDoNow":["Use the meter's physical keypad or buttons instead of the QR code where available","Download the official parking app from your device's app store using the name printed on the meter","If you already paid via a suspicious QR code, contact your bank or card provider immediately to dispute the charge and block the card","Report tampered meters to the local authority or parking operator and to your national consumer protection agency","Check your bank statement for additional charges following the incident","Take a photo of the meter and QR code as evidence when reporting"],"faq":[{"question":"How can I tell if a QR code on a meter is genuine?","answer":"Look for sticker edges, misalignment, and peeling. Cross-reference the domain shown after scanning against the official operator name printed elsewhere on the meter. If in doubt, use the physical keypad or find the app independently in your app store."},{"question":"Are QR code scams only a parking problem?","answer":"No — the same technique appears on restaurant table cards, event signage, bike rental stations, and even posted letters. Any QR code in a public or semi-public space deserves the same visual check before scanning."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-give-my-id-to-an-online-platform","url":"https://scamencyclopedia.org/questions/is-it-safe-to-give-my-id-to-an-online-platform","question":"Is it safe to give my ID to an online platform?","shortAnswer":"Legitimate platforms that require identity verification — such as financial services, regulated marketplaces, and age-gated services — do have lawful reasons to collect ID. However, many fake platforms request ID as a pretext for identity theft. Know the difference before uploading anything.","explanation":"Identity documents — passports, driving licences, national ID cards — are among the most valuable items a criminal can obtain. A fraudster with your ID can open credit accounts, take out loans, commit crimes in your name, or sell the document on criminal markets. Once your identity is compromised, the damage can persist for years.\n\nLegitimate reasons to request ID include: opening a bank account or investment account (required by law), verifying age for alcohol, gambling, or adult content platforms, and meeting anti-money-laundering regulations on certain marketplaces. These platforms typically use regulated third-party identity verification services, display clear privacy policies, and are registered with relevant financial or data protection authorities.\n\nFraudulent platforms that have no real product or service will request ID early in the registration process to harvest the document, then either block your account or disappear. Crypto investment scams, fake job offers, and fraudulent rental listings are common vehicles for ID harvesting. A platform that asks for a passport scan before you have made any transaction or while promising unusually high returns should be treated with extreme suspicion.\n\nBefore uploading any ID document, verify the company's registration with the relevant regulator, check independent reviews on trustworthy platforms, confirm the company has a verifiable physical address, and review their data retention and privacy policy. If in doubt, do not submit — a legitimate company will allow you to verify through alternative means.","redFlags":["Platform requests ID before any account activity, purchase, or regulated transaction","The company cannot be found on a regulator's register or has no verifiable business address","High promised returns or job offers that seem too good to be true accompany the ID request","The platform was found through a social media ad or unsolicited message rather than your own research","Privacy policy is vague, missing, or does not specify how long ID is retained","The platform asks for a selfie holding your ID alongside unusual extras like a handwritten note"],"whatToDoNow":["Search the company name on your national financial regulator's register and company registry before proceeding","Read independent reviews on established consumer review platforms","If you have already submitted ID and now suspect fraud, contact Report Fraud (UK, formerly Action Fraud), the FTC (US), or your national equivalent","Place a fraud alert or credit freeze with the major credit bureaus if your ID has been misused","Notify your bank that your identity documents may be compromised","Monitor your credit report for new accounts you did not open"],"faq":[{"question":"What should I do if a platform I gave my ID to turns out to be fraudulent?","answer":"Act quickly: report to your national fraud authority, place a fraud alert with credit bureaus, notify your bank, and consider reporting your passport or driving licence as potentially compromised to the issuing authority so it is flagged."},{"question":"Is it safer to give just one side of my ID rather than both?","answer":"A fraudster can often do significant damage with even partial ID information. Limiting what you share reduces risk but does not eliminate it — the better protection is verifying the platform's legitimacy before sharing anything at all."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-send-a-deposit-before-viewing-a-rental","url":"https://scamencyclopedia.org/questions/is-it-safe-to-send-a-deposit-before-viewing-a-rental","question":"Is it safe to send a deposit before viewing a rental property?","shortAnswer":"Sending a deposit before viewing a property in person is one of the clearest warning signs of rental fraud. Legitimate landlords and agents will always allow viewing before taking a financial commitment.","explanation":"Rental scams work by presenting a highly attractive listing — often taken from a genuine property site without permission — at a below-market price. The fraudster, posing as a landlord or agent, creates urgency by claiming multiple interested parties and insists on a deposit or first month's rent to 'secure' the property. Once the money is sent, they vanish and the property either does not exist as described or belongs to someone else entirely.\n\nThe request to pay before viewing is the central trap. Genuine landlords and estate agents have a financial and legal interest in renting to a reliable tenant and will always facilitate a viewing. A landlord who claims to be abroad, ill, or otherwise unable to arrange a viewing while simultaneously taking your money should never be trusted.\n\nVideo call 'viewings' are not a safe substitute. Fraudsters can show recorded footage of someone else's property and pose as the owner. If you cannot visit the property in person, ask a trusted friend or family member to view it on your behalf before any money changes hands.\n\nAlways verify that the person requesting the deposit has a legal right to rent the property. Ask for proof of ownership (Land Registry title in England, for example) or a legitimate agency agreement. Cross-check the agent's details against the relevant professional body register.","redFlags":["Landlord or agent requests a deposit or holding fee before you have viewed the property","Rental price is significantly below comparable properties in the same area","Landlord claims to be overseas or unavailable for an in-person viewing","Communication is exclusively via messaging apps rather than a professional email or agency system","Listing photos appear on multiple other sites under different addresses or landlord names","Urgency is created — other applicants are waiting, offer expires today"],"whatToDoNow":["Never send money — including a holding deposit or admin fee — before viewing a property in person","Reverse-image-search the listing photos to check if they appear on other sites","Verify the agent or landlord against an accreditation register or the Land Registry","If you have already sent money and suspect fraud, report to your bank immediately and to your national fraud reporting service","Report the fraudulent listing to the platform it appeared on","File a police report — a reference number may help with bank recovery efforts"],"faq":[{"question":"Is it ever acceptable to pay a small holding deposit before viewing?","answer":"In some markets a small, refundable holding deposit to temporarily pause viewings is accepted practice, but only after you have already viewed the property. Any request for money before any viewing should be refused."},{"question":"What if the property looks legitimate and the landlord has positive reviews?","answer":"Reviews can be fabricated and profiles can be cloned from legitimate landlords. Always conduct an independent identity and ownership check, and still view in person regardless of how convincing the listing appears."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-buy-from-a-social-media-ad","url":"https://scamencyclopedia.org/questions/is-it-safe-to-buy-from-a-social-media-ad","question":"Is it safe to buy from a social media advertisement?","shortAnswer":"Social media ads receive minimal vetting on most platforms, making them a common vehicle for fake stores, counterfeit goods, and non-delivery scams. Treat any ad for an unknown retailer with the same caution you would apply to a cold email.","explanation":"Social media advertising is effectively open to anyone — including fraudsters who can target ads with remarkable precision based on your browsing history, interests, and demographics. Fake online stores often run compelling ads showing high-quality product images (usually stolen from legitimate retailers) at heavily discounted prices, directing clicks to a convincing but fraudulent website.\n\nThe most common outcomes are: goods that never arrive, counterfeit goods that bear no resemblance to the advertised product, goods that are dramatically inferior in quality, and in some cases, card skimming where the checkout page harvests payment details for use elsewhere.\n\nBefore buying from any store you discovered through an ad, spend two minutes on independent research: search the store name with the word 'reviews' or 'scam', check for a verifiable physical address and working customer service contact, look up the domain registration date (very new sites are high risk), and verify the site uses HTTPS and displays clear return and refund policies.\n\nPay by credit card rather than debit card where possible — credit cards offer stronger chargeback rights in most jurisdictions. PayPal Goods and Services also provides buyer protection. Avoid bank transfer, crypto, and gift card payments entirely for purchases from unknown retailers.","redFlags":["Price is 60-90% below what the same product costs on established retailers","The store's website was registered recently (check with a WHOIS lookup)","No verifiable physical address, only a contact form or free email address","Reviews on the site itself are overwhelmingly five-star with generic text","Checkout does not show familiar payment provider logos or HTTPS padlock","Ad appears to target you very specifically with something you recently searched for"],"whatToDoNow":["Search the retailer's name plus 'reviews scam' before purchasing","Check the domain age using a free WHOIS tool","Pay by credit card or PayPal Goods and Services for buyer protection","If you have already paid and suspect fraud, contact your bank or PayPal for a dispute","Report the fraudulent ad directly to the social media platform using the 'report ad' function","Report to your national consumer protection body"],"faq":[{"question":"Do social media platforms verify advertisers?","answer":"Verification requirements vary by platform, but enforcement is inconsistent. Fraudulent ads regularly slip through. The existence of an ad does not imply the platform endorses or has vetted the advertiser."},{"question":"What if the product arrives but is not what was advertised?","answer":"This is still a form of consumer fraud. File a chargeback with your card issuer, dispute through PayPal if applicable, and report the store to your national trading standards or consumer protection agency."}],"lastReviewed":"2026-06-10"},{"slug":"what-happens-if-i-clicked-a-phishing-link","url":"https://scamencyclopedia.org/questions/what-happens-if-i-clicked-a-phishing-link","question":"What happens if I clicked a phishing link?","shortAnswer":"Clicking a phishing link does not automatically mean your accounts are compromised, but the risk depends on whether the site loaded, whether you entered any information, and whether malware was installed. Act quickly to assess the damage.","explanation":"The consequences of clicking a phishing link span a wide spectrum. At the low end, you loaded a malicious page but entered nothing and your device did not download any software — in this case your exposure is minimal, though a scan is still advisable. At the high end, you entered login credentials or payment details, or the page exploited a browser vulnerability to install malware silently.\n\nPhishing sites are primarily designed to harvest credentials. If you typed your username and password into the fake login page, the attacker now has access to that account — and if you reuse passwords, potentially many others. Change the password immediately on all accounts where you use the same or similar credentials, starting with email (which is often the master key to resetting everything else) and banking.\n\nMalware delivery via phishing links is less common on fully patched, modern devices but is not impossible. A page might trigger a download disguised as a PDF viewer or software update. Check your downloads folder and recent browser history for anything unusual. Run a reputable anti-malware scan.\n\nFor mobile devices, phishing links are generally less able to install software without user interaction, but the credential harvesting risk is identical. Enable two-factor authentication on all important accounts immediately — even if a password has been stolen, 2FA buys you time and often prevents a successful takeover entirely.","redFlags":["You typed any password, email, or card details into the page before realising it was fake","The page prompted you to download a file or install a browser extension","Shortly after clicking, you notice unexpected activity in your accounts","Your device behaves unusually — new apps appeared, battery drains faster, data usage spikes","You received an unexpected two-factor authentication code you did not request (attacker testing your credentials)"],"whatToDoNow":["Change passwords immediately on any account whose credentials you may have entered — start with email and banking","Enable two-factor authentication on all key accounts if not already active","Run a reputable malware scan on your device","Check your downloads folder and installed apps for anything unexpected","Contact your bank if any financial details were entered, and request card replacement if needed","Review recent login activity on email, social media, and financial accounts for unrecognised sessions","Report the phishing URL to your national cybercrime reporting centre"],"faq":[{"question":"I only clicked but didn't enter anything — am I safe?","answer":"If you did not enter any information and no download was triggered, your risk is low. However, run a malware scan and ensure your browser and operating system are fully updated to minimise the chance of an exploit-based infection."},{"question":"Can clicking a link on my phone install malware?","answer":"On fully patched iOS or Android devices, simply visiting a page rarely installs malware without additional user interaction. The main risk on mobile is credential harvesting if you entered details. Keep your OS updated to protect against known browser exploits."}],"lastReviewed":"2026-06-10"},{"slug":"what-happens-if-i-replied-to-a-scam-text","url":"https://scamencyclopedia.org/questions/what-happens-if-i-replied-to-a-scam-text","question":"What happens if I replied to a scam text?","shortAnswer":"Replying to a scam text primarily signals that your number is active, which can lead to more contact attempts. It does not in itself cause financial loss, but further engagement increases your risk significantly.","explanation":"Mass scam text campaigns are sent blindly to large lists of numbers. Many go unanswered. When you reply — even to say 'stop messaging me' — you confirm to the sender that a real person monitors this number. Your number may then be sold on to other operations or marked for more targeted follow-up attempts.\n\nThe immediate practical risk of a single reply is low if the conversation ends there. The risk escalates if you continue to engage, provide personal information such as your name or address, follow instructions given in the exchange, or click any link sent as part of the ongoing conversation.\n\nSome scam texts are designed specifically to elicit a response as the first step in a longer confidence fraud. The initial message might appear to be a wrong-number contact or a seemingly innocent question. Once you reply, the fraudster begins building a relationship to eventually request money or personal information. This technique is particularly common in romance scams and pig-butchering investment scams originating from large-scale fraud operations.\n\nIf you replied and the conversation continued briefly without you sharing information, your most effective action now is to stop responding, block the number, and report it. Do not attempt to test the scammer or gather information — this prolongs your exposure and wastes your time.","redFlags":["The original text claimed to have the wrong number but quickly pivoted to friendly conversation","The sender seems unusually persistent or emotionally engaging for a stranger","The conversation shifted toward investment opportunities, job offers, or romantic interest","The sender asked for your full name, location, or other personal details","Links were sent during the conversation","The texter claimed urgency or created an emotional narrative to keep you engaged"],"whatToDoNow":["Stop responding immediately — further engagement increases your risk","Block the number on your device","Report the number to your national SMS spam reporting service (forward to 7726 in US/UK)","Do not click any links sent during the exchange","Review whether you shared any personal information and monitor for unusual account activity if so","Tell family members about this pattern, particularly if they are in higher-risk demographics for relationship-based scams"],"faq":[{"question":"Will replying 'STOP' to a spam text actually stop the messages?","answer":"STOP works with legitimate marketing texts from registered businesses. With fraudulent or overseas-originated spam texts, replying STOP typically confirms your number is active and may increase contact attempts. Block the number instead."},{"question":"I told the scammer off — could they do anything malicious in retaliation?","answer":"In the vast majority of cases, scammers simply move on to other targets. They operate at scale and individual confrontations have little effect. Your confirmed active number may be sold, but there is no realistic personal retaliation risk in typical cases."}],"lastReviewed":"2026-06-10"},{"slug":"what-happens-if-i-gave-a-scammer-my-phone-number","url":"https://scamencyclopedia.org/questions/what-happens-if-i-gave-a-scammer-my-phone-number","question":"What happens if I gave a scammer my phone number?","shortAnswer":"Sharing your phone number with a scammer primarily enables follow-up contact and may result in your number being sold to other fraudsters. In some cases it can also be used in SIM-swapping attacks against your accounts.","explanation":"A phone number is a foundational piece of personal information. On its own it does not give a scammer access to your money or accounts, but it opens several escalation paths that can cause serious harm.\n\nThe most straightforward consequence is increased contact — calls and texts from the original scammer, and from others who purchase lists of verified numbers. These can range from nuisance calls to highly targeted social engineering attempts where the caller already knows your name and some personal details.\n\nA more serious risk is SIM swapping, sometimes called SIM hijacking. If a criminal has your phone number, your name, and some other personal details, they may be able to contact your mobile carrier and convince a representative to transfer your number to a SIM card they control. This gives them access to any SMS-based two-factor authentication codes sent to your number, potentially allowing them to take over your email, bank, or other accounts.\n\nTo reduce your exposure, contact your mobile carrier and ask about their account security options — many offer PIN protection or a 'port freeze' that prevents your number being transferred without in-store verification. Enable app-based authentication (such as an authenticator app) rather than SMS two-factor authentication wherever your accounts permit it, as app-based codes cannot be intercepted via SIM swap.","redFlags":["You start receiving unexpected two-factor authentication codes you did not request","Your phone loses service unexpectedly — possible sign of a completed SIM swap","You receive calls claiming to be from your mobile carrier, bank, or government shortly after sharing your number","Someone contacts you referencing personal details you did not share in this interaction","You receive an unusual volume of spam calls from varied numbers in a short period"],"whatToDoNow":["Contact your mobile carrier and add account PIN protection and a port freeze or transfer lock","Switch all important accounts from SMS two-factor authentication to an authenticator app","Review whether the scammer also has your name, address, or other information that could aid a SIM swap","Report your number as compromised to your national fraud reporting service","Block the specific number that contacted you","Monitor your bank and email accounts for unexpected access attempts"],"faq":[{"question":"What is SIM swapping and how does it work?","answer":"SIM swapping occurs when a criminal tricks your mobile carrier into reassigning your phone number to a SIM they control. They then receive your SMS two-factor codes, enabling them to reset passwords on your accounts. Carriers vary in how easily they can be socially engineered."},{"question":"If I change my phone number, am I safe?","answer":"Changing your number eliminates the SIM-swap risk for the old number and stops contact from that route, but it is an extreme step. Adding a port freeze and switching to app-based 2FA achieves most of the protection without losing your existing number."}],"lastReviewed":"2026-06-10"},{"slug":"what-happens-if-i-installed-a-remote-access-app","url":"https://scamencyclopedia.org/questions/what-happens-if-i-installed-a-remote-access-app","question":"What happens if I installed a remote-access app a scammer asked me to install?","shortAnswer":"Installing a remote-access app at a scammer's request gives them full visibility and control of your device. This is one of the most dangerous outcomes in tech support and banking scams — act immediately to stop access.","explanation":"Remote-access tools such as AnyDesk, TeamViewer, and similar applications are legitimate software used by IT professionals, but they are also the primary tool used in tech-support scams and banking impersonation fraud. When a scammer persuades you to install and share an access code, they see everything on your screen in real time and can operate your device as if they were sitting in front of it.\n\nWith this access, a scammer can open your banking app or website and initiate transfers, harvest saved passwords from your browser, read emails and messages to gather more personal information for further fraud, take screenshots of sensitive documents, or install additional persistent malware that continues operating after you close the remote session.\n\nA common tactic in banking impersonation scams is to guide you through your own banking app while the scammer watches — and sometimes controls — the screen. They may ask you to log in while they observe, or they may take over and make transfers to accounts they control while keeping you distracted with a phone conversation.\n\nThe moment you suspect the connection is being misused, close the app immediately. On most devices this means force-closing the application. Then disconnect from the internet (switch off Wi-Fi and mobile data) to prevent any ongoing data exfiltration. Call your bank on the number printed on your card — not any number the scammer provided — before reconnecting to the internet.","redFlags":["You were contacted unsolicited by someone claiming to be from your bank, a software company, or a government agency who then asked you to install software","The caller claimed your computer had a virus or your account had been compromised and needed their help","The 'agent' asked for a code displayed in the remote-access app to 'connect'","They advised you not to use your device for other tasks during the session","After the session, money moved from your accounts unexpectedly","The caller asked you to purchase gift cards or transfer money as part of a 'security procedure'"],"whatToDoNow":["Close the remote-access app immediately by force-closing it","Disconnect from the internet — switch off Wi-Fi and mobile data","Call your bank on the official number from the back of your card before reconnecting","Change all passwords from a different, clean device","Have a professional IT technician scan your device for malware or backdoors installed during the session","Report the incident to your national fraud reporting service and the remote-access software company's fraud team","Enable two-factor authentication on all accounts once you have secured your passwords"],"faq":[{"question":"Does uninstalling the remote-access app make me safe again?","answer":"Uninstalling the app closes the active remote connection, but does not remove any malware or backdoors that may have been installed during the session. Have a professional scan the device before using it again for banking or sensitive activities."},{"question":"My bank says the transfers are authorised — can I still get a refund?","answer":"Banks sometimes resist refunding scam payments by arguing you authorised the transfers, even when done under duress or deception. Challenge this formally in writing, cite the circumstances, and escalate to your national financial ombudsman if the bank refuses. Outcomes vary by jurisdiction and bank."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-pay-with-gift-cards-for-any-service","url":"https://scamencyclopedia.org/questions/is-it-safe-to-pay-with-gift-cards-for-any-service","question":"Is it safe to pay with gift cards for a service or debt?","shortAnswer":"Gift cards are never a legitimate payment method for any bill, fine, tax, or service from a business or government agency. Any request to pay this way is a scam without exception.","explanation":"Gift cards — iTunes cards, Google Play cards, Steam cards, Amazon cards, and others — are designed for personal gifting within closed ecosystems. They have no chargeback mechanism, are effectively anonymous once the code is read, and cannot be traced or recovered once redeemed. These properties make them the preferred 'currency' of scammers worldwide.\n\nFraudsters convince victims to pay this way by impersonating authorities — tax agencies, utility companies, banks, courts, police, immigration services — and creating a scenario where immediate payment prevents serious consequences: arrest, disconnection, deportation, legal action. The emotional pressure is designed to override rational decision-making.\n\nNo government body, utility company, bank, or legitimate business will ever require you to pay a debt, fine, or bill using retail gift cards. This is an absolute rule with no exceptions. If you receive such a request, you are being defrauded regardless of how convincing the caller, email, or website appears.\n\nThe gift card purchase step is often designed to happen quickly and without reflection — scammers keep you on the phone while you drive to a shop, buy the cards, and read the codes aloud. Some shop staff are trained to intervene when older customers purchase large numbers of gift cards, which has prevented some losses. If you encounter a staff member questioning your purchase, explain the situation — they are trying to help.","redFlags":["Any authority figure — government, bank, court, police — requests payment by gift card","You are told to keep the payment confidential and not to tell family or shop staff","You are kept on the phone continuously while purchasing and reading out codes","The amount requested is an unusual sum that matches the denomination of specific gift cards","Urgency is extreme — arrest, disconnection, or legal action will happen today if you do not pay","The payment is described as a deposit, fine, tax clearance, or security bond"],"whatToDoNow":["Hang up or close the conversation immediately — do not engage further","Do not purchase any gift cards regardless of the threat described","If you have already purchased cards but not yet shared the codes, do not share them — the scammer has nothing yet","If codes have been shared, report to the gift card issuer immediately — recovery is unlikely but worth attempting","Report the incident to your national fraud reporting service","Warn elderly relatives about this specific scam pattern"],"faq":[{"question":"Can I get my money back if I already gave someone gift card codes?","answer":"Recovery rates are extremely low because the codes are redeemed almost instantly. Contact the gift card issuer and explain you were defrauded — some companies have fraud teams that can attempt to freeze unclaimed balances, but success is rare and time-dependent."},{"question":"Why do scammers prefer gift cards over other payment methods?","answer":"Gift card codes can be redeemed anonymously from anywhere in the world, are irreversible, require no bank account, and are widely available. They leave virtually no traceable financial footprint, unlike wire transfers or card payments."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-share-my-online-banking-password-with-a-caller","url":"https://scamencyclopedia.org/questions/is-it-safe-to-share-my-online-banking-password-with-a-caller","question":"Is it safe to share my online banking password with someone who calls me?","shortAnswer":"No bank, regulator, or financial authority will ever ask for your full online banking password over the phone. Any caller requesting it is attempting fraud.","explanation":"Banks and financial institutions operate on a foundational security principle: their staff do not and cannot ask for your full password. This is not just policy — it is a structural design choice. Bank staff access your account through internal systems that do not require your password. If they needed to verify your identity, they use partial security information, memorable words, or knowledge-based questions — never your complete login credential.\n\nThe most common scenario is an impersonation call: the caller claims to be from your bank's fraud department, says your account has been compromised, and says they need your password to freeze the account or verify your identity before stopping the fraudulent activity. The urgency and the apparent concern for your wellbeing are designed to create compliance without reflection.\n\nLegitimate bank fraud teams operate in exactly the opposite way: they freeze accounts proactively and then contact you to verify legitimate transactions. They do not call you first and ask you to provide credentials. If you are ever unsure whether a caller is genuine, hang up, wait five minutes, and call your bank directly on the number printed on your card or on the bank's official website.\n\nThe same principle applies to one-time passcodes sent by your bank. A legitimate bank fraud team will never ask you to read out an OTP. These codes are the second factor in your authentication — they are meant to be private. A caller asking for an OTP is attempting to use your credentials to access your account in real time.","redFlags":["Caller asks for your full password, PIN, or the complete one-time passcode sent to your phone","Caller says your account has been hacked and you must act immediately","Caller instructs you to transfer money to a 'safe account' they provide","Call is unexpected and the caller knew some details about you (creates false trust)","Caller asks you not to hang up, speak to anyone, or visit a branch","The caller ID shows your bank's official number (this can be spoofed)"],"whatToDoNow":["Hang up immediately without sharing any information","Call your bank on the official number from the back of your card or the bank's official website","If you already shared your password, call your bank immediately on the official number to report it","Change your banking password from a secure device as quickly as possible","Check recent transactions for unauthorised activity","Report the call to your national fraud reporting service"],"faq":[{"question":"The caller ID showed my bank's official number — does that mean the call was real?","answer":"No. Caller ID can be spoofed using widely available tools, making any number appear to originate a call. Never trust caller ID alone as proof of identity. Always hang up and call back on a number you have independently verified."},{"question":"What if I already gave my password — how quickly will the scammer use it?","answer":"Often within minutes. Call your bank immediately, report the disclosure, and ask them to freeze your account while you investigate. If you cannot reach them instantly, log in from a different device and change the password yourself first."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-accept-an-overpayment-on-something-i-am-selling","url":"https://scamencyclopedia.org/questions/is-it-safe-to-accept-an-overpayment-on-something-i-am-selling","question":"Is it safe to accept an overpayment from someone buying something I am selling?","shortAnswer":"Overpayment scams are a well-established fraud. A buyer sends more than the asking price and asks you to refund the difference — but the original payment is fraudulent and will be reversed, leaving you out of pocket.","explanation":"The overpayment scam works with consistent mechanics: you list an item for sale, a buyer contacts you, sends payment that exceeds the agreed price, and explains the overpayment as a mistake — perhaps they included shipping costs by accident, a third party transferred the wrong amount, or they had leftover credit on a platform. They ask you to forward the excess amount by bank transfer, gift card, or money transfer service.\n\nThe initial payment appears in your account — it looks real and your bank may even show a provisional credit. You send the refund out of your own funds. Days or weeks later, the original payment is reversed: it was a bounced cheque, a fraudulent card charge, or a bank recall. You lose both the item (already shipped) and the refunded amount.\n\nThis scam works because the reversal is delayed. Banks sometimes show credits before they are fully cleared, creating a false sense of security. The key principle is never to send any money to a buyer — under any circumstances — and to wait for payments to fully clear (typically 5-10 business days for cheques) before shipping physical goods or delivering services.\n\nAnyone who insists on paying more than the asking price and asks for a refund is almost certainly running this scam. A genuine buyer who overpays by mistake would ask you to send the item and keep the extra, or would simply send the correct amount. The request for a cash-out refund is the tell.","redFlags":["Buyer sends more than the asking price and requests you refund the difference","Buyer insists the overpayment was accidental and urgently requests you transfer back the excess","Payment arrives by cheque, bank transfer from an unfamiliar institution, or an unfamiliar payment platform","Buyer is reluctant to simply cancel and resend the correct amount","Buyer suggests refunding via a different method than the original payment — gift cards, wire transfer","Communication style is generic, impersonal, or shows signs of a scripted approach"],"whatToDoNow":["Do not send any money — the overpayment refund is the scam itself","Do not ship any goods until the original payment is confirmed fully cleared by your bank (not just provisionally credited)","Contact your bank and explain the situation — ask specifically whether the payment is truly cleared or still reversible","If you already sent a refund and the original payment was reversed, report to your bank immediately as a fraud victim","Report the incident to your national fraud authority and the platform where the listing appeared","Block the buyer and document all communication"],"faq":[{"question":"My bank said the payment cleared — does that mean I am safe to refund?","answer":"Not necessarily. 'Cleared' in banking has a specific meaning that varies by payment type. Cheques and some bank transfers can still be reversed for several days after appearing cleared. Ask your bank explicitly whether the funds are fully irrevocable before sending anything."},{"question":"Can the same overpayment scam happen on large platforms like eBay or Facebook Marketplace?","answer":"Yes. The scam is not limited to private listings and occurs on major marketplace platforms. Platforms may offer buyer protection but seller protection against fraudulent chargebacks is often limited. The same caution applies regardless of the platform."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-use-an-unsecured-http-website-for-purchases","url":"https://scamencyclopedia.org/questions/is-it-safe-to-use-an-unsecured-http-website-for-purchases","question":"Is it safe to use a website that shows 'Not Secure' or no padlock for purchases?","shortAnswer":"You should never enter payment details or personal information on a website without HTTPS (indicated by a padlock and 'https://' in the address bar). Your data travels unencrypted and can be intercepted.","explanation":"HTTPS (HyperText Transfer Protocol Secure) encrypts the data exchanged between your browser and a website. Without it, your payment details, passwords, and personal information travel in plain text across the internet, where they can be read by anyone positioned to intercept your traffic — on a shared network, or in rare cases, elsewhere in the routing chain.\n\nModern browsers display clear warnings for insecure sites: a 'Not Secure' label in the address bar, a crossed-out or absent padlock, or a full-page warning before the site loads. These warnings exist precisely to help users avoid this risk.\n\nHowever, HTTPS alone does not make a site trustworthy. Fraudulent sites can and do obtain SSL certificates — the padlock only confirms the connection is encrypted, not that the operator is legitimate. A fake shopping site can have a valid padlock. So HTTPS is a necessary condition for safety, not a sufficient one. You need both HTTPS and verification that the site is genuine.\n\nFor any purchasing decision, look for HTTPS, then verify the store through independent research: check reviews, look up the domain registration date, confirm a physical address and contact information, and search for the store name alongside terms like 'scam' or 'reviews'. Price comparison sites and established retailers are the safest starting point for online shopping.","redFlags":["Browser displays 'Not Secure' or a crossed-out padlock in the address bar","The URL begins with 'http://' rather than 'https://'","Your browser shows a full-page security warning before loading the site","The checkout page is on a different, insecure domain from the rest of the site","The security certificate is expired or issued for a different domain name"],"whatToDoNow":["Leave the site immediately without entering any information","If you already entered payment details on an insecure site, contact your bank to report potential exposure and consider requesting a replacement card","Enable browser settings that warn or block insecure sites — most modern browsers have these by default","When shopping online, start from well-known, established retailers rather than following links in ads or emails","Use a dedicated card with a low limit or a virtual card number for online purchases to limit exposure"],"faq":[{"question":"Does the padlock mean a website is safe to buy from?","answer":"The padlock confirms the connection is encrypted, not that the site is legitimate. Scam sites can have valid padlocks. Always combine HTTPS verification with research into the store's legitimacy."},{"question":"My browser warned me about the site but I continued anyway — what should I do?","answer":"If you entered any information, contact your bank or card provider immediately. Run a malware scan on your device. Monitor your accounts closely for the next several weeks for unauthorised charges."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-wire-money-to-someone-i-met-online","url":"https://scamencyclopedia.org/questions/is-it-safe-to-wire-money-to-someone-i-met-online","question":"Is it safe to wire money to someone I met online?","shortAnswer":"Sending money to someone you have only met online — regardless of how close you feel — is extremely high risk. This is the defining action in romance scams and pig-butchering investment fraud.","explanation":"The request for money is the moment a relationship-based fraud reaches its purpose. Whether the connection began on a dating app, social media, a gaming platform, or a random messaging app, the trajectory of the scam is the same: an extended period of relationship-building is followed by a financial request framed as urgent, emotional, or an investment opportunity.\n\nThe characteristics of these requests are consistent: the person cannot receive money through normal channels (international complications, account frozen, family emergency), the amount requested starts small and escalates, and declining causes significant emotional pressure or guilt. The person you have built a relationship with may feel completely real — the time and effort invested makes it psychologically very difficult to accept that the relationship itself was the fraud.\n\nWire transfers are preferred by scammers because, like bank transfers, they are difficult to reverse once completed, especially to international accounts. Once the money leaves your account, the chances of recovery are low.\n\nBefore sending any money to someone you have not met in person, conduct a reverse image search of their photos, video call them (not just voice) in a natural, unscripted setting, ask specific questions about their location and life that can be independently verified, and tell a trusted friend or family member about the relationship and the request. Outside perspectives are extremely valuable here — romance fraud victims often describe how isolated they became from their support networks during the fraud.","redFlags":["You have never met in person despite an extended online relationship","They claim to be overseas due to military service, engineering contracts, or medical work","All attempts at video call are deflected or result in technical problems","They ask for money due to an emergency: hospital bill, legal fee, flight ticket, customs release","They mention investment opportunities, particularly in crypto, that they want to share with you","Communication has been unusually intense and emotionally accelerated from the start"],"whatToDoNow":["Do not send money — once wired it is almost certainly gone","Conduct a reverse image search of their photos to check whether images are taken from elsewhere online","Video call them — live, unscripted, asking them to do specific things on screen — to test authenticity","Tell a trusted person about the relationship and the request and listen to their perspective","If you have already sent money, report to your bank, your national fraud authority, and the platform where you met","Seek support — being defrauded in a relationship context is emotionally very damaging and support resources exist"],"faq":[{"question":"We have been talking for six months — isn't that too long for a scam?","answer":"Investment-linked romance scams, sometimes called pig-butchering scams, operate over months or years. The extended relationship is the mechanism, not evidence of authenticity. Time invested does not equal genuine connection."},{"question":"They sent me a photo of their ID and passport — doesn't that prove who they are?","answer":"Identity documents can be fabricated or belong to real people who have had their images stolen. Fraudsters sometimes use genuine IDs obtained through other scams. Document photos are not reliable proof of identity."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-use-a-vpn-i-found-in-a-pop-up-ad","url":"https://scamencyclopedia.org/questions/is-it-safe-to-use-a-vpn-i-found-in-a-pop-up-ad","question":"Is it safe to use a VPN I found advertised in a pop-up ad?","shortAnswer":"VPNs advertised through pop-ups or aggressive ads are frequently fraudulent, privacy-invading, or outright malware. Only use VPNs from reputable providers with independently audited privacy policies.","explanation":"A VPN (virtual private network) is supposed to protect your privacy by encrypting your internet traffic and hiding your IP address. However, a fraudulent or negligently operated VPN achieves the opposite: it routes all your internet traffic through servers controlled by the VPN provider, giving them complete visibility into everything you do online — including banking, emails, and passwords if sites do not use HTTPS.\n\nPop-up ads claiming your device is infected and offering a free VPN as the fix are a common vector for malware installation. The 'VPN' is actually adware, a browser hijacker, or data-harvesting software masquerading as a privacy tool.\n\nLegitimate VPN providers are typically well-known companies with published, independently audited no-logs policies, clear ownership, and a track record. They are found through independent technology review sites, not through pop-up warnings.\n\nFree VPNs are particularly risky. Providing a VPN service costs money — if you are not paying, the service is monetising your data in some way. Many free VPNs have been documented selling browsing data to advertisers or third parties. The few trustworthy free-tier VPNs are limited versions of established paid products.","redFlags":["The VPN was offered through a pop-up claiming your device is infected or at risk","The app has no clear company ownership or privacy policy","Installation requires unusually broad permissions, such as accessibility services","The app is not available on your device's official app store","The 'VPN' significantly slows your connection but provides no verifiable privacy benefits","The provider has no independent security audit or no-logs certification"],"whatToDoNow":["Do not install any software from a pop-up ad — close the browser tab instead","If you have already installed such a VPN, uninstall it immediately","Run a reputable anti-malware scan after uninstalling","Research reputable VPN providers through independent technology review publications","Look for providers with independently verified no-logs policies and transparent ownership","Check your device's app store for reviews and download counts before installing any security app"],"faq":[{"question":"Can a VPN steal my banking passwords?","answer":"A malicious VPN provider could see your traffic if HTTPS is stripped or if you visit HTTP sites. They could also potentially inject content into pages. For sites using standard HTTPS, they see you visited the site but not your credentials. The bigger risk is malware bundled with fake VPN installers."},{"question":"How do I know if a VPN is trustworthy?","answer":"Look for: independently audited no-logs policy, known company with verifiable ownership, years of operation without major data scandals, strong reviews from reputable technology publications, and availability in official app stores."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-pay-someone-through-zelle-or-venmo-on-facebook-marketplace","url":"https://scamencyclopedia.org/questions/is-it-safe-to-pay-someone-through-zelle-or-venmo-on-facebook-marketplace","question":"Is it safe to pay someone through Zelle or Venmo on Facebook Marketplace?","shortAnswer":"Paying via Zelle or Venmo Friends and Family on Facebook Marketplace provides virtually no buyer protection. If you do not receive the goods, recovering your money is very difficult. Use cash in person or a buyer-protected payment method.","explanation":"Facebook Marketplace listings frequently involve strangers, and the safest transaction is a cash exchange at a public place after inspecting the item in person. When transactions move online, the payment method determines how much protection you have if things go wrong.\n\nZelle is a bank-to-bank transfer system designed for sending money to trusted people — friends, family. It has no buyer-protection programme and explicitly discourages use with strangers or for purchases. Once a Zelle payment is sent, it typically cannot be reversed by the sender.\n\nVenmo has a similar split: Venmo Personal Payments (Friends and Family) carries no purchase protection, while Venmo Goods and Services does offer limited protection — but scammers specifically ask for the personal payment option to avoid the protection and the associated fee. When someone insists on the 'friends' option for a purchase, they are asking you to waive your protection.\n\nFor Facebook Marketplace specifically, the safest approach for items of significant value is to meet in person and use cash or, where the platform offers it, Facebook's own checkout with buyer protection. If you must pay digitally for a remote transaction, use a credit card or PayPal Goods and Services, which both offer dispute mechanisms.","redFlags":["Seller insists on Zelle or Venmo Friends and Family payment, refusing other options","Item cannot be inspected in person — seller claims to be elsewhere or offers shipping only","Price is significantly below market value for the item","Seller has a new account with little or no transaction history or reviews","Seller created urgency — another buyer is waiting or the listing will be taken down","Communication moved off Facebook Marketplace to a personal messaging app"],"whatToDoNow":["For local purchases, meet in person at a safe public location and use cash after inspecting the item","If purchasing remotely, use a credit card or PayPal Goods and Services for buyer protection","Never use Zelle or Venmo Friends and Family to pay for goods or services from a stranger","If you have already paid and the goods were not delivered, report to your bank, the payment platform, and Facebook","File a report with your national consumer protection agency","Document all communication and the listing details as evidence"],"faq":[{"question":"Does Venmo Goods and Services protect me on Facebook Marketplace purchases?","answer":"Venmo Goods and Services does offer purchase protection, but it is limited and subject to Venmo's policies. Credit card chargebacks and PayPal Goods and Services tend to have more established dispute processes. Check the specific protections before relying on them."},{"question":"I already paid and the seller has gone silent — what can I do?","answer":"Contact your bank or the payment platform immediately. For Zelle, contact your bank and report it as fraud — recovery is possible in some cases. File a report with your local police, the FTC (US) or equivalent, and Facebook. Gather all evidence of the transaction."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-respond-to-a-job-offer-that-asks-for-my-bank-account","url":"https://scamencyclopedia.org/questions/is-it-safe-to-respond-to-a-job-offer-that-asks-for-my-bank-account","question":"Is it safe to respond to a job offer that asks for my bank account details upfront?","shortAnswer":"Legitimate employers do not ask for full bank account details during initial application stages, and never before you have signed a contract and completed ID verification. Early requests for banking information are a hallmark of employment scams and money mule recruitment.","explanation":"Employment scams take several forms, but one consistent red flag is the early request for bank account information. In legitimate hiring, payroll details are collected after a job offer is made, a contract is signed, and identity has been verified through formal HR processes — not during an interview or in response to a first-contact message.\n\nMoney mule recruitment is a specific risk in this context. Fraudsters post fake job listings for roles that sound like 'payment processing', 'accounts assistant', 'financial coordinator', or 'remote payment agent'. The 'job' involves receiving funds into your personal account and transferring them onward, keeping a percentage. This is money laundering. Even if you did not know the funds were criminal in origin, participating can result in your account being closed, your funds frozen, and in serious cases, criminal prosecution.\n\nOther employment scam patterns include: requests for payment to secure a position (training fees, background check fees, uniform deposits), delivery of equipment to your address for onward shipment (package reshipping scams), and collection of your personal data under the guise of a job application which is then used for identity fraud.\n\nVerify any job offer through independent research: search the company name, verify the job listing appears on the company's official website, and check the company's registration details. A genuine employer will always go through formal verification channels before handling payroll information.","redFlags":["Job offer arrived unsolicited via email, text, social media, or messaging app","Bank account details are requested during initial application or before a contract is offered","The role involves receiving or transferring money through your personal account","You are asked to pay fees to start the job or receive equipment","The company cannot be found independently or the contact email uses a free domain","Salary offered is unusually high for minimal described responsibilities"],"whatToDoNow":["Do not provide bank details until a formal contract is signed and HR processes are followed","Search the company name independently to verify it exists","Look up the job listing on the company's official website","If the role involves transferring money, decline immediately — this is money laundering regardless of how it is framed","Report fraudulent job listings to the platform and to your national fraud authority","If you already provided banking information, notify your bank immediately"],"faq":[{"question":"What is a money mule and what happens if I become one?","answer":"A money mule is someone who transfers criminal funds through their bank account, knowingly or not. Banks close mule accounts, place individuals on internal watchlists that affect future banking, and in cases where knowledge is proven, criminal charges are possible."},{"question":"Is it safe to share my sort code and account number for a real job?","answer":"Sort code and account number (or routing number and account number in the US) are typically needed for payroll and are legitimate to share with a verified employer through proper HR processes. The concern is providing them before employment is confirmed, to unverified parties, or through informal channels."}],"lastReviewed":"2026-06-10"},{"slug":"what-happens-if-i-give-my-credit-card-details-to-a-fake-website","url":"https://scamencyclopedia.org/questions/what-happens-if-i-give-my-credit-card-details-to-a-fake-website","question":"What happens if I give my credit card details to a fake website?","shortAnswer":"Once your credit card details reach a fraudulent site, criminals will typically attempt to use them within hours — for purchases, cash advances, or selling the data to other fraudsters. Immediate card blocking is essential.","explanation":"Fraudulent websites designed to harvest card details operate in a few different ways. Some are fake shops that take your money and ship nothing. Others are skimming pages that capture your card information and forward you to the real site so you receive the goods and do not notice the breach immediately. A third type collects only the card data with no pretence of a real transaction — a fake prize claim page, for example.\n\nWhat happens to your data depends on the operation behind the site. Small-scale fraudsters will use the card themselves, often testing with a small purchase first, then attempting larger transactions. Large-scale operations sell card data in bulk on dark web marketplaces, where buyers purchase 'card dumps' and use them within days before the compromised status is widely known.\n\nCredit cards have more protection than debit cards in most jurisdictions. Credit card fraud is generally covered by your card provider — you are liable for the fraudulent charges only if you acted negligently or participated knowingly. Debit card fraud may result in your actual funds being taken, and recovery processes can be slower.\n\nCancelling the card prevents further use of the physical card details but does not affect any recurring payment arrangements the fraudster may have set up. Check for new subscriptions, recurring charges, or account changes in the days following the incident.","redFlags":["You notice a small test purchase from an unfamiliar merchant appearing on your statement","Charges appear in a different country or currency to your own","Multiple small charges appear in quick succession — often how fraudsters test a card","You receive an alert about a transaction you do not recognise","The site you purchased from has since disappeared or its domain no longer resolves"],"whatToDoNow":["Call your card provider immediately to report the card as compromised and request a replacement","Review all recent transactions and flag every unrecognised charge for dispute","Ask your card provider to issue a new card number — the old one is now known to fraudsters","Check for any new recurring charges or subscriptions set up with the old card details","Change passwords on any account that used the same card, in case those accounts are also targeted","File a report with your national consumer fraud authority"],"faq":[{"question":"How quickly will fraudsters try to use my card?","answer":"Often within hours, sometimes within minutes. Card testing — small transactions to verify the card is active — sometimes occurs within moments of submission. Speed is critical: call your card provider as soon as you realise."},{"question":"Will my credit card company refund fraudulent charges?","answer":"For credit cards, yes — fraudulent charges are typically reversed once reported and investigated. You should not be liable for transactions you did not authorise. Debit card outcomes depend on your bank's policies and how quickly you reported the fraud."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-download-an-app-a-stranger-sends-me-a-link-to","url":"https://scamencyclopedia.org/questions/is-it-safe-to-download-an-app-a-stranger-sends-me-a-link-to","question":"Is it safe to download an app a stranger sends me a link to?","shortAnswer":"You should never install an app from a link sent by someone you do not know. Legitimate apps are distributed through official app stores, and direct installation links almost always lead to malware.","explanation":"Mobile malware is most commonly distributed through direct download links ('sideloading') sent via messaging apps, social media, SMS, or email. Because these apps bypass the app store review process, there is no screening for malicious code. The same remote-access tools, banking trojans, and spyware that appear in tech-support scams are frequently delivered this way.\n\nThe context varies. A new contact on a dating app might claim to be sharing a 'special platform' for investment trading. A messaging scam might claim a link leads to a video featuring you. A fake parcel notification might say you need a specific delivery app. In each case, the file you install is not what it claims to be.\n\nOn Android devices, installing apps from outside the Play Store requires enabling 'Unknown Sources' or 'Install unknown apps' in settings — a deliberate security barrier that warns you of the risk. On iOS, sideloading is more restricted but possible through enterprise certificate abuse or configuration profiles. Receiving a request that involves changing your device's security settings to install an app should be treated as an immediate stop sign.\n\nIf a service genuinely uses an app, it will be available in the Google Play Store or Apple App Store. Search for it there by name. If it does not appear in official stores, it should not be installed on your device.","redFlags":["A stranger sends you a direct link to download an app rather than referring you to an official store","The installation process requires you to enable 'Unknown Sources' or change security settings","The app claims to be an investment platform, special messaging app, or exclusive trading tool","Installing a profile or certificate on iOS is requested","The app is described as an upgraded or exclusive version of a well-known service","The app requests accessibility permissions, device administration rights, or VPN configuration"],"whatToDoNow":["Do not install the app and delete the link message","If you have already installed it, uninstall it immediately","Run a reputable mobile security scan after uninstalling","Check your banking and financial apps for unexpected changes or new payee additions","Review which permissions the app had — if accessibility or device administrator permissions were granted, consider a factory reset after backing up data","Report the sender to the platform and to your national cybercrime reporting centre"],"faq":[{"question":"The app looks like a real trading platform — could it be legitimate?","answer":"Pig-butchering and investment scams use convincing fake trading platforms that show real-looking balances and profits. The functionality is designed to build trust before a withdrawal request reveals the fraud. If it is not in an official app store, do not use it."},{"question":"I installed it but it seems to do nothing — is it still dangerous?","answer":"Some malware is deliberately invisible to avoid prompting removal. It may run in the background logging keystrokes, reading SMS messages (including 2FA codes), or monitoring screen content. Uninstall it and run a security scan regardless of observed behaviour."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-enter-a-competition-that-asks-for-my-credit-card","url":"https://scamencyclopedia.org/questions/is-it-safe-to-enter-a-competition-that-asks-for-my-credit-card","question":"Is it safe to enter a competition that asks for my credit card details?","shortAnswer":"Genuine competitions do not require a credit card to enter. Any prize draw requesting payment or card details is almost certainly a subscription trap, a fake lottery, or a data-harvesting operation.","explanation":"The intersection of 'free prize' and 'credit card required' is a hallmark of subscription trap scams. The card is presented as needed for a small shipping and handling fee, identity verification, or to 'activate' your prize. In reality, the fine print (if it exists at all) commits you to a recurring subscription charge — often for a product or service you never intended to buy.\n\nSome fake competition pages exist solely to harvest card details for direct fraud — no prize and no subscription ever existed. Others are run by companies that are technically compliant with disclosure requirements but bury the subscription terms in difficult-to-read text presented before a large, prominent 'Claim Your Prize' button.\n\nLegitimate competitions and prize draws from reputable brands are entered by submitting contact information, answering a question, or performing an action — entering a code, posting on social media, or filling a ballot. They never require a credit or debit card to participate.\n\nIf you entered a competition and were charged unexpectedly, check your bank statement for the merchant name, locate the terms of the original offer, and contact the company to cancel and request a refund. If refusal is met, initiate a chargeback through your card provider.","redFlags":["A prize draw, giveaway, or competition requires credit card details to enter or claim","The prize is extremely attractive — holiday, car, large cash sum — for minimal effort","Terms and conditions are very long, in small print, or difficult to find","The page appeared as a pop-up or was reached through a social media ad","You are told you have already won before taking any action","The 'shipping fee' or 'activation fee' is unusually specific — a suspicious amount like $4.95"],"whatToDoNow":["Do not enter card details for any competition or prize offer","If you already submitted details, check your bank statements immediately for unexpected charges","Contact the merchant and request cancellation and a full refund for any subscription charges","If the merchant refuses, initiate a chargeback with your card provider","Report the fraudulent or deceptive offer to your national trading standards or consumer protection body","Consider using a virtual card number for future online activities to limit exposure"],"faq":[{"question":"I was charged after entering a competition — can I get my money back?","answer":"Yes, usually. Initiate a chargeback through your card provider citing that the charges were not clearly disclosed. Most card providers support this if you act within the standard dispute window (typically 120 days from the transaction)."},{"question":"Are all online competitions that collect email addresses scams?","answer":"No. Many legitimate businesses run competitions that collect email addresses for marketing purposes. The distinction is whether payment is requested and whether terms are clearly disclosed. Email-only entry with clear terms is generally low risk."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-give-a-landlord-my-national-insurance-or-social-security-number","url":"https://scamencyclopedia.org/questions/is-it-safe-to-give-a-landlord-my-national-insurance-or-social-security-number","question":"Is it safe to give a landlord my National Insurance or Social Security number?","shortAnswer":"Landlords have limited legitimate reasons to request your full National Insurance or Social Security number before a tenancy is agreed. Fraudulent rental listings often use this request as a pretext for identity theft.","explanation":"In some jurisdictions, landlords or letting agents may perform credit checks that involve using part of your national identification number. However, legitimate reference and credit check processes are typically conducted through accredited reference agencies, not by the landlord directly handling your full identity number.\n\nA fraudulent rental listing may request your full SSN, NI number, or equivalent document alongside other personal information — date of birth, current address, employment details — under the guise of a background check or application form. This information package is sufficient to commit identity fraud: opening credit accounts, applying for loans, or accessing government services in your name.\n\nBefore providing any identity information in connection with a rental, verify independently that the agent or landlord exists and has a legitimate claim to the property. Check with the relevant landlord accreditation scheme, estate agent register, or land registry. Ensure any credit check is conducted through a named, regulated reference agency and that your data will be processed in compliance with data protection law.\n\nIf you are in the early stages of enquiring about a property, no identity document detail is required at all. Applications for viewings require only contact details. Full background checks come later, after a verbal offer is made, and through regulated channels.","redFlags":["SSN or NI number is requested before you have even viewed the property","The landlord handles the data directly rather than directing you to an accredited reference agency","Request comes via an informal channel — messaging app, email with a free domain","Other personal information is requested alongside the ID number — date of birth, mother's maiden name","The listing price is significantly below market rate — a common lure in rental fraud","You cannot independently verify the landlord's identity or connection to the property"],"whatToDoNow":["Do not provide SSN, NI number, or full identity details before verifying the landlord and property independently","Check the property through the land registry or equivalent to confirm ownership","Verify estate agents against the relevant professional register","If you have already submitted identity information to a suspected scammer, contact your national fraud authority and credit bureaus immediately","Place a fraud alert on your credit file","Report the fraudulent listing to the platform and to the police"],"faq":[{"question":"Is a credit check the same as a landlord asking for my SSN directly?","answer":"No. A legitimate credit check is conducted by a regulated credit reference agency, not by the landlord processing your identity number themselves. You should be directed to an accredited service, not asked to email your SSN to the landlord."},{"question":"What should I do if I already gave my SSN to a fake landlord?","answer":"Act quickly: contact the Social Security Administration (US) or HMRC (UK), place a fraud alert with major credit bureaus, report to your national fraud authority, and monitor all credit and financial accounts for new activity."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-use-a-crypto-exchange-i-found-through-an-online-ad","url":"https://scamencyclopedia.org/questions/is-it-safe-to-use-a-crypto-exchange-i-found-through-an-online-ad","question":"Is it safe to use a cryptocurrency exchange I found through an online advertisement?","shortAnswer":"Cryptocurrency exchanges found through unsolicited ads — particularly on social media — are a major source of investment fraud. Always verify registration with the relevant financial regulator before depositing anything.","explanation":"Fraudulent cryptocurrency trading platforms are a cornerstone of modern investment scams, particularly the pig-butchering model where victims are cultivated over weeks or months before being guided to a specific exchange. These platforms are designed to look and function like real exchanges — complete with live price charts, withdrawal interfaces, and customer service — until the victim attempts a significant withdrawal.\n\nThe advertisement or introduction to the platform is typically designed to feel organic: a social media contact, a recommendation from someone you trust online, or a targeted ad appearing after browsing investment content. The onboarding process is smooth and the initial experience is positive — small investments appear to grow quickly, building confidence for larger deposits.\n\nThe withdrawal block is the moment the fraud becomes apparent. Victims attempting to withdraw significant sums are told they owe tax, fees, insurance, or a verification payment before funds are released. These are fabricated obstacles — even if paid, further obstacles appear. The platform is not real, and the profits shown were never real funds.\n\nEvery legitimate cryptocurrency exchange operating in most jurisdictions must be registered with the relevant financial regulator. In the US this involves FinCEN and potentially the SEC or CFTC. In the UK, FCA registration is required. In the EU, MiCA regulation applies. Before depositing any funds, check the specific exchange against the relevant register.","redFlags":["The exchange was recommended by a new online contact or found through a social media ad","Initial investments show unusually rapid, consistent profits with no downturns","Withdrawal is blocked pending payment of additional fees, taxes, or insurance","The exchange is not listed on the financial regulator's register","Customer service is only available through messaging apps, not official channels","You are discouraged from discussing the platform with financial advisers or family"],"whatToDoNow":["Do not deposit further funds","Check the exchange name on your national financial regulator's register","Do not pay any additional fees to release funds — this is always part of the fraud","Report to your national financial regulator and fraud reporting service","Consult a reputable crypto recovery or legal service if significant funds are involved","Document all transaction records, screenshots, and communications"],"faq":[{"question":"The platform showed real-looking profits in my account — how can it be fake?","answer":"Fraudulent platforms display fabricated balances. The 'profits' are numbers on a screen controlled entirely by the scammers. They have no connection to real market activity. The platform is designed to make you deposit more."},{"question":"Can I recover my crypto from a fraudulent exchange?","answer":"Cryptocurrency transactions are typically irreversible. Recovery is difficult but professional forensic services can sometimes trace funds. Report to your regulator and law enforcement — coordinated cases have had some success, though outcomes vary significantly."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-use-a-friend-or-familys-debit-card-with-their-permission","url":"https://scamencyclopedia.org/questions/is-it-safe-to-use-a-friend-or-familys-debit-card-with-their-permission","question":"Is it safe to use a friend or family member's debit card online with their permission?","shortAnswer":"Using another person's card is technically a breach of most card issuers' terms and conditions, even with permission. It also creates legal exposure if the transaction is later disputed. Always use your own card or request a transfer instead.","explanation":"Card issuers' terms generally state that cards are for use by the named cardholder only. Using someone else's card, even with explicit verbal permission, breaches this term. In normal circumstances this is unlikely to cause a problem — but if the transaction is disputed, the card holder denies authorising the specific purchase, or the merchant investigates, the person who used the card can face difficult questions.\n\nFor the genuine cardholder, there is also risk. If their card details are compromised in a data breach at the merchant, or if the site turns out to be fraudulent, the genuine cardholder suffers the harm — and their ability to dispute a charge is complicated by the fact they gave their card to someone else.\n\nThe safer alternatives are straightforward: the genuine cardholder makes the purchase directly; they transfer money to you so you can make the purchase on your own card; or they add you as an authorised user on the account if the card provider supports it. These options protect both parties legally and contractually.","redFlags":["A third party asks you to use your own card and they will 'pay you back' — this may involve fraudulent chargebacks","Someone you barely know asks to borrow your card to 'just buy one thing'","The purchase is for a high-value item or service you are unfamiliar with","The person asking has previously disputed payments or has a history of financial unreliability"],"whatToDoNow":["Use your own card or request a bank transfer instead of sharing card details","Never photograph or share your full card details with anyone — number, expiry, and CVV together","If you have already shared card details and are concerned, monitor your statements closely and consider requesting a replacement card","Contact your card provider if you notice any unexpected transactions"],"faq":[{"question":"Is it illegal to use someone else's card with their permission?","answer":"Laws vary by jurisdiction, but in most countries authorised use between consenting adults is not criminal. The risk is contractual — you both breach the card issuer's terms — and practical, if a dispute arises later."},{"question":"What if a stranger asks me to make a purchase for them and they will give me cash?","answer":"This is a potential money laundering or fraud indicator. You do not know the source of their funds, whether the purchase is fraudulent, or whether a chargeback will be filed against you later. Decline."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-sell-something-for-cryptocurrency","url":"https://scamencyclopedia.org/questions/is-it-safe-to-sell-something-for-cryptocurrency","question":"Is it safe to sell something and accept cryptocurrency as payment?","shortAnswer":"Cryptocurrency payments are irreversible and carry no buyer or seller protection. As a seller, once you ship an item, the crypto cannot be charged back — but you also cannot easily verify a payment is genuinely confirmed without blockchain knowledge.","explanation":"Cryptocurrency has characteristics that cut both ways for sellers. On the positive side, a confirmed blockchain transaction cannot be charged back the way a credit card can, which eliminates chargeback fraud if the payment is genuinely settled. On the negative side, unconfirmed transactions — those with zero or insufficient blockchain confirmations — can fail or be double-spent.\n\nFraudsters targeting sellers sometimes show a screenshot of a pending or fabricated transaction and pressure the seller to ship immediately before the payment confirms. By the time the seller checks the blockchain directly, the transaction has not settled, and the fraudster disappears with the item.\n\nVolatility is a separate practical risk: the value of a crypto payment can change significantly between agreement and receipt, especially in fast-moving markets.\n\nIf you choose to accept crypto, only treat a payment as received after checking the transaction directly on a public block explorer using the transaction hash provided — not a screenshot — and waiting for the required number of confirmations for that blockchain. For significant items, wait for six or more confirmations on Bitcoin, for example.","redFlags":["Buyer presents a screenshot of a transaction rather than a blockchain transaction hash","Buyer pressures you to ship before confirmations are complete","The transaction hash provided does not appear on the public block explorer","Buyer proposes an unusually complex payment route — escrow service you have not heard of, token you are unfamiliar with","Price offered is above asking price, with a request to refund the difference in a different currency"],"whatToDoNow":["Only ship after independently verifying the transaction on a public block explorer","Wait for sufficient confirmations — do not treat pending transactions as received","For high-value items, consider using a reputable escrow service","If you have been defrauded, report to your national fraud authority and the platform where the listing appeared","Document all communication and transaction details"],"faq":[{"question":"How do I verify a crypto payment is genuine?","answer":"Ask for the transaction hash (TXID), then look it up on the appropriate public block explorer (blockchain.com for Bitcoin, etherscan.io for Ethereum, etc.). Verify the amount and destination address match, and wait for a sufficient number of confirmations."},{"question":"Is stablecoin safer to accept than Bitcoin or Ethereum?","answer":"Stablecoins reduce volatility risk, but the same verification steps apply. A stablecoin transaction screenshot can be fabricated just as easily as a Bitcoin one."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-share-my-email-address-with-every-website-i-sign-up-to","url":"https://scamencyclopedia.org/questions/is-it-safe-to-share-my-email-address-with-every-website-i-sign-up-to","question":"Is it safe to share my email address with every website I sign up to?","shortAnswer":"Using your primary email for all sign-ups increases your exposure to data breaches, phishing, and spam significantly. Using a separate or masked email for low-trust services materially reduces your risk.","explanation":"Your email address is the key to most of your online life — it is how accounts are recovered, notifications are sent, and identities are verified. When you use the same email for every service, a single data breach at any one of them gives criminals a direct route to attempt phishing attacks, credential stuffing, and account takeovers on every other service where you have used the same email.\n\nData breaches at websites are common. Many services you sign up to with good intentions are eventually sold, acquired, or hacked — and your email ends up in circulation on breach databases that are traded and used by fraudsters. The more places your primary email address appears, the higher the probability it will end up in such a database.\n\nUsing a secondary email account for newsletters, loyalty schemes, and low-trust sign-ups keeps your primary email clean and reduces your phishing exposure. Password managers now often include email aliasing features — you can create a unique alias for each service, so breaches at one service do not expose your real address.\n\nApart from breach exposure, a frequently used email will accumulate significant spam and phishing volume over time, increasing the chance of a successful phishing attack simply through sheer volume of attempts.","redFlags":["You receive phishing emails addressing you by name and referencing a specific service — a sign your email was breached from that service","Your inbox receives high volumes of spam and phishing attempts","A site requires email registration for what is essentially anonymous browsing content","The site asks for email with no clear purpose stated and no visible privacy policy"],"whatToDoNow":["Create a secondary email account for newsletters, registrations, and low-trust services","Consider using an email aliasing service that creates unique addresses per site","Check your primary email address on a reputable breach notification service to see if it appears in known breaches","Enable two-factor authentication on your primary email account","Never use your primary email as a username on any service"],"faq":[{"question":"How do I know if my email has been in a data breach?","answer":"Free breach notification services allow you to enter your email and see which known data breaches included it. This is valuable for understanding your exposure and for prompting password changes on the affected services."},{"question":"Should I use different passwords if I use the same email everywhere?","answer":"Absolutely. Unique, strong passwords for every account, managed by a password manager, ensure that a breach at one service does not cascade to others. Combine this with two-factor authentication on your most important accounts."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-enter-card-details-on-a-site-i-reached-via-a-google-ad","url":"https://scamencyclopedia.org/questions/is-it-safe-to-enter-card-details-on-a-site-i-reached-via-a-google-ad","question":"Is it safe to enter my card details on a website I reached by clicking a Google search ad?","shortAnswer":"Search ads can be purchased by fraudsters to impersonate legitimate businesses. Always verify the URL in the address bar before entering any payment information, even if the ad appeared at the top of search results.","explanation":"Search advertising platforms review ads, but fraudulent listings do appear and sometimes persist for hours or days before removal. Criminals buy ads targeting brand names of banks, government services, and popular retailers, directing clicks to convincing imitation sites. The ad may show the legitimate company's name and even a similar-looking URL in the ad copy, but the destination site is under the criminal's control.\n\nThe technical mechanism is straightforward: the ad's display URL may say 'yourbank.com' but the actual click destination is 'yourbank-secure-login.com' or similar. The imitation site replicates the genuine site's design closely. Users who have navigated to the genuine site many times via search may not notice the difference.\n\nThe defence is simple but requires a habit change: always check the address bar after clicking an ad. Confirm the domain is the one you expected, spelled correctly, and using the correct domain extension. Look for the padlock, then look at the actual domain — not just whether a padlock is present.\n\nFor the most sensitive sites — your bank, government tax portals, pension accounts — consider bookmarking the official URL and navigating directly from the bookmark rather than searching each time. This eliminates the risk of landing on an ad-delivered imitation site entirely.","redFlags":["The URL in the address bar after clicking is different from the company's known official domain","The site asks for more login information than usual — password plus security questions plus OTP all at once","The site design looks slightly off — wrong fonts, different button colours, missing features","You are asked to re-enter credentials that should already be stored in your password manager","The ad URL showed a legitimate domain but the page that loaded has a different URL"],"whatToDoNow":["Check the address bar before entering any information — verify the domain exactly","Bookmark trusted sites and navigate directly rather than via search","If you entered credentials on a suspicious site, change your password immediately","Enable two-factor authentication on your banking and financial accounts","Report fraudulent ads to the search engine using their ad reporting function","Report phishing sites to your national cybercrime reporting service"],"faq":[{"question":"Can I trust the green lock icon next to a URL to confirm a site is genuine?","answer":"The padlock confirms the connection is encrypted, not that the site is what it claims to be. Phishing sites obtain valid certificates routinely. The padlock is a baseline requirement, not a trust signal."},{"question":"My bank appeared as a sponsored result — is that ever legitimate?","answer":"Banks do advertise their services, so sponsored results can be genuine. The safest habit is still to verify the domain in the address bar after clicking, rather than assuming the ad is from the real bank."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-give-personal-details-to-win-a-social-media-giveaway","url":"https://scamencyclopedia.org/questions/is-it-safe-to-give-personal-details-to-win-a-social-media-giveaway","question":"Is it safe to give personal details to enter a social media giveaway?","shortAnswer":"Many social media giveaways are data-harvesting exercises or outright scams. Genuine brand giveaways rarely require more than a follow and a comment. Any request for personal information, card details, or payment is a red flag.","explanation":"Social media giveaways range from legitimate brand promotions to organised data-harvesting and fraud. The legitimate end involves entering a draw by following an account, tagging friends, or sharing a post — the data collected is minimal and the prize is real. The fraudulent end involves requesting name, address, phone number, email, or payment details under the guise of 'verifying your entry' or 'processing your prize'.\n\nA particularly common variant is the fake winner notification: you receive a message claiming you won a competition you entered (or one you have no recollection of entering), and are asked to provide details to claim the prize. This information is then used for targeted phishing, sold in data brokerage, or used to build a profile for identity theft.\n\nAccounts impersonating legitimate brands are widespread on social media. A giveaway appearing to be from a well-known company may be run by an account using a similar name and copied profile pictures. Check that the account running the giveaway is the company's verified official account, not an imitation.\n\nFor any giveaway that asks for more than a public action (follow, comment, share), apply scepticism proportional to the value of information requested. Name and email to a clearly verified brand for a newsletter-linked giveaway is relatively low risk. Home address, phone number, and date of birth to an unverified account for a large prize is very high risk.","redFlags":["Giveaway requests phone number, home address, date of birth, or payment details","The account running the giveaway is unverified or has low follower counts for a supposedly major brand","You were notified you won a competition you have no memory of entering","Winner notification asks you to click a link or message a contact outside the platform","You are told the prize will be cancelled unless you respond within 24 hours"],"whatToDoNow":["Only enter giveaways run by accounts you can independently verify as the brand's official presence","Never provide payment details, ID numbers, or banking information to claim a prize","If you have already provided information, monitor accounts associated with the data you shared","Report fraudulent accounts and giveaways to the social media platform","Report to your national consumer protection agency if you were defrauded"],"faq":[{"question":"How can I tell if a giveaway account is the real brand?","answer":"Look for the platform's verification badge, check the account's age and follower count, compare the username and profile picture carefully with the brand's known official presence, and navigate to the brand's official website to see if they reference the giveaway."},{"question":"I gave my email and name — is that enough to cause problems?","answer":"Name and email alone have limited fraud potential, but they enable personalised phishing emails that are more convincing. Monitor your email for unusual messages referencing the giveaway and apply caution to any follow-up communications."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-let-someone-view-my-computer-screen-for-tech-support","url":"https://scamencyclopedia.org/questions/is-it-safe-to-let-someone-view-my-computer-screen-for-tech-support","question":"Is it safe to let someone view my computer screen remotely for tech support?","shortAnswer":"Sharing your screen with a verified, trusted IT professional is normal practice. Sharing it with someone who contacted you unsolicited — especially claiming your computer has a problem — is extremely dangerous.","explanation":"Legitimate remote tech support happens in a specific way: you initiate contact with a known support organisation, you schedule a session, and you knowingly install and run a remote viewing application. At every step, you are in control and you initiated the interaction.\n\nTech-support scams work in reverse: someone contacts you — via phone, pop-up, or email — claiming your device is infected or compromised. They direct you to install remote viewing software and share an access code. Once connected, they can see everything on your screen, operate your mouse and keyboard, and access your files.\n\nWhat happens during a scam remote session varies. The scammer may show you alarming but meaningless system information to justify their claimed expertise. They may open your banking app or website and, while keeping you distracted, make transfers or add new payees. They may install persistent malware. In the worst cases, they do all of these.\n\nThe rule is simple: never accept remote access from a connection you did not initiate. This applies to calls claiming to be from Microsoft, Apple, your bank, your internet provider, or any government body. None of these organisations cold-call customers and request screen access. If you receive such a call, hang up.","redFlags":["You were contacted unsolicited and the caller claims your device is compromised","Caller claims to be from Microsoft, Apple, or a government agency","A pop-up on your screen includes a phone number to call — that number leads to a scammer","The caller knows your name and creates a sense of official authority","You are instructed to open specific applications or navigate to specific websites to 'prove' the problem exists","You are asked to pay to fix the alleged problem"],"whatToDoNow":["Hang up or close the session immediately","If screen access was already granted, force-close the remote access app","Disconnect from the internet immediately after closing the app","Call your bank on the official number before reconnecting to the internet","Have a professional IT technician inspect your device for installed malware","Change all passwords from a different device","Report to your national fraud reporting service and the remote-access software company"],"faq":[{"question":"A pop-up appeared on my screen with a phone number saying my computer is infected — what should I do?","answer":"This is a common tech-support scam trigger. Do not call the number. Close the browser tab or window — if it is unresponsive, use Task Manager (Windows) or Force Quit (Mac) to close the browser entirely. Run a reputable malware scan to confirm your device is actually clean."},{"question":"My elderly parent gave someone remote access before calling me — what should I do now?","answer":"Disconnect the internet on their device immediately, then call their bank from a different phone to report potential fraud. Have the device professionally checked before reuse. Help them change all passwords from a clean device."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-buy-event-tickets-from-a-reseller-you-found-on-social-media","url":"https://scamencyclopedia.org/questions/is-it-safe-to-buy-event-tickets-from-a-reseller-you-found-on-social-media","question":"Is it safe to buy event tickets from a reseller I found on social media?","shortAnswer":"Ticket fraud via social media is widespread, particularly for sold-out events. There is no guarantee that tickets sold by social media strangers are genuine, transferable, or even real. Always prefer official channels.","explanation":"When an event sells out, demand for secondary market tickets spikes and fraudsters fill the gap. Social media posts and direct messages offering tickets to sold-out events are a well-established fraud vector. Common patterns include: completely fake tickets that are rejected at the venue gate, real tickets already sold to multiple people with only one admitted, tickets in the seller's name that cannot be transferred, and PDF or screenshot forgeries.\n\nThe payment method used in these transactions compounds the risk. Social media ticket fraudsters almost universally request bank transfer, Zelle, Venmo Friends, or cash in advance — all methods with no buyer protection. By the time the fraud is discovered, the seller has deleted their account and the money is gone.\n\nEven where a legitimate reseller platform is used, the secondary market carries risks around ticket authenticity and transferability. Some event organisers use non-transferable ticketing systems where only the original purchaser can gain entry. Always check the event's official policy on ticket transfer before purchasing from any secondary source.\n\nFor sold-out events, check whether the official box office has a waiting list or returns programme. Official resale platforms provided by the organiser are the safest secondary option.","redFlags":["Seller insists on bank transfer, Zelle, or cash and declines buyer-protected payment methods","Price is dramatically above face value for a claimed 'not-for-profit' sale","Seller has a new or limited social media history","You are shown only a screenshot or PDF of the ticket rather than allowed to verify via the booking system","Seller creates urgency — many other buyers waiting, price will go up"],"whatToDoNow":["Check the official box office or organiser's website for any remaining stock or official resale","If buying secondhand, use the organiser's official resale partner platform where one exists","Pay only via a buyer-protected method — credit card or PayPal Goods and Services","Verify the ticket is genuinely transferable by checking the event's policy before paying","If you have been defrauded, report to your bank and national fraud authority","Report the fraudulent seller account to the social media platform"],"faq":[{"question":"Can I verify a ticket is genuine before I buy?","answer":"For some ticketing systems, the seller can share the booking reference for you to check against the organiser's system before paying. This is a reasonable request to make — a fraudster will likely decline. Always verify policy on transfer."},{"question":"The seller offered to meet me in person at the venue to exchange — does that make it safer?","answer":"Meeting in person reduces the risk of outright ghosting, but does not protect against tickets that fail at the gate. You would still be out of pocket at the venue with no admission. Prefer verifiable tickets through official or buyer-protected channels."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-send-money-to-someone-claiming-to-be-a-soldier-overseas","url":"https://scamencyclopedia.org/questions/is-it-safe-to-send-money-to-someone-claiming-to-be-a-soldier-overseas","question":"Is it safe to send money to someone claiming to be a soldier or military contractor overseas?","shortAnswer":"Military romance scams are one of the most common and emotionally damaging fraud types. People claiming to be military personnel deployed overseas and requesting money are almost never who they claim to be.","explanation":"Military romance scams follow a highly consistent script: the contact presents themselves as an enlisted soldier, high-ranking officer, or military contractor deployed abroad. They build an emotional connection over days or weeks, typically claiming an inability to video call or meet due to deployment restrictions. When trust is established, financial requests follow — framed as emergencies: medical bills, communications fees, leave permits, or flight costs to visit you.\n\nThese scams are run by organised operations, sometimes involving large teams of individuals playing different characters. The photographs used are stolen from real military personnel, veterans, or generic stock images, which is why reverse-image search frequently reveals the person is not who they claim.\n\nThe financial requests are always designed to exploit emotional investment: after weeks or months of daily communication, the victim feels a genuine bond and is highly motivated to help. Requests often start small, build trust, then escalate. Each payment is accompanied by new obstacles requiring additional funds.\n\nReal military service members on deployment have access to military pay, communications systems, and repatriation processes that do not require civilians to send money. The US and UK military have specific fraud warning pages confirming that service members never legitimately ask for money from online contacts.","redFlags":["Claimed deployment prevents video calls, in-person meetings, or any verifiable contact","Communications are exclusively through email or messaging apps","Relationship developed very quickly with intense emotional content","Requests money for leave permit, medical costs, communication equipment, or flights home","Reverse image search shows the photo belongs to someone else","Refuses to answer specific, verifiable questions about their unit, deployment location, or service history"],"whatToDoNow":["Do not send any money under any circumstances","Reverse-image-search all photos provided","Check the claimed name and unit details through military verification resources","Tell a trusted friend or family member about the relationship — outside perspective is critical","If you have already sent money, report to your national fraud authority","Seek emotional support — these scams are designed to cause genuine psychological harm"],"faq":[{"question":"Could a real military person need money from someone they met online?","answer":"In genuine financial emergencies, service members have access to military welfare organisations, hardship funds, and official pay systems. There is no legitimate reason a deployed service member would need money from a civilian online contact they have never met in person."},{"question":"What if I have been sending money for weeks — should I tell anyone?","answer":"Yes. Tell a trusted friend or family member and contact your national fraud authority. Embarrassment is understandable but should not prevent reporting — these operations are sophisticated and their victims range widely in background and age."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-use-the-same-password-for-multiple-accounts","url":"https://scamencyclopedia.org/questions/is-it-safe-to-use-the-same-password-for-multiple-accounts","question":"Is it safe to use the same password for multiple online accounts?","shortAnswer":"Reusing passwords is one of the highest-risk security habits online. When any one service suffers a data breach, criminals test the stolen credentials on hundreds of other services — a technique called credential stuffing.","explanation":"Credential stuffing attacks are automated: criminals take a database of email addresses and passwords leaked from a breached service and systematically test them against major banking, email, shopping, and social media platforms. Because many people reuse passwords, a breach at a small, obscure website can result in access to their bank account or email if the same password is used.\n\nThe scale of these breaches is significant. Many large and small services have experienced breaches over the years, with email and password combinations circulating in criminal databases for years after the original incident. Tools exist that allow criminals to test millions of credential pairs across hundreds of platforms quickly and cheaply.\n\nThe solution is straightforward in principle: use a unique, strong password for every account. In practice, remembering dozens of unique passwords is impossible without a password manager. Reputable password managers generate, store, and autofill unique complex passwords — you only need to remember one master password. Many are available at low or no cost.\n\nFor your most critical accounts — email, banking, pension — enable two-factor authentication in addition to a unique password. Even if a password is somehow compromised, 2FA means the attacker cannot access the account without also controlling your second factor.","redFlags":["You receive unexpected login alerts from services you did not recently access","A service you use notifies you of a data breach","You find your email in a breach notification service's database","You receive emails to reset passwords you did not request","Accounts you seldom use show unexpected recent activity"],"whatToDoNow":["Start using a reputable password manager and begin creating unique passwords for each account","Prioritise changing passwords on email and banking first — these are the most critical","Check your email address on a reputable breach notification service","Enable two-factor authentication on email, banking, and any account with payment methods stored","Review login history on important accounts for unrecognised access"],"faq":[{"question":"If I use a strong password, can I reuse it safely?","answer":"Password strength does not protect against credential stuffing — the issue is not that criminals guess the password, but that they obtain it from a breach. Unique passwords per account are necessary regardless of strength."},{"question":"Are password managers safe — what if they get hacked?","answer":"Reputable password managers use strong encryption such that even a breach of their servers exposes only encrypted data. The main risk is your master password being compromised. Use a strong, unique master password and enable 2FA on the password manager itself."}],"lastReviewed":"2026-06-10"},{"slug":"what-happens-if-i-fall-for-a-fake-tech-support-pop-up","url":"https://scamencyclopedia.org/questions/what-happens-if-i-fall-for-a-fake-tech-support-pop-up","question":"What happens if I fall for a fake tech-support pop-up and called the number?","shortAnswer":"Calling a fake tech-support number typically leads to a remote-access request, payment demand, or data theft. The harm depends on what happened during the call — act quickly to assess and limit damage.","explanation":"Fake tech-support pop-ups are designed to create panic. The message usually claims your computer has been infected with a serious virus, your Windows licence has expired, or illegal activity has been detected on your device. A prominent phone number is displayed and the page may prevent normal browser closure, increasing anxiety.\n\nIf you called the number, the call went to a scam operation that may be located anywhere in the world. The 'technician' speaks authoritatively and uses technical-sounding language to appear credible. Common outcomes of the call include: being directed to install a remote-access application (allowing the scammer to control your device); being shown alarming but meaningless system logs to 'prove' a problem; being charged for unnecessary 'repairs' or a 'security subscription'; or having your financial details taken directly.\n\nIf the call concluded without you granting remote access or providing payment details, your risk is lower — but your phone number is now flagged as belonging to someone susceptible to tech-support pitches, and further calls may follow.\n\nIf you granted remote access or made payment, follow the steps for remote-access fraud: disconnect, call your bank, change passwords from a different device, and have your computer professionally inspected.","redFlags":["The pop-up used alarming language about viruses, legal violations, or Microsoft/Apple detecting problems","The page could not be closed normally with the X button","The number displayed used a format suggesting it was a local support line but the call was answered by someone with a very different accent or who asked for unusual access","The 'technician' asked you to install software or visit specific websites","You were asked to pay for a subscription, cleaning service, or lifetime support plan"],"whatToDoNow":["If remote access was granted: close the app, disconnect from internet, call your bank, change passwords from a clean device","If payment was made: call your bank or card provider immediately to dispute and block the card","If only a call was made: monitor for follow-up contact and block the number","Run a reputable malware scan on any device used during the interaction","Report the incident to your national cybercrime authority","Do not call the number again — further contact will be used to extract more"],"faq":[{"question":"My screen is frozen with the pop-up — how do I close it?","answer":"Use keyboard shortcut Alt+F4 (Windows) or Command+Q (Mac) to force close the browser. If that fails, use Task Manager (Ctrl+Shift+Esc on Windows) to end the browser process. If still stuck, hold the power button to shut down. The pop-up itself cannot cause harm — only actions you take in response to it can."},{"question":"I paid them with a gift card — can I get a refund?","answer":"Contact the gift card issuer immediately and explain you were defrauded. Recovery rates are low because codes are often redeemed quickly, but some issuers have fraud teams that can freeze unclaimed balances. Also report to your national fraud authority."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-share-your-location-with-someone-you-met-online","url":"https://scamencyclopedia.org/questions/is-it-safe-to-share-your-location-with-someone-you-met-online","question":"Is it safe to share your precise location with someone you met online?","shortAnswer":"Sharing precise real-time location with anyone you have not met in person and do not fully trust carries safety risks beyond financial fraud. Start with general area only and meet in a public place first.","explanation":"Location sharing in digital communication has become normalised, but sharing your precise or real-time location with someone you have only met online — however trusted they feel — creates several distinct risks.\n\nFor physical safety, sharing your home address or live location with a person whose true identity is unverified gives them information they could use to show up uninvited. While most online contacts have benign intentions, the inability to verify identity online means you cannot assess this risk accurately. Romance scam victims have in some cases also become victims of physical threats or robbery when a supposed partner was actually casing their circumstances.\n\nFor fraud purposes, your address combined with other information you share — employer, routine, travel plans — builds a profile useful for targeted social engineering. A sophisticated scammer can use location context to make their cover story more convincing ('I'm in your city this week') or to impersonate local services.\n\nShare only the general area (city or neighbourhood) with online contacts until you have met in person, verified their identity, and built a relationship over time. Full address sharing should follow the same logic you would apply in offline life — slowly and with trust established over time.","redFlags":["A new online contact asks for your home address, workplace, or real-time location early in the relationship","The request for location is framed as a sign of trust or commitment","They claim to be in your city or area after you mentioned your location — possibly using the information immediately","The contact becomes insistent or offended when location is not shared"],"whatToDoNow":["Share only general city or neighbourhood, not a precise address, with unverified contacts","Review location permissions on messaging apps — many share location more broadly than users realise","If you have shared your home address and now have concerns, be alert to any unexpected contacts","Report persistent or concerning behaviour to the platform and, if it constitutes a threat, to the police"],"faq":[{"question":"Is sharing location on a dating app with a match safe?","answer":"Many dating apps show approximate distance rather than precise location for this reason. Avoid sharing your exact address or live location with any match until you have met in person multiple times and feel confident in their identity and intentions."},{"question":"What about sharing live location with a group of friends while travelling?","answer":"Location sharing for safety and coordination with verified, trusted friends is low risk. The concern is specifically with sharing location with people whose identity and intentions you cannot verify."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-pay-a-contractor-in-full-upfront","url":"https://scamencyclopedia.org/questions/is-it-safe-to-pay-a-contractor-in-full-upfront","question":"Is it safe to pay a contractor, tradesperson, or builder in full before the work is done?","shortAnswer":"Full upfront payment to a contractor you have not worked with before is strongly inadvisable. A small deposit to cover materials is common practice, but full payment before completion creates significant risk of non-performance or disappearance.","explanation":"Contractor and tradesperson fraud — where payment is taken and the work is never started or completed — is a persistent consumer problem. The pattern typically involves door-to-door solicitation or online listing, a competitive quote, a request for a significant upfront payment, and then substandard work, abandoned work, or a complete disappearance.\n\nLarger projects reasonably involve staged payments tied to milestones: a deposit before start, payment on completion of specific stages, final payment on satisfactory completion. This structure protects both parties and is standard practice in the construction and trades industry.\n\nVerify contractors independently before any payment: check membership of relevant trade bodies, ask for and contact references, search the company name online, verify their business registration, and confirm they hold appropriate insurance. Reputable tradespeople welcome these checks.\n\nNever pay in cash for large jobs — cash payments leave no record and complicate any dispute. Bank transfer or cheque creates an audit trail. Use a credit card for any portion you can — credit card payments offer chargeback rights if the work is not delivered.","redFlags":["Contractor requests full payment before any work begins","Contractor can only be contacted by phone or cash and has no verifiable business address","They are not a member of any relevant trade body or accreditation scheme","They cannot provide references from previous clients","They will only accept cash","Quote was given very quickly without a detailed assessment and is significantly below all other quotes"],"whatToDoNow":["Agree staged payment milestones in a written contract before work begins","Verify trade body membership and business registration independently","Request and contact at least two references","If you have already paid and work is abandoned, send a formal demand letter, then small claims court if needed","Report rogue traders to your national consumer protection or trading standards authority","Use credit card for any portion possible to retain chargeback rights"],"faq":[{"question":"Is a deposit before work starts normal?","answer":"A deposit of 10-30% is common practice to cover initial material costs and demonstrate commitment from both sides. Full payment before any work starts is not standard and should be resisted."},{"question":"The contractor wants cash only — should I be concerned?","answer":"Yes. Cash-only requests eliminate the paper trail that protects you in a dispute. Reputable businesses accept bank transfer at minimum. A cash-only insistence, particularly combined with a below-market price, is a significant warning sign."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-click-an-unexpected-password-reset-email","url":"https://scamencyclopedia.org/questions/is-it-safe-to-click-an-unexpected-password-reset-email","question":"Is it safe to click the link in an unexpected password-reset email?","shortAnswer":"An unexpected password-reset email you did not request may indicate someone is trying to access your account. Do not click the link — instead, log in directly through the official site and change your password from there.","explanation":"Password-reset emails come in two categories: those you requested and those you did not. An unexpected reset email could mean several things: someone is testing your email address against accounts on the service, someone is actively attempting to take over your account, or in rare cases, it is a phishing email using the reset email format to harvest credentials.\n\nClicking a genuine reset link you did not request does not by itself cause harm — it would require additional steps to complete the reset. But the problem is distinguishing a genuine reset email from a convincing fake. Phishing emails mimicking password-reset notifications are extremely common and can be pixel-perfect copies of the real thing.\n\nThe safe response is to not click any link in the email. Instead, navigate directly to the service's official website or app, attempt to log in with your current credentials, and if successful, visit security settings to confirm no changes have been made. If the reset was an attempt to take over your account, your password should still work.\n\nIf you cannot log in using your current credentials, the account may already be compromised. Use the service's official account recovery process, not any link in an email, to regain access.","redFlags":["You receive a reset email for a service you did not attempt to access","The email comes from a domain that does not exactly match the service's official domain","You receive multiple reset emails in succession — possibly an automated takeover attempt","The 'from' address looks legitimate but clicking 'reply' shows a different address","The email asks for more than just clicking — it requests your current password or security questions"],"whatToDoNow":["Do not click the link in the email","Go directly to the official site and log in with your current credentials","If you can log in, check security settings for any unauthorised changes","Change your password immediately to a strong, unique one","Enable two-factor authentication if not already active","If you cannot log in, use the official site's account recovery process"],"faq":[{"question":"I clicked the link but did not enter anything — is my account at risk?","answer":"If the link led to a genuine reset page and you did not complete the reset, your account password remains unchanged. If the link led to a phishing page and you entered information, change your password immediately and report the phishing site."},{"question":"Should I be worried if I receive many reset emails for different accounts?","answer":"Multiple reset emails across services may indicate your email address is being used in automated credential-testing attacks, or that your data is in a breach database. Check your email in a breach notification service and enable two-factor authentication on key accounts."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-respond-to-an-email-asking-to-update-billing-information","url":"https://scamencyclopedia.org/questions/is-it-safe-to-respond-to-an-email-asking-to-update-billing-information","question":"Is it safe to respond to an email asking me to update my billing or payment information?","shortAnswer":"Billing update requests sent via email are a common phishing technique. Never follow links in such emails — go directly to the service's official website and update payment information from there.","explanation":"Payment update phishing is effective because the scenario is genuinely plausible: credit cards expire, payment methods fail, and subscriptions are interrupted. Criminals exploit this by sending emails that closely mimic legitimate subscription services — streaming platforms, utilities, software services — claiming a payment failed and that your billing information needs updating urgently.\n\nThe email contains a link to a convincing fake version of the service's website. When you enter your card details, they are captured by the fraudster. Sometimes the site then redirects you to the real service, making the theft invisible until you notice unexpected charges.\n\nThe tell is not always easy to spot from the email content alone — the visual design can be excellent. The reliable check is the URL: does the link in the email go to the service's exact official domain, spelled correctly, with no extra characters or subdomains? The safest approach is to not click the link at all and instead navigate directly to the service.\n\nLegitimate subscription services do sometimes send billing update emails, but the same risk remains. The habit of never clicking billing-related links in emails and instead navigating directly to the service is the most robust defence regardless of whether the email is genuine.","redFlags":["The email creates urgency — subscription will be cancelled, access suspended, or charges made immediately","The link in the email goes to a slightly different domain from the official service","The email was not expected — you had no payment issue that you were aware of","The email asks for card details to be entered directly in the email or attached form","The 'from' domain does not match the official company domain exactly"],"whatToDoNow":["Do not click any link in the email","Navigate directly to the official service website or app and check billing status from there","If you have already entered card details via such a link, contact your bank immediately","Forward the suspicious email to the legitimate company's phishing reporting address","Report to your national phishing or cybercrime reporting centre"],"faq":[{"question":"How can I tell if a billing email is from the real company?","answer":"Check the 'from' domain exactly — not just the display name. Hover over any links (without clicking) and check where they actually lead. When in doubt, go directly to the official website rather than clicking anything in the email."},{"question":"My streaming service says my payment failed — how do I safely update it?","answer":"Log in to the streaming service directly by typing its address into your browser or using the app. The billing section in your account settings is where you update payment information safely, without any email link involved."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-accept-an-unsolicited-investment-advice-call","url":"https://scamencyclopedia.org/questions/is-it-safe-to-accept-an-unsolicited-investment-advice-call","question":"Is it safe to act on an unsolicited investment advice call?","shortAnswer":"Unsolicited investment calls — also known as boiler room fraud — are a significant source of financial loss. Legitimate regulated advisers do not cold-call members of the public with investment opportunities.","explanation":"Boiler room fraud operates through cold calling, email, or social media, pushing investments in shares, bonds, crypto, land, wine, whisky, or other assets at prices that will supposedly increase significantly. The pitches are professionally delivered, often include convincing brochures and websites, and the caller may reference your previous investments if they obtained data from a breach.\n\nThe investments are typically either non-existent, massively overpriced, or in instruments that cannot easily be sold. The caller follows up persistently to pressure further investment. By the time you try to access your funds, the operation has closed.\n\nIn the UK, the FCA maintains a Warning List of unauthorised firms and individuals. In the US, FINRA and the SEC offer investor checking tools. Any firm cold-calling you with investment opportunities that cannot be found on these registers is operating outside the law.\n\nRegulated financial advisers — who are authorised to give investment advice — are not permitted to cold-call members of the public in most jurisdictions. If a call about investments is the first contact you have with someone, it is almost certainly not a regulated adviser.","redFlags":["Call was entirely unsolicited — you never registered interest with this firm","The investment promises guaranteed or unusually high returns","The firm cannot be found on the regulator's register","Caller is persistent and creates urgency — limited availability, price going up","The firm asks for your pension or savings as the investment vehicle","They claim a special opportunity not available to the public generally"],"whatToDoNow":["Hang up without providing any personal information","Check the firm on your national financial regulator's register","Report the number and firm details to your financial regulator","If you have already invested, report to the regulator and seek independent legal advice","Register with the Telephone Preference Service (UK) or Do Not Call registry (US) to reduce cold calls","Discuss any investment decisions with a regulated adviser you have independently researched"],"faq":[{"question":"The investment firm has a professional-looking website — does that make it legitimate?","answer":"Fraudulent investment firms invest in professional websites and brochures specifically to appear legitimate. The website appearance is not evidence of authorisation. Always check the regulator's register for the specific firm and registration number."},{"question":"What is clone firm fraud?","answer":"Clone firm fraud involves criminals creating a fake firm using the name, registration number, and branding of a genuinely regulated firm. Always check the contact details (not just the name) against the regulator's register and call the official number listed there to verify."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-open-an-email-attachment-from-an-unknown-sender","url":"https://scamencyclopedia.org/questions/is-it-safe-to-open-an-email-attachment-from-an-unknown-sender","question":"Is it safe to open an email attachment from an unknown sender?","shortAnswer":"Email attachments from unknown senders are one of the primary methods for delivering malware. You should not open them unless you are certain of the sender's identity and were expecting the file.","explanation":"Malicious email attachments can deliver a wide range of harmful software: ransomware that encrypts your files and demands payment, banking trojans that monitor your keystrokes, remote-access tools that give criminals control of your device, or simply data-harvesting software. The file formats vary — common malicious formats include Word documents (.doc, .docx) with malicious macros, PDF files exploiting reader vulnerabilities, executable files (.exe), and compressed archives (.zip, .rar) containing any of the above.\n\nMany effective attacks come not from completely unknown senders but from compromised accounts belonging to someone you know — a colleague, friend, or supplier whose email account was hacked. The message may use a familiar name and include some contextual detail to appear plausible. The attachment name is typically generic: 'Invoice', 'Document', 'Receipt'.\n\nBefore opening any unexpected attachment, verify the sender through a separate channel — a phone call or a new email asking if they sent you a file. Never reply to the suspicious email itself, as you may be replying to the attacker who controls the compromised account.\n\nMany business email attacks specifically target invoices and payment files, inserting malicious content into what appears to be a routine business document. Organisations should train all staff in this specific threat, as the consequences of ransomware infection can be severe.","redFlags":["Sender is unknown or the message arrived with no prior context","The email creates urgency — open immediately, action required today","The attachment name is generic — 'Invoice', 'Document', 'Receipt' — without specific context","The email asks you to enable macros in a Word or Excel document","The message body text is thin or generic, not referencing specific details of your relationship with the sender","The 'from' address does not match the display name or organisation"],"whatToDoNow":["Do not open the attachment","Verify the sender through a separate channel if you suspect the message may be legitimate","Report the email to your email provider using the junk or phishing report function","If you have already opened the attachment, run a reputable malware scan immediately","Disconnect from the network and seek IT assistance if your computer behaves unusually after opening an attachment","Report to your national cybercrime reporting centre"],"faq":[{"question":"Can a PDF give me a virus?","answer":"Yes. Malicious PDFs can exploit vulnerabilities in PDF reader software. Keeping your PDF reader fully updated significantly reduces this risk. Preview mode in email clients is generally safer than downloading and opening in a local application."},{"question":"The sender was my bank — is it safe to open?","answer":"Attackers impersonate banks. Verify by checking the sending domain exactly, not just the display name. If in any doubt, log in to your bank directly to check for any genuine correspondence and report the email."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-click-a-suspicious-link-on-whatsapp","url":"https://scamencyclopedia.org/questions/is-it-safe-to-click-a-suspicious-link-on-whatsapp","question":"Is it safe to click a suspicious link sent on WhatsApp?","shortAnswer":"Suspicious links on WhatsApp — even from contacts whose accounts may be compromised — can lead to phishing sites, malware, or account-takeover attempts. Do not click without verifying the sender through another channel.","explanation":"WhatsApp is widely used for personal communication, which makes it a trusted channel that criminals exploit. Account takeover fraud frequently uses WhatsApp: once an attacker gains access to one account, they message everyone in the contact list with links or requests, appearing to come from a trusted friend or family member.\n\nCommon WhatsApp scam patterns include: a six-digit verification code forwarded request (used to steal your own account — never forward verification codes to anyone), links to fake prize pages, impersonation of family members claiming an emergency and asking for money, and business impersonation where a supplier or employer's number is cloned.\n\nLinks sent via WhatsApp can lead to phishing sites optimised for mobile browsers, malware targeting Android devices, or pages designed to harvest WhatsApp credentials specifically. WhatsApp Web credential phishing has become particularly prevalent — fake login pages that steal your session token to hijack your account.\n\nThe defence against WhatsApp-based fraud mirrors general phishing defence: do not click unexpected links, verify requests from contacts through a separate channel, and never forward verification codes to anyone regardless of who is asking.","redFlags":["A contact sends an unexpected link with minimal context — 'check this out', 'you should see this'","A family member or friend messages with an urgent request for money or sensitive information","You receive a message asking you to forward a six-digit code you received by SMS","A 'known' contact's communication style is noticeably different from their usual pattern","The link leads to a login page that asks for your WhatsApp credentials or phone number"],"whatToDoNow":["Do not click the link — contact the sender by phone or another channel to verify","If a family member is claiming an emergency, call them directly to confirm","Never forward SMS verification codes to anyone — this is always an account-takeover technique","If you have already clicked and suspect your account is compromised, re-register WhatsApp to reclaim your account","Report the message using WhatsApp's built-in reporting function","Enable two-step verification in WhatsApp settings for extra account protection"],"faq":[{"question":"My friend's WhatsApp is asking me to forward a code — what should I do?","answer":"This is almost certainly an account-takeover scam using your friend's compromised account. Never forward any SMS code. Call your friend by phone to tell them their WhatsApp has likely been taken over so they can act to recover it."},{"question":"How do I enable two-step verification on WhatsApp?","answer":"Open WhatsApp, go to Settings, then Account, then Two-step verification, and follow the setup process. This adds a six-digit PIN that must be entered periodically and when re-registering your number, making unauthorised takeovers much harder."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-wire-money-to-pay-for-immigration-services-online","url":"https://scamencyclopedia.org/questions/is-it-safe-to-wire-money-to-pay-for-immigration-services-online","question":"Is it safe to wire money to pay for immigration services found online?","shortAnswer":"Immigration service scams target vulnerable people with fake visa applications, fraudulent legal advice, and fabricated government fees. Only use services from registered immigration lawyers or authorised advisers.","explanation":"Immigration fraud causes compounded harm: victims lose money and their immigration status may also be jeopardised by applications submitted on their behalf that are fraudulent, incomplete, or simply never filed. People under time pressure or in legally precarious situations are particularly vulnerable to fraudsters offering quick, affordable solutions.\n\nCommon patterns include fake 'visa consultants' who collect fees and application details but submit nothing, genuine-looking websites impersonating government immigration portals that harvest your details and fees, and fraudulent representatives who create false urgency around application deadlines.\n\nIn the UK, only solicitors, registered legal practitioners, and OISC-regulated advisers can legally provide immigration advice for payment. In the US, only licensed attorneys or accredited representatives recognised by the Department of Justice may provide legal immigration services. Anyone offering immigration services outside these categories in these jurisdictions is operating unlawfully.\n\nAlways verify an adviser's accreditation with the relevant professional body or regulator before paying. Government immigration fees must be paid directly through official government portals — no third party should collect government fees on your behalf.","redFlags":["Service was found through a social media ad or cold email rather than your own research","Adviser claims to have special contacts inside immigration authorities","Fees are collected by bank transfer or cash rather than a verifiable payment system","Adviser cannot provide registration or accreditation details","Urgency is created around deadlines that cannot be independently verified","The website domain resembles a government portal but is not actually a government domain"],"whatToDoNow":["Verify any adviser against the OISC register (UK), AILA (US), or the relevant national authority","Pay government fees only through official government websites — navigate directly, never through an intermediary link","If you have been defrauded, report to the relevant immigration authority and your national fraud reporting service","Seek advice from a verified accredited representative to understand the status of any applications made on your behalf","Keep all documentation of what was paid and promised"],"faq":[{"question":"Can I do my own visa application without a paid adviser?","answer":"In most countries, individuals can complete their own visa applications through the official government portal without an adviser. Official government websites provide instructions. Paying for help is not required and carries fraud risk if the provider is unregulated."},{"question":"Is it safe to use an online immigration service platform?","answer":"Some regulated online platforms provide legitimate document preparation assistance, but they must be registered with the relevant authority. Verify their accreditation before using them and ensure all fees go directly to the government via official channels."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-pay-a-fee-to-claim-an-inheritance","url":"https://scamencyclopedia.org/questions/is-it-safe-to-pay-a-fee-to-claim-an-inheritance","question":"Is it safe to pay a fee to claim an inheritance from a stranger?","shortAnswer":"Inheritance scams are a classic advance-fee fraud pattern. No legitimate inheritance process requires a fee paid to a stranger before the inheritance is released — this is always a fraud.","explanation":"Inheritance fraud — sometimes called advance-fee fraud or the inheritance variant of the '419 scam' — presents you with an unexpected windfall: a distant relative, a deceased stranger who shares your surname, or an unclaimed estate that you have somehow been selected to inherit. The sum described is typically large. Before the funds can be released, fees are required: legal fees, taxes, notarisation, customs, or bank transfer costs.\n\nEvery payment made is followed by a new obstacle requiring another fee. The 'inheritance' never arrives because it does not exist. The amounts requested escalate as long as the victim continues to engage. The fraud operates by making each individual fee seem small relative to the promised inheritance.\n\nLegitimate inheritances — even those involving foreign estates or distant relatives — do not require upfront payments by the beneficiary to a solicitor they have never met, via bank transfer or Western Union, before any documentation is exchanged. Real estate lawyers are paid from the estate, not by the beneficiary in advance.\n\nIf you receive correspondence about an unexpected inheritance, it is virtually certain to be fraud. If you have any genuine reason to believe you might have a legitimate claim — an actual relative whose estate is being administered — contact a regulated solicitor in the relevant jurisdiction directly.","redFlags":["You received unexpected correspondence about an inheritance from a stranger or distant contact","Fees are required before any funds can be released","The 'solicitor' or 'banker' contacts you via a personal email address rather than a law firm domain","Each payment requirement is followed by a new obstacle and another fee","Urgency is created — the estate will lapse, the funds will be forfeited","The correspondence is poorly written or contains inconsistencies"],"whatToDoNow":["Ignore the correspondence and do not respond","Do not send any fee payment","If you have already paid fees and are continuing to be contacted, seek support from your national fraud authority","Report the correspondence to your national fraud authority","Warn family members about this specific scam pattern"],"faq":[{"question":"How do legitimate inheritance claims work if I really am a beneficiary?","answer":"A legitimate executor or solicitor administering an estate provides verifiable credentials, a law firm address, and documentation. They are paid from the estate itself. You can verify their registration with the relevant solicitors' or bar association."},{"question":"I paid one fee — should I pay the next one to try to recover the first?","answer":"No. Paying further fees will only result in more losses. The fraud is designed to extract as much as possible through escalating obstacles. Stop all payments and report to your fraud authority."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-buy-medication-online-from-an-unfamiliar-pharmacy","url":"https://scamencyclopedia.org/questions/is-it-safe-to-buy-medication-online-from-an-unfamiliar-pharmacy","question":"Is it safe to buy medication from an unfamiliar online pharmacy?","shortAnswer":"Unregulated online pharmacies may supply counterfeit, substandard, or incorrectly labelled medicines. Only buy from pharmacies verified by the relevant national regulatory authority.","explanation":"The online pharmacy market includes legitimate, properly regulated services as well as sites that operate outside any regulatory framework. The risks of buying from an unregulated source are significant: the product received may contain incorrect active ingredients, incorrect dosages, harmful contaminants, or no active ingredient at all.\n\nCounterfeit medicines are a serious global health problem. Medications purchased outside regulated channels are especially risky for conditions where dosing precision matters — heart medication, cancer treatment, HIV antiretrovirals — but counterfeit supplements, weight-loss pills, and lifestyle medications are also widely circulated.\n\nRegulated online pharmacies in the UK display the MHRA-approved logo that links to their verified listing. In the US, look for NABP verification (NABP.pharmacy domain extension). In other jurisdictions, national drug regulatory authorities maintain lists of verified online dispensaries.\n\nIn addition to counterfeit risk, some online pharmacies operate as subscription traps: a 'free trial' of a supplement converts automatically into a recurring charge for which cancellation is deliberately made difficult.","redFlags":["The pharmacy does not display a verifiable regulatory approval link","Prescription-only medications are available without a prescription","Prices are dramatically below those of known regulated pharmacies","The site was found through an unsolicited email or social media ad","Payment is requested by bank transfer or cryptocurrency","No physical address or registered pharmacist contact is provided"],"whatToDoNow":["Verify any online pharmacy against your national regulator's approved list before ordering","If you have already received medication from an unverified source, consult a healthcare professional before taking it","Report suspected counterfeit medication sources to your national medicines regulator","If you were charged unexpectedly for a subscription, initiate a chargeback with your card provider"],"faq":[{"question":"How do I check if an online pharmacy is legitimate in the UK?","answer":"Look for the green cross logo with a link to the MHRA registered pharmacy database. Click the logo to verify it links to the genuine MHRA site with the pharmacy's registration details. Registered pharmacies are also listed directly on the MHRA website."},{"question":"Is it legal to buy prescription medication online without a prescription?","answer":"In most countries, prescription medications require a valid prescription from a licensed healthcare professional. Sites selling prescription medication without a prescription are operating outside the law and should be avoided entirely."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-send-money-via-western-union-or-moneygram-to-someone-i-met-online","url":"https://scamencyclopedia.org/questions/is-it-safe-to-send-money-via-western-union-or-moneygram-to-someone-i-met-online","question":"Is it safe to send money via Western Union or MoneyGram to someone I met online?","shortAnswer":"Money transfer services like Western Union and MoneyGram are nearly impossible to reverse once collected. Sending to online contacts you have not met in person is very high risk and is the payment method of choice for many scam operations.","explanation":"Wire money transfer services provide near-instant, largely irreversible payments that can be collected globally with minimal identity verification at the point of collection. These properties make them extremely useful for legitimate international remittances and equally attractive to scammers who need to move funds quickly before a fraud is identified.\n\nThese services are specifically avoided by their own fraud warnings for payments to people you do not know personally. Western Union and MoneyGram both publish prominent warnings against using their services to pay anyone other than people you know and trust personally — this is an acknowledgement of how frequently their services are misused.\n\nCommon contexts where someone you met online requests this payment method: lottery or prize claims (pay a fee to release your winnings), romance scams (money for an emergency), job offers (send money to receive materials), tech-support fraud (pay to fix a problem), and rental scams (deposit for a property).\n\nIf someone you know only online insists that money transfer is the only possible way to send funds, treat this as a definitive warning sign. Legitimate individuals in genuine financial need have access to bank accounts and can provide verifiable details.","redFlags":["An online contact insists Western Union, MoneyGram, or a similar cash pickup service is the only acceptable method","The reason for the payment fits a known scam pattern — prize fee, emergency, deposit","The recipient is in a different country from where you expected","You have never met the recipient in person","The amount is described as refundable or repayable but you have no contractual basis for this","You are asked to send multiple smaller amounts rather than one transfer"],"whatToDoNow":["Do not send the money","If you have already sent it, contact the transfer service immediately — there is a narrow window before collection in some cases","File a fraud complaint with the transfer service and your national fraud authority","Report to your local police — a case reference may assist in rare recovery scenarios","Seek emotional support if the request came from a relationship context"],"faq":[{"question":"Can I cancel a Western Union or MoneyGram transfer before it is collected?","answer":"There is sometimes a brief window to cancel before collection. Contact the service's customer support immediately and request a cancellation. Success is not guaranteed but the sooner you act, the better the chance of a stop being placed."},{"question":"Is it ever legitimate to send money internationally via these services?","answer":"Yes — these services are widely used for legitimate international remittances, particularly to family members in countries with limited banking access. The risk is specific to sending to people you know only online and have never met in person."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-respond-to-a-vehicle-inspection-scam-request","url":"https://scamencyclopedia.org/questions/is-it-safe-to-respond-to-a-vehicle-inspection-scam-request","question":"Is it safe to agree to a pre-purchase vehicle inspection you did not arrange yourself?","shortAnswer":"Vehicle inspection scams use fake inspection services or fabricated reports to pressure buyers into purchasing vehicles without a genuine independent check. Always arrange your own inspection independently.","explanation":"When buying a vehicle privately or from an unknown dealer, an independent inspection is genuinely important. Fraudsters exploit this need in two ways: by providing a fake 'independent' inspection report that falsely confirms the vehicle is in good condition, or by insisting on a specific inspection service — which they control or are affiliated with — that issues favourable reports regardless of actual vehicle condition.\n\nA genuine independent vehicle inspection must be arranged by the buyer through a service they research and select independently, not one recommended or insisted upon by the seller. When a seller insists on their own chosen inspector, or provides an inspection report without you having commissioned one, the document's independence is zero.\n\nFor significant vehicle purchases, the inspection should involve a physical inspection at the vehicle's actual location, not a visual check from photographs. The inspecting organisation should be independently verifiable — major motoring organisations in most countries offer this service.\n\nFor private car sales specifically, also check the vehicle against national registries: outstanding finance, previous write-off history, mileage records, and ownership history. These checks are available through accredited services in most countries and can reveal fraud before purchase.","redFlags":["Seller insists on a specific inspection service you have not heard of or researched independently","A 'clean' inspection report is provided proactively before you asked for one","Seller declines to allow an inspection of your own choosing at a location of your choosing","Vehicle history checks show inconsistencies that the seller cannot explain","Price is significantly below comparable vehicles — possible write-off or clocked mileage","The seller is unwilling to allow time for proper checks before a payment deadline"],"whatToDoNow":["Always arrange your own independent inspection through a nationally recognised motoring organisation","Run vehicle history checks through an accredited service before purchasing","Never pay a deposit before completing independent inspection and history checks","If you believe you have purchased a fraudulently represented vehicle, report to the police and the national trading standards authority","Seek legal advice on rejection and refund rights under consumer protection law"],"faq":[{"question":"Is a seller-provided inspection report ever trustworthy?","answer":"A report from a nationally recognised body (such as the AA or RAC in the UK) commissioned by the seller can provide some useful information, but you have not seen how the inspection was conducted. An independent inspection you commissioned yourself is always more reliable."},{"question":"What does a vehicle history check tell me?","answer":"A vehicle history check typically covers outstanding finance, write-off status, mileage records, previous owners, and whether the vehicle has been reported stolen. It is an important first step but does not replace a physical inspection."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-give-my-utility-account-number-to-a-caller","url":"https://scamencyclopedia.org/questions/is-it-safe-to-give-my-utility-account-number-to-a-caller","question":"Is it safe to give my utility account number to someone who calls claiming to be from my energy supplier?","shortAnswer":"Your utility account number alone poses limited risk, but callers claiming to be from your energy supplier may be attempting to switch your service, harvest personal data, or conduct social engineering. Always verify calls independently.","explanation":"Energy and utility impersonation fraud takes several forms. The most financially damaging involves unauthorised switching: a caller obtains enough information from you — account number, address, full name — to switch your energy contract to a new supplier (often a shell company they control) without your genuine consent, triggering exit fees, changing your tariff, or enabling further fraud.\n\nAnother pattern uses the utility company as a trust-building cover: the caller confirms some details they already have about you (from a data breach or directory listing), gains your confidence, and then pivots to collecting more sensitive information or requesting payment for a non-existent problem.\n\nEnergy suppliers do make outbound calls, but they will not be offended if you verify their identity. Hang up and call the number printed on your most recent bill or on the supplier's official website. A genuine representative from your supplier will completely understand this verification request.\n\nDo not provide payment details, bank account numbers, or full personal details to an inbound caller regardless of how convincingly they present. Utility companies can access your account from their side without you providing credentials over the phone.","redFlags":["Caller asks for your bank details to process a rebate or update a direct debit","Caller claims there is an urgent problem with your meter or supply that requires immediate action","You are told your current tariff is expiring and you must switch today","Caller cannot confirm your service address or contract details independently — they are asking you to confirm everything","Call is from an unfamiliar number not shown in previous correspondence from your supplier"],"whatToDoNow":["Tell the caller you will call back on the official number and hang up","Call your utility company using the number from your bill or official website","Never provide bank details or full personal information to an inbound caller","If you believe you were switched without consent, report to your utility regulator","Report suspicious calls to your national fraud reporting service"],"faq":[{"question":"Can my energy supplier be switched without my knowledge?","answer":"Erroneous switching does occur, sometimes fraudulently and sometimes due to administrative errors. Check your current supplier details regularly, especially if you receive unexpected correspondence from an unfamiliar supplier."},{"question":"Is it safe to discuss a cheaper tariff offer from a caller?","answer":"You can listen to a tariff offer without providing any sensitive information. Any offer should be followed up by navigating independently to the official supplier's website or calling them directly to verify the deal is real before agreeing."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-share-my-card-number-over-the-phone","url":"https://scamencyclopedia.org/questions/is-it-safe-to-share-my-card-number-over-the-phone","question":"Is it safe to share my card number over the phone?","shortAnswer":"Sharing card details over the phone is appropriate only when you initiated the call to a verified, trusted business. Giving card details to someone who called you carries significant risk.","explanation":"Phone-based card fraud typically occurs in one of two ways: outbound from you (you call a legitimate number and provide details as part of a genuine transaction) or inbound from a caller (someone calls you and requests card details, posing as a business or authority).\n\nInbound requests for card details are almost universally fraudulent when they arrive unexpectedly. Legitimate businesses that you did not call do not need your card details over the phone. Your bank already has your card number. HMRC does not take card payments over the phone via cold calls. Police forces do not require card payments. Utility companies process payments through accounts, not cold calls requesting card details.\n\nEven when you initiate a call, verify the number before dialling — fraudulent business websites and internet search results have both been known to list scam numbers that impersonate legitimate businesses. Use numbers from official correspondence you have previously received, not from a quick internet search.\n\nIf you must give card details over the phone, be in a private location, never read all the details aloud if others can hear you, and confirm the call is to the exact number you intended. Request a written confirmation of the transaction to any address you designate.","redFlags":["You did not initiate the call and the caller is requesting card details","The caller claims to be from your bank, HMRC, a court, or the police","You are on hold for an unusually long time before giving details — this can be to set up a parallel fraud transaction","The caller asks for the full 16-digit number, expiry, and CVV all at once","Payment is for something you do not recognise or did not initiate"],"whatToDoNow":["Hang up if the call is inbound and requests card details","Verify any company's phone number from official documentation before calling back","If you have already provided card details, call your bank immediately to block and replace the card","Review recent transactions for any charges you do not recognise","Report to your national fraud authority"],"faq":[{"question":"My bank called me — is it safe to give my card number if they asked?","answer":"Banks do not need your full card number — they already have it. A caller claiming to be your bank who asks for your card number is attempting fraud. Hang up and call your bank on the official number from your card or statement."},{"question":"Is it safer to pay over the phone than online?","answer":"Neither is inherently safer — both have risks and protections. The key factor is whether the transaction is with a verified, legitimate organisation. The payment method protection (credit vs debit, for example) applies in both contexts."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-invest-in-something-a-friend-recommends-on-social-media","url":"https://scamencyclopedia.org/questions/is-it-safe-to-invest-in-something-a-friend-recommends-on-social-media","question":"Is it safe to invest in something a friend is promoting on social media?","shortAnswer":"Social media investment promotions from friends often involve hijacked accounts, affiliate incentives, or genuine victims promoting what they do not know is a scam. Verify any investment independently before acting.","explanation":"Peer trust is one of the strongest influences on financial decisions, which is why criminals exploit it specifically. Social media investment fraud typically spreads in one of three ways: through accounts that have been taken over and are messaging the contact list; through real users who have invested in a fraudulent scheme and genuinely believe in it, acting as unwitting promoters; or through paid affiliate structures where the friend receives a small commission for every person they recruit.\n\nThe investment opportunity itself may be in crypto, high-yield savings accounts, binary options, forex trading, or another asset class. What makes it identifiable as fraud is not the asset class but the promises: guaranteed returns, income with minimal effort, time-limited exclusive access, or early-stage entry into something that will multiply quickly.\n\nEven if your friend genuinely believes in the investment and has 'seen profits', this does not make the opportunity legitimate. Ponzi-style schemes and exit scams often show positive returns to early participants to fuel word-of-mouth promotion before collapsing.\n\nBefore acting on any investment opportunity — regardless of who recommended it — check the relevant financial regulator's register, seek independent advice from a registered financial adviser, and apply the same due diligence you would if no friend were involved.","redFlags":["Promise of guaranteed or unusually high returns with low or no risk","The investment is described as exclusive or available only for a limited time","Your friend seems unusually enthusiastic and emphasises how much money they are making","The promoting account has few followers, is newly created, or communicates differently from the friend you know","The investment platform is not registered with any financial regulator","You are invited to recruit others in exchange for additional returns"],"whatToDoNow":["Do not invest based solely on a social media recommendation","Verify the investment and the platform with your national financial regulator","Speak to the friend in person or by phone to confirm it is genuinely them recommending it","Consult a registered independent financial adviser before committing funds","If you have already invested and have concerns, report to your financial regulator"],"faq":[{"question":"My friend says they have been making real profits — could this be legitimate?","answer":"Early participants in Ponzi schemes and fake investment platforms often see positive returns as designed — this is what motivates them to recruit others. The returns stop when the scheme collapses. Observed friend profits are not evidence of legitimacy."},{"question":"What if my friend's account was hacked and they are not really promoting it?","answer":"This is common — hijacked accounts message contact lists promoting scam investments. Contact your friend through a separate channel to alert them and ask them to secure their account."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-give-my-mother-maiden-name-as-a-security-answer","url":"https://scamencyclopedia.org/questions/is-it-safe-to-give-my-mother-maiden-name-as-a-security-answer","question":"Is it safe to use my mother's maiden name or birthplace as security question answers?","shortAnswer":"Traditional security questions use information that is often publicly available, guessable from your social media, or shared with other family members. Where possible, use random answers stored in a password manager instead.","explanation":"Security questions were designed to provide a fallback identity verification method, but most of the commonly used question types — mother's maiden name, childhood street, first car, first school — have a fundamental weakness: the answers may be discoverable.\n\nPublic records, genealogy websites, social media posts, and even obituaries often contain exactly this information. A determined fraudster can research your mother's maiden name, where you grew up, and your first car model relatively easily. Combined with other personal data from a breach, this can be sufficient to pass security challenges on bank accounts, utility accounts, and other sensitive services.\n\nThe practical solution used by security professionals is to treat security questions as additional passwords: use random, meaningless answers that have no relationship to the actual question, store them in a password manager, and use a different random answer for each service. If asked 'what was your first pet?' you might answer 'purple-table-seven' — completely unguessable and irrelevant to anything in your life.\n\nThis approach eliminates the vulnerability while maintaining the recovery function of security questions. It does require the password manager habit, but this is already recommended for password management.","redFlags":["A service asks security questions whose answers could be found on your social media profiles","A caller attempts to 'verify your identity' by asking these questions rather than authenticated through the app","A data breach notification includes that security question answers were exposed","Someone contacts you referencing personal details that match your security answers"],"whatToDoNow":["Change security question answers on sensitive accounts to random strings stored in your password manager","Review what personal information is publicly visible on your social media profiles","Enable two-factor authentication to reduce reliance on security questions entirely","Never answer security questions to an inbound caller regardless of who they claim to be"],"faq":[{"question":"Is two-factor authentication a better alternative to security questions?","answer":"Yes. Two-factor authentication using an authenticator app is significantly more secure than security questions for account recovery. Where possible, set up 2FA and use it as the primary second factor rather than security questions."},{"question":"What if a service requires me to use real answers to security questions?","answer":"Many services do require these questions. Use answers that are real but not publicly discoverable — a nickname known only to close family, for example — rather than information easily found online."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-use-my-debit-card-for-online-purchases","url":"https://scamencyclopedia.org/questions/is-it-safe-to-use-my-debit-card-for-online-purchases","question":"Is it safe to use my debit card for online purchases instead of a credit card?","shortAnswer":"Debit cards are generally less protected than credit cards for online purchases. Credit cards offer stronger chargeback rights in most jurisdictions, and crucially, fraud comes out of a credit limit rather than your actual bank balance.","explanation":"The practical difference between debit and credit card fraud is immediate impact. If a fraudster uses your debit card details, they draw directly from your bank account — money that is yours and available for bills, rent, and daily expenses — before you can dispute the charge. Credit card fraud involves the card provider's money first; you pay the credit card bill later and can dispute before payment if you act promptly.\n\nChargeback rights also differ. In the UK, credit card purchases over a certain value enjoy Section 75 protection under the Consumer Credit Act — the card issuer is jointly liable with the retailer for the transaction. Debit card chargebacks are available but operate on a different, generally narrower basis.\n\nFor online purchases from unknown retailers, virtual card numbers offer additional protection: many banks and credit card providers allow you to generate a temporary card number for online use that limits exposure if the merchant's systems are later breached.\n\nThis does not mean debit cards are unsafe for all online use — established retailers with secure payment processing present minimal risk regardless of card type. The concern is most relevant when shopping at less familiar stores or platforms.","redFlags":["You are shopping on an unfamiliar website and considering using your main debit card","The checkout does not appear to use a recognised payment processor","You are making a large purchase where the buyer protection difference is significant","The retailer appears new or has limited reviews"],"whatToDoNow":["Use a credit card or a virtual card number for online purchases from unfamiliar retailers","Check whether your bank offers virtual card numbers for online transactions","Enable transaction alerts on both your debit and credit cards","If your debit card details are compromised, call your bank immediately — recovering funds from a debit account is time-sensitive"],"faq":[{"question":"What is a virtual card number and how does it help?","answer":"A virtual card number is a temporary card number generated by your bank or card provider for a specific transaction or merchant. Even if the merchant is breached, the virtual number is useless to the fraudster once the transaction is complete."},{"question":"Is my debit card ever safer than a credit card?","answer":"Debit cards avoid the risk of credit card debt accumulation, which is a financial management concern rather than a fraud concern. For fraud protection specifically, credit cards have structural advantages in most jurisdictions."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-work-as-a-mystery-shopper-for-a-company-i-found-online","url":"https://scamencyclopedia.org/questions/is-it-safe-to-work-as-a-mystery-shopper-for-a-company-i-found-online","question":"Is it safe to work as a mystery shopper for a company I found online?","shortAnswer":"Most online mystery shopper job offers are either money mule recruitment or cheque fraud schemes. Legitimate mystery shopping companies are few and typically recruited through established industry bodies.","explanation":"Fake mystery shopping jobs have followed a consistent script for decades. You are recruited — often with no application process or interview — and sent a cheque or bank transfer to 'fund' your shopping assignments. The instructions involve purchasing gift cards, money orders, or wiring part of the funds elsewhere and keeping the remainder as your fee.\n\nThe core fraud is the cheque or transfer: the funds deposited are fraudulent and will be reversed by your bank after a few days. But you will already have sent money to the scammer — gift card codes, a wire transfer, or a money order — from your own funds. The deposit reversal leaves you in deficit.\n\nLegitimate mystery shopping is a real industry. Genuine companies are typically members of trade bodies such as the Mystery Shopping Professionals Association (MSPA). They recruit through application processes, do not send funds in advance for you to forward, and assignments involve evaluating customer service — not moving money.\n\nIf a mystery shopping job offer arrived unsolicited, requires no prior experience or screening, and involves receiving and forwarding money, it is fraud without exception.","redFlags":["You were recruited with no application process or screening","The 'assignment' involves depositing a cheque and forwarding funds via Western Union, wire, or gift card","You are instructed to keep the assignment confidential","The company cannot be verified as a member of any recognised mystery shopping trade body","The job offer arrived unsolicited via email, social media, or text"],"whatToDoNow":["Do not deposit any cheque or accept any transfer related to the job","Do not forward any funds for any reason","Report the recruitment attempt to your national fraud authority","If you have already deposited a cheque, contact your bank to warn them before it reverses","Discard any materials received and cease all contact with the recruiter"],"faq":[{"question":"How do I find legitimate mystery shopping work?","answer":"Look for companies listed with the Mystery Shopping Professionals Association (MSPA) or equivalent national body. Legitimate companies pay from their own accounts after assignments are completed — they never send advance funds."},{"question":"If I cash the cheque and keep it in my account for a week, will I know if it is fake?","answer":"Unfortunately, no. Banks show provisional credit quickly but the fraud investigation that reveals a cheque is fraudulent can take 10 days or more. The money looks real before the reversal. Never treat deposited funds as yours until your bank confirms the cheque has fully cleared."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-give-my-date-of-birth-to-verify-my-age-online","url":"https://scamencyclopedia.org/questions/is-it-safe-to-give-my-date-of-birth-to-verify-my-age-online","question":"Is it safe to give my date of birth for age verification on websites?","shortAnswer":"Date of birth combined with name is a useful identity data point. Where age verification is genuinely required, the purpose and the site's data handling should be clear. Never provide it to sites you cannot verify or trust.","explanation":"Date of birth is one component in most identity profiles — combining name, address, date of birth, and phone number is often sufficient for criminals to attempt account takeovers, credit applications, or targeted social engineering. Providing date of birth to unknown websites increases your exposure to identity fraud.\n\nLegitimate age verification is required by law for certain services — age-gated content, gambling platforms, alcohol delivery, and others. Regulated providers use either self-declaration (low risk, not useful for serious age checks) or regulated identity verification services that process your data under applicable data protection law with clear retention policies.\n\nThe concern is with less-regulated sites that request date of birth unnecessarily or collect it as part of a broader data-harvesting exercise. Before providing date of birth to any site, consider whether the site's legitimate purpose requires it, whether the privacy policy is clear about retention and sharing, and whether the site itself is verified and trustworthy.\n\nFor simple self-declaration (you click a button confirming you are over 18), the data shared is minimal. For full date of birth entry into a form on an unverified site, the risk is higher.","redFlags":["Site requests full date of birth alongside other personal details without clear purpose","The privacy policy is absent, vague, or describes sharing data with 'partners' broadly","Date of birth is requested before any transaction or significant interaction with the service","The site was reached via an ad and cannot be independently verified","The request for date of birth is bundled with other personal data — address, phone, ID"],"whatToDoNow":["Verify the site is genuine and its age verification process is regulatory-compliant before providing exact date of birth","Read the privacy policy to understand how your data is retained and shared","If you believe your date of birth has been misused, monitor your credit report for new applications","Report data protection concerns to your national data protection authority"],"faq":[{"question":"Is giving my date of birth to a gambling site safe?","answer":"Licensed gambling operators are required to conduct age and identity verification. In regulated jurisdictions, they use accredited verification services and are subject to data protection law. Verify the operator's licence before providing any information."},{"question":"Can someone commit fraud with just my name and date of birth?","answer":"Name and date of birth alone are usually insufficient for major fraud, but they are valuable components in an identity profile. Combined with other data, they can facilitate account takeovers and credit applications."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-buy-a-pet-from-an-online-listing","url":"https://scamencyclopedia.org/questions/is-it-safe-to-buy-a-pet-from-an-online-listing","question":"Is it safe to buy a pet from an online listing?","shortAnswer":"Pet scams are widespread and involve fake listings, deposits paid for animals that do not exist, and additional fees invented after payment. Always see the animal in person before paying.","explanation":"Online pet fraud is one of the most emotionally manipulative scam types because it targets people who want to welcome an animal into their family. The pattern is consistent: a listing presents an attractive animal at a competitive price, the seller claims to be located at a distance or overseas, a deposit is requested, and then additional fees appear — shipping costs, veterinary clearances, vaccination certificates, insurance for transit — each of which must be paid before the animal arrives. The animal never arrives because it does not exist.\n\nThe photographs are typically stolen from legitimate breeders, rescue organisations, or pet-sharing social media accounts. Reverse image searching the photos frequently reveals their origin.\n\nPuppy scams and kitten scams are particularly common, but the same fraud is applied to more exotic animals — parrots, reptiles, rare dog breeds — where physical inspection is more challenging for buyers.\n\nThe simple protection is to see the animal in person before any money changes hands. Meeting the animal, the seller, and ideally seeing its environment is both the best fraud protection and the best animal welfare practice. If geography makes this impossible, at minimum conduct a live, unscripted video call where the seller interacts naturally with the specific animal.","redFlags":["Seller is located remotely and cannot facilitate an in-person viewing","Deposit is requested before any meeting or video verification","Additional fees appear after initial payment — transport, insurance, vaccination","Photos appear on other sites or under different sellers when reverse-image-searched","Price is unusually low for the breed or species","Seller uses emotional pressure — other buyers are waiting, the animal needs a home urgently"],"whatToDoNow":["See the animal in person before paying anything","Reverse-image-search all provided photos","Video call with the seller and the specific animal if in-person meeting is impossible","Never pay additional fees after an initial deposit without verifying the service independently","If you have been defrauded, report to your national fraud authority and the platform where the listing appeared","Report stolen photos to the original breeder or rescue if you can identify them"],"faq":[{"question":"Is it safe to buy from a registered breeder online?","answer":"Registered breeders should be verifiable with the relevant kennel club or breed association. Even with a verified breeder, seeing the animal in person or via live video and confirming the litter exists before paying is best practice."},{"question":"The seller showed me photos with a timestamp — is that proof the animal is real?","answer":"Photos can be staged or borrowed. A live, unscripted video call where the seller interacts with the specific animal and responds to requests (hold the animal closer, show its markings) is much harder to fake than photographs."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-invest-pension-savings-based-on-an-unsolicited-approach","url":"https://scamencyclopedia.org/questions/is-it-safe-to-invest-pension-savings-based-on-an-unsolicited-approach","question":"Is it safe to move my pension savings based on an unsolicited approach?","shortAnswer":"Pension scams cause catastrophic, often irreversible financial harm. An unsolicited approach about your pension — by any channel — should be treated as a major warning sign. Legitimate pension services do not cold-contact.","explanation":"Pension fraud is among the most financially devastating consumer crimes because pension savings represent decades of work and are often the victim's primary retirement resource. The losses are frequently total and largely unrecoverable.\n\nScammers approach via cold call, email, social media, or through an introducer — sometimes a friend or family member who has already been recruited. They offer investment opportunities promising returns substantially above market rates, or they offer 'pension liberation' schemes promising access to pension funds before the legal retirement age in exchange for fees.\n\nPension liberation schemes often leave victims with tax bills as well as lost savings: withdrawing pension funds early triggers significant tax penalties in most jurisdictions, and many liberation scheme operators are not regulated to provide the advice they give.\n\nIn the UK, cold calling about pensions has been illegal since 2019. A cold call about your pension is therefore automatically a sign of an illegal, likely fraudulent operation. Any unsolicited contact about your pension in any jurisdiction should be refused and reported.\n\nIf you want to review your pension arrangements, approach independently: contact the Pension Tracing Service (UK) to locate any lost pensions, visit your pension provider directly, or consult a regulated independent financial adviser you have independently identified.","redFlags":["Contact was entirely unsolicited — by phone, email, text, or social media","Unusually high guaranteed returns are promised","You are offered access to pension funds before you reach retirement age","The adviser cannot be found on the FCA register or equivalent","You are told to keep the arrangement confidential","Urgency is created — limited time, tax deadline, before regulations change"],"whatToDoNow":["Decline any unsolicited approach about your pension and report it to your financial regulator","Never transfer pension funds based on an unsolicited recommendation","Check any adviser on the relevant regulator's register before engaging","If you have already transferred funds, report to your financial regulator immediately — there may be a possibility of stopping the transfer","Seek independent regulated advice for any pension review"],"faq":[{"question":"Can I access my pension before retirement age through a pension liberation scheme?","answer":"In most jurisdictions, accessing pension funds before the legal minimum age triggers significant tax penalties. Schemes promising to liberate funds early are either unlawful or will expose you to these penalties while taking fees. Avoid them entirely."},{"question":"A friend recommended a pension transfer adviser — is that safe?","answer":"If your friend was introduced to the adviser through an unsolicited approach, they may themselves be a victim or an unwitting introducer in a fraud operation. Verify the adviser independently on the regulator's register before any engagement, regardless of the recommendation source."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-provide-my-login-details-to-a-price-comparison-site","url":"https://scamencyclopedia.org/questions/is-it-safe-to-provide-my-login-details-to-a-price-comparison-site","question":"Is it safe to provide my account login details to a price comparison or financial aggregator site?","shortAnswer":"Screen-scraping financial aggregators require your login credentials, which carries real security risk. Regulated 'open banking' services use a safer, token-based approach instead. Understand the difference before sharing login details.","explanation":"Financial aggregation services — tools that pull together your accounts, utilities, and subscriptions in one place — have historically used 'screen scraping': you provide your actual username and password, and the aggregator logs in to your accounts on your behalf to collect data.\n\nScreen scraping is risky for several reasons: the third party now holds your credentials, if they are breached, your accounts are exposed; your bank's terms and conditions may consider sharing credentials a breach that affects your fraud protections; and you cannot see or control what else the third party does with that access.\n\nOpen banking, available in the UK, EU, and increasingly other markets, provides a regulated alternative: you authorise specific data access via your bank's official interface without sharing your password. The bank grants a time-limited, revocable token for specific purposes. This is demonstrably safer than credential sharing.\n\nBefore using any aggregation service, check whether it is regulated under open banking rules, what data it accesses and retains, how it is secured, and whether sharing your credentials affects your bank's fraud liability terms. Reputable, regulated services will be transparent about all of these.","redFlags":["The service asks for your full bank login username and password rather than directing you to your bank's own authorisation page","The service is not listed as regulated by the relevant financial authority","Terms and conditions are unclear about data retention and sharing","The service offers unusually broad functionality that requires access across many services simultaneously"],"whatToDoNow":["Prefer open banking-authorised services over those requiring direct credential entry","Check the service's regulatory status before providing any account access","If you have already shared credentials with a service you now distrust, change your banking passwords immediately","Review your bank's terms regarding third-party credential sharing and its effect on fraud protections"],"faq":[{"question":"What is open banking and is it safe?","answer":"Open banking is a regulated framework allowing you to share specific financial data with authorised third parties through a secure API. You authorise access through your bank's own interface without giving your password to the third party. It is generally much safer than credential sharing."},{"question":"If I provide credentials and the aggregator is hacked, who is responsible?","answer":"Your bank's fraud liability terms may exclude claims arising from sharing your credentials with third parties. This means the financial and legal exposure from a breach of an aggregator's credential store could fall on you rather than the bank."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-click-a-link-in-a-text-from-my-bank","url":"https://scamencyclopedia.org/questions/is-it-safe-to-click-a-link-in-a-text-from-my-bank","question":"Is it safe to click a link in a text message that appears to be from my bank?","shortAnswer":"Bank impersonation SMS messages are extremely common. Even if the message appears in the same thread as previous genuine bank texts, you should not click the link — navigate to your banking app or official website directly instead.","explanation":"SMS sender names can be spoofed. This means a fraudulent text message can display 'HSBC', 'Barclays', 'Chase', or any other bank name in the sender field, and on some devices will even appear in the same conversation thread as previous genuine messages from that bank. The technology to do this is widely available.\n\nThe messages typically claim that unusual activity has been detected on your account, that a payment has been blocked, or that you need to verify your details to restore access. The link leads to a convincing fake online banking login page. When you enter your credentials, they go directly to the fraudster who may use them immediately to access your real account.\n\nYour bank's app provides the safest access channel: it authenticates against the bank's genuine servers and is not susceptible to the domain impersonation that makes fake websites convincing. If you do not have the app, navigate to the official website by typing it directly into your browser, not by clicking any link.\n\nIf you receive an alarming banking text and want to verify whether there is a real issue, call the number on the back of your card — not any number provided in the text.","redFlags":["The text creates alarm about a payment, suspicious activity, or account block","You are directed to click a link to verify, confirm, or restore access","The link goes to a domain that is not your bank's exact official domain","The text asks for your full card number, PIN, or password","You were not expecting any issue with your account"],"whatToDoNow":["Do not click the link","Open your banking app directly or type your bank's address into the browser","If you see no genuine issue in your account, the text was fraudulent — report it to your bank","If you already entered credentials via a link, call your bank immediately on the official number","Forward the fraudulent text to 7726 (SPAM) in the US and UK"],"faq":[{"question":"If the text is in the same thread as real bank messages, does that mean it is genuine?","answer":"No. SMS sender ID spoofing can insert fraudulent messages into existing conversation threads. The position in the thread is not evidence of authenticity. Always verify through your app or official website."},{"question":"My bank says it will never send links — but I have received links from them before. Which is right?","answer":"Banks have varying policies on this. Some do send links in legitimate messages. The safest habit regardless of your bank's policy is to navigate directly to the app or website rather than following any link — this eliminates the risk entirely."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-give-a-stranger-access-to-your-email-account","url":"https://scamencyclopedia.org/questions/is-it-safe-to-give-a-stranger-access-to-your-email-account","question":"Is it safe to give a stranger access to your email account to help resolve a problem?","shortAnswer":"Your email account is the master key to your online life. Giving any access to a stranger — including a 'support agent' — is extremely dangerous and is almost certainly a pretext for account takeover or wider fraud.","explanation":"Email account access is more valuable to a fraudster than almost any other credential. From your email, a criminal can reset passwords on every other account — banking, shopping, social media, pension, government services — that uses the same email address for recovery. This makes email the gateway to a complete identity takeover.\n\nThe most common context in which strangers request email access is impersonating a support agent: a fake Microsoft, Google, or ISP representative claims to need access to diagnose a problem. Once inside your email, they can change the recovery address, extract sensitive documents, initiate password resets on financial accounts, and set up forwarding rules to continue monitoring your email silently after you have closed the session.\n\nNo legitimate technology support company requires access to the content of your email account to resolve technical issues. Email delivery problems can be diagnosed from the sending or receiving side without the support agent reading your emails or logging in to your account.\n\nIf a caller ever requests your email password or login code, treat this as a definitive sign of fraud. Disconnect the call and change your email password immediately from a secure device.","redFlags":["A support agent requests your email login credentials or a recovery code","They ask you to create a temporary password for them to use","They want to access your email to 'diagnose' a delivery or technical problem","The support contact was initiated by an inbound call rather than your own request"],"whatToDoNow":["Refuse and hang up or disconnect","Change your email password immediately if you suspect your credentials were seen","Enable two-factor authentication on your email account if not already active","Check for any new forwarding rules, recovery address changes, or new authorised apps in your email security settings","Report the incident to your email provider and national fraud authority"],"faq":[{"question":"What should I check in my email settings if I suspect unauthorized access?","answer":"Check: recent login activity (look for unfamiliar IP addresses or locations), email forwarding rules (delete any you did not create), recovery email and phone number (verify they are yours), connected apps and permissions (revoke any you do not recognise), and sent mail folder for emails you did not send."},{"question":"I gave them a one-time login code that expired — are they still in my account?","answer":"If they logged in using the code before it expired, they may have changed recovery settings or established persistent access. Check all the settings listed above and change your password immediately regardless."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-use-public-charging-stations-for-your-phone","url":"https://scamencyclopedia.org/questions/is-it-safe-to-use-public-charging-stations-for-your-phone","question":"Is it safe to use public USB charging stations for your phone?","shortAnswer":"Public USB charging ports carry a small but real risk of 'juice jacking' — malware installation or data theft via the USB connection. Using your own charger with an AC outlet or a USB data blocker is safer.","explanation":"USB cables carry both power and data simultaneously. When you plug your phone into a standard USB port — whether a cable or a charging station — you create a potential data connection in addition to the power connection. This is by design for normal charging, but it means that a malicious actor who controls the charging hardware could attempt to interact with your device.\n\nJuice jacking is the name for attacks that exploit public charging infrastructure. It requires that the charging port or cable is compromised by a malicious party, that your device does not have appropriate protections, and that your device accepts the connection. Modern devices have protections — iOS and Android both prompt you to trust a connected device before allowing data exchange — but older devices or user habits (tapping 'trust' without reading) reduce this protection.\n\nThe practical risk is low in most countries with regulated public infrastructure. However, charging stations in less-regulated environments, hotel rooms with unusual USB ports, or informal street-level charging points present higher risk.\n\nThe simplest mitigation: carry your own charger and use standard AC wall outlets. If you must use a USB port, carry a USB data blocker (a small pass-through device that allows power but blocks data lines) — these cost a few pounds or dollars and eliminate the juice jacking risk entirely.","redFlags":["Charging station is in an unusual location or appears to have been modified","Your phone prompts you to 'Trust This Computer' when connecting to a charging cable","The charging port is a loose cable rather than a fixed connector","You notice unexpected battery drain, data usage, or new apps after using a public charger"],"whatToDoNow":["Use your own charger plugged into an AC outlet where available","Purchase a USB data blocker for situations where USB ports are the only option","Never tap 'Trust' when your device prompts this question from a public charging connection","If you used a suspicious charger, run a malware scan on your device and check for unexpected apps or data usage"],"faq":[{"question":"What is a USB data blocker and where do I get one?","answer":"A USB data blocker is a small adapter that passes power through while physically cutting the data lines in the USB connection. They are widely available from electronics retailers and online marketplaces for a small cost."},{"question":"Is wireless charging at a public station safer than USB?","answer":"Wireless (Qi) charging does not create a data connection, making juice jacking impossible via this route. If a public station offers wireless charging, it is safer than a USB connection from a data security perspective."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-safe-to-share-screenshots-of-your-bank-statement-online","url":"https://scamencyclopedia.org/questions/is-it-safe-to-share-screenshots-of-your-bank-statement-online","question":"Is it safe to share screenshots of your bank statement online?","shortAnswer":"Bank statement screenshots contain sensitive financial data. Even a partially redacted statement can reveal account numbers, sort codes, transaction patterns, and merchant names that assist identity fraud or social engineering.","explanation":"Sharing bank statement screenshots is sometimes requested by landlords, employers, loan companies, or online contacts wanting to verify income. In some contexts this is legitimate, but the document carries significant information risk and should be handled with care.\n\nA bank statement typically contains your full name, address, account number, sort code, bank name, transaction history, and merchant names. This information individually is relatively low risk, but combined it forms a valuable package for social engineering — a fraudster who knows your bank, approximate balance, recent transactions, and address can construct highly convincing impersonation scenarios.\n\nFor identity verification purposes, official alternatives exist that do not require sharing the full document: open banking income verification, payslip-based verification, or certified copies through official channels. Where a landlord or employer genuinely needs to verify financial standing, regulated reference agencies provide this service.\n\nIf you must share a statement, redact the account number, sort code, and any transaction details not directly relevant to the verification purpose. Share only through secure channels — never in an image message on a social platform or in the body of a general email.","redFlags":["An online contact requests a bank statement before any formal transaction or tenancy agreement","The request is via an informal channel — social media message, WhatsApp","More information is requested than the stated verification purpose requires","The requesting party cannot be independently verified as a legitimate business"],"whatToDoNow":["Redact account numbers and sort codes before sharing any statement copy","Share only through secure, traceable channels — not via social media or chat apps","Verify the legitimacy of any party requesting your statement before sharing","Ask whether an open banking verification alternative is acceptable","If you have already shared an unredacted statement and are concerned, monitor your accounts closely for unusual contact or activity"],"faq":[{"question":"Can someone commit fraud with my account number and sort code?","answer":"Your account number and sort code are needed to set up a direct debit against your account. While banks have verification processes, fraudulent direct debits have occurred. The Bacs Direct Debit guarantee provides a recovery mechanism if a direct debit is taken without your authority."},{"question":"Is it safe to share a bank statement with a letting agent?","answer":"Regulated letting agents are subject to data protection law and professional conduct requirements. Request their data processing documentation and confirm they handle documents securely. Redact non-relevant transaction details even with legitimate agents."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-pig-butchering-scam-work","url":"https://scamencyclopedia.org/questions/how-does-pig-butchering-scam-work","question":"How does a pig-butchering scam actually work?","shortAnswer":"Pig butchering is a long-con fraud where criminals build a trusting relationship over weeks before steering victims into a fake cryptocurrency investment platform, eventually draining everything they deposit.","explanation":"The scam begins with a seemingly accidental contact — a wrong-number text, a LinkedIn connection request, or a match on a dating app. The fraudster adopts a convincing persona, often a wealthy professional, and invests real time in daily conversations about life, family, and interests. This \"fattening\" phase can last weeks or months, building emotional trust before money is ever mentioned.\n\nOnce a bond exists, the fraudster casually mentions making impressive returns on crypto. When curiosity is piqued, they offer to teach the victim, sharing a referral link to what looks like a polished trading platform. Small investments appear to grow quickly, and the victim is encouraged to reinvest. The platform is entirely fake — balances shown on screen are fabricated numbers controlled by the scammers.\n\nThe \"slaughter\" happens when the victim tries to withdraw. A surprise tax, fee, or compliance hold appears. Victims who pay the fee find another appears. Some are pressured by fake customer support agents to recruit friends. By the time the victim realises there is no real platform, their savings, retirement funds, and sometimes borrowed money are gone.\n\nRecovery is extremely difficult because funds are moved quickly through crypto wallets into overseas accounts. Scam compounds running these operations often employ trafficked workers who are forced to operate the schemes under threat of violence.","redFlags":["Contact begins with a wrong number, random text, or out-of-the-blue social message","New online friend quickly becomes very close and mentions crypto profits","You are directed to a trading platform you cannot find through independent searches","Small withdrawals succeed early on, then large ones trigger unexpected fees","The platform has no verifiable regulatory licence or physical address","You are asked to recruit friends or family to the same platform"],"whatToDoNow":["Stop all deposits immediately and do not pay any withdrawal 'fee' or 'tax'","Screenshot every conversation, transaction, and page on the fake platform","Report to your national cybercrime agency and financial regulator","Contact your bank or card provider about any fiat transfers made","File a report with the FBI IC3 (US) or Report Fraud (UK, formerly Action Fraud) including wallet addresses","Seek emotional support — the relationship itself was engineered and the grief is real"],"faq":[{"question":"Why is it called pig butchering?","answer":"The term translates a Chinese phrase used inside scam compounds: victims are 'fattened' with trust and apparent profits before being 'slaughtered' when all funds are taken."},{"question":"Can I get my money back from a pig-butchering scam?","answer":"Crypto transactions are irreversible, but law enforcement increasingly freezes exchange accounts. Report immediately; some victims have recovered partial funds through coordinated action."},{"question":"Are the scammers always overseas?","answer":"Most operations are run from scam compounds in Southeast Asia, but the people contacting you may themselves be victims of human trafficking forced to work as operators."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-romance-scam-work","url":"https://scamencyclopedia.org/questions/how-does-romance-scam-work","question":"How does a romance scam actually work?","shortAnswer":"Romance scammers create fake profiles on dating sites or social media, spend weeks or months building emotional intimacy, then manufacture a crisis that requires money — and keep fabricating new ones.","explanation":"The scammer crafts a profile using stolen photos of an attractive, successful-looking person — often a soldier, doctor, engineer, or oil-rig worker whose job explains why they can never meet. They invest heavily in the early stages, sending long messages, remembering details, and creating the feeling of a genuine relationship. This phase is designed to make the victim feel uniquely understood and cherished.\n\nOnce emotional dependence is established, a crisis appears. A medical emergency, a customs problem with a valuable package, a business deal that just needs a small advance, or a plane ticket to finally visit. The amounts start small to confirm the victim will transfer money. Each payment is followed by a new obstacle, escalating the sums requested. Victims who hesitate may be subjected to guilt or even mild threats about the relationship ending.\n\nSome variants include a third party — a fake 'bank', 'lawyer', or 'shipping company' — that adds apparent legitimacy. Money is typically sent via wire transfer, gift cards, or cryptocurrency because these are difficult or impossible to reverse. Once the scammer judges the victim is tapped out, they vanish or manufacture a final dramatic disappearance.\n\nThe psychological damage extends beyond financial loss. Victims describe grief equivalent to losing a real partner, compounded by shame. Recovery programmes that treat romance-scam survivors as victims of psychological manipulation — not naivety — have better outcomes.","redFlags":["The person is immediately very attentive and declares strong feelings unusually fast","Profile photos look like stock images or reverse-search to a different name","Job or location makes meeting in person perpetually impossible","Any request for money, regardless of the reason or urgency","Requests that you communicate on a different platform to avoid oversight","Discourages you from telling friends or family about the relationship"],"whatToDoNow":["Reverse image search their profile photos using Google Images or TinEye","Stop sending money and do not pay any more 'fees' even if threatened","Save all messages and profile information before blocking","Report the profile to the platform where you met","Report to your national fraud reporting service with all evidence","Talk to a trusted person — isolation is part of the scam and breaks its power"],"faq":[{"question":"How long do romance scammers invest before asking for money?","answer":"Timelines vary from days to many months. More sophisticated operators may spend three to six months building trust specifically to request larger sums."},{"question":"Do romance scammers ever video call?","answer":"Yes — they may use deepfake technology, pre-recorded footage, or hire a third party to appear on camera briefly. A real-time video call with unexpected responses does not guarantee authenticity."},{"question":"Can romance scammers be prosecuted?","answer":"Yes, and convictions do occur, but many operate from jurisdictions with limited extradition treaties. Reporting still matters because it builds international cases and helps freeze assets."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-sim-swap-scam-work","url":"https://scamencyclopedia.org/questions/how-does-sim-swap-scam-work","question":"How does a SIM-swap scam actually work?","shortAnswer":"In a SIM swap, a fraudster convinces your mobile carrier to transfer your phone number to a SIM they control, which lets them intercept SMS one-time codes and take over your accounts.","explanation":"The attack starts with reconnaissance. The scammer gathers personal details about you from data breaches, social media, or phishing emails — enough to answer the security questions your carrier uses to verify identity. They then contact your mobile provider, either by phone, online, or through a corrupt insider, and claim to be you reporting a lost or stolen phone.\n\nOnce the number is ported, every SMS message intended for you — including bank verification codes, two-factor authentication texts, and password-reset links — goes to the attacker's device. Within minutes they use these codes to reset passwords on email, banking, and cryptocurrency accounts. Your phone simultaneously loses signal, which is often the first sign something is wrong.\n\nThe window of damage is short but catastrophic. Attackers prioritise high-value targets: crypto wallets (which have no bank dispute process), investment accounts, and email (because email access enables resetting everything else). By the time you reach your carrier and reclaim the number, funds may have been moved multiple times.\n\nSIM swaps are also used in targeted 'port-out' fraud on number-transfer portals, where a number is simply moved to a different carrier the attacker controls. Prevention centres on removing phone numbers from account security wherever possible and using authenticator apps or hardware keys instead of SMS codes.","redFlags":["Your phone suddenly has no signal despite being in a normal coverage area","You receive a carrier notification about a SIM change or account update you did not request","Password-reset emails arrive in your inbox that you did not initiate","You are locked out of email or banking apps unexpectedly","Someone contacts you claiming to be from your bank asking to confirm a transfer"],"whatToDoNow":["Call your carrier immediately from another phone and report an unauthorised SIM swap","Ask the carrier to add a PIN or passphrase required for any future account changes","Change passwords on email, banking, and crypto accounts from a secure device","Switch all critical accounts from SMS two-factor to an authenticator app or hardware key","Report the fraud to your bank and national cybercrime unit","Monitor your credit reports for any accounts opened in your name"],"faq":[{"question":"Can I prevent a SIM swap entirely?","answer":"You can make it much harder. Set a carrier account PIN, use authenticator apps instead of SMS codes, and limit the personal information you share publicly online."},{"question":"Are cryptocurrency losses from SIM swaps recoverable?","answer":"Rarely. Blockchain transactions are irreversible. Report to law enforcement immediately — in some cases exchanges have frozen accounts before full withdrawal."},{"question":"How do scammers get enough personal data to pass carrier security checks?","answer":"From previous data breaches, social media posts, phishing emails, and dark-web purchased data files that often include names, addresses, and last four digits of SSNs."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-bec-invoice-redirection-scam-work","url":"https://scamencyclopedia.org/questions/how-does-bec-invoice-redirection-scam-work","question":"How does a business email compromise (invoice redirection) scam work?","shortAnswer":"In BEC fraud, criminals compromise or impersonate a business email account and intercept payment instructions, swapping real bank details for their own so funds are wired directly to them.","explanation":"The attack begins with intelligence gathering. Criminals research the target company through LinkedIn, public filings, websites, and sometimes a phishing email that harvests real email credentials. They identify key relationships — which supplier the finance team pays regularly, who approves large transfers, and what the normal email style looks like.\n\nArmed with that knowledge, they either log into a compromised real mailbox or create a look-alike domain (e.g. adding an extra letter or swapping a character). When a legitimate invoice arrives, they intercept it and resend a modified version with their bank account in place of the supplier's. Alternatively they proactively email the finance team impersonating a supplier announcing a 'bank account change'.\n\nThe payment is typically a large, one-time wire transfer — chosen because wires are harder to reverse than card payments. By the time the real supplier chases the overdue invoice and the fraud is discovered, the money has been forwarded through multiple accounts or converted. The average BEC transfer is far larger than most other fraud types.\n\nSmall and medium businesses are as frequently targeted as large ones. Prevention depends on a simple verbal call-back procedure: whenever bank details change, the finance team calls the supplier on a number they already have on record — not one provided in the same email — to confirm.","redFlags":["An email arrives from a known contact asking to update bank account details","The sender's email domain differs from the usual one by one or two characters","Urgency is stressed — 'pay before end of day' or 'deal falls through if not paid today'","The request bypasses normal approval channels or specifically asks for secrecy","A follow-up call comes from someone who seems to already know your internal processes"],"whatToDoNow":["Never change payment details based solely on an email — always call-back on a verified number","If a suspicious transfer has been made, call your bank's fraud line immediately; wire recalls are time-sensitive","Report to your national cybercrime unit and financial regulator","Investigate how the email account was compromised and change all credentials","Notify the real supplier so they can also investigate and warn other clients","Review and document your payment-authorisation procedures to add verification steps"],"faq":[{"question":"Is BEC only a risk for large companies?","answer":"No. Small businesses are frequently targeted because they are less likely to have formal verification procedures and the sums are still worth the effort for criminals."},{"question":"Can a bank reverse a wire transfer made to a BEC fraudster?","answer":"Sometimes, if reported within hours. Banks can send a SWIFT recall request, but success depends on how quickly the receiving bank acts and whether funds have already been moved."},{"question":"What is a 'man-in-the-email' attack?","answer":"A variant where criminals silently forward all mail from a compromised inbox, monitor conversations in real time, and insert fraudulent instructions at exactly the right moment."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-task-scam-work","url":"https://scamencyclopedia.org/questions/how-does-task-scam-work","question":"How does a task scam (fake online job) actually work?","shortAnswer":"Task scams promise easy pay-per-task online work but require victims to make upfront crypto deposits to 'unlock' tasks, resulting in escalating losses with no real income ever paid.","explanation":"Recruitment begins on social media, WhatsApp, or Telegram with an unsolicited message offering flexible remote work — rating products, liking videos, or boosting app reviews. The pay sounds modest and legitimate. Victims are directed to a professional-looking platform or app and given a simple set of starter tasks that complete quickly and show a small balance accumulating.\n\nThe trap springs when the victim reaches a withdrawal threshold or hits a 'special task'. These tasks require a crypto deposit — framed as a 'booster', 'bond', or 'temporary float' — to access a higher-paying batch. Completing the batch shows a larger balance. Withdrawal still fails, citing a new required deposit. Each cycle the sums grow. The platform may show other 'workers' cashing out to encourage continued deposits.\n\nAll displayed balances are fictional. The only real money flows are the deposits victims make. When the scammer decides the victim is exhausted, the platform becomes unreachable or demands an impossibly large final deposit. Some victims are 'rehired' by a recovery scam shortly after.\n\nTask scams are particularly effective because the work itself initially feels real, creating a sunk-cost mentality. Victims feel they are close to accessing money they have 'earned', making it psychologically difficult to stop depositing.","redFlags":["A job offer arrives via WhatsApp, Telegram, or social media with no prior application","Work involves rating, liking, or reviewing with unusually high pay for minimal effort","Any request to make a crypto deposit before receiving earnings","Withdrawals are blocked by a 'technical error', 'tax hold', or 'upgrade required'","Platform shows other workers earning but you cannot find independent reviews of it"],"whatToDoNow":["Stop depositing immediately — no legitimate employer requires you to fund your own tasks","Do not pay any 'release fee' or 'tax' to withdraw — it will not work","Screenshot the platform, all conversations, and any wallet addresses","Report to your national consumer protection agency and cybercrime unit","Report to the cryptocurrency exchange used if identifiable","Warn the person who recruited you — they may also be a victim acting as an unwitting referrer"],"faq":[{"question":"Why do some task platforms let you withdraw a small amount first?","answer":"Small early withdrawals are a deliberate hook. They prove to the victim that the platform 'works', building confidence before larger deposits are requested."},{"question":"Are task scams the same as pyramid schemes?","answer":"They share a structure but differ: pyramid schemes require recruiting others to profit; task scams harvest deposits directly from one victim through fake work balances."},{"question":"Can I recover money lost to a task scam?","answer":"Crypto deposits are nearly impossible to recover. Report to law enforcement and the exchange. Be wary of 'recovery' services contacting you afterwards — they are often follow-on scams."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-tech-support-scam-work","url":"https://scamencyclopedia.org/questions/how-does-tech-support-scam-work","question":"How does a tech support scam actually work?","shortAnswer":"Tech support scams use alarming fake alerts or cold calls to convince victims their device is infected, then gain remote access to steal data or money while charging for nonexistent fixes.","explanation":"The most common entry point is a browser pop-up that fills the screen with an urgent warning — fake Microsoft or Apple logos, alarm sounds, and a phone number to call immediately before 'all data is deleted'. These pop-ups are designed to be difficult to close and are served through malicious ads on otherwise legitimate sites. A smaller number of scams begin with an unsolicited phone call from someone claiming to be from a tech company's support team.\n\nWhen the victim calls or accepts the call, a confident-sounding technician talks them through installing a legitimate remote-access tool such as AnyDesk or TeamViewer. Once connected, the scammer opens command windows showing scrolling text or 'error' logs, misrepresenting normal system output as evidence of serious infection. Victims who are not technically fluent have no way to evaluate what they are seeing.\n\nThe scammer then proposes a fix — for a fee, sometimes charged to a gift card, wire transfer, or credit card. Some go further: they navigate to the victim's bank account, claim to be processing a refund, and manipulate the screen to make it appear a larger amount was sent 'by mistake', pressuring the victim to send the 'overpayment' back. This is a separate cash-extraction tactic layered onto the original scam.\n\nAfter the session, the scammer may have installed actual malware for future access, noted passwords, or screenshotted financial accounts. The support 'subscription' they sell is worthless.","redFlags":["A pop-up appears claiming your device is locked or infected, with a phone number to call","You receive an unsolicited call claiming to be from Microsoft, Apple, or your internet provider","You are asked to install a remote-access program to let someone 'fix' your device","The technician shows you command-prompt output and claims it is evidence of viruses","Payment is requested by gift card, wire transfer, or cryptocurrency","You are told a refund was sent in error and asked to return money"],"whatToDoNow":["Close the pop-up by force-quitting your browser — do not call any number shown","If you already called and gave access, disconnect the internet immediately","Run a reputable security scan from software you downloaded directly from the developer's site","Contact your bank if any financial details were visible during the remote session","Change passwords for any accounts visible during the session","Report to your national consumer protection authority and the impersonated company"],"faq":[{"question":"Does Microsoft or Apple ever call customers to warn about viruses?","answer":"No. Neither company proactively calls customers about device problems. Any such call is a scam."},{"question":"If I gave remote access but did not pay, am I still at risk?","answer":"Yes. The scammer may have installed software or noted passwords. Disconnect the device, run a security scan, and change critical passwords from a different device."},{"question":"Why do scammers ask for gift cards?","answer":"Gift card codes are treated like cash, cannot be reversed, and are not covered by credit-card fraud protections. They are also easy to liquidate quickly."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-advance-fee-scam-work","url":"https://scamencyclopedia.org/questions/how-does-advance-fee-scam-work","question":"How does an advance-fee (419) scam actually work?","shortAnswer":"Advance-fee scams promise a large payout — an inheritance, lottery win, or business deal — that can only be released after the victim pays a series of ever-growing 'fees', none of which ever unlock real money.","explanation":"The initial contact often arrives by email, social media, or letter and describes an extraordinary windfall: a foreign inheritance, an unclaimed prize, an oil-deal commission, or funds trapped in a blocked account. The sender needs help moving the money and offers a generous share in return. The story is detailed, includes official-looking documents, and often references real institutions.\n\nOnce the victim expresses interest, a 'problem' arises requiring a modest payment to resolve — a transfer tax, legal fee, or courier charge. This amount is small relative to the promised reward, which makes it feel reasonable. Payment is made, but another obstacle appears: a customs levy, a bribe, an insurance bond. Each resolution creates a new complication, and the sums creep upward.\n\nThe scam can run for months or years. Some operators play multiple roles — lawyer, bank official, government minister — to add legitimacy. Victims who have paid multiple fees may be shown convincing fake evidence of how close the money is, making it psychologically harder to stop. Some are lured into a false sting operation where they think they will catch the fraudsters and recover their money, only to pay further 'operational costs'.\n\nThere is no money. Every document, stamp, and bank statement is fabricated. The payout is an illusion maintained precisely as long as the victim keeps paying.","redFlags":["An unsolicited message promises a large sum in exchange for help or a small upfront fee","Documents look official but contain spelling errors or inconsistencies","Every time you pay a fee, a new fee immediately appears","The deal requires secrecy — you are told not to discuss it with family or a lawyer","Communication switches to personal email or WhatsApp to avoid paper trails","The sender's 'official' email address is a free webmail account"],"whatToDoNow":["Stop all payments immediately — further fees will never release real funds","Do not provide personal documents or banking information for any 'verification'","Report to your national fraud reporting service with all correspondence","If you shared ID documents, place a fraud alert with credit bureaus","Be alert to follow-on 'recovery' scams from people claiming they can retrieve your money","Talk to a trusted person — isolation and shame are tools the scammer uses to keep victims paying"],"faq":[{"question":"Why is it called a '419' scam?","answer":"The name comes from Section 419 of the Nigerian Criminal Code, which covers fraud. Although similar scams originate worldwide, the term stuck because many early email versions claimed Nigerian origins."},{"question":"Can I report an advance-fee scam even if I did not lose money?","answer":"Yes, and it helps. Reports help authorities track operator networks and warn others. File with your national fraud authority even if you just received the initial contact."},{"question":"What is a 'recovery scam' in this context?","answer":"After losing money to an advance-fee scam, victims are sometimes targeted again by people claiming they can recover the lost funds — for a fee. This is a second scam targeting the same victim."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-overpayment-scam-work","url":"https://scamencyclopedia.org/questions/how-does-overpayment-scam-work","question":"How does an overpayment scam actually work?","shortAnswer":"An overpayment scam involves a fraudulent cheque or payment for more than the agreed amount, with a request to refund the difference before the original payment bounces — leaving the victim out of pocket.","explanation":"The scam typically starts when you are selling something online, renting out a property, or accepting payment for a service. The buyer sends a cheque, money order, or bank transfer for significantly more than the agreed price, explaining it as a mistake or a combined payment for something else. They then urgently ask you to send the overpaid portion back, often by wire transfer, gift card, or a secondary peer-to-peer payment.\n\nThe critical mechanics are in the banking system. A deposited cheque may appear to 'clear' in your account within a day or two, but the actual verification process — confirming funds exist at the issuing bank — can take weeks. Your bank may show the funds as available before they have verified. When the cheque ultimately bounces or is identified as counterfeit, the bank deducts the full amount from your account, and the 'overpayment refund' you already sent is gone.\n\nThe same structure applies to fake bank transfer notifications, fraudulent escrow confirmations, and forged money-order receipts. The scammer is never trying to buy your item — they are using your trust in your bank's interface to generate a temporary visible balance they can convert into an irreversible cash transfer.\n\nVariants target landlords (fake tenant deposits), freelancers (fake client payments), and charity fundraisers. Any context where a third party is paying you more than owed and requesting the difference back should be treated as a potential overpayment scam.","redFlags":["A buyer or client sends significantly more than the agreed amount","An explanation for the overpayment is provided but sounds implausible","There is urgency to refund the difference immediately, before you can verify funds","The refund is requested by a different method than the original payment","The payer declines to have their bank cancel and reissue the correct amount","Contact began on a classifieds or marketplace site and quickly moved off-platform"],"whatToDoNow":["Do not send any refund until the original payment has fully cleared — ask your bank what 'cleared' means for that specific payment type","Ask the payer to cancel the overpayment and send the correct amount instead","Contact your bank's fraud team if you have already sent a refund","Report to the platform where you were contacted and to your national fraud authority","Keep all correspondence as evidence","Be aware that cashier's cheques and money orders can also be forged"],"faq":[{"question":"If my bank shows funds as available, does that mean the cheque has cleared?","answer":"No. 'Available' means the bank has provisionally credited your account. Actual clearance — confirming the funds genuinely exist — takes longer and varies by payment type."},{"question":"Why can't the scammer just send the exact amount?","answer":"The overpayment is deliberate. The refund you send uses your real funds; the original payment is fraudulent. The 'extra' amount is their profit."},{"question":"Can this scam happen with legitimate payment platforms?","answer":"Yes. Fraudsters send fake notification emails mimicking PayPal, Zelle, or similar services claiming payment was made. Always verify within the app itself, not via email."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-triangulation-fraud-work","url":"https://scamencyclopedia.org/questions/how-does-triangulation-fraud-work","question":"How does triangulation fraud work in online shopping?","shortAnswer":"Triangulation fraud places victims between a fake online shop and a real retailer: you pay the fraudster, they buy the product for you with a stolen card, and the cardholder disputes the charge — leaving you with a potential fraud investigation.","explanation":"The scam involves three parties: the fraudster, the victim (buyer), and a legitimate retailer. The fraudster sets up a convincing online storefront selling popular items at slightly-below-market prices. When a genuine shopper places an order and pays, the fraudster uses stolen credit card details to purchase the same product from a real retailer and ships it to the buyer's address.\n\nFrom the victim's perspective the transaction seems to work: they receive a real product. What they do not know is that their address is now associated with a fraudulent purchase. When the legitimate cardholder discovers the unauthorised charge and disputes it, the retailer and card network investigate. The victim's address appears in the fraud trail and may trigger an account suspension, a chargeback on their own payment, or in rare cases a law-enforcement inquiry.\n\nThe fraudster profits from the difference between what the victim paid and the cost of the stolen-card purchase, plus the goods themselves if items are re-ordered to a different address. Some operations also harvest the victim's card details if they paid for additional items or subscriptions on the fraudulent storefront.\n\nTriangulation fraud is difficult for consumers to detect immediately because the product does arrive. Signs often only emerge later when the credit-card statement of the original cardholder surfaces or the retailer contacts the shipping address.","redFlags":["An online shop has prices noticeably below every other retailer","The shop has minimal contact information, no physical address, and poor return policies","The package arrives from an unrelated retailer, not the shop you ordered from","Your shipping confirmation email comes from Amazon, Walmart, or another retailer you did not use","You later receive a chargeback or account-suspension notice related to the delivery address"],"whatToDoNow":["If you receive goods unexpectedly from a retailer you did not order from, do not ignore it — document everything","Contact your payment provider if you believe the shop that charged you was fraudulent","Report the fraudulent storefront to your national consumer protection agency","If contacted by the real retailer about a fraud investigation, cooperate fully and share all order details","Check your own card statements for any unexpected charges from the storefront","Use credit cards rather than debit cards for online purchases — chargebacks are easier"],"faq":[{"question":"Am I responsible for the fraud if a stolen card was used to ship to me?","answer":"Generally no — you are an unwitting recipient. Cooperating with the retailer's investigation and showing your original order from the fraudulent shop demonstrates good faith."},{"question":"How do fraudsters get so many stolen card numbers?","answer":"Through data breaches, phishing, card-skimming devices, and dark-web marketplaces that sell batches of compromised card details."},{"question":"Is triangulation fraud the same as dropshipping?","answer":"Legitimate dropshipping uses authorised supplier accounts. Triangulation fraud uses stolen payment details and is illegal regardless of whether the buyer receives a product."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-pump-and-dump-scam-work","url":"https://scamencyclopedia.org/questions/how-does-pump-and-dump-scam-work","question":"How does a pump-and-dump scam work?","shortAnswer":"Pump-and-dump schemes artificially inflate the price of a cheap asset through coordinated hype, then organise insiders dump their holdings onto retail buyers, causing the price to collapse.","explanation":"The scheme begins with insiders — the 'pump' organisers — quietly acquiring a large position in a low-priced, thinly traded asset. Because these markets have little liquidity, even modest buying can move the price noticeably. The organisers then launch a coordinated promotional campaign: newsletters, social media posts, chat groups, text messages, and sometimes paid influencers all repeat the same buy signal, typically citing fabricated news or exaggerated potential.\n\nRetail investors who see the price rising and hear the excitement buy in, which drives the price higher still. This self-reinforcing dynamic is a key feature of the scheme — genuine retail interest creates real price movement that attracts more buyers. The chart looks like organic growth and the hype feels community-driven.\n\nAt a pre-determined price target, the organisers sell their entire position. The sudden sell pressure, combined with an absence of genuine underlying value, causes the price to collapse rapidly. Retail buyers who purchased near the peak are left holding an essentially worthless asset. The pump-and-dump operators profit proportionally to how much the price was inflated and how large a position they held.\n\nCrypto tokens and meme stocks have both been vehicles for this fraud. In regulated markets it is explicitly illegal. In unregulated crypto markets the same economics apply but enforcement is more limited. The scheme relies entirely on manufactured social proof and information asymmetry.","redFlags":["An asset is promoted heavily in chat groups or social media with unusual intensity","Claims of guaranteed returns or 'once-in-a-lifetime' opportunity are made","The asset has a very low market cap and thin trading volume before the promotion","Multiple accounts in a group all post the same message or buying recommendation simultaneously","You are urged to buy immediately to 'get in before it moons'","The promoters cannot point to genuine underlying utility or revenue"],"whatToDoNow":["Do not buy assets purely on social media hype or group chat recommendations","Research independently: check trading volume history, who holds the supply, and whether insiders control a large share","If you have already bought and suspect a pump, sell before additional losses — do not wait to break even","Report suspected pump-and-dump activity to your national securities regulator","Report to the platform where the promotion was run","Be wary of follow-on scams offering to recover your losses"],"faq":[{"question":"Is a pump-and-dump illegal for crypto tokens?","answer":"In most jurisdictions, deliberately coordinating to mislead investors about an asset's value is illegal regardless of whether it is a stock or crypto token, though enforcement varies significantly."},{"question":"How can I tell if a crypto token is a pump-and-dump setup?","answer":"Look at the token distribution: if a small number of wallets hold most of the supply, insiders can dump at will. Also check whether the 'team' is publicly identifiable and accountable."},{"question":"What is a 'rug pull' and how does it differ?","answer":"A rug pull is a related crypto scam where developers abandon a project after raising funds, taking the liquidity. In a pump-and-dump the project may continue but becomes worthless; in a rug pull the project itself is dismantled."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-ponzi-scheme-work","url":"https://scamencyclopedia.org/questions/how-does-ponzi-scheme-work","question":"How does a Ponzi scheme actually work?","shortAnswer":"A Ponzi scheme pays early investors using money from newer investors rather than genuine returns, creating an illusion of a profitable business that inevitably collapses when new money stops flowing in.","explanation":"The operator presents an investment opportunity promising consistent above-market returns, often through a vague proprietary strategy. Early investors receive regular 'returns' — paid not from any real investment profit but from the capital deposited by newer investors. These real payouts reinforce confidence and generate word-of-mouth referrals that bring in more participants.\n\nThe scheme can sustain itself for years because many investors reinvest rather than withdraw, reducing the cash demands on the operator. Account statements show growing balances, and the few who do withdraw get paid promptly. The growing gap between the stated balances and actual assets is hidden through fabricated reports. The operator may live lavishly on skimmed funds, which serves as social proof of the strategy's success.\n\nCollapse is inevitable because the scheme requires exponentially growing inflows to service an ever-larger liability. Triggers include a market downturn that prompts withdrawal requests, regulatory investigation, a loss of operator confidence, or simply running out of new investors. When withdrawals cannot be met, the structure unravels rapidly, and the majority of investors — particularly later entrants — lose most or all of their capital.\n\nPonzi schemes range from small local operations running a few months to multi-decade enterprises spanning global investors. The common thread is the same: no genuine investment activity, only the recycling of new money to pay old claims.","redFlags":["Returns are consistently high regardless of market conditions","The investment strategy is described in vague or secretive terms","Withdrawals are discouraged or complicated when requested","The operator is resistant to outside audits or third-party verification","Statements are provided directly by the operator rather than a regulated custodian","Recruitment of new investors is rewarded or encouraged"],"whatToDoNow":["Withdraw your principal as soon as you are suspicious — do not wait for proof","Report to your national securities regulator immediately","Preserve all account statements, correspondence, and bank transfer records","Consult a lawyer about your rights in a potential recovery or class action","Be aware that 'clawback' proceedings may later seek to recover payouts received from early investors","Connect with other investors — collective reporting significantly accelerates investigations"],"faq":[{"question":"What is the difference between a Ponzi scheme and a pyramid scheme?","answer":"In a Ponzi scheme, investors give money to a central operator who manages supposed investments. In a pyramid scheme, participants themselves recruit and pay those above them. Both are unsustainable, but the mechanics differ."},{"question":"Can professional investors fall for Ponzi schemes?","answer":"Yes. Sophisticated investors have been victimised in large schemes. Social proof, audited-looking statements, and consistent returns are powerful regardless of the victim's financial experience."},{"question":"How long can a Ponzi scheme last?","answer":"The range is wide. Some collapse within months; others have operated for decades by limiting withdrawals, reinvesting most stated returns, and maintaining tight control over information."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-recovery-scam-work","url":"https://scamencyclopedia.org/questions/how-does-recovery-scam-work","question":"How does a recovery scam work?","shortAnswer":"Recovery scams target people who have already lost money to fraud, posing as recovery specialists or law enforcement, then charge upfront fees for a service that never recovers anything.","explanation":"Recovery scam operators monitor fraud complaint boards, dark-web victim lists, and public social media posts where people describe losing money. They reach out proactively — often within days of a primary fraud — posing as lawyers, government agencies, blockchain investigators, or specialised asset-recovery firms. Their pitch is precisely calibrated to what the victim wants to hear: the money can be traced, the criminals have been identified, a small fee unlocks the process.\n\nThe fee may be described as a legal retainer, court filing cost, cryptocurrency tracing licence, or tax required to release frozen funds. Once paid, a new obstacle appears: another fee, a 'government bond', or a compliance payment. The structure is identical to the advance-fee scam — each payment unlocks a new demand rather than a recovery.\n\nSome operations are sophisticated enough to show fake court orders, 'recovered' wallet screenshots, or law-enforcement letterhead. A separate operative may play the role of a government agent or judge. The victim, already financially and emotionally damaged by the primary fraud, is in a vulnerable state particularly susceptible to hope.\n\nRecovery scams account for a significant share of total fraud losses in some years because they specifically target people who have already demonstrated willingness to transfer money under pressure. No legitimate asset recovery firm charges upfront fees proportional to the case without demonstrating credible work first.","redFlags":["You are contacted out of the blue by someone claiming they can recover your lost funds","They ask for upfront payment before any work is demonstrated","They claim to be from a government agency but cannot provide verifiable contact details","They already know details of your original fraud without you having told them","Documents they provide look official but link to unverifiable organisations","Urgency is stressed — act now or the window to recover closes"],"whatToDoNow":["Assume any unsolicited recovery offer is a scam — ignore and block","Research any firm independently: look up the company on official regulatory registers before engaging","Report the recovery attempt to the same fraud authorities you reported the original loss to","Legitimate government agencies do not charge fees to return seized assets — any such request is fraudulent","Connect with a nonprofit consumer advice service for genuine guidance on recovery options","Accept that official recovery of crypto or overseas wire transfers is genuinely rare"],"faq":[{"question":"Are any asset recovery services legitimate?","answer":"Yes, licensed asset recovery and forensic accounting firms exist. Legitimate ones are registered with legal regulators, do not cold-call fraud victims, and do not charge large upfront fees before demonstrating work."},{"question":"How did the recovery scammer know about my original fraud?","answer":"Victim data is traded on dark-web forums, and fraud complaint sites are monitored. Scammers actively build 'sucker lists' of people who have already lost money, as these are considered high-conversion targets."},{"question":"Can blockchain analysis actually trace stolen crypto?","answer":"On-chain tracing is a real and growing capability used by law enforcement and specialised firms. However, tracing alone does not equal recovery — seizure requires legal authority in the jurisdiction holding the funds."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-lottery-prize-scam-work","url":"https://scamencyclopedia.org/questions/how-does-lottery-prize-scam-work","question":"How does a lottery or prize notification scam work?","shortAnswer":"Lottery scams falsely inform victims they have won a prize in a draw they never entered, then charge escalating fees to claim a payout that never arrives.","explanation":"The contact arrives by email, letter, text, or social media: you have been selected as a winner in a sweepstake, international lottery, or corporate promotion. The prize amount is stated precisely to make it feel real. You did not enter anything, but the message explains this is a random selection or goodwill promotion. Branding from real companies or national lottery organisations is often borrowed without permission.\n\nTo 'claim' your prize you must pay a processing fee, insurance, tax, or customs charge. The amount is kept small relative to the stated prize to make it feel worth the gamble. After payment, the prize requires another fee to clear a hold. Each payment triggers a new requirement. The prize is always just one more payment away.\n\nVariants include gift card prizes requiring 'activation fees', competition wins requiring 'delivery insurance', and car giveaways requiring 'registration and transfer fees'. Some scams operate a two-tier approach where a small genuine prize (a supermarket voucher) is sent first to establish credibility before a larger fraudulent prize claim is presented.\n\nNo legitimate lottery or prize draw ever requires the winner to pay a fee in advance. Real taxes on legitimate winnings are deducted from the prize, or the winner pays them to the tax authority directly — not to the lottery organisation.","redFlags":["You are told you won a competition you did not enter","Any fee is required before the prize is released","The notification arrives from a free email address or lacks official contact details","The prize amount is oddly specific or enormous","You are asked to keep the win secret or respond quickly before the prize expires","Branding of real organisations is used but the contact details do not match official channels"],"whatToDoNow":["Do not pay any fee — if it is real, no legitimate prize requires advance payment","Verify directly with the organisation supposedly running the lottery using contact details from their official website","Report the notification to your national consumer protection authority","If you shared banking details, contact your bank immediately","If a cheque was sent as 'partial payment', do not deposit it — it is likely fraudulent","Block and report the sender on the platform where you were contacted"],"faq":[{"question":"Can a real lottery notify winners by email or text?","answer":"Legitimate national lotteries do contact winners, but they never ask for payment to claim a prize. Verify any win by contacting the lottery through its official website directly."},{"question":"What if I already paid a fee and now they want another?","answer":"Stop paying. Each additional fee is confirmation the entire prize notification is fraudulent. The first fee will not be recovered by paying a second."},{"question":"Why do scammers send physical letters or cheques?","answer":"Physical mail adds an air of legitimacy and bypasses email spam filters. Fake cheques exploit the banking system's clearing delay — the cheque looks real but bounces after you have already sent the 'fee'."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-charity-scam-work","url":"https://scamencyclopedia.org/questions/how-does-charity-scam-work","question":"How does a charity or disaster relief scam work?","shortAnswer":"Charity scams create fake organisations or impersonate real ones to solicit donations, particularly after disasters, diverting funds away from genuine relief efforts.","explanation":"Fraudsters monitor news for major disasters, conflicts, or health crises and within hours launch donation appeals — social media posts, email campaigns, and even physical door-to-door collections. They register domain names similar to well-known charities, create compelling images (often stolen from legitimate aid organisations), and build simple donation pages. The speed of response exploits the public's impulse to help before due diligence is done.\n\nSome operations impersonate specific charities by name, copying logos and imagery precisely. Others create entirely new organisations with names that sound credible. Payment is steered toward methods that are hardest to trace or reverse: wire transfers, cryptocurrency, and prepaid cards. Some fraudsters use crowdfunding platforms where vetting is limited.\n\nA smaller set of cases involves real registered charities with deceptive practices: claiming high overheads leave little for beneficiaries, misleading donors about how funds are used, or running perpetual 'emergency' campaigns for crises that ended years earlier. This is distinct from outright fraud but still diverts donations from effective use.\n\nGenuine charities welcome scrutiny. They publish audited accounts, are registered with national regulatory bodies, and never pressure donors into immediate payment or unusual methods.","redFlags":["A donation appeal appears immediately after a breaking news disaster before established charities have posted","The organisation cannot be found on a national charity regulator's public register","The charity's website or social media was created very recently","Donation is requested by wire transfer, cryptocurrency, or gift card","High-pressure tactics or emotional manipulation are used to demand immediate payment","No detailed information about how donations are used or independent audits is available"],"whatToDoNow":["Search for the charity on your national regulator's register before donating","Donate directly through the charity's official website — not through a link in an unsolicited message","Use a credit card so a chargeback is available if the organisation proves fraudulent","Report fake charities to your consumer protection authority and the platform hosting them","If you want to help after a disaster, donate to established organisations with a track record in the affected area"],"faq":[{"question":"How do I check if a charity is legitimate?","answer":"In the US, check the IRS Tax Exempt Organisation Search and Charity Navigator. In the UK, use the Charity Commission register. Most countries have equivalent public registers."},{"question":"Are crowdfunding campaigns for disasters trustworthy?","answer":"Some are genuine; many are not. Prefer campaigns run by verified accounts, tied to known community organisations, with transparent updates and named beneficiaries."},{"question":"What should I do if I donated to a fake charity?","answer":"Report to your national charity regulator and consumer protection agency. Contact your bank or card provider about a chargeback if payment was recent. Share information so others are warned."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-rental-scam-work","url":"https://scamencyclopedia.org/questions/how-does-rental-scam-work","question":"How does a rental scam work?","shortAnswer":"Rental scams post attractive properties at below-market prices, collect deposits from multiple victims, and disappear before any viewing takes place — leaving everyone without accommodation or money.","explanation":"The fraudster sources property photos and descriptions from legitimate listings, often in other cities or countries, and reposts them on rental platforms at a price slightly below market rate. The listing is designed to attract urgency: good value prompts quick responses. When prospective tenants inquire, the scammer plays the role of a busy landlord or property manager who cannot show the property in person right now.\n\nA variety of plausible excuses are offered: the landlord is abroad for work, a missionary posting, or a medical situation. Keys will be sent once a holding deposit is paid to secure the property against competing applicants. Payment is requested by wire transfer or bank-to-bank payment that bypasses the platform's payment system, which would offer buyer protection.\n\nThe 'landlord' may conduct fake video calls in a different location, provide false references, and send fraudulent tenancy agreements. Some operations collect deposits from a dozen or more victims for the same property before vanishing. Victims only discover the fraud when they arrive at the property and find either the real owner or another scam victim with the same story.\n\nStudents, people relocating for work, and international renters are common targets because they often must arrange accommodation remotely and face time pressure. Platforms have improved verification, but fraudsters constantly adapt and move to less-scrutinised sites.","redFlags":["The rent is noticeably below similar properties in the same area","The landlord cannot show the property and offers to send keys after a deposit","Payment is requested outside the platform or by irreversible transfer","The landlord is located abroad due to a sympathetic reason","The listing appeared very recently and has limited history on the platform","Reverse image search shows the property photos on other listings under different addresses"],"whatToDoNow":["Never pay a deposit before viewing in person or via live video with the landlord physically in the property","Reverse image search all property photos before engaging","Pay through the platform's protected payment system — not by bank transfer to a personal account","Verify the landlord's ownership through land registry records if possible","Report fraudulent listings to the platform and national trading standards or consumer authority","If you have already paid, contact your bank immediately and file a fraud report"],"faq":[{"question":"Can I verify a landlord owns a property before paying?","answer":"In many countries, yes. Land registry services are publicly searchable. Cross-reference the registered owner's name against the person asking you to pay."},{"question":"Is it safe to use Airbnb or VRBO for short-term rentals?","answer":"These platforms offer payment protection if you book through their systems. Scams arise when someone asks you to book or pay outside the platform — always pay within the official system."},{"question":"What if I am already at the location and it is fraudulent?","answer":"Contact local police and your bank immediately. Document everything. The actual property owner may be unaware their property was used in a listing fraud."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-job-offer-scam-work","url":"https://scamencyclopedia.org/questions/how-does-job-offer-scam-work","question":"How does a fake job offer scam work?","shortAnswer":"Fake job offer scams either charge upfront fees for placement, training, or equipment that never materialises, or use the hire to recruit money mules without their knowledge.","explanation":"These scams commonly begin with an unsolicited LinkedIn message, email, or jobs-site response to a real application. The offer describes excellent pay, remote work, and flexible hours — sometimes for a position you did not apply for. The hiring process is unusually fast: a brief online interview (often a scripted chat), followed by a quick offer letter.\n\nIn the fee-upfront variant, the employer asks for training material costs, background-check fees, software licences, or equipment 'deposits'. These payments may be small individually but accumulate. The promised job never begins. Sometimes equipment is promised to be reimbursed after starting, but the job start date is perpetually delayed until the victim realises the company does not exist.\n\nIn the money mule variant, the job genuinely starts: the new employee is asked to receive payments into their bank account and forward them to another account, minus a commission. This is money laundering. The funds are stolen from fraud victims elsewhere, and the unwitting employee becomes criminally liable. Banks flag this activity, freeze accounts, and may report individuals to law enforcement.\n\nA third variant collects personal data under the guise of employment paperwork — passports, tax numbers, bank details — for identity fraud. The job always involves some form of extraction: money, data, or criminal liability.","redFlags":["A job offer arrives unsolicited or from a company you cannot independently verify","The hiring process is unusually fast with minimal assessment","You are asked to pay for training, equipment, or a background check upfront","The role involves receiving and forwarding money between bank accounts","The company's contact details do not match what is on its official website","You are asked to submit identity documents or bank details before a formal offer"],"whatToDoNow":["Research the company independently using its official website and Companies House or equivalent register","Never pay any fees as part of a job application — real employers do not charge candidates","If asked to receive and forward money, do not do so regardless of the explanation","Report fraudulent job offers to the jobs platform and national fraud authority","If you have already forwarded money, contact your bank and seek legal advice","If identity documents were submitted, place a fraud alert with credit bureaus"],"faq":[{"question":"Can I go to prison for being an unknowing money mule?","answer":"Potentially yes. 'I did not know' is a defence but not a guaranteed one. Prosecutors consider whether a reasonable person should have been suspicious. Stop and seek legal advice immediately if you suspect this."},{"question":"How can I check if a company is real?","answer":"Search its name in your country's official company registry. Look for a physical address you can verify on Google Maps. Call a phone number found independently, not one given in the job offer."},{"question":"Do real companies ever hire entirely online?","answer":"Yes, legitimate remote hiring happens. The distinction is that real employers never ask candidates to pay fees or handle financial transfers as part of the application or onboarding process."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-phishing-email-scam-work","url":"https://scamencyclopedia.org/questions/how-does-phishing-email-scam-work","question":"How does a phishing email scam work?","shortAnswer":"Phishing emails impersonate trusted organisations to trick recipients into clicking a malicious link, entering credentials on a fake site, or downloading malware — all to steal accounts or data.","explanation":"A phishing email is engineered to look identical to legitimate correspondence from a bank, delivery company, government agency, or technology platform. The sender address is spoofed or uses a lookalike domain, and the email body copies the real organisation's fonts, logos, and tone exactly. The call to action creates urgency: your account is suspended, a package is held, a refund is pending, or unauthorised access has been detected.\n\nThe link in the email leads to a cloned website that can be indistinguishable from the real one. The URL may differ by a single character or use a subdomain like 'secure.bank-name.verification-login.com'. Victims who enter their credentials hand them directly to the attacker. Some phishing pages also harvest two-factor authentication codes in real time by proxying the login to the real site, defeating SMS-based MFA.\n\nAttachment-based phishing installs malware when a victim opens a document or zip file. The malware may log keystrokes, take screenshots, or provide a backdoor for ongoing access. These campaigns are often mass-sent but increasingly tailored ('spear phishing') using personal details harvested from LinkedIn or previous breaches.\n\nAfter credentials are stolen, attackers typically move quickly: changing the account's email and phone number to prevent recovery, harvesting saved payment methods, forwarding email to monitor for other account details, and testing the same credentials on other sites ('credential stuffing').","redFlags":["An email creates urgency about your account, a delivery, a tax refund, or a security alert","The sender domain does not exactly match the real organisation's official domain","The link URL when hovered is different from the displayed text or contains extra words","You are asked to confirm credentials or payment details via an email link","The email contains grammar or formatting inconsistencies despite otherwise official branding","You did not initiate any action that would prompt the email"],"whatToDoNow":["Do not click the link — go to the organisation's site by typing its address directly","If you already entered credentials, change your password immediately from a known-safe device","Enable multi-factor authentication using an authenticator app, not SMS where possible","Report the phishing email to the impersonated organisation and your national cybercrime agency","Run a malware scan if you opened an attachment","Check account activity for any changes to email, phone, or saved payment methods"],"faq":[{"question":"Can I tell a phishing email by checking for poor spelling?","answer":"Not reliably anymore. Modern phishing emails are often grammatically perfect and visually identical to real communications. Check the sender domain and hover over links instead."},{"question":"What is spear phishing?","answer":"Spear phishing is a targeted version where the attacker personalises the email using your name, employer, or recent activity to increase believability. It is used against specific high-value individuals."},{"question":"Does clicking a link (without entering anything) put me at risk?","answer":"Sometimes. Malicious sites can attempt drive-by download exploits through browser vulnerabilities. Keep your browser and OS updated, and use a security product that blocks known malicious URLs."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-grandparent-scam-work","url":"https://scamencyclopedia.org/questions/how-does-grandparent-scam-work","question":"How does a grandparent scam work?","shortAnswer":"Grandparent scams involve a fraudster impersonating a grandchild in distress — arrested, in hospital, or abroad — and urgently requesting cash or gift cards before the family can verify the story.","explanation":"The call typically comes late at night or on a weekend when it is harder to verify quickly. The caller claims to be a grandchild, often opening with 'Grandma, it's me!' — a vague enough opener that the victim fills in the name themselves, which the scammer then uses. An alternative opener has a 'lawyer' or 'police officer' call on the grandchild's behalf, explaining an accident, arrest, or border detention.\n\nThe story contains enough specific emotional detail — travel abroad, a car accident, an arrest involving drugs — to feel real and shameful enough that the grandparent is reluctant to tell other family members. This isolation is deliberate. The urgency precludes rational verification: bail must be paid today, the lawyer's retainer must be transferred immediately, a courier will collect cash within the hour.\n\nPayment is demanded by cash, money order, wire transfer, or gift cards. Some operations send a courier to collect physically. The amounts can be substantial — multiple rounds of payment may be requested as new 'complications' arise. The victim is kept on the phone continuously, ostensibly to help but actually to prevent them calling family to check.\n\nAI voice-cloning technology increasingly enables fraudsters to impersonate a grandchild's actual voice convincingly, using audio clipped from social media. This makes the 'just sounds like them' defence unreliable.","redFlags":["An unexpected call claims a family member is in urgent trouble and needs immediate money","You are asked to keep the situation secret from other family members","The caller discourages you from hanging up to verify with another family member","Payment is requested by cash courier, gift card, or wire transfer","A 'lawyer' or 'official' calls shortly after or instead of the family member","The voice sounds familiar but slightly different or the call quality is poor"],"whatToDoNow":["Hang up and call the family member directly on a number you already have","Call another family member to verify the situation before doing anything else","Never send gift cards or cash to someone you have only spoken to by phone","Tell the caller you will call back — a real emergency allows a five-minute pause to verify","Report to your national fraud authority and local police","Warn elderly relatives about this scam specifically — it is more effective when they know the playbook"],"faq":[{"question":"Can AI voice cloning really fake a grandchild's voice?","answer":"Yes. Modern voice synthesis requires only a short audio sample — a few seconds from a social media video or voicemail. The result can be convincing enough to fool people who know the person well."},{"question":"What should I do if I already sent a gift card?","answer":"Call the gift card issuer immediately and provide the card number — some issuers can freeze unspent balances. Report to your bank and national fraud authority."},{"question":"Why are older adults particularly targeted?","answer":"Older adults are more likely to be home, answer unfamiliar calls, have accessible savings, and may be less familiar with this specific scam. Targeted education significantly reduces success rates."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-government-impersonation-scam-work","url":"https://scamencyclopedia.org/questions/how-does-government-impersonation-scam-work","question":"How does a government impersonation scam work?","shortAnswer":"Government impersonation scams use fear of arrest, deportation, or legal action to pressure victims into making immediate payments to fake officials via untraceable methods.","explanation":"Contact usually arrives by phone, though email, text, and even official-looking posted letters are also used. The caller claims to be from a tax authority, immigration service, social security administration, or law enforcement. They state that the victim has an outstanding debt, has committed an offence, or that their social security number has been compromised and linked to criminal activity.\n\nThe fear response is the mechanism. The caller uses official-sounding language, badge numbers, case file references, and sometimes real addresses or names obtained from public records. Victims are told arrest warrants have been issued and can only be resolved by immediate payment — by wire transfer, cryptocurrency ATM, or gift card. In some variants the victim is told to purchase gift cards and read the codes aloud while still on the call.\n\nSome calls include a 'supervisor' transfer to add a second authoritative voice. Others instruct victims not to tell family or risk making their legal situation worse. In phone-spoofing variants the caller ID displays the actual number of the IRS, HMRC, or police department. This makes the call appear legitimate to anyone who checks.\n\nReal government agencies never demand immediate payment by gift card, wire transfer, or cryptocurrency. They do not threaten immediate arrest for unpaid debts by phone, and they always allow time to consult a representative or seek legal advice.","redFlags":["A government agency contacts you demanding immediate payment to avoid arrest or deportation","Payment is requested by gift card, cryptocurrency, or wire transfer","You are told not to hang up or inform family members","The caller provides a badge number and case reference but cannot provide a call-back number","Caller ID shows a real government agency number — this can be spoofed","The urgency means there is 'no time' to verify through official channels"],"whatToDoNow":["Hang up and verify through the official agency website or a publicly listed phone number","Do not return a call to a number given by the caller — find the official number independently","Real tax debts and legal proceedings always allow time for verification and legal representation","Report the call to your national consumer protection agency and the impersonated agency's fraud hotline","If you already paid, report to your bank and national fraud authority immediately","Share the experience with older relatives who may be targeted"],"faq":[{"question":"Can a scammer really make their call show the IRS or HMRC number?","answer":"Yes. Caller ID spoofing is inexpensive and widely used by scammers. The displayed number has no bearing on who is actually calling."},{"question":"Does the IRS ever call to demand payment?","answer":"The IRS sends written notices before calling. It never demands immediate payment by gift card, wire, or cryptocurrency and never threatens immediate arrest over the phone for a tax matter."},{"question":"What if the caller knows my address and last four SSN digits?","answer":"This information is available in many data breaches and is not proof the caller is official. Real officials will direct you to written correspondence and allow you to verify independently."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-deepfake-ceo-fraud-work","url":"https://scamencyclopedia.org/questions/how-does-deepfake-ceo-fraud-work","question":"How does a deepfake CEO or executive impersonation fraud work?","shortAnswer":"Deepfake CEO fraud uses AI-generated audio or video of an executive to instruct a finance employee to make an urgent wire transfer, bypassing the normal verification that would catch a text-only request.","explanation":"Classic CEO fraud — an email or call impersonating a senior executive to authorise an urgent payment — predates AI. What AI voice and video synthesis adds is the ability to replicate the executive's actual voice convincingly enough that employees feel confident they are receiving a legitimate instruction in real time rather than reviewing a suspicious email.\n\nA typical attack begins with reconnaissance: the attacker studies the target company's structure, identifies the finance employee with payment authority, and collects audio of the CEO from earnings calls, conference videos, or social media. A voice model is generated and used to call the finance employee, frequently with the real executive's number spoofed on caller ID. The instruction is urgent, confidential, and requests an international wire transfer.\n\nVideo call variants have also been reported in which a fraudster joins an online meeting appearing as an executive — using a pre-recorded or synthesised video feed — alongside real colleagues, making the request seem part of an official meeting. The employee, seeing a familiar face and hearing a familiar voice, confirms the transfer.\n\nThe fraud is particularly effective against organisations that have normalised remote working and video communication. Controls that prevent it are procedural rather than technological: all payment authorisations above a threshold require multi-party sign-off and a mandatory callback through an established internal channel — not a number provided during the suspicious call.","redFlags":["An executive contacts you directly asking for urgent, confidential payment outside normal process","The request bypasses the usual authorisation chain or accounting system","You are told not to discuss the transfer with colleagues until it is complete","The voice sounds like someone you know but the request is out of character","The call number matches the executive but the conversation feels scripted or slightly off","A video caller's lip movements or facial expressions seem slightly delayed or unnatural"],"whatToDoNow":["Hang up and call the executive through an independently verified internal number","Require multi-person approval for all transfers above a set threshold, regardless of who requests them","Contact your bank immediately if a fraudulent transfer has been sent","Report to your national cybercrime unit","Review and tighten internal payment authorisation policies","Train finance staff specifically on voice and video deepfake fraud scenarios"],"faq":[{"question":"Can I detect a deepfake voice on a phone call?","answer":"Real-time detection is difficult for untrained individuals. Procedural verification — calling back through a known number — is the reliable defence, not attempting to detect the technology itself."},{"question":"Is video deepfake convincing enough to fool employees?","answer":"Increasingly yes, particularly for brief interactions like a one-minute meeting appearance. Quality varies widely, and subtle artefacts still exist, but procedural controls are more reliable than visual detection."},{"question":"What is the difference between CEO fraud and BEC?","answer":"CEO fraud specifically involves impersonating a senior leader to request payments. BEC is broader and includes any business email compromise, such as supplier impersonation or invoice redirection."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-investment-fraud-work","url":"https://scamencyclopedia.org/questions/how-does-investment-fraud-work","question":"How does a high-yield investment fraud work?","shortAnswer":"High-yield investment frauds promise returns far above market rates through exclusive or proprietary strategies, collecting funds into accounts the fraudster controls with no intention of investing.","explanation":"The pitch almost always involves a return that sounds extraordinary but plausible — not an obvious '10x overnight' claim, but a consistent monthly return that compounds to impressive annual figures. The strategy is vague: 'algorithmic trading', 'arbitrage', 'insider access to pre-IPO deals', or 'exclusive offshore bonds'. The vagueness is a feature — it prevents detailed scrutiny while sounding sophisticated.\n\nFraudsters cultivate credibility through testimonials, polished websites, glossy brochures, and events. They may approach through trusted community networks — religious groups, professional associations, ethnic communities — where the social proof of peer participation overrides individual scepticism. Early investors who receive prompt, high 'returns' (funded by later entrants) become unwitting ambassadors.\n\nOnce a victim invests, account statements show growing balances. These are fabricated. Withdrawals may be processed promptly at first, particularly small ones, to reinforce confidence. When the operator decides to exit — or when inflows can no longer service the stated balances — withdrawals are delayed, then blocked, then the operator disappears.\n\nThe damage is often worst for those who held on longest, reinvested their stated gains, or borrowed to invest. Unlike a legitimate investment loss, there is no residual asset value — the money was never invested.","redFlags":["Returns are consistently above market rates regardless of economic conditions","The investment strategy cannot be explained in clear, verifiable terms","The manager or firm is not registered with any financial regulator you can independently verify","Withdrawals require unusual notice periods or are explained away with new delays","The investment opportunity was introduced through a social or religious network rather than a regulated channel","There is pressure to invest quickly before the opportunity closes"],"whatToDoNow":["Check the firm's regulatory status on your national financial regulator's register before investing a single penny","Withdraw your principal immediately if you are already invested and have concerns","Report to the financial regulator and national fraud authority","Preserve all documents, account statements, and correspondence","Contact a lawyer about recovery options, including regulatory compensation schemes","Warn others in your network who may have been approached through the same channel"],"faq":[{"question":"How do I check if an investment firm is regulated?","answer":"In the US, use the SEC's EDGAR and FINRA BrokerCheck. In the UK, use the FCA register. The EU has ESMA registers. Each regulator maintains a public searchable list of authorised firms."},{"question":"What is an 'affinity fraud' and is it different?","answer":"Affinity fraud specifically targets a community — religious, ethnic, professional — exploiting trust within that group. The fraud mechanics are the same; only the recruitment channel differs."},{"question":"Can I lose money in a legitimate investment?","answer":"Yes — all real investments carry risk. The difference is transparency: a legitimate investment discloses risks, is held in your name at a regulated custodian, and does not promise consistent above-market returns."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-subscription-trap-scam-work","url":"https://scamencyclopedia.org/questions/how-does-subscription-trap-scam-work","question":"How does a subscription trap or free-trial scam work?","shortAnswer":"Subscription traps offer a 'free' trial that automatically converts to a recurring charge — using buried terms, deliberately complicated cancellation, and multiple product tiers to maximise billing.","explanation":"The consumer encounters a compelling offer: a free or very low-cost trial for a product — skincare, supplements, software, streaming, or a credit monitoring service. The offer is prominently advertised on social media or through a 'news article' style ad. Shipping or a token payment is required upfront. Buried in small print or a scrollable terms box is a clause converting the trial to a monthly subscription in seven to fourteen days unless cancelled.\n\nCancellation is engineered to be difficult. There may be no online cancellation path — only a phone number with long hold times. Calling initiates a retention script: offers of discounted continuations, pauses, or partial refunds. Some operations route cancellation calls to a numbers that are always busy or go to voicemail. By the time cancellation is processed, another billing cycle has passed.\n\nSome schemes bundle multiple separate subscriptions triggered by the same signup — a main product and several affiliated 'partner' services, each billing under a slightly different company name. Customers who look at their bank statement may not recognise the charge because the billing descriptor differs from the advertised brand.\n\nMore aggressive variants send physical 'complimentary' products that, by accepting delivery, trigger a subscription under terms sent in the package or emailed simultaneously. The legal exposure to the consumer in these cases varies significantly by jurisdiction.","redFlags":["A very low or zero-cost 'trial' requires a card number upfront","Terms and conditions are very long and require scrolling past them without reading","The cancellation method is not clearly described before you sign up","Charges appear on your statement under a company name different from the one you signed up with","Multiple charges appear from affiliated company names you do not recognise"],"whatToDoNow":["Review your bank or card statement for recurring charges from companies you do not recognise","Dispute unrecognised recurring charges with your bank as soon as you notice them","Send a written cancellation by email and screenshot the confirmation","Report the practice to your national consumer protection agency","Use a virtual card with a spending limit for free trials to prevent future overcharges","Check the small print specifically for 'negative option' or 'auto-renewal' language before entering card details"],"faq":[{"question":"Is a subscription trap always illegal?","answer":"Not always. Many are technically legal under the buried terms, though regulators in the US, UK, and EU have tightened rules on negative-option billing. Deceptive implementation may still constitute an unfair trade practice."},{"question":"Can I get a refund on subscription charges I did not authorise?","answer":"Card chargebacks are available for subscriptions entered under deceptive terms. Contact your bank and explain the circumstances. Success rates vary but many banks side with consumers for recurring unrecognised charges."},{"question":"What is 'negative option billing'?","answer":"Negative option billing means your silence or inaction is treated as consent to be charged. You are enrolled unless you actively cancel. Regulators increasingly require explicit opt-in rather than opt-out for these arrangements."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-social-media-impersonation-scam-work","url":"https://scamencyclopedia.org/questions/how-does-social-media-impersonation-scam-work","question":"How does a social media impersonation scam work?","shortAnswer":"Impersonators clone or hack real accounts to request emergency money from friends and followers, or to promote fake giveaways and fraudulent investment schemes using a trusted identity.","explanation":"One common variant involves hacking a real account through phishing or credential stuffing, then messaging the victim's contact list claiming an emergency — stranded abroad, wallet stolen, medical bills — and asking for a money transfer. Recipients who know the real person are more likely to respond without verification. The request is usually for a modest amount to avoid triggering suspicion.\n\nA second variant involves creating a new account that copies the name, profile photo, and bio of a celebrity, influencer, or personal contact. These clones may operate entirely within DMs, reaching out to followers or friends with investment opportunities, 'exclusive' offers, or sponsorship deals. The impersonator exploits the follower's existing positive association with the real person.\n\nGiveaway scams use impersonated celebrity accounts to announce 'crypto giveaways' — send a small amount to receive a larger amount back. The setup mimics the visual style of verified accounts, sometimes using compromised legitimate accounts to lend credibility. No one ever receives anything back.\n\nA more targeted form involves cloning a friend's entire account and sending all their contacts a connection request. Once accepted, the clone gains visibility of posts and contacts for further targeting. Victims may not realise their friend has been cloned until they mention receiving messages from 'them' that the friend denies sending.","redFlags":["A contact's account sends an unexpected emergency request for money","The account has a username slightly different from one you follow or has far fewer followers","An account promotes a giveaway requiring you to send money first to receive more","A celebrity or known contact DMs you with an investment opportunity","You receive a connection request from someone you thought you were already connected to"],"whatToDoNow":["Verify any urgent request by calling or texting the person on a contact you already have","Report impersonation accounts to the platform immediately","Never send money based on a social media request without a separate voice verification","Enable login alerts on your own accounts so you know when someone signs in from a new device","Report investment or giveaway accounts to the platform and your national fraud authority","Check your own account for active sessions you do not recognise"],"faq":[{"question":"What should I do if my own account is cloned?","answer":"Report the cloned account to the platform directly. Post a warning on your real account so your contacts know not to interact with the impersonator. Enable two-factor authentication on your account."},{"question":"Can I recover money sent through a social media emergency request?","answer":"If sent by bank transfer or card, contact your bank immediately for a recall. Peer-to-peer payment apps have limited reversal options. Report to your national fraud authority in all cases."},{"question":"Why do scammers target accounts with large followings?","answer":"More followers mean more potential targets for a giveaway or investment promotion. The scammer benefits from the real account holder's credibility with a large audience."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-parcel-delivery-scam-work","url":"https://scamencyclopedia.org/questions/how-does-parcel-delivery-scam-work","question":"How does a parcel delivery or missed delivery scam work?","shortAnswer":"Fake parcel notifications impersonate delivery companies to harvest card details or install malware, using the universal expectation of online deliveries to bypass scepticism.","explanation":"The message arrives by text or email claiming that a parcel could not be delivered and requires a small redelivery fee or customs charge. The branding mimics a well-known courier — the logo, colours, and font are copied precisely. A link leads to a convincing fake site that requests card details to process the fee. These details are then used for fraud or sold on dark-web markets.\n\nMalicious variants direct victims to install an 'app' to track the parcel. This app is malware that requests excessive permissions, harvests banking credentials, reads SMS messages (including two-factor codes), and may enrol the device in a botnet. Android devices are more commonly targeted because they allow installation from outside official app stores.\n\nThe effectiveness of this scam derives from timing: most people are waiting for at least one online delivery at any given time. The generic message 'your parcel could not be delivered' matches the victim's real expectation often enough to lower suspicion. Volume is high — millions of messages are sent cheaply, and even a small success rate is profitable.\n\nSome variants claim customs duty is owed on an international shipment. The duty amount is plausible, the courier branding is authentic-looking, and the payment page may even show partial shipping details sourced from earlier data breaches to appear legitimate.","redFlags":["A text or email about an undelivered parcel arrives when you are not expecting anything","The message asks for a fee by clicking a link rather than instructing you to collect at a depot","The URL in the link does not match the courier's official domain","The message is sent from a personal email address or a random phone number","You are asked to install an app from outside an official app store to 'track' the parcel"],"whatToDoNow":["Do not click the link — go directly to the courier's official website and enter your tracking number there","If you already entered card details, contact your bank immediately and request a replacement card","If you installed an app, uninstall it and run a malware scan; change banking passwords from a different device","Report the phishing message to the courier company's official fraud reporting channel","Forward suspicious texts to your national spam reporting number if available"],"faq":[{"question":"How do fraudsters know I use a particular courier?","answer":"They often do not — the message is sent to millions at random. Because many people do have deliveries pending, the hit rate is still profitable."},{"question":"Is a small customs or redelivery fee ever genuinely requested by text?","answer":"Real couriers do sometimes notify by text, but they typically direct you to their official app or website, not to a payment link in the message itself. Verify through official channels."},{"question":"Can the scam steal my money without me entering card details?","answer":"Yes, if you install malware. Malicious 'tracker' apps can steal banking credentials directly from your device without you ever typing them into a website."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-cryptocurrency-exchange-scam-work","url":"https://scamencyclopedia.org/questions/how-does-cryptocurrency-exchange-scam-work","question":"How does a fake cryptocurrency exchange scam work?","shortAnswer":"Fraudulent crypto exchanges mimic legitimate platforms, let users deposit real funds, show fabricated portfolio growth, and then block all withdrawals once a target amount is reached.","explanation":"The fake exchange begins its life looking credible. A polished interface copies design patterns from well-known platforms. It may appear in paid search results or be promoted by social media accounts. Initial deposits are processed smoothly, and trading activity on the screen generates impressive paper gains. Some platforms even allow small early withdrawals to build confidence before the trap closes.\n\nThe operator controls all the numbers visible on the interface. The 'market data' shown is fake or lightly modified from real feeds. When a user's portfolio appears to reach a high value, the scammer times a withdrawal request to trigger a 'verification' requirement — anti-money-laundering compliance, a tax hold, or a minimum balance requirement. These are all pretexts to extract more deposits.\n\nSome platforms are linked to pig-butchering operations where a fraudulent romantic relationship introduced the exchange. Others recruit through Telegram or Discord trading groups where 'signal callers' share referral links. The exchange may offer unusually high leverage or yield-farming rates to attract deposit volume.\n\nWhen the operator decides to close, the website disappears overnight or users find their accounts suspended with a message about a regulatory review. The real exchange never held the assets users thought they owned — every position was invented.","redFlags":["The exchange cannot be found on any regulatory registry or licence database","Profits appear consistently regardless of actual market movements","Withdrawals trigger new verification requirements or compliance fees each time","The exchange was recommended by a new online contact rather than discovered independently","Customer support responds only to deposit questions, not withdrawal requests","The platform has no physical address, no published team, and a recently registered domain"],"whatToDoNow":["Stop depositing immediately and attempt a small withdrawal to test","If withdrawal is blocked, do not pay any release fee — it will not work","Screenshot all transaction history, correspondence, and the platform interface","Report to your national financial regulator and cybercrime unit with wallet addresses used","Report to the actual exchange whose branding was copied","Seek support — the emotional impact of losing savings is significant and help is available"],"faq":[{"question":"How do I check if a crypto exchange is regulated?","answer":"In the US, check FinCEN registration and state licences. In the EU, check ESMA. In the UK, the FCA maintains a crypto register. Many countries now require exchange registration."},{"question":"Can I tell a fake exchange from a real one by its interface?","answer":"Not reliably by appearance alone. Check independent reviews on multiple platforms, verify regulatory status, and cross-reference the domain registration date."},{"question":"Is my money covered by deposit insurance on a crypto exchange?","answer":"Generally no. Unlike bank deposits, crypto exchange holdings are not covered by government deposit insurance schemes in most jurisdictions."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-mlm-pyramid-scheme-work","url":"https://scamencyclopedia.org/questions/how-does-mlm-pyramid-scheme-work","question":"How does an MLM pyramid scheme actually work?","shortAnswer":"Pyramid scheme MLMs make most of their money from recruitment fees and inventory purchases by new participants rather than genuine product sales, ensuring the majority of members lose money.","explanation":"Legitimate multi-level marketing involves distributors selling real products to real customers outside the business. In a pyramid-scheme MLM, however, the economics are driven by recruitment: each new member pays an enrolment fee and is required to purchase a starter inventory. Commissions are structured so that the bulk of earnings come from the purchases of those you recruit and their recruits, rather than from retail sales.\n\nNew recruits are shown income disclosure statements that highlight the top earners — a tiny fraction. These figures are technically accurate but unrepresentative. The median participant earns far less than minimum wage or records a net loss when product purchases are factored in. The culture inside the organisation emphasises positivity, silences sceptics, and attributes failure to insufficient effort by the individual.\n\nThe mathematical problem is structural. For everyone at any level to earn the promised income, exponentially more recruits are needed at each tier. This geometric growth is impossible to sustain. The scheme requires a continuously expanding pool of new entrants; when recruitment slows, those at the bottom — the majority — lose their investment.\n\nSome operators cross into outright pyramid scheme territory by requiring little or no actual product sales and awarding commissions purely on recruitment. This is illegal in most jurisdictions. The boundary with legitimate MLM is contested, but the key question is always: where does the money actually come from — genuine retail customers, or the participants themselves?","redFlags":["The business opportunity requires a significant upfront purchase to participate","You are told income depends on recruiting others, not selling to genuine customers","Pressure is applied to recruit friends and family quickly","The income disclosure shows extreme top concentration with average earnings well below minimum wage","Leaving or questioning the model is framed as a personal failure or lack of belief","The product has no clear market outside the network itself"],"whatToDoNow":["Ask for the full income disclosure document and calculate the median, not the average","Research the company on your national consumer protection authority's register","Track all your expenses including product purchases, events, and materials against actual sales","Consult a lawyer if you have been misled about income potential","Report pyramid scheme characteristics to your national consumer protection or trading standards agency","Reconnect with friends and family — social isolation is often a side effect of MLM culture"],"faq":[{"question":"What is the legal difference between an MLM and a pyramid scheme?","answer":"Legally, the key test in most jurisdictions is whether income is primarily from recruitment (illegal) or genuine retail sales to end consumers (potentially legal). In practice, the distinction can be difficult to apply."},{"question":"Can I make real money in an MLM?","answer":"A small minority do. But income disclosures consistently show the vast majority of participants earn little to nothing, and many lose money once product purchase costs are deducted."},{"question":"What should I do with unsold inventory?","answer":"Many MLM contracts include a buyback provision for recent purchases. Check your contract and contact the company in writing. Document all purchases — this is evidence if you pursue a complaint."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-medical-health-scam-work","url":"https://scamencyclopedia.org/questions/how-does-medical-health-scam-work","question":"How does a medical or health product scam work?","shortAnswer":"Health scams sell unproven treatments, fake cures, or dangerous supplements using fabricated testimonials and pseudo-scientific marketing, targeting people with serious conditions who are desperate for relief.","explanation":"Health fraud begins with an irresistible promise: a cancer cure suppressed by pharmaceutical companies, a weight-loss pill that works without diet changes, a supplement reversing a chronic condition in weeks. The marketing uses the language of science without the substance — 'clinically shown', 'doctor approved', 'patented formula' — combined with real-looking testimonials and before-and-after images.\n\nThe product typically cannot be verified against any independent clinical trial. Regulatory approval is absent or claimed falsely. Some operations use genuine-sounding organisation names ('National Health Foundation', 'Institute of Wellness Research') that exist only as website pages. The products themselves may be inert, underdosed, contaminated, or in some cases acutely dangerous.\n\nSubscription billing is common: what looks like a one-time purchase converts to a monthly charge. The product arrives in quantities the victim cannot easily return. Some fraudsters add a phone consultation with someone posing as a doctor or health coach, creating a false authority relationship that encourages continued purchasing.\n\nTargeting focuses on people with chronic pain, obesity, cancer, or conditions for which mainstream medicine offers limited options. Vulnerable people at their most desperate are more willing to try unproven approaches and less likely to seek verification. The harm is both financial and physical — delays in effective treatment can have serious health consequences.","redFlags":["The product claims to cure or treat a serious condition without referencing peer-reviewed clinical trials","Testimonials describe miraculous outcomes without names, dates, or verifiable details","The 'doctor' endorsing the product cannot be verified through a medical licensing board","The product is available only through this specific website and not through pharmacies","A money-back guarantee is prominently displayed but the refund process is nearly impossible","The seller claims mainstream medicine or the government is suppressing the treatment"],"whatToDoNow":["Consult a licensed medical professional before purchasing any unregulated health product","Search for the product on your national health regulator's warning list","Do not stop prescribed medication in favour of an unverified supplement without medical advice","Report fraudulent health products to your national health or trading standards regulator","Dispute charges with your card provider if the product was sold under false claims","Check the ingredient list against your national food supplement safety database"],"faq":[{"question":"Are all health supplements scams?","answer":"No. The market includes legitimate, well-researched products. The fraud indicator is not the category but the specific claims: a supplement claiming to cure cancer without clinical evidence is fraudulent regardless of its ingredients."},{"question":"Can the FDA or equivalent agencies stop health scams?","answer":"Regulators actively remove dangerous products and pursue false claims. However, the volume of products and international sourcing mean fraudulent products reach consumers despite regulatory activity."},{"question":"What is a 'miracle cure' and why should I be sceptical?","answer":"If a treatment genuinely cured a major disease, it would be adopted broadly by the medical community. Claims of cures being 'suppressed' are a reliable hallmark of fraudulent health products."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-education-student-loan-scam-work","url":"https://scamencyclopedia.org/questions/how-does-education-student-loan-scam-work","question":"How does an education or student loan scam work?","shortAnswer":"Student loan scams charge upfront fees to apply for forgiveness or reduced payments — services that are free through official government programmes — or fabricate loan relief that leaves victims deeper in debt.","explanation":"Many student loan scams are built on the existence of real government relief programmes. Fraudsters monitor policy announcements about income-driven repayment, Public Service Loan Forgiveness, or forgiveness initiatives and immediately launch websites and social media campaigns appearing to offer official enrolment. The branding mimics government agencies and the messaging uses official terminology.\n\nVictims pay an upfront fee — described as a processing, enrolment, or filing charge — to have their loans enrolled in a relief programme. This fee is unnecessary: the same programmes are accessible for free through the official student aid authority. Some operators collect monthly 'management fees' and claim to be handling the victim's account, when in fact nothing is being done or the victim's account credentials have been harvested for identity fraud.\n\nIn more aggressive variants, the scammer instructs the victim to stop making loan payments and to redirect payments to a 'trust' account managed by the scam company, claiming this is required to qualify for forgiveness. Loan payments stop reaching the servicer, defaults accumulate, credit scores drop, and collections begin — all while the victim believes they are in an official relief programme.\n\nData-harvesting schemes focus on collecting Federal Student Aid login credentials, Social Security numbers, and bank details under the guise of enrolment forms. These details are used separately for identity fraud unrelated to any loan activity.","redFlags":["A company charges a fee to enrol you in a government student loan relief programme","You are asked to redirect loan payments to a third-party account","The company asks for your Federal Student Aid login credentials","Promises of immediate and complete loan forgiveness are made","The service claims to have special access to government programmes that you cannot access yourself","Urgency is created around a 'closing window' to apply for relief"],"whatToDoNow":["Any legitimate federal student loan programme can be accessed free through StudentAid.gov (US) or your national student loan authority","Never give your loan servicer login credentials to any third party","If you have been redirecting payments, resume payments to your official servicer immediately","Check your loan account status directly with your servicer","Report the company to your national consumer protection agency and student aid authority","Contact your servicer about rehabilitating any loans that entered delinquency or default"],"faq":[{"question":"Are there any legitimate student loan relief services?","answer":"Non-profit credit counselling agencies can provide free guidance. However, no company can access programmes, rates, or forgiveness options that are not available to you directly through your official servicer."},{"question":"How do I know if a student loan relief programme is real?","answer":"Verify directly through your national student aid authority's official website. Real programmes are publicly documented, application is free, and no intermediary is required."},{"question":"Can redirected payments be recovered once sent to a scam company?","answer":"Bank transfers may be recallable if reported quickly. Report to your bank and consumer protection authority immediately. The loans themselves remain your liability regardless."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-insurance-scam-work","url":"https://scamencyclopedia.org/questions/how-does-insurance-scam-work","question":"How does an insurance fraud scam target policyholders?","shortAnswer":"Insurance scams either sell fake policies that pay nothing at claim time, or claim-pad and stage incidents to extract fraudulent payouts — with consumers sometimes victimised and sometimes unknowingly implicated.","explanation":"Fake insurance sales are a form of advance-fee or subscription fraud in which a fraudster sells a convincing policy — motor, health, travel, or pet — collects premiums, and then becomes unreachable when a claim is made. These operations often exploit the desire for cheap cover by pricing slightly below legitimate providers. The policies look real: documents, policy numbers, and branded correspondence are fabricated.\n\nA second category involves fraud against insurers that harms honest policyholders indirectly. Staged car accidents are a common example: a victim is deliberately caused to drive into another vehicle, whose driver and passengers then fabricate injuries and make exaggerated claims. This 'crash for cash' fraud pushes up premiums for all policyholders and may implicate the innocent driver in a fraud investigation they were not party to.\n\nClaim padding — adding unrelated or nonexistent items to a genuine claim — is technically fraud that some policyholders engage in without fully understanding the legal risk. Insurers now share fraud databases, and a flagged claim can result in policy cancellation, higher future premiums, and in serious cases prosecution.\n\nA third consumer-facing variant involves fake 'claims management' companies contacting people after accidents, encouraging them to claim for injuries they did not sustain, sometimes without the victim understanding the legal consequence of signing a fraudulent claim form.","redFlags":["An insurer offers coverage at a price significantly below every other quote for the same risk","The insurer cannot be found on your national insurance regulator's register","A stranger contacts you after an accident encouraging you to claim for injuries","A claims management company contacts you unsolicited about a potential claim","Premium payments are requested via bank transfer rather than the insurer's official payment platform","Policy documents arrive as low-quality PDFs with inconsistent formatting"],"whatToDoNow":["Verify any insurer on your national financial regulator's insurance register before purchasing","If you discover your policy is fake, report to the regulator and seek legitimate cover immediately","If involved in a staged accident, report suspicions to your genuine insurer and police immediately","Never sign a claim form for injuries or losses you did not genuinely sustain","Report fraudulent claims management approaches to your national financial ombudsman"],"faq":[{"question":"Am I covered if I unknowingly bought a fake insurance policy?","answer":"No. A fraudulent policy provides no real coverage. In the event of a claim you will have no insurer. Report the fraud to the regulator and your national compensation scheme if one exists for insurance fraud victims."},{"question":"What is 'ghost broking'?","answer":"Ghost broking is when a fake insurance broker sells a genuine policy in your name but with false details, making the policy void. They pocket the premium while you carry an invalidated policy without knowing."},{"question":"Can I be prosecuted for being an unwitting participant in a staged accident?","answer":"If you sign documents claiming injuries or losses you did not sustain, you may be considered a party to fraud. Seek legal advice and disclose what happened to your insurer honestly."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-gaming-skin-scam-work","url":"https://scamencyclopedia.org/questions/how-does-gaming-skin-scam-work","question":"How does a gaming skin or in-game item scam work?","shortAnswer":"Gaming scams steal high-value skins or in-game items through phishing, fake trading platforms, or hijacked Steam or Discord accounts — often targeting items worth real money on secondary markets.","explanation":"The most common entry point is a friend request or direct message from someone whose account appears to belong to an existing contact. The message offers a trade, a referral bonus, or asks for help with a case that requires clicking a link. The link leads to a phishing page imitating Steam, Epic, Discord, or a trading platform, where the victim enters their credentials. The account is then taken over and inventory items transferred.\n\nTrade scam variants exploit the in-game trading system itself. A fraudster initiates a trade, shows a high-value item briefly, then substitutes a visually similar but lower-value item in the final trade window. Victims who confirm without checking the item details closely lose their inventory. Some scammers use trade bots that cycle offers rapidly to cause confusion.\n\nFake trading sites pose as legitimate third-party skin markets. They may pay out on small initial withdrawals to build trust. When the victim deposits their most valuable items, the site freezes, the account is 'suspended', or a 'verification fee' is demanded before items can be withdrawn — the same withdrawal-block mechanic seen in crypto scams.\n\nHigher-value accounts can be hijacked via SIM swap, session-token theft from malware, or social engineering of platform support staff. Account recovery for high-value gaming inventories has spawned its own fraudulent recovery industry.","redFlags":["A friend's account contacts you with a trade offer or link out of character for them","A link directs you to log into a platform that looks genuine but has a different domain","A trade window shows items that change between the offer screen and the confirmation screen","A trading site deposits or withdraws small amounts initially, then blocks larger transactions","You receive a friend request from someone you do not recognise followed immediately by a trade offer"],"whatToDoNow":["Enable Steam Guard or platform two-factor authentication — this blocks most account takeovers","If your account is hijacked, use official account recovery immediately and contact support","Report fake trading sites to the platform whose branding was used and to consumer protection","Check all trade windows carefully in the final confirmation state, not just the offer preview","Treat every unsolicited trade offer from someone you do not know in person with maximum scepticism"],"faq":[{"question":"Are gaming skins real money?","answer":"Items in games like CS2, Dota 2, and Rust have genuine secondary market value, sometimes reaching thousands of dollars. This makes gaming inventories a meaningful theft target."},{"question":"Can I recover stolen skins through a platform?","answer":"Steam and similar platforms have limited recovery options for items transferred in scam trades. Report immediately — some trades can be reversed within a narrow window. Prevention is far more reliable than recovery."},{"question":"How do scammers know what items I own?","answer":"Many game inventories are public by default. Scammers can view your inventory and craft a targeted offer for items they know you have, making the approach seem more personalised and legitimate."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-car-sale-scam-work","url":"https://scamencyclopedia.org/questions/how-does-car-sale-scam-work","question":"How does a car buying or selling scam work?","shortAnswer":"Car scams either advertise vehicles that do not exist and collect deposits, or use overpayment or stolen-check schemes when selling, leaving buyers without a car or sellers without genuine funds.","explanation":"In the buyer-targeted variant, a vehicle is listed at an attractive price on a classifieds or marketplace site — typically with a story that makes the price plausible, such as a divorce, relocation, or military deployment. When a buyer inquires, the seller explains they are currently away and will ship the vehicle or arrange a third-party viewing after a deposit is paid. The deposit is irreversible; no vehicle arrives. Some operations run elaborate escrow-impersonation schemes using fake eBay Motors, AutoTrader, or shipping company pages.\n\nIn the seller-targeted variant, a buyer pays by cheque for the asking price or more. They may collect the vehicle before the cheque clears or ask the seller to wire back the overpayment. The cheque is fraudulent. By the time the bank identifies it, the vehicle is gone and the seller owes the bounced amount.\n\nFinance fraud variants involve misrepresenting a vehicle's history — clocking the mileage, hiding accident records, or cloning a vehicle's identity (VIN fraud) from a genuine example of the same model. The vehicle exists and is handed over but carries hidden problems that invalidate the value agreed.\n\nA separate dealer fraud involves 'yo-yo' financing: a buyer drives away believing financing is approved, then is called back days later to sign a new contract at worse terms — relying on the buyer's attachment to the car and reluctance to return it.","redFlags":["The price is noticeably below market for the vehicle's specification and age","The seller cannot meet in person and proposes shipping after an upfront deposit","An escrow service is suggested whose website was registered recently","Payment for a vehicle you are selling arrives as a cheque for more than the agreed price","A buyer asks you to wire back the 'overpayment' before the cheque has cleared","A vehicle's VIN number returns results for a different model or colour"],"whatToDoNow":["Always inspect and test-drive a vehicle in person before any payment","Run an independent history check on the VIN through a recognised service","For private sales, accept only cash or a same-day bank-to-bank transfer you can verify before handing over keys","Never accept a cheque for more than the agreed price — it is almost certainly fraudulent","If you lose a deposit to a non-existent vehicle, report to the platform and national fraud authority","For dealership financing concerns, consult a consumer protection advocate before signing revised terms"],"faq":[{"question":"Is eBay Motors shipping escrow legitimate?","answer":"eBay Motors does not offer a standard vehicle escrow or shipping service for private sellers. Any instruction to use an 'eBay shipping' or escrow service linked in a message is a scam."},{"question":"What is VIN cloning?","answer":"VIN cloning involves affixing the vehicle identification number of a legitimate vehicle onto a stolen or otherwise problematic one, making it appear clean in database checks."},{"question":"How do I protect myself in a private car sale as the seller?","answer":"Accept cash or a bank transfer confirmed in your account before handing over the keys and logbook. Never hand keys over against a cheque, regardless of how official it looks."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-pet-scam-work","url":"https://scamencyclopedia.org/questions/how-does-pet-scam-work","question":"How does a pet or puppy scam work?","shortAnswer":"Pet scams advertise desirable animals at low prices, collect deposits, then manufacture transport and quarantine fees until the victim has paid far more than the pet would cost from a legitimate source.","explanation":"The scam begins with an advertisement for a puppy, kitten, or exotic animal at a below-market price, typically posted on classifieds sites, Facebook Marketplace, or dedicated pet rehoming pages. The photos are stolen from legitimate breeders or animal charities. The seller's story is sympathetic: a family moving abroad, a child with allergies, a breeder with more pets than expected.\n\nAfter the initial contact, the buyer is asked for a deposit to secure the animal. Payment is by bank transfer, Venmo, or Zelle — non-reversible or difficult to dispute. The animal then runs into complications: transport company fees, airline cargo charges, pet passport processing, quarantine documentation. Each stage requires another payment. Some operators send fake documentation from fake vetting agencies and airlines to extend the deception.\n\nThe cumulative fees often exceed the cost of buying from a legitimate, verifiable source several times over. The buyer, emotionally invested in the specific animal they have been sent photos of, finds it difficult to cut their losses. The animal never arrives, and the seller eventually stops responding.\n\nScammers specifically target breeds with long legitimate waiting lists — French bulldogs, Ragdoll cats, exotic reptiles — because genuine demand exceeds supply, making implausible prices seem like a lucky find rather than a warning sign.","redFlags":["The price is significantly below what reputable breeders charge for the same breed","The seller is unable to meet in person or arrange a video call with the animal physically present","Additional fees appear after the initial deposit — transport, insurance, quarantine, documentation","The seller is based overseas or the animal needs to be transported long distance","Photos reverse-search to other websites, breeders, or different names","Payment is requested by wire transfer, payment app, or gift card"],"whatToDoNow":["Never pay for an animal you have not seen in person or confirmed via live video in its current location","Reverse image search the animal photos before sending any money","If additional fees appear after your deposit, treat this as confirmation of fraud","Report to your national consumer protection authority and the platform where the listing appeared","Contact your bank if you have already transferred money","Look for animals through verified rescue organisations, breed clubs, or physically visited breeders"],"faq":[{"question":"How do I verify a pet seller is legitimate?","answer":"Visit in person to see the animal with its parents in its home environment. Check that the breeder is registered with the relevant national breed association. Legitimate breeders welcome visits."},{"question":"Can I get my deposit back from a pet scam?","answer":"Bank transfer recall is possible if reported quickly. Card payments offer better chargeback options. Report to your bank immediately and file with your consumer protection authority."},{"question":"Are pet rehoming websites monitored for scams?","answer":"Reputable platforms have safeguards but fraudulent listings still appear frequently. The best protection is insisting on an in-person visit rather than relying on platform verification alone."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-utility-impersonation-scam-work","url":"https://scamencyclopedia.org/questions/how-does-utility-impersonation-scam-work","question":"How does a utility company impersonation scam work?","shortAnswer":"Utility impersonation scams threaten immediate disconnection unless payment is made within hours by gift card or wire transfer, exploiting fear of losing electricity, gas, or water.","explanation":"The call arrives claiming to be from your electricity, gas, or water provider. The caller states that your account is severely past due and that service will be disconnected within hours unless an immediate payment is made. The urgency leaves no time for verification. The caller may provide a realistic-sounding amount and even a plausible account reference number sourced from data breaches or public records.\n\nPayment is demanded by a method the real utility would never accept: gift card codes, cryptocurrency, or wire transfer. The caller may guide the victim to a shop to buy gift cards while staying on the phone, claiming this keeps the account 'on hold'. Some variants send victims to cryptocurrency ATMs with the operator's wallet address pre-loaded in a text message.\n\nA secondary variant involves someone arriving at the door claiming to be from the utility company to inspect meters or pipes. While one person distracts, a second enters the property to steal valuables. Legitimate visits from utility staff are always pre-announced by official written correspondence and allow time to verify.\n\nSome scam callers have access to partial account information that makes them sound credible. This information may come from data breaches, directory information, or a prior phishing attempt. Real utilities always give customers the opportunity to pay through official channels after a verifiable written notice.","redFlags":["A caller demands immediate payment to avoid same-day disconnection","Payment is requested by gift card, cryptocurrency, or wire transfer","You are instructed not to hang up to look up the utility's official number","The urgency leaves no time for verification or consulting another household member","Caller ID displays the utility company name but payment instructions are unusual","A visitor at the door claims to be from a utility company without a prior notification letter"],"whatToDoNow":["Hang up and call the utility using the number printed on your bill or official website","Do not purchase gift cards based on a phone call — real utilities do not accept them","If payment has already been made by gift card, call the card issuer immediately with the card number","Report the call to your national consumer protection authority","Report to the real utility company so they can warn other customers","For door visitors, ask for ID and call the utility to verify the visit before allowing entry"],"faq":[{"question":"Do real utility companies ever call about immediate disconnection?","answer":"Real utilities send multiple written notices before disconnection and provide time to pay. Same-day disconnection threats by phone are a reliable indicator of fraud."},{"question":"Why do scammers ask for gift cards?","answer":"Gift card codes are effectively cash: they cannot be reversed, are not covered by payment protection, and can be liquidated globally within minutes of the codes being read aloud."},{"question":"Is it safe to let unannounced utility workers into my home?","answer":"No. Always verify with the utility company using a number you sourced independently, not one the visitor provides, before allowing entry. Ask for official ID with an employee number you can verify."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-travel-scam-work","url":"https://scamencyclopedia.org/questions/how-does-travel-scam-work","question":"How does a travel booking scam work?","shortAnswer":"Travel scams sell fake hotels, flights, or holiday packages — collecting full payment before victims discover the booking does not exist or the accommodation bears no resemblance to the advertised property.","explanation":"Fraudulent travel offers appear on search results, social media ads, and copycat booking sites that mimic well-known platforms. Properties are often real but the scammer has no authority to take bookings — photos and descriptions are stolen from legitimate listings. Prices are set just below market rate: suspicious enough to question, but plausible enough to book for the perceived saving.\n\nPayment is processed off-platform or by bank transfer. Some operations accept credit cards through fake checkout pages to lend legitimacy, then charge the card fraudulently. The booking confirmation email and reference number appear authentic. The problem is only discovered at the hotel reception or airport when the booking does not exist.\n\nTimeshare scams are a related long-term variant. Victims at resort destinations are invited to a 'presentation' with free gifts. High-pressure selling follows, with promises of rental income that make the purchase appear self-financing. Hidden costs, the absence of any real rental market, and extremely difficult resale make these investments deeply unprofitable for most buyers.\n\nResale timeshare scams then target existing timeshare owners: a company offers to buy or rent out their timeshare for a remarkable sum, requiring an upfront fee to 'register' or 'process' the deal. No buyer materialises; the fee is lost.","redFlags":["The price is significantly below all other comparable options for the same dates","Payment is requested by bank transfer rather than through a recognisable booking platform","The booking website URL differs subtly from the well-known platform it resembles","No verifiable address, phone number, or registered business is provided","A 'limited time' countdown creates urgency that discourages research","The timeshare seller focuses on rental income projections with no independent verification"],"whatToDoNow":["Verify any accommodation directly with the property using contact details from its official website","Book through platforms with clear buyer protection and dispute processes","Use a credit card — chargebacks are available if the accommodation is fraudulent","If you arrive to find no booking, document everything and contact your card provider immediately","Report fake booking sites to your national consumer protection authority and the platform impersonated","For timeshare concerns, seek advice from a consumer protection organisation before paying any resale fee"],"faq":[{"question":"How do I tell a fake booking site from a real one?","answer":"Check the URL carefully for extra words or character swaps. Look for an ABTA or equivalent travel association badge and verify it on the association's own website. Use the platform's official app rather than clicking ad links."},{"question":"What should I do if my hotel booking does not exist when I arrive?","answer":"Get written confirmation from the hotel that no booking exists in your name. Contact your card provider immediately. Save all communications and booking confirmations for your dispute."},{"question":"Are all timeshare companies fraudulent?","answer":"No, some operate legitimately. The fraud indicators are: unrealistic rental income promises, high-pressure tactics, difficulty verifying the company's registration, and any upfront fee to resell or exit."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-romance-investment-hybrid-scam-work","url":"https://scamencyclopedia.org/questions/how-does-romance-investment-hybrid-scam-work","question":"How does a romance-investment hybrid scam (sha zhu pan) work?","shortAnswer":"Sha zhu pan combines long-term romantic relationship building with a fake investment platform, using the emotional bond to lower financial defences before extracting maximum deposits.","explanation":"Sha zhu pan — the Chinese phrase meaning 'pig-butchering plate' — describes the same pig-butchering mechanism as a broader category. The defining feature is the combination of genuine emotional investment by the victim (in a relationship) and a fake financial product (the investment platform), operated as a single coordinated scheme rather than two independent frauds.\n\nThe operator opens with weeks of genuine conversation, emotional support, and advice that feels valuable. The person presents as educated, successful, and caring. Financial advice is offered cautiously and modestly before the investment platform is ever mentioned. When it is, the victim is already in an emotional framework that interprets the advice as caring rather than suspicious.\n\nThe investment profits appear real because the interface is sophisticated and because the operator drip-feeds the victim information about 'market movements' and 'strategy'. Some variants allow victims to connect their own crypto wallet to what appears to be a transparent DeFi protocol — in reality, the smart contract has a drain function that can be called by the operator at any time.\n\nThe emotional damage of sha zhu pan fraud is compounded because the victim must simultaneously process financial loss and the realisation that a relationship they trusted was entirely manufactured. Mental health support is a critical component of recovery for many survivors.","redFlags":["An online relationship moves quickly to emotional intimacy, often with flattery and daily attention","The person mentions investment profits and offers to share their strategy as a favour","The investment platform is accessible only via a link they provide, not independently searchable","Profits grow impressively but withdrawal attempts generate new obstacles","The relationship dynamic discourages you from discussing finances with others","Requests to increase deposits are framed as opportunities you must act on quickly for the sake of your shared future"],"whatToDoNow":["Stop all deposits and do not pay any withdrawal fee","Talk to a trusted person outside the relationship about what is happening","Report to your national cybercrime authority with platform URL and wallet addresses","Seek mental health support — the psychological impact is equivalent to a genuine relationship loss","Contact your bank about any fiat transfers made","Be alert to follow-on 'recovery' services targeting sha zhu pan victims"],"faq":[{"question":"Is sha zhu pan different from pig butchering?","answer":"They describe the same fraud type. Sha zhu pan is the original Chinese term used within the industry; pig butchering is the English translation that has become widely used in English-language coverage."},{"question":"Are the operators of sha zhu pan scam compounds themselves victims?","answer":"Many are. Trafficked workers have been documented operating these schemes under coercion in compounds in Southeast Asia. Reporting to authorities still matters — investigations target the operators, not the coerced workers."},{"question":"How can I distinguish genuine online trading from sha zhu pan?","answer":"Legitimate brokers are regulated and independently searchable. They do not need to be introduced through a romantic relationship, and they allow withdrawals without additional fees or compliance demands."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-social-security-number-scam-work","url":"https://scamencyclopedia.org/questions/how-does-social-security-number-scam-work","question":"How does a Social Security number (SSN) scam work?","shortAnswer":"SSN scams claim your Social Security number has been linked to criminal activity and will be suspended — pressuring you into confirming personal details or making payments to fake officials.","explanation":"The call or automated message states that your Social Security number has been suspended or compromised due to suspicious activity: drugs found in a vehicle, an account opened in your name in another state, or an arrest warrant. You are told to press a number or call back to speak with a Social Security Administration agent or law enforcement officer.\n\nThe operator then conducts a convincing interview. They may provide a badge number and office address. They ask for your full SSN to 'verify' your identity against the case file — which is the data they want. They may also ask for bank account information to 'protect your assets' or to establish that your money is not connected to the criminal activity.\n\nSome variants instruct you to move your savings to a 'federal reserve account' or purchase gold, gift cards, or cryptocurrency for 'safekeeping'. The story evolves to keep you compliant: if you are sceptical, you are reminded that failure to cooperate is itself suspicious. If you want to hang up, you are warned that police will arrive at your door.\n\nYour SSN cannot be suspended. The Social Security Administration does not call to warn of suspended numbers and does not ask for payment to restore them. Any such call is fraudulent regardless of the caller ID displayed.","redFlags":["A call claims your SSN has been suspended or linked to criminal activity","You are asked to confirm your full Social Security number to resolve the issue","An official demands you move money to protect it from seizure","The caller warns that police will arrive if you hang up","Caller ID shows a government agency number — this can be spoofed","Payment by gift card, cryptocurrency, or wire transfer is presented as the resolution"],"whatToDoNow":["Hang up immediately — there is no scenario in which this call is legitimate","Do not call back any number provided in the call","Report the call to your national social security agency's fraud hotline","If you provided your SSN, place a fraud alert with credit bureaus and monitor your credit","If you transferred money, contact your bank immediately and file a fraud report","Check your SSA account directly at ssa.gov for any actual issues"],"faq":[{"question":"Can a Social Security number actually be suspended?","answer":"No. Social Security numbers are permanent identifiers and cannot be suspended by any government agency. This claim is always a fabrication."},{"question":"What happens if I give my SSN to a scammer?","answer":"Your SSN can be used to open credit accounts, file fraudulent tax returns, and apply for benefits in your name. Place a fraud alert or credit freeze immediately if you believe it has been compromised."},{"question":"Are SSN scam callers ever caught?","answer":"Yes, though many operate from overseas jurisdictions. Law enforcement agencies have pursued and prosecuted overseas call-centre fraud operations. Reporting builds the case data needed for these investigations."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-irs-tax-scam-work","url":"https://scamencyclopedia.org/questions/how-does-irs-tax-scam-work","question":"How does an IRS tax impersonation scam work?","shortAnswer":"IRS impersonation scams threaten arrest or asset seizure for alleged unpaid taxes, demanding immediate payment by untraceable method while the victim is kept on the phone.","explanation":"The call opens with an official-sounding automated message informing you of a tax deficiency, warrant, or audit that has escalated to a legal matter. Pressing a number connects you to a 'revenue officer' who provides a badge number, case file ID, and sometimes a fake callback number that appears on caller ID as an IRS number. The script is designed to trigger fear and prevent calm reasoning.\n\nThe agent explains that a significant back-tax liability exists — sometimes a precise and alarming amount. Options are limited: pay immediately or face asset seizure and arrest today. Payment must be made by wire transfer, gift card codes, or in some cases cryptocurrency ATM. You are told to stay on the line while you travel to a store to purchase gift cards, to ensure you do not speak to anyone who might discourage the payment.\n\nSome variants are preceded by a fake IRS letter sent by email or post, establishing the impression of a legitimate correspondence trail before the call reinforces the urgency. The letter may include real-looking IRS letterhead and case numbers.\n\nThe IRS sends written notices before any collection action. It never demands immediate payment by phone without prior written notice, never specifies a single payment method, and never threatens same-day arrest for a tax matter. Any call with these features is fraud.","redFlags":["A caller claims to be from the IRS and demands immediate payment","Arrest or asset seizure is threatened for the same-day if payment is not made","Payment by gift card, cryptocurrency, or wire transfer is required","The caller tells you to stay on the phone while you go to purchase gift cards","You have received no prior written notice from the IRS about this alleged debt","Caller ID shows an IRS phone number — this can be spoofed"],"whatToDoNow":["Hang up — the IRS will never escalate a tax matter to arrest threats by phone without prior written notice","Look up your actual tax balance at irs.gov using your own login","Report the call to the Treasury Inspector General for Tax Administration (TIGTA)","If gift cards were purchased and codes given, call the card issuer immediately","Report to the FTC at ReportFraud.ftc.gov","If you shared financial account details, contact your bank and monitor accounts"],"faq":[{"question":"What does a real IRS notice look like?","answer":"Real IRS correspondence arrives by postal mail on IRS letterhead with a notice number you can look up on irs.gov. It provides a deadline, the amount owed, and instructions that allow you to dispute or pay through multiple official channels."},{"question":"Can the IRS arrest me over the phone?","answer":"No. IRS collection actions follow an established legal process with multiple written notices and the right to dispute. Arrest warrants are issued through courts, not over the phone by revenue agents."},{"question":"Why do gift card scams target IRS impersonation specifically?","answer":"Tax fear is universal and acute. The implied legal threat creates pressure that overrides normal caution. Gift cards convert cash to an untraceable, irreversible form quickly."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-inheritance-scam-work","url":"https://scamencyclopedia.org/questions/how-does-inheritance-scam-work","question":"How does an inheritance notification scam work?","shortAnswer":"Inheritance scams inform victims of a large unclaimed estate supposedly linked to their family name, requiring fees to process a claim that will never materialise.","explanation":"The contact arrives by letter or email from a person identifying themselves as a banker, solicitor, or estate administrator. They have identified an unclaimed estate belonging to someone with your surname who died without known heirs. A substantial sum is described. They offer to split the estate if you pose as the distant relative, or they explain that you are genuinely entitled and simply need to process the paperwork.\n\nThe mechanics then follow the advance-fee model. Legal fees, probate costs, inheritance taxes, currency conversion charges, and transfer fees are required in sequence. Each payment resolves one obstacle and creates the next. The correspondence is detailed and official-looking, with fake court orders, bank statements, and certificate templates adding weight.\n\nSome operations use real estate cases: a genuine unclaimed estate is publicly identified through death notices or probate records, and the scammer contacts anyone with the same surname as the deceased. The estate is real; the scammer's role in accessing it and the required fees are not.\n\nVariants target people who have recently lost a relative: a contact claims the deceased had a secret foreign account and offers to help access it for a fee. Grief reduces scepticism, and the promise of unexpected money eases the financial stress of bereavement.","redFlags":["An unsolicited contact informs you of an inheritance from someone you do not know","Processing fees, legal costs, or taxes must be paid before the funds are released","You are asked to pose as a relative or provide identity documents for a claim","The solicitor or banker's firm cannot be independently verified","The estate is in a country you have no family connection to","New fee requirements appear each time the previous one is paid"],"whatToDoNow":["Do not pay any fee — legitimate estate distributions deduct costs from the estate, not from the claimant upfront","Verify the contact by searching for the law firm or bank on official registers independently","Report to your national consumer protection authority","If you have shared identity documents, place a fraud alert with credit bureaus","Be especially cautious of follow-on contacts offering to help recover money already paid"],"faq":[{"question":"Do real estates sometimes contact strangers as potential heirs?","answer":"Occasionally, genealogy and heir-search firms do locate distant relatives for genuine unclaimed estates. Legitimate firms are paid from the estate as a percentage of the recovered funds — they never ask for upfront payment from the heir."},{"question":"How does the scammer know my surname for a 'matching' estate?","answer":"Most operations mass-mail common surnames without any specific knowledge. The plausibility of the match is coincidental. In some cases public death records are used to target specific surnames more precisely."},{"question":"What are the documents in these scams made from?","answer":"Templates for fake court orders, official stamps, and legal certificates are widely available and can be made to look convincing. Always verify the authority independently rather than accepting documents at face value."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-immigration-visa-scam-work","url":"https://scamencyclopedia.org/questions/how-does-immigration-visa-scam-work","question":"How does an immigration or visa scam work?","shortAnswer":"Immigration scams charge fees to process visas, residency, or work permits that are either fake or obtainable cheaply through official channels — exploiting the complexity of immigration law and the stakes of relocation.","explanation":"Fake immigration advisers present themselves as lawyers or accredited consultants. They may advertise through ethnic community networks, social media, or search results. They charge substantial fees to prepare and submit applications that the applicant could file themselves for the official government fee. In some cases they take the money but never file anything, leaving the applicant unaware they have no live application until a deadline passes.\n\nVisa guarantee scams promise a specific visa outcome — a work visa, permanent residency, or citizenship — for a higher fee. No legitimate lawyer can guarantee a visa outcome. The guarantee is meaningless. If the application fails, refund clauses are buried in opaque terms or the company has dissolved by the time the client seeks their money back.\n\nWork visa scams target economic migrants with fraudulent job offers that come bundled with visa-processing fees. The job does not exist. The visa application may be filed but the supporting documents — job offer letters, pay slips, company registrations — are forged. If approved, the worker arrives to find no employer. If rejected, the fees are gone and the applicant may have provided false information to immigration authorities.\n\nLottery scam variants claim the victim won a diversity visa lottery they never entered. The lottery is real and free; the scammer charges to 'process' a win the victim did not have.","redFlags":["A consultant or lawyer guarantees a specific visa outcome","Fees are charged that significantly exceed official government filing fees","The adviser is not on a recognised legal or immigration adviser register","A job offer comes with a requirement to pay visa processing fees yourself","A lottery win is announced for a programme you did not enter","Official documents requested by the adviser include forged employer letters or fake income statements"],"whatToDoNow":["Verify any immigration adviser on your national regulator's official accreditation list","Check official government immigration sites for the real application process and fees","Request file copies of all documents submitted on your behalf","Report unregistered advisers to your national immigration authority","If documents were forged, seek legal advice immediately about correcting the record","Report to your consumer protection authority with all receipts and correspondence"],"faq":[{"question":"How do I check if an immigration adviser is accredited?","answer":"In the US, check EOIR's list of accredited representatives. In the UK, use the OISC register. In Australia, use MARA. Each country maintains a public list of authorised representatives."},{"question":"Can a lawyer guarantee a visa will be approved?","answer":"No. A lawyer can advise on your eligibility and prepare the strongest possible application, but approval is decided by the immigration authority. Anyone who guarantees approval is either lying or describing a fraudulent arrangement."},{"question":"What if I already used a fake adviser and my application was never filed?","answer":"Contact the immigration authority directly to check your application status. If nothing was filed, you may be able to reapply. Report the adviser immediately — others may be in the same situation."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-ai-voice-clone-scam-work","url":"https://scamencyclopedia.org/questions/how-does-ai-voice-clone-scam-work","question":"How does an AI voice cloning scam work?","shortAnswer":"AI voice cloning scams synthesise a convincing imitation of a known person's voice from publicly available audio, then use it to make emergency requests or authorise transactions in calls to family members or colleagues.","explanation":"Modern voice synthesis tools can generate a realistic voice model from a few seconds of audio — a clip from a social media video, a voicemail message, or a public speech. The resulting synthetic voice can say anything, in real time or from a recording, and is often indistinguishable from the real person by someone who knows them well.\n\nIn the family emergency variant, the cloned voice of a child or young adult calls a parent or grandparent claiming to be stranded, hurt, or in trouble. The caller sounds exactly like the person, may reference real personal details scraped from social media, and requests urgent cash, a wire transfer, or gift card codes. A second voice — the 'police officer' or 'lawyer' — confirms the story.\n\nIn the business variant, the cloned executive voice calls a finance team member directly or is used in a video call to authorise a wire transfer. This is the deepfake CEO fraud described separately, with the addition of voice-specific synthesis rather than visual.\n\nThe technology is improving faster than detection. The reliable defence is not attempting to identify the synthetic voice but to apply a pre-agreed out-of-band verification: hang up and call back on a number you independently possess. A family 'code word' known only to members is a simple and effective safeguard.","redFlags":["A voice call from a known person makes an urgent request out of character with how they normally communicate","The request involves money and discourages verifying through any other channel","The voice sounds familiar but slightly flat, lacks natural fillers, or responds with brief answers","A third party quickly joins the call to add authority and discourage questioning","The call comes from an unexpected number or is a voice message rather than an interactive call"],"whatToDoNow":["Hang up and call the person back on their known number independently","Establish a family or workplace 'code word' to verify identity in emergency calls","Do not rely on caller ID or voice alone to authorise any financial request","Report the call to your national cybercrime authority","If money was sent, contact your bank immediately and report to fraud authorities","Limit publicly available audio of family members on social media — especially children"],"faq":[{"question":"How much audio does an AI need to clone a voice?","answer":"Commercially available tools can generate convincing results from as little as three to ten seconds of audio. Longer samples improve quality but are not required."},{"question":"Can voice detection software identify a synthetic voice?","answer":"Detection tools exist but are imperfect, particularly for real-time calls. Procedural verification — calling back independently — is more reliable than detection technology at this stage."},{"question":"Should I remove voice content from social media?","answer":"Reducing the volume of publicly available audio reduces risk. However, voice data from past interactions (voicemails, public events) may already be accessible. The code-word protocol addresses this for family emergencies."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-money-mule-scheme-work","url":"https://scamencyclopedia.org/questions/how-does-money-mule-scheme-work","question":"How does a money mule scheme work?","shortAnswer":"Money mule schemes recruit ordinary people to receive and forward fraudulent payments through their own bank accounts, unknowingly laundering criminal proceeds and exposing themselves to criminal liability.","explanation":"Recruitment happens in several ways. A fake job offer promises easy money for a work-from-home 'payment processing' role. A romance partner asks a favour — receive a transfer and forward it on, keeping a commission. A social media ad offers quick cash for 'financial service' work. In all cases, the actual function is the same: the recruited person's clean bank account is used as a pass-through to distance stolen funds from their origin.\n\nThe mule receives money — often from fraud or theft against other victims — and is instructed to keep a percentage and forward the rest by wire transfer, cryptocurrency, or cash. Each hop through a new account makes tracing harder. The mule may not initially understand what they are doing, but the signals are present: the explanation for the transfers is vague, the payment is unusually generous, and secrecy is encouraged.\n\nBanks identify mule accounts through transaction pattern analysis. Accounts are frozen, balances held, and in serious cases criminal charges are pursued. The 'I did not know' defence is available but not guaranteed — prosecutors consider whether a reasonable person should have suspected the activity. Young people and students are frequently targeted because their accounts appear low-risk to fraud algorithms.\n\nSome mules are themselves victims: people in financial distress, romance scam victims doing 'a favour', or people exploited by criminal networks under duress. The harm includes criminal conviction, bank account closure across the banking sector, and difficulty accessing financial services for years.","redFlags":["A job offer pays unusually well for receiving and forwarding money with no other duties","A romantic partner asks you to receive money and forward it to another account","You are told to keep a percentage and send the rest — the explanation for this is vague","Secrecy is emphasised — do not tell your bank what the payments are for","Large transfers arrive from unknown third parties","You are asked to convert funds to cryptocurrency or cash before forwarding"],"whatToDoNow":["Stop immediately if you are receiving and forwarding money for a third party without a clear legitimate purpose","Contact your bank and explain the situation honestly — cooperation reduces legal exposure","Seek legal advice before speaking to law enforcement","Report the person who recruited you to your national cybercrime authority","Do not spend any retained portion — it is proceeds of crime","Be aware that being a victim (of a romance or job scam) who was recruited may be treated as mitigation but not immunity"],"faq":[{"question":"Can I be prosecuted for being a money mule if I did not know?","answer":"In some jurisdictions, yes, if prosecutors can show you were wilfully blind to obvious signs. The safest course is to stop immediately, report voluntarily, and seek legal advice."},{"question":"What happens to my bank account if I am identified as a mule?","answer":"Your account will likely be frozen and possibly closed. The bank may share information with other banks, making it harder to open new accounts. The impact can last years."},{"question":"How do criminal networks find money mules?","answer":"Through fake job boards, social media ads, romance relationships, and word of mouth within vulnerable communities. University students, recent immigrants, and people in debt are frequently targeted."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-account-takeover-scam-work","url":"https://scamencyclopedia.org/questions/how-does-account-takeover-scam-work","question":"How does an account takeover scam work?","shortAnswer":"Account takeover fraud combines stolen credentials, social engineering, and real-time interception of security codes to permanently seize control of email, banking, or social media accounts.","explanation":"The process typically starts with credentials obtained from data breaches, phishing, or malware. A fraudster tests these logins across multiple platforms in a process called 'credential stuffing'. When a match is found, the first target is usually email — because email access enables resetting almost every other account by intercepting the verification link.\n\nIf two-factor authentication is active, the fraudster uses one of several bypass methods: a phishing page that proxies the real login in real time (harvesting the one-time code as the user enters it), a SIM swap to intercept SMS codes, or social engineering the platform's support team to grant access. Support impersonation typically involves presenting an email address, full name, and date of birth sourced from earlier breaches.\n\nOnce inside, the fraudster changes the recovery email and phone number, locking the legitimate owner out. For a banking account, they transfer funds, change delivery addresses for cards, or request credit increases. For a social account, they may extort the owner or use the account to run scams on the victim's contacts.\n\nReal-time account takeover has become faster as fraudster toolkits automate the steps from credential acquisition to account change. The window for the legitimate owner to notice and respond is sometimes measured in minutes.","redFlags":["You receive a password-reset email you did not request","Login notifications arrive from unfamiliar devices or locations","Your account recovery email or phone number has been changed without your action","Friends report receiving strange messages from your accounts","You are suddenly locked out of accounts that were working moments ago","A platform support request arrives that you did not initiate"],"whatToDoNow":["Use a unique, strong password for every account — a password manager makes this practical","Enable multi-factor authentication on all critical accounts, preferring an authenticator app over SMS","If locked out of an account, use official account recovery processes immediately","Check all linked recovery emails and phone numbers after recovering access","Notify contacts if your account sent messages you did not write","Monitor financial accounts for transactions you do not recognise"],"faq":[{"question":"If my email is taken over, what else is at risk?","answer":"Almost everything that uses email for password recovery: banking, social media, shopping accounts, crypto, cloud storage, and anything else linked to that email address."},{"question":"Is SMS two-factor authentication better than nothing?","answer":"Yes, significantly. SMS codes stop the majority of automated credential-stuffing attacks. Authenticator apps and hardware keys are stronger, but SMS is a meaningful improvement over no MFA."},{"question":"How do I know if my email has been in a breach?","answer":"Use a reputable breach-notification service such as Have I Been Pwned (haveibeenpwned.com) to check your email address against known breach databases."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-funeral-obituary-scam-work","url":"https://scamencyclopedia.org/questions/how-does-funeral-obituary-scam-work","question":"How does a funeral or obituary scam work?","shortAnswer":"Fraudsters monitor obituaries to target grieving families with fake bills from suppliers, fake debt collectors claiming the deceased owed money, or fraudulent bereavement support services.","explanation":"Obituaries are publicly accessible and provide a wealth of useful detail: the deceased's name, surviving family members, and sometimes occupation and address. Fraudsters systematically monitor these notices and use the information to contact grieving families at their most vulnerable moment.\n\nFake supplier billing is one approach: a company contacts the family claiming the deceased had an outstanding balance with a florist, landscaping firm, or other service — the family, uncertain of all the deceased's accounts, often pays without verifying. Some fraudsters send authentic-looking invoices referencing plausible services.\n\nDebt collection fraud is more aggressive: a caller claims the deceased had an unpaid personal loan or credit card and that family members are responsible. In most jurisdictions, family members are not responsible for a deceased person's unsecured debts unless they co-signed. The fraudster counts on the family not knowing this.\n\nBereavement services fraud sells overpriced or worthless grief support packages to newly bereaved people. Some operations pose as government programmes offering benefits that do not exist. Others upsell expensive afterlife 'registrations' or legacy documents with no legal standing.","redFlags":["An unsolicited bill or invoice arrives for services shortly after a bereavement","A debt collector claims family members are legally responsible for the deceased's debts","A caller references the obituary or specific details about the deceased","A 'bereavement service' contacts you unsolicited offering to handle legal or financial matters for a fee","The invoice amount is modest enough to seem not worth disputing"],"whatToDoNow":["Do not pay any bill that you cannot independently verify the deceased actually incurred","Request written proof of debt from any collector before paying anything","Consult an estate lawyer — in most jurisdictions unsecured debts die with the person","Report fraudulent bills and fake debt collectors to your consumer protection authority","Alert other family members so everyone is aware of the potential for such contact","Limit personal details in public obituaries where culturally appropriate"],"faq":[{"question":"Am I responsible for my parent's debts when they die?","answer":"Generally no, unless you co-signed the debt. Unsecured debts are usually settled from the estate. Consult a local estate lawyer for advice specific to your jurisdiction."},{"question":"How do scammers find obituaries?","answer":"Obituaries are published on funeral home websites, local newspaper sites, and online memorial platforms. Automated scraping tools can collect these en masse for targeting."},{"question":"Can a fraudulent invoice be reported even if I did not pay it?","answer":"Yes. Report to your consumer protection authority even if you identified the fraud before paying. It helps authorities track the operation and warn others."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-qr-code-scam-work","url":"https://scamencyclopedia.org/questions/how-does-qr-code-scam-work","question":"How does a QR code scam work?","shortAnswer":"QR code scams replace legitimate codes with fraudulent ones that redirect to phishing pages, fake payment portals, or malware downloads — exploiting the user's inability to read a QR code before scanning.","explanation":"A QR code is an opaque link: unlike a URL you can read before clicking, a QR code reveals its destination only after the camera has scanned it. Fraudsters exploit this by placing fraudulent QR codes over legitimate ones in physical locations — restaurant menus, parking payment notices, public information boards, and charity donation stands are all documented targets.\n\nIn parking payment fraud, a sticker with a fake QR code is placed over the real one on a parking meter or pay-and-display machine. Drivers who scan to pay are taken to a convincing fake payment portal where card details are harvested. The real fee is never paid, meaning a penalty notice may also follow.\n\nEmail and text-based QR code phishing ('quishing') sends a QR code image in a message impersonating a bank or delivery service. The QR code bypasses many email security filters that scan hyperlinks but do not process image-embedded URLs. Scanning opens a phishing page requesting credentials or payment details.\n\nMalicious QR codes can also trigger automatic app installation, pre-fill a message to be sent, or connect a device to a fraudulent network depending on the platform. The attack surface is wide because most people do not verify a QR code's destination before acting on it.","redFlags":["A QR code in a public place looks like it has been applied as a sticker over an existing surface","Scanning a code takes you to a site that asks for payment or login details unexpectedly","The URL displayed after scanning does not match the organisation whose code you scanned","A QR code in an email or text message requests urgent account or payment verification","The code destination URL is a shortened link that obscures the actual domain"],"whatToDoNow":["Check physical QR codes for signs of tampering — peeling stickers or misaligned placement","Preview the destination URL before opening it after scanning","Type the organisation's official address directly into your browser instead of using a QR code for payments","If you entered payment details on a suspicious page, contact your bank immediately","Report tampered QR codes to the venue or local authority responsible for the location","Report quishing emails to the impersonated organisation and your email provider"],"faq":[{"question":"Are QR codes at restaurants safe to use?","answer":"Most are. The risk is specifically with codes that appear to have been added externally — on stickers that could be placed by anyone. Codes printed directly on the table or menu by the establishment are lower risk."},{"question":"Can my phone get hacked just by scanning a QR code?","answer":"A QR code alone cannot execute code on your device. Harm occurs when the destination URL leads to a phishing page or triggers an automatic action you confirm. Keep your OS and browser updated to reduce exploitation risk."},{"question":"What is 'quishing'?","answer":"Quishing is phishing conducted through QR codes embedded in emails or messages. The term combines QR and phishing. It is growing because QR images bypass the URL-scanning filters many email security tools use."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-bank-impersonation-scam-work","url":"https://scamencyclopedia.org/questions/how-does-bank-impersonation-scam-work","question":"How does a bank impersonation scam work?","shortAnswer":"Bank impersonators use spoofed phone numbers and insider-level personal detail to convince victims their account is under attack, then direct them to move money to a 'safe account' controlled by the fraudsters.","explanation":"The call arrives from a number that matches the bank's genuine helpline — often displayed on the back of the victim's card. The caller sounds professional and knowledgeable, using terminology and account details that feel authentic. They explain that the victim's account has been compromised: suspicious transactions have been detected and the money must be moved immediately to a secure holding account pending investigation.\n\nThe target is then walked through a transfer process, either via online banking or by visiting a branch. Some victims are told to collect cash and hand it to a 'security officer' or 'courier'. Others are guided to move funds to a new account set up with the same bank. In all cases, the destination account is controlled by the fraudster.\n\nThe personal detail that gives the call credibility often comes from data breaches or phishing. Fraudsters may know the last four card digits, recent transaction amounts, or the victim's address. Real bank fraud teams do have this information, so its presence does not distinguish a real call from a fraudulent one.\n\nReal banks never ask customers to transfer money to a 'safe' account. Real fraud investigations are handled entirely within the bank's systems without requiring the customer to move funds. Any such instruction is fraudulent regardless of how the caller sounds or what information they hold.","redFlags":["A caller claims to be from your bank and says your account has been compromised","You are instructed to move funds to a new or 'safe' account immediately","A courier arrives to collect cash from your home as part of a 'security process'","The caller urges secrecy — do not tell branch staff what the call is about","The caller asks you to download a remote-access app to 'check' your account","Caller ID shows your bank's genuine number"],"whatToDoNow":["Hang up and call your bank directly using the number on your card or official website","Do not use any number the caller provides — it may route back to the fraudsters","Your bank will never ask you to move money to a 'safe account'","If a courier collects cash, report to police and your bank immediately","If funds have been transferred, your bank's fraud team can assess potential recovery","Report to your national consumer protection authority and fraud reporting service"],"faq":[{"question":"If the caller ID shows my real bank's number, is the call safe?","answer":"No. Caller ID spoofing is simple and cheap. Fraudsters regularly display genuine bank numbers to add credibility. Always hang up and call your bank independently to verify."},{"question":"What is an 'authorised push payment' (APP) fraud?","answer":"APP fraud occurs when you are manipulated into authorising a transfer yourself. Because you authorised the payment, banks historically did not always reimburse losses. Regulations in many countries now require banks to reimburse victims in more cases."},{"question":"How do fraudsters know details about my account?","answer":"From previous data breaches, smishing messages that you may have responded to, or the dark-web purchase of profiles built from multiple leaked databases. Partial knowledge is used to establish the impression of full legitimate access."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-scholarship-grant-scam-work","url":"https://scamencyclopedia.org/questions/how-does-scholarship-grant-scam-work","question":"How does a scholarship or grant scam work?","shortAnswer":"Scholarship scams guarantee awards that require an application fee, or notify victims of a grant they won without applying, then charge processing fees that accumulate before the money never arrives.","explanation":"The fraudulent contact either arrives in response to a real scholarship search (via a lookalike website in paid search results) or arrives unsolicited — a letter or email stating the recipient has been selected for an award. The legitimacy of the notification is reinforced with an official-sounding name: a foundation, a civic organisation, a government programme.\n\nThe application or claim requires a fee: processing, insurance, administration, or a refundable deposit. This fee is modest relative to the stated award. After payment, documentation requirements escalate — more forms, more fees. Some operations never progress beyond fee collection. Others string the victim along for months before the award is explained away by the victim failing an unstated requirement.\n\nStudent borrowers facing loan pressure are particularly targeted by grant scams that promise to apply for debt-relief grants on their behalf. These operations are variants of the student loan scam, collecting fees to access programmes that either do not exist or are freely available through official channels.\n\nYoung people applying to college and their parents are a high-volume target market. The financial anxiety around tuition makes the promise of a scholarship psychologically compelling enough to lower scrutiny.","redFlags":["A scholarship requires an application fee","You are notified of an award for a programme you did not apply to","The sponsoring organisation cannot be verified independently","Fees escalate through the 'acceptance' process","You are guaranteed to win or told you have been 'pre-selected'","The contact asks for your Social Security number or banking details early in the process"],"whatToDoNow":["Never pay to apply for or receive a scholarship — legitimate scholarships do not charge fees","Verify the organisation by searching for it on official charity or foundation registers","Report fraudulent scholarship offers to your consumer protection authority","Use your school's financial aid office to identify legitimate scholarship sources","If personal information was shared, consider a credit bureau fraud alert","Report to the FTC (US) or equivalent national authority"],"faq":[{"question":"Do real scholarships ever contact students directly?","answer":"Some legitimate programmes do send targeted invitations to eligible students, but they never charge fees and can always be verified through the sponsoring institution's official website."},{"question":"What is a 'scholarship search service' scam?","answer":"Some companies charge fees to search scholarship databases on your behalf. Legitimate scholarship databases (such as Fastweb or Scholarships.com) are free. Paying for this service provides no advantage over free tools."},{"question":"Can I recover a scholarship application fee paid to a scam?","answer":"If paid by credit card, file a chargeback. Report to your consumer protection authority. For small sums, small claims court is also an option if the operator can be identified."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-copycat-website-scam-work","url":"https://scamencyclopedia.org/questions/how-does-copycat-website-scam-work","question":"How does a copycat or lookalike website scam work?","shortAnswer":"Copycat websites mirror legitimate government, banking, or retail sites to harvest login credentials, collect payment for services available free elsewhere, or sell counterfeit goods under a credible brand.","explanation":"A copycat site is built to visually replicate a trusted original. The operator registers a domain name that is one character different from the real one, uses a lookalike top-level domain (e.g. .org instead of .gov), or inserts additional words (e.g. 'official-service-renew.com'). The page design, logos, and content are copied directly. Search engine advertisements may place the fake site above the genuine one for relevant queries.\n\nGovernment service copycats are particularly effective because many people are uncertain what official government websites look like. These sites charge fees to process applications for passports, driving licences, visa forms, or benefit claims that are either free or much cheaper through official channels. The application itself may be submitted — or may never be.\n\nBanking copycats harvest login credentials and two-factor codes. Retail copycats take payment for goods that arrive as cheap counterfeits, do not arrive at all, or harvest card details for further fraud. In all cases the victim believes they are on a legitimate site.\n\nSome copycat operations target victims after other frauds: fake courts, fake law firms, and fake asset recovery agencies use professional-looking websites to add legitimacy to their demands.","redFlags":["The URL contains extra words, hyphens, or a different domain extension from the real site","You arrived via a paid search advertisement rather than by typing the address directly","A government or bank service that is normally free charges a fee on this site","The SSL certificate is present but issued to a company name different from the expected one","The page design is identical to a well-known site but the URL does not match","Contact information or terms of service are thin or absent"],"whatToDoNow":["Always type government or bank website addresses directly rather than clicking search result links","Check the URL bar carefully before entering any credentials or payment information","Verify government service fees on official guidance pages before paying any site","If you entered credentials on a copycat site, change your password immediately","Report copycat sites to the brand they impersonate and to your national cybercrime agency","Contact your bank if payment details were entered on a site you now suspect was fraudulent"],"faq":[{"question":"Does a padlock icon in the browser mean the site is safe?","answer":"No. The padlock means the connection is encrypted, not that the site is legitimate. Fraudulent sites routinely use HTTPS and display the padlock. Check the URL, not the padlock."},{"question":"How do copycat sites appear above real ones in search results?","answer":"By purchasing paid search advertisements. The organic search algorithm may rank the real site higher, but paid ads appear first. Always look critically at the URL of top search results."},{"question":"Can I report a copycat site to have it removed?","answer":"Yes. Report to the registrar of the fraudulent domain, the hosting provider, the search engine displaying ads for it, and your national cybercrime agency. Removal speed varies but reports help."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-energy-switching-scam-work","url":"https://scamencyclopedia.org/questions/how-does-energy-switching-scam-work","question":"How does an energy switching or savings scam work?","shortAnswer":"Energy switching scams collect sign-up fees or personal data under the pretence of switching your utility to a cheaper tariff, without actually completing any switch or using a legitimate comparison service.","explanation":"Scammers cold-call homeowners or visit doorstep, claiming to be from an energy savings programme or comparison service. They offer to review your current tariff and switch you to a cheaper deal. The presentation is persuasive and includes real-looking charts or printed comparisons. An upfront admin fee or 'switching fee' is requested — no legitimate energy comparison service charges this.\n\nSome operations do submit a switch, but to a more expensive tariff where the fraudster receives a commission. Others collect bank direct-debit details and make unauthorised payments. The most basic variant simply takes the fee and delivers nothing.\n\nDoor-to-door energy sales have historically been a high-fraud area even among nominally legitimate operations, because aggressive sales techniques and misleading comparisons have been used by registered companies as well as outright fraudsters. The regulatory environment has tightened in many countries, but the approach continues.\n\nData-harvesting variants use a fake comparison site that collects your energy usage details, account number, and bank details under the pretence of finding you a better deal. This information is used for identity fraud or sold to other parties.","redFlags":["A cold caller asks for upfront payment to switch your energy tariff","A door-to-door visitor pressures you to sign immediately without time to verify","The comparison shown lists providers you cannot verify independently","The visitor or caller cannot provide regulatory identification or accreditation","Bank details are requested before any switch is formally confirmed in writing","The offer is significantly better than any you can find on legitimate comparison sites"],"whatToDoNow":["Never pay an upfront fee to switch energy — legitimate switching services are free to consumers","Use your national energy regulator's approved comparison service rather than cold-caller recommendations","Ask any door-to-door caller for their company's regulatory reference and verify it before engaging","If bank details were given, contact your bank immediately","Report to your energy regulator and national consumer protection authority","You have the right to cancel most door-to-door sales within a cooling-off period — check your country's rules"],"faq":[{"question":"Are all doorstep energy sales fraudulent?","answer":"No. Legitimate energy companies do use doorstep sales in some markets, but they are regulated, cannot charge switching fees, and must provide a cancellation period. The fraud indicators are urgency, upfront fees, and inability to verify credentials."},{"question":"What is the cooling-off period for doorstep sales?","answer":"In the EU and UK it is 14 days. In the US it varies by state but is commonly three days for doorstep contracts. You can cancel without penalty during this period."},{"question":"Can a scammer actually switch my energy supply without my consent?","answer":"Slamming — unauthorised switching — does occur. Monitor your energy bills for confirmation of any switch you did not initiate, and contact your supplier immediately if you identify one."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-survey-reward-scam-work","url":"https://scamencyclopedia.org/questions/how-does-survey-reward-scam-work","question":"How does a survey or reward points scam work?","shortAnswer":"Survey scams promise gift cards or cash for completing questionnaires but require shipping fees, credit card details, or app installations before any reward is delivered — and the reward never arrives.","explanation":"Survey reward scams appear as social media posts, targeted ads, or messages claiming you have been selected for a research panel, loyalty programme, or brand promotion. Completing a short survey earns you a gift card, smartphone, or cash reward. The survey itself is real — it provides the operator with demographic and contact data, which has its own commercial value independent of the fraud.\n\nAt the claim step, a nominal shipping fee is required: typically a few dollars or pounds. This is processed by a payment page that harvests full card details. The fee itself may recur as an ongoing subscription under terms not clearly displayed. Some variants require app installation as a 'verification' step, delivering malware. Others require account creation with personal details that are compiled and sold.\n\nThe reward never arrives, or a low-value voucher arrives to provide a token of legitimacy while the full card details collected are used for further fraud. Some operations rotate the reward just out of reach — you are almost at the required 'points' to redeem, requiring one more survey or referral.\n\nHighly targeted variants mimic genuine market research panels. Legitimate panels do pay for surveys but never request payment from the participant and do not require credit card details for identity verification.","redFlags":["A survey promises a high-value reward — phone, gift card, cash — for a few minutes of your time","A shipping or processing fee is required before the reward is sent","Full credit card details are requested for what is described as a nominal charge","An app must be installed to receive the reward","The reward is from a well-known brand but the survey platform has no affiliation with them","You are asked for more personal details than the survey topic would logically require"],"whatToDoNow":["Do not enter card details for a 'shipping fee' on a survey reward site","If card details were entered, monitor for recurring charges and request a card replacement if necessary","If an app was installed, uninstall it and run a security scan","Report to the platform where the survey was promoted","Report to your national consumer protection authority"],"faq":[{"question":"Are any survey reward panels legitimate?","answer":"Yes. Legitimate panels include Swagbucks, Prolific, and YouGov, among others. They pay modest amounts for survey time and never ask for payment or card details."},{"question":"Why do survey scams still collect survey answers?","answer":"The demographic and psychographic data from survey responses has commercial value and can be sold. The scam thus profits from both the data collected and any payment or malware installation."},{"question":"Can a small shipping fee really be a scam entry point?","answer":"Yes. The fee's value is less important than the card details it harvests. A small charge is often followed by recurring subscription charges under terms visible only in fine print."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-nft-scam-work","url":"https://scamencyclopedia.org/questions/how-does-nft-scam-work","question":"How does an NFT or digital collectible scam work?","shortAnswer":"NFT scams create artificial hype around low-value or nonexistent digital assets using fake celebrity endorsements, wash trading, and rug pulls — leaving buyers with worthless tokens.","explanation":"An NFT project launches with a professionally produced website, a Discord community, and a roadmap promising exclusive benefits, a gaming integration, or physical merchandise. Artificial scarcity and countdown timers create urgency. Celebrity endorsements — sometimes fabricated, sometimes purchased from genuine celebrities unaware of the project's intent — add credibility. The minting price is set at a level that feels accessible.\n\nWash trading inflates apparent demand: the operator or a colluding network buys and sells tokens between controlled wallets at escalating prices. Public marketplaces display this activity as genuine secondary market demand, encouraging real buyers to purchase at the inflated level. Once enough external buyers are in, the coordinated selling begins and prices collapse.\n\nThe rug pull variant involves the project team draining the liquidity pool or community treasury once a target has been raised, then deleting Discord, Twitter, and the website. No roadmap items are delivered. Buyers hold tokens with no utility and no market.\n\nPhishing is also endemic to the NFT space: fake 'exclusive mint' links, Discord announcements from compromised moderator accounts, and counterfeit marketplace sites all route users to wallet-draining contracts. One transaction approval on a malicious contract can transfer the victim's entire wallet contents to the attacker.","redFlags":["Celebrity endorsements cannot be independently verified as genuine","Roadmap benefits are vague or undeliverable within the stated timeframe","Secondary market trading volume looks high but involves the same small set of wallets","Urgency is emphasised heavily with countdown timers and limited supply messaging","A link in Discord or Twitter announces an unexpected exclusive mint","The team is anonymous with no verifiable professional history"],"whatToDoNow":["Research the project team's verifiable public history before minting","Check secondary market wallet diversity — wash trading is visible in on-chain data","Never click mint or claim links from Discord or Twitter without verifying on the project's official website","Revoke wallet approvals from contracts you do not recognise using a revocation tool","Report rug pulls to the marketplace and your national financial regulator","Accept that NFT losses are almost never recoverable once the rug occurs"],"faq":[{"question":"What is a 'rug pull' in NFTs?","answer":"A rug pull is when project founders abandon a project after raising funds, deleting social channels and websites. Investors are left with tokens that have no market or utility."},{"question":"Can I report an NFT scam to law enforcement?","answer":"Yes. Rug pulls and wash trading are increasingly investigated as fraud. File reports with your national financial regulator and cybercrime unit including smart contract addresses and transaction evidence."},{"question":"What is wallet draining and how does it work?","answer":"A malicious smart contract requests a broad spending approval in your wallet. Once approved, it can transfer any token or NFT you hold. This approval is indistinguishable from a legitimate approval — verify every transaction before signing."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-credit-repair-scam-work","url":"https://scamencyclopedia.org/questions/how-does-credit-repair-scam-work","question":"How does a credit repair scam work?","shortAnswer":"Credit repair scams charge upfront fees to 'fix' credit reports using methods that are either ineffective, illegal, or available for free directly from the credit bureau.","explanation":"The pitch targets people with damaged credit who are struggling to access loans, housing, or employment. The company promises to remove negative items, boost scores quickly, or create a new credit identity. The service is presented as proprietary and expert — implying that what they can do is beyond the consumer's own reach.\n\nIn reality, negative but accurate information on a credit report cannot be legally removed before its statutory expiry date regardless of who requests it. Legitimate dispute processes that do apply — challenging genuinely inaccurate entries — are free and available directly from the credit bureaus. The company charges for nothing that could not be done free of charge, or nothing at all.\n\nIllegal variants instruct consumers to apply for a new Employer Identification Number (EIN) from the IRS and use it as a substitute for their SSN on new credit applications, creating a 'clean' credit identity. This is a federal crime. The consumer, not the 'credit repair' company, faces prosecution.\n\nSome operations collect personal and financial details through the sign-up process and use them for identity fraud separately from any credit-repair activity.","redFlags":["The company guarantees a specific credit score improvement","Upfront fees are charged before any service is performed","You are instructed to dispute all negative items regardless of accuracy","A new identification number is suggested as a way to start fresh","The company discourages you from contacting credit bureaus directly","The service cannot explain specifically which inaccurate items it will dispute"],"whatToDoNow":["Obtain your free credit reports from the official national credit bureau service","Dispute genuinely inaccurate entries directly with the credit bureau at no cost","Report fraudulent credit repair companies to your consumer protection authority","If an EIN was used as a fake SSN, seek legal advice immediately","If you paid upfront fees, dispute the charge with your card provider","Seek free credit counselling through a nonprofit debt advisory organisation"],"faq":[{"question":"Can anyone legally remove accurate negative items from my credit report?","answer":"No. Accurate negative information stays on a credit report for a defined period set by law — typically seven years for most items. No company has the ability to override this legally."},{"question":"What can legitimately improve my credit score?","answer":"Paying bills on time, reducing credit utilisation, avoiding unnecessary new applications, and disputing genuinely inaccurate items directly with credit bureaus. These are free actions."},{"question":"What is a 'credit privacy number' (CPN) scheme?","answer":"A CPN is a number sold as a substitute SSN for credit applications. Using it is identity fraud. People who purchase CPNs believing them to be legal are themselves liable for prosecution."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-social-media-giveaway-scam-work","url":"https://scamencyclopedia.org/questions/how-does-social-media-giveaway-scam-work","question":"How does a social media giveaway scam work?","shortAnswer":"Fake giveaway posts impersonate celebrities, brands, or official accounts to collect entry fees, personal data, or platform permissions — with no prize ever awarded.","explanation":"A post appears on social media announcing a giveaway from a well-known brand, celebrity, or technology company. It offers expensive prizes — phones, holiday packages, cash — in exchange for liking, sharing, following, and tagging friends. The account running it looks official: name, profile image, and verified appearance are copied from the real entity, sometimes using a hacked verified account.\n\nThe engagement mechanics serve multiple purposes. Shares and tags spread the post organically. Follows build an audience the scammer can monetise later. A 'winner selection' link takes entrants to a page requiring email address, phone number, and sometimes credit card details for 'prize claim verification'. The data is harvested and sold or used directly for fraud.\n\nSome giveaways instruct entrants to click a link and 'log in with Facebook/Google' — stealing OAuth tokens that grant access to the connected account. Others install browser extensions or apps as part of the entry process, which then display ads, harvest browsing data, or perform click fraud.\n\nThe prize is never awarded. The account may run many rounds of fake giveaways before being flagged and removed. The operator then starts again on a new account.","redFlags":["A brand or celebrity announces a giveaway with prizes far exceeding normal promotional norms","Entry requires sharing to many people before a specific date — urgency and spread are both engineered","The winner selection link asks for credit card details or full personal information","Logging in with a social account is required to complete entry","The announcing account was created recently despite having a verified-looking appearance","Clicking the entry link requests unusual app permissions"],"whatToDoNow":["Verify real giveaways by checking the official verified account directly, not through a shared post","Never enter a credit card number to claim a prize in a social media giveaway","Revoke app and OAuth permissions you do not recognise in your social account settings","Report fake giveaway accounts to the platform","If personal details were submitted, monitor for phishing and identity fraud attempts","Warn people who may have seen and shared the post"],"faq":[{"question":"Do real brands run social media giveaways?","answer":"Yes. Real giveaways are posted from verifiably official accounts, require only simple entry steps, never ask for payment, and winners are typically contacted privately through a verifiable channel."},{"question":"Why do fake giveaways ask you to tag many friends?","answer":"Each tag spreads the post to the tagged person's network, accelerating organic reach at no advertising cost to the scammer. It also generates a pool of pre-selected warm contacts for follow-on fraud."},{"question":"What is an OAuth token theft in this context?","answer":"Logging in with a social account button generates an access token. A malicious site can use this token to access your account data or post on your behalf, without your knowing your password."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-elder-financial-abuse-scam-work","url":"https://scamencyclopedia.org/questions/how-does-elder-financial-abuse-scam-work","question":"How does elder financial abuse through scams work?","shortAnswer":"Elder financial abuse via scams systematically targets older adults using psychological manipulation, isolation, and manufactured urgency — exploiting cognitive vulnerability, loneliness, and greater accumulated wealth.","explanation":"Scams targeting older adults share structural features across categories: contact is often initiated by phone, urgency prevents verification, and the approach isolates the victim from family or advisers who might intervene. Lottery scams, grandparent scams, romance scams, and government impersonation scams all apply these features with particular effectiveness against older people who answer phone calls, have savings, and may be socially isolated.\n\nCognitive changes that sometimes accompany ageing — reduced processing speed, greater trust, less familiarity with technology — are not signs of weakness but are exploited deliberately. Scam operations train their operators specifically in the psychological dynamics of this demographic. The goal is extended compliance: maintaining contact over days or weeks to maximise extraction across multiple payments.\n\nFinancial abuse also occurs from within: family members, carers, or trusted individuals may exploit access to banking or property. This is distinct from external scams but creates the same harm. Signs overlap: unusual withdrawals, changed wills, added signatories on accounts, or unfamiliar property transfers.\n\nPrevention involves normalising conversations about scams within families before they occur, setting up voluntary account monitoring, and establishing verification protocols ('always call me before sending money to anyone'). Framing these conversations as practical rather than condescending makes them more likely to be accepted.","redFlags":["A parent or elderly relative becomes secretive about phone calls or new financial transactions","Large or unusual withdrawals appear on accounts without clear purpose","A new 'friend' or online relationship has emerged alongside requests for money","Mail from lottery companies, sweepstakes, or financial services begins arriving in quantity","The person seems anxious, confused about recent decisions, or unable to account for savings","A carer or new acquaintance is named on financial documents"],"whatToDoNow":["Have open, non-shaming conversations about common scam types with elderly family members","Offer to set up account alerts for large transactions as a normal protective measure","Establish a family code phrase or callback protocol for any unexpected financial requests","Report suspected elder financial abuse to adult protective services and local law enforcement","Contact the person's bank if you believe they are being manipulated into repeated transfers","Provide peer-reviewed scam awareness resources through community organisations"],"faq":[{"question":"Am I overstepping by checking on an elderly relative's finances?","answer":"Framed as care rather than control, these conversations are welcomed by most older adults once they understand the risk is real. Starting with 'I read about a scam that targeted someone just like you' is often less threatening than a direct question."},{"question":"Can banks help protect older customers from scams?","answer":"Many banks have trained staff and protocols for vulnerable customers, including transaction holds when scam-pattern behaviour is detected. Ask the bank what protections are available for the account."},{"question":"What if an elderly relative insists the relationship or investment is real?","answer":"Avoid confrontation about the belief — it often strengthens rather than breaks the attachment. Focus on the financial transaction: suggest waiting 24 hours or checking with one other person before sending any money."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-charity-romance-combo-scam-work","url":"https://scamencyclopedia.org/questions/how-does-charity-romance-combo-scam-work","question":"How does a charity-romance combination scam work?","shortAnswer":"A charity-romance combo scam uses an emotional relationship to build trust, then requests donations to a fake charitable cause the scammer claims to run — layering the romance and charity fraud mechanics for larger yields.","explanation":"This variant starts like a romance scam: an online relationship develops over weeks through consistent, attentive communication. The difference from a standard romance scam is that the money request is framed as supporting a cause rather than a personal emergency, which feels more altruistic and less suspicious to the victim.\n\nThe fraudster presents themselves as running or deeply involved in a charity — an orphanage, a medical mission, a disaster relief project. Photos and videos of apparent good work are shared. The victim is invited to 'help' by donating, and the amounts start small. The emotional investment in both the relationship and the cause grows simultaneously. Refusing to donate begins to feel like abandoning both the person and vulnerable beneficiaries.\n\nAs with all advance-fee variants, the cause hits complications: funding shortfalls, corrupt local officials, urgent medical needs that only a wire transfer can address. The victim is gradually positioned as the primary financial backer of the operation, with the scammer expressing deep emotional gratitude that reinforces continued giving.\n\nThe harm here is amplified: victims do not just lose money, they lose the belief that they were contributing to something meaningful. Recovery involves acknowledging both the financial and altruistic dimensions of the loss.","redFlags":["An online romantic partner runs or is involved in an overseas charity","Small initial donation requests grow significantly over time","The charity cannot be verified on any national charity register","Urgent crises at the charity require large transfers at short notice","The partner becomes emotionally distant or stressed when donations are declined","All payment is directed through personal accounts rather than official charity channels"],"whatToDoNow":["Verify any charity on your national charity regulator's public register","Do not donate to a cause through a personal account — real charities have official payment channels","Stop all transfers and document all correspondence and transactions","Report to your national charity regulator and fraud authority","Seek emotional support — grief for the relationship and guilt about the cause are both real and deserve acknowledgement","Share the experience with someone you trust to break the isolation dynamic"],"faq":[{"question":"Is it possible that the charity is real but the person is lying about managing it?","answer":"Yes, but rare. Even if a named charity exists, donating through a personal contact rather than official channels means funds do not reach the charity. Verify and donate directly through the charity's official payment page."},{"question":"Why do scammers use charitable causes instead of personal crises?","answer":"A charitable cause adds moral framing that makes refusal feel selfish. It also allows the scammer to continue requesting money without the story growing implausible — there are always more needs."},{"question":"How do I report a fraudulent charity operating overseas?","answer":"Report to your national charity regulator and national fraud authority. Provide the organisation's name, website, and any bank or payment details used. International charity regulators cooperate on cross-border cases."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-payday-loan-scam-work","url":"https://scamencyclopedia.org/questions/how-does-payday-loan-scam-work","question":"How does a payday loan or advance loan scam work?","shortAnswer":"Fake loan companies collect processing fees or insurance payments from people in financial need, then disappear without ever issuing any loan.","explanation":"The scam targets people who have been declined by mainstream lenders: those with poor credit, limited income, or urgent financial need. Fake loan companies advertise online or via text message with promises of guaranteed approval regardless of credit history. The application process is simple and fast, which reinforces the sense that the loan is forthcoming.\n\nAfter the application is submitted and 'approved', a fee is required before disbursement can occur. This is framed as insurance, a processing charge, a security deposit, or an advance tax. The amounts are calibrated to be within reach — typically a fraction of the loan amount requested — making them feel like a reasonable cost of access to larger funds.\n\nOnce the fee is paid, the loan never arrives. A new obstacle materialises — another fee, a document requirement, a technical error — or the company simply becomes uncontactable. The victim is left without the loan and without the fee, often in worse financial circumstances than before.\n\nSome operations also harvest personal and banking details through the loan application form, using them for identity fraud separately from the fee collection. Financial stress makes victims less likely to pursue a complaint and more likely to be targeted by follow-on 'recovery' services.","redFlags":["A loan company guarantees approval regardless of credit history","An upfront fee is required before the loan is disbursed","The fee is described as insurance, processing, or a security deposit","The lender cannot be found on a national financial regulator's licensed lender register","Communication is only by email or text — no phone number or physical address is provided","After payment, new requirements or delays appear"],"whatToDoNow":["Never pay a fee to receive a loan — legitimate lenders deduct fees from the loan or charge them on repayment","Verify the lender's licence on your national financial regulator's website","Report unlicensed lenders to your national financial regulator","If personal details were submitted, consider a credit bureau fraud alert","Contact a nonprofit financial counselling service for help with the underlying financial need","Report to your consumer protection authority"],"faq":[{"question":"Do real lenders ever charge upfront fees?","answer":"In most regulated jurisdictions, legitimate lenders either include fees in the loan balance or deduct them at disbursement. Requiring payment before any funds are received is illegal for regulated lenders in many countries."},{"question":"What should I do if I am in genuine financial difficulty?","answer":"Contact a nonprofit credit counselling service, your bank's hardship team, or relevant government benefit programmes. These are free and legitimate resources that do not require upfront fees."},{"question":"Can payday loan scams damage my credit score?","answer":"The scam itself does not directly affect your credit. However, if you provided account or identity details, fraudulent accounts may be opened in your name. Monitor your credit report and place a fraud alert if concerned."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-cryptocurrency-giveaway-scam-work","url":"https://scamencyclopedia.org/questions/how-does-cryptocurrency-giveaway-scam-work","question":"How does a cryptocurrency giveaway scam work?","shortAnswer":"Crypto giveaway scams impersonate celebrities or platforms promising to double or multiply any amount of crypto sent to a specified address — but send nothing back.","explanation":"The scam is delivered through social media, YouTube livestreams, or compromised verified accounts. The message states that a well-known figure — often an executive, entrepreneur, or crypto influencer — is giving away a large amount of cryptocurrency and will match or double any amount sent to a provided wallet address as part of a 'community celebration'. A countdown timer, already-'confirmed' transactions, and accumulating totals add urgency and social proof.\n\nThe wallet shown may have real incoming transactions — from other victims — making the activity look genuine. Fabricated screenshots of 'payouts received' are shared in comments. Some operations use hacked YouTube or Twitter accounts with millions of followers to broadcast the scheme, giving it an appearance of credibility that is very difficult to dismiss on first impression.\n\nOnce crypto is sent, nothing is returned. The blockchain record confirms the transfer; recovery is not possible through any technical means. The scheme requires only that a sufficient number of people send amounts before the wallet is drained and the operator disappears.\n\nThis scam is particularly prevalent around high-profile events in the crypto space: major platform announcements, market surges, and product launches are monitored and used as timing hooks for giveaway campaigns. The emotional state of the crypto community during these moments — excitement, FOMO — reduces scepticism.","redFlags":["A celebrity or platform account announces they will double or match your crypto deposit","The offer requires sending crypto first to receive more back","Urgency is created with a countdown or 'limited slots remaining' message","Comments are filled with apparent confirmations of receipt — these can be fabricated or from bots","The announcement appears in an unusually formatted post from what seems like a verified account"],"whatToDoNow":["Never send cryptocurrency to receive a larger amount — no legitimate giveaway works this way","Report the account or video to the platform immediately","Check whether the official account has been hacked by verifying through other official channels","If you have already sent funds, report to your national cybercrime unit with wallet addresses","Crypto transfers are irreversible — accept this and focus on reporting rather than seeking technical recovery"],"faq":[{"question":"Has any genuine crypto figure ever run a legitimate giveaway?","answer":"Some have run genuine competitions with independent verification. The difference is always the same: legitimate giveaways require no upfront crypto deposit from participants."},{"question":"Why are hacked verified accounts so effective for this scam?","answer":"The verification badge and follower count provide immediate, apparent legitimacy that is very difficult for a non-technical viewer to dismiss. The scammer benefits from years of trust built by the real account holder."},{"question":"Is there any technology that can recover sent crypto?","answer":"No. Blockchain transactions are final and irreversible by design. 'Recovery services' claiming to retrieve sent crypto are themselves scams targeting people who have already lost funds."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-fake-check-cashing-scam-work","url":"https://scamencyclopedia.org/questions/how-does-fake-check-cashing-scam-work","question":"How does a fake check cashing scam work?","shortAnswer":"Fake check cashing scams exploit the banking system's provisional crediting policy: a fraudulent check appears to clear before your bank confirms it is bogus, and any cash sent against it comes out of your own account.","explanation":"Someone — typically a buyer for a marketplace sale, a new employer, or a lottery administrator — sends you a check or money order. The amount is correct or has an 'overpayment'. Your bank accepts the deposit and makes the funds available within one to two business days, before the check has been verified as genuine with the issuing bank.\n\nDuring this availability window, the fraudster instructs you to send some or all of the funds elsewhere — a wire transfer, gift card codes, or a payment to a third party. You do so, believing the funds are real. Several days or weeks later, the check is returned as counterfeit or the account it was drawn on has no funds. Your bank reverses the deposit, leaving your account in deficit by the full check amount plus any transfer you made.\n\nThe loss is yours: the money transferred is gone, and the bank expects you to cover the returned check. The check itself may look entirely authentic — correct paper stock, routing numbers, bank logos — because high-quality check templates are widely available.\n\nThis scam applies wherever money is received from a stranger before being forwarded: overpayment in private sales, nanny or personal assistant hiring scams, mystery shopper schemes, and lottery wins all use this mechanism.","redFlags":["A check arrives from someone you have never met, often for more than agreed","You are instructed to send part of the money to a third party before the check clears","The check arrives unexpectedly for a lottery, job, or sale you had almost forgotten","The issuing bank is in a different country or a state you would not expect","The payer is unusually insistent that you send the money quickly"],"whatToDoNow":["Ask your bank specifically whether the check has been verified — availability of funds does not mean verified","Wait for full verification before sending any money related to the deposit","For private sales, accept only payment methods you can verify as irreversible before handing over goods","Report fraudulent checks to your bank, national postal inspection service, and consumer protection authority","If you have already sent funds, contact your bank fraud team immediately"],"faq":[{"question":"How long does it actually take for a check to clear fully?","answer":"Provisional availability is typically one to two business days. Full verification that funds genuinely exist can take several weeks, particularly for checks drawn on foreign banks."},{"question":"Can a cashier's check be fake?","answer":"Yes. Cashier's checks can be convincingly forged. The appearance of a bank's logo and a legitimate-seeming routing number does not mean the check is genuine. Call the issuing bank directly to verify."},{"question":"What is a mystery shopper check scam?","answer":"A fake mystery shopping company sends a large check and instructs the 'shopper' to cash it, buy gift cards, and rate the experience — providing the card codes. The check bounces; the shopper is left responsible for the full amount."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-investment-seminar-scam-work","url":"https://scamencyclopedia.org/questions/how-does-investment-seminar-scam-work","question":"How does a free investment seminar scam work?","shortAnswer":"Free investment seminars use high-energy presentations and social pressure to sell expensive courses, software subscriptions, or investment opportunities of dubious value to attendees who arrive expecting free education.","explanation":"The invitation is usually for a free workshop on property investment, day trading, cryptocurrency, or financial freedom. The event is held in a hotel conference room or online, and the first portion delivers genuinely useful introductory content — enough to establish credibility and generate interest. Attendees are positioned as having special access to a proven system.\n\nAs the seminar progresses, a premium offering is introduced. The basic content was free; the real strategy is in the advanced coaching programme, proprietary trading software, or mentorship package. High-energy testimonials, scarcity messaging ('only ten places at this price'), and group dynamics create pressure to commit. Payment plans are offered to lower the barrier. Some attendees commit to five-figure sums on the spot.\n\nThe advanced courses typically deliver recycled information available freely online, vague strategy frameworks with no edge, or access to a platform that generates commissions for the operator when users trade. The promised returns from the strategy are not replicated by attendees applying it independently.\n\nA second-tier variant specifically targets seminar graduates: a separate 'mastermind' or 'inner circle' is sold at progressively higher prices, creating a cult-like community that reframes further spending as investment in one's mindset and commitment.","redFlags":["The event is described as free but leads rapidly to high-pressure upselling","Testimonials from successful graduates cannot be independently verified","Scarcity and urgency are used to discourage taking time to research before buying","The investment strategy cannot be explained precisely and reproducibly","The operator earns commissions when you trade through their recommended platform","Course costs run to thousands of pounds or dollars for content with no accreditation"],"whatToDoNow":["Do not make any purchase decision at the event — take the materials home and research independently","Search for the seminar operator's name combined with 'reviews' and 'complaints' before committing","Ask whether the strategy has audited third-party performance records","Check whether the investment coaching or financial advice constitutes a regulated activity in your jurisdiction","Report high-pressure selling tactics to your national consumer protection authority","Seek cooling-off period rights — in many jurisdictions you can cancel within 14 days"],"faq":[{"question":"Are all investment seminars fraudulent?","answer":"No. Some deliver genuine educational content at a fair price. The red flags are high-pressure tactics, inability to verify claimed results, and upselling to expensive programmes with unverifiable returns."},{"question":"Can I get a refund from an investment course that did not deliver?","answer":"If the course was sold with false claims about results, you may have recourse through consumer protection law. Document all promises made and consult a consumer advocate or lawyer."},{"question":"Is investment coaching a regulated activity?","answer":"In many jurisdictions, giving specific investment advice requires regulatory authorisation. General financial education may not. Operators sometimes exploit this boundary to offer advice-like content without regulatory oversight."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-ticket-resale-scam-work","url":"https://scamencyclopedia.org/questions/how-does-ticket-resale-scam-work","question":"How does a ticket resale or fake event ticket scam work?","shortAnswer":"Ticket scams sell counterfeit, invalid, or nonexistent tickets to popular events, collecting payment through channels with limited buyer protection and delivering nothing valid at the venue.","explanation":"When a popular event sells out, a secondary market emerges where scammers list fake tickets at above-face-value prices. Listings appear on unofficial resale sites, social media, classified ads, and even impersonating legitimate resale platforms. Descriptions include seat numbers, row details, and barcodes that look genuine but are invalid, duplicated, or entirely fabricated.\n\nPayment is steered toward bank transfer or peer-to-peer payment apps that offer limited or no buyer protection. Some sellers accept payment then claim to have sent the tickets digitally — providing a screenshot of an invalid PDF rather than a transferable booking. Others send barcodes from tickets already sold to other buyers, resulting in multiple people arriving for the same seat.\n\nSome operations use stolen credit card details to purchase genuine tickets from official sources, then resell them. When the original cardholder disputes the charge, the ticket purchase is reversed, and the tickets become invalid — leaving the secondary buyer with worthless tickets purchased for real money.\n\nFestival season, major sports finals, and concert tours with limited capacity drive the highest volumes of ticket fraud. The time pressure (the event is approaching) and the emotional stakes (a once-in-a-season experience) reduce the buyer's willingness to delay and verify.","redFlags":["Tickets are available for a sold-out event at above face value from an unknown seller","Payment is requested by bank transfer rather than through a protected marketplace","The seller pressures you to complete the transaction quickly","Tickets are delivered as a PDF or screenshot rather than transferred through the official platform","The listing appeared on a classified site or social media rather than a recognised resale platform","The seller cannot provide proof of original purchase"],"whatToDoNow":["Buy from the official box office or authorised resale partners listed on the event's official website","Use a credit card on a protected resale platform — chargebacks are available if tickets are invalid","If you suspect tickets are invalid, contact the venue before the event to verify","Report fraudulent ticket sellers to the platform they listed on and to your consumer protection authority","If tickets fail at the door, document the rejection and contact your bank immediately"],"faq":[{"question":"Is ticket resale ever legitimate?","answer":"Yes. Authorised secondary markets, official box office exchanges, and fan-to-fan transfers through the original platform are legitimate. The risk arises when purchasing from unknown sellers outside these channels."},{"question":"Can I verify a ticket's validity before the event?","answer":"Many venues offer barcode verification services. Contact the venue directly — not through a number provided by the seller — to confirm the booking reference is genuine."},{"question":"What is 'ticket duplication' fraud?","answer":"A scammer sells the same valid ticket barcode to multiple buyers. The first person to scan it at the venue gains entry; everyone else is denied. Digital ticket transfers prevent this but only if completed through the original platform."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-housing-deposit-scam-work","url":"https://scamencyclopedia.org/questions/how-does-housing-deposit-scam-work","question":"How does a housing deposit or new-build property scam work?","shortAnswer":"Housing deposit scams collect reservation fees or full deposits for new-build properties or buy-to-let investments that are either nonexistent or never intended for legitimate sale.","explanation":"New-build and off-plan property investment is a legitimate market, which is precisely what makes it effective cover for fraud. A fraudster creates or purchases an already-developed brochure for a residential project — real or fabricated — and presents it at property investment events, online, or through cold-caller networks. The project has beautiful CGI renders, a plausible timeline, and promised rental yields.\n\nAn early-investor discount is offered for a limited time, requiring a reservation fee to secure a unit. This fee is typically a few thousand pounds or dollars — small enough to seem a reasonable deposit on a much larger asset. The fee is paid and a contract is signed with a company that is either not the legitimate developer or is entirely fictitious.\n\nWhen the project fails to materialise, legal analysis of the contract often reveals that the reservation fee was non-refundable and that the purchaser's claim is against a company with no assets. Some operations run extended over multiple years, collecting full deposits from multiple investors before the collapse.\n\nLegitimate property developers work through regulated estate agents, accept payments into solicitor-held client accounts, and are verifiable through property registries and company databases. Any deviation from these norms warrants serious scrutiny.","redFlags":["High rental yields or capital growth are promised without credible market analysis","A reservation fee is described as non-refundable and must be paid immediately","The developer or agent cannot be verified on official registries","Payment goes directly to the developer rather than into a solicitor's client account","The property is located in a market you are not familiar with and cannot visit easily","Urgency is created with limited units available at the current price"],"whatToDoNow":["Instruct an independent solicitor before paying any deposit — do not use the developer's recommended solicitor","Verify the developer's registration with your national property or company registry","Ensure all deposits are held in a regulated solicitor's client account","Research the development's planning permission through the local authority's public records","Report suspected property fraud to your national fraud authority and property regulator","If you have paid, notify your solicitor and bank immediately"],"faq":[{"question":"Is off-plan property investment always high risk?","answer":"Legitimate off-plan purchases carry the normal risks of any property investment. The fraud risk is specifically associated with unregulated operators, unverified developers, and payment outside solicitor-supervised channels."},{"question":"Why should I use an independent solicitor rather than the developer's recommendation?","answer":"A solicitor recommended by the developer may have a conflict of interest. Your solicitor works exclusively for your protection. This is standard practice in all legitimate property transactions."},{"question":"Can I recover a lost deposit through the courts?","answer":"Sometimes. If the company still has assets or directors can be personally pursued, court action may yield a partial recovery. Document everything from the start and seek legal advice as soon as you suspect fraud."}],"lastReviewed":"2026-06-10"},{"slug":"who-do-romance-scammers-target","url":"https://scamencyclopedia.org/questions/who-do-romance-scammers-target","question":"Who do romance scammers target and why?","shortAnswer":"Romance scammers target anyone seeking connection, but they actively seek out people who appear lonely, recently bereaved, divorced, or who post publicly about wanting a relationship.","explanation":"Romance scammers are not random in their choices. They comb dating sites, social media platforms, and even Facebook groups for grief support or divorce recovery, looking for people who signal emotional vulnerability. A widower posting anniversary tributes to a late spouse, or someone who mentions a recent breakup, becomes a visible target because the scammer knows that person has an unfilled emotional need.\n\nAge and life stage matter to scammers, but not in the way many assume. While older adults are frequently targeted because they may be more isolated and sometimes have retirement savings, scammers also pursue younger adults who are lonely, introverted, or going through difficult transitions such as moving to a new city. The common thread is not age but emotional availability and a desire for connection.\n\nScammers specifically seek people who engage earnestly and at length online. If someone replies promptly, shares personal stories early, and reciprocates warmth, the scammer sees a high-return target. This is why the early phase of a romance scam can feel magical — the scammer mirrors everything back, creating a sense of being deeply understood. That manufactured intimacy is the product of deliberate selection.\n\nPeople who have limited social support networks are especially vulnerable because the scammer fills a real gap. When friends and family are distant or few, the online relationship can feel like the most meaningful one in a person's life, making it far harder to step back and question red flags. Understanding this targeting logic helps people recognize that falling for a romance scam is not a personal failing — it is the result of a sophisticated predator exploiting genuine human needs.","redFlags":["Profile appeared shortly before first contact and has very few older posts","Declares deep feelings very quickly, within days of first message","Claims to be working abroad, on a military deployment, or on an oil rig","Conversation moves off the dating platform to private messaging very fast","Camera always has a technical problem when a video call is proposed","Asks personal questions about finances, property, or living situation early on"],"whatToDoNow":["Reverse-image-search every profile photo using Google Images or TinEye","Wait at least several weeks before sharing personal details with anyone met online","Ask a trusted friend to read the conversation thread and share their honest impression","Propose a live video call on a neutral platform; notice if the person consistently deflects","Check the phone number on a reverse-phone lookup service","Report suspicious profiles to the platform where contact was made"],"faq":[{"question":"Do romance scammers ever target men?","answer":"Yes. Men are targeted as often as women, though men may be less likely to report it. Scammers adapt the persona — often posing as an attractive woman — to match whatever gender they believe their target is attracted to."},{"question":"Can someone be targeted on a non-dating platform?","answer":"Absolutely. LinkedIn, Instagram, Facebook, and even gaming platforms are used. Any place where people have public profiles and engage socially can be exploited by romance scammers."}],"lastReviewed":"2026-06-10"},{"slug":"who-do-investment-scammers-target","url":"https://scamencyclopedia.org/questions/who-do-investment-scammers-target","question":"Who do investment scammers target and why?","shortAnswer":"Investment scammers most often target people with accessible savings, those worried about retirement income, and anyone who has recently expressed interest in financial growth online.","explanation":"Investment scammers look for people with money to invest and a motivation to grow it. That combination appears in specific life circumstances: someone who has just sold a property, received an inheritance, been paid out a pension lump sum, or who has said online that they are worried about inflation eroding their savings. Scammers monitor financial forums, investment Facebook groups, and social media for these signals.\n\nPeople who have experienced a previous legitimate investment and feel confident about financial markets are sometimes more vulnerable, not less, because they believe they can tell a good deal from a bad one. Scammers exploit that confidence by constructing highly credible fake platforms complete with live price charts, fake account statements, and professional-looking withdrawal interfaces. The target feels in control right up until the moment they try to withdraw real money.\n\nYounger adults are increasingly targeted for cryptocurrency investment scams. The appeal of quick wealth, the complexity of crypto markets, and the genuine stories of early adopters who made significant gains create a fertile environment for fraudulent 'opportunities'. Scammers position themselves as insiders who can share a method that worked for them, framing the pitch as doing the target a personal favour.\n\nSocial trust is a key variable. Many investment scams travel through personal networks — a friend recommends a platform they have already been defrauded into trusting, and then genuinely, unknowingly passes the scam on. Scammers cultivate a few highly enthusiastic initial victims who then do the recruiting work, a structure that mirrors legitimate multi-level referral schemes and makes the fraud harder to spot.","redFlags":["Guaranteed returns of a specific percentage regardless of market conditions","Urgency to invest now before a window closes or a price changes","Platform has no verifiable regulatory registration","Withdrawals are blocked, delayed, or require an 'upfront tax payment'","Investment opportunity came via social media or an unsolicited message","The person who introduced you is unusually enthusiastic and personally vouches for it"],"whatToDoNow":["Check any investment platform against your national financial regulator's register","Never invest money you cannot afford to lose completely","Try a small test withdrawal before committing significant funds","Search the platform name plus the word 'scam' or 'review' online","Be sceptical of anyone who recruited you via social media or messaging apps","Report suspected investment fraud to your national financial regulator"],"faq":[{"question":"Are retirees the only people targeted by investment scams?","answer":"No. While retirees are common targets because they often have accessible savings, younger people with crypto interest, first-time investors, and small-business owners are also heavily targeted."},{"question":"Is it possible for a financial professional to be deceived?","answer":"Yes. Investment scams are designed by people who understand financial language and regulation. Even experienced investors have been deceived by sophisticated fake platforms."}],"lastReviewed":"2026-06-10"},{"slug":"who-do-grandparent-scammers-target","url":"https://scamencyclopedia.org/questions/who-do-grandparent-scammers-target","question":"Who do grandparent scammers target and why?","shortAnswer":"Grandparent scammers target older adults, typically over 60, because they are more likely to have accessible savings, answer their phones, and respond instinctively to a family emergency.","explanation":"The grandparent scam is built on one of the strongest human instincts: protecting family. Scammers call an older adult, often impersonating a grandchild in distress or a lawyer or police officer speaking on the grandchild's behalf, and create a sudden crisis — a car accident, an arrest, a hospital stay — that requires immediate cash. The urgency and emotional charge override careful thinking.\n\nOlder adults are targeted partly because they are more likely to answer an unknown phone call. Younger people tend to screen calls and communicate by text, but an older person who grew up when the phone was the primary communication device is more likely to pick up and engage. Scammers count on this generational habit.\n\nAccessible savings are another factor. Many people in their 60s and 70s have accumulated retirement funds or hold cash in accessible accounts. They may not be as digitally fluent when it comes to verifying claims quickly, and the panic manufactured by the scammer disrupts whatever scepticism they might otherwise apply.\n\nScammers also rely on isolation and the shame cycle. An older adult who lives alone, or whose children live far away, cannot quickly walk next door and ask someone to verify the story. And once they realise they have been deceived, many feel too embarrassed to report it or tell their family, which means the same person is sometimes targeted again. Understanding this dynamic helps families have supportive, non-blaming conversations that make it easier to ask for help early.","redFlags":["Caller claims a grandchild is in trouble and urgently needs cash","Insists you tell no one else in the family — 'don't worry grandma yet'","Asks for payment in cash, gift cards, or wire transfer — not through a verifiable channel","Voice sounds slightly different but caller explains it by saying they have a cold","A second caller, claiming to be a lawyer or police officer, takes over the call","The situation escalates to larger amounts shortly after the first payment"],"whatToDoNow":["Hang up and call the grandchild directly on a number you already have saved","Call another family member to verify the story before sending any money","Establish a family code word that only real relatives would know","Do not keep large amounts of cash accessible at home","Report the call to the police and to your national consumer fraud authority","Talk openly with older family members about this scam before it happens"],"faq":[{"question":"Can the grandparent scam happen by text as well?","answer":"Yes. A common variant starts with a text saying 'Hi Grandma it's me, I lost my phone, this is my new number.' Once the grandparent replies with the grandchild's name, the scammer has what they need to continue the fraud."},{"question":"Why do scammers insist on secrecy?","answer":"Secrecy prevents the target from consulting someone who might quickly identify the fraud. It is a deliberate isolation tactic — the moment a second person hears the story, the scam often unravels immediately."}],"lastReviewed":"2026-06-10"},{"slug":"why-scammers-ask-for-gift-cards","url":"https://scamencyclopedia.org/questions/why-scammers-ask-for-gift-cards","question":"Why do scammers ask to be paid in gift cards?","shortAnswer":"Gift cards are irreversible, anonymous, and widely available, making them the ideal payment tool for scammers who want to disappear with funds before any report can be made.","explanation":"When a scammer asks you to go to a supermarket, pharmacy, or electronics store and buy gift cards, they are deliberately choosing a payment method designed to be untraceable and unrecoverable. A legitimate government agency, utility company, tech support service, or family member in need would never request payment in gift cards — this is always a scam signal.\n\nGift cards are attractive to scammers for several practical reasons. Once the card number and PIN are read out over the phone or sent by message, the value is transferred instantly and the scammer can drain it within minutes. There is no bank intermediary to flag the transaction as suspicious. There is no chargeback mechanism the victim can invoke. The retailer who sold the card has no obligation or ability to reverse anything.\n\nThe anonymity is equally important. Gift card codes can be redeemed from anywhere in the world. A scammer operating overseas can turn a US store gift card into cash via resale networks in minutes. By the time the victim reports the fraud, the money is gone and the trail is cold.\n\nScammers also choose gift cards because the purchase looks mundane and the retail environment makes it hard for store staff to intervene. Some retailers have trained employees to ask questions when an older person buys many gift cards at once, and occasionally a sharp cashier does interrupt a scam in progress. But the nature of retail volume makes systematic prevention difficult, which is why the scam persists at large scale.","redFlags":["Any official-sounding caller asks you to pay a debt, fine, or fee with gift cards","Tech support asks you to buy iTunes, Google Play, or Amazon cards as payment","Someone claiming to be from the IRS, HMRC, or a utility says gift cards are an accepted payment","You are told to stay on the phone while purchasing the cards and read out the codes","The person says gift cards are needed to 'unlock' a blocked account or prize","Urgency is extreme — 'buy the cards now or you will be arrested'"],"whatToDoNow":["Hang up immediately — no legitimate entity ever accepts gift cards as payment","If you have already bought cards but not given the codes, do not read them out","Contact the gift card issuer immediately; some can freeze unused balances","Report the call to your national consumer protection or fraud authority","Tell the retailer where you bought the cards — they may be able to help","Keep the physical cards and receipts as evidence for any report"],"faq":[{"question":"Which gift cards do scammers most often request?","answer":"Google Play, Apple iTunes, Amazon, Steam, and eBay gift cards are among the most commonly requested because they are widely available, high-denomination, and easily liquidated through online grey markets."},{"question":"Can the gift card company refund my money?","answer":"In most cases no, especially once the card has been redeemed. It is worth calling immediately and asking, but the realistic outcome for a fully drained card is that the money is unrecoverable."}],"lastReviewed":"2026-06-10"},{"slug":"why-scammers-ask-for-crypto-payment","url":"https://scamencyclopedia.org/questions/why-scammers-ask-for-crypto-payment","question":"Why do scammers ask to be paid in cryptocurrency?","shortAnswer":"Cryptocurrency transactions are irreversible, difficult to trace to a real-world identity, and can cross borders instantly, making crypto the preferred payment channel for fraud.","explanation":"Cryptocurrency shares the core features that make gift cards attractive to scammers — speed, irreversibility, and anonymity — but adds further advantages. Large sums can be moved without the transaction limits that banking systems impose. Cross-border transfers happen in minutes with no correspondent bank to flag suspicious activity. And depending on which cryptocurrency is used, the trail from a wallet address to an actual person can be difficult or impossible for the average victim to follow.\n\nScammers using crypto tend to operate more sophisticated schemes: investment frauds with fake platforms, romance scams with a financial component, or pig-butchering operations where weeks of relationship-building precede the payment request. They often provide detailed instructions for how to buy cryptocurrency, sometimes coaching the victim through the process step by step. This coaching is itself a red flag — a legitimate party has no reason to instruct you on how to fund a payment.\n\nCrypto also carries a cultural association with financial sophistication and forward-thinking investment. Scammers exploit this by framing the payment as participation in a modern financial system, making the request seem less suspicious than 'buy gift cards.' Victims sometimes rationalise the payment as an investment rather than a transfer, which is exactly what the scammer intends.\n\nIt is worth noting that cryptocurrency itself is a legitimate technology — many law-abiding people and businesses use it. The problem is that its properties make it particularly useful for criminals, who have deliberately chosen it over traceable bank transfers. Legitimate businesses that require payment rarely insist that cryptocurrency is the only acceptable method.","redFlags":["Any payment request insists on crypto only, refusing all other methods","A Bitcoin ATM is specified for an 'urgent debt' or 'emergency fee'","You are walked through setting up a crypto wallet by a third party","Returns on a crypto 'investment' appear artificially perfect on the platform dashboard","Withdrawal from an investment platform requires a crypto 'tax payment' first","Someone met online insists on crypto as the way to send funds to help them"],"whatToDoNow":["Do not send crypto to anyone who has not given you a verifiable, auditable reason","Verify any investment platform with your national financial regulator before funding it","Remember that crypto payments cannot be reversed by any bank or authority","If you have already sent crypto, report it to your national fraud reporting body and preserve all wallet addresses and transaction IDs","Search the crypto wallet address on blockchain explorers and scam-reporting databases","Speak to a financial counsellor if you have lost a significant amount"],"faq":[{"question":"Can law enforcement trace crypto transactions?","answer":"Sometimes. Blockchain transactions are publicly recorded, and specialist investigators can sometimes trace funds through a chain of wallets. However, scammers use mixers, chain-hopping, and exchanges in permissive jurisdictions to break the trail, making recovery rare."},{"question":"Is it ever legitimate for a company to request crypto payment?","answer":"A small number of legitimate businesses do accept crypto. The red flag is when crypto is the only accepted method and the request arrives unexpectedly, or when a government authority or utility company demands it."}],"lastReviewed":"2026-06-10"},{"slug":"why-scammers-ask-for-wire-transfer","url":"https://scamencyclopedia.org/questions/why-scammers-ask-for-wire-transfer","question":"Why do scammers ask to be paid by wire transfer?","shortAnswer":"Wire transfers move money quickly between bank accounts with limited ability to recall funds once sent, and scammers can receive them in overseas accounts that are difficult to freeze in time.","explanation":"Wire transfers, sometimes called bank transfers or telegraphic transfers, are a standard part of global finance — businesses use them for large legitimate transactions every day. Scammers have found them useful because the moment a wire is executed, recovery depends entirely on whether the receiving bank can be reached and the funds frozen before the scammer withdraws them. In practice, scammers move money out of the receiving account within minutes of it arriving, often bouncing it through several accounts in different countries.\n\nBusiness email compromise (BEC) scams almost exclusively use wire transfers. A scammer impersonates a supplier or executive and convinces an accounts-payable employee to wire payment to a bank account the scammer controls. Because the format of the instruction looks exactly like a normal supplier payment, and because finance staff are trained to process payments promptly, the fraud can go undetected for days.\n\nFor individual consumers, wire transfer fraud often appears in property purchase scams, where a buyer is misled into wiring a deposit to a fraudulent account; or in overpayment scams, where someone is sent a fake cheque, asked to wire back the difference, and finds the original cheque was worthless. The emotional weight of a property purchase or a time-sensitive deal is deliberately used to discourage careful verification.\n\nThe international dimension is critical. Even when fraud is reported the same day, coordinating a recall between banks in different countries under different legal systems can take weeks. Scammers structure accounts and money flows to exploit every minute of that delay. This is why extra verification before any wire is sent is far more effective than attempting recovery afterward.","redFlags":["Payment instructions arrive by email shortly before a deadline","The bank account details changed from the ones you used previously","You are asked to wire money abroad for a deal you have not met the party for in person","A cheque was received and you are asked to wire back part of it before it clears","The recipient insists wire is the only acceptable method and no receipt is possible","Pressure to act quickly before 'the window closes'"],"whatToDoNow":["Always verify changed bank details by calling the payee on a number you already have — not one supplied in the same email","If you wired funds and suspect fraud, call your bank immediately to request a recall","Report business wire fraud to your national fraud authority and law enforcement","Document all emails, account numbers, and communication before making any transfer","Use a callback verification protocol for all new or changed payment instructions","Ask your bank about adding a confirmation step for large outgoing wires"],"faq":[{"question":"What is the difference between a wire transfer scam and an authorised push payment scam?","answer":"The terms overlap. An authorised push payment (APP) scam is when a victim is deceived into willingly authorising a bank transfer to a scammer. Wire transfer fraud can also involve unauthorised transfers made by a hacked or impersonated employee. Both result in funds that are extremely hard to recover."},{"question":"How quickly do scammers drain a receiving account after a wire arrives?","answer":"Within minutes to hours in most cases. Scammer networks are organised to immediately move funds onward the moment a deposit appears, which is why acting within the first hour of discovering the fraud is critical."}],"lastReviewed":"2026-06-10"},{"slug":"where-do-scammers-get-my-phone-number","url":"https://scamencyclopedia.org/questions/where-do-scammers-get-my-phone-number","question":"Where do scammers get my phone number?","shortAnswer":"Scammers obtain phone numbers from data breaches, purchased data lists, public directories, social media profiles, and automated diallers that call every number in a sequence.","explanation":"Your phone number is far more widely available than most people realise. Every time you enter it on a website — to create an account, receive a discount code, or verify a purchase — that number becomes part of a database. If that company experiences a data breach, or sells its customer list to third-party marketers (which many do legally), your number can end up in circulation well beyond the original recipient.\n\nData brokers are one of the largest sources. These companies compile profiles from public records, loyalty programmes, app permissions, and purchased datasets, and sell aggregated records containing names, addresses, phone numbers, and sometimes financial data. While legitimate marketing companies are supposed to screen buyers, this data routinely finds its way onto the darker end of the market where scam operations acquire it cheaply in bulk.\n\nAutomatic number scanning is another mechanism. Robocall operations use automated diallers that call every number in a given area code sequence. They do not need to know your number beforehand — they simply try all of them. When someone answers, the automated system logs the number as active and it can be sold or targeted for follow-up calls.\n\nSocial media is a direct source when profiles are set to public. Platforms often display phone numbers, and even if yours is hidden, public posts can link your account to your number through check-ins, tags, and connected apps. Scammers also build their own lists from public property records, court documents, business registrations, and electoral rolls in countries where those contain phone numbers.","redFlags":["You receive calls from numbers you do not recognise at unexpected times","Caller knows your name despite you never sharing it with them","You start receiving more spam calls shortly after signing up for a new service","A caller references a recent purchase, subscription, or life event accurately","Multiple calls come from different numbers with the same area code","You receive calls where no one speaks but a note is made that the line is active"],"whatToDoNow":["Register with your country's telephone preference or do-not-call registry","Use a secondary phone number for online forms and non-critical sign-ups","Check whether your number appears in breach databases using services like Have I Been Pwned","Request removal from data brokers through opt-out processes or a data removal service","Do not confirm your identity to unsolicited callers — hang up and call back on a verified number","Report persistent spam calls to your telecommunications regulator"],"faq":[{"question":"Does answering a spam call make things worse?","answer":"Answering confirms your number is active and can lead to more calls. However, simply answering does not give scammers any additional data unless you speak or respond to prompts. Hanging up immediately is the safest approach."},{"question":"Can I find out exactly which breach exposed my number?","answer":"Sometimes. Breach notification services list which data breaches included phone numbers, but the specific record containing your number is not always identifiable. Changing your number is the most definitive solution, though not always practical."}],"lastReviewed":"2026-06-10"},{"slug":"where-do-scammers-get-my-email","url":"https://scamencyclopedia.org/questions/where-do-scammers-get-my-email","question":"Where do scammers get my email address?","shortAnswer":"Email addresses are harvested from data breaches, scraped from public websites, sold by data brokers, and gathered through phishing sites and compromised mailing lists.","explanation":"Email addresses are traded and leaked at enormous scale. Major database breaches over the years have exposed billions of credential records, and these lists circulate indefinitely in criminal markets. If you have used the same email address for ten years or more, the probability that it appears in at least one breach is very high. Scammers purchase these lists cheaply and run mass phishing campaigns knowing that even a fraction of a percent response rate is profitable.\n\nWeb scraping is another major source. Any time your email address appears on a public webpage — a contact form, a forum post, a business listing, an academic paper, a comment section — automated tools can harvest it. Some scammers run bots that systematically scrape every page of major platforms looking for the '@' character.\n\nYou may also have inadvertently given your email to an entity that sold or leaked it. Some free apps and services monetise their user bases by selling mailing lists. Loyalty programmes with weak security are a particular source. And phishing sites themselves harvest emails: when you enter your email into a fake login page or 'prize claim' form, it goes directly to a scammer's database.\n\nCompromised mailing lists are a subtler channel. If a company you legitimately do business with has its email system breached, scammers gain access to its list of recipients. You then receive convincing phishing emails that appear to come from that company, because they do contain your correct name, account number, or other details that the legitimate company held.","redFlags":["You receive phishing emails that correctly name you and reference accounts you hold","Shortly after signing up for a new service, spam email increases noticeably","Emails arrive appearing to be from companies you use, but the sender address is slightly wrong","You are prompted by a search result to 'verify your account' on a site that is not the official domain","An email claims your account was accessed and asks you to click a link to secure it"],"whatToDoNow":["Check your email address at Have I Been Pwned to see which breaches it has appeared in","Use a unique email alias for each service where possible","Never click links in unsolicited emails — navigate to sites directly","Enable two-factor authentication on all accounts linked to your email","Request removal from data broker databases through opt-out tools","Report phishing emails to your email provider and your national cyber authority"],"faq":[{"question":"Does unsubscribing from spam emails make them stop?","answer":"For legitimate marketers yes, but for scammers, clicking an unsubscribe link can confirm your address is active and lead to more messages. If an email looks like a scam, delete it without clicking anything."},{"question":"Can I stop my email from being scraped online?","answer":"You can reduce exposure by removing your email from public pages, using contact forms instead of posting addresses, and using different addresses for public-facing and private communication."}],"lastReviewed":"2026-06-10"},{"slug":"where-do-scammers-get-my-bank-details","url":"https://scamencyclopedia.org/questions/where-do-scammers-get-my-bank-details","question":"Where do scammers get my bank details?","shortAnswer":"Bank details are most commonly obtained through phishing attacks, data breaches at companies that stored your payment information, and malware installed on devices used for online banking.","explanation":"Your bank account number, sort code, or card details can reach a scammer through several routes, none of which require the scammer to have broken into your bank directly. The most common is phishing: a convincing fake email, text, or website that leads you to enter your credentials into a form controlled by the scammer. The fake site may look pixel-perfect, copying the real bank's design, and the user session can even be proxied in real time so the victim believes they successfully logged in.\n\nData breaches at merchants, subscription services, and payment processors expose card details that were stored — often improperly — by companies you have bought from. Even if the breach does not expose the full card number, partial information combined with other leaked data can be enough for sophisticated fraud. Card-skimming devices attached to ATMs and petrol station pumps are a physical variant of the same attack.\n\nMalware is a targeted but serious threat. Keyloggers installed on a computer or mobile device can capture every keystroke you type, including passwords and account numbers entered during a genuine banking session. Some malware specifically looks for financial application data and uploads it to a command-and-control server. Infecting a device via a malicious attachment, a fake app, or a compromised website requires only that the victim interact with the malicious element once.\n\nSocial engineering is another route. Scammers posing as bank fraud investigators will sometimes call and convince a panicked customer to read out account details or authorisation codes during the call. The caller creates urgency by claiming suspicious activity is happening on the account right now, and the victim's instinct to cooperate with their bank overrides caution. No bank will ever call you and ask you to confirm your full PIN, password, or one-time passcode.","redFlags":["An email or text asks you to verify your bank details by clicking a link","A caller claiming to be from your bank asks for your full card number or PIN","An ATM slot feels loose, the card reader looks different, or there is an unusual overlay","You receive a one-time passcode you did not request","Unrecognised small transactions appear on your account before a larger one","A pop-up on your banking app asks you to re-enter credentials"],"whatToDoNow":["Enable real-time transaction notifications on your bank account","Never enter banking credentials via a link sent by email or SMS — go directly to the bank's website","Contact your bank immediately if you suspect your details were compromised","Freeze or cancel your card as soon as you notice unauthorised activity","Keep your operating system, browser, and banking apps updated to patch security vulnerabilities","Check your accounts weekly so that unfamiliar charges are caught quickly"],"faq":[{"question":"If I give someone my sort code and account number to receive a payment, can they take money from me?","answer":"In most countries, knowing only your sort code and account number is not sufficient to take money from your account. However, it is enough to set up a direct debit in some systems, so treat these details with care and only share them with trusted parties."},{"question":"What should I do if a phishing site captured my banking password?","answer":"Change your banking password immediately, then call your bank to alert them. Also change the same password anywhere else you have used it, and enable two-factor authentication if you have not already."}],"lastReviewed":"2026-06-10"},{"slug":"why-is-it-hard-to-get-scam-money-back","url":"https://scamencyclopedia.org/questions/why-is-it-hard-to-get-scam-money-back","question":"Why is it so hard to get scam money back?","shortAnswer":"Scam money is hard to recover because it is moved quickly through multiple accounts, often across borders, and payment methods like gift cards and crypto have no reversal mechanism.","explanation":"The moment a scam payment is made, the scammer's operation begins moving the money. Within minutes, funds can be transferred from the receiving account to a second account, then a third, often in different countries. By the time a victim reports the fraud and a bank starts investigating, the money has already passed through multiple layers. Each hop adds jurisdictional complexity, and the banks holding intermediate accounts may have no obligation or practical ability to freeze funds on request from a foreign institution.\n\nPayment method matters enormously. A credit card payment offers the best protection — banks can initiate a chargeback and the card network has dispute resolution mechanisms. A debit card transfer is weaker but still has some recourse. A bank wire transfer relies entirely on speed: if your bank can send a recall notice before the receiving bank pays out, there is a chance of recovery, but success rates fall sharply after the first few hours. Gift cards and cryptocurrency have essentially no recovery mechanism once the value is claimed.\n\nInternational jurisdiction creates legal friction that scammers deliberately exploit. A scam operation based in one country, using bank accounts in a second, targeting victims in a third, and routing money through a fourth, is almost impossible to pursue through normal legal channels. Law enforcement agencies in each country have limited ability to compel cooperation from institutions abroad, and even when cooperation is possible, the process takes months.\n\nEmotional and reporting delays also cost recovery time. Many victims are too embarrassed to report quickly, or they continue to believe the 'investment' is real while the scammer encourages them to wait for returns. Every day of delay is another day the money travels further. This is why reporting immediately — even before fully accepting that a scam occurred — offers the best chance of any recovery.","redFlags":["You sent money and the recipient has now gone silent or is requesting more","You were told a withdrawal will happen soon but delays keep occurring","The platform you sent money to has disappeared or changed its domain","A recovery service has contacted you promising to retrieve your lost funds for a fee","You are being pressured not to contact your bank or report the issue"],"whatToDoNow":["Call your bank immediately and ask them to recall or freeze the payment","Report to your national fraud authority as quickly as possible","Document everything: screenshots, messages, account numbers, and transaction references","Avoid paying any 'recovery fees' — recovery scams targeting fraud victims are common","Consult a legal professional if the amount lost is significant","Contact the payment platform (PayPal, crypto exchange) to report and potentially freeze the receiving account"],"faq":[{"question":"Are there companies that can recover scam money?","answer":"Legitimate asset recovery attorneys and some specialist financial crime firms exist, but they are the exception. Most companies claiming to recover scam funds — especially those charging upfront fees — are themselves scams targeting people who have already been defrauded."},{"question":"Does travel insurance or home insurance cover scam losses?","answer":"Rarely. Standard policies do not cover fraud losses. Some premium bank accounts or credit cards include limited fraud protection that goes beyond legal minimums, so it is worth checking your terms."}],"lastReviewed":"2026-06-10"},{"slug":"are-scam-call-centres-real","url":"https://scamencyclopedia.org/questions/are-scam-call-centres-real","question":"Are scam call centres real and how do they work?","shortAnswer":"Yes. Organised scam call centres operate in several countries, employing dozens or even hundreds of people who follow scripted approaches to defraud victims, typically in wealthier English-speaking countries.","explanation":"Scam call centres are a documented reality, not an urban myth. Investigative journalists, law enforcement operations, and leaked footage have all confirmed that large facilities employing significant staff numbers operate primarily in parts of South Asia, West Africa, and Eastern Europe. Workers may be paid a base wage with bonuses tied to how much money they extract, creating incentive structures similar to a commission sales environment.\n\nA typical operation is divided into functional teams. Cold callers place high volumes of outbound calls using lists of phone numbers sorted by country and demographic. When a target engages, a more senior 'closer' takes over the call to build trust, escalate urgency, and guide the victim through the payment process. A separate team handles the money logistics — receiving payments, converting them, and moving them through layered accounts. Management tracks daily 'revenue' and coaches staff on how to handle common objections.\n\nThe work environment in these centres varies widely. Some employees are aware they are committing fraud and participate willingly for the income. Others, particularly in centres that use forced labour — a phenomenon documented by NGOs working in Southeast Asia — are trafficked, have their documents confiscated, and work under threat of violence. Humanitarian organisations have worked with authorities to rescue people held in these facilities.\n\nTechnology enables scale. Voice-over-internet services allow a caller in one country to display a local phone number in another. Cheap software generates fake call centre background noise. Scripts are tested and refined over time to maximise conversion. Some operations even use auto-diallers to pre-screen who answers and then connect a live agent only to those who seem promising. Understanding that this is an industry, not a lone criminal, helps explain why scam calls can seem so professionally executed.","redFlags":["Caller sounds scripted and follows a predictable pattern of escalation","Background noise suggests an office environment — multiple other voices and typing","The same script is used in multiple calls received weeks apart","Caller has a local-area-code number but seems unfamiliar with local geography","If you ask an unexpected question, the caller pauses noticeably before responding","Calls arrive during the evening in your local time, which is business hours elsewhere"],"whatToDoNow":["Hang up without engaging — any response can flag you as a worthwhile target","Report the number to your national spam call registry and telecom regulator","Do not press any keys or say 'yes' in response to automated prompts","Use a call-filtering app that screens unknown numbers","Share documented call recordings with consumer protection agencies if possible","Warn elderly relatives, as they are frequently targeted by these operations"],"faq":[{"question":"Can you get a scam call centre shut down by reporting it?","answer":"Individually, one report rarely triggers an immediate shutdown. But volume reporting to national authorities and telecom regulators does lead to investigations, and coordinated international law enforcement actions have successfully raided and prosecuted these operations."},{"question":"Why do scam calls often come from nearby area codes?","answer":"Scammers use spoofed numbers that display a local area code to increase the chance that recipients answer the call. The actual physical location of the caller has no relationship to the number shown."}],"lastReviewed":"2026-06-10"},{"slug":"who-do-lottery-scammers-target","url":"https://scamencyclopedia.org/questions/who-do-lottery-scammers-target","question":"Who do lottery and prize scammers target and why?","shortAnswer":"Lottery scammers target people who have expressed interest in sweepstakes, those who have previously entered competitions, and older adults who are more likely to engage with unsolicited mail or phone calls.","explanation":"Lottery and prize scams work because they exploit a universal human response: the possibility of unexpected good fortune. Almost everyone has a moment of excitement when told they have won something. Scammers design their approaches to prolong that moment before scepticism kicks in, and they tailor their targeting to find people most susceptible to the appeal.\n\nPeople who regularly enter sweepstakes, competitions, and prize draws are actively sought out by scammers because they have already demonstrated willingness to engage with prize offers. Many legitimate sweepstakes sell their participant lists, which means an active sweepstakes entrant can receive large volumes of fraudulent prize notifications after their name appears on enough circulation lists.\n\nOlder adults are disproportionately targeted through postal mail, which carries more perceived legitimacy for people who grew up before digital communications. A professionally printed letter on official-looking paper informing someone they have won a foreign lottery can be extremely convincing. The scammers include authentic-looking 'claim forms,' cheque-like documents, and official-sounding case numbers to reinforce the impression of legitimacy.\n\nPeople experiencing financial difficulty are also targeted, because the promise of a large win is most compelling when it would most dramatically change someone's life. Scammers sometimes adapt their approach to the target's apparent circumstances, focusing on how the winnings would help rather than on the mechanics of the claim process.","redFlags":["You have won a lottery you did not enter","You must pay fees, taxes, or insurance before receiving your prize","The notification comes via unsolicited text, email, or post","You are asked to keep the win secret until the prize is claimed","The prize originator is described as a foreign government or international body","Urgency is high — 'you have 48 hours to claim'"],"whatToDoNow":["Do not pay any fee to claim a prize — legitimate prizes do not require upfront payment","Search the name of the lottery or competition organisation online with the word 'scam'","Contact the real organisation directly if the lottery uses the name of a genuine entity","Discard the notification and block any number or email address used","Report it to your national consumer protection or fraud authority","Tell family members who may receive similar notifications"],"faq":[{"question":"Are there any legitimate foreign lottery winnings?","answer":"It is theoretically possible to win a foreign lottery if you actually purchased a ticket. However, you cannot win a lottery you did not enter, and no legitimate lottery requires winners to pay fees before receiving their prize."},{"question":"Why do lottery scam letters sometimes include a real cheque?","answer":"The cheque is fake but convincingly produced. You are asked to deposit it and wire back the 'taxes' or 'fees.' The wire leaves your account immediately; days later the cheque bounces, and you have lost the wired amount."}],"lastReviewed":"2026-06-10"},{"slug":"who-do-tech-support-scammers-target","url":"https://scamencyclopedia.org/questions/who-do-tech-support-scammers-target","question":"Who do tech support scammers target and why?","shortAnswer":"Tech support scammers primarily target older and less tech-confident adults, but anyone can be caught by a convincing browser popup or cold call claiming their device has a serious problem.","explanation":"Tech support scams exploit uncertainty about technology. When a screen fills with alarming warnings about viruses, data theft, or account breaches — often accompanied by a loud audio alarm — many people feel a wave of panic. Scammers manufacture this panic deliberately, because a person who believes their computer is in crisis wants immediate help and is less likely to question whether the 'support' caller is genuine.\n\nOlder adults are targeted more frequently because they are more likely to believe that a visual alarm on their screen represents a real technical threat, and because they may not have anyone nearby they can quickly consult. However, tech support scams have also successfully targeted IT-literate people who are simply having a bad day or who are distracted when the popup appears.\n\nPhone-based tech support scams often use purchased data lists to call people who have previously bought electronics, indicating they own a computer. The caller claims to be from a well-known technology company — a brand the target almost certainly recognises — and says the company's monitoring systems have detected a problem with the target's device. The brand recognition and the claim of proactive outreach both lend false credibility.\n\nRemote access is the critical step in most tech support scams. Once the scammer persuades the victim to install remote desktop software, they can scroll through files, show alarming fake log entries, and eventually claim a subscription fee to 'fix' the problem. Some then use the access to actually install malware, access banking apps, or transfer funds while the victim watches a fabricated repair process on their screen.","redFlags":["A popup with an alarm sound tells you to call a displayed phone number","A cold caller says your computer has sent error reports to their monitoring service","The caller asks you to download software so they can 'see' and fix your device","They show you the Windows Event Viewer and claim normal log entries are viruses","Payment is requested by gift card, wire, or crypto for the 'support service'","After remote access is granted, you notice them navigating to banking or financial apps"],"whatToDoNow":["Close the popup or browser tab — popups cannot diagnose your computer","If the screen appears locked, restart your device","Never call a number displayed in a browser popup or system alert that appeared unexpectedly","If you gave remote access, disconnect from the internet immediately and run a malware scan","Contact your bank if any financial accounts were accessed during the session","Report to your national cyber security authority and consumer protection body"],"faq":[{"question":"Would Microsoft or Apple ever call me proactively about my device?","answer":"No. Microsoft, Apple, and other major technology companies do not make unsolicited outbound calls about device security. If someone calls you claiming to represent them, it is a scam."},{"question":"Can a browser popup actually detect a virus on my computer?","answer":"No. A webpage running in a browser cannot scan your file system or detect malware. Any popup that claims to have found viruses on your computer is a fake designed to frighten you into calling a number."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-pig-butchering-scams-work","url":"https://scamencyclopedia.org/questions/how-do-pig-butchering-scams-work","question":"How do pig-butchering scams work?","shortAnswer":"Pig-butchering scams build a weeks-long false relationship — romantic or friendly — before steering the target into a fake investment platform where deposits grow on screen but cannot actually be withdrawn.","explanation":"The term 'pig butchering' comes from the practice of fattening a pig before slaughter. In fraud terms, it refers to scams where criminals invest significant time building a relationship with a target, incrementally gaining their trust, before introducing a financial scheme designed to extract as much money as possible. The process can unfold over weeks or months.\n\nContact usually begins on a social platform, dating app, or even through a wrong-number text that the scammer turns into a conversation. The scammer is charming, attentive, and appears to have a successful life — often presented as a successful businessperson, investor, or medical professional. Early conversations are about building rapport, not money. The scammer remembers details, sends thoughtful messages, and creates a sense of a genuine, developing relationship.\n\nOnce the relationship feels real to the target, the investment topic arises naturally. The scammer mentions they have been doing well with a particular crypto or forex platform and offers to show the target how to use it. The platform is fraudulent but has been designed with professional-quality graphics, live-looking price charts, and a functioning account dashboard. The target deposits a modest amount, and the platform shows impressive gains.\n\nThe deposits escalate. The scammer encourages adding more funds, sometimes investing alongside the target as a show of confidence. When the target eventually tries to withdraw, obstacles appear: taxes, fees, upgrade thresholds. The amount demanded to 'release' funds grows. Eventually, the platform becomes unreachable or the scammer disappears, and the target is left with a balance that exists only on a screen they can no longer access.","redFlags":["A stranger initiated contact via a wrong number or unsolicited social message and quickly built rapport","The relationship progressed unusually fast and the person seems unusually interested in your life","They mention a financial opportunity casually, as if sharing a personal tip","The investment platform they recommend cannot be found in app store searches or regulatory registers","Withdrawals require payment of additional fees or taxes that keep increasing","The person seems to always have a reason why funds cannot be returned immediately"],"whatToDoNow":["Stop all further deposits immediately if you recognise these patterns","Search the platform name plus 'scam' or 'pig butchering' before adding more funds","Do not pay any further 'fees' to release a balance — this money will also be lost","Report the platform and the account to your national financial regulator","Preserve all communication records for law enforcement","Seek emotional support — this type of scam causes significant psychological harm beyond the financial loss"],"faq":[{"question":"Are pig-butchering scams run by organised crime?","answer":"Yes. Many pig-butchering operations are run by large criminal organisations, sometimes using trafficked workers forced to conduct the conversations. This is an industrial-scale fraud operation, not individual con artists."},{"question":"Is it possible to recover money from a pig-butchering scam?","answer":"Recovery is rare. Cryptocurrency sent to these platforms is moved quickly and is very difficult to trace. However, reporting to authorities helps build the data needed for law enforcement actions that can sometimes disrupt these operations."}],"lastReviewed":"2026-06-10"},{"slug":"why-do-scammers-use-bank-transfer","url":"https://scamencyclopedia.org/questions/why-do-scammers-use-bank-transfer","question":"Why do scammers specifically prefer bank transfer over other payment methods?","shortAnswer":"Bank transfers are fast, widely trusted, and — once authorised by the account holder — treated as legitimate transactions that banks are not always obligated to reverse.","explanation":"Authorised push payment (APP) fraud is one of the fastest-growing categories of financial crime specifically because a bank transfer authorised by the account holder looks, from the bank's perspective, exactly like any other legitimate payment. When you log into your bank, navigate to the payments section, enter details, and confirm the transfer, the bank processes it as an instruction from you. The fact that you were manipulated into giving that instruction is, legally and technically, a complication that can take months to resolve.\n\nScammers prefer bank transfers because they sit in a grey zone between 'card fraud' (where the bank's liability frameworks are well established) and 'cash handover' (which is equally irreversible but harder to arrange). Bank transfers can handle large amounts that gift card limits would prevent. They look legitimate in a victim's transaction history, which can delay detection. And the bank sending the funds has immediate and certain information about where the money went — which means the scammer needs speed rather than perfect anonymity.\n\nMany bank transfer scams involve a form of impersonation: a fake invoice from a supplier, a fake solicitor sending purchase completion funds, a fake HMRC demand. The common element is that the payment looks like something the target would send anyway, just to the wrong account. Scammers spend time and energy making the context believable so the transfer is authorised without extra scrutiny.\n\nRegulatory changes in some countries have begun to shift liability back toward banks in cases of APP fraud, requiring them to reimburse victims unless gross negligence can be demonstrated. This has created pressure on banks to add friction — such as confirmation of payee checks and cooling-off periods — for payments to new recipients. Understanding these protections helps consumers in affected countries know their rights.","redFlags":["Payment instructions arrive just before a deadline you are under pressure to meet","You receive an invoice with different bank details than previous invoices from the same company","A caller says the payment must go to a 'safe account' to protect you from fraud","Bank details were sent only by email or message and not confirmed by a separate call","The payment destination is an account in an unexpected country","The amount is just below any internal approval threshold"],"whatToDoNow":["Use confirmation of payee verification before sending any new bank payment","Call the payee on a known number to verify account details, especially if they changed","If you have been scammed, call your bank immediately to request a payment recall","Report to your national fraud authority so the receiving account can be flagged","Keep records of all communications related to the transaction","Check whether your country's banking regulator has an APP fraud reimbursement scheme"],"faq":[{"question":"What is a 'safe account' scam?","answer":"A safe account scam is when someone posing as a bank fraud investigator or police officer tells you your account has been compromised and you must urgently move your money to a new 'safe' account they provide. That account belongs to the scammer. Banks never ask customers to move money this way."},{"question":"Does confirmation of payee guarantee I am sending to the right person?","answer":"It significantly reduces the risk but is not foolproof. Confirmation of payee checks whether the name on the account matches, but if a scammer has created an account under a business name that closely resembles the real supplier, the check may return a positive result."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-impersonate-government-agencies","url":"https://scamencyclopedia.org/questions/how-do-scammers-impersonate-government-agencies","question":"How do scammers impersonate government agencies?","shortAnswer":"Scammers use spoofed phone numbers that display real government caller IDs, forged official-looking documents, and scripted calls that mimic real government language and processes.","explanation":"Government impersonation is effective because fear of authority is deeply embedded. A call that appears to come from the tax authority, immigration department, social security administration, or police carries immediate weight, and the threat of arrest, deportation, or frozen benefits short-circuits scepticism. Scammers select whichever government body is most likely to frighten their target demographic — tax agencies for working-age adults, immigration authorities for those with visa status concerns, social security for retirees.\n\nCaller ID spoofing is a key enabler. Technology allows scammers to display any phone number they choose. Victims who look up the displayed number and find it genuinely belongs to the relevant government agency may be entirely convinced by the call. Some scam operations are sophisticated enough to direct the victim to a fake website that mirrors the real agency's site, which displays when the victim searches for the number.\n\nThe language and process in these calls is carefully researched. Scammers use real terminology — case numbers, statute references, formal procedural language — to sound authoritative. They may instruct the victim to press a number to speak with an officer, creating the appearance of a proper government hotline workflow. The call often follows a script that includes answers to common questions and objections.\n\nUrgency and secrecy are signature tactics. The victim is told they must settle the matter immediately — today, right now — and must not tell anyone else, including a lawyer, until the issue is resolved. Both instructions serve the scammer: urgency prevents verification, and secrecy prevents a trusted person from identifying the fraud. Legitimate government agencies send formal written notices, allow time to respond, and have no reason to demand secrecy.","redFlags":["A government agency called you unexpectedly demanding immediate payment","The caller says you will be arrested or deported unless you pay now","You are told to keep the call secret and not speak to a lawyer","Payment is requested in gift cards, crypto, or wire transfer","The case number or document number mentioned cannot be verified on the agency's real website","The caller is unwilling to send written confirmation or allow you to call back"],"whatToDoNow":["Hang up and call the government agency using a number from their official website","Do not call back the number that called you — it may be spoofed","Remember that real tax and government agencies send formal written notices first","Report the call to the relevant agency's fraud reporting line","Share the experience with others — government impersonation scams are common and word of mouth helps","Check your country's consumer protection authority for guidance on specific agency impersonation scams"],"faq":[{"question":"Would a real government agency ever leave a voicemail threatening arrest?","answer":"No. Threatening voicemails demanding immediate payment to avoid arrest are never from real government agencies. Legitimate agencies send written notices and allow a formal response period."},{"question":"Can I verify a case number mentioned in a call?","answer":"You can try calling the agency's official number and asking, but do not use any number supplied during the suspect call. Search for the agency's official contact on its real government website."}],"lastReviewed":"2026-06-10"},{"slug":"why-do-scammers-want-to-move-off-platform","url":"https://scamencyclopedia.org/questions/why-do-scammers-want-to-move-off-platform","question":"Why do scammers always want to move the conversation off the original platform?","shortAnswer":"Moving off a platform removes the scammer from oversight, reporting tools, and message monitoring that the original platform can use to detect and shut down fraud.","explanation":"Dating apps, marketplaces, and social platforms have fraud detection systems. Unusual message patterns, links to known scam sites, certain keywords, and reports from other users can all trigger reviews that suspend fraudulent accounts. By moving a target to private email, WhatsApp, Telegram, or another messaging service quickly, the scammer removes themselves from these monitoring systems.\n\nPlatform accounts are also subject to identity verification in some cases, and can be banned permanently. A scammer who moves quickly to an off-platform channel loses nothing if the original account is suspended — the conversation with the target continues uninterrupted on the new channel. On private messaging apps, the scammer has more control: conversations can be deleted, contacts can be blocked, and there is no platform administrator who can be contacted for records.\n\nFor romance scammers particularly, moving off the platform also signals a kind of intimacy escalation. 'I want to talk to you properly, not through this app' frames the move as a personal choice driven by connection rather than a calculated operational step. Many victims experience the move as a positive sign of the relationship's progress, which is exactly the impression the scammer intends.\n\nThere is also a practical element: dating apps often limit the number of messages or features for non-paying users, and maintaining multiple fake profiles across platforms has a cost. Moving to a free, unregulated messaging channel reduces operational overhead and enables the scammer to manage multiple targets simultaneously with less friction.","redFlags":["They suggest moving to WhatsApp, Telegram, or email very quickly after first contact","The reason given is technical ('this app is unreliable') or personal ('I feel more comfortable off here')","They are reluctant to continue conversation on the original platform at all","Once off platform, communication intensity increases sharply","A financial topic is introduced shortly after the channel move","You cannot find their profile anymore on the original platform"],"whatToDoNow":["Keep conversations on the original platform for as long as possible before moving","Use the platform's reporting tools if anything feels suspicious before moving","If you do move channels, be aware that the platform can no longer assist if problems arise","Reverse-image-search profile photos on the new channel using Google Images","Do not share personal contact details like home address or workplace before meeting in person","Trust your instincts — if the urgency to move feels unusual, it probably is"],"faq":[{"question":"Is it ever acceptable to move a conversation off a marketplace?","answer":"Sometimes, for practical reasons like sharing photos or coordinating a meeting. However, be suspicious if the move happens before any legitimate transaction reason exists, or if the other person insists on it urgently."},{"question":"Does moving to WhatsApp protect the scammer from law enforcement?","answer":"Not entirely, but it raises the bar. Encrypted messaging services require legal process to access message content, and international legal cooperation is slow. The scammer is harder to trace than on a platform with a centralised moderation team."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-employment-scams-target-job-seekers","url":"https://scamencyclopedia.org/questions/how-do-employment-scams-target-job-seekers","question":"How do employment scams target job seekers and why are they effective?","shortAnswer":"Employment scammers post attractive fake job listings on legitimate job boards, exploiting the hope and financial pressure that often accompanies job searching.","explanation":"Job seekers are in a psychologically vulnerable state: they need income, they want to present themselves positively, and they are accustomed to sharing personal information as part of the application process. Scammers exploit every one of these factors. A fake job listing that offers a higher-than-average salary for flexible remote work with minimal experience requirements will generate a large response volume, and job boards have struggled to screen all listings before they go live.\n\nThe interview process in an employment scam is designed to feel authentic while gathering personal information or money. A 'recruiter' may conduct a chat interview via WhatsApp or Google Hangouts rather than a video call — convenient for them because text interviews hide the fact that there is no real office in the background. The questions mirror those in a legitimate interview, and an offer is made quickly, sometimes without a full interview at all.\n\nPersonal information gathered during a fake application process is valuable in itself. A curriculum vitae submitted to a fraudulent employer contains name, address, phone number, employment history, and sometimes passport or driving licence numbers. This data can be used for identity theft even if the job seeker never proceeds to a financial stage of the scam.\n\nThe financial element in employment scams takes various forms: a fee to obtain mandatory training materials, a charge for background check processing, or — in the cheque-forwarding variant — instructions to accept funds into your bank account and forward them on. The last variant technically makes the victim a money mule, which carries legal risk beyond the financial loss. The excitement of being offered a good job is a powerful enough motivator that many people override their instincts about these requests.","redFlags":["The job offer came without you applying for that specific role","The salary is significantly above market rate for the responsibilities described","Interview is conducted entirely by text on a messaging app with no video option","You are asked to pay for training, equipment, or a background check before starting","The email domain is a free provider like Gmail rather than a company domain","You are asked to receive funds and forward them to a third party"],"whatToDoNow":["Verify the company exists by searching independently before providing any personal information","Never pay any fee to secure or start a job — legitimate employers do not charge workers","Do not accept payments into your personal account and forward them on","Research the recruiter on LinkedIn and verify they work for the company they claim","Report the listing to the job board on which it appeared","Report to your national consumer protection or fraud authority"],"faq":[{"question":"Can you go to prison for being a money mule unwittingly?","answer":"In many countries, 'I did not know' is a defence, but it becomes harder to sustain if you ignored obvious red flags. Money mule activity can result in a criminal record, account closure, and difficulty obtaining financial services in future even in cases where prosecution does not follow."},{"question":"Is a company real if it has a website?","answer":"A professional-looking website takes minutes to create. Always check the company's registration on official business registries, look for verifiable physical addresses, and search for the company name combined with 'scam' or 'reviews'."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-choose-which-people-to-contact","url":"https://scamencyclopedia.org/questions/how-do-scammers-choose-which-people-to-contact","question":"How do scammers decide which specific people to contact?","shortAnswer":"Scammers use a mix of purchased data lists, social media profiling, demographic targeting, and opportunistic scanning of people who have publicly indicated vulnerability or financial availability.","explanation":"Scam outreach is rarely random at the individual level, even when it appears to be. Mass operations like robocalling or spam email do send messages to enormous lists, but even those lists are curated — sorted by country, age range, income indicators, and past response rates. A person who once responded to a sweepstakes call is more valuable than one who never has, so response history is tracked and sold.\n\nSocial media has made targeting dramatically more precise. Public profiles contain names, rough ages, employers, family structures, life events like marriages, bereavements, moves, and retirements, and sometimes explicit financial references like paying off a mortgage. All of this data helps a scammer construct a personalised approach. Someone who just posted about a bereavement and settling an estate is a valuable target for investment fraud. Someone who posted that they are excited to start a new job abroad is a target for rental fraud.\n\nData brokers aggregate these signals at scale. Companies that legally compile consumer profiles for marketing can sell information that, when used by a scammer, becomes targeting intelligence. Even if each individual data source is legitimate, the combination can create a profile precise enough to underpin a convincing fraud.\n\nScammers also use platform algorithms without knowing it. When a fake profile engages with content about loneliness, investment, or relationship advice, the platform's algorithm may show that profile to people who also engage with those topics — inadvertently surfacing vulnerable targets. This is not a deliberate exploitation of algorithms but an emergent effect of how recommendation systems work.","redFlags":["A contact knows unusual personal details — your name, recent life event, or employer","You receive targeted messages shortly after posting about a personal situation online","The platform where you were contacted is one where you have a detailed public profile","An offer or approach is suspiciously well matched to your recent stated needs","You have recently entered a competition, made a purchase, or had financial news"],"whatToDoNow":["Audit your social media privacy settings and restrict personal details to trusted contacts","Remove your phone number, address, and financial details from any public-facing profiles","Be aware that life transitions — new job, bereavement, divorce, retirement — increase targeting risk","Opt out of data broker profiles using your right to erasure where this applies legally","Treat any highly personalised unsolicited contact with extra caution"],"faq":[{"question":"Does closing or deactivating social media accounts reduce targeting?","answer":"It reduces new targeting significantly, but data already collected about you persists in broker databases. Opt-out requests to data brokers and removal of personal data from public listings addresses the historical exposure."},{"question":"Can scammers target by postcode or neighbourhood?","answer":"Yes. Property transaction records are often public, and scammers targeting property or estate-related fraud can use postcode-level information to approach people who have recently bought, sold, or inherited property."}],"lastReviewed":"2026-06-10"},{"slug":"why-do-scammers-use-romance-to-extract-money","url":"https://scamencyclopedia.org/questions/why-do-scammers-use-romance-to-extract-money","question":"Why do scammers use romance and emotional relationships to extract money?","shortAnswer":"Emotional bonds override rational financial judgement. A person who believes they are in love will often rationalise payments that they would refuse from a stranger.","explanation":"Romance is used as a vehicle for fraud because it creates a unique psychological state in which the normal signals of financial risk are suppressed. When someone is in love — or believes they are — they assign enormous weight to the feelings of the other person and enormous personal cost to the idea of letting that person down or losing the relationship. Scammers exploit both sides: they make the victim feel loved, and they make the financial request feel like a test of that love.\n\nThe investment in the relationship before any financial request is deliberate. Weeks or months of attentive messages, shared stories, apparent vulnerability from the scammer, and manufactured intimacy create a sense that the relationship is real and valuable. By the time a financial request arrives, the victim has already formed an emotional bond that they are reluctant to break by refusing or expressing doubt.\n\nThe framing of money requests is also carefully managed. The scammer rarely says 'give me money.' Instead they present a crisis — a medical emergency, a business problem, a customs fee, a flight home — that positions the payment as helping someone they care about, not giving money to a stranger. This reframing is psychologically powerful: helping a loved one in trouble is not only natural but morally positive in most people's value systems.\n\nRepayment promises extend the fraud. The scammer often promises to repay once they are out of their current difficulty, or promises to visit in person as soon as the financial issue is resolved. These promises keep the victim investing emotionally and financially, sometimes for months. The eventual loss is then not only financial but the loss of what felt like a genuine relationship, compounding the harm significantly.","redFlags":["Declarations of deep love arrive within days or weeks of first contact","Every meeting in person is prevented by a crisis that requires money to resolve","Financial requests are framed as temporary emergencies that will soon be repaid","Refusing to help is met with emotional manipulation — disappointment, hurt, accusations","The person has no friends or family visible in their social media history","Plans for the future are always detailed but never actualised"],"whatToDoNow":["Show the conversation to a trusted friend and ask for an honest reaction","Ask for a live, unscheduled video call — technical excuses are a significant red flag","Never send money to someone you have not met in person, regardless of the reason given","Recognise that investment in an emotional relationship does not create a financial obligation","Seek support from a counsellor or fraud victim support organisation if you feel isolated","Report the profile to the platform and to your national fraud authority"],"faq":[{"question":"Can a romance scammer be in a different country and still be effective?","answer":"Yes, and the distance is often a deliberate feature of the scam. Overseas location provides a ready-made reason for why the relationship stays online, and also for why financial help needs to be wired internationally."},{"question":"Do romance scam victims always realise they have been scammed?","answer":"Not always, and some take months or years. Scammers who have run a long con may simply disappear when they decide the target is depleted, leaving the victim confused about what happened rather than certain they were defrauded."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-money-mule-and-how-are-they-recruited","url":"https://scamencyclopedia.org/questions/what-is-a-money-mule-and-how-are-they-recruited","question":"What is a money mule and how are people recruited into the role?","shortAnswer":"A money mule is someone whose bank account is used to receive and forward scam proceeds. They are often recruited through fake job ads, romantic manipulation, or social media promises of easy money.","explanation":"Money mules are essential to fraud operations because they add a layer between the scammer and the ultimate destination of stolen funds. A victim sends money to a mule's account; the mule forwards most of it on, keeping a small cut. This breaks the audit trail and, because the mule is often in the same country as the original victim, moves the money more easily across domestic banking systems.\n\nRecruitment happens through several channels. Fake job advertisements for 'payment processing agents' or 'financial transfer consultants' are a common route. The job description is vague, the salary is above average, and the only task described is receiving payments and forwarding them. Other mules are recruited through romantic relationships: a scammer develops a connection with someone and eventually asks them, as a personal favour, to receive some funds temporarily and forward them on.\n\nSocial media recruitment is increasingly common, particularly targeting young adults. Messages promise quick earnings for minimal work, sometimes positioned as a financial 'hack' or grey-market opportunity. Mule recruitment posts spread through direct messages on Instagram, TikTok, and Snapchat, often shared by peers who are themselves mules and earn a small referral fee.\n\nMany mule participants do not fully understand the legal exposure they are taking on. Receiving criminal funds and forwarding them is money laundering regardless of whether the person knew the specific source. Banks monitor unusual transaction patterns and will freeze accounts and file suspicious activity reports. Criminal prosecution of mules is a real outcome, and even those not prosecuted often find their banking privileges permanently restricted and their credit record damaged.","redFlags":["A job offer requires you to receive payments and forward them on for a small commission","Someone online asks you to use your account to receive and pass on funds as a favour","The 'job' has no other described duties and pays above market rate","You are told the arrangement is legal and the source of funds is legitimate business","A romantic partner asks you to receive money on their behalf and send it abroad"],"whatToDoNow":["Refuse any request to use your account to receive and forward money from third parties","If you have already done this, stop immediately and contact your bank","Report the recruitment approach to your bank's fraud team and national fraud authority","Seek legal advice if you believe you may already face criminal liability","Keep records of all communications for any future investigation"],"faq":[{"question":"What happens to a money mule when the fraud is discovered?","answer":"Their bank account will typically be frozen and closed. A suspicious activity report will be filed with financial intelligence authorities. They may be interviewed by police and in serious cases prosecuted for money laundering, which carries significant penalties."},{"question":"Can you be a money mule without knowing it?","answer":"In some cases, yes. A genuinely deceived person may not have understood what was happening. Courts and prosecutors consider this, but the defence is stronger when the person reported it promptly upon realising."}],"lastReviewed":"2026-06-10"},{"slug":"why-do-charity-scams-peak-during-disasters","url":"https://scamencyclopedia.org/questions/why-do-charity-scams-peak-during-disasters","question":"Why do charity scams peak immediately after disasters and emergencies?","shortAnswer":"Disasters generate widespread emotional urgency and immediate giving intent before verification infrastructure can catch up with the volume of appeals.","explanation":"When a major disaster occurs — an earthquake, a flood, a humanitarian crisis — charitable impulses spike sharply. People want to help immediately and feel that speed matters. This emotional urgency is precisely the condition that scammers exploit: a donor who feels they must act now to help people suffering is less inclined to pause and verify the organisation they are giving to.\n\nScammers move fast in these situations. Within hours of a major disaster becoming news, fraudulent crowdfunding pages, fake charity websites, and impersonation campaigns targeting well-known relief organisations are active. They use emotionally resonant images sourced from news coverage, names that closely resemble established charities, and social media accounts that appear to have genuine public support. By the time the real charities issue warnings, significant money has already been collected.\n\nSearch engine and social media advertising amplifies the problem. Fraudulent pages can buy search advertising using the name of a disaster combined with donation keywords, appearing above legitimate charity results when emotional donors search in the immediate aftermath. Platform advertising policies have become more restrictive about disaster-related ads, but the lag between ad placement and review gives scammers a window.\n\nThe harm extends beyond the financial. Donors who later discover they were scammed often feel betrayed and may become less willing to give in future, reducing real charitable giving. People in the affected area who were expecting support that never materialised may face practical consequences. The reputational harm to the genuine charitable sector is a secondary but real cost of this type of fraud.","redFlags":["The appeal appeared on the same day or day after a major disaster was reported","The charity name is very similar to a well-known organisation but slightly different","The crowdfunding page has very high targets but limited transaction history or verifiable identity","Payment is by cash, crypto, gift card, or wire only with no major card option","The appeal relies entirely on emotional imagery with no organisational detail","The charity cannot be found in your country's official charity register"],"whatToDoNow":["Donate only to charities verified on your country's official charity register","Go directly to the website of an established international relief organisation rather than clicking links","Be sceptical of crowdfunding campaigns with no prior activity or verifiable history","Report suspicious appeals to your national charity regulator and to the platform hosting them","If you already donated and have doubts, check the transaction statement for the payee details and report if they look suspicious"],"faq":[{"question":"Are all disaster crowdfunding campaigns suspicious?","answer":"No. Many legitimate grass-roots relief efforts run through crowdfunding platforms. Look for verified identities, updates with evidence of activity, transparent use of funds, and the ability to contact the organiser."},{"question":"Do established charities ever get impersonated?","answer":"Frequently. Scammers use names like 'Red Cross Disaster Relief Fund' or similar to trade on the established reputation of a real organisation. Always go to the charity's direct, official website rather than a link in a social media post."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-subscription-scams-trap-people","url":"https://scamencyclopedia.org/questions/how-do-subscription-scams-trap-people","question":"How do subscription and billing scams trap people without them noticing?","shortAnswer":"Subscription scams use free trial sign-ups, obscure terms that auto-charge after the trial ends, and billing amounts small enough to go unnoticed on bank statements for months.","explanation":"Subscription fraud exploits the gap between the decision to sign up and the habit of reviewing bank statements. A free trial offer that requires a card number is entirely legitimate when the terms are clear — but when the transition to a paid subscription is buried in fine print, made difficult to cancel, or proceeds automatically with no reminder, it crosses into deceptive practice and, in its worst forms, into outright fraud.\n\nThe mechanism is simple: a sign-up process emphasises the free element while obscuring the charge that follows. Phrases like 'cancel anytime' appear prominently while the specific date when the charge occurs and the amount of the charge appear in grey, small-print terms that a user scanning quickly will miss. The charge may be in a currency the user does not recognise if the service is based overseas, making it harder to connect the statement entry to the sign-up.\n\nSome subscription scams go further by continuing to charge after cancellation requests, making the cancellation process deliberately complicated, or denying that a cancellation was received. Support contacts respond slowly or not at all. Chargebacks may be fought by the merchant with evidence that the user 'agreed' to the terms during sign-up.\n\nMalicious app subscriptions operate through the same pattern. An app in an official store requests access to subscriptions, charges begin, and the amounts are designed to sit just below the level that triggers most users to investigate. A charge of a few dollars or pounds monthly may persist for a year before the user notices the total amount paid. Reviewing all active subscriptions on phone and card statements is one of the most effective financial health practices available.","redFlags":["A free trial requires full payment card details with a very easy sign-up process","Terms about post-trial charges are in small print or behind a 'see more' link","The cancellation process requires a phone call or chat with multiple retention steps","You receive a charge from an unfamiliar company name shortly after signing up for anything free","The company is based in a different country to the service you believed you were using","Cancellation confirmation is not provided in writing"],"whatToDoNow":["Review your card and bank statements monthly for small recurring charges you do not recognise","Use a virtual card for free trials to prevent unauthorised post-trial charges","Screenshot or save confirmation emails when you cancel any subscription","Dispute unrecognised or persistent charges with your bank as soon as you notice them","Check for unwanted subscriptions through your phone's Apple ID or Google Play subscription manager","Report deceptive subscription practices to your national consumer protection authority"],"faq":[{"question":"Can I get a refund on subscription charges I did not intend?","answer":"Sometimes. Credit card chargebacks on the grounds that you were not adequately informed of terms can succeed, particularly for first charges after a free trial. Banks assess these on a case-by-case basis. Acting quickly improves the chance of success."},{"question":"Is a negative option trial illegal?","answer":"Negative option billing (where inaction converts to a paid subscription) is legal in many jurisdictions if adequately disclosed, but regulations increasingly require conspicuous disclosure and easy cancellation. Non-disclosure or obstruction of cancellation can be a regulatory violation."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-use-ai-to-target-victims","url":"https://scamencyclopedia.org/questions/how-do-scammers-use-ai-to-target-victims","question":"How do scammers use artificial intelligence to target victims?","shortAnswer":"Scammers use AI tools to generate convincing personalised messages at scale, create deepfake voices and images, and automate the early stages of relationship building.","explanation":"Artificial intelligence has lowered the cost and raised the quality of scam operations. Tasks that previously required skilled human writers or callers can now be automated. Large language models generate grammatically correct, contextually appropriate messages that do not carry the spelling and phrasing errors that were once useful warning signs of overseas-based fraud. Personalisation — inserting a target's name, referencing their job or interests — can be applied automatically to thousands of messages per hour.\n\nDeepfake voice technology allows scammers to impersonate real people in phone calls. Audio from a public social media video of a family member or colleague can be processed to create a synthetic voice capable of saying anything. This enables the grandparent scam to work even when the grandparent asks the caller to confirm something only the real grandchild would know — with enough source audio, even that barrier can potentially be overcome.\n\nDeepfake video, while more computationally demanding, has been used in romance and business contexts. A scammer conducting a video call can use a real-time face-swap tool to display a different identity. In business fraud, executive impersonation via video has been used to authorise large wire transfers in what appeared to be a legitimate video conference with a senior figure from the organisation.\n\nAI also assists with targeting. Natural language processing tools can analyse public social media at scale to identify individuals whose posts indicate emotional vulnerability, financial availability, or relevant life events. The combination of mass data analysis and individually personalised outreach makes AI-assisted fraud significantly more effective than traditional blast approaches.","redFlags":["Messages are fluent and personalised but feel slightly generic in their warmth","A phone caller sounds like someone you know but the voice has unusual rhythm or artifacts","A video call image is slightly off — unnatural movement, blurring at the edges of the face","The same conversational structure appears in multiple separate contacts over time","An 'executive' on video authorises an unusual financial instruction but is hard to reach afterwards","Responses to your messages arrive too quickly and too consistently"],"whatToDoNow":["Establish a personal verification code with family members for emergency calls","Ask unexpected callers a question only the real person could answer, including an obscure personal detail","For large financial authorisations, require a separate verification step outside the same communication channel","Be sceptical of video calls where lighting, synchronisation, or facial movement seems slightly off","Report suspected deepfake impersonation to the platform and to law enforcement","Stay informed about how AI fraud is evolving via consumer protection resources"],"faq":[{"question":"Can you tell if you are talking to an AI chatbot versus a real person?","answer":"Not reliably. Modern language models produce human-like text. Clues like very fast response times, lack of genuine personal detail when probed, and no memory of contradictions can help, but the distinction is increasingly difficult to make without technical assistance."},{"question":"Are there tools to detect deepfake audio?","answer":"Research tools and some commercial services attempt to detect synthetic audio, but the technology is improving faster than detection. The most reliable defence is a verification system agreed in advance with family or colleagues."}],"lastReviewed":"2026-06-10"},{"slug":"why-are-older-adults-targeted-more-often","url":"https://scamencyclopedia.org/questions/why-are-older-adults-targeted-more-often","question":"Why are older adults targeted by scammers more often than younger people?","shortAnswer":"Older adults are targeted due to a combination of accessible savings, more trusting telephone habits, potential social isolation, and the fact that age-specific life events create predictable targeting opportunities.","explanation":"It would be a mistake to explain the targeting of older adults through a single factor — the reality involves several overlapping vulnerabilities that scammers recognise and exploit simultaneously. The most discussed is financial: people in their 60s and 70s often have retirement savings, property equity, and accessible cash that they have built up over a working lifetime. The potential reward from a successful scam is higher than it would be for someone just starting their career.\n\nSocial context matters significantly. People who live alone, have lost a partner, or have children who live far away can experience meaningful social isolation. When a scammer provides regular, warm, attentive contact, it fills a genuine gap. This makes the manufactured relationship feel especially real and especially precious, which is why older adults may continue engaging with a romance or investment scammer long after a less isolated person might step back.\n\nDigital literacy patterns are relevant but not universal. While many older adults are fully comfortable with technology, there are also those who are less familiar with how spoofed phone numbers work, what a convincing phishing site looks like, or how to quickly verify a claim online. Scammers who understand their target demographic can calibrate their approach — using phone calls and postal mail rather than social media — to remain in the channel where their target is least defended.\n\nUnderreporting is a compounding factor. Research consistently finds that older adults are less likely to report fraud, partly from embarrassment and partly from fear that family members will use it as evidence that they need supervised care. This means scams targeting this group recur without generating the reporting data that would otherwise help authorities act faster.","redFlags":["Unsolicited contact that is disproportionately warm and attentive","Callers asking about financial situation, property ownership, or living arrangements","Requests for urgent decisions that preclude consulting family","Lottery or prize notifications arriving by post or phone","'Government officials' demanding immediate payment to avoid consequences"],"whatToDoNow":["Establish an open, non-judgemental family conversation about scam tactics before they are encountered","Encourage older relatives to check with a trusted person before responding to any unexpected financial request","Set up a shared family alert — a simple check-in call before any payment to a new contact","Speak with the bank about any additional protections available for account holders","Reassure older adults that reporting a scam is not evidence of incapacity — it is a healthy response","Share consumer fraud authority resources in an accessible format"],"faq":[{"question":"Are younger people safer from scams than older people?","answer":"Not necessarily. Younger adults are targeted heavily by employment scams, crypto investment fraud, social media scams, and romance scams. The types of scam differ; the overall risk does not simply decrease with youth."},{"question":"What is the best conversation to have with an older relative about scams?","answer":"The most effective conversations are specific rather than general. Describing a real scam scenario — 'if someone calls and says you've won a prize' — is more useful than generic warnings to 'be careful.' Agree on a simple rule: consult a family member before making any unexpected payment."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-find-vulnerable-people-online","url":"https://scamencyclopedia.org/questions/how-do-scammers-find-vulnerable-people-online","question":"How do scammers find vulnerable people on social media and dating platforms?","shortAnswer":"Scammers use keyword searches, profile filters, algorithm-driven discovery, and public post content to identify people showing signs of loneliness, grief, financial need, or recent life disruption.","explanation":"Social media platforms are designed to help people find and connect with others who share interests or circumstances. The same search and discovery infrastructure that allows a support group member to find others going through similar experiences also allows a scammer to identify targets. A search for posts containing words associated with loneliness, grief, divorce, or financial stress can surface a list of potential contacts within minutes.\n\nDating platform algorithms present a related but distinct opportunity. Most platforms sort profile visibility partly based on activity — a recently active user who is frequently using the app appears higher in search results and gets more recommended matches. A scammer with an active fake profile benefits from the same algorithmic promotion, reaching a large number of real users without needing to specifically identify them.\n\nProfile content is a targeting tool. Bios that mention being newly single, recently widowed, looking for serious commitment, or struggling since a relationship ended signal both emotional availability and the specific vulnerabilities a romance scammer looks for. Even seemingly neutral information — that someone is in their 50s, lives alone, enjoys quiet evenings — can help a scammer construct an appropriate persona and approach.\n\nOnce initial contact is made, the scammer's next skill is rapid assessment. Questions like 'do you have family nearby' or 'have you been on any trips lately' are not conversation starters — they are diagnostic questions that tell the scammer whether the target has a close support network, disposable income, and the kind of life that could be supplemented by an exciting new relationship. People who answer openly and warmly score high on the scammer's internal assessment.","redFlags":["A new contact seems to have read your profile very thoroughly and references specific details","They ask personal questions about your family structure or living situation early on","Their questions follow a pattern more like an interview than a conversation","They found you on a platform you use infrequently or do not consider a dating platform","Their interest level is disproportionate given how little they actually know about you"],"whatToDoNow":["Set social media profiles to private or restrict who can see your posts","Remove grief, loneliness, or financial details from public-facing bios and posts","Be thoughtful about what you share publicly during major life transitions","Review who has access to your dating profile information before making details public","Report profiles that seem to be systematically mining personal information"],"faq":[{"question":"Is it safe to put your real age on a dating profile?","answer":"Age itself is not a significant risk factor, but pairing age with other details — living alone, recently widowed, financially comfortable — creates a richer targeting profile. Use the platform's privacy controls to limit who can see your detailed profile."},{"question":"Do scammers use genuine photos or stock images?","answer":"Scammers typically use stolen photos of real people — often taken from public social media accounts or modelling profiles. Reverse-image-searching a profile picture is one of the most effective quick checks available."}],"lastReviewed":"2026-06-10"},{"slug":"why-is-it-difficult-to-prosecute-overseas-scammers","url":"https://scamencyclopedia.org/questions/why-is-it-difficult-to-prosecute-overseas-scammers","question":"Why is it so difficult to prosecute scammers who operate from overseas?","shortAnswer":"International prosecution requires cooperation between law enforcement agencies across multiple jurisdictions, each with different legal standards, timelines, and practical capabilities.","explanation":"Most scam operations affecting consumers in the UK, US, Australia, and Canada are physically located overseas. This geographic separation creates a fundamental legal problem: law enforcement in the victim's country generally cannot arrest, search, or seize assets in another country without formal legal assistance from that country. This process — called mutual legal assistance or similar terms in different systems — can take months or years, during which the scammers continue operating.\n\nEven when international cooperation is forthcoming, the legal standards required to take action may differ significantly. Evidence that would easily secure a search warrant in the UK might not meet the threshold in a different jurisdiction. The offence as defined in the victim's country might not be codified in exactly the same way elsewhere, creating gaps in what can be charged.\n\nScammers deliberately structure their operations to maximise jurisdictional fragmentation. The servers hosting a fake platform might be in one country, the bank accounts in a second, the call centre in a third, and the principals managing the operation in a fourth. Even with perfect international cooperation, dismantling the whole structure requires coordination across all four simultaneously, which is rare in practice.\n\nCorruption and limited law enforcement capacity in some jurisdictions add further difficulty. In countries where significant scam infrastructure is known to operate, local law enforcement may lack the technical expertise, the mandate, or the political independence to take action against well-connected fraud operations. International pressure and joint operations have produced results in some cases, but they remain the exception rather than the rule.","redFlags":["A platform is registered in a jurisdiction known for light financial regulation","Support contacts use only email with non-business domains and no verifiable address","Payment destinations are in countries different from the stated organisation","The company cannot be found on any national business registry","Domain registration uses privacy protection to hide the owner"],"whatToDoNow":["Report the fraud domestically first — even if prosecution is difficult, reports contribute to intelligence","File reports with international fraud reporting bodies where available","Preserve all evidence: communications, transaction references, website screenshots, and wallet addresses","Consult a legal professional about private recovery options if amounts are significant","Avoid paying recovery scammers who claim to have access to your funds abroad"],"faq":[{"question":"Do countries ever extradite people for fraud offences?","answer":"Yes, in some cases, particularly between countries with extradition treaties and where the fraud is of significant scale. However, extradition is a slow and resource-intensive process, and it is not a realistic outcome for most individual fraud cases."},{"question":"Are there any international bodies that coordinate anti-scam enforcement?","answer":"Yes. Interpol coordinates multi-country operations, and bodies like the FATF set standards for anti-money-laundering cooperation. Bilateral law enforcement partnerships have produced notable takedowns, but coverage is uneven globally."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-build-fake-credibility","url":"https://scamencyclopedia.org/questions/how-do-scammers-build-fake-credibility","question":"How do scammers build fake credibility to make their schemes seem legitimate?","shortAnswer":"Scammers use professional-looking websites, fabricated reviews, fake regulatory logos, social proof via social media, and stolen credentials from real organisations to appear trustworthy.","explanation":"Creating an illusion of legitimacy is a foundational skill in fraud. A scammer who appears to represent a regulated, reviewed, professionally presented organisation is far more likely to secure the target's money and trust than one who seems disorganised. The investment in credibility infrastructure is calculated: the more convincing the facade, the larger the eventual extraction.\n\nWebsites are a primary credibility tool. A well-designed investment platform or fake retailer can be indistinguishable from a legitimate one at a glance. Scammers purchase similar domain names to real companies, copy visual designs, and add functional-looking features — login portals, portfolio dashboards, live price feeds — that create the appearance of a working product. Some even host these sites on reputable infrastructure to ensure they load quickly and have valid SSL certificates, which many users associate with legitimacy.\n\nFake social proof is manufactured systematically. Fabricated customer reviews appear on pages the scammer controls. Social media accounts are populated with posts, followers (often purchased bots), and engagement that makes them look active and genuine. Fake press mentions and 'as seen in' logos from major media outlets are added to landing pages without any real coverage behind them.\n\nRegulatory logos are frequently stolen or fabricated. A padlock symbol or the logo of a genuine financial regulator placed on a page implies official registration that does not exist. In some cases, scammers go further and register entities in permissive jurisdictions, obtaining real incorporation documents that they present as proof of legitimacy, even though they bear no relationship to meaningful consumer protection oversight.","redFlags":["Regulatory logos or 'as seen in' media logos cannot be verified by checking the regulator or media organisation","The company has many glowing reviews but all were posted in a short period","The website domain is slightly different from a well-known legitimate company","An SSL certificate exists but the domain and company details do not match","The 'team' page shows professional headshots but names cannot be found on LinkedIn","Trust badges or awards cannot be traced back to the issuing organisation"],"whatToDoNow":["Always verify regulatory registration directly on the regulator's own website — never from a link the company provides","Check the WHOIS record for the website domain to see how recently it was registered","Search for the company name on independent review platforms rather than their own site","Look up team members on LinkedIn to verify they exist and have the stated history","Treat any award or accolade as unverified until you can find it on the awarding body's website"],"faq":[{"question":"Does a padlock in the browser address bar mean a site is safe?","answer":"No. The padlock indicates the connection between your browser and the website is encrypted, which prevents eavesdropping. It says nothing about whether the website itself is operated by a legitimate business or a scammer."},{"question":"Can I trust a company registered at Companies House or equivalent?","answer":"Registration on a national companies register confirms the entity exists legally, but it does not verify that the company is reputable, solvent, or actually doing the business described. Scammers do create registered companies."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-social-engineering-in-scams","url":"https://scamencyclopedia.org/questions/what-is-social-engineering-in-scams","question":"What is social engineering and how do scammers use it?","shortAnswer":"Social engineering is the use of psychological manipulation to bypass rational thinking and persuade people to take actions they would otherwise refuse, such as sharing sensitive information or sending money.","explanation":"Social engineering is the human-facing side of fraud — the techniques scammers use to influence behaviour rather than exploit technical vulnerabilities. It works because human psychology has predictable patterns: we respond to authority, we help people in distress, we fear loss, and we want to reciprocate kindness. Each of these patterns can be exploited by someone who understands them and is willing to use them deliberately.\n\nAuthority is one of the most powerful levers. A caller who presents as a police officer, tax investigator, or bank security specialist carries immediate credibility. People are conditioned from childhood to cooperate with authorities, and breaking that conditioning in a moment of pressure requires a conscious effort that is hard to make while also managing the anxiety the caller is generating. Scammers often compound authority by referencing specific official-sounding case numbers or statutes.\n\nUrgency eliminates careful thinking. When a caller says you must act within the next hour or your account will be closed, you will be arrested, or someone you care about will suffer, the adrenaline response narrows focus to the immediate threat. Rational assessment of whether the scenario is plausible requires the kind of reflective thinking that urgency is specifically designed to disable. This is why taking any amount of time — even just hanging up and calling back — is so effective as a defence.\n\nScarcity and flattery are used in investment fraud. 'I'm only sharing this with a few people I trust' or 'this opportunity closes tonight' both exploit the desire not to miss out. Being made to feel special, selected, or inside a privileged group activates the same willingness to proceed without checking. Understanding these mechanisms allows people to name them when they feel them — 'this is a scarcity tactic' — which disrupts their effectiveness.","redFlags":["Extreme urgency — you must act within minutes or hours","A caller claims special authority (police, tax investigator, fraud department)","You are flattered or made to feel specially selected for an opportunity","Fear of consequences is the primary reason you are given to act","The caller insists you must not tell anyone else","Multiple pressure tactics are used in rapid succession"],"whatToDoNow":["Recognise the tactic being used: authority, urgency, scarcity, or flattery","Apply a simple rule: any unexpected communication requesting money or information warrants a pause and independent verification","Hang up and call back on a verified number — legitimate organisations support this","Tell someone else about the contact before taking any action","Remember that the urgency itself is the manipulation — the real deadline is made up"],"faq":[{"question":"Is social engineering only used in phone scams?","answer":"No. Social engineering appears in email, SMS, dating apps, social media, in-person scenarios, and even physical mail. Whenever a human being is being manipulated psychologically rather than a system being exploited technically, social engineering is occurring."},{"question":"Can educated or highly intelligent people resist social engineering?","answer":"Intelligence and education help, but they do not provide immunity. Social engineering targets emotional responses, and everyone has emotional responses. Research shows that being in a stressed or distracted state significantly reduces resistance regardless of education level."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-housing-rental-scams-target-renters","url":"https://scamencyclopedia.org/questions/how-do-housing-rental-scams-target-renters","question":"How do housing and rental scams target people looking for accommodation?","shortAnswer":"Rental scammers post fake property listings, often using photos taken from real listings, and ask for deposits or rent before any viewing, exploiting the urgency of housing searches.","explanation":"Housing scams exploit one of the most stressful experiences in modern life: finding somewhere to live quickly in a competitive rental market. When someone needs to move urgently, is in an unfamiliar city, or has already lost out on several properties, they become more willing to overlook warning signs to secure a place. Scammers understand this pressure and design listings to appeal to exactly those circumstances.\n\nThe most common mechanism is a listing that appears on a real property portal but advertises a property the scammer does not own or have permission to let. Photos are taken from a legitimate listing on another platform, sometimes from a sale listing for the same property. The rent advertised is typically below market rate for the area, which generates strong interest quickly and creates its own form of urgency — 'many people are interested, you should commit now to avoid losing it.'\n\nThe request for a holding deposit or advance rent before a viewing is the key fraud step. Scammers explain this as standard practice, landlord preference, or a requirement given high demand. In reality, no legitimate landlord in a regulated market has a mechanism that requires payment before the prospective tenant has seen the property. The payment goes to the scammer, and the victim typically cannot reach them after it has been sent.\n\nOnline rental markets have become more vulnerable as accommodation platforms operate internationally, making it harder to verify that a person claiming to be a local landlord is who they say they are. Some scammers pose as landlords who are temporarily overseas for work and who cannot show the property themselves, asking for a deposit to hold it while they arrange access — another mechanism designed to explain why an in-person verification step cannot happen.","redFlags":["Rent is significantly below the market rate for similar properties in the area","You are asked for a deposit or rent before viewing the property","The landlord is 'temporarily overseas' and cannot arrange a viewing in person","Communication is only via messaging app or email — no phone call or video is possible","Photos appear on multiple different listings or can be found elsewhere on a reverse image search","A booking platform you have not heard of is used as an intermediary"],"whatToDoNow":["Never pay any money before viewing a property in person","Reverse-image-search property photos to check whether they appear in other listings","Verify the landlord's identity against the property's ownership records where these are public","Use only established, regulated letting agents for significant deposits","Report fake listings to the property portal on which they appeared","Report rental fraud to your national consumer protection or fraud authority"],"faq":[{"question":"Is it safe to use Airbnb or similar platforms for short-term rentals?","answer":"Established platforms with escrow payment systems and verified listings offer more protection than direct landlord contact. The risk rises when a platform operator asks you to pay outside the official system — this is a strong scam signal regardless of how legitimate the listing looks."},{"question":"Can you verify a property ownership record yourself?","answer":"In many countries, yes. Land registries in England and Wales, Ireland, and several other jurisdictions allow public title searches. Even a partial check — confirming the owner's name and that it matches the person you are communicating with — is a useful step."}],"lastReviewed":"2026-06-10"},{"slug":"why-do-scammers-ask-for-personal-identification","url":"https://scamencyclopedia.org/questions/why-do-scammers-ask-for-personal-identification","question":"Why do scammers ask for copies of your passport, driving licence, or other ID?","shortAnswer":"Personal identification documents enable scammers to commit identity theft, open fraudulent accounts, apply for credit, and sell verified identity packages to other criminal actors.","explanation":"A copy of a passport or driving licence is one of the most valuable items a scammer can obtain. Unlike a stolen card number, which can be cancelled in minutes, a government-issued identity document is valid for years, hard to replace quickly, and accepted as proof of identity across many contexts — financial applications, rental agreements, online account verifications, and more. Once a scammer has your documents, the damage can take years to fully contain.\n\nIdentity fraud using stolen documents follows predictable patterns. Scammers use your details to apply for credit, loans, or overdrafts in your name. These debts are then not repaid, damaging your credit score and potentially leading to debt collectors contacting you for liabilities you did not incur. New financial accounts can be opened to receive and launder money, creating criminal history attached to your identity. Utility accounts, mobile phone contracts, and tenancy agreements can all be taken out fraudulently.\n\nThe document itself also has a secondary market value. Verified identity packages — a real photo ID with a matching selfie — are sold to other fraudsters who need to complete identity verification checks to access financial services or platform accounts. This means a single submission of your documents to a scammer can generate ongoing harm as those documents circulate through criminal markets.\n\nScammers request ID under multiple pretexts: a job application asking for HR documents, an investment platform requesting KYC verification, a landlord asking for tenant references, or a prize claim requiring identity confirmation. Any of these can be a genuine request — but when the requester has not been independently verified, or when the request comes very early in a relationship before any legitimate need for it has arisen, it should be treated with significant caution.","redFlags":["A document request arrives before any legitimate relationship is established","You are asked to photograph yourself holding your ID document","The requesting entity cannot be verified on an independent official register","The request is via a messaging app rather than through a formal business channel","You are offered a payment or benefit in exchange for ID verification","The platform requesting documents has no verifiable physical address or regulation"],"whatToDoNow":["Never send ID documents to any entity you have not independently verified","Check that an investment platform or employer is registered with relevant authorities before submitting documents","If you have already submitted documents to a suspicious entity, place a fraud alert on your credit file immediately","Report to your national identity fraud authority and request guidance on what to monitor","Monitor your credit report for unfamiliar applications or accounts","Contact financial institutions proactively if you believe your documents are in criminal circulation"],"faq":[{"question":"Can you watermark a document to protect against misuse?","answer":"Adding a text watermark saying 'provided to [company] on [date] for [purpose]' reduces the document's value for other uses, since the watermark would appear on any fraudulent copy. It is not foolproof but it is a practical precaution."},{"question":"How do you know if your identity is already being misused?","answer":"Signs include unexpected credit applications, unfamiliar debts appearing, calls from debt collectors for unknown obligations, or being informed of failed credit checks you did not initiate. Regular credit report monitoring is the most effective early-warning system."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-online-shopping-scams-target-bargain-hunters","url":"https://scamencyclopedia.org/questions/how-do-online-shopping-scams-target-bargain-hunters","question":"How do online shopping scams target bargain hunters?","shortAnswer":"Fake online shops offer popular products at dramatically reduced prices, charge real payment, and either ship nothing, ship counterfeit goods, or gather payment details for fraud.","explanation":"Online shopping fraud relies on the fact that price is one of the most powerful motivators in purchase decisions. A legitimate-looking product page offering a sought-after item at 60% below its retail price generates immediate interest, and the combination of a functional-looking website, product photos, and a shopping cart creates the impression of a normal e-commerce transaction. The fraud is only apparent when the item never arrives.\n\nScam shops proliferate particularly around major sale periods — Black Friday, Christmas, back to school — when buyers are already primed to seek deals and are doing high volumes of searching. Scam ads can appear in social media feeds alongside legitimate retailer ads, and without inspecting the URL or the seller's background, the difference is not immediately visible.\n\nThe website itself may be a direct clone of a real retailer, or an entirely invented brand with no prior history. Fake stores often show fabricated customer reviews, invented trust scores, and copied or AI-generated product descriptions. In some cases, a real product is shipped — but it is a significantly inferior counterfeit, which can be practically useless or even dangerous if it is electronics, cosmetics, or medications.\n\nPayment data harvesting is a secondary motive in some fake shops. The checkout process asks for full card details which are captured and used for subsequent card fraud even if the transaction is 'processed' and appears to have gone through. The victim discovers weeks later that additional unauthorised charges have appeared on the same card.","redFlags":["Prices are dramatically below what any legitimate retailer offers for the same product","The website was registered recently and has no history of reviews on independent platforms","The only contact option is an email address, no phone number or physical address","Payment is by bank transfer rather than by card with buyer protection","The URL is slightly different from the brand name you searched for","Delivery timescales are described as 'international shipping' with very long windows"],"whatToDoNow":["Search the shop name plus 'review' or 'scam' before placing any order","Check the domain registration date using WHOIS lookup","Pay by credit card where possible to benefit from chargeback protection","Never pay by bank transfer for consumer goods from an unknown seller","Report the fake shop to the platform hosting its ads and to your consumer protection authority","If your card details were entered, notify your bank and request card replacement"],"faq":[{"question":"Can a social media ad link to a scam shop?","answer":"Yes, frequently. Scam shops routinely buy advertising on social media platforms. The presence of an ad does not indicate the advertiser has been vetted. Always inspect the URL before entering payment details."},{"question":"What should I do if an item never arrived and the seller is unresponsive?","answer":"Raise a dispute with your card issuer immediately. If you paid by credit card, section 75 or chargeback mechanisms may apply. If you paid by bank transfer, contact your bank for a payment recall. Report to your consumer protection authority."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-mlm-pyramid-schemes-recruit-members","url":"https://scamencyclopedia.org/questions/how-do-mlm-pyramid-schemes-recruit-members","question":"How do MLM and pyramid schemes recruit members and why are they hard to leave?","shortAnswer":"MLM and pyramid schemes recruit through personal networks, aspirational income promises, and community belonging — making exit feel like social rejection and financial failure simultaneously.","explanation":"Multi-level marketing schemes and pyramid fraud use the existing trust in personal relationships to spread recruitment. Rather than advertising to strangers, they are pitched by people who are already in a target's network — friends, family members, colleagues — who genuinely believe in the product and opportunity, often because they have invested significantly in it themselves. This personal endorsement bypasses the scepticism that a cold pitch from a stranger would generate.\n\nThe initial presentation is almost always aspirational. Slides or videos show successful participants' income and lifestyle, typically focusing on the top performers whose results are exceptional within the scheme. The mathematical reality — that the majority of participants at any level below the founders lose money once business expenses are factored in — is not presented. Questions about failure rates are deflected with statements about effort and commitment being the differentiating factors.\n\nCommunity is a significant retention mechanism. New participants are rapidly integrated into a social group defined by shared belief in the product and the scheme. Group events, training weekends, and messaging groups create a sense of belonging and identity. When a participant begins to doubt the scheme's viability, voicing that doubt means risking social exclusion from a community that has become meaningful to them.\n\nSunk cost keeps people in longer than rational analysis would justify. After someone has spent significant money on product inventory, training materials, and participation fees, the reluctance to accept that this investment is unlikely to be recovered leads them to invest further rather than stop. Scheme leaders often explicitly use this language: 'success is just around the corner, those who quit before reaching it never find out.'","redFlags":["Income from the scheme comes primarily from recruiting others rather than product sales","You must purchase an inventory of products to participate","Participants are shown exceptional individual results, not average or median outcomes","Leaving the scheme means leaving a significant social group","Questions about failure rates or income disclosure statements are deflected","Participation fees or mandatory purchases escalate over time"],"whatToDoNow":["Request the company's income disclosure statement and read the median earnings, not the top performers","Calculate your actual costs and income to date before investing further","Seek an objective opinion from a trusted person outside the scheme's community","Check the company against your national consumer protection authority's records","Know that leaving is possible — support groups for former participants exist online","Report suspected pyramid scheme activity to your national consumer protection or financial regulator"],"faq":[{"question":"What is the difference between a legitimate MLM and a pyramid scheme?","answer":"A legitimate MLM generates income primarily from selling real products to real customers outside the scheme. A pyramid scheme generates income primarily from recruiting new participants. The distinction matters legally, but in practice the line is frequently blurred, and most participants lose money in both structures."},{"question":"Is it possible to make money in an MLM?","answer":"A very small percentage of participants — typically those at the top of the structure, often the founders — do make substantial income. For the vast majority at lower levels, income disclosure data from the companies themselves typically shows most participants earn very little or lose money when costs are deducted."}],"lastReviewed":"2026-06-10"},{"slug":"why-do-scammers-ask-to-pay-by-cash","url":"https://scamencyclopedia.org/questions/why-do-scammers-ask-to-pay-by-cash","question":"Why do some scammers specifically ask for payment in cash?","shortAnswer":"Cash is untraceable, irreversible, and leaves no digital record — making it the payment method with the fewest mechanisms for recovery or investigation.","explanation":"Cash retains a special status in fraud because it removes almost all of the infrastructure that might help a victim recover funds or help authorities trace the fraud. No bank intermediary records the transaction. No digital footprint connects the sender to the recipient. No chargeback mechanism exists. Once cash is handed over, the transaction is complete in every sense that matters to the scammer.\n\nCash-based scams frequently take place in person or through a courier. A victim is directed to withdraw funds from a bank — sometimes in multiple instalments to avoid triggering bank notifications — and hand them to someone who arrives at their door, or to travel to a location to hand over money. The in-person element adds a layer of coercion and urgency that reinforces the scammer's control over the situation.\n\nBanks have become increasingly aware of this pattern and train staff to intervene when older customers make unusual cash withdrawals. Conversations at the counter can interrupt a scam in progress, which is why scammers sometimes instruct victims to tell the bank the money is for something mundane like home renovation or a gift. This instruction to deceive the bank is itself a significant red flag.\n\nGrandparent scams, doorstep fraud, and utility or tradesperson scams are the categories most likely to involve cash. The physical proximity of the fraudster — or their courier — and the absence of any intermediary makes these particularly difficult to interrupt once in progress. Pre-emptive conversations with older family members about never handing cash to anyone who arrives unannounced or following an unexpected phone call remain one of the most effective preventions.","redFlags":["You are asked to withdraw cash from your bank and hand it to a courier","A caller instructs you to tell the bank the withdrawal is for a specific routine purpose","A tradesperson or utility worker arrives unannounced and quotes a cash-only price","You are told to meet someone to hand over cash for a transaction that started online","The amount requested in cash escalates after an initial payment is made"],"whatToDoNow":["Never hand cash to anyone following an unexpected phone call, no matter how authoritative they sound","Discuss with older relatives that banks and government agencies never send couriers to collect cash","Contact your bank directly if you have made an unusual cash withdrawal under pressure","Report cash courier fraud to the police and your national fraud authority","If a bank cashier asks why you need a large cash withdrawal, be honest — they may be trying to help"],"faq":[{"question":"Are all cash-only businesses or services suspicious?","answer":"No. Many legitimate small businesses prefer cash for practical reasons. The red flag is when cash is specifically insisted upon following an unexpected contact, for an implausible reason, with urgency and secrecy attached."},{"question":"Can a bank refuse to let me withdraw my own money?","answer":"In most countries, a bank cannot refuse a lawful withdrawal but may delay it or ask questions when patterns suggest fraud risk. These interventions have helped many customers avoid losses, and responding honestly to cashier questions is always the right approach."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-insurance-scams-target-policyholders","url":"https://scamencyclopedia.org/questions/how-do-insurance-scams-target-policyholders","question":"How do insurance scams target policyholders and what forms do they take?","shortAnswer":"Insurance scams target policyholders through fake policies, ghost brokers, and claims manipulation, exploiting the complexity of insurance products and the urgency of renewal deadlines.","explanation":"Insurance fraud against consumers takes several distinct forms. Ghost brokering is among the most harmful: a scammer poses as a legitimate insurance broker and sells a policy that either does not exist or is fraudulently obtained in the victim's name at a heavily discounted price. The victim believes they are covered; the insurer has never heard of them. The deception only becomes apparent when a claim is made and refused, often at the worst possible moment.\n\nFake renewal and comparison scams prey on the annual urgency of insurance renewal. A message or call arrives claiming to be from the victim's insurer or a comparison platform, offering a substantially cheaper renewal rate. When the target clicks through and provides payment details, they are handing their financial information to a fraudster and receiving nothing in return. The legitimate renewal deadline passes, leaving them uninsured.\n\nScam policies are sold through social media, online classifieds, and sometimes through social contacts of the scammer. Prices that appear significantly below market rate are the primary hook. The documentation provided — policy schedules, broker details, insurance certificates — can look convincing, and the fraud may only come to light months later.\n\nEmergency travel insurance scams specifically target people who have discovered late that they need cover, or who are looking for the cheapest option before a trip. The urgency of imminent travel and the relatively low premium make victims less likely to conduct thorough checks. A fake travel insurance certificate provides false confidence and leaves the traveller completely unprotected abroad.","redFlags":["Insurance is offered at a price significantly below all comparison site results","The broker cannot be found on your country's official financial services register","Policy documentation is sent as an image file rather than from an official insurer system","You are asked to pay by bank transfer or cash rather than through a card on a secure platform","The broker's contact is only through WhatsApp or a personal email address","The insurer named on the certificate is not a company you can verify independently"],"whatToDoNow":["Always verify brokers on your national financial services regulator's register","Contact the insurer named on any policy directly to confirm the policy exists","Renew through your insurer's own portal or through a regulated comparison platform","Be sceptical of deals sent by unsolicited text or social media message","Report ghost brokers to your national financial regulator and fraud authority"],"faq":[{"question":"What happens if I make a claim on a ghost broker policy?","answer":"The claim will be refused because the insurer has no record of the policy. You will have no coverage and will likely lose any premium paid. In some cases you may also face consequences if the fraudulent policy was used as evidence of cover — for example, for vehicle use."},{"question":"Is it safe to buy insurance through social media?","answer":"With great caution. Legitimate insurers and regulated brokers do advertise on social media, but so do scammers. Always verify the company on an independent register before purchasing, and never pay by bank transfer alone."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-exploit-grief-and-bereavement","url":"https://scamencyclopedia.org/questions/how-do-scammers-exploit-grief-and-bereavement","question":"How do scammers specifically exploit people who are grieving?","shortAnswer":"Bereaved people are targeted because grief creates temporary cognitive overwhelm, financial transition, and social isolation — all conditions that reduce the ability to identify and resist fraud.","explanation":"Bereavement is one of the most consistently exploited life events in the fraud landscape. The period immediately after losing someone close brings together multiple vulnerability factors simultaneously: emotional distress that impairs judgement, sudden unfamiliarity with financial tasks previously managed by the deceased, potential isolation, and the exposure created by public notices such as obituaries or estate sale announcements.\n\nProbate and estate-related scams target executors and beneficiaries who are navigating unfamiliar legal and financial processes for the first time. Fraudulent solicitor letters, fake debt claims against the estate, and requests for 'administration fees' arrive precisely because the grieving person is uncertain of normal process and less likely to challenge a plausible-seeming demand. The stress of managing an estate while also managing grief reduces the cognitive bandwidth available for healthy scepticism.\n\nInvestment and advisory scams often arrive after estate settlements are publicised or become apparent from property listings. Someone who has recently inherited property or received a lump sum from an estate is a high-value target for fraudulent financial advisers who offer to manage the inheritance. The combination of new wealth and emotional distraction creates an opening that scammers actively seek.\n\nRomance scammers target bereaved people with patience. They may begin contact months after a loss, having identified the target from public information, and invest in building a relationship gradually. The emotional needs created by losing a partner are real and deep, and the scammer who appears to fill them creates a bond that can be financially exploited over an extended period.","redFlags":["Contact arrives shortly after the death of a family member through public knowledge of the bereavement","An unfamiliar financial firm or adviser contacts you proactively about managing inherited funds","A debt is claimed against the estate that the deceased never mentioned","Administration fees are demanded before estate funds can be released","A new online relationship begins with someone who seems unusually understanding of your situation"],"whatToDoNow":["Take time before making any major financial decision following a bereavement","Use an independently verified solicitor for estate matters, not one who contacts you unsolicited","Involve a trusted family member or friend in financial decisions made during acute grief","Verify any debt claimed against an estate before paying it","Be aware that grief can temporarily affect the ability to recognise fraud and ask for help if things do not feel right","Report any exploitative contact to your national consumer protection authority"],"faq":[{"question":"How do scammers find out about recent bereavements?","answer":"Obituaries, death notice websites, estate sale listings, probate records (which are public in many countries), and social media posts all provide information. Property sale listings that follow an estate settlement also signal potential inheritance."},{"question":"What is probate fraud?","answer":"Probate fraud covers fraudulent claims against a deceased person's estate, impersonation of solicitors or executors, forged wills, and false creditor claims. If something about the estate process seems irregular, always verify through an independent legal professional."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-travel-scams-target-tourists","url":"https://scamencyclopedia.org/questions/how-do-travel-scams-target-tourists","question":"How do travel scams target tourists and first-time visitors?","shortAnswer":"Tourists are targeted because they are unfamiliar with local prices, processes, and legitimate services, making them more susceptible to overcharging, fake bookings, and distraction theft.","explanation":"Travel creates a concentrated set of conditions that scammers exploit: unfamiliarity with the environment, the pressure of a limited time window, reliance on strangers for information, and frequent financial transactions with unfamiliar payment systems. A tourist navigating an airport, booking accommodation online, or taking a taxi in a new city faces more uncertainty than in their home context, and scammers position themselves to fill that uncertainty at a price.\n\nFake accommodation listings targeting travellers follow the same pattern as other rental fraud but are specifically designed to exploit pre-trip urgency. Someone booking a week before travel has limited time to verify listings carefully and may accept slightly unusual payment requirements because the trip is imminent. Scammers post convincing listings on established platforms, wait for a payment, and the accommodation either does not exist or belongs to someone who did not authorise the listing.\n\nIn-destination fraud varies by location but often includes: transport where meters are disabled or tampered with; currency exchange with hidden commissions or short-changing; unofficial tour operators offering access to attractions they do not control; and distraction techniques involving strangers creating a commotion while an accomplice takes valuables. These are opportunistic but organised, with some operations running designated routes and quotas.\n\nOnline pre-trip fraud specifically targets the booking and planning phase. Fake travel agency websites, fraudulent visa processing services that charge fees and provide no service, and holiday clubs requiring upfront memberships for 'exclusive' deals all exploit the planning excitement that precedes travel. The emotional investment in an anticipated trip can override normal scepticism about unusual payment requirements.","redFlags":["Accommodation price is significantly below comparable options on legitimate platforms","A visa or travel document service charges a fee with no official government affiliation","You are asked to pay for accommodation outside the official platform payment system","A friendly local insists on accompanying you to a specific shop, bar, or service","A transport provider offers a flat rate that sounds low without running a meter","A 'travel club' or 'holiday membership' requires a significant upfront commitment"],"whatToDoNow":["Book accommodation, transport, and tours through established, rated platforms with payment protection","Always pay inside a platform rather than directly to an owner who requests it","Research standard taxi fare ranges for your destination before you arrive","Process official visas only through government websites or officially accredited agents","Report fake listings to the booking platform and to your national travel fraud authority"],"faq":[{"question":"Are visa processing websites legitimate?","answer":"Official government visa portals are legitimate. Many private services that charge a facilitation fee also operate legally but add cost and sometimes confusion. The risk arises with websites that appear official, charge fees, and provide no real service — these can be identified by checking against the embassy or consulate website for the destination country."},{"question":"What should I do if I discover an accommodation scam on arrival?","answer":"Contact the booking platform immediately for emergency assistance. Document everything including the address and any communications. File a report locally if you feel safe doing so, and escalate to the platform for a refund under their buyer protection policy."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-utility-energy-scams-target-households","url":"https://scamencyclopedia.org/questions/how-do-utility-energy-scams-target-households","question":"How do utility and energy scams target households?","shortAnswer":"Utility scammers impersonate energy companies at the door or by phone, use price anxiety to create urgency, and either charge for fake services or harvest bank details for direct debit fraud.","explanation":"Utility and energy scams are particularly effective during periods of price volatility. When energy bills are a topic of public concern and households are actively looking for cheaper suppliers, a caller or doorstep visitor claiming to offer savings has a ready-made emotional hook. The target's genuine desire to reduce costs becomes the opening for exploitation.\n\nDoorstep energy salespeople are a real fixture of the legitimate market in many countries, which creates cover for fraudulent operators to use the same channel. A scammer who appears professionally dressed, carries a convincing badge, and references the target's current supplier by name (information available from public data or social engineering) can generate enough trust to obtain bank details for a direct debit switch that never delivers the promised deal.\n\nPhone-based energy scams follow a similar pattern. A caller claims to be from the target's current provider, warns that bills are about to increase significantly, and offers an immediate switch to a cheaper tariff. The urgency created by an imminent price rise pushes the target toward quick agreement, and providing bank details 'to process the switch' is presented as a normal step. The bank details are then used fraudulently.\n\nSmart meter installation scams are a newer variant. A caller or visitor claims to be from the grid operator and offers to install a smart meter, sometimes requesting access to the property. This can be a precursor to property-based fraud, the theft of valuables during the 'installation,' or an opportunity to attach a device that provides ongoing access to the property or its utilities.","redFlags":["An unsolicited caller claims your bills are about to rise and you must switch immediately","A doorstep visitor does not have an appointment you made independently","You are asked for bank details over the phone to process a tariff switch","The saving offered is dramatically larger than comparison sites suggest is possible","The visitor cannot provide a company registration number that you can verify","You are pressured to make a decision before the caller ends the contact"],"whatToDoNow":["Never give bank details to an unsolicited caller claiming to be from your energy company","Call your energy provider on the number from your bill to verify any contact claiming to be from them","Ask doorstep callers for identification and their company's registration number","Use official comparison websites to research energy tariffs independently","Report doorstep and phone fraud to your energy regulator and national consumer authority"],"faq":[{"question":"Are all doorstep energy salespeople fraudulent?","answer":"No. Licensed energy suppliers can use door-to-door sales in many countries, though the practice is declining and more heavily regulated than it once was. The distinction is that legitimate salespeople accept verification delays and do not demand bank details at the door."},{"question":"What is a cooling-off period and does it protect me?","answer":"Consumer regulations in many countries give you the right to cancel a contract signed at the door or by phone within a set period, typically 14 days. This provides some protection but requires action from you to invoke it."}],"lastReviewed":"2026-06-10"},{"slug":"why-do-scammers-send-unsolicited-cheques","url":"https://scamencyclopedia.org/questions/why-do-scammers-send-unsolicited-cheques","question":"Why do scammers send unsolicited cheques and why are they dangerous?","shortAnswer":"Fake cheques are sent to create a fabricated obligation to repay part of the stated value, exploiting the delay between a cheque appearing to clear and the bank discovering it is fraudulent.","explanation":"The unsolicited cheque scam, often called an overpayment scam or fake cheque fraud, operates by exploiting a gap in how banking systems handle cheques. When you deposit a cheque, the funds may appear in your account within a day or two — creating the impression that the cheque has 'cleared.' In reality, the final verification that the cheque is genuine can take up to ten business days. Scammers exploit the gap between funds appearing available and funds being truly verified.\n\nThe scam works like this: you receive a cheque for more than you were expecting, often in connection with a job offer, prize, or overpayment scenario. The sender asks you to deposit it and wire back the excess. You do so. Days later, the bank reverses the cheque deposit because it was fraudulent. You are left having wired real money of your own to the scammer, and the cheque amount is deducted from your account.\n\nThe psychological power of the scam comes from the fact that the victim has to take an action to send the money rather than the scammer simply taking it. This makes the victim feel responsible for the loss, which is both psychologically damaging and sometimes legally complicated — the victim authorised the wire transfer, which makes recovery harder to argue on fraud grounds.\n\nUnsolicited cheques also arrive in mystery shopping scams, where someone is recruited to evaluate a money transfer service, instructed to deposit a cheque and then use the 'money' to make a wire transfer as part of the 'evaluation.' The evaluation framing makes the wire feel procedurally normal rather than suspicious.","redFlags":["You received a cheque for more than was agreed or expected","You are asked to wire back or forward part of a deposited cheque","A 'mystery shopping' job involves depositing a cheque and sending money","A 'lottery win' arrived as a cheque with a request to return processing fees","The person who sent the cheque is vague about why it is for the wrong amount"],"whatToDoNow":["Never wire or transfer money from a recently deposited cheque before it fully clears","Ask your bank specifically whether a cheque has been fully verified before treating funds as available","Return any unsolicited cheque without depositing it","Report cheque fraud to your bank and your national consumer protection authority","If you have already wired money, contact your bank immediately to attempt recall"],"faq":[{"question":"Can a cheque that cleared appear to clear and still be fraudulent?","answer":"Yes. Funds appearing in your account is not the same as final clearance. Banks provide provisional credit when a cheque is deposited, but the actual verification process continues in the background. If the cheque is returned as fraudulent, the provisional credit is reversed."},{"question":"Why do banks not warn customers about this delay more prominently?","answer":"Many banks do provide disclosure, but it is often in terms and conditions rather than in the moment of deposit. Consumer awareness campaigns and teller training have improved this in some jurisdictions. When making large cheque deposits, asking the cashier directly about final clearance timing is good practice."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-health-medical-scams-target-patients","url":"https://scamencyclopedia.org/questions/how-do-health-medical-scams-target-patients","question":"How do health and medical scams target people with health concerns?","shortAnswer":"Medical scams target people managing illness, chronic conditions, or health anxiety by offering unregulated treatments, miracle cures, and fake supplements that prey on the desire for relief and control.","explanation":"Health anxiety is one of the most powerful emotional drivers in human experience, and scammers who design products and services around it operate with significant psychological advantage. A person managing a serious diagnosis, experiencing unexplained symptoms, or living with a condition that conventional medicine has not fully resolved is motivated to try alternatives — and scammers construct offerings that appear to provide exactly what official medicine cannot or will not.\n\nMiracle cure frauds most often target people with chronic or serious conditions where conventional treatment is difficult, expensive, or incomplete. Claims that a natural supplement, device, or protocol cures, reverses, or eliminates conditions including cancer, diabetes, arthritis, and autoimmune disease are regularly made without credible clinical evidence. The products are sold at high prices through websites, social media, and sometimes in-person seminars where testimonials and emotional appeals substitute for data.\n\nFake diagnostic services are another vector. Online tools that claim to detect diseases from a photo, a urine sample sent by post, or questionnaire responses exploit both health anxiety and distrust of conventional medicine. These services collect fees, often recurring, for 'monitoring' or 'consultations' that have no clinical validity and whose results are fabricated.\n\nThe harm extends beyond financial loss. People who spend their resources on ineffective treatments may delay pursuing evidence-based care, with serious health consequences. The emotional harm of investing hope in a treatment that fails, especially during a serious illness, compounds the financial loss significantly.","redFlags":["A product claims to cure, reverse, or eliminate a named medical condition","Testimonials are the primary evidence rather than clinical studies","The product is promoted as 'what doctors do not want you to know'","Recurring payments are required for ongoing 'treatment plans' or 'monitoring'","The seller has no verifiable medical registration or academic credentials","A free consultation leads rapidly to a high-cost programme"],"whatToDoNow":["Consult your doctor before purchasing any supplement or alternative treatment for a medical condition","Look for clinical evidence from peer-reviewed journals, not testimonial websites","Report fraudulent health claims to your national medicines regulator or consumer protection authority","Be sceptical of any health product that claims to be universally effective across different conditions","Check whether a practitioner is registered with the relevant professional regulatory body"],"faq":[{"question":"Are all supplements and alternative therapies fraudulent?","answer":"No. Many legitimate supplements and complementary therapies exist with varying levels of evidence behind them. The distinction is between products sold with honest labelling and realistic claims versus those making fraudulent cure or treatment claims for regulated medical conditions."},{"question":"What should I do if I have already paid for a product that I believe made false claims?","answer":"Dispute the charge with your card issuer on the grounds of misrepresentation. Report the product to your national medicines regulator, consumer protection authority, and the platform through which you bought it."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-education-student-scams-target-learners","url":"https://scamencyclopedia.org/questions/how-do-education-student-scams-target-learners","question":"How do education scams target students and people seeking qualifications?","shortAnswer":"Education scams offer fake qualifications, diploma mills, and bogus tutoring services, exploiting the pressure to obtain credentials quickly and affordably.","explanation":"Education is one of the few areas where people feel a combination of time pressure, financial constraint, and credential anxiety simultaneously — and scammers design their offerings to address all three. Someone who needs a qualification to advance in their career, gain a visa, or meet a professional requirement is looking for the most accessible path to that outcome, and fraudulent providers position themselves as exactly that path.\n\nDiploma mills issue degrees and certificates that have no legitimate academic standing. These operations collect significant fees and provide worthless documents that will not be accepted by employers, licensing bodies, or immigration authorities. The harm is compounded because the victim may only discover the qualification is invalid at a critical career or immigration moment, long after the money has been spent.\n\nAccreditation fraud is a related tactic. A scam institution claims accreditation from a body that sounds official but was itself created by the scam operator, or from a defunct or non-existent genuine body. Victims checking for 'accreditation' find something that appears to confirm legitimacy. Understanding that accreditation is only meaningful if the accrediting body itself is officially recognised is a critical nuance.\n\nEssay writing and exam fraud services extract money by offering assistance that is both academically dishonest and rarely delivered as described. Students who pay for essay writing services can receive work that is plagiarised, fails to address the assignment, or is not delivered at all. The academic penalties for submitting purchased work are significant, adding risk on top of the financial loss.","redFlags":["A qualification can be obtained based on 'life experience' with no study or examination","The institution is not listed in a verifiable national register of education providers","Accreditation is from a body you cannot find on an official government-recognised list","The course completion timeframe is unrealistically short for the level of qualification","Payment is required upfront in full before any course materials are provided","The institution is in a different country to the qualification system it claims to operate in"],"whatToDoNow":["Verify any institution against your national education quality assurance body","Check that claimed accreditation is from a recognised, officially listed body","Ask a professional licensing body whether the specific qualification will be accepted","Research the institution by name plus 'diploma mill' or 'accreditation scam'","Report fake qualifications to your national education authority and consumer protection body"],"faq":[{"question":"Can I use a diploma mill qualification on a CV?","answer":"Misrepresenting educational credentials on a CV can constitute fraud in many jurisdictions, particularly for regulated professions. Some employers conduct degree verification checks, and a qualification from an unrecognised institution may result in dismissal or prosecution."},{"question":"Are online degrees from legitimate universities valid?","answer":"Yes. Many accredited universities offer fully valid online degree programmes. The distinction is not the online format but whether the institution itself is legitimately accredited and recognised by relevant authorities in the field."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-gaming-scams-target-players","url":"https://scamencyclopedia.org/questions/how-do-gaming-scams-target-players","question":"How do gaming scams target players and what makes gamers vulnerable?","shortAnswer":"Gaming scams exploit the desire for rare items, in-game currency, account upgrades, and competitive advantage — targeting players through fake trade offers, phishing, and social manipulation within gaming communities.","explanation":"Games with tradeable items, rare skins, or in-game economies represent a significant financial ecosystem. Some virtual items have genuine monetary value measured in hundreds or thousands of real-world currency units, making the gaming world a target for the same financial fraud techniques found in conventional markets. Players who have invested heavily in their accounts — in time, money, and identity — have something real to lose, and scammers know it.\n\nPhishing for gaming credentials is among the most common vectors. A convincing fake login page for a gaming platform, sent via a chat link claiming to offer a free item or tournament invite, captures account credentials that the scammer then uses to access the account, steal items, and sell them. Because gaming accounts are often not protected with two-factor authentication or are accessed from shared computers, they can be more vulnerable than financial accounts.\n\nTrade scams target players directly within games. A player offers a valuable item in exchange for yours, switches the item at the last moment to a near-identical but worthless one, or pressures the trade through a time-limited urgency that prevents careful inspection. New players unfamiliar with item values are particularly susceptible, as are experienced players distracted by other activity.\n\nSocial engineering within gaming communities takes advantage of the informal norms of gaming friendship. Someone who has gamed with you regularly for weeks carries implicit trust. When that person asks you to share your login details 'for a moment' to help with something, or asks to borrow items promising to return them, the social context suppresses the scrutiny that would otherwise apply. Scammers build these relationships deliberately across multiple games before making a request.","redFlags":["A link in game chat leads to a site asking for your gaming platform credentials","A trade offer appears extremely one-sided in your favour with urgency attached","Someone you recently met in a game offers a deal that requires sharing login details","A message claims you have been selected for a beta test or item giveaway requiring verification","An in-game friend asks to borrow high-value items or currency urgently","A third-party site claims to offer free coins, skins, or account upgrades"],"whatToDoNow":["Enable two-factor authentication on all gaming platform accounts","Never share gaming account credentials with anyone for any reason","Inspect every item in a trade carefully before confirming, regardless of social pressure","Report scam links and player accounts to the platform","Use the platform's official trading system rather than informal arrangements","Be particularly sceptical of new contacts who build rapport quickly then make requests"],"faq":[{"question":"Can I get my gaming account back after it is stolen?","answer":"Possibly. Most gaming platforms have account recovery processes and support tickets for compromised accounts. Act quickly, document everything, and contact support through the platform's official website, not through links shared by others."},{"question":"Are third-party sites offering in-game currency or items legitimate?","answer":"Some operate legally in a grey market; many are outright scams. The risk includes account banning by the game platform, payment fraud, and item non-delivery. Using only official in-game purchasing mechanisms is the safest approach."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-social-media-account-scams-target-users","url":"https://scamencyclopedia.org/questions/how-do-social-media-account-scams-target-users","question":"How do scammers target people through social media account takeovers?","shortAnswer":"Account takeovers happen through phishing links, credential stuffing, fake support impersonation, and SIM-swap attacks — giving scammers access to a trusted identity they can exploit for fraud.","explanation":"A social media account represents more than access to posts — it is a trusted identity with an established audience of friends, followers, and contacts. When a scammer controls your account, they can send messages that appear to come from you to everyone you know. Those messages carry the weight of an established relationship and are far more likely to be acted upon than unsolicited contact from a stranger.\n\nPhishing is the most common initial compromise method. A message claims your account has been flagged, a friend has tagged you in something concerning, or you have won a brand sponsorship — all with a link that leads to a fake login page. Entering credentials on that page hands access directly to the scammer. Because the same password is often used on multiple platforms, a single successful phishing attack can cascade into multiple account compromises.\n\nCredential stuffing uses lists of username and password combinations obtained from previous breaches. Automated tools test these combinations against social media platforms at scale. If you have reused a password that appeared in a past breach, your account is vulnerable to this approach even if you have never clicked a phishing link.\n\nOnce an account is taken over, the scammer typically changes the recovery email and phone number to prevent rapid reclaim, then uses the account to post investment scams, solicit urgent money loans from friends, or sell the account to other fraudsters. The secondary harm to the account holder's reputation and the people in their network can be significant and long-lasting.","redFlags":["You are locked out of your account and recovery codes are not working","Friends report receiving unusual messages from your account","A message from a friend requests urgent money or investment advice that is out of character","You receive a login notification from an unrecognised location","Your account email or phone number has been changed without your action","Sponsored posts or messages appear on your profile that you did not authorise"],"whatToDoNow":["Enable two-factor authentication on all social media accounts immediately","Use a unique, strong password for each social media platform","Report account compromise to the platform's security team right away","Alert your contacts so they do not act on messages sent from a compromised account","Check connected third-party apps and revoke any you do not recognise","Monitor other accounts using the same email or password for signs of compromise"],"faq":[{"question":"What is a SIM-swap attack and how does it relate to account takeover?","answer":"A SIM-swap is when a scammer convinces a mobile network to transfer your phone number to a SIM they control. Once they have your number, they can receive SMS-based two-factor authentication codes for any account registered to it. This is why authentication apps are more secure than SMS-based codes."},{"question":"Can you sue someone for taking over your social media account?","answer":"Unauthorised access to computer systems is a criminal offence in most countries. Civil actions for damages are theoretically available but practically difficult when perpetrators are anonymous or overseas. The primary response should be the platform's abuse reporting system and, if criminal, law enforcement."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-pet-scams-target-animal-buyers","url":"https://scamencyclopedia.org/questions/how-do-pet-scams-target-animal-buyers","question":"How do pet scams target people looking to buy or adopt animals?","shortAnswer":"Pet scammers post fake listings for puppies, kittens, or exotic animals, collect a deposit or full payment, and then claim delivery problems requiring more money before the non-existent animal never arrives.","explanation":"Pet scams exploit the emotional bond people form with an animal before they have even met it. By the time a buyer has chosen a specific puppy from photos, given it a name in their mind, and made a deposit, they are psychologically invested in seeing the transaction through. Scammers design the experience to create this attachment quickly, using high-quality photos of real animals taken from legitimate breeders or social media.\n\nThe listing typically offers a breed in demand at a price below what reputable breeders charge, creating strong interest. Early communication is enthusiastic and personal — the scammer shares details about the animal's personality, health checks, and suitability for the buyer's situation, all fabricated. The emotional connection is manufactured specifically to raise the cost of walking away from the transaction.\n\nThe escalation structure is predictable. An initial deposit is required to hold the animal. Then a shipping or courier fee is required. Then an unexpected complication — customs, veterinary hold, airline crate requirement — generates a further payment demand. Each demand arrives with a story and often with a photo of the specific animal, reinforcing the illusion that a real transaction is in progress. The payments continue until the buyer runs out of money or patience.\n\nExotic animal listings have a particular element of illegality layered on top of the fraud. Someone seeking to purchase a protected species may be simultaneously being defrauded and — unknowingly or knowingly — participating in illegal wildlife trade. Scammers use the illegality as additional leverage against reporting, suggesting that the buyer would be in trouble if they went to the authorities.","redFlags":["The price is significantly below what reputable breeders or rescues charge","The seller is in a different city or country and cannot arrange an in-person viewing","Payment is requested before any meeting or video verification with the animal","Unexpected shipping complications arise requiring additional fees","Photos are of suspiciously high quality or appear on other listings under reverse image search","The seller cannot answer specific questions about the animal's parentage or veterinary history"],"whatToDoNow":["Never pay for a pet you have not met in person at the seller's location","Reverse-image-search all pet photos to check for use in other listings","Visit any breeder in person before agreeing to a transaction","Use rescue organisations with verifiable charity registration for adoptions","Report fake pet listings to the platform and to your national consumer authority","If transport is needed, arrange it independently rather than through a seller-nominated service"],"faq":[{"question":"Can I find a legitimate breeder online?","answer":"Yes. Legitimate breeders are findable online and many operate reputable websites. The safeguard is insisting on meeting the animal and verifying the seller in person at their premises, not relying solely on online communication and remote payment."},{"question":"What happens to money sent in a pet transport scam?","answer":"It goes directly to the scammer and will not be returned. There is no transport company, no customs hold, and no animal. Each new fee invented is a separate extraction, and no amount of payment will result in an animal arriving."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-mail-courier-parcel-scams-work","url":"https://scamencyclopedia.org/questions/how-do-mail-courier-parcel-scams-work","question":"How do mail and parcel delivery scams target people expecting packages?","shortAnswer":"Parcel scams send fake delivery notifications claiming a fee or customs charge is needed to release a package, creating a plausible-sounding reason for a small payment or for sharing personal details.","explanation":"Parcel delivery scams are effective because almost everyone regularly receives deliveries and occasionally experiences the legitimate frustration of a missed delivery or customs delay. A text or email claiming to be from a well-known courier service, stating that a small fee must be paid to release a package, is psychologically pre-calibrated to feel familiar and urgent.\n\nThe amounts requested are deliberately small — a few pounds, dollars, or euros — because a minor fee to receive an expected parcel does not trigger the same alarm as a large financial request. The proportion of people who click through and pay is helped by the scale of legitimate delivery activity: if enough people are receiving these messages, a meaningful percentage will have a genuine delivery in progress that makes the message seem personally relevant.\n\nThe link in the scam message leads either to a payment page that harvests card details, or to a page that also requests personal information like name, address, and phone number under the guise of confirming delivery details. This data is then used for further fraud or sold. Some delivery scam pages install malware when visited.\n\nThe scam is also used to harvest account credentials for actual courier platforms. A fake login page for a real courier service captures the target's username and password, which the scammer can then use to redirect genuine deliveries, access linked payment methods, or sell as credentials in bulk.","redFlags":["A text message from a courier you do not recognise claims a delivery fee is needed","The URL in a delivery message is not the courier's official domain","You are asked for card details to pay a customs fee for a package you did not order","The message references a tracking number that cannot be found on the courier's real site","A message asks you to log in to your courier account via a link rather than the app"],"whatToDoNow":["Never click links in delivery notification texts — go directly to the courier's official app or website","Check for any real delivery by entering the tracking number directly on the courier's website","If you entered card details, contact your bank immediately to dispute and replace the card","Report the scam to the courier company whose name was used and to your national fraud authority","Use delivery app notifications from installed official apps rather than SMS links"],"faq":[{"question":"Do real couriers ever charge a delivery fee by text?","answer":"In some countries, legitimate customs and import charges are communicated by text with a payment link. The safest approach is always to verify through the official courier app or website by manually entering the tracking number, rather than clicking any link."},{"question":"What is smishing?","answer":"Smishing is phishing conducted via SMS text messages. The term combines 'SMS' and 'phishing.' Parcel delivery scams are among the most common smishing attacks because they piggyback on the high volume of legitimate delivery notifications most people receive."}],"lastReviewed":"2026-06-10"},{"slug":"why-do-scammers-create-false-urgency","url":"https://scamencyclopedia.org/questions/why-do-scammers-create-false-urgency","question":"Why do scammers always create false urgency and time pressure?","shortAnswer":"Urgency bypasses the reflective thinking needed to identify a scam — it shifts a person into reactive mode where the instinct to resolve a threat overrides the impulse to verify it first.","explanation":"False urgency is one of the most consistently used and most effective tools in the scammer's toolkit. Its function is neurological as much as psychological: time pressure activates the threat-response system, which is designed to prioritise immediate action over analytical reflection. A person who believes they must act in the next ten minutes before a deadline is operating in a different cognitive mode than one who has time to think, research, and consult others.\n\nThe most common urgency mechanisms include deadlines ('your account will be closed today'), threats ('you will be arrested if you do not call back within the hour'), scarcity ('only three places remain in this investment opportunity'), and personal consequences ('your child is in danger right now'). Each of these activates a different but equally powerful emotional response — fear, loss aversion, or protective instinct — that drives immediate action.\n\nUrgency also serves a practical purpose: it prevents verification. The single most effective defence against most scams is taking time to hang up, step back, and independently verify a claim. When a scammer creates time pressure, they are specifically attempting to eliminate this defence window. If a target is convinced they must decide now, they cannot call their bank on a separate line, search the company online, or consult a family member.\n\nRecognising artificial urgency as a manipulation technique — rather than a genuine feature of a legitimate situation — is one of the highest-leverage consumer protection skills available. Legitimate organisations do not require instant decisions on matters of significant consequence. A bank will not close your account today because you did not answer a cold call. A government agency will not arrest you in the next hour. An investment will not disappear in the next ten minutes. These timelines are invented.","redFlags":["Any contact that specifies an extremely tight deadline for a financial or personal decision","Threats of immediate legal or financial consequence are combined with a solution available right now","The window to participate in an investment is closing tonight or within the next few hours","Hanging up and calling back is specifically discouraged","A second person verifying the claim is framed as wasting precious time","The caller escalates urgency when you pause or question"],"whatToDoNow":["Recognise urgency as a manipulation technique and deliberately slow down","Hang up and independently call the organisation that was named, using a number you find yourself","Apply a personal rule: any major financial decision made under time pressure requires at least a one-hour delay","Tell someone else about the contact before acting","Remember that if the opportunity or threat is real, it will still be real after ten minutes of verification"],"faq":[{"question":"Is there any situation where legitimate urgency in a financial communication is real?","answer":"Yes. Banks do occasionally send genuine time-sensitive fraud alerts. The distinction is that a genuine bank will never ask you to call a number they provide or make a payment during the same call. They will ask you to call the number on your card or visit a branch."},{"question":"Why do scammers use phone calls for urgency-based fraud more than email?","answer":"Real-time voice communication is harder to step back from than a written message. The social pressure to not simply hang up on someone, combined with the scammer's ability to actively manage the conversation, makes telephone an effective medium for urgency manipulation."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-advance-fee-fraud-work","url":"https://scamencyclopedia.org/questions/how-does-advance-fee-fraud-work","question":"How does advance fee fraud work and why do people keep paying?","shortAnswer":"Advance fee fraud promises a large reward in exchange for a sequence of upfront payments, using sunk cost psychology and maintained hope to keep victims paying long after the red flags are obvious.","explanation":"Advance fee fraud — sometimes known by the name of its most famous variant, the 419 scam — operates on a simple mechanical principle: a large promised reward is placed just beyond a series of escalating fees. The reward is always real enough in the victim's mind to justify the next payment, even as the fees accumulate to levels that in isolation would seem absurd.\n\nThe initial hook is a story that explains why an implausibly large sum needs to be moved, and why the target's assistance is uniquely required. A foreign dignitary needs a trusted partner to receive funds; an unclaimed inheritance needs a legal facilitator; a lottery prize needs customs clearance. The common element is a large reward contingent on a modest upfront fee — modest enough that the cost-benefit calculation initially appears favourable.\n\nThe fee escalation is the engine of the fraud. After the first fee is paid, a new obstacle appears: a tax, a legal requirement, a bribe for an official, a bank charge. Each obstacle is explained with detail and documentation that makes it seem real. And crucially, each new fee is framed as the last barrier between the victim and the promised funds. Stopping now means losing everything already invested. Paying the new fee means the promised reward is finally within reach.\n\nThis is a deliberate exploitation of sunk cost psychology. Humans find it emotionally difficult to accept a loss as final. The more that has already been paid, the stronger the motivation to keep going rather than acknowledge the total is gone. Scammers are skilled at reading when a victim is wavering and introducing precisely the right story element to re-ignite hope and justify another payment.","redFlags":["A stranger asks for your help moving a large sum in exchange for a share","Each payment made is followed by a new, unexpected fee or charge","Documentation provided looks official but cannot be verified against real institutions","The promised reward is very large relative to any legitimate use of your assistance","The story changes or evolves to explain delays and new requirements","Any scepticism is met with emotional appeals about trust and shared commitment"],"whatToDoNow":["Recognise that no legitimate large-sum transfer requires upfront payments from the recipient","Stop paying at any point — additional payments will not recover what has been spent","Do not send documents, bank details, or further personal information","Report to your national fraud authority immediately","Seek support if you have lost a significant amount — the emotional impact of this fraud is substantial"],"faq":[{"question":"Is the 419 scam still active?","answer":"Yes. The name refers to a section of the Nigerian Criminal Code, but the scam operates globally and has evolved significantly, now appearing via email, WhatsApp, social media, and in combination with romance fraud. It is far from a historic curiosity."},{"question":"What is the typical profile of someone who pays repeatedly in advance fee fraud?","answer":"Research shows that advance fee fraud victims come from all backgrounds. The sunk cost mechanism works on most people. Extended schemes involve correspondence and documentation over weeks or months, which creates emotional investment that is hard to detach from regardless of the person's background or financial literacy."}],"lastReviewed":"2026-06-10"},{"slug":"why-do-scammers-target-small-businesses","url":"https://scamencyclopedia.org/questions/why-do-scammers-target-small-businesses","question":"Why do scammers specifically target small businesses?","shortAnswer":"Small businesses handle regular financial transactions, may lack dedicated fraud teams, and must respond quickly to supplier and client communications — all of which create exploitable opportunities.","explanation":"Small businesses are attractive fraud targets for structural reasons that have nothing to do with the intelligence or vigilance of the people running them. A sole trader or small team handles all functions: buying, selling, payroll, and banking. There is no separate finance department to verify transactions and no dedicated IT security team. This means that a convincing fraudulent invoice or payment instruction can travel from receipt to payment without the layered checks that exist in larger organisations.\n\nInvoice redirection fraud is one of the most common approaches. A scammer who has observed a business's supplier relationships — often through compromised email or social engineering — sends a fraudulent invoice that appears to come from a genuine supplier, with updated bank details. The business pays the invoice to the new account, not realising the payment has gone to a fraudster rather than the real supplier.\n\nFake supplier fraud works in the opposite direction. A scammer approaches a small business as a new potential customer, places an order on credit, and then disappears without paying. Sometimes stolen credit card details are used to place large orders that are later charged back, leaving the small business with lost goods and a reversal of funds.\n\nDomain spoofing and business email compromise are particularly effective against small businesses because they rely on the personal trust between known counterparties. An email that appears to come from the business owner's accountant, solicitor, or major customer requesting an urgent payment change can be very convincing in the context of an existing relationship. The fraud exploits familiarity rather than manufacturing it from scratch.","redFlags":["A known supplier sends updated bank details by email with no prior phone call","An email from a senior colleague requests an urgent wire transfer, bypassing normal process","A new customer places a large first order with an unusual urgency","Payment instructions are sent by a slightly different email domain to the one you normally use","A supplier calls to say they have not received a recent payment you made"],"whatToDoNow":["Establish a verbal confirmation rule for any new or changed payment details","Train all staff who handle payments to treat changed bank details as high-risk events","Use email authentication tools to flag messages that do not pass sender verification","Register your business domain with DMARC, SPF, and DKIM records to reduce spoofing","Report business fraud to your national fraud authority and your bank immediately","Review cyber liability insurance options appropriate to your business size"],"faq":[{"question":"Does cyber liability insurance cover business email compromise losses?","answer":"Some policies do; others have specific exclusions for fraudulently authorised transfers. Review the policy terms carefully and speak to a broker about coverage that specifically addresses social engineering and funds transfer fraud."},{"question":"How do scammers learn enough about a business to make invoice fraud convincing?","answer":"Publicly available information — company websites, LinkedIn, Companies House filings, and social media — can reveal supplier names, key staff, and financial relationships. Some scammers also compromise email systems to monitor actual correspondence before striking."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-recovery-scams-target-fraud-victims","url":"https://scamencyclopedia.org/questions/how-do-recovery-scams-target-fraud-victims","question":"How do recovery scams target people who have already been defrauded?","shortAnswer":"Recovery scammers contact recent fraud victims offering to retrieve lost funds for a fee — exploiting desperation and the established pattern of paying for a promised result.","explanation":"Recovery fraud is a secondary exploitation that follows primary fraud. Once a person has been scammed, their details — including the fact that they were victimised — can end up in lists circulated among criminal networks. Recovery scammers purchase these lists and contact victims directly, sometimes within days of the original fraud, offering to trace and retrieve the lost funds in exchange for an upfront fee.\n\nThe offer exploits the same emotional dynamics as the original fraud. A victim who has lost a significant sum is desperate for any path to recovery. The recovery scammer presents themselves as a specialist — a lawyer, a blockchain analyst, a government recovery agent — with unique capabilities to follow the money trail and force return. The plausibility of the claim relies on the victim's limited understanding of how fraud recovery actually works (which is usually through banks, regulators, and law enforcement, not private agents).\n\nThe fee structure mirrors advance fee fraud. An initial fee is charged for 'filing fees,' 'regulatory certificates,' or 'admin charges.' Once paid, the promised result does not arrive, and a further fee is requested to overcome a new obstacle. The victim, already having invested in recovery, applies the same sunk cost reasoning that may have kept them in the original fraud.\n\nSome recovery scammers go further and also attempt to steal personal or financial information under the guise of processing a claim. A victim who provides identity documents, account numbers, and transaction details to a fake recovery agent has handed the scammer additional tools for identity fraud on top of the recovery fee. The outcome is a worse position than the original fraud alone.","redFlags":["Someone contacted you claiming to be a recovery specialist after a recent scam","An upfront fee is required before recovery work begins","The contact claims to have already identified your funds and knows where they are","A government or legal authority is impersonated to add credibility to the recovery service","You are asked for personal documents, banking details, or transaction records","The recovery service was found through an advertisement rather than a verifiable official channel"],"whatToDoNow":["Do not pay any fee to a recovery service — this is almost certainly a second fraud","Report fraud through official channels: your bank, national fraud authority, and police","If an amount was significant, consult a real solicitor or legal professional through verifiable means","Warn other victims in the same fraud community to prevent the recovery scammer from widening their reach","Be aware that vulnerability to recovery fraud is not a personal failing — it is a deliberate exploitation of a painful experience"],"faq":[{"question":"Are there any legitimate fraud recovery professionals?","answer":"Asset recovery lawyers and specialist financial crime investigators exist and may be able to assist in certain cases, particularly large domestic fraud. The key distinctions are that they are verifiable through official legal registers, charge through transparent billing rather than upfront fees, and do not contact victims unsolicited."},{"question":"How do recovery scammers learn who has recently been scammed?","answer":"Victim lists are circulated among criminal networks and bought and sold in dark web markets. Some recovery scammers also monitor public fraud reporting forums and victim support groups for leads."}],"lastReviewed":"2026-06-10"},{"slug":"why-do-scammers-use-spoofed-phone-numbers","url":"https://scamencyclopedia.org/questions/why-do-scammers-use-spoofed-phone-numbers","question":"Why do scammers use spoofed phone numbers and how does it work?","shortAnswer":"Caller ID spoofing lets scammers display any phone number they choose, including official government and bank numbers, making their calls appear to come from trusted sources.","explanation":"Caller ID was developed as a consumer convenience — a way to see who was calling before answering. It was not designed as a security system, and it has a fundamental flaw: the number displayed does not have to be the number the call is actually coming from. Internet-based calling (VoIP) services make it technically straightforward to specify any number to display as the originating caller ID, and this capability is widely used by scammers.\n\nThe practical impact is significant. A scammer can display the number of your bank's fraud line, your local police station, a government tax authority, or the technical support line of a software company you use. When a victim sees a number they recognise or look up and find belongs to a legitimate entity, their confidence in the caller is immediately increased. Many people are aware of the general risk of unknown numbers but feel safer answering a call from a recognised institution.\n\nSpoofing is particularly effective in combination with detailed personal information. If a caller displays your bank's number and then correctly names your account type, references a recent transaction, and addresses you by name, the combination of familiar number, correct detail, and authoritative tone creates a very convincing impersonation. Each of these elements individually might be explainable; together they can be convincing enough to override scepticism.\n\nTelecommunications regulators in various countries have introduced measures to reduce spoofing, such as STIR/SHAKEN protocols in North America that verify whether a number is genuinely originating from the subscriber it claims. These measures have reduced some categories of spoofing but have not eliminated it, particularly for calls routed through international systems or compliant-but-permissive VoIP providers.","redFlags":["A call from a bank or government number asks you to make a payment or share credentials during the call","A caller from a number you verified as legitimate still behaves like a scam call","The caller asks you not to hang up and call back on the number on your card","A second 'call' immediately follows one you just made to your bank, claiming to be the same department","The conversation follows a scripted pattern despite appearing to be from a known organisation"],"whatToDoNow":["Do not trust caller ID alone — it can be spoofed","Hang up and call back on a number from the organisation's official website or your card","Never share PINs, passwords, or one-time codes during an incoming call","If a caller from your bank's number asks you to call back, use a different phone to do so — some scams hold the line open on the original phone","Report spoofed number fraud to your telecommunications regulator"],"faq":[{"question":"Can a scammer spoof a number so it looks like it is coming from inside your own organisation?","answer":"Yes. Internal number spoofing is used in business fraud to impersonate a colleague, manager, or the IT department. This is why even internal-looking calls requesting credentials or financial authorisations should be verified through a separate channel."},{"question":"Is there any way to check whether a number calling you is spoofed?","answer":"Consumer-level tools cannot reliably detect spoofing in real time. The safest approach is to treat the content of the call rather than the number as the determining factor — any call requesting payment or credentials is suspicious regardless of what number it appears to come from."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-immigration-legal-scams-target-migrants","url":"https://scamencyclopedia.org/questions/how-do-immigration-legal-scams-target-migrants","question":"How do immigration and legal scams target migrants and people seeking visas?","shortAnswer":"Immigration scammers impersonate lawyers, visa agents, or government officials, exploiting the complexity of legal processes, language barriers, and the significant consequences of status errors.","explanation":"Immigration and visa processes are complex, consequential, and often opaque to first-time applicants. The cost of getting it wrong — a refused visa, a missed deadline, or an improperly filed form — can have life-changing consequences. Scammers position themselves as guides through this complexity, offering certainty and speed at a price that seems modest compared to the stakes involved.\n\nFake immigration lawyers and unlicensed 'consultants' are a widespread problem. In many countries, the law restricts who can provide immigration advice for payment, but enforcement is limited and the demand for accessible, affordable guidance is high. An unauthorised consultant may file forms incorrectly, miss deadlines, or simply take payment and disappear — leaving the applicant in a worse position than if they had used official channels directly.\n\nImpersonation of immigration authorities is another tactic. A scammer calls someone with pending immigration status, claims to be from the immigration service, and tells them that their application has a problem that can be resolved by paying a fee or providing additional payment. Fear of deportation or status lapse is a powerful motivator, and the victim may comply without verifying whether the caller is genuine.\n\nFake job offers with visa sponsorship are a variant that specifically targets international job seekers. An attractive job offer abroad comes with a request for a processing fee, visa fee, or sponsorship documentation charge. After the fee is paid, the job evaporates. Some of these operations also harvest personal documents that are used for identity fraud.","redFlags":["An immigration adviser cannot confirm their registration with the relevant regulatory body","A fee is requested before any work is completed or documentation is reviewed","A caller claiming to be from the immigration service demands payment to fix a problem","A job offer with visa sponsorship asks for payment from the applicant before the hire","An adviser promises guaranteed visa approval — no legitimate professional can guarantee this","Communication happens only through messaging apps, not professional correspondence"],"whatToDoNow":["Verify any immigration adviser against the official regulatory register for your country","Use official government portals for visa applications where available","Call the immigration authority directly on their published number to verify any unexpected contact","Never pay for visa sponsorship or immigration processing fees requested by an employer","Report unregistered immigration advisers to the relevant regulatory body","Seek help from legitimate non-profit immigration legal services if cost is a barrier to genuine legal advice"],"faq":[{"question":"What is the difference between an immigration lawyer and an immigration consultant?","answer":"Lawyers are qualified legal professionals subject to professional regulation. In some countries, regulated immigration consultants are also authorised to provide advice. The key is whether they are registered with the specific regulatory body for immigration advice in your country."},{"question":"Can an employer legally ask a foreign worker to pay for visa sponsorship?","answer":"In most countries, no. Employers who sponsor visas bear the cost as part of the hiring arrangement. Requests for payment from the worker are a strong indicator of fraud or an unlicensed operation."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-auto-vehicle-scams-target-buyers","url":"https://scamencyclopedia.org/questions/how-do-auto-vehicle-scams-target-buyers","question":"How do vehicle and car buying scams target people looking for a used car?","shortAnswer":"Vehicle scams use fake listings for cars that do not exist, clocked or salvaged vehicles presented as sound, and title fraud — exploiting buyers who conduct limited in-person verification.","explanation":"Used car fraud operates across several different mechanisms, from the purely online to the in-person. The simplest variant is a fake listing: attractive photos of a vehicle, a price below market rate, and a seller who claims to be overseas or unavailable for a viewing but willing to hold the car with a deposit. The deposit disappears with the scammer and no car ever materialises.\n\nMore sophisticated schemes involve a real vehicle but a fraudulent representation of its history. Odometer fraud — 'clocking' — involves resetting the mileage on a vehicle's instrument display to show a significantly lower figure than the true mileage. This makes the car appear less worn and justifies a higher price. Digital odometers have made clocking harder but not impossible, and it remains a documented issue in the used car market.\n\nTitle washing describes the process of registering a salvaged, written-off, or encumbered vehicle through jurisdictions with less stringent record-keeping to produce a clean title. A buyer who relies on the title document alone may unknowingly purchase a vehicle that the insurer has declared a write-off after an accident, or that has undisclosed outstanding finance — meaning the lender can legally reclaim it even after the buyer has paid for it.\n\nThe private sale environment has the weakest consumer protections. A buyer purchasing from a private seller typically has limited recourse if the vehicle has undisclosed problems. Dealers in most regulated markets carry statutory obligations; private sellers do not. Scammers prefer the private sale channel precisely because it offers the combination of large transaction size with minimal oversight.","redFlags":["Seller cannot meet for a viewing and requests a holding deposit to reserve the vehicle","Price is significantly below market value with an explanation that sounds unusual","Seller is described as being overseas and arranges delivery rather than in-person collection","Vehicle history report shows gaps, multiple owners in a short period, or previous write-off markers","The seller is reluctant to allow a pre-purchase inspection by an independent mechanic","Finance or outstanding loans cannot be verified as cleared before payment"],"whatToDoNow":["Always view and test-drive a vehicle in person before any payment","Run a vehicle history check to identify write-offs, outstanding finance, and mileage discrepancies","Use a regulated dealer where statutory consumer protections apply","Never transfer money before collecting the vehicle and confirming it matches the description","Have a pre-purchase inspection done by an independent mechanic for significant purchases","Report vehicle fraud to your national consumer authority and to the police if a crime occurred"],"faq":[{"question":"Does outstanding finance on a vehicle I bought from a private seller become my problem?","answer":"In most jurisdictions, a lender who holds a security interest in a vehicle can repossess it from whoever holds it, even a good-faith subsequent purchaser. This is why clearing finance before or as part of the transaction, and verifying it through a history check, is essential."},{"question":"Is a car below market price always suspicious?","answer":"Not always. Genuine below-market-rate cars exist — distress sales, vehicles needing work, or sellers who simply want a quick sale. The difference is that a genuine seller can substantiate the reason and will accommodate a viewing and inspection."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-spear-phishing-and-how-does-it-differ","url":"https://scamencyclopedia.org/questions/what-is-spear-phishing-and-how-does-it-differ","question":"What is spear phishing and how is it different from regular phishing?","shortAnswer":"Spear phishing is a targeted attack using personalised information about the recipient — in contrast to mass phishing which sends the same generic message to millions.","explanation":"Regular phishing is a numbers game. The attacker sends the same message to millions of addresses knowing that only a small fraction need to respond for the operation to be profitable. The messages are generic: 'Dear customer, your account has been suspended.' This approach generates volume but at the cost of credibility — anyone who does not use that particular bank or service immediately recognises the message as irrelevant.\n\nSpear phishing inverts this model. The attacker researches a specific individual, gathering their name, employer, role, recent activity, colleagues' names, and any other publicly available information. The resulting message is highly personalised: 'Hi Sarah, I noticed you were at the industry conference last week — I wanted to follow up on the supplier contract we discussed.' The combination of correct personal detail, familiar context, and relevant subject matter makes the message very difficult to dismiss as fraud.\n\nBusinesses and high-value individuals are the primary targets of spear phishing because the effort of personalisation is only economically justified when the potential payoff is significant. An attack on an accounts payable manager with access to a company's payment systems is worth the research investment. Similarly, a senior executive at a company handling sensitive data, a lawyer with access to client funds, or an individual with significant personal wealth may be specifically profiled and targeted.\n\nSocial media is the primary research tool. LinkedIn provides role, employer, project, and colleague information. Facebook and Instagram provide personal interests, events attended, family connections, and life events. Combining these sources enables a scammer to construct a message that a real colleague or trusted contact might plausibly send.","redFlags":["An email is correctly personalised with your name, role, and recent activity but comes from an unusual address","A message references a shared event, project, or contact but asks for an action that seems out of context","The sender's email is slightly different from a known contact — one letter changed or a different domain","An attachment or link is explained by plausible recent context but was not expected","The message requests urgent action on something financial or credential-related"],"whatToDoNow":["Verify any unexpected email requesting credentials or financial action by calling the sender directly","Inspect sender email addresses carefully — not just the display name","Limit the personal and professional information visible on public social media profiles","Report spear phishing attempts to your employer's IT security team and national cyber authority","Use email filtering solutions that can detect spoofed sender domains"],"faq":[{"question":"Can spear phishing arrive by phone or text as well as email?","answer":"Yes. Voice spear phishing (vishing) and SMS spear phishing (smishing) both exist. A personalised phone call using correct details about a target's role or recent activity can be just as effective as an email, and more immediate."},{"question":"What is whaling in the context of phishing?","answer":"Whaling refers to spear phishing specifically targeting senior executives. The term reflects the higher value of the target. These attacks are highly researched and may involve sophisticated impersonation of board members, major clients, or regulators."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-use-fake-social-proof","url":"https://scamencyclopedia.org/questions/how-do-scammers-use-fake-social-proof","question":"How do scammers use fake reviews and social proof to appear trustworthy?","shortAnswer":"Fake reviews, purchased followers, fabricated testimonials, and manufactured endorsements are used to create the appearance of public trust and activity that does not genuinely exist.","explanation":"Social proof is a genuine psychological principle: people look at what others have done to help decide what they should do. A product with thousands of positive reviews seems safer than one with none. A social media account with many followers seems more credible than a new one. Scammers understand this and systematically manufacture false social signals to make fraudulent operations appear legitimate and popular.\n\nFake review ecosystems are commercially available. Services exist to post quantities of five-star reviews to a given platform within days. These reviews are written either by paid writers generating unique text or by AI tools producing varied but positive content. Detection is difficult because the reviews are spread across multiple accounts with varying posting histories. The result is that a new, fraudulent business can arrive on a review platform looking as established as a genuine competitor.\n\nSocial media followers and engagement are similarly purchasable. An investment platform's social account can acquire tens of thousands of followers, all bot or purchased accounts, in days. When a potential victim sees a large following combined with regular posts about financial success, the volume of apparent endorsement provides powerful false reassurance. Engagement metrics — likes, comments, shares — can all be purchased in the same way.\n\nTestimonials on websites are trivially fabricated. Photos are taken from stock image libraries, names are invented, and quotes are written to address the most common objections a potential customer might have. Without an ability to contact the quoted individual independently, there is no way to verify the testimonial, and most visitors do not attempt to. Understanding that testimonials on a company's own website carry essentially no verifiable evidential weight is an important media literacy point.","redFlags":["Reviews are all very recent and use similar phrasing or sentiment","Social media followers are high but posts have low engagement relative to the follower count","Testimonials on the website cannot be traced to real, contactable individuals","The same review text appears on multiple platforms with minor variations","A reviewer's profile was created recently and has only reviewed this one business","Negative reviews or questions are aggressively deleted or responded to with hostility"],"whatToDoNow":["Use independent review aggregators rather than reviews on the company's own website","Look at the distribution of reviews — all five-star with no negatives is itself suspicious","Search for news coverage and forum discussions alongside formal reviews","Check a social media account's follower-to-engagement ratio as a credibility signal","Report clearly fake review activity to the platform hosting them"],"faq":[{"question":"Are there tools to detect fake reviews?","answer":"Some browser extensions and third-party services analyse review patterns and flag suspicious profiles. They are useful heuristics but not definitive. The most reliable approach is cross-referencing across multiple independent platforms and looking for patterns in reviewer history."},{"question":"Can a business with many negative reviews still be legitimate?","answer":"Yes. High volume, well-known businesses accumulate negative reviews simply through statistical scale. Context matters: a pattern of negative reviews describing the same specific problem is more informative than a handful of isolated complaints."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-sim-swapping-work-as-a-fraud-technique","url":"https://scamencyclopedia.org/questions/how-does-sim-swapping-work-as-a-fraud-technique","question":"How does SIM swapping work as a fraud technique and who does it target?","shortAnswer":"SIM swapping convinces a mobile carrier to transfer a victim's phone number to a SIM the scammer controls, giving them access to SMS-based authentication codes for financial and social media accounts.","explanation":"SIM swapping, also called SIM hijacking, exploits the account management systems of mobile network operators. Most carriers allow customers to transfer their number to a new SIM when they lose a phone or switch devices. This process requires some form of identity verification — but the verification standards vary enormously, and scammers have developed techniques to pass them.\n\nSocial engineering of mobile carrier staff is the most common approach. A scammer calls the carrier's customer service line, claims to be the account holder, and provides personal details to pass verification — details often gathered from data breaches, social media, or earlier phases of the fraud. If successful, the carrier transfers the number. Within minutes, the scammer receives all SMS messages sent to that number, including two-factor authentication codes for banking apps, email accounts, and social media.\n\nTargeting is deliberate. SIM swap fraud requires effort and carries more legal risk than phishing, so it is typically deployed against high-value targets: people with significant cryptocurrency holdings, active stock trading accounts, or accounts with payment credentials attached. An attacker who knows a specific individual holds valuable digital assets will invest in the verification hurdles.\n\nThe downstream impact is rapid. With access to SMS-based authentication, the attacker resets passwords on financial accounts, drains crypto wallets, and may access email to identify further high-value targets. All of this can happen within an hour of a successful swap, long before the real account holder notices their phone has lost service.","redFlags":["Your phone loses signal unexpectedly and cannot make calls or receive messages","You receive an unexpected notification that your SIM or account settings have changed","Authentication codes start arriving when you have not initiated any login","You are locked out of accounts and password reset texts are not arriving","Your mobile carrier contacts you about a number transfer you did not request"],"whatToDoNow":["Switch financial account authentication from SMS codes to an authenticator app","Set a PIN or passphrase on your mobile account that must be quoted for any account changes","Contact your carrier immediately if your phone unexpectedly loses service","Alert your bank and any crypto exchanges immediately if you suspect a SIM swap","Report to your national cyber security authority and your carrier's fraud department"],"faq":[{"question":"Is SMS-based two-factor authentication still worth using?","answer":"It is significantly better than no second factor at all. SMS-based authentication stops most opportunistic attacks. For high-value accounts, switching to an authenticator app or hardware key provides substantially stronger protection against SIM-swap-specific attacks."},{"question":"Can you sue a mobile carrier for a successful SIM swap?","answer":"Legal actions against mobile carriers for failing to prevent SIM swaps have been pursued in some jurisdictions, with mixed outcomes. The case is stronger when the carrier demonstrably failed to follow its own stated verification procedures."}],"lastReviewed":"2026-06-10"},{"slug":"why-do-scammers-build-trust-before-asking-for-money","url":"https://scamencyclopedia.org/questions/why-do-scammers-build-trust-before-asking-for-money","question":"Why do scammers invest weeks or months building trust before asking for money?","shortAnswer":"Trust investment makes the eventual financial request seem out of character for the relationship, lowers the victim's guard, and creates emotional investment that makes saying no psychologically costly.","explanation":"The timing of a financial request within a scam relationship is carefully managed. Asking for money immediately after first contact would trigger immediate rejection in most people — the request would land as the obvious manipulation it is. By delaying the financial element until a relationship has been established, the scammer changes the context in which the request is received. It arrives not from a stranger but from someone who has demonstrated care, consistency, and apparent investment in the target's wellbeing.\n\nThe trust-building phase is designed to create reciprocity. Human relationships involve mutual exchange, and when someone has invested significant time, attention, and apparent emotion in another person, the other person feels a natural obligation to reciprocate. When a financial request finally arrives, it feels like participation in a genuine relationship rather than a response to a cold pitch. The target is not giving money to a scammer — in their perception, they are helping someone they know.\n\nThe extended timeline also creates information asymmetry. Over weeks of conversation, the target has shared details about their financial situation, family relationships, emotional needs, and life circumstances. The scammer holds all of this and can use it to calibrate requests and respond to hesitation. The target, by contrast, knows only what the scammer chose to share — a constructed identity designed to be maximally appealing.\n\nSunk cost compounds the effect. After investing weeks or months in what feels like a meaningful relationship, the prospect of walking away represents losing that investment entirely. The cost of stopping — both emotionally and in terms of the time already spent — raises the psychological threshold for resistance. Each day of continued engagement makes the eventual revelation harder to accept.","redFlags":["A relationship has been warm and consistent but the first financial request feels out of place","You find yourself rationalising why this person is different from a typical scam","The financial request is framed as a temporary problem in an otherwise positive relationship","Refusing or questioning the request produces an emotional reaction disproportionate to the amount","You feel reluctant to discuss the relationship with others who might question it"],"whatToDoNow":["Discuss any developing online relationship with a trusted friend or family member","Apply the same scrutiny to a financial request from an online contact as you would from a stranger","Do not allow emotional investment to create a sense of financial obligation","Recognise that a genuine person who cares about you will not pressure you financially","Seek support from a fraud victim organisation if you are uncertain about a relationship"],"faq":[{"question":"How long do scammers typically build trust before a financial request?","answer":"It varies significantly. Quick romance scammers may ask within a week. Pig-butchering operations invest a month or more before introducing investments. The longer the trust phase, typically the larger the financial target."},{"question":"Can a genuine romantic interest develop online without any fraud?","answer":"Yes. Many people have met genuine partners online. The distinction is not the online channel but specific behaviour: genuine people welcome video calls, do not consistently deflect meetups, and never request money. These markers distinguish genuine from fraudulent regardless of channel."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-people-on-platforms","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-people-on-platforms","question":"How do scammers choose which online platforms to operate on?","shortAnswer":"Scammers gravitate to platforms with large user bases, limited identity verification, easy account creation, and communities whose members are likely to be searching for the type of opportunity being offered.","explanation":"Platform selection is a strategic decision for scam operations. A platform that reaches millions of users, requires no verified identity to create an account, and provides discovery features that surface new accounts to potential targets is ideal for fraud at scale. Dating apps, social media platforms, investment forums, gaming communities, and marketplace apps all present different risk profiles, and different types of fraud are concentrated in different channels.\n\nDating and social apps attract romance scammers because their entire purpose is helping people connect with strangers. The default expectation is that contacts are new and that some initial uncertainty about identity is normal. This makes it harder to apply standard vigilance — 'be careful with strangers' is the opposite of what the platform is designed to facilitate.\n\nClassifieds and marketplace apps attract transaction fraud because buyers and sellers are actively looking to exchange money. The volume of legitimate transactions provides cover and sets a psychological precedent for financial activity with unknown parties. Fake listings blend in with genuine ones, and the normal transaction flow provides a template for what a fraudulent one should look like.\n\nInvestment and cryptocurrency communities attract financial fraud because they self-select members who are interested in financial opportunity. Scammers presenting an investment scheme do not need to overcome initial scepticism about why a financial opportunity would be presented on the platform — this is exactly what community members are looking for. The challenge becomes distinguishing the fraudulent from the legitimate, which is harder than recognising an off-context pitch.","redFlags":["Contact arrives through an unexpected platform for the type of relationship being proposed","The account that contacted you has very little history on the platform","The platform lacks clear identity verification for account creation","You were found through an algorithm rather than a mutual connection","The opportunity offered fits the platform context suspiciously well — too tailored"],"whatToDoNow":["Understand what protections each platform offers and use them — report functions, payment protection, verified badges","Apply higher scrutiny to new contacts on platforms with minimal identity verification","Use official platform payment systems rather than off-platform transfers","Check whether the platform has any history of being associated with specific scam types","Report suspected fraudulent accounts to the platform so they can act at scale"],"faq":[{"question":"Are newer or smaller platforms safer than large ones?","answer":"Not necessarily. Smaller platforms may have less-developed fraud detection. Large platforms have more resources for moderation but also more scammers due to their audience size. Platform safety depends more on verification requirements and moderation quality than on size alone."},{"question":"Do scam operations prefer mobile apps or desktop websites?","answer":"Both are used. Mobile app stores provide some level of vetting that web-based operations bypass entirely. However, both channels are extensively used, and the platform type is less determinative than the verification and moderation practices."}],"lastReviewed":"2026-06-10"},{"slug":"why-do-scammers-use-secrecy-and-shame","url":"https://scamencyclopedia.org/questions/why-do-scammers-use-secrecy-and-shame","question":"Why do scammers insist on secrecy and how does shame prevent victims from reporting?","shortAnswer":"Secrecy prevents verification and intervention during the scam; shame prevents reporting after it, creating a cycle that protects the scammer and extends the harm to the victim.","explanation":"Secrecy instructions are embedded in almost every type of scam that involves a building relationship. 'Don't tell your family about our business arrangement yet.' 'The police are involved so you cannot speak to anyone.' 'This investment opportunity is just for a few trusted people, please keep it confidential.' Each of these creates an information barrier between the victim and any person who might identify the fraud.\n\nThe effectiveness of secrecy as a tactic lies in what it prevents. A second perspective — from a friend, family member, bank staff member, or professional — is the most reliable protection against most scams. When two people review the same situation, the one not under the influence of the scammer's relationship or urgency can often see what the victim cannot. Secrecy eliminates this second perspective.\n\nAfter a scam concludes, shame becomes the mechanism that suppresses reporting. Victims often feel embarrassed that they believed the scammer's story, worry that others will think less of them, or fear that admitting the fraud will affect how family members perceive their decision-making capacity. These feelings are understandable but damaging: they allow the scammer to continue operating against new targets, and they deprive the victim of the support that could help them recover.\n\nResearch into the psychology of fraud victimisation shows clearly that shame does not correlate with vulnerability to scams — educated, high-earning, and socially connected people are all regularly defrauded. What scammers do is construct specific conditions designed to defeat specific people's defences. Understanding this helps de-stigmatise reporting and supports the public health approach to fraud prevention that consumer protection organisations increasingly advocate.","redFlags":["You are specifically instructed not to discuss the matter with family or friends","A situation is described as legally sensitive, requiring confidentiality","The opportunity is exclusive and sharing it with others would disqualify you","After a suspicious interaction, you find yourself reluctant to tell anyone about it","You are told that reporting to police would cause problems for you personally"],"whatToDoNow":["Treat any instruction for secrecy as a red flag and deliberately share the situation with someone you trust","Know that reporting a fraud is always the right thing to do regardless of how it happened","Contact your national fraud authority — staff are trained to be non-judgemental and supportive","Victim support organisations exist specifically for fraud and offer confidential assistance","Your report helps protect others — even if your individual loss cannot be recovered, reporting prevents future victims"],"faq":[{"question":"Is it true that most scam victims do not report?","answer":"Studies consistently find significant underreporting. Estimates suggest only a fraction of fraud incidents are formally reported. Shame is a major factor for individuals; commercial victims add concerns about reputation and business confidence. Underreporting means official statistics significantly undercount the real scale of fraud."},{"question":"Will reporting a scam get me in trouble if I made payments?","answer":"Reporting makes you a witness and complainant, not a suspect. In fraud cases where victims were deceived into making payments, the legal liability rests with the scammer. There is no general jeopardy in reporting your own victimisation."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-facebook-marketplace","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-facebook-marketplace","question":"How do scams work on Facebook Marketplace?","shortAnswer":"Scammers on Facebook Marketplace typically pose as buyers or sellers to steal money or goods, using fake payment screenshots, overpayment tricks, and pressure tactics to bypass safe transaction practices.","explanation":"Facebook Marketplace attracts scammers because it combines a massive user base with a built-in sense of social trust — profiles appear to belong to real people with friends and history. The most common seller-targeting scam is the overpayment scheme: a \"buyer\" sends a check or Zelle/Venmo payment for more than the asking price, then asks you to refund the difference before the original payment clears. When the initial payment bounces or reverses, you lose both the item and the refunded amount.\n\nOn the buying side, scammers list items they do not own — often copied from legitimate listings elsewhere — collect payment, then disappear. They push buyers off-platform toward Zelle, Cash App, or crypto, which offer no buyer protection. Rental and vehicle listings are especially prone to this, with fake landlords or dealers requesting deposits before any in-person viewing.\n\nPhishing is also common: fake \"Facebook Marketplace Checkout\" pages or spoofed notifications ask you to log in, capturing your credentials. Some scammers use AI-generated profile photos and purchase one or two cheap items to build a brief feedback history before targeting expensive goods.\n\nThe safest approach is to deal locally in person, meet in a public place (many police stations offer \"safe exchange zones\"), inspect goods before paying, and use cash or a payment method with dispute rights such as PayPal Goods and Services.","redFlags":["Buyer offers to pay more than the asking price and requests a refund of the overage","Seller insists on Zelle, Cash App, or crypto and refuses PayPal G&S or cash","Profile was created recently or has very few posts and friends","Listing photos appear professionally stock-like or are copied from another site","Buyer or seller wants to move the conversation to WhatsApp or email immediately","Seller refuses to meet in person or let you inspect the item before payment","You receive a link to a login page that does not look exactly like facebook.com"],"whatToDoNow":["Reverse-image-search listing photos to check whether they appear elsewhere online","Meet locally in person for high-value items; use a police station safe exchange zone","Pay with cash or PayPal Goods and Services — never Zelle, Venmo Friends, or crypto","Never refund an overpayment before the original funds fully clear your bank (days, not hours)","Report suspicious listings using the in-app flag on the listing page","If you were scammed, report to the FTC at reportfraud.ftc.gov and your bank immediately","Screenshot all messages and the listing before reporting so evidence is preserved"],"faq":[{"question":"Does Facebook offer purchase protection on Marketplace?","answer":"Facebook offers limited Purchase Protection only when you check out through the in-app Facebook Checkout feature. Transactions arranged through Marketplace but paid outside that system — via Zelle, Cash App, Venmo Friends, wire transfer, or crypto — are not covered."},{"question":"Can I trust a seller with a five-star rating and many Facebook friends?","answer":"Not unconditionally. Scammers buy cheap items to build positive feedback, and profile photos can be AI-generated. Check how long the account has existed and whether the friends list looks organic before trusting a seller with a large payment."},{"question":"What should I do if I already paid and the seller has gone silent?","answer":"If you paid by credit card or PayPal Goods and Services, file a dispute immediately. If you used Zelle or Cash App, contact your bank, though reversals are not guaranteed. Report the listing to Facebook and file a complaint with the FTC."}],"lastReviewed":"2026-06-10"},{"slug":"is-facebook-marketplace-safe-for-buying-and-selling","url":"https://scamencyclopedia.org/questions/is-facebook-marketplace-safe-for-buying-and-selling","question":"Is Facebook Marketplace safe for buying and selling?","shortAnswer":"Facebook Marketplace can be safe if you follow cash-in-person or PayPal Goods and Services transactions, but it carries real risk when buyers or sellers push you toward unprotected payment methods or remote deals.","explanation":"Facebook Marketplace is one of the most widely used peer-to-peer selling platforms, and millions of legitimate transactions happen on it daily. However, the platform does not vet listings or verify that sellers actually possess the items they advertise, which creates an environment where both buyers and sellers face meaningful fraud risk.\n\nFor buyers, the chief danger is paying for something that never arrives or is misrepresented. For sellers, the chief danger is accepting a payment that later reverses — especially checks, Zelle, or peer-to-peer app transfers. Facebook's Purchase Protection applies only to in-app checkout and covers a limited range of categories.\n\nThe safety of any specific transaction largely depends on your precautions. In-person cash deals for locally picked-up items carry the lowest risk. For shipped goods, PayPal Goods and Services provides a dispute mechanism — though you should still verify the seller independently. High-value items such as electronics, vehicles, and furniture deserve extra vetting: request more photos, ask specific questions about the item, and meet in a visible public location.\n\nScammers adapt constantly, so even a profile that looks legitimate can be fraudulent. Treat any pressure to move quickly or accept unusual payment terms as a serious warning sign regardless of how convincing the seller's profile appears.","redFlags":["Seller wants shipping payment before you have seen the item in person","Buyer sends a payment confirmation screenshot instead of actual funds","Deal seems significantly below fair market value for no obvious reason","Seller claims to be deployed military or an overseas expat as explanation for remote sale","Communication switches abruptly from Marketplace messages to personal WhatsApp","Any mention of gift cards as an acceptable payment method"],"whatToDoNow":["For items under a few hundred dollars, meet locally and pay cash whenever possible","For higher-value or shipped items, use PayPal Goods and Services and never Friends and Family","Look up the asking price on other platforms to gauge whether an offer is suspiciously low","Ask for a live video call showing the item before sending any payment","Do not share your home address until payment is confirmed and the transaction is complete","Check the seller's account creation date and activity before trusting a large transaction"],"faq":[{"question":"Is it safe to ship items sold on Facebook Marketplace?","answer":"Shipping adds risk because you cannot verify the buyer's identity before releasing the item. If you ship, use PayPal Goods and Services so the buyer has a dispute path, ship only after payment fully clears, and get tracking with signature confirmation."},{"question":"Are vehicle listings on Facebook Marketplace legitimate?","answer":"Legitimate vehicle listings exist, but vehicle fraud is extremely common. Never pay a deposit without an in-person inspection, a VIN history check, and a test drive. Walk away from any seller who cannot meet locally."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-whatsapp","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-whatsapp","question":"How do scams work on WhatsApp?","shortAnswer":"WhatsApp scams exploit the platform's end-to-end encryption and personal-messenger feel to run impersonation, investment, and romance fraud with a false sense of privacy and trust.","explanation":"WhatsApp is the world's most widely used messaging app, which makes it an attractive channel for scammers. Because messages are encrypted and feel more intimate than email or social media, recipients are less likely to apply the same skepticism they would to a cold call or spam email. Scammers leverage this to their advantage across several recurring patterns.\n\nFamily emergency impersonation — sometimes called the \"Hi Mum\" scam — involves a fraudster sending a message claiming to be a family member stranded with a broken phone and an urgent need for money. The message starts with something like \"Hi, it's me, new number\" to establish identity before asking for a transfer. Victims who respond and are convinced they are speaking to a relative send money before they can verify the claim.\n\nCrypto and investment groups are another dominant threat. A stranger or a contact whose account has been compromised adds you to a WhatsApp group filled with apparent success stories of people making trading profits. Eventually you are shown a fraudulent investment platform and encouraged to deposit. Early withdrawals may work to build confidence, but larger sums are ultimately blocked behind fabricated \"tax fees.\"\n\nBusiness email compromise also flows through WhatsApp when scammers, having gathered details from LinkedIn, impersonate a manager or CFO and ask finance staff to make urgent wire transfers. The platform's informal style makes employees less likely to question the request.","redFlags":["Message from an unknown number claiming to be a family member with a new phone","Invitation to a WhatsApp investment or crypto group by a stranger","A contact whose writing style or vocabulary suddenly seems different — their account may be compromised","Requests for urgent wire transfers from someone claiming to be a manager or executive","Links to investment platforms you have never heard of, promising unusually high returns","Pressure to act before you can verify the request through another channel","Anyone who discourages you from calling the supposed family member or colleague directly"],"whatToDoNow":["Always verify an unexpected money request by calling the person on a known number — do not reply on WhatsApp alone","Enable two-step verification in WhatsApp Settings > Account > Two-step verification","Never click investment links shared in WhatsApp groups by people you do not know in real life","If a contact's behavior seems odd, reach out to them through a separate channel to check whether their account is compromised","Report and block suspected scammers using the in-app option (long-press the message > Report)","Do not share your WhatsApp verification code with anyone — sharing it hands over account access"],"faq":[{"question":"Can scammers hack my WhatsApp account?","answer":"Yes, through SIM-swap attacks or by tricking you into forwarding your six-digit verification code. Once they have your code, they can register your number on their device and message all your contacts. Two-step verification with a PIN adds a second barrier."},{"question":"Is it safe to accept calls from unknown numbers on WhatsApp?","answer":"Unknown calls can be legitimate but also phishing attempts that try to elicit personal information. Do not confirm personal details on an unsolicited call; let it go to voicemail or hang up and call back on a verified number if needed."},{"question":"What should I do if I was added to a WhatsApp investment group?","answer":"Leave the group immediately and block the person who added you. Do not engage with members or click any links. The group is almost certainly a set-up for an advance-fee or fake-trading-platform scam."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-telegram","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-telegram","question":"How do scams work on Telegram?","shortAnswer":"Telegram's large anonymous groups and bot ecosystem make it a hotspot for crypto pump-and-dump schemes, fake investment channels, and impersonation of customer-support staff from major brands.","explanation":"Telegram allows the creation of public channels with unlimited members, bots that can automate messages, and anonymous accounts — all features that legitimate privacy advocates value but that scammers also exploit extensively. The platform does not require a verifiable identity, so fraudulent accounts can be spun up and discarded quickly.\n\nThe most prominent Telegram scam type is the fake crypto trading or investment channel. Operators inflate perceived credibility by purchasing followers, posting fabricated profit screenshots, and promoting a proprietary trading platform or signal service. Joining members are encouraged to make small deposits that appear to grow, then deposit larger sums that are ultimately inaccessible.\n\nImpersonation of customer support is rampant on Telegram because scammers search for users posting in public crypto or tech communities about problems, then message them privately pretending to be official support agents. They offer to resolve the issue in exchange for wallet seed phrases, private keys, or remote access — all of which hand full account control to the attacker.\n\nJob scams are also prevalent: fake \"remote job\" channels advertise flexible work tasks — watching YouTube videos, liking posts, or \"boosting products\" — and after a few initial micro-payments to establish trust, ask workers to deposit their own funds to \"unlock\" tasks or receive their earnings. This money is never returned.","redFlags":["Unsolicited private message from someone claiming to be exchange or wallet support","Channel posts fabricated trading profit screenshots and invites you to a linked platform","Job offer asking you to \"deposit\" your own money to activate tasks or receive payment","Admin account username that is almost identical to a known brand but with a small variation","Requests for wallet seed phrases, private keys, or login credentials of any kind","Unusually high daily return guarantees with no risk disclosure","Pressure to recruit friends in exchange for higher earnings"],"whatToDoNow":["Treat any unsolicited Telegram DM from a person claiming to be support staff as a scam","Never share seed phrases or private keys under any circumstances — legitimate services never ask","Verify official channels by checking the brand's website directly rather than following Telegram links","Enable two-step verification on your Telegram account via Settings > Privacy and Security","Report fraudulent channels and users through Settings > Report","If you deposited on a fake platform, stop sending any more money regardless of promised fees or taxes","Preserve screenshots of conversations and the channel before reporting"],"faq":[{"question":"Are there legitimate trading or investment channels on Telegram?","answer":"Some financial educators and analysts do use Telegram, but the platform is overwhelmingly used for fraudulent pump-and-dump and signal-service scams. Any channel promising guaranteed or unusually high returns is almost certainly fraudulent."},{"question":"Can I get my money back if I was scammed on Telegram?","answer":"Recovery is very difficult, especially if you sent cryptocurrency. Contact your bank or card issuer immediately if you paid by card. File a report with the FTC, IC3, or your national fraud authority. Be wary of recovery services that contact you afterward — many are follow-on scams."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-instagram","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-instagram","question":"How do scams work on Instagram?","shortAnswer":"Instagram scams center on fake influencer giveaways, impersonation of well-known accounts, counterfeit product shops, and romance profiles designed to eventually solicit money or investment.","explanation":"Instagram is a visually driven platform where credibility is often measured by follower counts and aesthetics, both of which can be purchased or fabricated. Scammers use this to create convincing facades: a boutique with professionally shot product photos that ships cheap counterfeits, an \"influencer\" running a giveaway that requires your credit card details to claim a prize, or a romantic profile built around aspirational lifestyle images.\n\nGiveaway fraud is one of the most common Instagram tactics. A post announces that a celebrity or brand is giving away cash, electronics, or gift cards. Entering requires following a set of accounts, sharing the post, and clicking a link to verify your entry — but the link leads to a phishing page or a subscription service that charges your card monthly.\n\nAccount impersonation involves creating a profile that closely mimics a real person or brand — same profile picture, similar username with a subtle variation such as an extra letter or an underscore — and then messaging the real account's followers. The impersonator may claim to offer exclusive products, charity campaigns, or investment opportunities.\n\nCrypto investment romance is also heavily routed through Instagram. A visually polished stranger makes contact, builds a relationship over weeks, then introduces a trading platform that shows spectacular returns. The pattern is identical to Telegram pig-butchering fraud. Victims are often asked to invest increasingly large sums before discovering withdrawals are blocked.","redFlags":["Account with a celebrity or brand name has a username variation such as an extra underscore or letter","Giveaway requires you to click an external link or provide credit card details to claim","Online shop has no verifiable business address, returns policy, or contact phone number","A new follower quickly moves the conversation toward an investment or trading platform","Sponsored posts promising unrealistic passive income or trading returns","Someone asks you to pay for a prize via gift cards, wire transfer, or crypto","Direct message from a profile with a high follower count but very few post interactions"],"whatToDoNow":["Verify official accounts using the blue verified badge and check the brand's own website for their official handle","Search the shop name on review platforms like Trustpilot before making any purchase","Never enter your payment details on a site linked from an Instagram giveaway post","Enable two-factor authentication on your Instagram account via Settings > Security","Report impersonation accounts using the three-dot menu on the profile > Report > Impersonation","If you made a purchase from a fraudulent shop, dispute the charge with your credit card issuer"],"faq":[{"question":"Can I trust an Instagram shop with thousands of followers?","answer":"Follower counts can be purchased cheaply and do not confirm legitimacy. Look for independently verifiable reviews outside Instagram, a traceable business address, and a functional returns process before buying."},{"question":"What happens if I click a phishing link from an Instagram giveaway?","answer":"The link may install malware or take you to a page that harvests your Instagram password or payment details. Change your Instagram password immediately, enable 2FA, and scan your device with updated security software."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-tiktok","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-tiktok","question":"How do scams work on TikTok?","shortAnswer":"TikTok scams exploit viral reach and the platform's young audience through fake giveaways, fraudulent shop links, investment promotion by impersonated creators, and gift-card livestream fraud.","explanation":"TikTok's algorithm can push content to millions of users who do not follow an account, which scammers exploit to amplify fraudulent offers rapidly. A fabricated video showing someone receiving a large cheque from a side-hustle or investment can go viral and generate thousands of clicks to a phishing page before the platform removes it.\n\nLivestream gift scams target viewers of live broadcasts: the host claims that every viewer who sends a TikTok coin gift will receive a cash reward or prize in return. Coins have real monetary value but the promised reward never materialises. In a related pattern, a fake celebrity account announces in a livestream that they are matching gifts or donating to charity for everyone who participates.\n\nTikTok Shop, the platform's e-commerce feature, has attracted fraudulent sellers listing heavily discounted goods. Some sellers fulfil orders with cheap substitutes, counterfeit products, or nothing at all. The shopping experience happens inside the app, which can obscure normal consumer vigilance about checking seller credentials.\n\nMake-money-online and crypto investment promotions thrive on TikTok because short videos make it easy to show impressive but fabricated profit dashboards without detailed explanation. Creators who are paid or compromised push followers toward referral links for platforms that are either outright fraudulent or multi-level marketing schemes.","redFlags":["Livestream host promises to send money or prizes in exchange for TikTok coin gifts","Creator claims a \"free\" giveaway that requires you to click an external link and submit payment details","TikTok Shop product is priced dramatically below normal retail with limited product information","Investment or crypto tutorial that only shows profits and provides a referral link","Account has a celebrity's name and photo but no verified badge and very few followers","Comment sections filled with suspiciously similar five-star testimonials","Offer that asks you to pay shipping or a small fee to claim a prize"],"whatToDoNow":["Never send TikTok coins expecting a financial return — coin gifts enrich the platform and creator, not you","Before buying from TikTok Shop, check independent reviews and the seller's return policy","Look for the verified badge on creator accounts before trusting investment or financial advice","Report fraudulent accounts and videos in-app using the share icon > Report","Search the opportunity name plus the word \"scam\" before investing any money","If you purchased from a fraudulent TikTok Shop seller, request a refund through the app and dispute with your card issuer if needed"],"faq":[{"question":"Is TikTok Shop safe to buy from?","answer":"TikTok Shop has consumer protections built in, but enforcement is inconsistent. Stick to sellers with verified reviews, check for a real return policy, and prefer paying by credit card for chargeback rights."},{"question":"Can I make money from TikTok investment videos?","answer":"The overwhelming majority of TikTok videos showing rapid trading or investment profits are fabricated or cherry-picked. Verified financial advisors exist on the platform but are rare; always verify credentials independently before following financial advice."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-dating-apps","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-dating-apps","question":"How do scams work on dating apps?","shortAnswer":"Dating app scams build romantic trust over days or weeks before pivoting to financial requests — emergency loans, investment platforms, or gift-card payments — exploiting the emotional connection that has been created.","explanation":"Dating app fraud exploits the platform's purpose: people are there specifically to trust strangers and form connections. Scammers invest real time in building a convincing relationship, often maintaining believable personas for weeks before any money request arises. This makes dating app scams among the highest-average-loss fraud types reported to consumer protection agencies.\n\nThe most destructive variant is pig-butchering fraud (sometimes called \"sha zhu pan\"), where the scammer — often working from a scripted operation — builds a romantic connection and then casually mentions they know a reliable crypto trading platform. They walk the victim through making initial deposits that appear to grow, encouraging progressively larger investments over weeks. When the victim tries to withdraw, they are told taxes or fees must be paid, and the platform is eventually shut down.\n\nCatfishing for money is an older pattern: the fraudster uses stolen photos of an attractive person, builds emotional intimacy, then claims a crisis — medical emergency, travel problem, legal trouble — and asks for wire transfers or gift cards. They never agree to video calls or in-person meetings, citing technical problems or circumstances.\n\nAccount takeover phishing also occurs: a fake match sends a link to \"a better app\" or to verify your photos, which is actually a credential-harvesting page. Protecting yourself requires patience, scepticism about video-call avoidance, and treating any financial request — however small or sympathetic — as a near-certain scam.","redFlags":["Match refuses video calls or consistently cancels in-person meeting plans","Profile photos look like a professional model and reverse image search shows them elsewhere","Conversation moves very quickly to strong affection and exclusive focus on you","Match mentions a profitable investment or trading platform they use and encourages you to try it","Any request for money, gift cards, crypto, or wire transfer regardless of the reason given","Story involves military deployment, working abroad on an oil rig, or medical work overseas","Match asks you to move communication to WhatsApp or email away from the dating app"],"whatToDoNow":["Video call before investing any emotional energy — a real person will agree to this early on","Reverse image search profile photos using Google Images or TinEye","Never send money, gift cards, or crypto to someone you have not met in person","Report suspicious profiles in-app and to the dating platform's trust team","If a match pushes a trading platform, search the platform name plus \"scam\" or \"withdrawal issues\"","Talk to a trusted friend or family member about the relationship — outside perspective catches red flags you might miss","Report to the FTC at reportfraud.ftc.gov if you have already sent money"],"faq":[{"question":"How long do dating app scammers typically spend building trust?","answer":"Pig-butchering scammers may spend two weeks to three months building rapport before introducing financial topics. The length of the relationship does not make it genuine — it is part of the method."},{"question":"What if the person I matched with did a video call — does that prove they are real?","answer":"Not necessarily. Scammers use pre-recorded videos, deepfake tools, or pay real individuals to appear on video briefly. Short, scripted video calls with poor quality or excuses about camera problems should still raise concern if financial requests follow."},{"question":"Can dating apps do more to prevent these scams?","answer":"Platforms are improving with AI-based photo verification and behavioural monitoring, but determined scammers adapt quickly. User vigilance, especially the refusal to send any money to an online match, remains the most reliable defence."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-linkedin","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-linkedin","question":"How do scams work on LinkedIn?","shortAnswer":"LinkedIn scams exploit the professional context to run fake job offers, investment schemes, and phishing attacks that feel credible because the platform is associated with career legitimacy.","explanation":"LinkedIn's professional reputation gives scam messages a veneer of legitimacy that a cold email would not have. When a well-connected-looking recruiter or executive reaches out, recipients are predisposed to engage politely and share information they would guard more carefully elsewhere.\n\nFake job recruitment is the most common LinkedIn scam. A convincing recruiter profile — complete with a professional headshot, listed employer, and mutual connections — contacts you about a high-paying remote role. After a brief interview conducted entirely by text or auto-filled questionnaire, you are \"hired\" and asked to cover training materials, equipment, or background-check fees. No job exists.\n\nInvestment and financial scams follow a professional wrapper: a connection request from a supposed financial advisor, hedge fund analyst, or crypto expert who then shares trading insights or \"exclusive\" investment opportunities. The credibility cue of a LinkedIn profile with work history and endorsements makes victims more willing to commit funds.\n\nExecutive impersonation for business email compromise is also prevalent. Scammers scrape company org charts from LinkedIn, craft a message appearing to come from a CFO or CEO, and ask a subordinate to transfer funds or purchase gift cards urgently. The message may arrive via LinkedIn InMail or through a spoofed email address constructed from the LinkedIn data.","redFlags":["Job offer arrives without you applying, moves through the entire process over chat only","Employer asks you to pay for equipment, software, or training before you start work","Connection you have never met offers unsolicited investment or trading advice","Profile has impressive credentials but was created recently and has few genuine interactions","Recruiter asks for your Social Security number, bank account, or ID before you have formally accepted an offer","An apparent executive sends an urgent, out-of-normal-channel request for a wire transfer or gift card purchase","Job salary is unusually high for the described role and requirements"],"whatToDoNow":["Verify a recruiter by calling the company's main switchboard and asking if the person is on staff","Never pay any fee as a condition of starting a job — legitimate employers do not require this","Check whether a company profile and its executives exist on the company's own website","Report suspicious profiles and messages using the three-dot menu > Report","For suspected business email compromise, verify any wire transfer request by calling the executive directly on a known number","Limit the personal information on your public LinkedIn profile to what is professionally necessary","File a report with the FTC or IC3 if you lost money"],"faq":[{"question":"How can a LinkedIn profile look so convincing if the person does not exist?","answer":"AI-generated profile photos, scraped employment histories from real companies, and purchased endorsements can create a highly believable profile quickly. Always verify through the company's official channels, not just the LinkedIn page."},{"question":"Is LinkedIn message-based recruiting ever legitimate?","answer":"Yes, many real recruiters do use InMail. The key differences are that legitimate recruiters do not ask for payment, conduct the entire process only over chat, or offer roles far above market rate for minimal experience."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-zelle","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-zelle","question":"How do scams work on Zelle?","shortAnswer":"Zelle scams exploit the app's instant, bank-linked transfers — which are nearly impossible to reverse — through impersonation of bank fraud departments, fake buyer schemes, and social engineering that rushes victims into sending money before they can think.","explanation":"Zelle transfers move between bank accounts within seconds and, unlike credit cards or PayPal Goods and Services, have no buyer protection mechanism. Once funds leave your account, recovering them depends entirely on voluntary cooperation from the recipient's bank — which rarely happens when the recipient is a scammer.\n\nThe bank impersonation scam is one of the most damaging Zelle patterns: a caller claims to be from your bank's fraud department, warns you that your account is under attack, and instructs you to move your money into a \"safe\" account via Zelle to protect it. The safe account belongs to the scammer. Your real bank will never ask you to send money to an outside account to secure it.\n\nFake buyer scams target sellers on Marketplace or Craigslist: the buyer offers to pay via Zelle and then sends a convincing screenshot of a payment confirmation. No money has actually been transferred. The seller, trusting the image, releases the item. Banks do not send Zelle confirmation screenshots for legitimate payments — the confirmation appears in your own app.\n\nZelle is also used to collect payment in utility shutoff impersonation, emergency family scams, and romance fraud. Its speed is deliberately exploited: scammers create urgency so you send the money before calling anyone to verify the situation.","redFlags":["Your bank calls to warn of fraud and instructs you to move money via Zelle to a new account","A buyer sends a screenshot of Zelle payment as proof but your app shows no incoming funds","Buyer says Zelle requires you to upgrade to a business account to receive their payment","Any urgent scenario — utility shutoff, relative in jail, online purchase — that demands Zelle specifically","Caller ID shows your bank's number (can be spoofed) and caller asks for your Zelle login details","Seller or buyer pressures you to complete the transfer immediately before you can verify"],"whatToDoNow":["Always check your actual bank app for incoming funds — never rely on a screenshot as proof","Hang up on anyone who calls claiming to be your bank and asks you to send money via Zelle","Call your bank using the number on the back of your card to verify any supposed fraud alert","Do not use Zelle to pay sellers or buyers you have never met in person for significant purchases","If you sent money to a scammer, call your bank immediately — same-day disputes have the best (though still limited) chance of recovery","File a report with the FTC and the Consumer Financial Protection Bureau (CFPB)"],"faq":[{"question":"Will my bank refund a Zelle scam payment?","answer":"Banks are required to refund unauthorised transfers (where someone sent money without your knowledge). Authorised push payments — where you sent the money yourself, even under false pretences — are much harder to recover under current US regulations, though some banks have voluntarily improved their policies."},{"question":"Is Zelle safe to use for splitting bills with friends?","answer":"Yes, Zelle is appropriate for sending money to people you know and trust personally, such as splitting a restaurant bill or paying a friend back. The risk rises sharply when you are sending money to strangers."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-cash-app","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-cash-app","question":"How do scams work on Cash App?","shortAnswer":"Cash App scams range from impersonation of Cash App customer support to fake \"Cash App Friday\" giveaways and money-flipping schemes that steal funds through irreversible peer-to-peer transfers.","explanation":"Cash App's ease of use and irreversible transfer design make it a preferred collection tool for scammers across many fraud types. The company genuinely does run promotional giveaways, which scammers exploit by creating lookalike accounts that mimic official Cash App social media posts and promise cash in exchange for a small upfront payment or account details.\n\n\"Money flipping\" or \"investment\" schemes are extremely common: a social media contact claims they can turn a few hundred dollars into thousands through a Cash App hack, a secret method, or a connection at the company. Victims send money and receive nothing. The request often comes from a compromised account of someone the victim follows on Instagram or Twitter, adding false credibility.\n\nFake customer support is another major vector. When users search for Cash App support on social media or call directory sites, they often encounter fake phone numbers or accounts run by scammers pretending to be official representatives. These fake agents ask for your sign-in code, PIN, or remote access to your device to resolve a problem — which gives them full access to your balance.\n\nCash App is also the preferred payment method in rental scams, puppy scams, utility shutoff impersonation, and emergency family fraud because it settles instantly with no built-in buyer protection for peer-to-peer transfers.","redFlags":["Account promising to \"flip\" your money into a larger amount within hours","Someone asks for your Cash App PIN, sign-in code, or wants to screen-share your device","Supposed Cash App Friday prize requires you to send a small payment first to claim winnings","Customer support contact found via social media search instead of the official in-app support","A follower or contact whose account seems compromised is pushing a money-making scheme","Rental, pet, or product seller insists only Cash App is acceptable as payment"],"whatToDoNow":["Access Cash App support only through the official app: tap your profile icon > Support","Enable the Security Lock feature in Cash App settings to require a PIN or fingerprint for every payment","Never send money to claim a prize or activate a money-flipping opportunity","Report fraudulent Cash App accounts to Cash App Support and on the social media platform where you encountered them","If you sent money to a scammer, report it in the app within the transaction (tap the transaction > Report an Issue) immediately","File a report with the FTC and consider reporting to the CFPB"],"faq":[{"question":"Does Cash App have buyer protection?","answer":"Cash App does not offer buyer protection for peer-to-peer payments in the way PayPal Goods and Services does. The Cash App Pay feature used for business purchases may have some dispute options, but ordinary person-to-person transfers are final."},{"question":"How do I tell real Cash App social media accounts from fake ones?","answer":"Cash App's official accounts are verified with blue checkmarks on Twitter/X and Instagram. Look for the verified badge and check whether the account links back to cash.app. Any account without a verified badge asking for payments is almost certainly fraudulent."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-paypal","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-paypal","question":"How do scams work on PayPal?","shortAnswer":"PayPal scams typically involve getting victims to use the Friends and Family option (which has no buyer protection) rather than Goods and Services, or to act on fake payment notification emails that mimic PayPal's branding.","explanation":"PayPal is one of the safer online payment platforms because its Goods and Services feature offers a formal dispute and refund process. Scammers therefore go to great lengths to prevent victims from using that protection — most commonly by insisting on Friends and Family transfers, which are instantaneous and non-reversible.\n\nPhishing emails that convincingly spoof PayPal notifications are a separate major threat. These emails claim your account has been limited, a large payment is pending, or that you need to verify your details. The links inside lead to convincing fake PayPal pages that harvest your login credentials or payment information. Checking the actual sender email address usually reveals a non-paypal.com domain.\n\nInvoice scams are increasingly common: fraudsters use real PayPal accounts to send official-looking invoices for products or subscriptions you never ordered, sometimes with a phone number to call if you want to dispute the charge. Calling that number connects you to the scammer, who walks you through a \"refund process\" that actually authorises a payment to them.\n\nAdvanced fee fraud also flows through PayPal: a seller on an auction site claims they cannot accept a normal payment and that their PayPal needs a \"business verification\" payment from you before releasing the item. No legitimate PayPal workflow requires a buyer to send extra funds for verification.","redFlags":["Seller insists on Friends and Family payment rather than Goods and Services","Email about your PayPal account comes from a domain other than @paypal.com","Invoice arrives via PayPal for a product or service you never purchased","PayPal notification email contains urgent language and a link — check actual sender address","Buyer claims they sent more than the asking price and asks you to refund the difference via Zelle","Any claim that PayPal requires an extra payment for verification or to release funds","Phone number inside a PayPal notification email — official PayPal emails do not include support phone numbers"],"whatToDoNow":["Log into PayPal directly by typing paypal.com rather than clicking links in emails","Always request Goods and Services when paying a stranger for a product or service — never Friends and Family","Open unexpected invoices directly in your PayPal account, not through email links; mark fraudulent ones as spam","Enable two-factor authentication on your PayPal account","Report phishing emails by forwarding them to phishing@paypal.com","If you were defrauded, file a dispute through PayPal Resolution Center and contact your bank"],"faq":[{"question":"What is the difference between PayPal Friends and Family and Goods and Services?","answer":"Friends and Family is designed for personal payments between trusted contacts with no fees and no buyer protection. Goods and Services charges a small fee to the seller but gives the buyer the right to dispute and request a refund if the item is not received or not as described."},{"question":"If I receive a fraudulent PayPal invoice, will I be charged automatically?","answer":"No. Receiving an invoice in PayPal does not charge you automatically; you must click Pay. Mark the invoice as spam within PayPal and do not call any phone numbers listed on it."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-venmo","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-venmo","question":"How do scams work on Venmo?","shortAnswer":"Venmo scams exploit the app's social feed and peer-to-peer payment design through fake payment screenshots, accidental-overpayment reversals, and social engineering attacks that leverage the public transaction history.","explanation":"Venmo has a social element that most payment apps lack: by default, transaction descriptions are visible on a public or friends-only feed. Scammers mine this feed to identify potential targets — for example, people who have just sold something — and to craft convincing, contextually relevant approaches.\n\nThe accidental payment scam is one of the most common: a stranger sends you money \"by mistake\" along with an apologetic message asking you to send it back. If you comply, Venmo's chargeback process (which runs through the card or bank that funded the original payment) reverses the initial transfer after you have returned funds, leaving you out of pocket. Never return a payment by sending a new one; ask Venmo support to reverse it directly.\n\nFake Venmo payment confirmation screenshots are used in marketplace selling scenarios: a buyer sends a screenshot showing they have paid, but the payment never arrives. Sellers should verify funds in their Venmo app before releasing goods.\n\nVenmo's popularity among younger users makes it a target for social media payment scams as well: fake accounts impersonate friends and ask for small emergency loans that feel low-stakes enough to send without verification.","redFlags":["A stranger sends you money and immediately asks you to return it to a different account","Buyer shows a screenshot of a Venmo payment but your app shows no incoming transfer","New Venmo contact with a profile name very similar to a friend's, asking for emergency money","Request for payment via Venmo for a service from an unknown business with no other payment options","Venmo notification email that links to a login page — check the sender address carefully","Someone offers to buy your marketplace item at full price immediately and insists on Venmo"],"whatToDoNow":["Set your Venmo transaction feed to Private (Settings > Privacy > Transactions > Private) to reduce data mining by scammers","Always verify funds in your own Venmo app — never trust screenshots as proof of payment","If someone \"accidentally\" sends you money, contact Venmo support to reverse it rather than sending a new payment","Only accept payment via Venmo from people you personally know and trust","For selling goods, use PayPal Goods and Services or cash instead of Venmo for buyer/seller protection","Enable Face ID, fingerprint, or PIN lock in Venmo settings"],"faq":[{"question":"Is it safe to use Venmo to pay strangers for goods?","answer":"Venmo is designed for payments between trusted contacts and offers no buyer protection for peer-to-peer transactions. For buying from strangers, use PayPal Goods and Services, which offers a formal dispute and refund process."},{"question":"Can my Venmo balance be stolen if someone has my login?","answer":"Yes, an attacker with your login can transfer your balance or make purchases. Use a unique strong password, enable two-factor authentication, and set a PIN in-app. Review your transaction list regularly for unauthorised activity."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-crypto-exchanges","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-crypto-exchanges","question":"How do scams work on crypto exchanges?","shortAnswer":"Crypto exchange scams range from impersonation of real exchange support staff and phishing to fake exchange platforms designed to trap deposits and fraudulent \"account verification\" fees that steal funds before any trade occurs.","explanation":"Legitimate cryptocurrency exchanges — regulated platforms where real digital assets are bought and sold — are themselves targets of impersonation and phishing. Separately, entirely fake exchanges are built specifically to defraud users. Understanding the difference matters when assessing a platform you encounter for the first time.\n\nPhishing attacks on exchange users are highly polished: emails warning of suspicious logins, withdrawal confirmations, or KYC expiry look identical to genuine exchange communications and link to login pages that steal credentials. Once an attacker has your login and, if possible, bypasses 2FA through a SIM-swap or phishing of your authenticator code, they drain your balance within minutes.\n\nFake exchanges are built to look professional and may even process small withdrawals initially to build confidence. They are typically introduced through social media investment groups, romance connections, or Telegram trading channels. The scam completes when users try to withdraw significant funds and are told they must pay a tax, compliance, or verification fee — which is consumed and the withdrawal never materialised.\n\nEven genuine exchanges can be misused in pig-butchering scams: a scammer walks you through opening a real exchange account, then instructs you to move funds from that exchange to a fake trading platform. The real exchange is simply the on-ramp; the fraud happens on the secondary platform.","redFlags":["Exchange you have never heard of was recommended by a romantic contact or social media group","Platform shows spectacular account gains but withdrawal attempts trigger new fee demands","Email about your exchange account links to a domain that is not the official exchange domain","Exchange requires large upfront \"identity verification\" or \"insurance\" fees before you can trade","Support contacts you via Telegram or WhatsApp rather than through the exchange's official support system","The exchange has no verifiable regulatory registration in your jurisdiction","Withdrawal requests take unusually long and support cites invented technical reasons"],"whatToDoNow":["Use only exchanges regulated in your country — check registration with the relevant financial authority","Navigate to your exchange by typing the URL directly, not through email or social media links","Enable two-factor authentication using an authenticator app rather than SMS","Never move funds from a real exchange to another platform at the suggestion of a romantic contact or social media group","If withdrawal fees appear after depositing, stop sending money — legitimate fees are deducted from your balance, not charged in advance","Report fake exchanges to your national financial regulator and file with the FTC or IC3"],"faq":[{"question":"How do I check whether a crypto exchange is legitimate?","answer":"Look for regulatory registration in your country — in the US this means FinCEN registration and often state money-transmitter licences; in the UK, FCA registration. Check independent review sites, look for a verifiable business address, and confirm the domain matches official communications."},{"question":"Can I recover crypto stolen through exchange phishing?","answer":"Cryptocurrency transactions are generally irreversible on the blockchain. You can report the theft to law enforcement and the exchange, and sophisticated investigations have occasionally recovered funds, but the realistic recovery rate is very low. Prevention is the primary defence."}],"lastReviewed":"2026-06-10"},{"slug":"is-whatsapp-safe-for-sending-money","url":"https://scamencyclopedia.org/questions/is-whatsapp-safe-for-sending-money","question":"Is WhatsApp safe for sending money?","shortAnswer":"WhatsApp Pay is a real feature in some countries, but using WhatsApp to arrange or request money transfers exposes you to social-engineering scams that exploit the personal trust the platform creates.","explanation":"WhatsApp Pay is a built-in peer-to-peer payment service available in select markets including India, Brazil, and a growing number of countries. In those markets, the feature connects to a regulated payment system and has some consumer protections. However, the broader concern about money and WhatsApp has less to do with the native pay feature and more to do with how scammers use the messaging platform to social-engineer victims into transferring funds through other methods.\n\nThe \"Hi Mum\" or family emergency scam works because WhatsApp feels like a private, personal channel. A message appearing to be from your child, parent, or partner on a new number creates urgency and emotional pressure that short-circuits normal caution. Because WhatsApp is encrypted and end-to-end, there is no platform-level review of the message before it reaches you.\n\nBusiness impersonation is also common: scammers posing as your bank, a payment service, or a supplier use WhatsApp to ask you to send a payment or confirm a transfer. A real bank, utility, or supplier will never initiate a financial transaction request through WhatsApp.\n\nFor the native WhatsApp Pay feature, risk is relatively lower when sending to known contacts, but you should verify the recipient's phone number carefully and enable the app's security lock. For any payment request made through WhatsApp that involves a separate app or bank transfer, treat the request with strong suspicion regardless of who appears to have sent it.","redFlags":["A message from an unknown number claiming to be a family member asking for urgent money","Someone you know sends a financial request but their writing style seems unusual — account may be compromised","Your bank, a utility, or a business contacts you via WhatsApp to request or confirm a transfer","A new number claims to be someone you know and asks you not to call their old number","Request to send funds to an account name or number that differs from what you expect","Any urgency or emotional pressure designed to prevent you from pausing to verify"],"whatToDoNow":["Always call back on a known, saved number to verify any unexpected money request from WhatsApp","Enable the WhatsApp security lock (Settings > Privacy > Fingerprint Lock) to prevent unauthorized access","Never send money to a contact requesting it via WhatsApp until you have independently confirmed their identity","Set up a family code word that only real family members know, to use in emergencies","Report and block suspicious accounts in WhatsApp and notify the apparent impersonated contact through their real number","For business payments, use official banking channels rather than responding to WhatsApp prompts"],"faq":[{"question":"How is WhatsApp Pay different from being asked to send a wire transfer via WhatsApp?","answer":"WhatsApp Pay is an in-app feature regulated in supported countries. Being asked via WhatsApp to make a bank transfer, send crypto, or use Zelle is simply a social engineering attack using the messaging channel — the actual transaction happens outside WhatsApp without any platform protection."},{"question":"Is it safe to share bank details over WhatsApp?","answer":"WhatsApp messages are encrypted in transit, but your device, the recipient's device, and WhatsApp's servers may retain data. More importantly, if you are responding to an unsolicited request for bank details, the risk is the scam itself, not the encryption."}],"lastReviewed":"2026-06-10"},{"slug":"is-linkedin-safe-for-job-hunting","url":"https://scamencyclopedia.org/questions/is-linkedin-safe-for-job-hunting","question":"Is LinkedIn safe for job hunting?","shortAnswer":"LinkedIn is a legitimate and widely used job-hunting platform, but fake recruiters, advance-fee employment scams, and phishing attacks require job seekers to verify every opportunity independently before sharing personal data or paying any fee.","explanation":"LinkedIn hosts millions of genuine job listings and is the primary recruitment channel for many industries. For the vast majority of job seekers, it functions safely. However, the platform's openness — anyone can create an account, list fake job openings, and send InMail — makes it an attractive channel for employment-related fraud.\n\nThe most common threat is the fake job offer that requires an upfront payment. After a brief and overly easy \"interview,\" the candidate is offered a position and asked to pay for a background check, training materials, equipment, or work-from-home setup. No legitimate employer requires this. The \"job\" evaporates once the fee is paid.\n\nPersonal information harvesting is a subtler threat: a fake recruiter conducts a convincing multi-stage interview process and requests your Social Security number, bank account details, or a copy of your ID for a background check before you have formally received an offer or verified the employer's identity. This data can be used for identity theft.\n\nSalary phishing involves fake job postings linked to credential-harvesting pages where applicants are asked to create an account or log in to complete their application — the page captures their email and password.\n\nDespite these risks, LinkedIn is broadly safe for job hunting if you verify company identities independently, never pay any application-related fee, and share sensitive personal documents only after receiving a verified formal offer from a confirmed employer.","redFlags":["Job offer arrives without you applying and asks for payment of any fee to proceed","Recruiter cannot be verified on the company's official website or LinkedIn company page","Entire interview process happens via chat messages with no video call or phone contact","Request for SSN, bank details, or ID copy before a formal, verified job offer","Salary advertised is dramatically above market rate for the described role and requirements","Job application link takes you to a site that asks you to log in with your LinkedIn credentials","Company page was created recently and has no employees listed other than the recruiter"],"whatToDoNow":["Verify the recruiter by calling the company's main number and asking if that person works there","Check the company on independent sources such as Companies House (UK) or the state business registry (US)","Never pay any fee as a condition of receiving a job offer — report the listing to LinkedIn","Provide sensitive documents only after receiving a formal offer on company letterhead and verifying the employer","Use LinkedIn's \"Verified\" badge feature when available to add credibility to your own profile","Report fake job listings using the flag on the listing: More > Report this job"],"faq":[{"question":"Can I tell if a LinkedIn recruiter is real before applying?","answer":"Yes. Search for the recruiter's name on the company's official website, call the company's switchboard and ask for them, and check whether the recruiter's LinkedIn history is consistent with their claimed role. Red flags include a recently created profile, few connections, and a history that does not match the company."},{"question":"Are LinkedIn job ads vetted by the platform?","answer":"LinkedIn applies automated and manual checks, but fraudulent listings do appear and are sometimes only removed after reports. Do not rely on the platform's presence as a guarantee of legitimacy."}],"lastReviewed":"2026-06-10"},{"slug":"is-instagram-safe-for-buying-and-selling","url":"https://scamencyclopedia.org/questions/is-instagram-safe-for-buying-and-selling","question":"Is Instagram safe for buying and selling?","shortAnswer":"Instagram shopping has legitimate uses but is also rife with counterfeit goods, fake storefronts, and sellers who take payment and disappear, especially for transactions arranged outside the platform's official checkout.","explanation":"Instagram has invested in native commerce features including Instagram Shopping and Checkout, which connect to real business accounts and provide some dispute options through Facebook Pay infrastructure. Transactions that happen inside these official features are significantly safer than deals arranged through direct messages or links to external sites.\n\nThe problematic zone is everything outside official checkout: a seller with an attractive feed who says to DM for pricing and asks you to pay via Cash App, Venmo Friends, or crypto has no platform accountability. There is no dispute mechanism, no returns process, and no way to verify whether the product exists. Counterfeit goods — branded clothing, electronics, beauty products — dominate informal Instagram commerce because it is easy to photograph someone else's product and claim to sell it.\n\nDropshipping stores that look like genuine brands are another common trap: these accounts present as independent boutiques but are actually ordering cheap products from overseas marketplaces and marking them up, with long shipping delays and poor quality that differs from the advertised images. Refunds are nearly impossible to obtain.\n\nTo shop safely on Instagram: look for businesses that use official Instagram Checkout (the checkout happens inside the app), check for independent reviews on third-party platforms, verify a real business address and returns policy, and pay by credit card for chargeback rights if you must pay on an external site.","redFlags":["Seller asks you to pay via DM-arranged Cash App, Venmo Friends, or crypto with no official checkout","Shop has no verifiable business registration, physical address, or returns policy","Product images are identical to those on a major retailer but priced dramatically lower","Account was created recently but already has thousands of followers","No independent reviews exist for the shop on Trustpilot, Google, or similar platforms","Shipping time listed is weeks or months, suggesting overseas dropshipping","Customer service is unresponsive or only communicates through automated Instagram DMs"],"whatToDoNow":["Use Instagram Checkout when available — it processes payment inside the app with Meta's buyer protection","Search the shop name on Trustpilot or Google before purchasing from an external site","Verify the seller has a real website with a registered domain and a working contact phone number","Pay by credit card on external shop sites for chargeback rights if goods are not delivered","Dispute charges with your card issuer if items are not received or are significantly not as described","Report fraudulent shops using the three-dot menu on the post or profile > Report"],"faq":[{"question":"Does Instagram refund you if a seller does not ship your order?","answer":"If you checked out through Instagram's official Checkout feature, you can report a purchase problem in the app and may receive a refund through Meta's Purchase Protection. If you paid outside Instagram, the platform has no role in the dispute — you must go to your card issuer."},{"question":"How can I tell if an Instagram boutique is a dropshipping operation?","answer":"Look for shipping times of three to eight weeks, product descriptions copied verbatim from AliExpress, and customer reviews mentioning unexpected origin countries. A reverse image search of product photos often reveals the original manufacturer listing."}],"lastReviewed":"2026-06-10"},{"slug":"is-dating-app-safe-for-meeting-people","url":"https://scamencyclopedia.org/questions/is-dating-app-safe-for-meeting-people","question":"Is a dating app safe for meeting people?","shortAnswer":"Dating apps can be safe environments for meeting people, but they require you to independently verify a match's identity before meeting in person, and to treat any financial request — however sympathetically framed — as a near-certain fraud.","explanation":"Major dating apps including Tinder, Bumble, Hinge, and others have invested in features such as photo verification, ID checks, and profile reporting tools. These measures reduce but do not eliminate the risk of encountering fake or dangerous profiles. The platforms cannot verify the intentions of everyone who creates a profile with real photos.\n\nThe primary personal safety risk for in-person meetings is arranging to meet someone whose identity you have not independently confirmed. Video calling before a first meeting is a meaningful but not foolproof safeguard — it at least confirms that the person's photos match a real face. Meeting in a public, busy location for a first date, sharing your location with a trusted contact, and having your own transportation are the standard personal safety best practices promoted by the apps themselves.\n\nFor financial safety, the rule is simple and absolute: do not send money to an online match regardless of how long you have been talking, how distressing their situation sounds, or how certain you are that the connection is genuine. Romance scammers invest weeks or months building trust precisely because the emotional bond makes the financial ask feel different.\n\nThe apps that perform the best on safety combine identity verification with robust reporting, fast response to reports, and transparent safety resources. Checking whether a specific app has safety features before downloading it is a reasonable first step.","redFlags":["Match is always unavailable for video calls or cancels in-person meetings with escalating reasons","Match asks for money, gift cards, or investment help at any point regardless of reason given","Profile photos are all professional-quality headshots that reverse-image-search to a different name","Conversation escalates to deep emotional commitment unusually quickly","Match wants to move off the dating app to WhatsApp or email very early in the conversation","Any claims of military deployment, international oil-rig work, or medical charity overseas","Interest in your financial situation, job, or assets early in the relationship"],"whatToDoNow":["Video call a match before investing significant emotional time; a real person agrees to this readily","Meet for the first time in a public venue — a cafe, restaurant, or shopping centre","Share your location and the match's profile details with a trusted friend before meeting","Have your own transport arranged so you are never dependent on the person you are meeting","Report suspicious profiles in-app and review the app's specific safety resources","Never send money, ever, to a person you have not met in person and verified independently"],"faq":[{"question":"Should I share my real name and workplace on my dating profile?","answer":"It is sensible to limit the personal details you publish until you have built genuine trust. A first name is fine; your full name, employer, and home neighbourhood together give a stranger enough information to find you offline. Share more as trust is established in person."},{"question":"What should I do if a date behaved in a way that made me feel unsafe?","answer":"Report the profile to the app immediately using the in-app report feature. If you felt physically threatened or experienced harassment, contact local police. In the US, the FTC's reportfraud.ftc.gov covers financial and identity fraud from online contacts."}],"lastReviewed":"2026-06-10"},{"slug":"is-a-crypto-exchange-safe-for-investing","url":"https://scamencyclopedia.org/questions/is-a-crypto-exchange-safe-for-investing","question":"Is a crypto exchange safe for investing?","shortAnswer":"Regulated, well-established crypto exchanges are significantly safer than unregulated or newly created platforms, but all cryptocurrency investment carries risk from market volatility, platform failure, phishing attacks, and scams that exploit the ecosystem.","explanation":"The safety of a crypto exchange depends on several factors: whether it is regulated in its operating jurisdiction, how long it has been in operation, what security standards it applies, and whether it segregates customer funds from company operating capital. Regulated exchanges must meet anti-money-laundering and know-your-customer requirements, carry some form of insurance or reserve disclosure, and be subject to oversight that provides recourse if the platform fails.\n\nUnregulated or offshore platforms operate without these requirements. Some are legitimate businesses that choose to operate from permissive jurisdictions; others are outright fraudulent operations designed to accept deposits and prevent withdrawals. Without regulatory oversight, there is no guaranteed mechanism to recover funds if a platform collapses or absconds.\n\nEven on legitimate exchanges, individual account security is a major concern. Phishing sites that mimic real exchanges, SIM-swap attacks that bypass SMS-based 2FA, and malware that steals clipboard-copied wallet addresses represent realistic threats to users who do not practice strong security hygiene.\n\nCryptocurrency values can also fall dramatically — this is market risk rather than fraud, but it is relevant to whether an \"investment\" on an exchange is appropriate for you. Anyone being introduced to a specific exchange by a romantic contact, a social media group, or an unsolicited online connection should treat the recommendation as a strong warning sign of pig-butchering fraud rather than a genuine investment tip.","redFlags":["Exchange was recommended by an online contact you have never met in person","Platform is not listed in any national financial regulator's register","Deposits are easy but withdrawal requests trigger new fee demands or indefinite delays","Customer service only available through Telegram or WhatsApp rather than official channels","Exchange was created within the past year with no verifiable company history","Promises of guaranteed returns or fixed daily interest on deposited crypto","Platform shows a rapidly growing account balance but withdrawals are always blocked"],"whatToDoNow":["Check the exchange against your national financial regulator's register before depositing","Use an authenticator app for 2FA rather than SMS, which is vulnerable to SIM-swap attacks","Consider using a hardware wallet for significant crypto holdings rather than leaving funds on an exchange","Never follow a link to an exchange from an email, social media post, or message — type the URL directly","Test withdrawals with a small amount before depositing significant funds","Report fraudulent platforms to the FTC, IC3, or your national financial authority"],"faq":[{"question":"What happens to my funds if a crypto exchange goes bankrupt?","answer":"This depends on the jurisdiction and the exchange's practices. Some exchanges hold customer assets in segregated accounts, improving recovery prospects. Others do not. Regulated exchanges may be subject to orderly wind-down processes, but crypto assets are generally not covered by bank deposit protection schemes like FDIC."},{"question":"Is it safer to buy crypto through my bank or stock broker?","answer":"Established brokers and banks that offer crypto products are generally subject to the same regulatory oversight as their other services, which provides more consumer protection than using an unregulated exchange. Fees may be higher but the risk profile is different."}],"lastReviewed":"2026-06-10"},{"slug":"is-telegram-safe-for-investing","url":"https://scamencyclopedia.org/questions/is-telegram-safe-for-investing","question":"Is Telegram safe for investing?","shortAnswer":"Telegram is not a safe channel for investment activity — the vast majority of investment groups on Telegram are fraudulent, and the platform's anonymity makes it the preferred channel for pump-and-dump schemes and pig-butchering crypto scams.","explanation":"No regulated investment activity is legitimately conducted primarily through Telegram. Regulated financial advisors, brokers, and fund managers operate through licensed platforms, official websites, and formal account documentation — not anonymous messaging groups. Any investment opportunity presented primarily through a Telegram channel should be treated as presumptively fraudulent.\n\nPump-and-dump schemes use Telegram channels to coordinate artificial inflation of low-liquidity crypto tokens. Channel administrators purchase a token, then send mass signals to followers encouraging them to buy. The resulting price spike allows the administrators to sell their holdings at a profit while ordinary followers who buy at the peak are left with rapidly depreciating assets.\n\nSignal services — channels that provide paid or free trading recommendations — are frequently fraudulent or simply poor quality. Legitimate signal performance is rarely audited independently. Many signal services are affiliated with exchanges or platforms that pay referral commissions, creating a conflict of interest regardless of the signal quality.\n\nPig-butchering operations specifically use Telegram as the primary communication channel because it allows the creation of artificial community, the appearance of social proof through fabricated profit posts, and direct private messaging to targets — all within an environment that is difficult for law enforcement to monitor or shut down quickly.","redFlags":["Investment group or channel was suggested by a stranger or new online contact","Channel posts frequent screenshots of dramatic trading profits with no verifiable source","Signal service requires you to register on a specific trading platform to receive signals","Group members pressure you to invest more to unlock a higher earnings tier","Channel admin cannot provide verifiable credentials, regulatory registration, or audited performance data","You are encouraged to move funds from a legitimate exchange to a new platform","Group activity spikes around a specific token before the price rapidly rises and then falls"],"whatToDoNow":["Leave any investment Telegram group you were added to without your direct, informed consent","Verify any investment claim by consulting a regulated financial advisor outside the platform","Check whether any platform being promoted is registered with your national financial regulator","Report suspicious Telegram channels using the channel menu > Report","Never invest money you cannot afford to lose based on recommendations from anonymous online sources","If you already invested, stop sending additional funds immediately — do not pay claimed withdrawal fees"],"faq":[{"question":"Are there any legitimate financial communities on Telegram?","answer":"Educators and analysts do discuss financial topics on Telegram, but legitimate educators do not sell guaranteed-return signals, run pump-and-dump groups, or push specific platforms for commission. Any community primarily defined by investment recommendations should be treated with strong scepticism."},{"question":"What if I paid to join a Telegram signal group and it stopped responding?","answer":"Contact your card issuer or payment platform about a chargeback if you paid by card. Report the group to Telegram, your financial regulator, and the FTC or equivalent. Recovery is difficult but reporting helps investigations that may benefit others."}],"lastReviewed":"2026-06-10"},{"slug":"is-tiktok-safe-for-job-hunting","url":"https://scamencyclopedia.org/questions/is-tiktok-safe-for-job-hunting","question":"Is TikTok safe for job hunting?","shortAnswer":"TikTok has become a platform where recruiters share content and some job postings appear, but it carries significant risks from fake remote job schemes and task-based scams that collect money under the guise of employment.","explanation":"TikTok's short-video format has made it a channel for career content — resume tips, interview advice, and workplace culture — and some legitimate employers do recruit through the platform. However, the same virality and anonymity that makes TikTok useful for career content also make it an effective delivery mechanism for fake job scams.\n\nThe task-based job scam is especially common on TikTok and the messaging apps it directs users to: a job is advertised promising simple remote work — reviewing products, rating videos, or boosting merchant listings — and early small payments are made to establish trust. Workers are then asked to deposit their own funds to \"activate\" a higher-paying task set, and these deposits are never returned.\n\nInfluencer and creator sponsorship fraud promises users payment to promote products or services in exchange for clicks or sign-ups. After the work is done, payment is withheld pending the completion of more tasks, often requiring the creator to bring in additional people in a pyramid-like structure.\n\nTikTok is not a reliable channel for formal employment unless a recruiter explicitly directs you to apply through a company's official career portal. Any job that is recruited entirely through TikTok messages or that requires any upfront payment or deposit of your own funds is almost certainly a scam.","redFlags":["Job offer arrived through a TikTok DM and requires you to work via Telegram or WhatsApp","Role involves completing tasks in an app or platform that requires your own deposit to unlock earnings","Payment is promised for simple tasks like rating videos or clicking links at unrealistically high rates","Recruiter cannot provide a verifiable employer, business registration, or official career portal","Early micro-payments are made to establish trust before the deposit request arrives","Job requires you to recruit friends to access your own earnings","Entire process stays on social media with no formal employment contract or ID verification"],"whatToDoNow":["Apply to jobs through company official career portals, not through TikTok DMs","Search the company name plus \"scam\" or \"reviews\" before proceeding with any social-media-recruited role","Never deposit your own money into a platform as part of a job offer — this is always a scam","Report task-scam content and accounts in TikTok using the share icon > Report","Verify a recruiter's identity by contacting the company directly through their official website","File a report with the FTC if you were defrauded through a job scam"],"faq":[{"question":"Are there legitimate jobs recruited through TikTok?","answer":"Yes, some companies post job content and some recruiters share openings. Legitimate opportunities always direct you to an official application portal, never ask for upfront payment, and involve a formal interview process."},{"question":"What is a task-based job scam and how does it work?","answer":"A task-based scam presents a simple remote job completing repetitive digital tasks. Initial payments build trust. Then a \"deposit\" is required to access higher-paying tasks, supposedly locked until you fund an account. The deposit is stolen and you cannot access your earnings or deposit."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-paypal-friends-and-family","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-paypal-friends-and-family","question":"How do scams work using PayPal Friends and Family?","shortAnswer":"PayPal Friends and Family scams exploit the no-fee, no-protection nature of that payment option to collect money for goods or services that never arrive, leaving victims with no recourse through PayPal's dispute system.","explanation":"PayPal Friends and Family is designed for sending money to people you personally trust — splitting a dinner bill, repaying a family member, or gifting money. The key trade-off is that PayPal charges no fee but provides no buyer protection: if something goes wrong, PayPal considers the payment a personal transfer and will not intervene in a dispute.\n\nScammers across marketplace, gig-economy, and social media selling routinely insist on Friends and Family payment for exactly this reason. When a buyer later discovers they received a counterfeit, nothing arrived, or the seller has disappeared, PayPal closes any dispute citing the payment type. The seller often also claims to be avoiding fees as a sympathetic justification that persuades buyers to comply.\n\nSome scammers add pressure by framing the Friends and Family requirement as policy or a technical limitation — claiming their account requires this payment type, or that Goods and Services is temporarily unavailable. Neither is a legitimate reason; any seller who insists on Friends and Family for a commercial transaction is either uninformed about the risk to you or deliberately exploiting it.\n\nTo protect yourself, use Goods and Services for any transaction with a stranger regardless of minor convenience differences. If a seller refuses, consider that refusal itself a warning sign and find an alternative seller.","redFlags":["Seller insists on Friends and Family payment for a commercial transaction","Seller claims their PayPal \"requires\" Friends and Family or that Goods and Services is unavailable","Reason given for Friends and Family is to avoid fees — this removes your protection for their convenience","Seller says they will give you a discount for using Friends and Family","Transaction involves a stranger on a marketplace, social media, or classified site","Item price is unusually low and seller is eager to finalise quickly"],"whatToDoNow":["Refuse to use Friends and Family for any transaction with a seller you do not personally know","If a seller insists and you proceed, understand you have no PayPal dispute rights","For buyer protection, always select Goods and Services — the small fee is worthwhile insurance","If you already sent Friends and Family and were defrauded, contact your bank if you funded via card, or the card issuer for chargeback possibilities","Report fraudulent sellers to PayPal through the Resolution Center even if you cannot get a direct refund","File a complaint with the FTC at reportfraud.ftc.gov"],"faq":[{"question":"Can I dispute a PayPal Friends and Family payment if the item never arrived?","answer":"PayPal will not process a buyer protection claim for Friends and Family payments. Your options are a chargeback through your credit card if you funded by card, or reporting to the FTC. PayPal may investigate for fraud but will not directly refund Friends and Family payments."},{"question":"How do I make sure PayPal sends my payment as Goods and Services?","answer":"When sending money to a contact in the PayPal app or website, you are given a choice to send as goods or services or as friends and family. Choose goods or services. Some mobile experiences default to one option — check before confirming."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-facebook-dating","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-facebook-dating","question":"How do scams work on Facebook Dating?","shortAnswer":"Facebook Dating scams mirror broader dating-app fraud, but the platform's integration with Facebook profiles gives fake accounts additional false credibility that can make romance scams and investment pitches more convincing.","explanation":"Facebook Dating is embedded within the main Facebook app and pulls profile information from users' existing accounts. Scammers value this integration for two reasons: they can create profiles that appear to have years of social history behind them, and they can exploit users' general trust in Facebook as a platform they already use for real relationships.\n\nProfile hijacking is a particular risk: if a scammer has taken over a real Facebook account, they may use that account's genuine friends, posts, and photos to run a romance scam that appears to be a real person. The victim's friends might even see and endorse the account, adding layers of false credibility.\n\nThe typical progression is the same as on standalone dating apps: a romantic connection is established, often with unusually rapid emotional escalation, then a financial request arrives — a crypto investment opportunity, an emergency loan, or a request for gift cards. The Facebook context makes it feel more real, but the fraud is identical.\n\nFacebook Dating also surfaces matches who may be using the platform legitimately but whose primary interest is multi-level marketing recruitment, rather than dating. While not always fraudulent, these interactions can escalate to financial pressure if the recruit resists the MLM pitch.","redFlags":["Match's profile was created recently despite appearing to have many old posts — could be a cloned account","Conversation moves to emotional intimacy very quickly with minimal in-person meeting attempts","Match introduces a trading platform or investment opportunity within the first weeks","Profile photos are high-quality model images that return different names in a reverse image search","Match wants to move off Facebook Dating to WhatsApp early in the conversation","Any request for money, gift cards, or financial assistance regardless of the reason"],"whatToDoNow":["Reverse image search profile photos before investing emotional energy in the connection","Video call before meeting in person; verify the person matches their photos","Never send money or invest based on the recommendation of a dating-app match","Report suspicious profiles using the flag on their profile within Facebook Dating","If you believe a real person's account has been hijacked, contact that person through another channel","Report financial fraud to the FTC and Romance Scam to reportfraud.ftc.gov"],"faq":[{"question":"Is Facebook Dating safer than other apps because it uses real Facebook accounts?","answer":"Not necessarily. Real Facebook accounts can be hijacked. Fake accounts can be built with purchased engagement and old-looking post histories. The Facebook context adds a veneer of credibility that scammers specifically exploit."},{"question":"Does Facebook investigate romance scams reported through its Dating feature?","answer":"Facebook reviews reported profiles and may remove them, but it does not investigate financial fraud directly. File financial fraud reports with the FTC and, if significant money was lost, with local law enforcement."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-craigslist","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-craigslist","question":"How do scams work on Craigslist?","shortAnswer":"Craigslist scams exploit the platform's anonymous, unverified listings to run fake buyer and seller schemes, rental deposit fraud, and job scams that rely on cash-equivalent payments and the difficulty of verifying anyone's identity.","explanation":"Craigslist is deliberately minimal — no user accounts required, no verification, no payment system — which makes it a persistent target for fraud despite its longevity. Most scam patterns on Craigslist are variations of a few core tactics adapted to different listing categories.\n\nFor sellers, the classic threat is the overpayment check scam: a buyer sends a cashier's check for more than the asking price and asks the seller to deposit it and wire back the difference. The check is fraudulent and bounces after the wire transfer has been sent. A variation has emerged using Zelle or Venmo with fake payment screenshots.\n\nFor buyers, the risk is paying for items or services that do not exist. Rental listings are a particularly high-loss category: a scammer posts a property they do not own (often copied from a legitimate listing) and collects application fees and first-month deposits from multiple prospective tenants who never receive keys.\n\nCraigslist job listings range from legitimate postings to advance-fee schemes requiring payment for training materials or background checks. The platform does publish extensive scam warnings and advises transacting locally and in person — a good practice that eliminates most remote scam vectors.","redFlags":["Buyer offers to pay more than the asking price and requests a refund of the overage","Rental listing shows a below-market price and the owner claims to be abroad or unavailable for a showing","Job listing requires upfront payment for training, equipment, or a background check","Buyer or seller insists on Zelle, Venmo Friends, wire transfer, or crypto rather than cash","Communication is only via email with poor grammar and unusual urgency","Buyer claims to be out of state and offers to ship payment before seeing the item"],"whatToDoNow":["Follow Craigslist's own advice: deal locally, meet in person, pay cash for in-person transactions","For rentals, insist on an in-person showing and verify ownership through public property records before paying any deposit","Never accept overpayment or deposit a check and wire the difference before the check fully clears","Verify job listings directly on the company's official website and careers page","Never pay any fee as a condition of a job offer found on Craigslist","Report fraud to Craigslist using the flag feature and to the FTC"],"faq":[{"question":"Is it ever safe to ship an item sold on Craigslist?","answer":"Craigslist discourages shipping specifically because it eliminates the in-person safety net. If you ship, use PayPal Goods and Services only, never Zelle or wire transfer, and ship after payment fully clears — not based on a screenshot."},{"question":"How can I verify a rental listing is legitimate before paying a deposit?","answer":"Look up the property address in your county assessor's public database to confirm who owns it. Verify the person you are meeting is the registered owner or a licensed property manager. Never pay a deposit before entering the property during a showing."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-offerup-and-local-selling-apps","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-offerup-and-local-selling-apps","question":"How do scams work on OfferUp and local selling apps?","shortAnswer":"Local selling apps like OfferUp, Letgo, and similar platforms are targeted by fake payment apps, impersonation of the platform's payment systems, and shipping scams that bypass the safety of in-person cash transactions.","explanation":"Apps designed for local peer-to-peer selling share many of the same scam patterns as Facebook Marketplace and Craigslist, with some platform-specific variations. OfferUp, for example, has an integrated payment system called TruYou and offers Payments by OfferUp for shipped items — both of which provide more safety than off-platform payment methods. Scammers therefore work to route transactions away from these protected channels.\n\nOne common tactic is the external payment request: a buyer insists they will pay through Zelle, Venmo Friends, or a payment app the platform does not support, often offering a slight premium to compensate. Once the seller accepts and releases the item, the payment either never arrives or is reversed. The premium was an incentive to bypass the very protection that would have given the seller recourse.\n\nFake in-platform payment confirmations are also used: a buyer shows a screenshot purporting to be an OfferUp Payment confirmation. Sellers who check their own app balance rather than trusting screenshots are protected against this; those who trust the screenshot lose the item with no payment.\n\nFor shipped items, sellers face the risk of buyers claiming non-delivery and seeking refunds for items that were delivered. Using shipping with tracking and signature confirmation, and documenting the condition of items before shipping, protects sellers in dispute processes.","redFlags":["Buyer wants to pay via a method outside the app's official payment system","Buyer shows a payment screenshot but your in-app balance shows no change","Buyer offers to pay more than asking price in exchange for using an external payment method","Buyer or seller wants to complete the transaction over text or WhatsApp rather than in the app","Item is priced dramatically below market value with the seller showing urgency to sell quickly","Buyer files a false not-received claim for a shipped item that tracking confirms was delivered"],"whatToDoNow":["Use the platform's official payment system for all transactions — it provides the best dispute protection","For in-person transactions, meet in a public place and verify actual cash or confirmed in-app payment before releasing items","Never rely on screenshots as proof of payment — check your own app balance","For shipped items, use tracked shipping with signature confirmation and photograph items before packing","Report scam buyers and sellers in-app and to the platform's trust team","For payment disputes on shipped transactions, use the in-app dispute process promptly"],"faq":[{"question":"Is it safer to meet locally or ship on OfferUp?","answer":"Local in-person cash transactions carry the lowest risk when both parties follow safety practices. Shipping introduces additional complications but is covered by OfferUp Payments dispute protection when you use the in-app payment system."},{"question":"What are safe meeting locations for local app transactions?","answer":"Many police departments offer Safe Exchange Zones in their parking lots specifically for this purpose. Banks, busy coffee shops, and well-lit public spaces during daylight hours are also good choices. Avoid meeting at your home or the buyer's home."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-discord","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-discord","question":"How do scams work on Discord?","shortAnswer":"Discord scams target gaming communities and crypto enthusiasts through fake NFT and crypto giveaways, malicious bot invites, impersonation of server administrators, and links that deliver credential-stealing malware.","explanation":"Discord is a community platform built around servers for gaming, crypto, and shared interests. Its combination of public and private channels, bots, and direct messaging creates multiple entry points for fraud. The sense of community belonging can also lower users' guard compared to anonymous platforms.\n\nNFT and crypto giveaway scams are endemic on Discord: a message appears in a popular server or arrives as a DM claiming you have won a rare NFT or a crypto airdrop. Clicking the link takes you to a site that requests you to connect your crypto wallet to claim — and in doing so, you sign a malicious transaction that drains your wallet assets.\n\nServer administrator impersonation is common: a fake account with a name very similar to a real moderator's sends a DM claiming there is a problem with your account or that you need to verify to retain access. The link leads to a phishing page that captures your Discord credentials. Real Discord moderators never DM users to ask them to log in through a link.\n\nNitro scams circulate constantly: a friend's compromised account sends you a message with a link claiming to gift you a free Discord Nitro subscription. The link leads to a phishing page. Any \"free Nitro\" message should be treated as a compromised account; contact the sender through another channel to warn them.\n\nGame item and digital goods scams happen when a player offers to trade rare in-game items or digital goods for payment outside the game's secure marketplace — the item is never transferred once payment is received.","redFlags":["DM claiming you won an NFT or crypto airdrop and asking you to connect your wallet","Server admin or moderator DMing you to verify your account through an external link","Friend sending a free Nitro link that does not come from a discord.com URL","Bot invite that requests unusually broad permissions including access to your account","Offer to sell or trade digital goods outside the game's official marketplace","Link to a site that looks like Discord but has a slightly different URL"],"whatToDoNow":["Never connect your crypto wallet to a site reached through an unsolicited Discord link","Enable two-factor authentication on your Discord account via User Settings > My Account","Verify that links contain exactly discord.com — not discord.gift.com or similar variations","If a friend sends a suspicious link, contact them via another channel to confirm before clicking","Revoke suspicious authorisations in Discord User Settings > Authorized Apps","Report phishing messages and impersonation to Discord using the report function on the message or profile"],"faq":[{"question":"How can I tell if a crypto giveaway on Discord is legitimate?","answer":"Virtually all crypto giveaways on Discord are fraudulent. Legitimate projects make announcements through their official website and verified social channels. Any giveaway requiring wallet connection through a Discord link should be declined."},{"question":"My Discord account was compromised and sent scam links to friends — what do I do?","answer":"Change your Discord password immediately and enable 2FA. Revoke all third-party app authorisations in settings. Alert your Discord contacts not to click the links. If you used the same password elsewhere, change those passwords too."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-twitter-x","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-twitter-x","question":"How do scams work on Twitter / X?","shortAnswer":"Twitter/X scams exploit the platform's viral reach through fake celebrity giveaways, cryptocurrency promotion by impersonated accounts, and phishing attacks on account credentials via fake verification or suspension notices.","explanation":"Twitter/X has long been a vector for impersonation and financial scams because the platform's culture of interacting with public figures makes it seem plausible that a celebrity or executive might run a giveaway or financial offer. The introduction of the paid verification tier has also created confusion about what the blue checkmark actually means.\n\nCrypto giveaway scams are the most visible pattern: an account impersonating a technology executive or celebrity announces a crypto doubling scheme — send one amount and receive double back. These accounts often mirror the profile picture and name of a real, well-known person. They amplify themselves by hacking real verified accounts to broadcast the message, lending further credibility.\n\nPhishing DMs claim that your account has been reported for a policy violation, that your verification is being reviewed, or that you need to confirm your identity through a link. The link leads to a fake Twitter login page. Account verification emails that appear to come from Twitter should be checked by logging into the platform directly rather than via email links.\n\nPromotion of fraudulent crypto tokens through artificially coordinated tweets is a common pump-and-dump mechanism, particularly for low-cap tokens where a coordinated buy volume can create rapid short-term price increases visible on charts.","redFlags":["Account offering to double your crypto if you send an initial amount to a wallet address","Profile looks identical to a celebrity or executive but was created recently","DM claiming your account is at risk and directing you to a login link","Promoted tweet advertising an investment platform with guaranteed high returns","Multiple accounts replying to a tweet with similar testimonials about the same opportunity","Link in a tweet goes to a domain that looks like twitter.com but has extra characters"],"whatToDoNow":["Never send crypto to an address promising to return double — this never happens","Access Twitter/X account management by navigating directly to x.com rather than clicking email or DM links","Enable two-factor authentication via Settings > Security and account access","Report impersonation accounts using the three-dot menu on the profile > Report","Treat all unsolicited DM links with extreme suspicion regardless of the apparent sender","File a report with the FTC if you lost money to a Twitter/X-based scam"],"faq":[{"question":"Does paying for Twitter Blue / X Premium guarantee a legitimate account?","answer":"No. The paid verification checkmark indicates only that the account owner has paid a subscription fee; it does not verify the person's identity or that the account belongs to the name displayed. Impersonators can purchase the same checkmark."},{"question":"What should I do if a hacked celebrity account sent me a crypto giveaway link?","answer":"Do not click the link or send any funds. Report the tweet and the account. If you already sent crypto, file a report with the FTC and IC3 — though crypto transfers are rarely recoverable."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-youtube","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-youtube","question":"How do scams work on YouTube?","shortAnswer":"YouTube scams use live-stream hijacking of popular channels, fake investment ads, and comment-section impersonation to reach large audiences with crypto doubling schemes and fraudulent financial platforms.","explanation":"YouTube's reach and authority make it a prized target for scammers. Fraudulent activity on the platform typically takes one of three forms: hijacking existing channels, running deceptive ads, or using the comment section to impersonate trustworthy figures.\n\nChannel hijacking is the most dramatic form: attackers compromise a large YouTube channel through phishing, rename it to resemble a technology company or celebrity, then stream pre-recorded interviews or events while a live overlay promotes a crypto or investment giveaway. The stream's viewer count — inherited from the original channel's subscriber base — appears to validate the legitimacy of the offer. By the time YouTube removes the stream, significant funds may have been sent to wallet addresses shown on screen.\n\nFake investment and financial ads appear as pre-roll or banner advertising on YouTube and can be difficult to distinguish from legitimate financial services advertising. They promote trading platforms, crypto signals, or forex services that are either outright fraudulent or unsuitable unregulated products.\n\nComment impersonation involves creating accounts that closely mimic a creator's name and profile picture, then posting replies to the creator's own videos with a WhatsApp number or a link to an investment service. Viewers who see what appears to be the creator recommending a service may act on the recommendation without noticing the subtle username difference.","redFlags":["Live stream on a large channel promotes a crypto doubling scheme and shows only a few hours of history","Channel name closely matches a known brand or celebrity but the account was created very recently","Comment appearing to be from the video creator promotes a financial service with an external link","YouTube ad directs you to a trading platform with testimonials and unrealistic profit claims","Stream overlay shows a wallet address to send crypto to in exchange for promised larger returns","The channel's original content is visible but the current live stream is entirely unrelated to it"],"whatToDoNow":["Verify a channel's history by checking its oldest videos — a hijacked channel will show a sudden content break","Report hijacked live streams and deceptive ads using the three-dot menu > Report","Never send crypto to a wallet address shown in a YouTube stream regardless of the promised return","Before acting on a comment that looks like it is from the creator, compare the username character by character","Research any financial platform advertised on YouTube independently before engaging","Report investment scam ads through the ad feedback option (three dots on the ad) or to the FTC"],"faq":[{"question":"How can I tell if a YouTube channel has been hijacked?","answer":"Check the channel's About page for account creation date and subscriber history, and browse its older videos. A channel with years of cooking or gaming content that is suddenly streaming a crypto giveaway has almost certainly been hijacked."},{"question":"Are investment ads on YouTube vetted by Google?","answer":"Google has policies against misleading financial advertising but enforcement is imperfect. Some fraudulent ads run before they are detected and removed. Treat any financial platform advertised on YouTube with the same scepticism as an unsolicited email."}],"lastReviewed":"2026-06-10"},{"slug":"is-paypal-safe-for-online-shopping","url":"https://scamencyclopedia.org/questions/is-paypal-safe-for-online-shopping","question":"Is PayPal safe for online shopping?","shortAnswer":"PayPal Goods and Services provides meaningful buyer protection for online purchases, but protection has limits and does not cover all situations — particularly purchases from accounts that are themselves fraudulent or operating against PayPal's terms.","explanation":"PayPal's Buyer Protection under the Goods and Services option gives shoppers the ability to dispute a transaction if an item is not received or is significantly not as described. For legitimate disputes on genuine purchases, this is a reliable safeguard: PayPal investigates and, when the buyer's case is upheld, issues a refund. This makes PayPal Goods and Services one of the better payment options for online purchases from individual sellers.\n\nHowever, buyer protection has exceptions and limits that shoppers should understand. It does not cover intangible items in all circumstances, custom-made goods, vehicles, real estate, or transactions categorised as Friends and Family. It also does not prevent scammers from accepting PayPal payments and simply disappearing — the protection exists as a remedy after the fact.\n\nPhishing attacks targeting shoppers who use PayPal are sophisticated. Fake order confirmation emails, fake payment received notifications (sent to sellers as part of a scam), and fake dispute resolution notices all aim to get users to log into counterfeit PayPal pages. Bookmarking the real paypal.com and accessing your account directly rather than through links is the primary defence.\n\nFor purchases on major retailers that accept PayPal, the risk is minimal. For purchases from unfamiliar sellers or marketplace participants, PayPal Goods and Services provides protection but does not guarantee it — combining it with a credit card adds a second layer of chargeback protection.","redFlags":["Seller insists on PayPal Friends and Family rather than Goods and Services","Email claiming your PayPal order was confirmed or your payment was received contains a login link","Seller asks you to pay via a PayPal link they sent rather than using the normal Goods and Services payment flow","Site accepts PayPal but has no verifiable business address or returns policy","Payment confirmation email has a sender address that is not from @paypal.com","Seller's PayPal account was created very recently based on any visible account history"],"whatToDoNow":["Always choose Goods and Services when sending a payment for a purchase","Check the actual sender email address of any PayPal notification — it must be @paypal.com","Open your PayPal account by typing paypal.com directly rather than clicking email links","Check your recent transactions in the PayPal app to verify any claimed payment","Open a dispute through PayPal's Resolution Center within 180 days if an item is not received or not as described","Report phishing emails to phishing@paypal.com"],"faq":[{"question":"How long does PayPal take to resolve a buyer protection dispute?","answer":"PayPal typically resolves disputes within 10 to 14 business days, though complex cases can take longer. You must open a dispute within 180 days of the transaction date."},{"question":"Is it safer to pay with PayPal or a credit card for online shopping?","answer":"Both offer chargeback and dispute protection. PayPal Goods and Services adds a layer in that your actual card details are not shared with the seller, which reduces the risk of card data theft if the seller's system is compromised. Using a credit card through PayPal combines both protections."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-etsy","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-etsy","question":"How do scams work on Etsy?","shortAnswer":"Etsy scams range from counterfeit sellers and dropshippers misrepresenting mass-produced goods as handmade to outside-platform payment requests and fake dispute emails targeting sellers.","explanation":"Etsy markets itself as a platform for handmade, vintage, and craft-supply goods, which creates a consumer expectation of authenticity and small-scale artisan quality. Fraudulent sellers exploit this expectation by listing mass-produced or counterfeit goods with artisanal-looking photos and branding, collecting payment, then shipping inferior or unrelated products.\n\nDropshipping operations import cheap products from wholesale manufacturers, photograph them in lifestyle settings, and list them as original creations. Buyers expecting a handmade item receive something from an overseas warehouse weeks later. While not always outright fraud, this violates Etsy's own policies and the consumer's expectation.\n\nSeller-targeting scams are also significant: fake Etsy support emails warn sellers that their account will be suspended unless they verify through a link, leading to credential-harvesting pages. Fake buyer claims — particularly for high-value orders — use dispute processes to request refunds while keeping the item, a form of return fraud that costs sellers inventory and income.\n\nOutside-platform payment requests from buyers who claim to want to avoid Etsy fees are a red flag for sellers: Etsy provides dispute protection for transactions through its system; taking payment outside removes this protection for both parties.","redFlags":["Listing photos look professionally produced but are identical to wholesale product images elsewhere","Shipping time is three to eight weeks with an origin country different from the shop location","Email claiming your Etsy seller account needs verification through a link","Buyer asks you to accept payment outside Etsy for a large order","Buyer files a dispute claiming non-delivery for an item with tracking confirmation","Product description is vague and copies phrasing from mass-manufacturer listings"],"whatToDoNow":["Reverse-image-search Etsy listing photos to check whether identical items appear on AliExpress or wholesale sites","Check shop reviews for mentions of shipping delays or product quality different from description","Access Etsy account management directly at etsy.com rather than through suspicious email links","As a seller, document orders with photos and use tracked shipping to protect against false non-delivery claims","Report policy-violating shops using the flag on their shop or listing page","Open a dispute through Etsy's case system for orders not received or significantly not as described"],"faq":[{"question":"Does Etsy offer buyer protection?","answer":"Yes, Etsy's Purchase Protection programme covers orders that do not arrive or are significantly different from the listing description. You must open a case through the Etsy Help system within 100 days of the estimated delivery date."},{"question":"How can I tell if an Etsy shop is dropshipping from overseas?","answer":"Look at the shop's processing time and shipping duration, check reviews for comments about unexpected origin countries, and reverse image search product photos. Dropshipped items frequently have generic descriptions and identical photos to wholesale catalogue listings."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-ebay","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-ebay","question":"How do scams work on eBay?","shortAnswer":"eBay scams include off-platform payment requests to bypass buyer protection, second-chance offer fraud targeting auction losers, and SNAD (significantly not as described) return fraud exploiting sellers.","explanation":"eBay is one of the oldest online marketplaces and has well-developed buyer and seller protection systems, but scammers continually adapt tactics to circumvent these protections. Understanding how the protections work — and how they can be bypassed — is essential for safe trading.\n\nOff-platform payment is the most common buyer risk: a seller, often just before the auction ends or immediately after, contacts you directly offering the item for a slightly lower price if you pay by wire transfer, crypto, Zelle, or a personal PayPal payment. This bypasses eBay's Money Back Guarantee entirely. eBay explicitly prohibits these contacts, and any such message should be reported.\n\nSecond-chance offer fraud targets bidders who did not win an auction: the scammer creates a fake account mimicking the real seller and sends a message offering you the item because the winning bidder backed out. Payment is requested outside eBay. A real second-chance offer arrives through eBay's official system, not through personal messages or email.\n\nSellers face return fraud where buyers purchase high-value items, file SNAD or not-received claims, and return empty boxes or different items while keeping the genuine article. Thorough photographic documentation of every item before shipping provides evidence for disputes.","redFlags":["Message offering to sell you an item outside eBay for a lower price","Second-chance offer received via email or eBay message that directs you to pay externally","Seller asks for payment via wire transfer, Western Union, crypto, or Zelle","Listing photos look copied from another source; item appears too cheap for its described condition","Buyer files a not-received claim for an item with verified delivery tracking","Seller with a new account or very low feedback selling high-value items well below market value"],"whatToDoNow":["Pay only through eBay's checkout using PayPal, credit card, or eBay-supported methods to retain Money Back Guarantee","Verify second-chance offers by logging into eBay directly and checking your Messages section","As a seller, photograph items thoroughly before shipping and retain tracking information","Report off-platform payment solicitations to eBay through the Report a buyer/seller function","Open an eBay Money Back Guarantee case within the required timeframe if an item is not received","File a report with the FTC if you lost money to eBay-related fraud"],"faq":[{"question":"Does eBay's Money Back Guarantee cover all purchases?","answer":"eBay's Money Back Guarantee covers most purchases when payment is made through eBay checkout. It does not cover transactions paid outside eBay, some vehicle purchases, and other specific exclusions. Check eBay's current policy for the full list."},{"question":"What is a second-chance offer and how do I know if it is real?","answer":"A legitimate second-chance offer from eBay appears in your eBay Messages inbox and links to an eBay checkout page. Any offer received via email only or directing you to pay outside eBay is fraudulent."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-amazon-marketplace","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-amazon-marketplace","question":"How do scams work on Amazon Marketplace?","shortAnswer":"Amazon Marketplace scams involve third-party sellers sending counterfeit goods, brushing schemes that game the review system, and phishing attacks impersonating Amazon order notifications to steal account credentials.","explanation":"Amazon's marketplace allows third-party sellers to list alongside Amazon's own inventory, which creates significant opportunity for sellers to deliver products different from what is advertised. The shared listing model — where multiple sellers share a single product page — allows a fraudulent seller to attach to a page with many legitimate reviews and then ship inferior or counterfeit goods.\n\nBrushing is a well-documented but often misunderstood practice: a seller ships unsolicited packages to real addresses, then uses those addresses to create fake verified purchase reviews, inflating their product ratings. Recipients of unexpected packages are generally not victims of financial fraud, but their address data has been used without consent.\n\nPhishing emails impersonating Amazon are among the most sophisticated: they mimic order confirmations, delivery notifications, and account security alerts, directing recipients to fake Amazon login pages. Amazon itself is not involved, but the credibility of the brand makes recipients less sceptical.\n\nThird-party seller fraud specifically targets buyers who purchase from unfamiliar sellers. Products arrive that are of much lower quality than described, counterfeit branded goods, or entirely different items. Amazon's A-to-Z Guarantee covers these situations, but the refund process requires opening a case.","redFlags":["Product arrives that looks significantly different from listing photos — possible counterfeit","Email about your Amazon order contains a login link and comes from a non-amazon.com address","You receive an unexpected package from an Amazon seller you never ordered from","Third-party seller price is dramatically below Amazon's own price for the same item","Seller contacts you outside Amazon to resolve a dispute or offer a refund in exchange for a positive review","Product packaging looks unofficial, lacks proper labelling, or arrives without warranty documentation"],"whatToDoNow":["Purchase directly from Amazon where possible, or from sellers with long histories and verified reviews","Check the actual email sender address for any Amazon notification — it must be from an @amazon.com domain","Navigate to amazon.com directly rather than through email links to check order status","File an A-to-Z Guarantee claim if a third-party seller item does not arrive or is significantly not as described","Report suspicious sellers to Amazon using the report function on their seller profile page","If you received an unexpected package, you are not obligated to pay for it and can keep or discard it"],"faq":[{"question":"Does Amazon's A-to-Z Guarantee cover all third-party seller purchases?","answer":"The A-to-Z Guarantee covers most third-party seller purchases when payment is made through Amazon's checkout. It does not cover orders paid outside Amazon's system or some specific categories. Coverage requires opening a claim within the eligible window after the estimated delivery date."},{"question":"How do I know if a product is being sold by Amazon directly or a third party?","answer":"On the product page, look for the text 'Sold by' near the Buy Box. If it says 'Sold by Amazon.com,' Amazon is the seller. If it shows a different name, it is a third-party seller. 'Fulfilled by Amazon' means Amazon handles shipping but the seller is a third party."}],"lastReviewed":"2026-06-10"},{"slug":"is-venmo-safe-for-paying-strangers","url":"https://scamencyclopedia.org/questions/is-venmo-safe-for-paying-strangers","question":"Is Venmo safe for paying strangers?","shortAnswer":"Venmo is designed for payments between people who know each other and offers no buyer protection for peer-to-peer transactions — paying a stranger for goods or services creates significant risk with no recourse if something goes wrong.","explanation":"Venmo's terms of service explicitly state it is designed for person-to-person transfers between people who know and trust each other. It is not designed as a commerce platform, and by using it for transactions with strangers, both parties forgo the protections that purpose-built commerce payment systems provide.\n\nFor buyers, the core risk is payment without delivery: once a Venmo payment is sent to a stranger, it is gone. There is no Venmo dispute system for peer-to-peer payments equivalent to PayPal's Resolution Center. If the seller never sends the item or sends something different, Venmo will not intervene to recover the funds.\n\nFor sellers, the main risk is payment reversal: a buyer who funded their Venmo from a bank account or card can initiate a chargeback through their bank or card issuer after you have shipped the item, leaving you with neither the item nor the money.\n\nThe social feed element of Venmo creates an additional risk: anyone can see your transactions with other users (though amounts are sometimes hidden by default), revealing your social network and purchasing patterns. Setting all transactions to private limits this exposure but does not eliminate the fundamental lack of protection for commerce with strangers.\n\nThe better choice for paying strangers for goods or services is PayPal Goods and Services, which is explicitly designed for commerce and provides formal buyer and seller protection.","redFlags":["Seller for a marketplace item insists on Venmo as the only payment option","Buyer wants to pay via Venmo for a significant-value item that will be shipped","Any rental, service, or gig-economy provider that accepts only Venmo with no alternative","Buyer sends more than the agreed amount and asks for a partial return","Stranger sends you money without explanation and immediately asks you to forward it"],"whatToDoNow":["Decline Venmo for any commercial transaction with a stranger — use PayPal Goods and Services instead","Set your Venmo transaction feed to Private in app settings to limit data exposure","If you already paid a stranger via Venmo and were defrauded, contact your bank if you funded via credit card for possible chargeback","Report fraudulent users to Venmo support through the app","File a report with the FTC at reportfraud.ftc.gov if you lost money"],"faq":[{"question":"What is the safest way to accept payment for selling something locally?","answer":"Cash in person is the simplest and safest option for local transactions. For shipped items, PayPal Goods and Services provides both buyer and seller protection through a formal dispute process. Venmo, Zelle, and Cash App all lack commerce-oriented protection for transactions with strangers."},{"question":"Can Venmo send payment requests that I should not pay?","answer":"Yes, anyone can send you a Venmo payment request. You are not obligated to pay unsolicited requests. Ignore and decline requests from people you do not know or do not owe money to."}],"lastReviewed":"2026-06-10"},{"slug":"is-zelle-safe-for-paying-businesses","url":"https://scamencyclopedia.org/questions/is-zelle-safe-for-paying-businesses","question":"Is Zelle safe for paying businesses?","shortAnswer":"Zelle is not appropriate for paying businesses you do not already have an established, trusted relationship with — it has no buyer protection and transfers are nearly impossible to reverse, making it a high-risk method for any commercial transaction.","explanation":"Zelle is a bank-to-bank transfer network designed for peer-to-peer payments between people who trust each other, similar to handing someone cash. It moves money directly between bank accounts within seconds, which is convenient for paying a trusted friend or a family member, but creates significant risk when the recipient turns out to be dishonest.\n\nLegitimate businesses do exist that accept Zelle — some small local businesses, independent contractors, and landlords prefer it for its low or zero cost. However, the acceptance of Zelle as the only payment method, especially combined with unfamiliar parties, is a meaningful fraud risk signal. Scammers prefer Zelle precisely because the instant, irreversible nature of the transfer makes recovery nearly impossible.\n\nGovernment and utility impersonation scams frequently demand Zelle payment: a caller claims to be from the IRS, Social Security Administration, a utility company, or a bank and demands immediate payment via Zelle to avoid arrest, service disconnection, or account suspension. No legitimate government agency, utility, or bank will demand payment through Zelle.\n\nFor paying businesses, the safer options are credit cards (chargeback rights), PayPal Goods and Services (formal dispute process), or bank ACH with a trusted, verified company. Zelle should be reserved for trusted personal contacts where the consequences of an error are recoverable.","redFlags":["Business accepts only Zelle with no alternative payment option","Government agency, utility, or bank demands Zelle payment immediately","Contractor or service provider you have just met demands full upfront payment via Zelle","Landlord requests a deposit via Zelle before you have seen the property or signed a lease","Online shop or ticket seller instructs you to pay via Zelle","Any urgency framing that prevents you from pausing to verify the business"],"whatToDoNow":["Use credit cards or PayPal Goods and Services for any commercial transaction with an unfamiliar business","Verify a business through independent means before sending any Zelle payment","Remember that no government agency, utility, or bank will ever demand Zelle payment","For landlords, verify ownership through public property records before paying any deposit","If you sent Zelle to a fraudulent business, call your bank immediately — same-day disputes have the best chance","Report payment fraud to the CFPB and FTC"],"faq":[{"question":"Is it ever safe to pay a contractor via Zelle?","answer":"It can be reasonable to pay a well-established, verified contractor via Zelle if you have a signed contract and have already established trust. For new contractors without a track record with you, credit card or a payment with dispute rights is safer."},{"question":"My bank sent me a text saying to move money via Zelle — is that legitimate?","answer":"Almost certainly not. This is the most dangerous Zelle scam pattern. Real bank fraud teams freeze suspicious transactions — they never ask you to send money via Zelle to protect it. Hang up and call your bank using the number on your card."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-nextdoor","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-nextdoor","question":"How do scams work on Nextdoor?","shortAnswer":"Nextdoor scams exploit the neighbourhood trust model through fake service provider listings, virtual kidnapping calls that use resident data, and marketplace fraud that benefits from the false sense of local credibility.","explanation":"Nextdoor's premise — that your neighbours are more trustworthy than anonymous internet strangers — is exactly what scammers exploit. Being on the same platform as people who live near you creates a perceived community endorsement that scammers manufacture or infiltrate.\n\nFake local service providers — landscapers, plumbers, cleaners, contractors — post on Nextdoor requesting upfront deposits for work that is never performed. Because the profile appears local and may have fabricated positive recommendations, residents pay before verifying credentials. Always verify contractor licences, check independent review platforms, and avoid full upfront payment for work not yet completed.\n\nVirtual kidnapping calls are enabled partly by the personal data visible on neighbourhood apps: a caller claims to have kidnapped your family member and demands immediate ransom via wire transfer or gift cards, citing personal details scraped from social profiles to add credibility. Hang up and call the family member directly.\n\nMarketplace scams on Nextdoor mirror Facebook Marketplace patterns but with the added false credibility of apparent neighbourhood membership. Items may not exist, payments may be requested through unprotected methods, and the seller may be impersonating a real local account.","redFlags":["Service provider requests full payment upfront before any work begins","Profile has limited history but is advertising professional services with urgency","Someone has posted glowing recommendations for a business from accounts with no prior activity","A call claiming to have a family member and demanding payment references your neighbourhood details","Marketplace seller wants off-platform payment via Zelle, Venmo Friends, or crypto","Service ad has a phone number that connects to someone who cannot answer basic verification questions"],"whatToDoNow":["Verify contractor licences through your state or county licensing board before hiring","Pay contractors in stages tied to completion of defined work, not full upfront","For virtual kidnapping calls, hang up and call the supposed kidnapped family member directly on their known number","For marketplace purchases, use cash in person and meet in a public location","Report fake accounts and suspicious listings to Nextdoor using the report function","Check independent reviews on Google and Yelp for any service provider before hiring"],"faq":[{"question":"Are recommendations on Nextdoor trustworthy?","answer":"Recommendations from real, active neighbours with a post history carry some credibility. Brand-new accounts with no other activity posting glowing recommendations are likely fake. Cross-check all recommendations with independent review platforms before hiring."},{"question":"What should I do if I paid a fraudulent contractor found through Nextdoor?","answer":"If you paid by credit card, file a chargeback dispute with your card issuer. If by cash or Zelle, contact local police and report to the FTC. Report the profile to Nextdoor immediately so other neighbours are protected."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-poshmark-and-resale-apps","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-poshmark-and-resale-apps","question":"How do scams work on Poshmark and resale apps?","shortAnswer":"Poshmark and similar resale platforms are targeted by counterfeit goods sellers, outside-platform payment requests that bypass protections, and account takeover attacks on sellers with established reputations.","explanation":"Resale platforms like Poshmark, Depop, and Vinted have built-in payment and dispute systems specifically designed for person-to-person clothing and goods resale. Scammers work around these systems to commit fraud while avoiding the platform's protections.\n\nCounterfeit goods are the dominant fraud on clothing resale platforms. Luxury brand items — handbags, sneakers, jewellery — may be listed with authentic-seeming photos (stolen from genuine sellers or professional sources) and sold at prices that seem discounted but are high enough to be plausible. Buyers receive obvious fakes. Platforms like Poshmark do have authentication services for high-value items, but these require opting in and are not universal.\n\nOff-platform payment requests follow a familiar pattern: a buyer or seller asks to complete the transaction via Zelle, Venmo, or bank transfer to save on fees. Moving off-platform removes buyer and seller protections entirely and is against the platforms' terms.\n\nAccount takeover targeting is particularly damaging: scammers take over an established seller's account with a strong reputation and immediately liquidate the listed inventory at discount prices, collecting payments that the original seller never receives. The stolen account's reputation is the asset being exploited.","redFlags":["Seller or buyer wants to complete the transaction outside the app to save fees","Luxury item listed at a price noticeably below typical resale market but not suspiciously cheap","Seller account has an excellent reputation but the current listing style differs markedly from previous sales","Photos of a designer item are too perfect — likely stolen from an authentic listing","Buyer claims the item arrived damaged or was not as described without credible photos","Any communication pressuring you to act before you can examine the item thoroughly"],"whatToDoNow":["Always transact through the platform's official payment system to retain dispute protection","For high-value authentic luxury items, use the platform's authentication service if available","Research current resale prices on StockX or similar platforms before purchasing high-value items","Open a dispute through the platform's support system promptly if you receive a counterfeit","As a seller, enable two-factor authentication and use a strong unique password to prevent account takeover","Report suspicious listings to the platform using the in-app flag option"],"faq":[{"question":"Does Poshmark refund you if you receive a counterfeit?","answer":"Poshmark's buyer protection covers items that are not as described, including counterfeit goods. You must open a case within three days of delivery and provide evidence. After three days, the sale is considered final."},{"question":"How do I verify a designer item is authentic before buying on a resale app?","answer":"Check the listing photos carefully against known authentication guides for the brand. Use the platform's authentication service for high-value items. Look for hardware details, stitching, and logo fonts that are consistent with the genuine product. When in doubt, use a third-party authentication service."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-airbnb","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-airbnb","question":"How do scams work on Airbnb?","shortAnswer":"Airbnb scams involve off-platform payment requests that bypass host guarantees, listings for properties that do not exist or are misrepresented, and phishing attacks impersonating Airbnb communication to steal account credentials.","explanation":"Airbnb's platform protections — including its AirCover guarantee and secure payment processing — make it significantly safer than arranging accommodation directly with a stranger. However, these protections depend entirely on using the platform's official channels. Scammers work to move transactions off-platform where protections do not apply.\n\nOff-platform payment is the most common Airbnb scam targeting guests: a host contacts you outside the app to offer a discount for paying via bank transfer, Zelle, or crypto, claiming it avoids Airbnb fees. Once payment is made outside Airbnb, the booking is unverified, the property may not be real, and Airbnb cannot help recover your money.\n\nListings that misrepresent the property — using photos from a different, nicer property, exaggerating the location, or omitting significant problems — are a fraud risk for guests who only discover the truth on arrival. Airbnb's resolution process does cover this, but it requires documentation and can be contested.\n\nPhishing attacks impersonating Airbnb are sophisticated: emails that look exactly like booking confirmations, host messages, or account security alerts contain links to fake Airbnb login pages. Always access your booking through the app or by typing airbnb.com directly.","redFlags":["Host contacts you outside Airbnb offering a discount for off-platform payment","Listing photos look professionally staged and do not match typical neighbourhood properties","Price is significantly below comparable listings in the same area","Host asks for payment via bank transfer, wire, Zelle, or crypto","Email about your Airbnb booking comes from a non-airbnb.com email address","Host has limited reviews or recently created account but is offering high-demand properties","Host communicates significant pressure to book immediately before others take the listing"],"whatToDoNow":["Pay only through Airbnb's official checkout — never through external payment methods","Check host reviews and read for specific, personal-sounding comments that confirm the experience","Access your bookings directly through the Airbnb app rather than by clicking email links","Report hosts who request off-platform payment to Airbnb through the message thread options","Document the property on arrival — if it differs materially from the listing, photograph evidence and contact Airbnb support immediately","File a report with the FTC if you paid outside Airbnb and were defrauded"],"faq":[{"question":"Does Airbnb refund you if the property does not match the listing?","answer":"Airbnb's AirCover programme covers guests if the property is significantly different from the listing, if the host cancels, or if there is a safety hazard. You must report the issue to Airbnb within 24 hours of check-in to be eligible."},{"question":"Is it safe to book an Airbnb with no reviews?","answer":"New hosts exist legitimately, but listings with no reviews carry more risk. Look for detailed, professional-quality listings, hosts who respond quickly and informatively to questions, and properties that are verifiable through the neighbourhood address. Trust your instincts if something seems misaligned."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-freelance-platforms","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-freelance-platforms","question":"How do scams work on freelance platforms like Upwork and Fiverr?","shortAnswer":"Freelance platform scams target both clients and freelancers through fake job posts that harvest personal data, off-platform payment requests, and check-cashing schemes disguised as test assignments.","explanation":"Freelance platforms like Upwork and Fiverr have evolved to reduce fraud through escrow payment systems, identity verification, and dispute resolution processes. Scammers adapt by either exploiting weaknesses in these systems or by luring participants off-platform where protections do not apply.\n\nFreelancers face fake clients who post job listings requiring immediate submission of work before a contract is formalised in the platform's system, then disappear without paying. Others send cheques or wire transfers as an advance and ask the freelancer to purchase software or equipment and return the change — a classic check cashing scheme that leaves the freelancer responsible when the cheque bounces.\n\nClients face freelancers who create polished profiles with fabricated portfolios and deliver substandard work, then disappear or use the platform's dispute process to delay or reduce refunds. Reviews can be purchased, and some platforms have weaker enforcement than others.\n\nIdentity and credential harvesting is another threat: fake job posts that require a detailed application including government ID, bank account details, or Social Security number before an interview stage. Legitimate clients on reputable platforms do not require government ID or financial details during the application process.\n\nUsing the platform's escrow and payment system for all transactions is the primary protection for both parties — it creates a contractual record and provides a dispute mechanism.","redFlags":["Client asks you to communicate and work entirely off-platform via email or WhatsApp","Client sends a cheque as an advance and asks you to buy equipment or software and return change","Job post requires government ID, SSN, or bank details as part of the application","Client wants to pay outside the platform's escrow system to avoid fees","Freelancer portfolio samples appear to be sourced from other designers' public work","Client requests an urgent deliverable before a formal contract is created in the platform","Job offer comes through a personal message before you applied rather than a posted listing"],"whatToDoNow":["Keep all work and communication within the platform's official system to retain dispute protection","Never accept cheques or wire transfers and never return part of a payment — use platform escrow only","Report clients asking for off-platform transactions to the platform's trust team","As a client, create milestone payments tied to verified deliverables rather than large upfront sums","Verify freelancer portfolios by reverse image searching samples and looking for original source credit","File a dispute through the platform's resolution process before the window closes"],"faq":[{"question":"Does Upwork or Fiverr protect freelancers if a client does not pay?","answer":"Upwork's hourly protection covers logged billable hours through the Work Diary for hourly contracts. Fixed-price contracts are protected through escrow if funded by the client before work begins. Fiverr holds payment in escrow and releases it after delivery acceptance, with a dispute process for contested orders."},{"question":"What should I do if a client on a freelance platform asks for my bank details?","answer":"Do not provide bank details in response to a client request through the platform. Platform payments are handled through the platform's payment system, not direct bank transfers. This request is either a scam or a policy violation — report it to the platform."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-bumble-and-hinge","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-bumble-and-hinge","question":"How do scams work on Bumble and Hinge?","shortAnswer":"Bumble and Hinge face the same romance fraud patterns as other dating apps, but their user-verification features and profile-quality requirements are exploited by scammers as trust signals to lower victims' defences.","explanation":"Bumble and Hinge have invested more heavily in profile verification and match-quality features than some earlier dating platforms. Bumble's photo verification and Hinge's detailed profile prompts create an appearance of greater authenticity. Scammers have adapted by spending more time building credible profiles and by using these platform features as social proof — telling victims that their verified status proves they are genuine.\n\nProfile verification on these platforms typically confirms that the profile photo belongs to the person holding the phone — it does not verify the person's name, job, financial status, or intentions. A verified scammer's face is still a scammer's face. Victims who see \"verified\" can be less cautious about the information in the profile or the subsequent conversation.\n\nPig-butchering crypto scams operate identically across all dating platforms: the romantic relationship is built, then a trading platform or investment opportunity is introduced. The specific tactics may be slightly more polished on platforms with higher-quality profiles because the scammer invests more in maintaining the persona.\n\nSextortion is a specific risk on Hinge and Bumble: a match quickly escalates to explicit photo exchanges, then uses those photos to demand payment under threat of sharing them with the victim's contacts. This is blackmail and should be reported to law enforcement.","redFlags":["Match mentions investment or trading within the first two weeks of matching","Verified badge is cited as proof of trustworthiness in the context of a financial discussion","Match escalates to explicit photo exchange very quickly and then requests money","Match communicates primarily through the app but insists on moving to WhatsApp for \"privacy\"","Any conversation that circles back to money, trading, or financial help regardless of verification status","Match cannot or will not meet in person after weeks of conversation"],"whatToDoNow":["Understand that photo verification confirms a face matches photos but does not verify identity or intentions","Never send explicit photos to someone you have not met in person and thoroughly know","Do not send money or invest based on a dating-app connection regardless of their verified status","Report sextortion attempts to local law enforcement and to the FBI at ic3.gov","Report suspicious profiles using the in-app report feature — both apps take fraud reports seriously","Contact Bumble or Hinge support if you encounter repeated fraud from a verified profile"],"faq":[{"question":"Does Bumble's photo verification prevent catfishing?","answer":"Photo verification confirms that a profile photo is an accurate likeness of the person — it prevents the use of stolen photos. It does not verify anything else about the person's identity, background, or intentions."},{"question":"What should I do if someone on Hinge or Bumble threatens to share photos I sent?","answer":"Do not pay — payment typically leads to further extortion. Report to local police, the FBI's IC3, and the NCMEC's CyberTipline if relevant. Report the profile to the dating app immediately. Document all communications before blocking."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-cash-app-investing","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-cash-app-investing","question":"How do scams work through Cash App's investing and bitcoin features?","shortAnswer":"Cash App's in-app stock and bitcoin buying features are exploited by impersonators who claim to be Cash App support or certified advisors, promising guaranteed returns in exchange for depositing more funds into crypto.","explanation":"Cash App offers legitimate stock buying and bitcoin purchasing features for US users. These are regulated investment products, but their presence on a peer-to-peer payment app — combined with a large, younger user base — creates an environment where scammers impersonating Cash App investment advisors, certified traders, or the platform's own support staff can operate with apparent credibility.\n\nThe \"Cash App flipping\" scam specifically targets the bitcoin feature: a scammer on social media claims they have a method to multiply Cash App bitcoin holdings, asking victims to send a starter amount. They may demonstrate by sending back a tiny amount initially, then make ever-larger asks before disappearing. No legitimate method of multiplying any asset through a social media contact exists.\n\nFake Cash App investment groups are constructed similarly to Telegram crypto groups: members post fabricated profit screenshots, claim to have proprietary methods, and eventually ask for funds to be sent or deposited on an external trading platform. Cash App's interface is used only as the on-ramp before funds disappear.\n\nFor anyone who does use Cash App's legitimate investing feature, the rules are the same as for any investment: never invest based on social media tips, never send money to individuals promising to invest on your behalf, and be sceptical of any guaranteed return claim.","redFlags":["Contact on social media offers to multiply your Cash App bitcoin for a starting deposit","Supposed Cash App advisor or support agent approaches you via social media to discuss investing","Early small returns are made to encourage larger deposits","Profits are visible in an app dashboard but withdrawal requests trigger new fee demands","Investment group found through Instagram or TikTok promotes Cash App bitcoin flipping","Anyone claiming Cash App has a special investment tier or feature not visible in your own app"],"whatToDoNow":["Use Cash App's investment features only for your own direct purchases, not through third parties","Report social media accounts promoting Cash App investment schemes to the platform and Cash App","Never send additional funds to recover losses or unlock previously deposited money","If you used Cash App to fund an external platform that turned out to be fraudulent, report it in the app and to the FTC","For legitimate investment activity, use regulated brokerage accounts with clear regulatory status"],"faq":[{"question":"Is Cash App a legitimate way to buy bitcoin?","answer":"Yes, Cash App's bitcoin feature is a regulated product in the US. The fraud risk comes from third parties impersonating Cash App or offering investment services that use Cash App as a deposit method — not from the feature itself."},{"question":"How do I report a Cash App bitcoin scam?","answer":"Report it in the app: tap your profile icon > Support > Something Else > Cash App Bitcoin. Also file a report at reportfraud.ftc.gov and, for cryptocurrency fraud, at ic3.gov."}],"lastReviewed":"2026-06-10"},{"slug":"is-telegram-safe-for-dating","url":"https://scamencyclopedia.org/questions/is-telegram-safe-for-dating","question":"Is Telegram safe for dating?","shortAnswer":"Telegram is not a dating platform and using it for romantic communication with strangers carries significant risk — it is the preferred secondary channel for romance scammers who want to move off regulated dating apps where their activity might be monitored.","explanation":"Telegram was not designed as a dating platform and has none of the safety features that major dating apps build in — photo verification, in-app reporting, moderation of romantic messaging, or an integrated video call function that helps verify identity. Despite this, it is frequently used as a secondary channel in romance scams, and some fraudulent connections are initiated directly through Telegram channels or DMs.\n\nRomance scammers specifically request moving off dating apps to Telegram early in a connection because Telegram's end-to-end encryption and lack of platform-level monitoring reduce the risk of the scammer's account being reported and banned. The request to switch to Telegram is itself a meaningful red flag in any online romantic connection.\n\nThe anonymity of Telegram means you cannot verify the identity of a contact, and any emotional investment made in a Telegram relationship is built on an unverifiable foundation. Scammers operate elaborate personas for weeks or months, and the intimate feel of Telegram messaging accelerates emotional attachment.\n\nIf someone you met on a dating app or social media insists on communicating via Telegram, treat this as a significant caution signal. Video calling via the official app where you met provides a safer level of verification than moving to an unmonitored external platform.","redFlags":["Match on a dating app insists on switching to Telegram within the first week","Contact claims Telegram is more private and that this is the reason for switching","Relationship feels unusually fast-moving and deeply emotional very early","Contact is always unavailable for in-person meetings or video calls on the original platform","Any financial requests — investment, emergency loan, gift cards — following emotional intimacy","Telegram contact has a profile that cannot be verified against any other presence online"],"whatToDoNow":["Continue communicating on the platform where you originally connected until you have met in person","Treat an early request to move to Telegram as a red flag that warrants slowing down the connection","Video call on the original platform or a standard video call app before agreeing to any meet-up","Never send money to a contact you have not verified in person regardless of the platform","Report suspicious accounts on the dating platform where the connection started","Speak to a trusted friend or family member about the relationship if you are uncertain"],"faq":[{"question":"Can I have legitimate friendships or relationships that use Telegram?","answer":"Yes, people in established relationships use Telegram routinely. The concern is with strangers who insist on moving to Telegram specifically to avoid using a platform with safety monitoring, particularly in a romantic context."},{"question":"What should I do if I already gave money to a Telegram romance contact?","answer":"Stop sending money immediately. Contact your bank or payment provider to report the transaction. File a report with the FTC at reportfraud.ftc.gov. Seek support — romance scams can have significant emotional as well as financial impact."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-whatsapp-business","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-whatsapp-business","question":"How do scams work on WhatsApp Business?","shortAnswer":"WhatsApp Business accounts are exploited by scammers who create fake brand accounts to impersonate real businesses, run phishing attacks, and collect payments from customers who believe they are communicating with a legitimate company.","explanation":"WhatsApp Business allows companies to create verified-looking profiles with business names, logos, and descriptions. Meta offers an official verified badge for large brands, but smaller businesses operating on WhatsApp Business may have no such verification. This creates an environment where fraudulent business accounts that mimic real brands can be very convincing.\n\nCustomer service impersonation is the primary fraud pattern: scammers create WhatsApp Business accounts that look like the support channel for a bank, retailer, airline, or government service. They reach out to people who have publicly complained about the real brand on Twitter or Facebook, offering to resolve their issue. The resolution process involves collecting account credentials, OTPs, or directing payment to an attacker-controlled account.\n\nFake business storefronts use the WhatsApp Business catalogue feature to display product listings. Customers who find the business through social media ads or organic search believe they are buying from a real retailer. Payments are directed to personal accounts or unprotected payment apps, and products are never delivered.\n\nScam delivery notifications also arrive via WhatsApp Business accounts: messages claiming to be from a courier service state that a delivery failed and require a small fee to rebook. The WhatsApp Business format makes these look more official than a regular text message, but the fee payment leads to ongoing subscription charges or card theft.","redFlags":["WhatsApp Business account contacted you after you posted a complaint about a brand online","Business account collects payment via personal Zelle, Venmo, or crypto rather than a standard business payment channel","Delivery fee request via WhatsApp Business where you did not expect a delivery","Account is asking for your banking OTP, PIN, or online banking password to resolve an issue","Business name looks identical to a known brand but the display number is not the brand's published contact","Any unsolicited message that begins with urgency about an account, order, or delivery"],"whatToDoNow":["Verify the business by contacting it through the number or email listed on its official website","Do not provide OTPs, PINs, or passwords to anyone contacting you via WhatsApp regardless of how official they look","Pay businesses through official channels such as their website checkout, not through WhatsApp payment requests","Report suspicious WhatsApp Business accounts using the report function in the chat","If you paid a fraudulent business, dispute with your card issuer or bank immediately","Check the brand's official social media to see whether they have confirmed which channels they use for support"],"faq":[{"question":"Does a green checkmark on a WhatsApp Business account mean it is legitimate?","answer":"The green badge on WhatsApp Business indicates the account has been verified by Meta as the authentic presence of the named business. However, many legitimate small businesses do not have this badge, and fake accounts can look convincing without it. Always verify independently."},{"question":"How should I pay a business that contacts me through WhatsApp?","answer":"Avoid paying any business through a WhatsApp-originated payment request unless you are using the platform's official payment feature in supported countries. For most purchases, navigate to the company's official website to complete the transaction in a trusted environment."}],"lastReviewed":"2026-06-10"},{"slug":"is-cash-app-safe-for-receiving-payments","url":"https://scamencyclopedia.org/questions/is-cash-app-safe-for-receiving-payments","question":"Is Cash App safe for receiving payments?","shortAnswer":"Receiving legitimate payments on Cash App is safe, but accepting payments from strangers carries risk because fraudulent payments can be reversed after you have provided goods or services, leaving you at a loss.","explanation":"Cash App is a legitimate peer-to-peer payment platform and receiving funds from trusted contacts is safe. The key risk for anyone accepting payments from strangers — particularly for goods or services — is the chargeback mechanism: a payer who funded their Cash App using a credit or debit card can dispute the charge with their bank, and the bank may reverse the transaction even after you have delivered what was paid for.\n\nFor sellers of goods, this creates the same risk as accepting any instant digital payment: the payer can claim non-receipt or unauthorised use to their card issuer, and without a formal buyer-seller protection framework, Cash App may not be able to recover the funds on your behalf. Merchants who accept Cash App for business should understand this risk and use official Cash for Business accounts where available, which provide some additional merchant protections.\n\nRefund request scams also target Cash App users who receive unexpected payments: a stranger sends you money, then messages saying it was an accident and asks you to send it back, but to a different account number. The original payment may later be reversed through a chargeback, leaving you responsible for the forwarded amount.\n\nFor legitimate personal use — receiving rent from a housemate, collecting money from a friend you know, or accepting payment from a regular customer you trust — Cash App is reliable. The risk increases in proportion to how well you know and trust the person sending the money.","redFlags":["A stranger sends you an unexpected payment and immediately asks you to return it","Buyer for a marketplace item insists on Cash App as the only payment method","Payer sends more than the agreed amount and asks for a partial refund","Service client funds via credit card through Cash App and immediately disputes after receiving the work","Payment request comes from an account with a very new creation date and no transaction history"],"whatToDoNow":["For selling goods or services to strangers, use PayPal Goods and Services for merchant protection","If you receive an unexpected payment, contact Cash App support to reverse it rather than forwarding money","Enable Cash App's notifications for all incoming and outgoing payments to monitor your account","As a business, use Cash for Business rather than a personal account to access merchant protections","Enable the Security Lock feature so every payment requires biometric or PIN authorisation"],"faq":[{"question":"Can Cash App reverse a payment if I was scammed?","answer":"Cash App can sometimes reverse payments if reported immediately and the recipient has not withdrawn funds. However, Cash App does not guarantee reversals for peer-to-peer transfers. Report in the app immediately: tap the transaction > Report an Issue."},{"question":"What is the difference between Cash App personal and Cash for Business?","answer":"Cash App personal accounts are for peer-to-peer payments. Cash for Business is designed for merchants, supports reporting, and charges a 2.75% fee on payments received. Business accounts provide clearer terms for commercial transactions."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-grindr-and-lgbtq-dating-apps","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-grindr-and-lgbtq-dating-apps","question":"How do scams work on Grindr and LGBTQ+ dating apps?","shortAnswer":"LGBTQ+ dating apps face specific fraud risks including catfishing with fake profiles, hookup blackmail that exploits privacy concerns, robbery set-up attacks, and the same financial romance scams found on mainstream dating platforms.","explanation":"LGBTQ+ dating apps operate in environments where some users have additional privacy sensitivities, which scammers and attackers specifically exploit. The concern about being outed, combined with the desire to connect with an affirming community, can make users more susceptible to certain manipulation tactics.\n\nBlackmail after explicit content exchange — sometimes called sextortion — is particularly prevalent on apps like Grindr. A contact solicits explicit photos or video, then threatens to share them with the victim's family, employer, or contacts unless a payment is made. This attack specifically exploits the privacy sensitivities of users who may not be out in all areas of their life. Payment rarely stops the demands.\n\nRobbery set-up is a real physical safety risk: a fake profile arranges a hookup meeting and, on arrival, the victim encounters multiple individuals who rob them. Sharing a location with a trusted contact, meeting first in a public place, and using the app's own video call feature to verify identity before meeting are basic safety measures.\n\nFinancial romance scams operate on LGBTQ+ platforms exactly as they do elsewhere: extended romantic conversation builds emotional investment, followed by financial requests framed as emergencies or investment opportunities. The scammer may also exploit the victim's emotional investment in the community as additional leverage.","redFlags":["Contact solicits explicit content very quickly with limited profile information shared","Meeting request goes directly to a private home address rather than suggesting a public first meeting","Contact is unusually focused on financial matters or investment opportunities","Profile photos are professionally photographed and return different identities in reverse image search","Contact claims to be in a dangerous or urgent situation requiring money immediately","Any threat to share photos or personal information unless payment is made"],"whatToDoNow":["Never send explicit content to someone you have not met in person and thoroughly know","Arrange first meetings in public locations and share your destination with a trusted friend","Use the app's video call feature before meeting to verify the person matches their profile","If blackmailed, do not pay — report to local police and the FBI's IC3 immediately","Report fake profiles and suspicious contacts using the in-app report feature","For financial requests, apply the same absolute rule as any dating platform: do not send money to online contacts"],"faq":[{"question":"Should I pay a blackmailer who has my explicit photos?","answer":"No. Payment typically results in escalating demands rather than the threat ending. Report to local police and the FBI's Internet Crime Complaint Center (ic3.gov). Document all communications. Some states have specific revenge-porn or intimate-image abuse laws that apply."},{"question":"How can I verify a profile on Grindr or similar apps before meeting?","answer":"Request a video call through the app. Ask them to perform a specific action on camera that could not be pre-recorded. Reverse image search their profile photos. Meet in a public venue first."}],"lastReviewed":"2026-06-10"},{"slug":"is-facebook-marketplace-safe-for-car-buying","url":"https://scamencyclopedia.org/questions/is-facebook-marketplace-safe-for-car-buying","question":"Is Facebook Marketplace safe for buying a car?","shortAnswer":"Vehicle purchases on Facebook Marketplace carry significant fraud risk — sellers who do not own the car, salvage title concealment, and overseas-owner stories are all common tactics that can cost buyers thousands of dollars.","explanation":"Cars are among the highest-value items sold on Facebook Marketplace, which makes vehicle fraud both lucrative for scammers and financially devastating for victims. Several specific patterns dominate this category.\n\nThe most straightforward scam is a seller listing a vehicle they do not own — photos copied from a legitimate listing, a price set to attract interest, and a request for a deposit or full payment before any inspection. The money is collected and the seller is unreachable. This pattern often includes a story about why the car cannot be viewed locally: military deployment, international relocation, charitable organisation handling the sale.\n\nTitle fraud involves selling a vehicle with a branded or salvage title without disclosing it. The car exists and can be viewed, but its history makes it significantly less valuable — and possibly unsafe — than represented. Always run a VIN history report and have a mechanic inspect the vehicle before completing any sale.\n\nOdometer fraud and concealed damage are persistent issues in any private vehicle sale. Facebook Marketplace provides no mechanism for verifying condition claims, so independent verification before purchase is the buyer's only safeguard.\n\nFor payment, never send a wire transfer or Zelle payment for a vehicle you have not personally inspected and had independently assessed. Legitimate private sellers will accommodate an in-person inspection and a test drive.","redFlags":["Seller cannot meet locally for a viewing because of military deployment or international location","Price is significantly below comparable vehicles in similar condition","Seller asks for a deposit or full payment before you have inspected the vehicle","Communication pressure to commit quickly because other buyers are interested","Seller asks for payment via wire transfer, Zelle, crypto, or any non-reversible method","No VIN is provided in the listing or seller is evasive about sharing it"],"whatToDoNow":["Never pay any amount for a vehicle before conducting an in-person inspection and test drive","Run a VIN history report through a reputable service before purchase to check title status, accidents, and mileage","Have a trusted mechanic inspect the vehicle independently before finalising the purchase","Pay by cashier's check from your bank or a traceable method that allows recourse","Verify the seller's identity by confirming their name matches the title","Report fraudulent vehicle listings to Facebook and file with the FTC if you lost money"],"faq":[{"question":"Is it safe to buy a car from a private seller on Facebook Marketplace?","answer":"Private vehicle purchases can be legitimate, but they require due diligence: in-person inspection, independent mechanic check, VIN history report, and title verification. Never send payment before completing all these steps."},{"question":"What is a salvage title and why does it matter for a Marketplace car purchase?","answer":"A salvage title indicates a vehicle was declared a total loss by an insurance company. These vehicles can be rebuilt and re-titled, but they may have compromised structural integrity and are worth less than clean-title vehicles. Sellers are legally required to disclose this; some do not."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-whatsapp-investment-groups","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-whatsapp-investment-groups","question":"How do scams work in WhatsApp investment groups?","shortAnswer":"WhatsApp investment groups are almost always fraudulent — they use fabricated profit screenshots, manufactured social proof, and a fraudulent trading platform to collect deposits that can never be withdrawn.","explanation":"WhatsApp investment groups follow a near-universal playbook. A stranger contacts you, either directly or by adding you to a group, claiming they have a reliable method for generating trading profits. The group is populated with apparent members enthusiastically sharing results — most or all of these accounts are controlled by the same operation.\n\nThe target is introduced to a trading or investment platform. The platform interface is designed to show attractive account growth — the balance appears to increase rapidly based on fabricated trade data. Small withdrawals may be processed early to build confidence. The target is then encouraged to deposit larger amounts, often with time pressure or a limited-opportunity framing.\n\nWhen the target attempts a significant withdrawal, new requirements emerge: taxes, compliance fees, insurance deposits, or a minimum balance threshold. These are fabricated obstacles designed to extract additional money. The platform eventually becomes inaccessible.\n\nThis scheme is a variant of pig-butchering fraud that uses WhatsApp groups for the social-proof component instead of a romantic relationship. The financial outcome is the same: a platform that accepts deposits but never returns them. The group and platform are shut down, and the operators move on to a new scheme.","redFlags":["You were added to a WhatsApp group without consent that discusses trading or investment","Group members regularly post screenshots of dramatic profits","A mentor or group leader claims to offer exclusive signals or access to a special platform","Investment platform introduced through the group is not publicly listed on any financial regulator's register","Withdrawal attempts are met with demands for additional fees or deposits","Urgency framing: a trading window is closing or a limited-time offer is expiring"],"whatToDoNow":["Leave any WhatsApp investment group you were added to without explicit consent","Block the person who added you and report the group through WhatsApp's report function","Never deposit funds on a trading platform introduced through a WhatsApp group","Check any financial platform's regulatory status on your national regulator's register before depositing","If you have already deposited, stop sending any additional money regardless of promised fees","Report to the FTC, IC3, and your national financial regulator"],"faq":[{"question":"How do I know if a withdrawal fee is legitimate?","answer":"Withdrawal fees on legitimate platforms are disclosed upfront and deducted from your balance — they are never paid as an external deposit to unlock access to your own money. Any demand to send additional funds to withdraw is a definitive sign of fraud."},{"question":"Can I get my money back from a WhatsApp investment scam?","answer":"Recovery is very difficult, especially if funds were sent via wire transfer or crypto. File reports with your bank, the FTC, and the IC3. Be wary of recovery services that contact you claiming they can retrieve your funds — many are secondary scams."}],"lastReviewed":"2026-06-10"},{"slug":"is-tiktok-safe-for-financial-advice","url":"https://scamencyclopedia.org/questions/is-tiktok-safe-for-financial-advice","question":"Is TikTok safe for financial advice?","shortAnswer":"TikTok's financial content ranges from genuinely educational to actively harmful — the platform's algorithm rewards engagement over accuracy, making it easy for misleading investment claims to reach far more people than careful, qualified advice.","explanation":"FinTok and MoneyTok are informal names for the community of financial content creators on TikTok, and within it are qualified, genuinely helpful educators alongside creators whose primary goal is selling courses, affiliate products, or building audiences for promotional deals. Distinguishing between them requires active scepticism.\n\nThe algorithm does not weight content by the credentials of the creator or the accuracy of the advice — it weights by engagement. A dramatic video claiming you can retire in five years by following a specific strategy will outperform a balanced, nuanced video about managing an emergency fund, even if only the second contains accurate, actionable guidance.\n\nCrypto, forex, and options trading content on TikTok is particularly problematic. Creators showing profit screenshots and encouraging followers to use specific platforms are frequently paid through referral or affiliate arrangements — meaning their income depends on you depositing with a specific broker, regardless of whether that broker is appropriate for you.\n\nScam-adjacent content on TikTok includes course-selling that provides minimal genuine value, pyramid-style referral programs dressed up as investment communities, and outright fraudulent platforms promoted through paid or organic creator content.\n\nFor genuine financial education, look for creators who are credentialed or regulated, who acknowledge risk, who do not primarily promote specific platforms or products, and who refer to primary sources and mainstream regulatory guidance.","redFlags":["Creator primarily promotes a specific trading platform and uses a referral link","Video promises a specific financial outcome — retire in X years, double your money — without caveats","Creator is selling a paid course or community as the next step after introductory content","Advice involves high-risk instruments — options, leveraged crypto, penny stocks — presented without risk disclosure","Content promotes multi-level marketing under the framing of passive income or investing","Comments section contains numerous similar testimonials that look manufactured"],"whatToDoNow":["Verify any creator's credentials or regulatory registration before following their financial advice","Check whether advice aligns with guidance from mainstream financial regulators like the SEC or FCA","Search the platform or investment product they recommend on your financial regulator's register","Consult a regulated, fee-only financial advisor for significant financial decisions","Report content that makes false investment claims using TikTok's in-app report feature"],"faq":[{"question":"Are there credible financial educators on TikTok?","answer":"Yes, some credentialed and experienced financial professionals create accurate, helpful content on TikTok. Look for those who acknowledge uncertainty and risk, cite mainstream sources, are transparent about their credentials, and do not earn from specific platform referrals."},{"question":"What is the risk of following trading tips from a TikTok creator?","answer":"Acting on unverified trading tips from social media can result in financial loss. The person giving the tip may be paid to promote a product, may not be qualified, or may be sharing cherry-picked results. Any investment decision should be based on your own research and, where appropriate, professional advice."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-paypal-invoices","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-paypal-invoices","question":"How do scams work using fake PayPal invoices?","shortAnswer":"Scammers send real PayPal invoices for products or services you never ordered, sometimes including a phone number to call, which connects to a fake support agent who attempts to steal account credentials or guide victims through a fraudulent refund process.","explanation":"Fake PayPal invoice scams are sophisticated because they use PayPal's actual invoicing system — the invoice arrives as a genuine PayPal notification, appearing in your PayPal account and arriving by email from a legitimate PayPal sender address. This makes the invoice look completely authentic at first glance.\n\nThe typical invoice claims you purchased an expensive item — often cryptocurrency, a subscription, or a software licence — for a substantial amount. The invoice includes a note or description with a phone number to call if you did not authorise the payment or want to cancel the charge. This phone number is not PayPal's; it connects to a scam operation.\n\nCalling the number reaches a fake PayPal support agent who claims they can process a refund. To do so, they ask you to download remote access software, provide your banking login, or walk through a process that actually results in money being transferred from your account rather than refunded to it. The entire scheme exploits the urgency of seeing a large unexpected charge and the availability of an apparent customer service solution.\n\nThe correct response is to ignore the phone number, log into your PayPal account directly by typing paypal.com, and decline the invoice there. Receiving an invoice does not charge you automatically — you must pay it. Declining it with no further action resolves the issue.","redFlags":["Unexpected PayPal invoice for a product or service you did not order","Invoice includes a phone number described as PayPal support or a cancellation hotline","Invoice is for an unusually large amount intended to create urgency","The invoice note contains a threat — if you do not call, the charge will proceed","Any remote access software request from someone claiming to be PayPal support"],"whatToDoNow":["Do not call any phone number found in a PayPal invoice — this is never PayPal's actual support","Log into your PayPal account at paypal.com directly and decline the invoice there","Mark the email notification as phishing or report it to phishing@paypal.com","Do not download any software at the request of someone claiming to process a PayPal refund","If you called the number and provided information, change your PayPal password immediately and contact your bank","Report the scam to the FTC at reportfraud.ftc.gov"],"faq":[{"question":"Will I be charged if I ignore a fraudulent PayPal invoice?","answer":"No. Declining or ignoring a PayPal invoice means no payment is processed. You are only charged when you approve and pay an invoice. Simply log in and decline it."},{"question":"How can a fraudulent invoice come from a real PayPal email address?","answer":"The invoice is created using a real (usually free) PayPal account. PayPal then sends the legitimate invoice notification on that account's behalf. The fraud is in the content and phone number, not the email sender."}],"lastReviewed":"2026-06-10"},{"slug":"is-cash-app-safe-for-buying-bitcoin","url":"https://scamencyclopedia.org/questions/is-cash-app-safe-for-buying-bitcoin","question":"Is Cash App safe for buying bitcoin?","shortAnswer":"Cash App's bitcoin feature is a legitimate regulated service for buying and selling bitcoin, but users face significant risk from third-party impersonators, fake investment schemes promoted on social media, and account security threats.","explanation":"Cash App obtained necessary money transmission licences and regulatory approvals to offer bitcoin buying and selling within the US. The in-app bitcoin feature is a straightforward buy-and-sell interface that holds bitcoin on your behalf in a custodial account, with the option to withdraw to an external wallet. This is a legitimate service from a regulated company.\n\nThe fraud risk comes primarily from outside the Cash App platform itself: scammers on Instagram, TikTok, and Twitter promise to grow your Cash App bitcoin through a doubling scheme, a special contact at the company, or a trading algorithm. These promises are always fraudulent — there is no mechanism by which sending bitcoin to a stranger results in receiving more back.\n\nAccount security is a genuine concern: Cash App accounts are targeted by phishing attacks, SIM swaps, and social engineering attempts to obtain verification codes. If an attacker gains access to your Cash App account, they can liquidate your bitcoin and transfer the proceeds out quickly.\n\nCustodial risk is also relevant: because Cash App holds your bitcoin on your behalf (similar to leaving money in a bank account rather than in your own wallet), your bitcoin is accessible through Cash App's systems rather than directly on the blockchain. For very small amounts this is acceptable; for significant holdings, many informed users prefer a hardware wallet that they control directly.","redFlags":["Social media contact offers to multiply your Cash App bitcoin in exchange for an initial deposit","Anyone claiming to be Cash App support contacts you via social media or DM to discuss your bitcoin","Unsolicited message or call asking for your Cash App PIN, sign-in code, or linked phone number","Investment platform found through social media promises guaranteed bitcoin returns","Account activity you did not initiate — change your password and enable 2FA immediately"],"whatToDoNow":["Enable Cash App's Security Lock (PIN or biometric) for every transaction","Use an authenticator app for two-factor authentication rather than SMS if possible","Access Cash App support only through the app — never through social media contacts","For significant bitcoin holdings, consider withdrawing to a hardware wallet you control","Report impersonators and investment scammers to Cash App support and to the social platform where you encountered them","File a report with the FTC and ic3.gov if you sent bitcoin to a scammer"],"faq":[{"question":"Is bitcoin I hold on Cash App protected if Cash App goes bankrupt?","answer":"Customer bitcoin on Cash App is held in a custodial account. In the event of insolvency, the treatment of customer assets depends on applicable law and the company's financial structure. Unlike cash in a bank, bitcoin is not covered by FDIC insurance."},{"question":"Can Cash App reverse a bitcoin transaction if I was scammed?","answer":"Bitcoin transactions on the blockchain are irreversible. If you sent bitcoin to a scammer from Cash App, the transaction cannot be reversed. Report to Cash App support, the FTC, and ic3.gov, but recovery is rarely possible."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-facebook-groups","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-facebook-groups","question":"How do scams work in Facebook Groups?","shortAnswer":"Facebook Groups are exploited for buy-sell fraud, fake contest giveaways, investment scheme recruitment, and impersonation of group admins to collect payments or credentials from trusted community members.","explanation":"Facebook Groups create tight-knit communities around shared interests — local towns, hobbies, parenting, financial topics — and scammers infiltrate or mimic these communities to exploit the member trust. The feeling of belonging to a community lowers the scepticism that a member might apply to a message from an unknown contact.\n\nBuy-sell groups are a primary target: a scammer joins an established local buy-sell group, lists items at attractive prices, and requests payment via Zelle or Venmo Friends before delivery. The shared group membership lends a false sense of accountability that the scammer then abandons after collecting payment.\n\nAdmin impersonation is another common pattern: a fake account that looks like the group admin messages members claiming they have won a contest, need to verify their membership, or must click a link to maintain access. These messages harvest login credentials or lead to phishing pages.\n\nInvestment and income groups created specifically to recruit are increasingly common: a group ostensibly about personal finance, side hustles, or entrepreneurship functions as a funnel toward a specific pyramid scheme, fake trading platform, or course-selling operation.","redFlags":["Group member contacts you privately about an attractive buy-sell listing and insists on Zelle or Venmo Friends","Admin-seeming account messages you privately about winning a prize or needing to verify membership","Group discussion consistently redirects to a specific investment platform or income opportunity","New member with a sparse profile is aggressively promoting a financial product","Contest winner announcement requires you to click a link to claim a prize","Group explicitly tied to a multi-level marketing brand or organisation"],"whatToDoNow":["Verify buy-sell transactions in person with cash, or use PayPal Goods and Services for protection","Check admin messages by looking at the group's admin list — not all messages from admin-looking accounts are genuine","Never click contest-claim links from group messages; navigate directly to the platform if needed","Report suspicious accounts and posts to the group admin and to Facebook using the flag feature","Be particularly sceptical of groups created around investment, passive income, or financial freedom themes"],"faq":[{"question":"Can I trust sellers in local Facebook buy-sell groups?","answer":"Group membership provides social accountability but does not guarantee honesty. Scammers join local groups specifically to exploit this trust. Verify transactions with in-person cash payment where possible, and use PayPal Goods and Services if shipping."},{"question":"How do I check whether a message is really from my Facebook Group admin?","answer":"Go to the group's member list and look for the admin badge on the account. Separately, genuine admin communications usually come through the group's announcements, not private messages requesting personal information or payment."}],"lastReviewed":"2026-06-10"},{"slug":"is-zelle-safe-for-renting-an-apartment","url":"https://scamencyclopedia.org/questions/is-zelle-safe-for-renting-an-apartment","question":"Is Zelle safe for paying rent or a rental deposit?","shortAnswer":"Zelle can be appropriate for paying rent to a verified, established landlord you already have a lease with, but is completely inappropriate for sending a deposit to someone you have never met or verified, where rental scams routinely collect money and disappear.","explanation":"Rental scams are among the most damaging fraud types by total loss value, and Zelle is a preferred collection method because transfers are instant and essentially non-reversible. A fraudster who lists a property they do not own — photos copied from a legitimate listing, a price set slightly below market to attract interest — collects deposits from multiple prospective tenants within days, then disappears before any of them arrive to find a closed door.\n\nFor existing landlord relationships where you have a signed lease, have physically entered the property, and have verified the landlord's identity, paying rent via Zelle is convenient and relatively low risk — you know the recipient and have independent documentation of the agreement.\n\nThe dangerous scenario is paying anyone — including someone claiming to be a landlord — before you have completed an in-person viewing, verified that they own or are authorised to lease the property (through public records or a licence check for property managers), and signed a formal lease agreement that you have reviewed.\n\nGovernment scams also target renters: a caller claims to be from a housing assistance programme and offers help with rent, but requires a small processing fee paid via Zelle to unlock the benefit. Legitimate government housing assistance programmes do not collect fees through Zelle.","redFlags":["Landlord asks for a deposit via Zelle before an in-person viewing of the property","Listing appears on Craigslist, Marketplace, or social media and the landlord cannot show the property in person","Landlord claims to be overseas, deployed, or otherwise unavailable for a viewing","Rental price is noticeably below comparable properties in the same area","Deposit amount is requested as a condition of holding the listing for you before a lease is signed","Government assistance offer requires a Zelle fee to release the benefit"],"whatToDoNow":["Never send any deposit for a rental without first completing an in-person viewing","Verify ownership through your county assessor's or land registry's publicly searchable records","Sign a formal, written lease before sending any money","For existing verified landlords, Zelle is a reasonable option for rent payment","If you sent a deposit and the landlord is now unreachable, contact local police and file with the FTC","Use a credit card or bank transfer with paper trail for deposits when possible"],"faq":[{"question":"How can I verify a landlord is legitimate before sending a deposit?","answer":"Search the property address in your county's tax assessor or land registry database to find the registered owner. Confirm the person you are dealing with matches that name. For managed properties, check that the management company has a real registered business and a verifiable licence."},{"question":"Is it normal for a landlord to ask for deposit via Zelle?","answer":"Some legitimate landlords do accept Zelle for established tenants. For initial deposits from new applicants, it is unusual and worth questioning. Ask for a receipt and ensure you have a signed lease before any money changes hands."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-snapchat","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-snapchat","question":"How do scams work on Snapchat?","shortAnswer":"Snapchat scams exploit the platform's disappearing-message format and young user base through drug offers that facilitate robberies, sextortion after explicit content exchanges, and financial scams targeting teens.","explanation":"Snapchat's ephemeral messaging is both a genuine privacy feature and a characteristic that makes some fraud harder to document. For younger users, the platform carries specific risks that combine digital and physical safety concerns.\n\nSextortion on Snapchat follows a familiar pattern: a contact solicits explicit images under the assumption that snaps disappear, then uses screenshots or screen recordings to demand money. The disappearing format does not prevent screenshots; Snapchat notifies of screenshots but this does not prevent the capture from being used as leverage.\n\nDrug-related scams and physical safety risks are significant on Snapchat: strangers offer drug deliveries, using the app's location and direct messaging features to arrange what may be a robbery rather than a genuine transaction, particularly targeting younger users.\n\nFinancial scams directed at teens include fake brand ambassador or influencer payment offers that require a banking app or Zelle setup, investment and crypto promises aimed at users too young to have formal financial accounts, and phishing for Snapchat Premium (a non-existent feature used to solicit payment).\n\nSnap Map — the feature that shares your real-time location — should be used in Ghost Mode for anyone who is not comfortable with their location being visible to their full contact list, and should never be shared with people met online.","redFlags":["Stranger on Snapchat solicits explicit images and quickly requests payment or begins making threats","Unknown contact offers to deliver substances or meet in person for a financial exchange","Message claiming you have been selected as a brand ambassador and requesting payment details or banking app setup","Request to share your Snap Map location with someone you have only met online","Snap promoting a crypto or investment opportunity with a referral link","Any request for your Snapchat login code — this would give the requester access to your account"],"whatToDoNow":["Enable Ghost Mode on Snap Map so your location is not shared publicly","Never send explicit images to anyone you have not thoroughly verified in person","If sextorted, do not pay — report to local police, the FBI ic3.gov, and NCMEC's CyberTipline","Report suspicious contacts to Snapchat using the report function on their profile","Do not share your Snapchat login credentials or verification codes with anyone","Parents should review Snapchat's Family Center features to monitor and manage younger accounts"],"faq":[{"question":"Does Snapchat prevent screenshots of private conversations?","answer":"Snapchat notifies you if a recipient takes a screenshot, but this does not prevent the screenshot from being taken or used. Third-party apps and screen recording tools can capture snaps without triggering the notification. Assume that any image you send may be retained."},{"question":"How can parents protect younger teens on Snapchat?","answer":"Snapchat's Family Center allows a parent account to see who their teen is messaging (not the message contents) and to enable safety controls. Setting Snap Map to Ghost Mode and reviewing privacy settings together is a practical starting point."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-google-pay-and-apple-pay","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-google-pay-and-apple-pay","question":"How do scams work using Google Pay and Apple Pay?","shortAnswer":"Google Pay and Apple Pay themselves are secure payment technologies, but scammers misuse them through social engineering — tricking victims into authorising payments to fraudulent accounts using the same convenience that makes the apps popular.","explanation":"Google Pay and Apple Pay use tokenisation and biometric authentication to make card payments highly secure from a technical standpoint. Fraud involving these services almost never involves breaking the technology; instead, it involves tricking users into willingly authorising payments through emotional manipulation.\n\nPhone-based scams are the most common vector: a caller claiming to be from a bank fraud team, government agency, or utility company directs the victim to open a payment app and send money to a safe account or to settle an overdue balance. The caller may know personal information about the victim to add credibility. The victim's biometric authentication authorises the payment — the security measure is bypassed through human trust, not technology.\n\nIn-person social engineering also occurs: a person approaches you with a phone, claiming to have sent you money via Apple Pay or showing a false payment confirmation, and asks you to send them money in return. Verify all incoming payments in your own banking app before sending anything.\n\nPhishing for Apple ID or Google account credentials is indirectly related: with access to your Apple ID or Google account, an attacker could potentially add their own payment method or access payment history, though the apps' security design limits this risk significantly with device-bound authentication.","redFlags":["Any caller asking you to open a payment app and send money to resolve an issue","Person showing you a payment confirmation screenshot and asking for money in return","Claimed emergency that creates pressure to authorise a large payment quickly","Request to add a new card to Apple Pay or Google Pay at someone else's direction","Email or message requesting your Apple ID or Google account credentials","Government agency, utility, or bank that claims payment must be made via Apple Pay or Google Pay"],"whatToDoNow":["Verify any incoming payment in your bank's own app before sending funds in return","Remember that no legitimate government agency or utility uses Apple Pay or Google Pay as a payment demand channel","Hang up on any caller asking you to open a payment app — call back on a verified number","Enable strong authentication on your Apple ID and Google account with a password manager and 2FA","Report fraudulent transaction requests to Apple or Google and to your bank","File a report with the FTC if you sent money in response to social engineering"],"faq":[{"question":"Can scammers steal money from Apple Pay or Google Pay without my knowledge?","answer":"Unauthorised transactions through these apps are rare due to device-bound biometric authentication. The more realistic risk is being socially engineered into authorising a payment yourself, or having your Apple ID or Google account compromised to access payment data."},{"question":"Is a contactless card payment safer than Apple Pay or Google Pay?","answer":"Apple Pay and Google Pay are generally considered at least as secure as contactless physical card payments because they use tokenisation, meaning your actual card number is not transmitted. Physical card contactless payments are also relatively secure but carry marginally more risk from skimming devices."}],"lastReviewed":"2026-06-10"},{"slug":"is-instagram-safe-for-investing","url":"https://scamencyclopedia.org/questions/is-instagram-safe-for-investing","question":"Is Instagram safe for investing?","shortAnswer":"Instagram is not a safe channel for investing — the vast majority of investment promotions on the platform are either fraudulent or involve unregistered products, and its influencer culture creates an environment where fabricated profit claims spread rapidly.","explanation":"Instagram's visual format and influencer culture make it unusually effective at conveying aspirational wealth, which scammers and unregistered financial promoters exploit extensively. A feed full of luxury cars, designer goods, and profit screenshots may represent a decade of legitimate success or a few minutes in a rental car with a fabricated spreadsheet.\n\nCrypto and forex investment schemes on Instagram follow consistent patterns: an influencer or a stranger in your DMs promotes a trading platform, often referencing their own fabricated results. Many of these individuals are paid affiliates who earn commission when you sign up and deposit, regardless of whether the platform is appropriate, regulated, or even honest.\n\nPig-butchering romance variant: a visually polished stranger makes contact, builds a relationship over weeks, and introduces an investment platform. The Instagram context — an attractive, curated feed that suggests a real, successful life — adds credibility that a cold message would not have.\n\nEven influencer promotions for legitimate investment products may violate financial promotion regulations in many jurisdictions, meaning the products themselves are unsuitable for retail investors or the promoters are not authorised. Checking whether an investment is registered with your financial regulator before committing any funds is essential.","redFlags":["Influencer post or story promotes a specific trading or crypto platform with a link or discount code","Stranger contacts you after following your account and mentions investment casually in early messages","Profit screenshots shared in feed or DMs without any verifiable source or audited performance record","Platform promoted has no verifiable regulatory registration","Promises of passive income or guaranteed returns from any investment strategy","Offer available for a limited time, creating urgency to deposit before research is possible"],"whatToDoNow":["Check any investment platform's regulatory status on your national financial regulator's register before depositing","Never invest based on Instagram influencer promotion alone — research independently","Be especially cautious when an investment is introduced through a romantic or social connection made on Instagram","Report unregistered investment promotions to your financial regulator","If you deposited on a fraudulent platform, stop adding funds and report to the FTC and ic3.gov","Speak to a regulated, independent financial advisor before making significant investment decisions"],"faq":[{"question":"Are Instagram influencers allowed to promote investment products?","answer":"In most jurisdictions, promoting investment products requires regulatory authorisation. Influencers who promote unregistered investments or who are not authorised to do so may be in violation of financial promotion rules. Many are paid affiliates rather than independent advisors."},{"question":"How can I tell if a trading platform promoted on Instagram is legitimate?","answer":"Search the platform name on your national financial regulator's register. Look for a verifiable business address, published terms and conditions, and third-party reviews on independent platforms. Be especially cautious of platforms only known from Instagram promotions."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-match-com-and-paid-dating-sites","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-match-com-and-paid-dating-sites","question":"How do scams work on Match.com and paid dating sites?","shortAnswer":"Paid dating sites face the same romance fraud as free apps, but scammers exploit the belief that a paying membership means greater user quality — leading victims to be less cautious about the same red flags they might notice on a free platform.","explanation":"Paid dating sites including Match.com, eHarmony, and similar platforms attract users partly on the premise that a subscription fee creates a more serious, vetted user base than free alternatives. Scammers exploit this belief: the fact that a user has paid for a subscription is presented implicitly or explicitly as evidence of genuine intent, making victims lower their guard.\n\nRomance fraud operates identically on paid platforms as it does elsewhere: a convincing profile initiates contact, builds an emotional connection over days or weeks, then introduces a financial request — usually framed as an emergency, an investment opportunity, or a request for gift cards. The subscription requirement does not deter scammers who are targeting losses of thousands of dollars; the fee is a small operational cost.\n\nSome paid platforms also struggle with retention tactics that can shade into deceptive practices: auto-renewal charges that are not clearly communicated, difficulty cancelling subscriptions, or additional features that require separate payment. These are not romance scams but represent billing practices that warrant careful review of terms before subscribing.\n\nFor any paid dating platform, the same safety rules apply as for free apps: video call before meeting, meet in public, never send money, and report suspicious profiles immediately.","redFlags":["Match assumes the subscription fee proves they are genuine and references it to establish trust","Profile was clearly recently created but already claims long membership experience","Match quickly wants to move off the platform to email or WhatsApp","Any money request, regardless of how sympathetically framed, after any length of connection","Subscription auto-renews at a rate not clearly communicated at sign-up","Profile seems too perfect and photos return different identities in reverse image search"],"whatToDoNow":["Apply the same caution to paid platforms as to free dating apps — subscription fees do not vet character","Video call a match before building significant emotional investment in the connection","Review the cancellation and auto-renewal terms before subscribing to any paid platform","Never send money to any online match regardless of platform type","Report suspicious profiles through the platform's in-app report feature","Check your bank statement to confirm subscription charges match what you agreed to"],"faq":[{"question":"Does a paid dating subscription mean the site is better at screening users?","answer":"Paid subscriptions reduce casual users to some extent, but they do not verify identity or intentions. Romance scammers treat the subscription fee as an operating cost and actively target paid platforms because users there are perceived as more trusting."},{"question":"What should I do if a paid dating site is billing me without my consent?","answer":"Review the subscription terms — many sites require you to opt out of auto-renewal. If charges were not clearly authorised, contact the platform's customer service and, if unresolved, dispute the charge with your card issuer or bank."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-ticketing-platforms","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-ticketing-platforms","question":"How do scams work on secondary ticketing platforms?","shortAnswer":"Secondary ticketing scams range from entirely fake tickets to real tickets that have been sold multiple times, often using PDF or digital ticket codes that look authentic but are either invalid or have been already scanned at entry.","explanation":"Concert, sports, and event ticket fraud has existed for decades, but digital ticketing has created new vectors. A ticket is now a QR code, which can be copied, sold multiple times, or manufactured convincingly from a template. The buyer who pays for a fake or duplicate ticket discovers the problem only at the venue entrance.\n\nFake ticket websites mimic official or established secondary platforms — similar domain names, professional designs, and seemingly secure checkout pages. Victims receive a PDF with a realistic-looking ticket that fails to scan at the door because the barcode either does not exist in the venue's system or has already been scanned.\n\nMultiple-sale fraud occurs when a seller with a real ticket sells it on one platform, sends the PDF or screenshot to the buyer, and then resells the same ticket to another buyer, or to multiple buyers. Only the first buyer to reach the scanner gains entry; all others are refused.\n\nOfficial ticket platforms with their own buyer guarantee — such as Ticketmaster's Fan-to-Fan resale, AXS Transfer, or similar systems — provide significantly more protection than anonymous marketplace sales because the ticket transfer is managed through the venue's official ticketing system, making duplication impossible.","redFlags":["Ticket offered well below face value or well below market resale price for a high-demand event","Seller on a social media platform or classifieds site rather than an established ticketing marketplace","Payment requested via Zelle, Venmo Friends, or crypto with no buyer protection","Ticket is only available as a PDF or screenshot rather than through an official digital transfer","Seller claims they cannot attend and must sell urgently, especially as the event approaches","Site URL that resembles an official platform but has subtle domain variations"],"whatToDoNow":["Buy from official venue box offices or their designated authorised resellers whenever possible","For secondary market purchases, use platforms that facilitate official ticket transfers within the venue's own system","Pay by credit card for chargeback rights if a ticket turns out to be invalid","Verify the resale website URL matches the official platform exactly before entering payment details","If you received a fake ticket, dispute with your card issuer and report to the FTC","For high-demand events, buy as early as possible from official channels to avoid the secondary market entirely"],"faq":[{"question":"Are PDF tickets safe to accept for a concert or sports event?","answer":"A PDF ticket is only as reliable as the source. A PDF from an official venue or authorised reseller is generally valid. A PDF from an individual seller on social media or classifieds carries significant risk of being fake or already used."},{"question":"What can I do at the venue if my ticket fails to scan?","answer":"Contact the venue's box office or customer service at the entrance immediately. If you have proof of purchase, they may be able to investigate. File a report with the FTC and dispute the payment with your card issuer after the event."}],"lastReviewed":"2026-06-10"},{"slug":"is-linkedin-safe-for-investing","url":"https://scamencyclopedia.org/questions/is-linkedin-safe-for-investing","question":"Is LinkedIn safe for investment advice and financial decisions?","shortAnswer":"LinkedIn investment promotions range from legitimate regulated content to outright fraud — the platform's professional veneer makes fraudulent investment pitches appear more credible than they would on a consumer social network.","explanation":"LinkedIn hosts genuine finance professionals — advisors, analysts, fund managers — who share legitimate market commentary and educational content. It also hosts a significant population of unregistered financial promoters, pyramid scheme recruiters, and outright fraudsters who use the professional context to lend credibility to dubious offerings.\n\nThe connection-based network creates a false sense of endorsement: if you see that a mutual connection is linked to a financial promoter, you may assume the promoter has been vetted by someone you know. This is rarely the case — connections are freely formed without any endorsement of professional conduct.\n\nInvestment scheme operators on LinkedIn create convincing profiles with experience listed at legitimate-sounding firms, endorsements from other scheme participants, and content that mimics the style of genuine financial commentary. The initial contact may be a connection request followed by an offer to discuss an exclusive opportunity.\n\nFor any investment recommendation made through LinkedIn, the verification process is the same as anywhere else: check regulatory registration, consult an independent advisor, and do not make investment decisions based on social media context alone.","redFlags":["New connection immediately presents an investment opportunity in their first message","Profile lists impressive financial credentials that cannot be verified against any regulatory register","Opportunity is described as exclusive, time-sensitive, or available only to a select group","Promoted investment is not registered or mentioned on any financial regulator's register","Connection was made specifically to introduce a trading platform or investment scheme","Earnings claims or performance history cannot be independently verified through a third party"],"whatToDoNow":["Verify any financial professional's regulatory registration before engaging with their recommendations","Check claimed experience against the companies listed — large firms have verifiable staff directories","Report unregistered investment promotions to your financial regulator and LinkedIn's reporting tool","Consult an independent, fee-only financial advisor before making significant investment decisions","Treat any unsolicited investment opportunity on LinkedIn with the same caution as a cold call"],"faq":[{"question":"How do I report a fraudulent investment promoter on LinkedIn?","answer":"Use the three-dot menu on their profile to select Report. Select the category that best describes the violation. You can also report the content of specific posts. Filing a report with your financial regulator is separately advisable for potentially unregistered financial promotions."},{"question":"Can I trust investment content from LinkedIn-verified accounts?","answer":"LinkedIn verification confirms the account owner's identity is associated with a listed email domain — it does not verify their qualifications, regulatory status, or the accuracy of their investment claims. Verify credentials independently."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-pinterest","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-pinterest","question":"How do scams work on Pinterest?","shortAnswer":"Pinterest scams involve fake product pins that link to fraudulent shops, counterfeit goods, phishing pages disguised as login prompts, and pyramid or network marketing recruitment dressed up as lifestyle and income content.","explanation":"Pinterest is a visually driven inspiration platform where scammers create convincing pins that appear to offer exactly the kind of product or income opportunity a user's browsing history has shown they are interested in. Because pins link to external websites, the platform's own appearance provides no guarantee about the destination.\n\nFake shop pins are the most common consumer threat: a pin shows a beautifully photographed product — clothing, home decor, jewellery — and links to a website that looks legitimate, accepts payment, and never ships the order or ships something entirely different. The shop website may be very convincingly designed, with stock photos, fabricated reviews, and real payment processors.\n\nPyramid scheme and network marketing recruitment is rampant on Pinterest in the form of aspirational income content — pin boards showing laptops on beaches and claims of five-figure monthly incomes from home-based businesses. These lead to multi-level marketing recruitment funnels.\n\nPhishing pins mimic popular brands and claim you have won a gift card or prize, directing you to a page that requests your email and payment details to claim. Legitimate brand promotions are run through official brand accounts, not through random third-party pins.","redFlags":["Pin links to an online shop with no verifiable business address or returns policy","Product is heavily discounted compared to the same item on the brand's official site","Income or lifestyle pin leads to a multi-level marketing or network marketing recruitment page","Prize or giveaway pin asks for payment details to claim a reward","Pin links to a site that mimics a major retailer but has a slightly different URL","Shop site accepts payment but has no traceable business registration or phone number"],"whatToDoNow":["Search the shop name independently on review platforms before purchasing from a Pinterest-linked site","Check the destination URL before entering payment details — it should match the brand's known domain exactly","Pay by credit card for any purchase from an unfamiliar site for chargeback rights","Report fraudulent pins using the flag icon on the pin","Dispute charges with your card issuer if goods are not delivered or are significantly misrepresented","Be sceptical of any income claim that cannot be independently verified through public sources"],"faq":[{"question":"Are there consumer protections if I buy from a site found through Pinterest?","answer":"Pinterest itself does not provide buyer protection for external purchases. Your protection comes from your payment method — credit card chargeback, PayPal Goods and Services dispute — and from consumer protection laws in your jurisdiction."},{"question":"How do I tell a legitimate income pin from MLM recruitment?","answer":"Legitimate business content describes specific products or services with verifiable revenue sources. MLM recruitment pins emphasise personal freedom, unlimited income potential, and joining a team, with no clear description of what is actually being sold to end consumers."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-reddit","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-reddit","question":"How do scams work on Reddit?","shortAnswer":"Reddit scams exploit community trust through fake moderator impersonation, subreddit-specific buy-sell fraud, pump-and-dump coordination for low-cap assets, and technical support impersonation in help communities.","explanation":"Reddit's community-moderated structure creates subreddits with strong in-group trust that scammers infiltrate or exploit. The platform's voting and karma system provides a false but sometimes convincing veneer of credibility for accounts that have invested time building a history.\n\nFake moderator DMs are a persistent threat: a message arrives appearing to be from a subreddit moderator warning that your account is at risk, that you need to verify, or that you can claim a prize. Real subreddit moderators do not DM users to solicit personal information or payment.\n\nBuy-sell subreddits such as r/hardwareswap, r/gameswap, and others have well-developed community rules and reputation systems, but fraud still occurs. New or hijacked accounts with fabricated positive trade histories request payment via Zelle or Friends and Family before shipping and then disappear.\n\nCryptocurrency subreddits are targeted by coordinated pump-and-dump operations where early holders of low-cap tokens encourage buying through community posts, driving up prices before selling. Separately, fake customer support accounts for exchanges and wallets reply to users posting problems, offering to resolve the issue in DMs — a credential-theft operation.","redFlags":["DM from an account claiming to be a moderator asking for verification or offering a prize","Buy-sell participant with low account age and no independent verification requesting Zelle or Friends and Family","Coordinated posts across multiple accounts in a crypto subreddit promoting the same obscure token","Account replies to your support request in a public thread and immediately redirects to DM","Account offers to resolve a crypto exchange or wallet issue in exchange for seed phrase or credentials","New account with suspicious karma distribution offering high-value goods at below-market prices"],"whatToDoNow":["Use official subreddit confirmation systems and trade history tracking when buying in community swap forums","Pay via PayPal Goods and Services for any buy-sell transaction for dispute protection","Verify any claimed moderator by checking the subreddit's public moderator list","For crypto or tech help, use the official company's support channels, not DMs from Reddit accounts","Report suspicious accounts and posts using the report function and notify the subreddit's moderation team","File with the FTC if you lost money in a Reddit-based transaction"],"faq":[{"question":"How do I verify a Reddit user's trade history before buying from them?","answer":"Many buy-sell subreddits maintain a confirmation thread where completed trades are recorded. Check the user's history in that thread and look for verified confirmations from established community members, not just karma or comment activity."},{"question":"Should I ever provide crypto wallet credentials to someone who replied to my Reddit support post?","answer":"Never. Seed phrases and private keys should never be shared with anyone under any circumstances. A legitimate support response in a public forum will point you to official resources, not request credentials in a DM."}],"lastReviewed":"2026-06-10"},{"slug":"is-whatsapp-safe-for-business-payments","url":"https://scamencyclopedia.org/questions/is-whatsapp-safe-for-business-payments","question":"Is WhatsApp safe for business payments in countries where WhatsApp Pay is available?","shortAnswer":"WhatsApp Pay in supported countries provides a regulated payment layer, but the messaging platform remains a social engineering vector that scammers exploit to intercept or redirect business payments regardless of the payment mechanism used.","explanation":"WhatsApp Pay is available as a regulated payment service in markets including India and Brazil, operating through partnerships with licensed financial institutions and subject to relevant payment regulations. For small, domestic, in-country transactions between verified contacts in these markets, WhatsApp Pay provides a relatively secure and convenient option.\n\nHowever, the security of the payment layer does not address the social engineering risk inherent in WhatsApp messaging. Business email compromise via WhatsApp is documented: attackers who have gained access to a supplier or employee's WhatsApp account, or who have created a convincing impersonation, instruct the receiving business to change payment details or to make an urgent transfer. The instruction arrives over what appears to be a trusted channel.\n\nFor businesses using WhatsApp to communicate with suppliers, clients, or employees, any change to payment details — account numbers, payment recipients, amounts — should be independently verified through a separate, confirmed channel before acting. This is true regardless of whether WhatsApp Pay or external bank transfers are used.\n\nIn countries where WhatsApp Pay is not available, any request to make a payment via a method introduced through WhatsApp should be treated with heightened scepticism, as the platform provides no native commercial transaction protection in those markets.","redFlags":["Supplier or employee WhatsApp contact provides new bank details and asks you to update your payment records","Urgent payment request arrives over WhatsApp without corresponding official invoice or email confirmation","Business contact's writing style or urgency seems different from normal communication","WhatsApp message requests a payment to an individual account rather than a business account","Request to bypass normal payment authorisation procedures because of an emergency","Payment request uses emotional or time pressure to prevent verification"],"whatToDoNow":["Always verify payment detail changes through a separate, independently verified phone call or email","Establish a formal procedure for payment authorisation that requires more than one communication channel","Train staff to treat any WhatsApp-based payment instruction change as requiring secondary verification","Report any suspected business account compromise to WhatsApp and to the company whose account may be impersonated","For significant international business payments, use formal banking channels with documented verification procedures"],"faq":[{"question":"Is WhatsApp Pay regulated the same way as a bank transfer?","answer":"WhatsApp Pay operates through licensed payment partners in supported countries and is subject to applicable payment regulations in those markets. However, the nature of the regulatory protection varies by country and is generally more limited than a traditional bank wire transfer."},{"question":"Can a business's WhatsApp account be hacked to intercept communications?","answer":"Yes, through SIM-swap attacks, malware on the business owner's device, or social engineering that obtains the six-digit WhatsApp verification code. Two-step verification and a strong device PIN provide additional protection against account takeover."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scams-work-on-gaming-platforms","url":"https://scamencyclopedia.org/questions/how-do-scams-work-on-gaming-platforms","question":"How do scams work on gaming platforms like Steam and PlayStation Network?","shortAnswer":"Gaming platform scams target players through fake trade offers for in-game items, phishing for account credentials to steal valuable game libraries, and fake tournament entry fees or prize claim requests.","explanation":"Major gaming platforms including Steam, PlayStation Network, Xbox Live, and in-game marketplaces host real economic value — digital game libraries worth hundreds of dollars, rare in-game items with real-money trading markets, and accounts with years of achievement history. This value makes them attractive targets for fraud.\n\nAccount phishing is the most damaging attack: a fake Steam login page, a malicious link in a game chat or a Discord server, or a spoofed email claiming your account has been compromised directs you to enter credentials. Once an attacker has your login, they can strip your inventory of valuable items, transfer games, or sell the account. Steam Guard (or equivalent 2FA) is the critical defence.\n\nIn-game item trade scams are common on platforms with player-to-player economies: a trade is proposed that shows you receiving a valuable item, but a last-second substitution occurs — a very similar-looking but much less valuable item is placed in the trade slot. Victims who do not carefully examine the final trade confirmation lose real value.\n\nFake tournament or beta access scams request an entry fee or personal payment to join an exclusive event or gain early access to a game. Legitimate gaming tournaments and beta programmes do not require payment from participants.\n\nFree in-game currency, rare item, or cheat-software offers almost always lead to phishing pages or malware downloads. No legitimate source provides these outside the official game client.","redFlags":["Trade offer that changes content in the final moments before you confirm","Message offering free in-game currency, items, or account upgrades through an external link","Tournament or beta access requiring payment before you can participate","Email about your gaming account links to a login page that is not the platform's official domain","Stranger in game chat offering to buy your account or trade at prices far above market value","Download linked as a cheat, mod, or enhancement tool from an unofficial source"],"whatToDoNow":["Enable two-factor authentication on all gaming platform accounts — Steam Guard, PlayStation 2SV, etc.","Read every trade confirmation detail carefully before accepting, especially item names and rarity levels","Access your gaming accounts only through the official client or by typing the URL directly — never through links in chat","Never download cheats, bots, or third-party enhancement tools — they frequently contain credential stealers","Report fraudulent players and chat messages using the in-game or platform report function","Contact platform support immediately if you suspect your account has been compromised"],"faq":[{"question":"Can I recover my Steam account and items if it was hacked?","answer":"Steam has an account recovery process through its support system. Items stolen through fraud may be recoverable if reported quickly. Enable Steam Guard before an incident occurs — it is far easier than recovery after the fact."},{"question":"Are third-party in-game item trading sites legitimate?","answer":"Some third-party trading sites operate legitimately, but they vary greatly in trustworthiness. Only use well-established sites with verifiable reputation in the community, enable all available account security features, and be cautious of unusually favourable offers."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-scam-to-the-ftc","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-scam-to-the-ftc","question":"How do I report a scam to the FTC?","shortAnswer":"Visit ReportFraud.ftc.gov and complete the online form. The FTC does not resolve individual complaints but uses reports to build cases and alert consumers.","explanation":"The Federal Trade Commission (FTC) is the United States' primary consumer protection agency. To file a report, go to ReportFraud.ftc.gov, select the type of scam, and provide as much detail as you can: dates, amounts, contact information you were given, and copies of any messages or receipts. You do not need to create an account to submit a report.\n\nThe FTC collects reports from millions of Americans each year and uses the data to identify patterns, issue consumer alerts, and pursue enforcement actions against large scam operations. Individual reports help investigators see when the same phone number, website, or tactic appears across many victims in different states.\n\nAfter submitting, the FTC will send you a personalised recovery plan to ReportFraud.ftc.gov. This plan outlines next steps based on what happened to you, such as placing a fraud alert, contacting your bank, or changing passwords. Keep a copy of your FTC report number.\n\nIf you lost money, also file with the FBI at IC3.gov and with your state attorney general. Reporting to multiple agencies increases the chance that investigators with the right jurisdiction take action. See /report-a-scam for a full checklist.","redFlags":["The person or website asked for payment via wire transfer, gift cards, or cryptocurrency","You were told to keep the transaction secret","The offer was only available for a very short time","Contact came out of the blue by phone, text, or email","The caller claimed to be from a government agency and demanded immediate payment","You were asked for Social Security, bank account, or login details"],"whatToDoNow":["Go to ReportFraud.ftc.gov and file a detailed report","Note your FTC report number for future reference","Follow the personalised recovery steps the FTC provides","Report to your state attorney general at naag.org","Contact your bank or card issuer if money changed hands","File with IC3.gov if the fraud involved the internet"],"faq":[{"question":"Does the FTC contact me after I report?","answer":"The FTC does not typically contact individual reporters. However, investigators may reach out if your report is part of a larger investigation. The agency sends an automated recovery plan by email when you submit online."},{"question":"Can I report anonymously to the FTC?","answer":"Yes. You can submit a report without providing your personal contact details, though adding your information makes it easier for investigators to follow up."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-scam-to-the-fbi-ic3","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-scam-to-the-fbi-ic3","question":"How do I report a scam to the FBI IC3?","shortAnswer":"File a complaint at IC3.gov, the FBI's Internet Crime Complaint Center. IC3 handles internet-facilitated fraud and shares reports with federal and local law enforcement.","explanation":"The Internet Crime Complaint Center (IC3) is operated by the FBI and accepts complaints about crimes that involve the internet, including email fraud, online shopping scams, investment fraud, ransomware, and business email compromise. To file, go to IC3.gov, click 'File a Complaint,' and complete the form with details about the incident, the losses involved, and any contact information associated with the scammer.\n\nIC3 analysts review complaints and route them to appropriate law enforcement agencies including the FBI, Secret Service, Postal Inspection Service, and state and local police. Cases with significant dollar losses or multiple victims across states are more likely to result in active investigations.\n\nBe thorough when filling out the form: include IP addresses from suspicious emails if available, URLs of fraudulent websites, names and phone numbers you were given, transaction IDs for any cryptocurrency or wire transfers, and screenshots of conversations. The more evidence you provide, the more actionable your complaint becomes.\n\nIC3 also publishes an annual Internet Crime Report with national statistics. For scams that do not involve the internet, report to the FTC at ReportFraud.ftc.gov instead. Visit /report-a-scam for a side-by-side guide to all reporting channels.","redFlags":["You received a fraudulent email, text, or social media message","A website solicited payment and then disappeared","An investment opportunity promised guaranteed returns online","You were infected with ransomware or spyware","Funds were transferred via wire or cryptocurrency at the scammer's direction","A business email was compromised and a fraudulent payment was made"],"whatToDoNow":["Go to IC3.gov and file a complaint with full details","Attach screenshots, email headers, and transaction records","Also report to the FTC at ReportFraud.ftc.gov","Contact your financial institution immediately to attempt a recall","Preserve all evidence: do not delete messages or accounts","Consult /recovery for next steps after filing"],"faq":[{"question":"Does the FBI investigate every IC3 complaint?","answer":"No. IC3 aggregates complaints to identify patterns. Individual reports contribute to larger cases but the vast majority do not lead to individual prosecution, especially for smaller losses or overseas perpetrators."},{"question":"What is the deadline for filing with IC3?","answer":"There is no hard deadline, but you should file as quickly as possible. Quick reports allow investigators to freeze funds or take down fraudulent websites before evidence disappears."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-scam-to-action-fraud-uk","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-scam-to-action-fraud-uk","question":"How do I report a scam to Report Fraud in the UK?","shortAnswer":"Report online at reportfraud.police.uk or by calling 0300 123 2040. Report Fraud is the UK's national reporting centre for fraud and cybercrime.","explanation":"Report Fraud is run by the City of London Police and serves as the central reporting point for fraud in England, Wales, and Northern Ireland. You can report online 24 hours a day at reportfraud.police.uk or speak to a specialist adviser over the phone. Scotland uses a separate system: report to Police Scotland by calling 101.\n\nWhen you report, you will be given a crime reference number. This is important for insurance claims, bank disputes, and follow-up investigations. You will also be passed to the National Fraud Intelligence Bureau (NFIB), which analyses reports and disseminates intelligence to police forces most likely to take action.\n\nFor reports involving significant losses or an ongoing scam, also contact your bank's fraud team immediately. Many UK banks participate in the Faster Payments repatriation scheme and can sometimes recover money if you act within 24 hours. The Financial Ombudsman Service can adjudicate if your bank refuses to reimburse you.\n\nConsumer scams such as fake goods, subscription traps, or misleading adverts can also be reported to Citizens Advice or Trading Standards via the Citizens Advice consumer helpline. These bodies handle civil rather than criminal matters.","redFlags":["You were contacted out of the blue and pressured to act fast","A seller or buyer insisted on unusual payment methods","A company asked for upfront fees to release a prize or inheritance","A romance contact asked for money before meeting in person","An investment platform made it impossible to withdraw funds","Your bank account or personal details were used without your permission"],"whatToDoNow":["Report at reportfraud.police.uk or call 0300 123 2040","Save your crime reference number","Contact your bank's fraud team as soon as possible","Report to Citizens Advice for consumer or trading issues","Change passwords and enable two-factor authentication on accounts","Visit /report-a-scam for a full UK reporting checklist"],"faq":[{"question":"Will Report Fraud investigate my case directly?","answer":"Report Fraud collects and passes reports to the NFIB, which routes them to police forces. Most cases are not investigated individually, but your report contributes to intelligence that leads to larger investigations."},{"question":"Can I report a scam to Report Fraud if I am not in the UK?","answer":"Report Fraud only covers England, Wales, and Northern Ireland. If you are overseas and targeted by a UK-based scam, you can still report but your case may be lower priority."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-scam-to-my-bank","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-scam-to-my-bank","question":"How do I report a scam to my bank?","shortAnswer":"Call the fraud number on the back of your card or in your banking app immediately. The sooner you call, the better the chance of stopping or reversing a fraudulent payment.","explanation":"Your bank or building society has a dedicated fraud team that operates around the clock. Look for the fraud contact number on the back of your debit or credit card, in your mobile banking app under 'Security' or 'Help,' or on the official website. Do not use a phone number given to you by the scammer, and do not call back a number that appeared on your screen during a suspicious call.\n\nWhen you speak to the fraud team, explain that you believe you have been scammed. They will review the transaction, potentially place a hold on your account, and begin an investigation. Under rules in the UK and many US states, banks have specific obligations to investigate fraud claims within defined timeframes. In the UK, the Authorised Push Payment (APP) reimbursement rules require most banks to refund victims of bank transfer fraud up to defined limits.\n\nGather everything before you call: the date and amount of each transaction, the account or reference number you sent money to, screenshots of conversations, and any emails or texts related to the scam. The more detail you provide, the stronger your chargeback or reimbursement case.\n\nIf you paid by credit or debit card, you may also be able to raise a chargeback claim through your card network. For credit card purchases over a certain amount in the UK, Section 75 of the Consumer Credit Act gives you a legal right to a refund from the card issuer as well as the retailer.","redFlags":["You were persuaded to transfer money to a 'safe account'","A caller impersonated your bank and asked you to confirm a one-time passcode","You paid an invoice that turned out to belong to a fraudster","A recurring payment appeared on your statement that you did not authorise","Your card details were used for purchases you did not make","You received a refund into your account that you did not request"],"whatToDoNow":["Call your bank's fraud line immediately using the number on your card","Tell them the payment was made under false pretences","Request a freeze on the destination account if possible","Raise a chargeback if you paid by card","File a police report or contact Report Fraud (formerly Action Fraud) / the FTC for a crime reference","Visit /recovery for a full timeline of steps"],"faq":[{"question":"How long does a bank fraud investigation take?","answer":"In the UK, banks must resolve most fraud claims within 15 business days, or up to 35 days in complex cases. In the US, the Electronic Fund Transfer Act requires banks to investigate and resolve claims within 10 business days for most transactions."},{"question":"What if my bank refuses to refund me?","answer":"In the UK you can escalate to the Financial Ombudsman Service. In the US you can file a complaint with the Consumer Financial Protection Bureau (CFPB) or your state banking regulator."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-scam-to-an-online-platform","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-scam-to-an-online-platform","question":"How do I report a scam to an online platform?","shortAnswer":"Use the platform's built-in 'Report' button on the profile, listing, or message, then follow up with a written complaint to their support team referencing fraud or impersonation.","explanation":"Every major social network, marketplace, and messaging app has a reporting mechanism built into the interface. On Facebook and Instagram, tap the three-dot menu on any post, ad, or profile and choose 'Report.' On eBay or Amazon, use 'Report this seller' or 'Report a problem' in the order details. On WhatsApp, long-press a message and select 'Report.' These in-app reports feed into the platform's trust and safety teams.\n\nIn-app reporting alone may not be enough if you lost money. Follow up by emailing the platform's support team directly, clearly stating you were defrauded, including the username or listing URL of the scammer, the dates and amounts involved, and copies of all evidence. Use subject lines that include words like 'fraud,' 'impersonation,' or 'financial crime' to ensure the message reaches a specialist team.\n\nFor platforms operating in the EU, the Digital Services Act requires large platforms to have dedicated reporting channels for illegal content and fraud. In the US and UK, platforms are generally not legally liable for hosting scam content but many will remove it voluntarily and may share account data with law enforcement under a court order.\n\nAlways also report to the relevant national authority (FTC, IC3, Report Fraud (formerly Action Fraud), ACCC) in addition to the platform. Platform reports alone rarely result in money recovery; official reports create the paper trail needed for financial disputes.","redFlags":["A seller or buyer's account was created very recently and has no reviews","Conversations were moved off-platform to WhatsApp or Telegram","The other party refused to use the platform's official payment system","Prices were suspiciously below market value","You were sent a fake platform-branded invoice or payment confirmation","The account profile picture appears elsewhere on the internet"],"whatToDoNow":["Use the in-app report button on the scammer's profile or listing","Email platform support with full evidence and the word 'fraud' in the subject","Preserve screenshots before the account is removed","Report to the FTC or Report Fraud with the platform report as evidence","Contact your bank if any payment was made","Check /platforms for platform-specific fraud policies"],"faq":[{"question":"Will the platform tell me what action they took?","answer":"Most platforms do not disclose specific enforcement actions for privacy reasons, but they may send a generic message saying they have reviewed your report and taken action."},{"question":"Can I get a refund through the platform?","answer":"Marketplaces like eBay and Amazon have buyer protection programs that can refund you if a seller committed fraud. Social networks generally do not offer financial restitution. Check the platform's buyer protection policy."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-scam-to-the-police","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-scam-to-the-police","question":"How do I report a scam to the police?","shortAnswer":"For non-emergency scams, call your local police non-emergency line or file online. For ongoing crimes or physical danger, call 911 (US) or 999 (UK) immediately.","explanation":"Most financial scams are handled by specialist fraud units rather than patrol officers, so calling your local police station directly may result in being redirected. In the US, many city and county police departments allow online crime reporting for fraud at their official website. Look for an online crime report portal or call the non-emergency number (not 911 unless you are in immediate danger).\n\nIn the UK, report to your local police via 101 for non-urgent matters, or online at your force's website. The police will usually refer the matter to Report Fraud (formerly Action Fraud) unless there is a local suspect or ongoing criminal activity such as courier fraud where a criminal is actively visiting your address.\n\nHaving a police report number is valuable even if the police cannot investigate directly. Your bank, insurance company, and credit reference agency will often request a crime reference number to process fraud claims. It also demonstrates you took prompt action, which matters for chargeback timelines.\n\nIf you are elderly, vulnerable, or the scammer is still in contact with you, tell the police officer on the call. Many forces have dedicated vulnerability teams that can assist beyond the standard report process. For investment fraud or pension scams, also report to your national financial regulator.","redFlags":["A scammer continues to contact you after you stopped responding","Someone used your identity to open accounts in your name","You received courier fraud calls pretending to be police asking for your bank card","A scam involved threats of violence or blackmail","Your home address was obtained by a fraudster","You witnessed an in-person scam targeting a neighbour or family member"],"whatToDoNow":["Call the non-emergency police number or use the online reporting portal","Record your crime reference number","Provide the same details to your bank and to Report Fraud or the FTC","Keep a personal log of all communications with the scammer","If vulnerable or threatened, tell the operator immediately","Visit /report-a-scam for a checklist of all reporting channels"],"faq":[{"question":"Will the police recover my money?","answer":"Police can apply for a restraint order to freeze assets or a recovery order if they identify the scammer's accounts, but this is rare and typically only happens in larger investigations. Your best chance of financial recovery is through your bank."},{"question":"Do I need to report to both the police and the FTC?","answer":"Yes. Each agency has different tools and jurisdiction. The police can investigate local suspects; the FTC targets commercial patterns; the FBI can pursue interstate crimes. Filing with all three is best practice."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-scam-to-my-state-attorney-general","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-scam-to-my-state-attorney-general","question":"How do I report a scam to my state attorney general?","shortAnswer":"Visit your state attorney general's website, find the consumer protection or fraud complaint section, and complete the online form. Most states provide a direct link at naag.org.","explanation":"Every US state has an attorney general with consumer protection authority. Many of the most successful large-scale scam prosecutions at the state level have come from AG offices, particularly in areas like robocall fraud, elder financial abuse, and deceptive business practices. State AGs can sue businesses operating within their borders even when federal regulators cannot.\n\nTo file, go to naag.org, find your state, and follow the link to the consumer complaints portal. Most states offer an online form where you describe the scam, upload evidence, and provide contact details. You do not need a lawyer to file a complaint. Some states also have a dedicated elder fraud or cyber fraud unit.\n\nAG offices are especially effective when multiple consumers report the same company. Your complaint may be the one that tips the balance toward an investigation. For this reason, include the full name, website, address, and phone number of the company or individual if you know them.\n\nIf the scam crossed state lines, also consider filing with the FTC. State AGs and the FTC often work jointly on large consumer fraud cases. Some states have fast-track processes for elderly victims or for urgent situations like ongoing subscription traps.","redFlags":["A business in your state misrepresented its products or services","An auto dealer, landlord, or contractor used deceptive practices","A company continued billing you after you cancelled","A debt collector used illegal tactics","An MLM or investment scheme recruited heavily in your state","A charity solicitation was deceptive about how funds would be used"],"whatToDoNow":["Find your state AG portal at naag.org","Complete the consumer fraud complaint form with full detail","Attach copies of contracts, receipts, and communications","Also report to the FTC at ReportFraud.ftc.gov","Contact your bank if you made a payment","Consult /report-a-scam for a complete multi-agency checklist"],"faq":[{"question":"How long does it take for an AG to act on a complaint?","answer":"The AG office may take months or even years to initiate formal action. Most complaints are logged and monitored for patterns. You will typically receive an acknowledgement but not a timeline for investigation."},{"question":"Can I get a refund from the attorney general's office?","answer":"If the AG sues a company and wins, a portion of any settlement may be distributed to affected consumers, but this is not guaranteed. File separately with your bank for the fastest path to a refund."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-scam-to-the-accc-australia","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-scam-to-the-accc-australia","question":"How do I report a scam to the ACCC in Australia?","shortAnswer":"Report at Scamwatch.gov.au, which is run by the Australian Competition and Consumer Commission (ACCC). You can also call 1300 795 995 for general consumer inquiries.","explanation":"Scamwatch is Australia's central scam reporting portal and is operated by the ACCC. To report, go to Scamwatch.gov.au, click 'Report a scam,' choose the type of scam from the menu, and fill in the details including dates, amounts, and any contact information associated with the scammer. Reports are anonymous by default, but adding your details lets Scamwatch contact you if they need more information.\n\nThe ACCC uses Scamwatch data to publish scam trend reports, warn the public through media releases, and share intelligence with state consumer protection agencies, the Australian Federal Police, and international partners through GASA (the Global Anti-Scam Alliance). Investment scams and romance scams costing Australians large sums attract the highest attention.\n\nFor bank transfer or card fraud, contact your bank immediately in addition to filing with Scamwatch. Australian banks participate in the Scam-Safe Accord and have reimbursement obligations under the Banking Code of Practice. The Australian Financial Complaints Authority (AFCA) can adjudicate if your bank disputes your claim.\n\nIf you are in New South Wales, you can also report to NSW Fair Trading for consumer fraud. For cybercrime, report to the Australian Cyber Security Centre (ACSC) at cyber.gov.au. State police can be contacted for in-person fraud.","redFlags":["You were contacted via phone, text, or social media about an unexpected prize or investment","A caller claimed to be from the ATO, NBN Co, or another government body","A romantic contact you met online asked for money","A job offer required you to pay upfront for training or equipment","A crypto investment platform locked your funds and demanded fees to withdraw","You received a parcel delivery text with a link to pay customs"],"whatToDoNow":["Report at Scamwatch.gov.au with full details","Call your bank immediately if money was transferred","Report cybercrime at cyber.gov.au","Contact AFCA at afca.org.au if your bank disputes your claim","Warn family and friends if the same scam is circulating","Visit /report-a-scam for a multi-agency reporting guide"],"faq":[{"question":"Does Scamwatch investigate individual scam reports?","answer":"Scamwatch collects intelligence rather than investigating individual cases. Reports help the ACCC spot trends and take action against scam networks, but you should also contact police for individual investigations."},{"question":"Can I report a scam I received but did not fall for?","answer":"Yes, and the ACCC encourages this. Reports from people who recognised and avoided a scam are just as valuable for trend analysis and public warnings."}],"lastReviewed":"2026-06-10"},{"slug":"what-happens-after-i-report-a-scam","url":"https://scamencyclopedia.org/questions/what-happens-after-i-report-a-scam","question":"What happens after I report a scam?","shortAnswer":"Most individual reports are logged and contribute to pattern analysis. Active investigations are rare for single complaints, but your report directly enables larger enforcement actions.","explanation":"After you submit a report to the FTC, IC3, Report Fraud (formerly Action Fraud), or Scamwatch, it enters a database reviewed by analysts. Automated systems flag reports that share phone numbers, email addresses, websites, or payment accounts with other complaints. When enough reports point to the same source, the case is escalated to investigators or forwarded to law enforcement with jurisdiction.\n\nFor your bank or card issuer, the process is more personal. A fraud analyst will review your claim, request supporting evidence, check whether any chargeback or recall window applies, and issue a decision. Under consumer protection laws in the UK, US, and Australia, banks have defined timeframes to resolve fraud claims.\n\nFor platform reports, the trust and safety team will typically review the account, listing, or advertisement within days. Violating accounts are usually suspended, though sophisticated scammers quickly create new ones. Some platforms share data with law enforcement if a warrant is served.\n\nYou should not expect a personalised update from government agencies. Most agencies lack the staff to contact every reporter. However, if your report is central to a case, investigators may contact you for additional information. Keep all evidence preserved in case this happens. See /recovery for the full post-report action plan.","redFlags":["You received a follow-up email claiming to be from the FTC asking for payment to proceed","Someone called you claiming to be a 'scam recovery specialist' after you filed a report","A message said your case would be closed unless you paid a fee","An email purporting to be from law enforcement asked for personal details after your report","You were told you could get money back by filing a second, paid report"],"whatToDoNow":["Keep your report reference numbers in a safe place","Preserve all evidence including messages, emails, and transaction records","Monitor your bank statements for further unauthorised activity","Place a fraud alert with credit bureaus if personal data was compromised","Follow the steps at /recovery for financial and identity recovery","Be suspicious of anyone who contacts you after a report promising to recover your money"],"faq":[{"question":"Will I be notified if someone is arrested based on my report?","answer":"In most cases, no. Agencies do not typically notify individual reporters of enforcement outcomes. You may learn about a successful case if it becomes public news."},{"question":"Can filing a report hurt me in any way?","answer":"Filing a genuine fraud report carries no legal risk. However, if you knowingly file a false report, that is a separate offence. Filing with multiple agencies about the same incident is standard practice and encouraged."}],"lastReviewed":"2026-06-10"},{"slug":"will-reporting-a-scam-get-my-money-back","url":"https://scamencyclopedia.org/questions/will-reporting-a-scam-get-my-money-back","question":"Will reporting a scam get my money back?","shortAnswer":"Reporting alone rarely recovers money. Your best chance is contacting your bank immediately to request a recall, chargeback, or reimbursement under fraud protection rules.","explanation":"Filing a report with the FTC, IC3, or Report Fraud (formerly Action Fraud) is important for public protection and pattern detection, but these agencies do not return money directly to victims. Their role is enforcement and prevention, not restitution. The most direct path to getting money back runs through your financial institution.\n\nIf you paid by credit card, you have the strongest protections. You can raise a chargeback dispute with your card issuer, which reverses the charge if the merchant or scammer cannot disprove your claim. Credit card chargebacks must generally be filed within 60 to 120 days of the transaction depending on your card network's rules. In the UK, Section 75 provides an additional right to a refund for credit card purchases over a threshold.\n\nIf you made a bank transfer, recovery is harder but not impossible. In the UK, the Payment Systems Regulator's Authorised Push Payment reimbursement rules require banks to reimburse most victims of bank transfer fraud. In the US, bank transfer fraud is governed by Regulation E for electronic fund transfers; banks investigate claims but are not always required to refund in the same way. Act within the first 24 hours for the best chance of a recall.\n\nIf you paid by cryptocurrency or gift card, recovery is extremely difficult. Cryptocurrency transactions are irreversible on the blockchain, and gift card PINs once used cannot be reclaimed. Report anyway for intelligence purposes, but manage expectations. See /recovery for a realistic recovery guide.","redFlags":["A 'recovery specialist' contacts you after you report a loss and promises to return your funds for a fee","Someone tells you filing a second report or paying a processing fee will release recovered funds","You are asked to pay tax or customs to receive a refund from a government agency","A website claims to be a government fund that reimburses scam victims for a small fee","Someone who was not involved in the original scam now has details about your loss"],"whatToDoNow":["Contact your bank or card issuer immediately — do not wait for a report to be processed","Request a chargeback if you paid by debit or credit card","In the UK, quote the APP reimbursement policy if your bank resists","File with the FTC, IC3, or Report Fraud for the record","Avoid any service promising guaranteed fund recovery","Read the realistic expectations section at /recovery"],"faq":[{"question":"Are there legitimate scam recovery services?","answer":"A small number of law firms and regulated financial investigators can sometimes recover funds through civil litigation or insolvency proceedings. Be very wary of any service that charges upfront fees or guarantees results — these are often secondary scams targeting fraud victims."},{"question":"What if the scammer is in another country?","answer":"Cross-border recovery is much harder. Law enforcement needs mutual legal assistance treaties to act abroad, which is slow and rarely used for individual cases. International credit card chargebacks still work if your card issuer cooperates."}],"lastReviewed":"2026-06-10"},{"slug":"should-i-report-a-scam-if-i-didnt-lose-money","url":"https://scamencyclopedia.org/questions/should-i-report-a-scam-if-i-didnt-lose-money","question":"Should I report a scam if I did not lose any money?","shortAnswer":"Yes. Reports from people who spotted and avoided a scam help agencies identify active fraud campaigns earlier and warn others before they become victims.","explanation":"Near-miss reports are genuinely valuable to fraud investigators. When many people report the same phone number, email address, or website without losing money, agencies can issue warnings and take action before the scam scales up. Scamwatch in Australia and the FTC in the US both actively encourage reporting of attempts that were not successful.\n\nYour report may be the first to flag a brand-new scam type. Fraudsters constantly adapt their scripts and methods, so a fresh report about an unusual pitch can trigger an early alert that protects thousands of other potential victims. This is particularly true for new impersonation tactics or newly registered phishing websites.\n\nReporting also creates a paper trail that is useful if the scammer tries again or if someone you know falls for the same scam later. Your reference number can be cited when warning family and friends.\n\nThe process is quick. Most reporting portals allow you to complete a near-miss report in under five minutes. You do not need to provide financial information if no money changed hands. Simply describe what happened, how you were contacted, what you were asked to do, and how you recognised it as a scam.","redFlags":["The scam attempt was highly convincing and others might not spot it","The scammer used official-looking branding or a realistic website","Multiple contacts tried the same pitch on you","The scammer possessed some of your personal details, suggesting a data breach","The contact method (number, email, domain) appears to be actively used"],"whatToDoNow":["Report at ReportFraud.ftc.gov, Scamwatch.gov.au, or reportfraud.police.uk","Forward scam texts to 7726 (SPAM) in the UK or to spam@uce.gov in the US","Report phishing emails to your email provider's abuse address","Block the number or address so it cannot contact you again","Share information with family and friends who might receive the same approach","Check /report-a-scam for the full list of reporting channels"],"faq":[{"question":"Is there a minimum loss amount to file a report?","answer":"No. There is no financial threshold for filing a fraud report with the FTC, IC3, Report Fraud, or Scamwatch. Attempted scams with zero loss are welcomed."},{"question":"Will reporting take a long time if I lost nothing?","answer":"Near-miss reports are typically shorter. Most portals have an option indicating that you did not lose money, and the form asks fewer financial questions as a result."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-scam-text-message","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-scam-text-message","question":"How do I report a scam text message?","shortAnswer":"Forward the scam text to 7726 (SPAM) in the UK, Australia, and the US. Also report to the FTC, Scamwatch, or Report Fraud and block the sender.","explanation":"The number 7726 spells SPAM on a phone keypad and is a shared shortcode used by major mobile network operators in the UK, US, and Australia to collect scam text reports. When you forward a suspicious message to 7726, your carrier receives the sender's number, analyses it, and can block it network-wide if they confirm it is a scam source. This is one of the fastest ways to protect other people from the same message.\n\nIn the US you can also report smishing (SMS phishing) to the FTC at ReportFraud.ftc.gov. In the UK, the National Cyber Security Centre (NCSC) at report.ncsc.gov.uk accepts suspicious email and text reports. In Australia, report to Scamwatch.gov.au and your carrier.\n\nBefore you forward or delete the message, take a screenshot. This preserves the sender number, timestamp, and full text for any follow-up investigation. Do not click any links in the message. If you accidentally tapped a link, check whether any app was installed, change any passwords you may have entered, and run a security scan on your phone.\n\nMany scam texts impersonate parcel couriers, banks, HMRC, the ATO, or the IRS. Some use number spoofing to appear as though they came from a legitimate institution. If in doubt, contact the organisation directly using a number from their official website rather than any number in the text.","redFlags":["The text contains a link with an unusual or misspelled domain","It asks you to confirm delivery of a parcel you did not order","It claims your bank account has been locked and provides a link","The message offers a prize or refund you did not apply for","It contains urgent language about unpaid tax or a warrant","The sender's number is a standard mobile number rather than an official shortcode"],"whatToDoNow":["Do not click any links in the message","Forward the text to 7726 (SPAM)","Screenshot the message for your records","Report to the FTC, NCSC, or Scamwatch depending on your country","Block the sender number on your phone","If you clicked a link, change passwords and run a security check"],"faq":[{"question":"Can forwarding a scam text to 7726 cost me money?","answer":"No. Forwarding to 7726 is free on all major networks in the UK, US, and Australia. Standard SMS rates do not apply."},{"question":"What if the scam text came from a regular mobile number?","answer":"Forward it to 7726 anyway and include it in your FTC or Report Fraud report. Carriers and regulators can trace and block numbers used for bulk fraud messaging."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-scam-email","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-scam-email","question":"How do I report a scam email?","shortAnswer":"Forward phishing emails to reportphishing@apwg.org (global), to report@phishing.gov.uk (UK), or to spam@uce.gov (US FTC). Also use your email provider's built-in 'Report phishing' button.","explanation":"Most email clients have a built-in 'Report phishing' or 'Report spam' option in the dropdown menu for any message. Using this button sends signal to your email provider's spam filters and helps protect other users on the same platform. On Gmail, click the three dots next to 'Reply' and select 'Report phishing.' On Outlook, use the 'Report' button in the ribbon or the Junk dropdown.\n\nBeyond the in-client button, forward suspicious emails to specialised inboxes. In the UK, the NCSC's Suspicious Email Reporting Service (SERS) accepts emails forwarded to report@phishing.gov.uk. The NCSC has used this service to take down hundreds of thousands of phishing sites. In the US, forward to spam@uce.gov for FTC processing. Globally, the Anti-Phishing Working Group collects samples at reportphishing@apwg.org.\n\nBefore forwarding, do not click any links or download any attachments. If the email claims to be from your bank, HMRC, the IRS, or another institution, contact that institution directly using a number from their official website. Institutions do not ask you to provide passwords, one-time codes, or full card numbers over email.\n\nIf you believe your credentials were compromised because you clicked a link in a phishing email, immediately change the password for the affected service and enable two-factor authentication. Check your account's login history for any unfamiliar access.","redFlags":["The sender address domain does not exactly match the organisation being impersonated","The email asks you to verify your login, card details, or national insurance number","There is extreme urgency — your account will be closed, a parcel returned, or a fine issued","Hover text over a link shows a URL different from the link text","The greeting is generic ('Dear Customer') despite coming from your bank","Attachments have double extensions such as invoice.pdf.exe"],"whatToDoNow":["Do not click links or open attachments","Use the email client's 'Report phishing' button","Forward to report@phishing.gov.uk (UK), spam@uce.gov (US), or reportphishing@apwg.org","Report to the FTC at ReportFraud.ftc.gov if financial fraud is involved","Change passwords if you clicked anything before recognising the phish","Enable two-factor authentication on the targeted account"],"faq":[{"question":"Should I reply to a phishing email to confront the scammer?","answer":"No. Replying confirms that your email address is active, which increases the volume of future scam emails you receive. Do not engage with the sender."},{"question":"What if I received the same phishing email many times?","answer":"Report once to the relevant inbox and mark subsequent copies as spam. Reporting the same email repeatedly does not add value after the first report."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-scam-website","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-scam-website","question":"How do I report a scam website?","shortAnswer":"Report to Google Safe Browsing, the NCSC (UK), or the FTC (US) and submit a takedown to the domain registrar. Sites can be removed within hours if you act quickly.","explanation":"Google Safe Browsing is one of the fastest tools for protecting others from scam websites. Go to safebrowsing.google.com/safebrowsing/report_phish and submit the URL. Google adds confirmed phishing and malware sites to a blocklist used by Chrome, Firefox, and Safari, meaning billions of users will see a red warning page before accessing the site.\n\nIn the UK, report to the NCSC at report.ncsc.gov.uk. The NCSC's takedown service has removed millions of malicious URLs by working directly with hosting providers and registrars. In the US, report to the FTC at ReportFraud.ftc.gov and to the Anti-Phishing Working Group at apwg.org.\n\nFor the fastest takedown, identify the domain registrar using a WHOIS lookup at lookup.icann.org. Most registrars have an abuse reporting form linked from their homepage. Submit a concise abuse report explaining that the domain is being used for fraud, and include the specific URLs. Registrars can suspend a domain within hours of receiving a credible report.\n\nAlso check whether the website is copying a legitimate brand. If so, notify the brand's abuse team, who have dedicated legal resources to pursue takedowns. Many banks, retailers, and financial institutions have specialist teams that can act faster than general registrar processes.","redFlags":["The domain is a slight misspelling of a well-known brand","The site lacks HTTPS or uses HTTPS but the domain name is wrong","Contact details lead to free email addresses rather than corporate domains","The site was registered very recently (check at lookup.icann.org)","Product images or content appear to be copied from a legitimate site","The checkout page asks for unusual payment methods like bank transfer or crypto"],"whatToDoNow":["Report the URL at safebrowsing.google.com/safebrowsing/report_phish","Report to the NCSC at report.ncsc.gov.uk or to the FTC at ReportFraud.ftc.gov","Find the registrar via lookup.icann.org and submit an abuse report","Notify the brand being impersonated if relevant","Take screenshots to preserve evidence before the site is taken down","Visit /report-a-scam for a complete takedown checklist"],"faq":[{"question":"How long does it take to take down a scam website?","answer":"Google Safe Browsing can flag a site within hours. Registrar suspensions typically take 24 to 72 hours depending on the registrar. Complex cases involving content hosted in jurisdictions with weak enforcement can take weeks."},{"question":"Can I report a website that is suspicious but I am not certain is a scam?","answer":"Yes. Report your suspicion with a clear explanation of why it concerns you. Reviewers will make the final determination. A false positive is far less harmful than leaving a real scam site online."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-scam-phone-number","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-scam-phone-number","question":"How do I report a scam phone number?","shortAnswer":"Report to the FTC at ReportFraud.ftc.gov (US), to Ofcom via ofcom.org.uk (UK), or to the ACCC via Scamwatch.gov.au (Australia), and register with the national Do Not Call list.","explanation":"In the US, report scam calls and robocalls to the FTC at ReportFraud.ftc.gov. The FTC uses this data to pursue robocall operators and has taken action against companies making billions of illegal calls. You can also register your number with the National Do Not Call Registry at donotcall.gov, though this will not stop scammers who deliberately ignore the registry.\n\nIn the UK, Ofcom oversees telephone numbering. Report nuisance calls to Ofcom at ofcom.org.uk/contact/ofcom-complaints. The Information Commissioner's Office (ICO) handles unsolicited direct marketing calls and can fine companies. If you receive a call from what appears to be a UK bank or official number and you are unsure whether it is genuine, hang up and call back using the number on the official website after waiting a few minutes.\n\nIn Australia, report to the ACCC at Scamwatch.gov.au. The Australian Communications and Media Authority (ACMA) handles Do Not Call breaches. Australia's telecommunications industry also operates a Scam Indicator service that allows banks and telcos to share scam call signals in real time.\n\nFor calls impersonating a specific company, also report to that company's fraud team. Many large organisations have dedicated lines for reporting impersonation. They can issue warnings to their customers and, in some cases, work with carriers to block the spoofed number.","redFlags":["The caller claims to be from your bank, HMRC, the IRS, or police and demands immediate action","The call comes from a number that looks like a local or trusted number","The caller uses a pre-recorded message and asks you to press a number","You are told your computer has a virus and asked to install software","The caller refuses to let you hang up and call back","Heavy pressure to stay on the line and not check with anyone"],"whatToDoNow":["Do not give out personal or financial information on an unsolicited call","Note the number and report to the FTC, Ofcom, or Scamwatch","Register with the national Do Not Call list if you have not already","Use your carrier's call-blocking service or a third-party app","Report the number to the organisation being impersonated","Warn others in your household, especially elderly relatives"],"faq":[{"question":"Will reporting a scam number get it blocked immediately?","answer":"Not immediately. Carriers and regulators analyse patterns across many reports before blocking a number. However, your report contributes to that threshold being reached faster."},{"question":"What if the scam number is a spoofed legitimate number?","answer":"Report the number as shown on your caller ID and explain in the report that it appeared to be from a legitimate institution. Investigators understand spoofing and will look at the actual originating number through carrier records."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-investment-fraud","url":"https://scamencyclopedia.org/questions/how-do-i-report-investment-fraud","question":"How do I report investment fraud?","shortAnswer":"Report to your national securities regulator: the SEC and CFTC in the US, the FCA in the UK, or ASIC in Australia. Also report to the FTC or Report Fraud and your bank.","explanation":"Investment fraud has dedicated regulators because the financial stakes are often high and the schemes can involve complex products. In the US, the Securities and Exchange Commission (SEC) accepts tips and complaints at sec.gov/tcr. If futures or options products were involved, also file with the Commodity Futures Trading Commission (CFTC) at cftc.gov/complaint. Whistleblowers who provide original information about securities fraud may qualify for a monetary award.\n\nIn the UK, report to the Financial Conduct Authority (FCA) at fca.org.uk/consumers/report-scam. The FCA maintains a Warning List of firms operating without authorisation and a ScamSmart investment checking tool. Also report to the Report Fraud service, which handles the criminal side. The FCA and Report Fraud share information on investment fraud cases.\n\nIn Australia, report to the Australian Securities and Investments Commission (ASIC) at asic.gov.au. ASIC can take civil and criminal action against unlicensed investment operators. Also report to Scamwatch and your state police.\n\nBefore reporting, gather everything: account statements, prospectuses or white papers, emails and chat logs, payment records, and any marketing materials. Investment fraud cases often succeed or fail on documentary evidence. If you were recruited by someone you know, consider that person may also be a victim of the scheme.","redFlags":["Guaranteed or unusually high returns with no mention of risk","Pressure to invest quickly before an opportunity closes","The firm is not listed on the FCA register, SEC EDGAR, or ASIC connect","Withdrawal requests were denied or led to demands for additional fees","Returns were only visible in an online dashboard and never paid out","The investment strategy was described as secret or proprietary"],"whatToDoNow":["Report to the SEC at sec.gov/tcr or the FCA at fca.org.uk","File with the FTC or Report Fraud for the criminal record","Contact your bank to dispute any card or wire payments","Preserve all account statements and communications","Do not pay any additional 'release fees' or 'tax clearance' charges","Read the investment fraud section at /scams/finance-scams"],"faq":[{"question":"Can the SEC or FCA return money I lost in an investment scam?","answer":"Enforcement actions sometimes lead to disgorgement of funds, some of which may be distributed to victims. However, this process is slow, uncertain, and rarely covers the full loss. Your bank and card issuer are faster routes for partial recovery."},{"question":"What if the investment platform is registered overseas?","answer":"Report to your national regulator and note the overseas registration in your report. Regulators cooperate through IOSCO (the International Organization of Securities Commissions) to pursue cross-border fraud."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-crypto-scam","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-crypto-scam","question":"How do I report a crypto scam?","shortAnswer":"Report to the FBI IC3 at ic3.gov, the FTC at ReportFraud.ftc.gov, and the CFTC (US) or FCA (UK). Also report to the cryptocurrency exchange if you used one.","explanation":"Cryptocurrency scams are among the hardest to reverse because blockchain transactions are generally irreversible. However, reporting is still important and sometimes leads to intervention. In the US, the FBI's IC3 has a dedicated cryptocurrency task force, and the CFTC has authority over crypto commodities fraud. File with both and with the FTC.\n\nIn the UK, most crypto fraud should be reported to the Report Fraud service (formerly Action Fraud) and to the FCA (even if the platform was unlicensed and therefore outside FCA supervision). The FCA's ScamSmart tool can flag known scam operators. For cases involving significant losses, also consider reporting to your local police.\n\nIf you used a regulated exchange such as Coinbase or Binance to make the transfer, contact their fraud team. Some exchanges will freeze accounts receiving scam funds if you act quickly, before the funds are moved to an external wallet. In rare cases, exchanges cooperate with law enforcement to trace and recover assets.\n\nOn-chain analysis firms and some law enforcement agencies can trace cryptocurrency flows through the blockchain. This rarely results in recovery but can identify perpetrators. Preserve wallet addresses, transaction IDs (TXIDs), screenshots of the platform, and any communication with the scammer. See /scams/crypto-web3-scams for common crypto scam types.","redFlags":["A platform promised unusually high daily returns on crypto deposits","You were unable to withdraw funds without paying a release fee or tax","The platform's website was recently registered and has no verifiable company information","A romantic contact online introduced you to a crypto investment opportunity","An unsolicited message offered to help you profit from crypto arbitrage","Celebrity endorsements were used but appeared fake or AI-generated"],"whatToDoNow":["Report to IC3 at ic3.gov and the FTC at ReportFraud.ftc.gov","Contact the exchange you used to request a freeze on the destination address","Save all wallet addresses, transaction IDs, and screenshots","Report to the CFTC (US) or FCA (UK) if an investment product was marketed","Do not pay any additional fees promised to unlock withdrawal","Read /scams/crypto-web3-scams for scam patterns and next steps"],"faq":[{"question":"Can blockchain transactions be reversed if I was scammed?","answer":"No. Confirmed blockchain transactions cannot be reversed by any authority, including exchanges or governments. This is why fast action at the exchange level (before funds leave the platform) is critical."},{"question":"Are crypto recovery services legitimate?","answer":"Almost all services claiming to recover stolen cryptocurrency are secondary scams. They collect upfront fees and deliver nothing. Report any such service to the FTC as a second fraud."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-romance-scam","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-romance-scam","question":"How do I report a romance scam?","shortAnswer":"Report to the FTC at ReportFraud.ftc.gov, the FBI IC3 at ic3.gov, and the platform where you met the scammer. Also contact your bank immediately if money was sent.","explanation":"Romance scams cause deep emotional and financial harm. After a relationship that may have developed over weeks or months, victims often feel shame that can delay reporting. It is important to know that romance scammers are professional criminals running large-scale operations, often from organised call centres. You are not at fault.\n\nReport to the FTC at ReportFraud.ftc.gov and to the FBI's IC3 at ic3.gov. Include the profile name, photos the person used (you can do a reverse image search to find where images were taken from), the platform where you connected, and dates and amounts of any money transferred. Also report to the platform itself, whether that is a dating site, Facebook, Instagram, or WhatsApp. Use the in-app reporting tools and send a detailed email to their support team.\n\nIf you sent money, contact your bank or wire transfer service immediately. Funds sent via wire, Zelle, or Venmo are difficult but not always impossible to recall, especially in the first 24 hours. Gift card payments are largely unrecoverable. In the UK, report under the APP fraud category to your bank and to Report Fraud (formerly Action Fraud).\n\nEmotional support after a romance scam is as important as financial action. Organisations such as Romance Scam Survivors and Stop Scams UK have peer support communities. Discussing what happened with others who have experienced the same thing helps recovery and reduces isolation. See /scams/romance-relationship-scams for a guide to the patterns used.","redFlags":["You never met the person despite months of communication","Every plan to meet in person was cancelled with a new crisis","The person asked for money or gift cards for an emergency","They claimed to be working abroad in an unusual profession","Conversations quickly became intensely romantic despite no real-world contact","The profile photos appeared in reverse image searches tied to other identities"],"whatToDoNow":["Report to the FTC at ReportFraud.ftc.gov and FBI IC3 at ic3.gov","Report the profile to the platform and provide the profile URL","Contact your bank or wire service if money was sent","Do a reverse image search on the photos you were sent","Seek emotional support from trusted friends or support communities","Read /scams/romance-relationship-scams for recovery guidance"],"faq":[{"question":"Should I confront the scammer when I report them?","answer":"No. Confronting the scammer may cause them to delete evidence, block you before you can gather more information, or escalate to threats. Stop contact and report instead."},{"question":"Can I get the money back if I sent it to a romance scammer?","answer":"Recovery is possible if you act quickly and paid by card or bank transfer. Wire transfers and gift cards are much harder to recover. Banks can sometimes recall bank transfers within 24 to 48 hours. See /recovery for options."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-job-scam","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-job-scam","question":"How do I report a job scam?","shortAnswer":"Report to the FTC at ReportFraud.ftc.gov, to the job platform where the ad appeared, and to your state attorney general or the UK's Report Fraud if you lost money.","explanation":"Job scams include fake vacancy listings, bogus work-from-home offers, and recruitment impersonation where criminals pretend to be from real companies. They are designed to steal your personal data, extract upfront fees, or turn you into an unwitting money mule. The FTC accepts reports about employment fraud at ReportFraud.ftc.gov; this data is used to pursue high-volume operators.\n\nReport the fraudulent listing to the job board or platform where it appeared. LinkedIn, Indeed, and major job boards have dedicated abuse reporting forms. Provide the job title, poster account name, and URL. Quick reporting can prevent others from applying to the same fake role.\n\nIf you paid any upfront fees, handed over your bank details for 'payroll purposes,' or performed transactions on someone else's behalf, contact your bank immediately. The last situation may mean you were used as a money mule, which carries legal risk. Inform your bank and the police, and cease all activity immediately.\n\nFor impersonation of a real employer, also notify that employer's HR or legal department. They can warn genuine job seekers and may have resources to pursue the impersonator.","redFlags":["The job offered unusually high pay for minimal qualifications or hours","You were offered the role without a proper interview","The 'employer' asked you to pay for equipment, training, or a background check","The company name does not match any verifiable business","You were asked to receive and forward payments through your bank account","The hiring manager communicated only by text or WhatsApp and avoided video calls"],"whatToDoNow":["Report to the FTC at ReportFraud.ftc.gov","Report the listing to the job board via its abuse reporting tool","Contact your bank if you made any payment or shared account details","Alert the real company if the scammer was impersonating them","Preserve all correspondence and job offer documents as evidence","Read /scams/job-income-scams for common patterns"],"faq":[{"question":"Am I in legal trouble if I unknowingly became a money mule?","answer":"Knowingly acting as a money mule is a criminal offence. However, acting unknowingly and reporting the activity to your bank and police as soon as you realise what happened demonstrates good faith. Take action immediately and be transparent with authorities."},{"question":"Can I report a job scam if I only recognised it before applying?","answer":"Yes. Near-miss reports are valuable for platform trust teams and regulators. Report the listing even if you did not apply."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-an-elder-financial-scam","url":"https://scamencyclopedia.org/questions/how-do-i-report-an-elder-financial-scam","question":"How do I report elder financial abuse or a scam targeting older adults?","shortAnswer":"Report to Adult Protective Services (US), your local police, the FTC, and the National Elder Fraud Hotline at 1-833-FRAUD-11. In the UK, contact Adult Social Care and Report Fraud.","explanation":"Elder financial scams are a priority for law enforcement because older adults are disproportionately targeted and the impact can be devastating. In the US, the National Elder Fraud Hotline (1-833-FRAUD-11) connects you with case managers who help navigate multiple reporting channels. Adult Protective Services (APS) can intervene if a vulnerable adult is at risk. File a report at the hotline and also with the FTC at ReportFraud.ftc.gov.\n\nIn the UK, report to your local council's Adult Social Care team if a vulnerable adult is at risk, and to Report Fraud at reportfraud.police.uk for the crime record. Many police forces have dedicated Older Persons teams. For bank-related fraud, contact the bank directly and reference the Financial Abuse Code of Practice.\n\nIf you are reporting on behalf of a relative and suspect ongoing contact with a scammer, the most urgent step is to stop that contact if possible. Many elder scammers maintain regular phone contact to prevent the victim from discussing the situation with family. Ask the bank to add a trusted contact to the account.\n\nFor financial advisers or attorneys who may have exploited a client or relative, report to your state's financial regulator or bar association in addition to APS. The Consumer Financial Protection Bureau also accepts elder financial abuse complaints.","redFlags":["An older relative is making unusual or large withdrawals from their bank account","They are receiving frequent calls from unknown numbers and becoming secretive about finances","Gift cards or wire transfers are being sent to people the family does not know","A new 'friend' has become heavily involved in the older adult's financial affairs","Bills are going unpaid despite adequate income","The older adult seems fearful about discussing money matters"],"whatToDoNow":["Call the National Elder Fraud Hotline at 1-833-FRAUD-11 (US) or Adult Social Care (UK)","File with the FTC at ReportFraud.ftc.gov","Contact the older adult's bank to flag potential exploitation","Ask the bank to add a trusted contact to the account","Report to Adult Protective Services if safety is a concern","Visit /family-safety for guidance on protecting older relatives"],"faq":[{"question":"What if the older person does not believe they are being scammed?","answer":"This is common. Scammers deliberately isolate victims and create emotional bonds. Rather than confronting the issue head-on, involve a trusted third party such as a GP, solicitor, or the bank's vulnerability team. Report to APS regardless of the victim's current belief."},{"question":"Is elder financial scam different from elder financial abuse by family members?","answer":"The reporting channels overlap but family-perpetrated abuse may also involve safeguarding referrals and potentially criminal charges for the family member. Adult Protective Services handles both external scams and internal family abuse."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-charity-scam","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-charity-scam","question":"How do I report a fake or fraudulent charity?","shortAnswer":"Report to the FTC (US), the Charity Commission (England and Wales), or OSCR (Scotland). Also check whether the charity is legitimately registered before donating.","explanation":"Fraudulent charities exploit generosity, especially after disasters, during the holiday season, or around well-publicised causes. Before reporting, verify the charity's registration. In the US, check at pay.org or use the IRS's Tax Exempt Organization Search. In England and Wales, charities must be registered at charitycommission.gov.uk. In Scotland, use oscr.org.uk.\n\nIn the US, report deceptive charity solicitations to the FTC at ReportFraud.ftc.gov and to your state attorney general's consumer protection division. Many states require charities to register locally; fraudulent solicitations violate these registration requirements. The BBB Wise Giving Alliance also accepts complaints about charitable organisations.\n\nIn the UK, report to the Charity Commission at charitycommission.gov.uk/reporting-a-concern. The Commission investigates serious misconduct in registered charities and can remove trustees, freeze funds, or remove a charity from the register. For criminal matters, also report to the Report Fraud service (formerly Action Fraud).\n\nIf you donated via a platform like JustGiving or GoFundMe, report the campaign directly to that platform. Crowdfunding platforms have fraud teams and may be able to freeze the campaign and return donor funds if fraud is confirmed.","redFlags":["The charity name is very similar to a well-known legitimate organisation","Pressure to donate immediately and in cash or cryptocurrency","The charity is not listed on an official register","Solicitors are vague about how funds will be used","The charity website was registered very recently","Donation links in emails do not lead to the charity's official domain"],"whatToDoNow":["Verify the charity at charitycommission.gov.uk, oscr.org.uk, or via the IRS","Report to the FTC or Charity Commission using their online complaint forms","Report to your state attorney general's charity fraud division","If you donated online, report the campaign to the platform","Request a reversal from your card issuer if you paid by card","See /scams/charity-disaster-scams for common patterns"],"faq":[{"question":"Are GoFundMe campaigns checked for legitimacy?","answer":"GoFundMe performs some verification but does not guarantee every campaign is legitimate. If a campaign is fraudulent, GoFundMe's Giving Guarantee may cover donor losses. Report suspicious campaigns via the report button on the campaign page."},{"question":"What if I donated to a charity and it turned out to be a scam years later?","answer":"File a report even if time has passed. The Charity Commission and FTC accept reports regardless of when the donation was made. Chargeback claims have time limits, but fraud reports do not."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-rental-scam","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-rental-scam","question":"How do I report a rental scam?","shortAnswer":"Report to the FTC, the rental platform, and your state attorney general or Report Fraud. File a police report for a crime reference number and contact your bank if you paid a deposit.","explanation":"Rental scams involve fake property listings where fraudsters collect deposits and first-month rent for properties they do not own or that do not exist. They are common on sites like Craigslist, Facebook Marketplace, and sometimes even appear on major letting platforms when an account is compromised.\n\nReport the fraudulent listing to the platform immediately using the in-app report tool. Include the listing URL and details about the scam. Also email the platform's abuse team with full evidence. In the US, report to the FTC at ReportFraud.ftc.gov. In the UK, report to the Report Fraud service and to your local Trading Standards.\n\nContact your bank or payment service immediately if you paid a deposit or rent. Some payment services offer buyer protection for goods and services, but bank transfers are more difficult. File a police report to obtain a crime reference number, which your bank and insurer will request.\n\nTo prevent rental scams, always view a property in person or via live video before paying anything. Use a licensed estate agent or letting agent where possible, and never pay deposits by bank transfer to someone you have only communicated with online.","redFlags":["The rent is significantly below the local market rate","The landlord is abroad and cannot meet or show the property in person","You are asked to pay a deposit via wire transfer or cryptocurrency before signing a lease","The listing photos appear in searches for properties in other cities","A 'key deposit' or 'administration fee' is required before viewing","The landlord asks you to wire money to a third party"],"whatToDoNow":["Report the listing to the platform via the in-app report tool","File a report with the FTC or Report Fraud","Contact your bank to dispute or recall the payment","File a police report for a crime reference number","Do a reverse image search on listing photos to check for misuse","Read /scams/housing-rental-scams for common patterns"],"faq":[{"question":"Can I report a rental scam on Facebook Marketplace?","answer":"Yes. Use the three-dot menu on the listing and select 'Report listing.' Also email Facebook support directly with evidence. For financial loss, also report to the FTC or Report Fraud."},{"question":"What if I have already moved to a new city and the property does not exist?","answer":"Contact local police at your destination, file with the FTC or Report Fraud online, and contact your bank about the payment. Also reach out to local housing authorities for emergency accommodation options."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-lottery-prize-scam","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-lottery-prize-scam","question":"How do I report a lottery or prize scam?","shortAnswer":"Report to the FTC at ReportFraud.ftc.gov, the FBI IC3, and the US Postal Inspection Service if you were contacted by mail. In the UK, report to the Report Fraud service.","explanation":"Lottery and prize scams tell victims they have won a competition they never entered, then request upfront fees, tax payments, or bank details to release the prize. No legitimate lottery requires you to pay in advance to claim winnings. If you are told to wire money, buy gift cards, or pay via crypto to 'unlock' a prize, it is a scam.\n\nIn the US, report to the FTC at ReportFraud.ftc.gov. If the notification arrived by mail, it is also a federal mail fraud offence. Report to the US Postal Inspection Service at postalinspectors.uspis.gov. The FBI IC3 handles cases involving internet or phone lottery fraud.\n\nIn the UK, report to the Report Fraud service at reportfraud.police.uk. Also report to the ICO if you received unsolicited marketing materials as part of the scheme. If the lottery impersonated a real lottery operator such as the National Lottery, notify the operator directly so they can warn their customers.\n\nIf you paid any fees, contact your bank or card issuer immediately. Document every communication you received about the 'prize' including letters, emails, and phone records. These are evidence in any investigation.","redFlags":["You won a lottery or prize you never entered","You are required to pay a fee, tax, or insurance to release the winnings","Payment must be made by wire, gift card, or cryptocurrency","The notification uses official-looking logos but requests payment to a private individual","A 'claims agent' or 'legal representative' is named who cannot be verified","The prize is time-limited and must be claimed urgently"],"whatToDoNow":["Do not pay any fee to release a prize","Report to the FTC at ReportFraud.ftc.gov and IC3 at ic3.gov","Report to the US Postal Inspection Service if the scam arrived by post","In the UK, report to the Report Fraud service","Contact your bank if any payment was made","See /scams/lottery-prize-scams for how these scams operate"],"faq":[{"question":"What if I already paid a fee to release my prize?","answer":"Stop all payments immediately. Contact your bank to dispute or recall the payment. Report to the FTC and local police. Paying further fees will only increase your losses."},{"question":"Can a lottery notification arrive by official-looking post?","answer":"Yes. Scammers use sophisticated printing to mimic official correspondence, complete with logos and reference numbers. Always verify any unexpected prize notification through the official contact details of the named organisation, not any details in the notification."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-tech-support-scam","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-tech-support-scam","question":"How do I report a tech support scam?","shortAnswer":"Report to the FTC at ReportFraud.ftc.gov and to the company being impersonated. If you gave remote access, change all passwords immediately and run a full security scan.","explanation":"Tech support scams involve callers or pop-up warnings falsely claiming your computer has a virus, then persuading you to give remote access, pay for unnecessary software, or hand over banking credentials. Microsoft, Apple, and Google are the most commonly impersonated companies; all three state clearly they will never contact you unsolicited about a computer problem.\n\nReport to the FTC at ReportFraud.ftc.gov. The FTC has taken action against some of the largest tech support scam call centres. In the UK, report to the Report Fraud service (formerly Action Fraud) and to the NCSC at report.ncsc.gov.uk. Also report to the company being impersonated, who usually have a dedicated reporting page for these impersonation cases.\n\nIf you allowed remote access, treat the situation as a serious security breach. The scammer may have installed malware, captured passwords, or copied financial documents. Run a full antivirus scan using software obtained from a verified source. Change every password — starting with banking and email — from a different device if possible. Enable two-factor authentication on all key accounts.\n\nIf you made a payment, contact your bank or card issuer immediately. Gift card payments and wire transfers are very difficult to recover, but card payments can often be charged back. Report the gift card details to the issuing retailer as the funds may not yet have been redeemed.","redFlags":["A pop-up claimed your computer was infected and displayed a phone number to call","A caller said they were from Microsoft, Apple, or your internet provider","You were asked to install remote access software such as AnyDesk or TeamViewer","The 'technician' showed you logs or files as 'proof' of infection","You were asked to pay in gift cards, cryptocurrency, or wire transfer","A refund process went wrong and you were asked to return extra money"],"whatToDoNow":["Disconnect the computer from the internet if remote access was given","Run a full antivirus scan from a clean source","Change all passwords from a different device","Enable two-factor authentication on banking and email","Report to the FTC and to the impersonated company","Contact your bank if payment was made"],"faq":[{"question":"Is it safe to use my computer after a tech support scam?","answer":"Not until it has been thoroughly scanned or, for serious cases, the operating system has been reinstalled from scratch. A professional IT technician can help assess the level of risk if you are unsure."},{"question":"What if I gave the scammer my banking credentials?","answer":"Contact your bank immediately and request new credentials and account numbers if necessary. The bank's fraud team will guide you through securing your account and will investigate any unauthorised transactions."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-government-impersonation-scam","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-government-impersonation-scam","question":"How do I report a government impersonation scam?","shortAnswer":"Report to the FTC at ReportFraud.ftc.gov and to the agency being impersonated. In the UK, report to the Report Fraud service and to HMRC's phishing team at phishing@hmrc.gov.uk.","explanation":"Government impersonation scams involve criminals posing as the IRS, Social Security Administration, HMRC, DVLA, police, or other authorities. They use fear of arrest, deportation, or fines to push victims into making immediate payments. Real government agencies never demand payment by gift card, wire transfer, or cryptocurrency, and never threaten immediate arrest for failing to pay.\n\nIn the US, report IRS impersonation to both the FTC and the Treasury Inspector General for Tax Administration (TIGTA) at tigta.gov or 1-800-366-4484. Report Social Security Administration impersonation to the SSA's Office of the Inspector General at oig.ssa.gov. Report all government impersonation to the FTC at ReportFraud.ftc.gov.\n\nIn the UK, report HMRC impersonation to phishing@hmrc.gov.uk for emails or suspicious-text-messages@hmrc.gov.uk for texts. Report to the Report Fraud service for the crime record. For impersonation of the police, report to your local force and Report Fraud.\n\nForward any scam communications to the reporting addresses before deleting them. Preserve screenshots if the scam came via text, call, or social media. If you paid, contact your bank immediately and file a police report for a crime reference number. Even if you did not pay, report the attempt to help protect others.","redFlags":["A caller claimed an arrest warrant was issued for you and demanded immediate payment","You received a text about a tax refund requiring you to click a link","An email from 'HMRC' or the 'IRS' asked you to confirm personal details","The caller said your Social Security number had been suspended","You were told to buy gift cards and read the codes over the phone","The caller refused to give their badge number or let you call back"],"whatToDoNow":["Do not make any payment — hang up or delete the message","Report to the FTC and the relevant agency's fraud team","Forward phishing emails to phishing@hmrc.gov.uk (UK) or to spam@uce.gov (US)","Report suspicious texts to 7726","File with Report Fraud or local police if in the UK","Read /scams/government-impersonation-scams for common tactics"],"faq":[{"question":"What if I am worried the call might be from a real government agency?","answer":"Hang up and call the agency back using the phone number from their official website. Do not use any number given during the call. Real agencies will not object to this, and a scammer will often become aggressive when you suggest calling back independently."},{"question":"Can scammers really spoof official government numbers?","answer":"Yes. Caller ID spoofing is technically easy and cheap. A call appearing to come from a government number is not proof that the caller is legitimate. Always verify by calling back independently."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-identity-theft","url":"https://scamencyclopedia.org/questions/how-do-i-report-identity-theft","question":"How do I report identity theft?","shortAnswer":"Report to the FTC at IdentityTheft.gov (US), which generates a personalised recovery plan. In the UK, report to the Report Fraud service and contact the fraud teams at affected companies directly.","explanation":"Identity theft occurs when someone uses your personal information — name, date of birth, address, Social Security or National Insurance number — to open accounts, take loans, make purchases, or commit crimes in your name. In the US, go to IdentityTheft.gov, which is the FTC's dedicated identity theft reporting and recovery portal. The site creates an Identity Theft Report and a step-by-step personalised recovery plan, and pre-fills letters you can send to companies where fraud occurred.\n\nIn the UK, report to the Report Fraud service at reportfraud.police.uk. You should also contact CIFAS, the fraud prevention service, to place a protective registration on your credit file, which means lenders take extra steps to verify your identity before opening any account. In Australia, report to the Australian Cyber Security Centre and IDCARE (idcare.org), a national identity and cyber support service.\n\nContact the three main credit reference agencies — Equifax, Experian, and TransUnion — to place a fraud alert or credit freeze on your file. A fraud alert requires lenders to verify your identity before extending credit. A freeze (available in the US) prevents new credit from being opened altogether. Both are free and can be done online.\n\nFile a police report to obtain a crime reference number. This is needed when disputing fraudulent accounts or debt claims. Notify any financial institution, lender, or government agency where the thief has created or misused an account.","redFlags":["Bills or debt collection notices arrived for accounts you did not open","Your credit score dropped unexpectedly","You were denied credit despite a good financial history","Unknown accounts or enquiries appeared on your credit report","You received a tax refund rejection because a return was already filed in your name","Government benefit claims were made in your name without your knowledge"],"whatToDoNow":["Go to IdentityTheft.gov (US) or report to the Report Fraud service (UK)","Place a fraud alert or credit freeze with Equifax, Experian, and TransUnion","Contact every company where fraud occurred and close or dispute accounts","File a police report for a crime reference number","Contact CIFAS for protective registration (UK)","Read /scams/identity-theft-data-scams for a full recovery roadmap"],"faq":[{"question":"How long does it take to recover from identity theft?","answer":"Recovery can take from a few months to several years depending on the extent of the fraud. Placing a credit freeze quickly limits further damage. Disputing each fraudulent account through the company's fraud dispute process is time-consuming but achievable."},{"question":"Does a credit freeze hurt my credit score?","answer":"No. A credit freeze does not affect your credit score. It simply prevents new credit from being opened. You can temporarily lift the freeze when you need to apply for legitimate credit."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-subscription-billing-scam","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-subscription-billing-scam","question":"How do I report a subscription or billing scam?","shortAnswer":"Report to the FTC at ReportFraud.ftc.gov, dispute the charges with your card issuer, and report to your state attorney general or the Competition and Markets Authority (UK).","explanation":"Subscription and billing scams range from free-trial traps that charge steep monthly fees after a buried terms disclosure, to outright fraudulent charges placed on your account by criminals who obtained your card details. Both are reportable and actionable.\n\nIn the US, report to the FTC at ReportFraud.ftc.gov. The FTC has taken action against many companies using deceptive free-trial-to-subscription tactics under the Restore Online Shoppers' Confidence Act (ROSCA). State attorneys general also accept these complaints and can pursue local businesses.\n\nIn the UK, report unfair subscription practices to the Competition and Markets Authority (CMA) via their online portal. Report Fraud (formerly Action Fraud) handles cases where you believe your card was charged without any legitimate business relationship. The Financial Ombudsman handles disputes with your card issuer if they refuse a chargeback.\n\nWith your card issuer, file a chargeback for charges you did not authorise or that were applied under deceptive circumstances. Ask for a new card number if you believe the original was compromised. Review your statements monthly for small recurring charges that may have been added without your knowledge — a technique sometimes called 'cramming.'","redFlags":["A free trial automatically converted to a paid subscription without a clear reminder","Cancellation is impossible or buried in a complex process","Small recurring charges appear on your statement from an unrecognised merchant","You are charged in a foreign currency at an unexpected exchange rate","A subscription service you did not sign up for charges your card","Refund requests are denied despite cancellation within the trial period"],"whatToDoNow":["Report to the FTC at ReportFraud.ftc.gov or the CMA (UK)","Dispute the charges with your card issuer and request a chargeback","Cancel the subscription through every available channel and document it","Request a new card number to prevent future unauthorised charges","Check your full statement history for additional unknown charges","See /scams/subscription-billing-scams for more tactics and options"],"faq":[{"question":"How far back can I dispute subscription charges?","answer":"Card chargebacks typically have a 60 to 120-day window from the statement date, varying by card network. If charges go back further, a formal complaint to the FTC or your bank's fraud team is the next step."},{"question":"What if the subscription company says I agreed to the terms?","answer":"If the terms were buried, pre-ticked, or presented in a deceptive way, this may still be an unfair trading practice. Report to the FTC or CMA and dispute the charge as deceptive even if the company claims you consented."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-health-medical-scam","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-health-medical-scam","question":"How do I report a health or medical scam?","shortAnswer":"Report to the FTC at ReportFraud.ftc.gov and to the FDA MedWatch (US) for bogus health products. In the UK, report to the Report Fraud service and to the MHRA's yellow card scheme.","explanation":"Health scams range from fake miracle cures and unlicensed supplements to fraudulent health insurance and counterfeit medicines. They are particularly dangerous because they can cause people to delay legitimate medical treatment. Multiple agencies handle different aspects of this category.\n\nIn the US, the FTC has authority over deceptive health advertising and supplement marketing. File at ReportFraud.ftc.gov. For counterfeit or unlicensed medicines, medical devices, and fraudulent COVID products, report to the FDA at MedWatch via fda.gov/safety/medwatch. The FDA can take swift action against products posing immediate health risks. For fraudulent health insurance, report to your state insurance commissioner and the Centers for Medicare and Medicaid Services (CMS) if Medicare or Medicaid is involved.\n\nIn the UK, report to the Report Fraud service for financial fraud. For unlicensed medicines, counterfeit supplements, or fraudulent medical devices, report to the Medicines and Healthcare products Regulatory Agency (MHRA) via its yellow card scheme at yellowcard.mhra.gov.uk. The MHRA can remove products from sale and prosecute companies.\n\nIf you paid for a health product or service that was not delivered or was fraudulent, contact your card issuer for a chargeback. For insurance fraud, also report to the Insurance Fraud Enforcement Department (IFED) in the UK.","redFlags":["A product claimed to cure, prevent, or treat a condition that medical science cannot reliably address","The only way to buy the product was directly from the seller, not through pharmacies","Testimonials were the only evidence provided and could not be independently verified","The product pricing was much lower than comparable licensed medicines","You were required to sign up for a continuing subscription to access health advice","A practitioner recommended treatments not approved by any regulatory body"],"whatToDoNow":["Report to the FTC at ReportFraud.ftc.gov or Report Fraud (UK)","Report unlicensed health products to the FDA MedWatch or MHRA","Contact your card issuer for a chargeback if you paid for a fraudulent product","Consult a qualified medical professional if you have taken an unlicensed product","Report health insurance fraud to your state insurance commissioner","Read /scams/health-medical-scams for common patterns"],"faq":[{"question":"What if I took an unlicensed supplement and had a bad reaction?","answer":"Seek medical attention first. Then report to the FDA MedWatch (US) or MHRA Yellow Card (UK) with details of the product. These reports feed into pharmacovigilance systems that monitor safety signals."},{"question":"Are all supplements sold online potentially dangerous?","answer":"Not all. But supplements are less tightly regulated than medicines in most countries, meaning quality and ingredient accuracy vary widely. Purchase from reputable, verifiable suppliers and consult a doctor if unsure."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-an-online-shopping-scam","url":"https://scamencyclopedia.org/questions/how-do-i-report-an-online-shopping-scam","question":"How do I report an online shopping scam?","shortAnswer":"Report to the FTC at ReportFraud.ftc.gov, to the marketplace or platform where you bought, and initiate a chargeback with your card issuer as soon as possible.","explanation":"Online shopping scams include fake websites selling goods that never arrive, counterfeit products, bait-and-switch substitutions, and fraudulent sellers on legitimate marketplaces. They are among the most common fraud types globally.\n\nIf you bought through a platform like eBay, Amazon, or Etsy, use the platform's dispute resolution system first. Report the seller using the in-app tool and open a buyer protection claim. Many platforms will refund you if the seller does not respond or if the goods are confirmed not as described. Keep all order confirmation emails, tracking information, and messages with the seller.\n\nIf you bought directly from a website, report the site to the FTC and initiate a chargeback with your card issuer. For credit card purchases in the UK above a threshold, Section 75 gives you equal liability rights against the card issuer as well as the retailer. For debit card purchases, many banks offer chargeback under the Visa or Mastercard dispute process.\n\nReport the fraudulent website to Google Safe Browsing and to the domain registrar via a WHOIS lookup. This can prevent the same site from defrauding more consumers. In the UK, report to the Report Fraud service (formerly Action Fraud) and to Citizens Advice, which forwards consumer reports to Trading Standards.","redFlags":["The website was very recently created and has no verifiable contact details","Prices were dramatically below comparable legitimate retailers","No clear returns policy, terms and conditions, or physical address","Order confirmation came from a personal email address","The tracking number provided leads nowhere or tracks a different package","Reviews are all five-star, recent, and use generic language"],"whatToDoNow":["Open a buyer protection dispute on the platform if you used one","Initiate a chargeback with your card issuer","Report the seller or website to the FTC or Report Fraud","Report the website to Google Safe Browsing","Preserve order confirmations, receipts, and all communications","See /scams/online-shopping-scams for additional guidance"],"faq":[{"question":"What if I received counterfeit goods instead of nothing?","answer":"Counterfeit goods can still be disputed under chargeback as 'significantly not as described.' Report to the platform, your card issuer, and the brand being counterfeited. Counterfeit luxury goods can also be reported to Customs and Border Protection (US) or HMRC (UK)."},{"question":"How long do I have to file a chargeback for a shopping scam?","answer":"Generally 60 to 120 days from the transaction date, depending on your card network and issuer. Act as soon as you are certain the order will not be fulfilled as described."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-social-media-scam","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-social-media-scam","question":"How do I report a scam on social media?","shortAnswer":"Use the platform's in-app 'Report' tool on the profile or post, then file with the FTC or Report Fraud if money was lost. Also report fake ads to the ad network.","explanation":"Social media scams appear as fake profiles, fraudulent advertisements, impersonation of celebrities or brands, phishing links in comments, and direct message solicitations. Every major platform provides an in-app reporting mechanism accessible from the three-dot or flag menu on any post, profile, or message.\n\nFor Facebook and Instagram, report the post or ad using the three-dot menu and select the most relevant category: scam, impersonation, or fraud. For Twitter/X, use the down-arrow or three-dot menu on any tweet or profile. For TikTok, press and hold on the video and select 'Report.' For YouTube, click the three dots below a video and select 'Report.'\n\nFor fake advertisements on social platforms, you can additionally report directly to the platform's ad reporting system. Facebook Ads has a dedicated 'Report Ad' option in the ad's dropdown. Misleading ads that promote investment schemes, fake health products, or impersonate celebrities are particularly high priority and may be actioned quickly if multiple users report them.\n\nIf money was lost as a result of the social media scam, file with the FTC at ReportFraud.ftc.gov or Report Fraud. Reference the platform, the post or profile URL, and any screenshots you saved. Platforms typically remove accounts but do not assist with financial recovery — that path goes through your bank.","redFlags":["A celebrity-endorsed investment appeared in your feed as a paid advertisement","A direct message from a friend's account asked you to send money or click a link","A competition required you to share personal details or pay to claim a prize","An account impersonating a brand offered vouchers or refunds via direct message","A new follower moved quickly to discuss a financial opportunity","A verified-looking account asked you to move a conversation off-platform"],"whatToDoNow":["Use the in-app report tool on the post, profile, or advertisement","Screenshot evidence before reporting as accounts may be removed","Report to the FTC or Report Fraud if financial harm occurred","Contact your bank if payment was made","Notify the person being impersonated if a real individual or brand is involved","See /scams/social-media-account-scams for common patterns"],"faq":[{"question":"Does reporting a scam account get it removed immediately?","answer":"Platforms review reports on a queue basis. Accounts can remain visible for days after being reported. If the scammer is actively soliciting money, also report to local authorities for a faster response."},{"question":"Can I report a scam on a social platform without having an account myself?","answer":"Facebook and Twitter allow some reporting without an account, but having an account usually gives access to more detailed reporting categories. Using a free account just to report a scam is entirely legitimate."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-travel-scam","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-travel-scam","question":"How do I report a travel scam?","shortAnswer":"Report to the FTC (US) or Report Fraud (UK), to the travel booking platform, and to ABTA or ATOL (UK) or your state attorney general (US). Initiate a chargeback for card payments.","explanation":"Travel scams include fake booking websites, fraudulent holiday clubs, timeshare resales that never happen, and package tour operators that disappear with deposits. They can occur at the planning stage, during the trip, or in a post-trip 'compensation' scam.\n\nIn the US, report to the FTC at ReportFraud.ftc.gov and to your state attorney general's consumer protection division. The FTC has taken action against fraudulent travel clubs and timeshare exit companies. For ATOL (Air Travel Organisers' Licensing)-protected packages in the UK, contact ATOL directly at atol.org.uk. ABTA members can be reported to ABTA at abta.com.\n\nReport the fraudulent website or platform using Google Safe Browsing and to the domain registrar. If you booked through a comparison site, report to that site's fraud team as well — they may have verified the operator and could share liability.\n\nIf you paid by credit card, initiate a chargeback immediately. For package holidays booked by credit card in the UK over a threshold, Section 75 gives you rights against both the tour operator and the card issuer. Debit card users have chargeback under the Visa or Mastercard dispute process.","redFlags":["The booking website was registered very recently","Prices were far below comparable offers on reputable platforms","Payment was only accepted by bank transfer rather than card","Confirmation details did not match the accommodation or airline's records","A phone call offered a holiday prize that required upfront fees","A timeshare resale agent demanded upfront fees to find a buyer"],"whatToDoNow":["Report to the FTC or Report Fraud with booking details and receipts","Initiate a chargeback with your card issuer","Report to ABTA or ATOL if you are in the UK and the operator claimed membership","Report the fraudulent website to Google Safe Browsing","Contact your travel insurer — some policies cover fraud","See /scams/travel-scams for typical travel fraud patterns"],"faq":[{"question":"Does travel insurance cover scam bookings?","answer":"Some travel insurance policies include a supplier failure clause that covers losses when a booking provider goes into administration or disappears. Check your policy carefully; straightforward fraud may be excluded but ATOL protection applies if the package was ATOL-registered."},{"question":"What if the scam happened while I was abroad?","answer":"Report to local police for a crime reference, then follow up with your home country's reporting agency (FTC or Report Fraud) and your card issuer on return. Having the local police report strengthens your chargeback case."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-pet-scam","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-pet-scam","question":"How do I report a pet or puppy scam?","shortAnswer":"Report to the FTC at ReportFraud.ftc.gov, to the platform where the listing appeared, and to your state attorney general. Initiate a chargeback with your card issuer.","explanation":"Pet scams typically involve fake listings for puppies, kittens, or rare breeds on social media, classified sites, or even dedicated pet sale platforms. After collecting a deposit, the 'seller' adds additional charges — for shipping, insurance, or veterinary clearance — before disappearing entirely.\n\nReport to the FTC at ReportFraud.ftc.gov and to the platform where the listing was placed. For classified sites like Craigslist or Gumtree, use the report button on the listing. For social media platforms, report the profile and the post. If the listing used a legitimate pet registry, contact that registry to have the fraudulent breeder removed.\n\nIn the UK, Pets4Homes and similar platforms have dedicated fraud reporting channels. Report to the Report Fraud service (formerly Action Fraud) for the crime record. For listings that violated Animal Welfare Act breeding regulations, also report to your local council's animal welfare team.\n\nIf you paid by card, initiate a chargeback for goods not received. Wire transfers and bank transfers are harder to recover but still worth attempting immediately. Report to your bank's fraud team with full details. The FTC's pet scam tip sheet recommends always visiting a breeder in person before paying any deposit.","redFlags":["The price was much lower than typical for the breed","The seller could not provide live video of the puppy with you holding a sign","Delivery required additional fees for vaccination, customs, or insurance","The breeder was abroad or had a very new social media profile","Payment was required by wire transfer or cryptocurrency","Photos appeared in reverse image searches linked to other listings"],"whatToDoNow":["Report to the FTC at ReportFraud.ftc.gov","Report the listing to the platform via its abuse tool","Initiate a chargeback with your card issuer for goods not received","Do a reverse image search on the pet photos","Warn the platform's community by posting in relevant groups","See /scams/pet-animal-scams for how pet scams work"],"faq":[{"question":"How do I know if a pet listing is legitimate before I buy?","answer":"Visit the breeder in person if possible, or use live unscripted video to see the puppy in its current environment. Ask for documentation from a recognised kennel club and check the breeder is registered if required in your area."},{"question":"Can I still report a pet scam that happened years ago?","answer":"Yes. Report to the FTC or Report Fraud regardless of when it happened. There is no time limit on fraud reports, though chargeback options are typically limited to 60 to 120 days."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-an-mlm-or-pyramid-scheme","url":"https://scamencyclopedia.org/questions/how-do-i-report-an-mlm-or-pyramid-scheme","question":"How do I report an MLM or pyramid scheme?","shortAnswer":"Report to the FTC at ReportFraud.ftc.gov (US) or Trading Standards via Citizens Advice (UK). Your state attorney general also handles pyramid scheme complaints.","explanation":"Multilevel marketing (MLM) companies occupy a legal grey area, but pyramid schemes that primarily reward recruitment rather than genuine product sales are illegal. If you believe an MLM is operating as a pyramid scheme, the FTC is the primary federal authority in the US. File at ReportFraud.ftc.gov with as much detail as possible about the income structure, recruitment incentives, and whether products are genuinely sold to end consumers or mostly purchased by participants themselves.\n\nState attorneys general also take pyramid scheme cases, particularly when large numbers of state residents are affected. Find your state AG at naag.org. Some states have stricter pyramid selling laws than federal law, making state-level prosecution easier.\n\nIn the UK, Trading Standards has authority to investigate pyramid selling, which is illegal under the Trading Schemes Act. Report via the Citizens Advice consumer helpline at citizensadvice.org.uk. For multi-level marketing companies that are also FCA-regulated, report to the FCA if the investment or savings element is involved.\n\nWhen filing, provide specific income disclosures you were shown during recruitment, the structure of commission payments, any starter kits you were required to purchase, and the total you invested versus total you received back. Detailed financial records significantly strengthen a case.","redFlags":["Earnings came primarily from recruiting new members rather than selling to genuine customers","You were required to buy a starter kit or minimum monthly product order to remain active","Income disclosures showed the vast majority of participants earned little or nothing","Upline members pressured you to recruit family and friends before earning commissions","Products could only be sold to other participants, not to an independent retail market","The company described itself as 'not an MLM' while operating a commission structure based on downline recruitment"],"whatToDoNow":["Report to the FTC at ReportFraud.ftc.gov and to your state AG at naag.org","In the UK, report to Trading Standards via Citizens Advice","Document your total investment versus total return","Preserve all income disclosure documents and recruitment materials","Request any refund due under the cooling-off period","Read /scams/mlm-pyramid-scams for analysis of typical structures"],"faq":[{"question":"What is the difference between a legal MLM and an illegal pyramid scheme?","answer":"In a legal MLM, most revenue comes from genuine retail sales to end consumers. In a pyramid scheme, most revenue comes from recruiting new participants who each buy into the scheme. If there is little genuine retail market, it is likely a pyramid scheme regardless of what products are nominally sold."},{"question":"Can I get my starter kit investment back?","answer":"Some MLM companies have a buyback policy for unused inventory under FTC guidance. Check the company's policies, request a refund in writing, and if refused, raise the issue with the FTC or your state AG."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-student-loan-scam","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-student-loan-scam","question":"How do I report a student loan or education scam?","shortAnswer":"Report to the FTC at ReportFraud.ftc.gov and to the Consumer Financial Protection Bureau (CFPB). For UK student finance scams, report to the Report Fraud service and Student Loans Company.","explanation":"Student loan scams typically involve companies charging fees to access government relief programs, consolidation services, or forgiveness applications that are free to apply for directly, as well as fake scholarship and financial aid offers that require upfront fees. The legitimate US federal student loan forgiveness and consolidation programs are always free at studentaid.gov.\n\nIn the US, report to the FTC at ReportFraud.ftc.gov and to the CFPB at consumerfinance.gov/complaint. The CFPB has enforcement authority over student loan servicers and takes action against deceptive relief companies. Your state attorney general can also act against companies based in your state.\n\nIn the UK, report student finance fraud to the Report Fraud service and to the Student Loans Company's fraud team. Scholarships and bursaries from UK universities and UCAS are free to apply for and never require advance payments.\n\nFor fraudulent degree mills or unaccredited schools that charged tuition for worthless qualifications, report to the Department of Education (US) or the Office for Students (UK). If you took a private loan from the school, consult a consumer rights lawyer about loan discharge options.","redFlags":["A company charged an upfront fee to access student loan forgiveness programs","You were asked for your Federal Student Aid (FSA) login credentials","A scholarship required a processing or application fee to claim","The school was not accredited by a recognised accreditation body","Your loan servicer account was accessed or changed without your consent","A caller warned your student loans would be cancelled unless you acted immediately"],"whatToDoNow":["Report to the FTC and CFPB using their online portals","Change your FSA account password if credentials were shared","Contact your loan servicer directly to verify account status","Report to your state AG if the company was locally based","In the UK, report to the Report Fraud service and the Student Loans Company","Read /scams/education-student-scams for typical patterns"],"faq":[{"question":"Is there a legitimate private service that can help with student loan relief?","answer":"Some non-profit credit counselling organisations offer free guidance on student loan options. The key distinction is that legitimate services never charge upfront fees and never ask for your login credentials. Always go directly to studentaid.gov (US) to manage federal loans."},{"question":"What if I already gave a company my FSA login?","answer":"Change your FSA ID password immediately at fsaid.ed.gov. Contact your loan servicer to confirm no unauthorised changes were made to your account. Report to the FTC and the FSA's fraud hotline."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-business-email-compromise-scam","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-business-email-compromise-scam","question":"How do I report a business email compromise (BEC) scam?","shortAnswer":"Report to the FBI IC3 at ic3.gov immediately and contact your bank to request an emergency wire recall. BEC fraud is time-sensitive — every hour counts.","explanation":"Business email compromise (BEC) occurs when scammers impersonate a company executive, supplier, or partner to redirect payments, often large wire transfers, to accounts they control. It is one of the highest-value fraud types globally, causing billions in losses each year. Immediate action is critical.\n\nCall the FBI's IC3 at ic3.gov or contact your local FBI field office directly. The FBI has a dedicated BEC working group and can issue emergency requests to recipient banks in some cases to freeze fraudulent transfers before the money is moved offshore. Time is absolutely critical: file within hours if possible.\n\nSimultaneously, contact your bank's fraud team and request an emergency wire recall. If the recipient bank is in the US, the FBI and your bank's correspondent banking contacts can sometimes freeze the funds within a business day. If the funds have already been moved to an overseas account, recovery becomes much harder.\n\nAlso report to FinCEN (the Financial Crimes Enforcement Network) if you believe the fraud involved money laundering. Notify your email provider about the compromised or spoofed account. Conduct an internal forensic review to determine how the attacker gained access — whether by compromising an actual email account, by registering a lookalike domain, or by simple impersonation.","redFlags":["A payment request arrived by email that differed from the usual process","An 'executive' or supplier emailed a new bank account for future payments","The request emphasised confidentiality and asked you to bypass normal approval","The email came from a domain with a subtle spelling difference","A supplier updated payment details just before a large invoice was due","The request cited a merger, acquisition, or legal matter to justify urgency"],"whatToDoNow":["File an emergency report at IC3.gov immediately","Call your bank's fraud line to request a wire recall","Contact the FBI field office directly for high-value losses","Notify the real sender whose identity was used","Preserve all email headers and communications as evidence","See /scams/business-scams for BEC prevention steps"],"faq":[{"question":"Can a wire transfer be recalled in BEC fraud?","answer":"Yes, but only within a very narrow window — often hours, rarely more than two business days. The FBI's Financial Fraud Kill Chain has an emergency rapid-response process specifically for BEC fraud. Contact IC3 and your bank simultaneously without delay."},{"question":"Who is liable in a BEC scam — the employee, the company, or the bank?","answer":"Liability is complex and varies by jurisdiction. In many cases the sending company bears the loss unless the bank was negligent. Cyber insurance may cover BEC losses. Consult legal and insurance advisers as part of the incident response."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-fake-cheque-overpayment-scam","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-fake-cheque-overpayment-scam","question":"How do I report a fake cheque or overpayment scam?","shortAnswer":"Report to the FTC at ReportFraud.ftc.gov, the US Postal Inspection Service if the cheque came by mail, and your bank. Never send money back for an overpayment before a deposited cheque fully clears.","explanation":"Fake cheque scams work because banks make funds available quickly before a deposited cheque formally clears. The scammer sends a cheque for more than agreed, asks you to refund the difference or forward part of the funds, and by the time the cheque bounces days or weeks later, the money you sent is gone. You are responsible for the returned cheque even though you thought the funds were available.\n\nReport to the FTC at ReportFraud.ftc.gov and, if the cheque arrived by post, to the US Postal Inspection Service at postalinspectors.uspis.gov. Sending a fraudulent cheque through the mail is a federal crime. In the UK, report to the Report Fraud service (formerly Action Fraud) and to the bank on which the fake cheque was drawn, if identifiable.\n\nNotify your bank immediately. Explain that you may have deposited a fraudulent cheque and forwarded funds before it cleared. Some banks can reverse transfers from your account if you act quickly. They will investigate the cheque and will advise you on liability.\n\nNever transfer or wire money back to someone who overpaid you, regardless of how convincing the story is. Legitimate buyers, employers, and landlords do not overpay and request refunds. Any such request is a scam.","redFlags":["You received a cheque for more than the agreed amount and were asked to refund the difference","A buyer sent 'too much' by mistake and urgently needed the overpayment returned","A job offer sent a cheque and asked you to purchase equipment and return the change","The cheque was drawn on a bank in an unusual location or on a business unconnected to the sender","You were asked to forward funds by wire, gift card, or cryptocurrency before the cheque cleared","The other party was evasive about why they sent more than the agreed amount"],"whatToDoNow":["Do not wire or transfer the overpayment — wait for the cheque to fully clear (minimum 10 days)","Notify your bank immediately if you already transferred funds","Report to the FTC at ReportFraud.ftc.gov","Report to the US Postal Inspection Service if the cheque came by post","In the UK, report to the Report Fraud service","Contact the bank on which the cheque was drawn to alert their fraud team"],"faq":[{"question":"How long does it take for a fraudulent cheque to bounce?","answer":"A fraudulent cheque may not be returned for 7 to 14 days, sometimes longer for international cheques. Even though your bank shows the funds as available after one or two days, the cheque has not formally cleared and you remain liable."},{"question":"What if I already sent back the overpayment?","answer":"Contact your bank immediately to explain what happened and request a recall on the outgoing payment. Report to the FTC and local police. Your liability for the returned cheque still stands, but acting quickly maximises the chance of partial recovery."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-utility-energy-scam","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-utility-energy-scam","question":"How do I report a utility or energy scam?","shortAnswer":"Report to the FTC (US), your state public utilities commission, or Ofgem (UK). Also report to the supplier being impersonated and to Report Fraud if money was lost.","explanation":"Utility scams take several forms: door-to-door salespeople who sign consumers up to energy contracts using deceptive tactics, callers claiming unpaid bills will lead to immediate disconnection unless payment is made now, and fake rebate offers requiring payment to unlock a discount. They frequently impersonate real energy suppliers.\n\nIn the US, your state public utilities commission (PUC) regulates energy suppliers and door-to-door sales tactics. File a complaint at your state PUC's website. The FTC handles deceptive marketing practices more broadly. If the scammer impersonated a specific utility, notify that utility's fraud team directly — most major utilities have a dedicated line.\n\nIn the UK, Ofgem regulates gas and electricity suppliers. Report energy mis-selling to Ofgem at ofgem.gov.uk. Citizen's Advice also takes energy complaints and escalates to the relevant Ombudsman. For criminal fraud, such as threats of disconnection or false billing, report to the Report Fraud service.\n\nNever make a payment over the phone to someone who calls you claiming to be from a utility. Call the number on your official bill to verify before paying anything. Real utilities issue written notices before disconnection, not urgent phone demands.","redFlags":["A caller threatened immediate disconnection unless payment was made by card over the phone","A door-to-door salesperson pressured you to switch suppliers and sign documents on the spot","A text or email offered a large rebate or compensation from your energy supplier","The caller knew your account number but could not answer security questions you set","You were asked to pay by gift card or prepaid card to restore service","A smart meter installation visit asked for access that real engineers do not require"],"whatToDoNow":["Do not pay over the phone — call the number on your official bill to verify","Report to your state PUC (US) or Ofgem (UK)","Report to the FTC or Report Fraud","Notify the energy supplier being impersonated","Contact your bank if payment was made","See /scams/utility-energy-scams for known tactics"],"faq":[{"question":"Can a utility company disconnect me without written notice?","answer":"In the US and UK, regulated utilities must provide multiple written notices and a minimum notice period before disconnecting service. An unexpected phone call demanding immediate payment to avoid disconnection is almost always a scam."},{"question":"What if I signed a door-to-door energy contract under pressure?","answer":"In the EU and UK, you have a 14-day cooling-off period for contracts sold away from business premises. In the US, the FTC's Cooling Off Rule gives you three days for many door-to-door sales. Contact the company in writing to cancel."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-an-auto-vehicle-scam","url":"https://scamencyclopedia.org/questions/how-do-i-report-an-auto-vehicle-scam","question":"How do I report a car or vehicle scam?","shortAnswer":"Report to the FTC, your state attorney general, and the platform where the vehicle was listed. Report VIN fraud or clocking to the DVLA (UK) or the National Motor Vehicle Title Information System (US).","explanation":"Vehicle scams include fake car listings, VIN cloning, odometer fraud (clocking), title washing, and vehicles sold with outstanding finance the buyer is unaware of. The appropriate reporting channel depends on the specific type of fraud.\n\nFor fake online listings — where you paid a deposit or full purchase price for a vehicle that does not exist or was never owned by the seller — report to the FTC at ReportFraud.ftc.gov and to the platform (eBay Motors, Facebook Marketplace, Autotrader, etc.) via their fraud reporting system. Initiate a chargeback with your card issuer if you paid by card.\n\nFor odometer fraud or VIN cloning on a vehicle you purchased in person, report to the National Highway Traffic Safety Administration (NHTSA) at nhtsa.gov in the US, or to the DVLA and Trading Standards in the UK. These agencies have enforcement authority over vehicle history fraud. The FBI IC3 handles organised VIN cloning rings.\n\nIn the UK, check the car's history using the DVLA vehicle enquiry service and a commercial provider like HPI before buying. If you discover outstanding finance on a vehicle you purchased in good faith, report to the FCA and seek legal advice, as you may have rights to a refund under the Consumer Rights Act.","redFlags":["The listed price was far below market value for the vehicle's age and condition","The seller was abroad and used an escrow service not verifiable through official channels","The vehicle had more service stamps than expected for its stated age","The VIN plate was loose, missing, or showed signs of tampering","The seller could not provide the V5C logbook or title within a reasonable time","Warning lights appeared shortly after purchase despite a clean history report"],"whatToDoNow":["Report to the FTC and the listing platform","In the UK, report to Trading Standards and the DVLA","Initiate a chargeback if you paid by card","Report to NHTSA (US) or DVLA (UK) for VIN or odometer fraud","Seek legal advice if you unknowingly bought a vehicle with outstanding finance","Read /scams/auto-vehicle-scams for common fraud patterns"],"faq":[{"question":"What is VIN cloning and is it common?","answer":"VIN cloning is the practice of copying a legitimate vehicle identification number onto a stolen or written-off vehicle to disguise its history. It is more common for high-value vehicles. Always verify the VIN on the vehicle matches the title and log book, and do a history check before buying."},{"question":"I bought a car that turned out to be on finance — what are my rights?","answer":"In the UK, if you are a private purchaser in good faith with no notice of the finance, you may have a defence under the Consumer Credit Act. In the US, laws vary by state. Consult a solicitor or attorney and report the situation to Trading Standards or your state AG."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-an-insurance-scam","url":"https://scamencyclopedia.org/questions/how-do-i-report-an-insurance-scam","question":"How do I report an insurance scam or fraudulent insurer?","shortAnswer":"Report to your state insurance commissioner (US) or the FCA (UK). For organised insurance fraud such as crash-for-cash, also report to the Insurance Fraud Bureau (UK) or the FBI (US).","explanation":"Insurance scams take many forms: unlicensed insurers who collect premiums but never pay claims, staged accidents designed to generate fraudulent claims, ghost brokers who sell fake policies, and claims inflation by third-party repair shops or medical providers. Each type has different reporting channels.\n\nIn the US, every state has an insurance commissioner who regulates insurers and investigates fraud. Find yours at naic.org. The National Insurance Crime Bureau (NICB) at nicb.org accepts reports of vehicle insurance fraud and staged accidents. The FBI IC3 handles internet-facilitated insurance fraud.\n\nIn the UK, report ghost brokers (who sell fake policies) and unlicensed insurers to the FCA at fca.org.uk. Report staged accidents and claims fraud to the Insurance Fraud Bureau (IFB) at cheatline.org.uk (0800 422 0421). Your own insurer has a fraud team and should be the first call if you suspect fraud in your own claim or an opponent's claim.\n\nFor concerns that your own insurance company is unfairly denying legitimate claims or acting in bad faith, file a complaint with your state insurance commissioner (US) or the Financial Ombudsman Service (UK). Document all communications with your insurer thoroughly before escalating.","redFlags":["An insurer was not listed on the FCA register or state insurance department database","A broker provided a certificate of insurance but could not show the underlying policy","Premium costs were significantly below comparable market rates","A vehicle was deliberately stopped in front of you and occupants immediately complained of injury","A repair shop or medical provider encouraged you to claim for work not actually done","Your claim was denied with vague reasoning and no detailed explanation"],"whatToDoNow":["Report to your state insurance commissioner or the FCA","Report staged accidents to the Insurance Fraud Bureau (UK) or NICB (US)","File with the FBI IC3 if internet or wire fraud was involved","Escalate denied claims to the Financial Ombudsman (UK) or state commissioner (US)","Keep all policy documents, correspondence, and claim records","Read /scams/insurance-scams for how ghost brokers and staged accidents work"],"faq":[{"question":"Is it fraud if I exaggerate a legitimate insurance claim?","answer":"Yes. Inflating a genuine claim is insurance fraud in all jurisdictions. It can result in your policy being voided, prosecution, and a fraud marker on your record. Always claim honestly."},{"question":"What is a ghost broker?","answer":"A ghost broker is an unlicensed person who sells fake or artificially manipulated insurance policies, often at cut prices. The policy appears valid but is worthless when you need to claim. Verify any broker is FCA-registered (UK) or state-licensed (US) before purchasing."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-gaming-scam","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-gaming-scam","question":"How do I report a scam in an online game or gaming platform?","shortAnswer":"Report to the game publisher or platform using their in-game or website reporting tool. For real-money losses, also report to the FTC and your card issuer.","explanation":"Gaming scams include fake item trades, phishing for account credentials, fraudulent third-party item marketplaces, and boosting services that steal accounts. Because much of the activity involves virtual currency or in-game items rather than cash, many victims assume nothing can be done — but real money is often at stake and reporting is worthwhile.\n\nReport to the game publisher using their in-game reporting tools or by submitting a support ticket. Provide the username of the scammer, a description of what happened, and screenshots. Major publishers including Valve, Activision, Epic, and Riot Games have dedicated trust and safety teams that investigate fraud reports.\n\nFor third-party skin or item marketplaces that committed fraud, report to the FTC if you are in the US or Report Fraud (formerly Action Fraud) if you are in the UK. If you paid real money for items or services that were not delivered, initiate a chargeback with your card issuer.\n\nFor account credential theft, change your password immediately, enable two-factor authentication, and review your payment methods linked to the account. Report the compromise to the platform so they can investigate whether your account was used to defraud others.","redFlags":["A trade partner substituted a low-value item at the last moment before confirming","A website offered game currency or items at prices too low to be legitimate","A message from another player offered a free gift requiring you to log in via a link","A boosting service took payment but never delivered the promised rank","Your account was accessed from an unfamiliar device after clicking an external link","A Discord message from a 'friend' offered skins in exchange for logging into a site"],"whatToDoNow":["Report the player or transaction via the in-game report tool","Submit a support ticket to the game publisher with full evidence","Change your password and enable two-factor authentication","Review and remove any unfamiliar payment methods on the account","Initiate a chargeback with your card issuer for real-money losses","See /scams/gaming-scams for common platform-specific scam patterns"],"faq":[{"question":"Can a game publisher return stolen in-game items?","answer":"Some publishers can reverse fraudulent trades or restore stolen items if you report quickly and provide evidence. This is not guaranteed and depends on the publisher's policies. Steam, for example, explicitly states it cannot reverse in-game item trades."},{"question":"Is it worth reporting small in-game scams?","answer":"Yes. Reports build a picture of which players are running scam operations, and patterns across many small reports can lead to bans and larger investigations by the publisher."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-an-ai-deepfake-scam","url":"https://scamencyclopedia.org/questions/how-do-i-report-an-ai-deepfake-scam","question":"How do I report an AI deepfake or impersonation scam?","shortAnswer":"Report to the FTC, the FBI IC3, and the platform hosting the content. For voice or video cloning of a real person, also notify that person and their legal representatives.","explanation":"AI-powered scams using voice cloning, deepfake videos, and synthetic text are a rapidly growing category. They are used to impersonate family members in 'grandparent scams,' to fake celebrity endorsements in investment ads, and to create convincing phishing communications. The reporting channels are the same as for other online fraud, but the evidence you preserve should include the specific AI-generated content.\n\nIn the US, report to the FTC at ReportFraud.ftc.gov and the FBI IC3 at ic3.gov. Describe explicitly that the scam used AI-generated voice, video, or text. The FTC and FCC have both indicated that using AI to clone someone's voice for deceptive purposes violates existing laws. The FCC's TRACED Act has been used to pursue AI-generated robocall campaigns.\n\nFor deepfake videos or images hosted on social platforms, use the platform's in-app reporting tool. Many platforms have specific categories for synthetic or manipulated media. Also report to the platform's trust and safety team by email, describing the specific AI abuse.\n\nIf a real individual's likeness was used without consent, notify them directly if possible. Public figures often have legal teams who can pursue defamation or right-of-publicity claims against the creators. Preserve the content — download screenshots, save URLs, and record audio before reporting as the platform may remove it.","redFlags":["A video of a celebrity appeared to be endorsing an investment or health product","A phone call using a familiar voice asked for money urgently in an unusual way","A video call showed a person in an unusual environment with slightly unnatural movement","An audio clip of a public figure made claims inconsistent with their public positions","A chatbot conversation moved unusually fast toward a financial solicitation","Images of a real person appeared in advertising they publicly denied endorsing"],"whatToDoNow":["Report to the FTC and FBI IC3, noting that AI-generated content was used","Report the content to the hosting platform via in-app tools","Screenshot and preserve the content before it is removed","Notify the real person being impersonated if identifiable","Report to the FCC (US) for AI-generated robocalls","See /scams/ai-era-scams for emerging AI fraud patterns"],"faq":[{"question":"Is creating a deepfake of a real person illegal?","answer":"Creating deepfakes for fraud, defamation, or non-consensual intimate imagery is illegal in many jurisdictions and the law is expanding rapidly. Using a deepfake to obtain money is fraud. Using someone's likeness commercially without consent may also violate right-of-publicity laws."},{"question":"How do I know if a video or audio is AI-generated?","answer":"Look for unnatural blinking, inconsistent lighting, audio that does not quite sync with lip movements, and unusual background elements. Specialist deepfake detection tools exist, but AI quality is improving rapidly. When in doubt, verify directly with the person before taking any financial action."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-mail-parcel-scam","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-mail-parcel-scam","question":"How do I report a mail or parcel delivery scam?","shortAnswer":"Report smishing parcel scam texts to 7726 and to the courier being impersonated. Report mail fraud in the US to the Postal Inspection Service at postalinspectors.uspis.gov.","explanation":"Mail and parcel scams fall into two main types: smishing messages impersonating couriers (Royal Mail, DHL, FedEx, UPS) asking you to pay a small 'customs fee' by clicking a link, and physical mail fraud such as prize notifications, fake lottery letters, and advance fee letters sent by post.\n\nFor smishing texts, forward to 7726 and report to the courier being impersonated via their official fraud reporting page. Most major couriers have a dedicated phishing report email address. Do not click any link in the message. Royal Mail, DHL, and FedEx all state they do not send payment request texts; any such text is fraudulent.\n\nFor physical mail fraud in the US, report to the US Postal Inspection Service (USPIS) at postalinspectors.uspis.gov or call 1-877-876-2455. The USPIS investigates mail fraud and can take action against companies sending fraudulent letters. Preserve the original envelope and all contents as evidence.\n\nIn the UK, report suspicious postal mail to the Report Fraud service (formerly Action Fraud) and to Royal Mail's fraud team if Royal Mail's branding was misused. Citizens Advice handles consumer complaints about deceptive direct mail from traders.","redFlags":["A text claimed a parcel was held pending a small customs or redelivery fee","A letter congratulated you on winning a prize you never entered","The mailing included a cheque requiring you to pay processing fees before depositing","An official-looking envelope contained a request for personal or financial details","The letter appeared to come from a government department but had unusual payment instructions","A courier notification asked for payment before your parcel would be released"],"whatToDoNow":["Forward scam texts to 7726 and report to the courier being impersonated","Report physical mail fraud to the USPIS (US) or Report Fraud (UK)","Preserve the original envelope, letter, and any enclosures","Do not click links in suspicious texts","Report to the FTC at ReportFraud.ftc.gov","See /scams/mail-courier-scams for how these scams are structured"],"faq":[{"question":"Do real couriers ever charge for re-delivery by text?","answer":"Legitimate couriers may notify you of a delivery attempt by text, but they will not ask you to follow a link and pay a fee to release a parcel. If you are genuinely unsure, go directly to the courier's official website and track your parcel there."},{"question":"Can I report mail fraud anonymously?","answer":"Yes. The US Postal Inspection Service accepts anonymous tips. You can submit without your personal information if you prefer not to be identified."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-legal-immigration-scam","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-legal-immigration-scam","question":"How do I report a legal or immigration scam?","shortAnswer":"Report to the FTC, the state bar association (if a fake lawyer was involved), and USCIS (US) or the Solicitors Regulation Authority (UK). For notario fraud, report to the Department of Justice.","explanation":"Legal and immigration scams exploit people who need genuine help navigating complex systems. In the US, 'notario fraud' is particularly harmful: in some Latin American countries, a 'notario' is a highly qualified legal professional, but in the US the term is used by unqualified individuals who fraudulently provide legal services to immigrants, often filing false or damaging documents.\n\nReport notario fraud and immigration consultant fraud to the FTC at ReportFraud.ftc.gov, to the Department of Justice's Executive Office for Immigration Review (EOIR), and to your state attorney general. The FTC has a dedicated Spanish-language resource for notario fraud victims.\n\nIf someone falsely claimed to be a licensed attorney, report to your state bar association. Bar associations can discipline or disbar lawyers and can pursue criminal referrals for false practice. In the UK, report fake solicitors to the Solicitors Regulation Authority (SRA) at sra.org.uk.\n\nIf a fraudulent immigration adviser filed documents on your behalf, immediately contact a legitimate immigration attorney to assess the damage to your case. Fraudulent filings can have serious immigration consequences, and legal remedies may be available to correct the record.","redFlags":["A notario or immigration consultant promised to resolve your case faster than official channels","You were told to sign blank forms that the consultant would fill in later","Upfront fees were paid but the consultant became uncontactable afterward","The 'lawyer' could not show a valid state bar number","Documents filed on your behalf contained false information","You were promised a visa or immigration status that is not legally available"],"whatToDoNow":["Report to the FTC and your state AG","Report fake lawyers to your state bar association","In the UK, report to the SRA at sra.org.uk","Report immigration fraud to USCIS at uscis.gov","Consult a licensed immigration attorney to assess your case","See /scams/legal-immigration-scams for how to identify unqualified practitioners"],"faq":[{"question":"Is a notario the same as a notary public in the US?","answer":"No. A US notary public is an official who witnesses signatures; they are not authorised to give legal advice or file immigration documents. The confusion is deliberate in notario fraud."},{"question":"What if a fraudulent consultant filed immigration papers in my name?","answer":"This is a serious situation. Contact a licensed immigration attorney immediately. It may be possible to withdraw or correct filings, and there are specific legal protections for immigrants harmed by authorised representative fraud."}],"lastReviewed":"2026-06-10"},{"slug":"how-long-do-i-have-to-report-a-scam","url":"https://scamencyclopedia.org/questions/how-long-do-i-have-to-report-a-scam","question":"How long do I have to report a scam?","shortAnswer":"There is no time limit for reporting to the FTC, Report Fraud, or Scamwatch. However, chargeback and bank fraud claim windows are typically 60 to 120 days, so act on financial disputes as fast as possible.","explanation":"Government fraud reporting agencies — the FTC, FBI IC3, Report Fraud, and Scamwatch — have no formal deadline for accepting reports. You can report a scam that happened years ago. Older reports have less immediate recovery value but still contribute to intelligence, pattern detection, and class-action investigations.\n\nBank fraud claim timelines are much stricter. In the US, the Electronic Fund Transfer Act gives you 60 days from your statement to report unauthorised electronic transactions. Credit card chargebacks are governed by your card network (Visa, Mastercard) and typically allow 60 to 120 days from the transaction date or from when you realised there was a problem, depending on the reason code. Some banks apply their own shorter deadlines on top of network rules.\n\nIn the UK, under the Consumer Credit Act and the FCA's APP reimbursement rules, banks must be notified promptly. While there is no absolute statutory cut-off, the sooner you report, the stronger your case. The Financial Ombudsman Service accepts complaints up to six years after the event, or three years from when you knew you could complain.\n\nFor civil litigation, the limitation period for fraud in the US is typically 2 to 5 years from discovery, varying by state. In England and Wales, it is 6 years from the date of the fraud or 3 years from discovery. If you are considering legal action, consult a solicitor or attorney promptly.","redFlags":["A 'recovery service' tells you it is too late to report through official channels and only they can help","You are offered a settlement from a class action you were unaware of, requiring an upfront fee","A lawyer you have not contacted calls to offer representation for a past fraud with no explanation of how they know","Someone claims your old report has been 'escalated' and requires a fee to proceed"],"whatToDoNow":["File with the FTC, Report Fraud, or Scamwatch as soon as you can, regardless of time passed","Contact your bank within their stated chargeback window — typically 60 to 120 days","Place a fraud alert with credit bureaus if personal data was involved","Consult a solicitor or attorney if you are considering civil action","Review /recovery for a timeline of all relevant deadlines","Preserve all evidence regardless of when you plan to report"],"faq":[{"question":"Is there a time limit on reporting identity theft?","answer":"There is no deadline to report identity theft to the FTC or Report Fraud. However, disputing fraudulent accounts on your credit file is easier soon after discovery. You can request that credit bureaus add a statement to your file at any time."},{"question":"Can I still get a refund from my bank if it has been more than 120 days?","answer":"The chargeback window has likely closed, but you can still escalate a complaint through formal channels. In the UK, the Financial Ombudsman can review bank disputes up to six years back in some cases. In the US, file a complaint with the CFPB."}],"lastReviewed":"2026-06-10"},{"slug":"what-information-do-i-need-to-report-a-scam","url":"https://scamencyclopedia.org/questions/what-information-do-i-need-to-report-a-scam","question":"What information do I need to report a scam?","shortAnswer":"Gather dates, amounts, contact details used by the scammer, screenshots or records of communications, and any transaction references. The more detail you provide, the more useful your report.","explanation":"A strong fraud report gives investigators a clear trail to follow. Collect as much of the following as possible before filing: the dates and times of every interaction, the exact amounts of any payments made, the names, phone numbers, email addresses, usernames, and website URLs associated with the scammer, the method of payment (card, wire, gift card, crypto), and transaction references or confirmation numbers.\n\nFor digital scams, preserve the actual evidence: take screenshots of the platform, profile, listing, or conversation. Forward suspicious emails to the relevant reporting inbox before deleting them. For phishing emails, the email header contains technical information about the sending server that investigators can use; learn how to view full headers in your email client or ask a tech-savvy friend to help.\n\nFor phone scams, write down the number that appeared on your caller ID, the time and duration of the call, the gist of what the caller said, and any reference numbers they gave you. If the call was from a spoofed number, note this and describe the claimed organisation.\n\nFor in-person scams, note physical descriptions, any vehicle registration numbers, business names or addresses, and the names used. Even partial information is useful. Do not exaggerate or speculate — investigators prefer accurate partial information over embellished accounts.","redFlags":["You are tempted to fill in gaps in your memory with guesses — stick to what you know","The scammer gave you a reference number or case number that may be fake evidence","Evidence is only available for a limited time before being deleted by the platform","You shared a device with the scammer during a remote access incident","Any cryptocurrency transaction IDs need to be copied exactly — even one character error makes them unusable"],"whatToDoNow":["Screenshot or download all evidence as soon as you suspect fraud","Write down every interaction with dates and times before memory fades","Record transaction IDs, wire reference numbers, and wallet addresses exactly","Save email headers as well as message content","Organise evidence in a folder before starting the report form","Visit /report-a-scam for a pre-report checklist"],"faq":[{"question":"Do I need to provide my own personal details to file a report?","answer":"Most agencies allow anonymous reports, but providing your contact details makes it possible for investigators to follow up. Your details are not published and are protected under data protection laws."},{"question":"What if I no longer have access to the scam account or messages?","answer":"Report what you can remember and note that evidence was deleted or accounts were removed. Agencies understand this happens and will still log your report. Even incomplete reports are valuable."}],"lastReviewed":"2026-06-10"},{"slug":"can-scammers-be-prosecuted-after-i-report","url":"https://scamencyclopedia.org/questions/can-scammers-be-prosecuted-after-i-report","question":"Can scammers actually be prosecuted after I report them?","shortAnswer":"Yes, prosecution is possible, especially when multiple reports point to the same operation. Overseas scammers face practical but not insurmountable obstacles through international cooperation.","explanation":"Criminal prosecution following scam reports does happen, though it requires aggregated evidence across many victims and is more likely for large, domestically based operations than for individual overseas actors. The FTC, FBI, and state attorneys general have successfully prosecuted major fraud schemes, resulting in prison sentences and significant asset seizures.\n\nInvestigators look for patterns: the same bank account, phone number, website, or script appearing in hundreds of reports. This is why filing a report even for a small loss matters — your data point may be the one that reaches a threshold prompting action. Reports from multiple states or jurisdictions also help route cases to federal prosecutors who can pursue larger penalties.\n\nFor overseas scammers, prosecution relies on mutual legal assistance treaties (MLATs) and bilateral relationships between law enforcement agencies. Operations in countries with limited cooperation present the greatest obstacles. However, international enforcement has improved significantly, and operations impersonating US brands from overseas have been dismantled through joint FBI-Interpol operations.\n\nProceeds of crime legislation in the UK and RICO statutes in the US allow asset seizure even when criminal conviction is difficult to obtain. Civil courts can also be used to pursue scammers or their associates within domestic reach. The prospect of full restitution through prosecution is rare for individual victims, but prosecution does happen and deters future fraud.","redFlags":["A 'recovery lawyer' calls promising guaranteed prosecution if you hire them","Someone guarantees a refund via prosecution and asks for a fee to initiate it","A 'case manager' provides updates on fabricated court proceedings to build trust"],"whatToDoNow":["File detailed reports with the FTC, IC3, and relevant agencies","Preserve all evidence to support any future investigation","Accept that individual prosecution timelines are long and uncertain","Focus your near-term energy on financial recovery through your bank","See /recovery for realistic steps toward getting money back","Use /questions for further answers about the reporting process"],"faq":[{"question":"How long does it take for a fraud case to reach prosecution?","answer":"Complex fraud cases typically take two to five years from initial reports to prosecution. Large multi-victim cases require extensive evidence gathering, international coordination, and lengthy legal proceedings."},{"question":"Will I be called as a witness if the scammer is prosecuted?","answer":"Possibly. Investigators may contact you for a formal statement. Your testimony can strengthen a prosecution. Most victims find this a positive step if they choose to participate."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-scam-if-i-am-embarrassed","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-scam-if-i-am-embarrassed","question":"How do I report a scam if I feel embarrassed or ashamed?","shortAnswer":"Reporting is confidential and your identity is protected. Scammers are professionals exploiting human psychology — falling for a scam says nothing about your intelligence.","explanation":"Shame is one of the most powerful tools scammers use, whether intentionally or as a side effect. Many victims, particularly those who were defrauded in romance scams, investment schemes, or by people they trusted, delay or avoid reporting out of embarrassment. This delay costs money, allows the scammer to continue victimising others, and can worsen the psychological impact.\n\nReporting agencies are not there to judge you. The FTC, Report Fraud (formerly Action Fraud), and Scamwatch process millions of reports each year from people of all ages, education levels, and professions. Investigators are trained to be empathetic and non-judgmental. Your personal information is protected under data protection laws and is not shared with the public.\n\nIt is worth understanding that scammers use professional-grade psychological techniques. They study their targets, create false intimacy or urgency, and deliberately target people when they are most vulnerable — after a bereavement, during financial stress, or when lonely. Responding to these techniques is a human response, not a personal failing.\n\nTalking to someone you trust before or after reporting can help. Many countries have scam victim support organisations, including the Scam Survivors support community and Victim Support in the UK. These can provide emotional support alongside practical advice. See /recovery for resources.","redFlags":["The scammer warned you that reporting would expose embarrassing information","Shame is the main reason you have not yet taken any recovery action","You are blaming yourself rather than the scammer who deliberately targeted you"],"whatToDoNow":["Remember: reporting is confidential and protects others from the same scammer","Contact the FTC, Report Fraud, or Scamwatch — their teams are trained in victim support","Tell one trusted person what happened before you report if that helps","Seek emotional support from a scam survivor community or Victim Support","Focus energy on recovery steps rather than self-blame","Read /recovery for a practical guide to next steps"],"faq":[{"question":"Will my name appear in a court case if I report?","answer":"Victim names in fraud cases are typically protected. If a case goes to prosecution and you are called as a witness, there are procedures for protecting vulnerable witnesses. Discuss any concerns with the investigating officer at that stage."},{"question":"What if the scam involved something I am ashamed of, like sending intimate images?","answer":"Sextortion and intimate image abuse are taken very seriously by law enforcement. There are specific support services and laws protecting victims. Report to the platform and to the Revenge Porn Helpline (UK) or Cyber Civil Rights Initiative (US) in addition to the police."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-scam-on-behalf-of-someone-else","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-scam-on-behalf-of-someone-else","question":"How do I report a scam on behalf of someone else?","shortAnswer":"You can file a report on someone else's behalf with the FTC, Report Fraud, or Scamwatch. Describe your relationship to the victim and what you know about the fraud.","explanation":"Family members, carers, and friends frequently report on behalf of scam victims who are elderly, vulnerable, or who do not have the confidence or technical ability to file themselves. All major reporting agencies accept third-party reports and specifically invite them for cases involving vulnerable adults.\n\nWhen filing on someone else's behalf, describe clearly that you are reporting for another person. Provide the victim's details and your relationship to them. Include as much information about the scam as you know. If you are the victim's legal guardian, carer, or hold power of attorney, note this in the report.\n\nFor bank reports, you will typically need to call rather than file online, as the bank needs to verify your authority to act. If you are a legal guardian or hold a third-party authority on the account, have this documentation ready. Many UK banks have vulnerable customer teams that are trained to handle third-party fraud reports sensitively.\n\nIf you are concerned that a vulnerable adult is at ongoing risk — continuing to send money, still in contact with the scammer, or unable to recognise the fraud — also contact Adult Protective Services (US) or your local council's Adult Social Care team (UK). These services can intervene to provide support and, in serious cases, safeguarding protection.","redFlags":["The victim is still in contact with the scammer and sending money","The victim is isolated from family and friends as a result of the scammer's influence","The victim becomes defensive or upset when the fraud is raised with them","Significant sums have been withdrawn from the victim's account","The victim is elderly and the scammer is the primary contact for advice"],"whatToDoNow":["File a third-party report at the FTC, Report Fraud, or Scamwatch","Contact the victim's bank to flag potential exploitation","Contact Adult Protective Services or Adult Social Care if safety is a concern","Do not confront the scammer directly — this could escalate the situation","Involve other trusted people in the victim's life gradually","Read /family-safety for guidance on protecting vulnerable family members"],"faq":[{"question":"Can I report without the victim's permission?","answer":"Yes. You do not need the victim's permission to report to the FTC, Report Fraud, or Adult Protective Services. In fact, waiting for permission can delay protection in urgent cases."},{"question":"What if the victim does not believe they are being scammed?","answer":"This is very common. Focus on practical protection — talking to the bank about adding account alerts, involving a GP or social worker if there are vulnerability concerns — rather than trying to convince the victim in direct confrontation."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-scam-risk-score","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-scam-risk-score","question":"How do I use a scam risk checker or risk score tool?","shortAnswer":"Use the ScamEncyclopedia risk checker at /risk-score/scam-risk-checker to assess a suspicious message, website, or contact, then report through the appropriate official channel based on the results.","explanation":"A scam risk checker asks you structured questions about a contact, website, message, or offer, and returns a risk assessment based on known fraud patterns. It is a useful first step when you are unsure whether something you received is a scam before committing to a full report with an official agency.\n\nThe ScamEncyclopedia risk checker at /risk-score/scam-risk-checker covers common indicators such as unsolicited contact, payment method, urgency, anonymity, and promises that match known scam scripts. A high risk score indicates you should stop all contact and consider reporting, even if you have not yet lost money.\n\nRisk checkers are informational tools and are not a substitute for official reporting. If the checker flags a high risk and you have lost money or personal data, proceed to ReportFraud.ftc.gov, reportfraud.police.uk, or ic3.gov depending on your situation. The checker result can provide a useful context summary to include in your report.\n\nFor suspicious websites, also use Google's Safe Browsing transparency report at transparencyreport.google.com/safe-browsing/search to see whether a URL has been flagged. For phone numbers, services such as TrueCaller and Hiya aggregate user reports to flag known scam numbers before you answer.","redFlags":["The contact has several characteristics the risk checker flagged as high-risk","You are feeling pressured to act before checking whether the contact is legitimate","The other party discourages you from using any verification tools","The offer or situation closely matches a pattern described in a known scam category"],"whatToDoNow":["Use the risk checker at /risk-score/scam-risk-checker before responding","If the score is high, stop all contact with the other party","Check a suspicious phone number on TrueCaller or Hiya","Verify a suspicious website on Google's Safe Browsing transparency report","Report to the FTC or Report Fraud (formerly Action Fraud) if the risk checker confirms your concerns","Visit /report-a-scam for a guided reporting pathway"],"faq":[{"question":"Is the risk checker 100% accurate?","answer":"No risk checker can guarantee accuracy because scams evolve constantly. A low risk score does not mean something is definitely safe. Use the checker alongside your own judgement and, when in doubt, do not proceed."},{"question":"Can I use the risk checker anonymously?","answer":"Yes. The ScamEncyclopedia risk checker does not require you to create an account or provide personal details."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-scam-to-trading-standards-uk","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-scam-to-trading-standards-uk","question":"How do I report a scam to Trading Standards in the UK?","shortAnswer":"Report to Trading Standards via the Citizens Advice consumer helpline at 0808 223 1133. Citizens Advice passes reports to Trading Standards and can advise on your consumer rights.","explanation":"Trading Standards is the local authority body responsible for enforcing consumer protection law in the UK, covering areas such as unfair trading, counterfeit goods, misleading price claims, and rogue traders. You cannot contact Trading Standards directly for consumer complaints; instead, go through Citizens Advice, which triages and escalates to the relevant local authority team.\n\nThe Citizens Advice consumer helpline is 0808 223 1133 and is available Monday to Friday. You can also report online at citizensadvice.org.uk. Advisers will listen to your complaint, assess which consumer rights apply, and submit the report to Trading Standards on your behalf. They can also advise on whether you are entitled to a refund under consumer protection legislation.\n\nTrading Standards is effective for complaints about businesses — rogue builders, fake goods, subscription traps, and energy mis-selling — rather than individual scammers. If your complaint is about an organised criminal fraud, Report Fraud (formerly Action Fraud) is the primary channel, but Trading Standards and Report Fraud share intelligence.\n\nFor scams involving food, product safety, or illegal medical products, Trading Standards works alongside the Food Standards Agency and the MHRA. If you purchased a dangerous or counterfeit product, this is the route to ensure the product is removed from sale.","redFlags":["A trader used high-pressure doorstep selling and did not mention your cooling-off rights","A product was significantly different from how it was described","A business was trading without the required licences or registrations","A service was deliberately misleadingly priced","You were sold counterfeit or unsafe goods","A subscription continued after cancellation"],"whatToDoNow":["Call Citizens Advice on 0808 223 1133 or report online at citizensadvice.org.uk","Keep all receipts, contracts, and correspondence","If the trader is still on your property, call police if you feel threatened","For criminal fraud, also report to the Report Fraud service at reportfraud.police.uk","Contact your card issuer if you paid by card","Visit /report-a-scam for the full UK reporting pathway"],"faq":[{"question":"Will Trading Standards contact me after I report?","answer":"Citizens Advice will acknowledge your report. Trading Standards may contact you if they need more information or are pursuing an investigation. However, many complaints are processed without direct follow-up."},{"question":"Can Trading Standards get my money back?","answer":"Trading Standards can take enforcement action against a business but does not directly return consumer money. However, their involvement strengthens your case with your bank or card issuer for a chargeback or refund."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-scam-to-the-financial-ombudsman-uk","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-scam-to-the-financial-ombudsman-uk","question":"How do I report a scam-related dispute to the Financial Ombudsman in the UK?","shortAnswer":"If your bank or financial firm has not resolved your fraud complaint within eight weeks, escalate to the Financial Ombudsman Service at financial-ombudsman.org.uk.","explanation":"The Financial Ombudsman Service (FOS) is an independent body in the UK that resolves disputes between consumers and financial firms, including banks, insurers, and investment firms. It is not a first-line scam reporter but a dispute resolution service when a financial firm has not handled your complaint fairly.\n\nBefore going to the FOS, you must first complain directly to the bank or financial firm involved and give them up to eight weeks to respond. If they reject your complaint or do not respond within eight weeks, you have six months to escalate to the FOS from the date of their final response letter.\n\nThe FOS is especially relevant for APP fraud disputes (where you were tricked into authorising a bank transfer), chargeback disputes where the bank has refused to cooperate, and insurance claims that have been rejected. The FOS has binding authority over regulated firms up to set compensation limits, which are reviewed periodically.\n\nTo file, go to financial-ombudsman.org.uk and complete the online form. Provide a clear description of the scam, your complaint to the firm, their response, and why you believe the response was unfair. There is no fee for consumers. The process typically takes three to six months but can be longer for complex cases.","redFlags":["Your bank rejected your APP fraud claim without a clear explanation","A chargeback was denied despite clear evidence of non-delivery or fraud","The bank took longer than eight weeks to respond to your written complaint","An insurance claim for fraud losses was rejected with vague reasoning","The firm's final response letter contained factual inaccuracies"],"whatToDoNow":["Complain to the financial firm in writing first and keep a record","Wait up to eight weeks for their formal response","If unsatisfied, escalate to the FOS at financial-ombudsman.org.uk within six months","Provide the firm's final response letter and all supporting evidence","Also report the underlying scam to the Report Fraud service (formerly Action Fraud) if not already done","Visit /recovery for a timeline of UK complaint escalation steps"],"faq":[{"question":"Is the Financial Ombudsman free to use?","answer":"Yes. The FOS is completely free for consumers. Financial firms pay a case fee when a complaint is escalated, which incentivises them to resolve complaints directly rather than have them reach the Ombudsman."},{"question":"Does the FOS decision bind my bank?","answer":"Yes. If you accept an FOS decision, it is legally binding on the financial firm. You retain the right to reject the decision and pursue other legal avenues if you are not satisfied."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-scam-to-the-cfpb","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-scam-to-the-cfpb","question":"How do I report a financial scam to the CFPB in the US?","shortAnswer":"File a complaint at consumerfinance.gov/complaint. The CFPB handles complaints about banks, lenders, credit bureaus, and financial services companies — particularly useful for student loan, mortgage, and debt collection fraud.","explanation":"The Consumer Financial Protection Bureau (CFPB) is a US federal agency that supervises consumer financial products and services. While the FTC has broader fraud jurisdiction, the CFPB has specific authority over banks, credit unions, lenders, mortgage servicers, debt collectors, credit reporting agencies, and student loan servicers. If a financial institution or financial service provider mistreated you in connection with a scam, the CFPB may be the better reporting channel.\n\nFile a complaint at consumerfinance.gov/complaint. Choose the financial product or company type from the menu, describe what happened, and include dates and amounts. The CFPB forwards complaints to the company for a response, typically within 15 days. You can track the status of your complaint online. The CFPB also publishes complaint data, which creates public accountability for firms.\n\nThe CFPB has taken major enforcement actions against companies that facilitated fraud, particularly student loan relief scammers, payday lenders using deceptive practices, and debt collectors violating the Fair Debt Collection Practices Act. Filing with the CFPB and the FTC together maximises the chance of enforcement attention.\n\nIf your bank or lender failed to protect you from a fraud that their systems should have detected, the CFPB's supervisory authority means they can require the institution to explain its practices.","redFlags":["A lender used deceptive marketing to sell you a financial product","A debt collector threatened you with false legal action","A student loan servicer misapplied your payments or gave inaccurate information","A credit reporting agency refused to remove fraudulent accounts after your dispute","A mortgage servicer charged unauthorised fees or force-placed expensive insurance"],"whatToDoNow":["File at consumerfinance.gov/complaint","Also report to the FTC at ReportFraud.ftc.gov","Contact your state attorney general for local enforcement","Gather all account statements and correspondence as evidence","Track your CFPB complaint status online","See /scams/finance-scams for relevant fraud patterns"],"faq":[{"question":"Does the CFPB handle cryptocurrency complaints?","answer":"The CFPB has jurisdiction over some crypto products marketed as financial services or used by financial institutions. For pure cryptocurrency fraud, the FTC and CFTC are more appropriate. Report to both if you are unsure."},{"question":"Will the company I complain about know it came from me?","answer":"Yes. The CFPB forwards your complaint to the company to investigate, and the company will know the complaint was filed. Your complaint narrative may be published in the CFPB's public database, but personal identifying information is redacted."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-scam-involving-cryptocurrency-exchange","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-scam-involving-cryptocurrency-exchange","question":"How do I report a scam to a cryptocurrency exchange?","shortAnswer":"Contact the exchange's fraud or security team immediately with wallet addresses and transaction IDs. Some exchanges can freeze funds or assist law enforcement if you act within hours.","explanation":"If you used a regulated cryptocurrency exchange such as Coinbase, Binance, Kraken, or similar to send funds that turned out to be part of a scam, contact the exchange's fraud team as quickly as possible. Find their official support or security contact on the exchange's verified website, not from a Google search or email link.\n\nProvide the exchange with the exact wallet address you sent funds to, the transaction ID (TXID), the date and time of the transaction, and a description of the fraud. Explain that you believe you were a victim of fraud and request that they flag the receiving address. Some exchanges have relationships with law enforcement and can assist with account freezes if the funds have not yet left the platform.\n\nAll regulated cryptocurrency exchanges in the US are required to file Suspicious Activity Reports (SARs) with FinCEN when they suspect fraud or money laundering. Your report to the exchange may trigger this process. In the UK, exchanges regulated under the FCA similarly have reporting obligations to the National Crime Agency.\n\nAlso report the wallet addresses to the blockchain analysis services that exchanges use, such as Chainalysis and Elliptic, via their public reporting tools. These firms maintain blocklists of known fraud addresses that are used by exchanges and law enforcement globally.","redFlags":["The destination wallet address appeared in known scam databases","You were instructed to use a specific exchange you had never heard of","The exchange's website had an unusual domain spelling or was recently registered","Withdrawal from the platform required 'tax clearance' payments","Customer support was only available via Telegram or WhatsApp, not official channels","Account balances showed large profits that could never be withdrawn"],"whatToDoNow":["Contact the exchange's official fraud team immediately with transaction details","Report to the FBI IC3 and the FTC","Report the wallet address to blockchain analysis firms if they have public reporting tools","Do not make any further deposits to the platform","Preserve all screenshots, emails, and transaction records","Read /scams/crypto-web3-scams for exchange fraud patterns"],"faq":[{"question":"Can an exchange freeze funds sent to a scam wallet?","answer":"Only if the receiving account is on the same exchange and the funds have not yet been moved to an external wallet. Once funds leave the exchange's ecosystem, the exchange has no control over them."},{"question":"Should I report to multiple exchanges if the funds passed through several?","answer":"Yes. Report to every exchange that handled the funds. Each exchange may hold different information and have different legal obligations depending on their regulatory jurisdiction."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-scam-that-happened-abroad","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-scam-that-happened-abroad","question":"How do I report a scam that happened while I was abroad?","shortAnswer":"Report to local police abroad for a crime reference, then file with your home country's agency (FTC, Report Fraud, ACCC) and contact your bank as soon as you return or have connectivity.","explanation":"Scams targeting tourists and travellers include fake tour operators, currency exchange fraud, rigged casino games, spiked drink theft, and online fraud that is technically based overseas but targets you from home. The appropriate reporting channels depend on where the fraud occurred and who perpetrated it.\n\nFor in-person scams abroad, report to local police at the nearest station, even if you need a translator or the police report is in the local language. Many countries issue tourist police reports for exactly this purpose. This report is essential for insurance claims and may contribute to local investigations.\n\nOn return, file with your home reporting agency (FTC, Report Fraud, or ACCC). These agencies can share intelligence with overseas counterparts through Interpol and bilateral agreements. For scams involving UK tour operators or travel agents, report to ABTA and ATOL even if the fraud occurred in another country.\n\nFor financial fraud — fake money exchanges, credit card skimming, or online fraud attributable to an overseas actor — contact your bank and card issuer immediately. Card network chargeback processes apply across borders. Your travel insurer may also cover scam losses depending on your policy.","redFlags":["You were approached by someone offering an unusually good exchange rate","A local 'guide' offered a private tour that ended at a shop where you were pressured to buy","A casino or card game used sleight of hand to manipulate the outcome","Your card was taken away for payment and returned but charges appeared later","A fake ticket seller provided tickets that turned out to be counterfeit","A taxi driver took a long route and charged far above the normal fare using a manipulated meter"],"whatToDoNow":["Get a police report from local authorities before leaving","Contact your bank and card issuer about any suspicious transactions","File with the FTC or Report Fraud on return","Claim on travel insurance if your policy covers fraud losses","Report to ABTA or ATOL if a UK travel company was involved","See /scams/travel-scams for common tourist fraud patterns"],"faq":[{"question":"Is it worth reporting a scam abroad if the amount was small?","answer":"Yes. Tourist-targeted scams are often run systematically by the same individuals. Local police collect these reports for patrol and investigation purposes even when individual losses are modest."},{"question":"Can I get travel insurance reimbursement for a scam?","answer":"Policies vary widely. Mugging and robbery are typically covered; voluntary payment under deceptive circumstances may or may not be. Read your policy's definitions of theft, fraud, and loss carefully, and report to police regardless to support any claim."}],"lastReviewed":"2026-06-10"},{"slug":"does-reporting-a-scam-help-anyone","url":"https://scamencyclopedia.org/questions/does-reporting-a-scam-help-anyone","question":"Does reporting a scam actually help anyone?","shortAnswer":"Yes. Scam reports directly lead to enforcement actions, consumer alerts, platform takedowns, and the statistical data that drives public policy and funding for fraud prevention.","explanation":"It is understandable to wonder whether filing a report will matter, especially when recovery seems unlikely. The answer is that reports collectively create a major impact, even when no single report leads to an investigation.\n\nThe FTC's annual Consumer Sentinel Network receives millions of reports and uses this data to identify the highest-priority fraud threats for enforcement action. When a scam type shows a sudden spike in reports from a specific geographic area or demographic, it triggers alerts and targeted campaigns. FTC enforcement actions against specific companies regularly cite the volume of consumer reports as evidence of widespread harm.\n\nIn the UK, the NCSC's Suspicious Email Reporting Service has taken down hundreds of thousands of phishing websites based on forwarded emails from the public. Each email forwarded to report@phishing.gov.uk is analysed and potentially triggers a takedown within hours. Without individual reports, these sites remain live and defraud more victims.\n\nPlatform reports lead to account removals that protect the next person who might have interacted with that scammer. Scam text reports to 7726 feed into carrier blocking systems. Bank fraud reports contribute to the Cifas database that protects other customers. At every level, individual reports aggregate into system-level protection. If everyone who was defrauded or nearly defrauded reported the incident, fraud rates would fall measurably.","redFlags":["You are told that reporting will not help so you should use a paid private recovery service instead","A 'support service' discourages official reporting and offers to handle the report for you for a fee"],"whatToDoNow":["File a report even for a small loss or a near-miss — it contributes to the wider picture","Forward scam texts to 7726 and phishing emails to the NCSC or FTC","Report scam profiles and ads on all platforms you use","Warn friends and family about scams you encountered","Visit /report-a-scam for a quick guide to the most impactful channels","Read /statistics to see the scale of fraud that reporting helps address"],"faq":[{"question":"How does my individual report reach enforcement teams?","answer":"Reports are ingested into databases shared across agencies. Analysts and automated systems flag patterns. When enough reports link to the same operator, it elevates on the priority list. Your report may be the tenth, hundredth, or thousandth that tips a case into active investigation."},{"question":"Do scam reports influence policy and law changes?","answer":"Yes. Statistical evidence from report databases drives legislation such as the UK Online Safety Act, US robocall legislation, and Australia's Scam-Safe Accord. Reporting builds the evidence base that policymakers use to justify stronger consumer protections."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-report-a-recovery-scam","url":"https://scamencyclopedia.org/questions/how-do-i-report-a-recovery-scam","question":"How do I report a recovery scam or fake scam recovery service?","shortAnswer":"Report to the FTC at ReportFraud.ftc.gov and to the FBI IC3. Recovery scams are secondary frauds that target people who have already been victimised once.","explanation":"Recovery scams are a specific and particularly cruel form of fraud in which criminals contact people who have already lost money to a scam and promise to recover those funds for an upfront fee. The scammer may impersonate a government agency, a law firm, or a specialist recovery company. After collecting the fee, they disappear or invent further reasons to charge more money.\n\nIn the US, report to the FTC at ReportFraud.ftc.gov. Describe the original scam and the recovery scam separately. Also report to the FBI IC3 at ic3.gov, noting that this is a secondary fraud targeting a fraud victim. Your state attorney general should also receive a report if the recovery company identified a specific state address.\n\nIn the UK, report to the Report Fraud service (formerly Action Fraud). Note in your report that you were previously a victim and that the recovery scam followed from that. The National Fraud Intelligence Bureau tracks these patterns and the sequence of events strengthens the intelligence value of your report.\n\nLegitimate organisations that help scam victims — such as IDCARE in Australia, the FTC's recovery tools, and Victim Support — are free to use and never solicit you with promises of guaranteed recovery. If someone contacts you unsolicited after a fraud loss and asks for payment to proceed, this is a recovery scam.","redFlags":["You were contacted out of nowhere by someone who somehow knew you had been scammed","A fee was required upfront to begin the recovery process","The service guaranteed a specific amount of money would be returned","The company's contact details and website were brand new","You were asked to pay the recovery fee by cryptocurrency or wire transfer","The 'lawyer' or 'agent' could not provide a verifiable bar number or company registration"],"whatToDoNow":["Stop all contact and do not pay any further fees","Report to the FTC at ReportFraud.ftc.gov noting it is a secondary scam","File with IC3 at ic3.gov referencing both the original and recovery fraud","Report to your state AG or Report Fraud","Contact your bank if any payment was made to the recovery service","Read /recovery for legitimate free routes to financial recovery"],"faq":[{"question":"Are there any legitimate paid recovery services for fraud victims?","answer":"A very small number of regulated solicitors or forensic accountants charge for legal work on fraud cases, such as pursuing civil claims or insolvency proceedings. The difference is they are verifiably registered, do not solicit cold, and are transparent about realistic outcomes. Never pay upfront to an unsolicited recovery contact."},{"question":"How did the recovery scammer know I was a fraud victim?","answer":"Victim lists are bought and sold on criminal marketplaces. Once your details enter the fraud ecosystem — even from a different type of scam — they can be shared among criminal networks."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-elderly-parent-from-scams","url":"https://scamencyclopedia.org/questions/how-to-protect-elderly-parent-from-scams","question":"How do I protect my elderly parent from scams?","shortAnswer":"Establish open communication, set up account alerts, and create a trusted-contact arrangement with their bank so unusual activity triggers a call before money moves.","explanation":"Older adults are disproportionately targeted by scammers because they tend to have retirement savings, answer the phone, and may be more trusting of authority figures. Common tactics include grandparent scams, Medicare fraud, romance cons, and fake tech-support calls. The most effective defence is ongoing conversation: ask your parent to run any unexpected request past you before sending money or sharing information, framing it as a shared decision rather than a restriction on their independence.\n\nContact their bank or credit union and ask about a 'trusted-contact' program. Many institutions now allow account holders to name a family member who can be called if the bank notices unusual withdrawals, wire transfers, or gift-card purchases — without giving that contact authority to actually move the money. Pair this with low daily transfer limits on their online banking and text alerts for every transaction over a small threshold.\n\nTechnology barriers help too. Phone settings can silence unknown callers, routing them directly to voicemail. Many carriers offer spam-call-screening services. A call-filtering device that requires callers to press a key before ringing through eliminates most robocalls. If your parent uses email, configure spam filters aggressively and walk them through how to hover over a link before clicking.\n\nFinally, isolation is a major risk factor: socially connected older adults are less vulnerable. Encourage regular contact with friends and community groups, because loneliness is what romance and lottery scammers exploit most. Let your parent know that no legitimate government agency or grandchild in trouble will demand secrecy or immediate gift-card payment.","redFlags":["Parent suddenly mentions a new 'online friend' who has never asked to meet in person","Unexplained cash withdrawals or repeated gift-card purchases","Caller told them to keep the conversation secret from family","Anxiety or urgency around a bill, arrest warrant, or prize that appeared without warning","New person claiming to be a financial advisor or lawyer calling out of the blue","Confusion about how much money they have after previously being on top of finances"],"whatToDoNow":["Set up bank transaction alerts and low daily transfer limits on your parent's accounts","Ask the bank about a trusted-contact or third-party notification program","Enable call-screening and silence unknown callers on their phone","Walk through the most common scam scripts together so they recognise the patterns","Agree on a family code word that proves a real emergency — no code word, no money","Review their accounts monthly together as a normal part of family time","Visit /family-safety for a broader guide to protecting all family members"],"faq":[{"question":"What is a trusted-contact program at a bank?","answer":"A trusted-contact arrangement lets you name a family member or friend the bank can call if they notice suspicious activity on your account. The contact cannot access or move your money — they are only notified of a concern. Ask your branch to set this up."},{"question":"How do I bring up scam protection without offending my parent?","answer":"Frame it as something you are doing for yourself too: 'I have been reading about scams targeting everyone, so I set up alerts on my own accounts and want to help you do the same.' Shared action feels collaborative rather than patronising."},{"question":"My parent already lost money to a scammer. What now?","answer":"Report to the FTC at ReportFraud.ftc.gov, file a police report, and contact their bank immediately. Visit the /recovery section for a step-by-step checklist. Avoid shaming them — scammers are professional manipulators."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-teenager-from-online-scams","url":"https://scamencyclopedia.org/questions/how-to-protect-teenager-from-online-scams","question":"How do I protect my teenager from online scams?","shortAnswer":"Teenagers are targeted through gaming, social media, and fake job offers — open dialogue about what scams look like in their digital world is more effective than software restrictions alone.","explanation":"Teens are digital natives, but that does not make them scam-proof. Scammers specifically craft offers that appeal to young people: too-good sneaker deals, paid survey schemes, 'social media manager' jobs paying hundreds a day with no experience required, and in-game currency or account-boosting services. Because teenagers often conduct most of their social and commercial life on platforms parents never see, traditional parental-control software misses a lot.\n\nThe most effective protection is teaching teenagers to recognise the mechanics of a scam rather than memorising specific examples. Help them understand that urgency plus secrecy plus an unusual payment method equals a scam — every time. Role-play scenarios: 'What would you do if a DM offered you $500 to test a product?' Practice scepticism as a skill, not a character flaw.\n\nJob and income scams are the fastest-growing category for teens and young adults. Legitimate part-time work or brand ambassador programs do not require an upfront fee, do not pay via Venmo before any work is done, and do not ask you to forward a cheque to a third party. If an 'employer' sends them a cheque to cash and wire part back, that cheque will bounce days later and the teen is liable for the full amount.\n\nOn the gaming and social-media front, warn against sharing login credentials for account-boosting or gifting, free V-Bucks or Robux sites, and 'investment clubs' in Discord servers. Help your teenager set strong unique passwords and enable two-factor authentication on every gaming and social account.","redFlags":["Online job offering unusually high pay for minimal or vague work","Request to deposit a cheque and send part of the money elsewhere","Website offering free in-game currency in exchange for login credentials","DM from a brand or influencer offering free products if they pay shipping","New online friend pushing them toward a crypto or investing platform","Pressure to keep the opportunity secret from parents"],"whatToDoNow":["Have a no-shame conversation about what scams targeting teens look like right now","Enable two-factor authentication on all gaming and social media accounts","Agree that any 'job' or money opportunity gets run by a parent before they accept","Explain how fake cheque scams work so they recognise the pattern","Review privacy settings on their main social platforms together","Encourage them to use the /risk-score/scam-risk-checker before clicking unfamiliar links"],"faq":[{"question":"Are teenagers really targeted more than adults?","answer":"Different age groups face different scam types. Teens and young adults are heavily targeted for fake jobs, gaming scams, and social-media account theft because they are active on the platforms where these scams spread, sometimes have less experience evaluating offers, and may be embarrassed to ask a parent."},{"question":"What should my teen do if they already shared their login?","answer":"Change the password immediately, enable two-factor authentication, and check account activity for unauthorised purchases or messages sent from their account. Report the incident to the platform and, if money was lost, to the FTC."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-small-business-from-scams","url":"https://scamencyclopedia.org/questions/how-to-protect-small-business-from-scams","question":"How do I protect my small business from scams?","shortAnswer":"Train staff to verify payment requests by phone before acting, implement dual-approval for wire transfers, and watch for invoice fraud and fake government compliance notices.","explanation":"Small businesses are highly attractive targets because they move real money, often have thinner security protocols than corporations, and staff may feel pressure to act quickly on payment instructions from someone claiming to be the owner. Business email compromise (BEC) — where a scammer impersonates a CEO or finance director and instructs an employee to wire funds — costs small businesses more than any other scam category.\n\nThe single most effective control is a verbal-confirmation rule: any wire transfer, change in vendor banking details, or unusual payment request must be confirmed by calling the requester on a known number (not a number provided in the email). This one step defeats most BEC attacks. Pair it with dual-approval for transfers above a threshold you define based on your cash flow.\n\nFake invoice fraud is also common: scammers register lookalike domains (your-supplier.com vs. yoursupplier.com) and send invoices with their bank details instead of the real vendor's. Before adding a new payee or updating banking details, call the vendor's main number from your existing records, not from the email or invoice.\n\nOther common small-business scams include fake directory listings and SEO services, phoney government compliance notices demanding fees, and fraudulent supplier deals. Train every staff member who handles money or vendor relations on these patterns annually, and report incidents to the FTC at ReportFraud.ftc.gov.","redFlags":["Email from the CEO asking for an urgent wire transfer — especially if they are 'travelling' and cannot talk","Vendor updating their banking details by email without a prior phone confirmation","Invoice for services your business never ordered","Government-looking letter demanding an immediate compliance fee to avoid penalties","New supplier offering unusually low prices requiring upfront full payment","Caller claiming your business domain or listing is about to expire and demanding immediate payment"],"whatToDoNow":["Implement a verbal-confirmation rule for all wire transfers and banking-detail changes","Set dual-approval thresholds for payments in your accounting software","Train all finance and admin staff on BEC and invoice fraud patterns","Register your business domain for email authentication (SPF, DKIM, DMARC)","Audit active vendors and flag any with recently changed bank details","Report suspected scams to the FTC and your local FBI field office for BEC"],"faq":[{"question":"What is business email compromise (BEC)?","answer":"BEC is when a scammer impersonates a company executive or trusted vendor via email and tricks an employee into wiring money or sharing sensitive data. The FBI considers it one of the costliest cybercrime categories globally."},{"question":"How do I check if a vendor invoice is genuine?","answer":"Compare the sender email domain character-by-character against the domain you have on file. Call the vendor on a number from your existing records — never use a phone number printed on the suspicious invoice — and confirm the payment details verbally."},{"question":"Do small businesses need cyber insurance?","answer":"Cyber insurance can cover losses from BEC and ransomware, but policies vary widely. Many require that minimum controls (multi-factor authentication, email filtering, staff training) are in place or claims may be denied. Consult a broker and read the exclusions carefully."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-online-accounts-from-scams","url":"https://scamencyclopedia.org/questions/how-to-protect-online-accounts-from-scams","question":"How do I protect my online accounts from being hacked or taken over?","shortAnswer":"Use a unique strong password for every account, enable two-factor authentication (ideally with an authenticator app), and never click password-reset links you did not request.","explanation":"Account takeover is often the gateway to financial fraud. Once a scammer controls your email, they can reset passwords for your bank, investment accounts, and shopping sites. The most common entry points are reused passwords (so that one breach exposes many accounts), phishing emails that mimic login pages, and SIM-swapping attacks that redirect your phone number.\n\nThe foundation is password uniqueness. A password manager generates and stores long random passwords so you never reuse a string across sites. Combine this with two-factor authentication (2FA) on every important account. App-based 2FA such as Google Authenticator or Authy is significantly stronger than SMS codes, because SMS is vulnerable to SIM-swap attacks where a scammer convinces your carrier to port your number to their device.\n\nPhishing remains the most common way attackers steal credentials. Scam emails create urgency ('Your account will be closed in 24 hours') and link to a convincing fake login page. Before entering credentials anywhere, check the full URL in the address bar — not just the displayed link text. Enable your browser's built-in phishing warnings and consider a DNS-level filter like Cloudflare 1.1.1.1 or Quad9 that blocks known malicious domains.\n\nMonitor Have I Been Pwned (haveibeenpwned.com) to learn if your email address appears in known data breaches, and change passwords for any breached service immediately. Review the active sessions and connected apps in the security settings of your most important accounts at least once a year.","redFlags":["Login notification for a device or location you do not recognise","Password-reset email you did not request","Sudden inability to log in with a correct password (account may already be taken over)","Friends report receiving strange messages from your accounts","Your mobile carrier sends a SIM-change confirmation you did not initiate","Security question or recovery email you do not recognise when reviewing account settings"],"whatToDoNow":["Install a reputable password manager and start replacing reused passwords","Enable two-factor authentication on email, banking, and social media — use an authenticator app not SMS where possible","Check your email at haveibeenpwned.com and change passwords for any breached accounts","Review active sessions in the security settings of your email and main accounts","Contact your mobile carrier and add a SIM-lock or account PIN to prevent SIM swaps","Set up account-activity alerts wherever offered"],"faq":[{"question":"Is SMS two-factor authentication better than nothing?","answer":"Yes, SMS 2FA is much better than a password alone. But it is weaker than an authenticator app because phone numbers can be ported via SIM swap. Use app-based 2FA on your highest-value accounts."},{"question":"What is a SIM-swap attack?","answer":"A SIM swap is when a scammer convinces your mobile carrier — often with stolen personal information — to transfer your phone number to a SIM card they control. They then receive your SMS verification codes and can reset your account passwords."},{"question":"How often should I change my passwords?","answer":"Security guidance has shifted: change passwords when there is a known breach or suspicion of compromise, not on a fixed schedule. Using unique strong passwords per site and enabling 2FA matters more than frequent rotation."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-phone-number-from-sim-swap","url":"https://scamencyclopedia.org/questions/how-to-protect-phone-number-from-sim-swap","question":"How do I protect my phone number from a SIM-swap scam?","shortAnswer":"Add a SIM-lock PIN or port-freeze to your mobile account, and switch important accounts to app-based two-factor authentication so your phone number is no longer the key to your finances.","explanation":"SIM swapping is an identity-theft technique where a fraudster contacts your mobile carrier pretending to be you, provides enough personal information to pass identity checks, and convinces a representative to transfer your phone number to a SIM card the fraudster controls. From that moment, any SMS verification code sent to your number goes to the attacker.\n\nEvery major US carrier allows you to add a port-out PIN or account passcode that must be provided before any SIM change or number transfer. This is separate from your regular account password. Call or visit your carrier's store and ask specifically for a SIM lock, number-lock, or port-out restriction. Some carriers call it an account security PIN. Set it to something you have not used elsewhere.\n\nBeyond the carrier-side fix, reduce the blast radius by migrating 2FA on your most important accounts away from SMS. An authenticator app generates time-based codes locally on your device, so a SIM swap does not compromise it. For the highest-value accounts — crypto exchanges, investment platforms, primary email — consider a physical security key such as a YubiKey, which is immune to both SIM swapping and phishing.\n\nScammers often gather the personal information needed for a SIM swap from data breaches, social media, and phishing emails. Minimise your public-facing personal details, and be suspicious of unexpected calls or texts from your carrier asking you to confirm account information.","redFlags":["Your phone suddenly loses all signal while others nearby have service","Carrier sends a SIM-change or port-out confirmation you did not initiate","You stop receiving calls and SMS messages unexpectedly","Login alerts or password-reset emails arrive in quick succession","Caller claiming to be carrier support asks for your account PIN or last four of SSN","Unexpected two-factor codes arriving when you are not trying to log in anywhere"],"whatToDoNow":["Call your carrier today and add a SIM-lock PIN or port-out restriction","Switch 2FA on banking, email, and crypto accounts to an authenticator app","Set a strong unique password on your carrier account, separate from other passwords","If you already suspect a swap has occurred, call your carrier immediately to reclaim your number","Change passwords and revoke sessions on any accounts that use your number for recovery","File a report with the FTC and FBI IC3 if accounts were accessed"],"faq":[{"question":"How do I know if a SIM swap has already happened?","answer":"The clearest sign is that your phone loses service — calls go straight to voicemail and texts stop arriving — while those around you have normal signal. You may also receive a burst of account-activity notifications just before or after the signal drops."},{"question":"Will a SIM lock completely prevent a swap?","answer":"A SIM-lock PIN significantly raises the bar, but determined attackers have bypassed them through social engineering of carrier staff. Combining a PIN with app-based 2FA on important accounts gives layered protection."},{"question":"Is a SIM swap the same as phone cloning?","answer":"No. Phone cloning copies a physical device's identity through technical means and is rare today. SIM swapping is a social-engineering attack on the carrier that reassigns your phone number — no physical access to your device is needed."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-check-if-website-is-legitimate","url":"https://scamencyclopedia.org/questions/how-to-check-if-website-is-legitimate","question":"How do I check if a website is legitimate before I buy anything?","shortAnswer":"Check the domain age, look for verifiable contact details, read third-party reviews, and trust your instincts — sites with prices far below market and no traceable business behind them are almost always fraudulent.","explanation":"A convincing-looking website takes minutes to build, so visual polish is not a reliable indicator of legitimacy. The checks that actually matter focus on the business behind the site rather than the design. Start with the domain itself: use a free WHOIS lookup tool to see when the domain was registered. A site selling branded electronics that was created three weeks ago is a major warning sign.\n\nSearch for the company name plus words like 'reviews,' 'scam,' or 'complaint' in a search engine. Check Trustpilot, the Better Business Bureau (BBB), and Reddit. A total absence of reviews on a site claiming to have thousands of satisfied customers is itself suspicious. Verify that any listed phone number connects to a real human, and check that the address resolves to an actual business location rather than a vacant lot or mail drop.\n\nLook for a secure connection (HTTPS) — the padlock icon in the address bar — but understand that HTTPS only means the connection is encrypted, not that the site is honest. Free SSL certificates are available to anyone. More meaningful is whether the site has clear, specific return and refund policies, a real privacy policy, and payment options that offer buyer protection such as credit cards or PayPal Goods and Services rather than wire transfers or cryptocurrency.\n\nPrice is still a useful signal. If a product is 70% below its normal retail price, ask yourself why. Counterfeit goods, non-delivery scams, and grey-market resellers all hide behind prices too good to be true. Use the /risk-score/scam-risk-checker to get an automated assessment of any site before entering your card details.","redFlags":["Domain registered within the past few months for a 'well-established' retailer","No verifiable physical address or the address is a virtual office service","Prices dramatically below any other seller for in-demand products","Only accepts wire transfer, cryptocurrency, or gift cards — no credit card option","Contact page is a form only with no phone number, email, or live chat","Reviews are all five stars posted within days of each other with similar phrasing","Spelling errors, inconsistent branding, or stock photos instead of actual product images"],"whatToDoNow":["Run a WHOIS lookup to check domain registration date (lookup.icann.org)","Search the site name plus 'scam' or 'reviews' before purchasing","Check BBB and Trustpilot for the company name","Verify the physical address exists using a mapping tool","Use the /risk-score/scam-risk-checker for an automated assessment","Pay only with a credit card or PayPal Goods and Services so you can dispute if needed"],"faq":[{"question":"Does HTTPS mean a site is safe?","answer":"No. HTTPS means data between your browser and the server is encrypted, but scam sites routinely use free SSL certificates to display the padlock. Always verify the business behind the site, not just the connection security."},{"question":"How can I tell if reviews are fake?","answer":"Red flags for fake reviews include: all reviews posted within a short time window, no negative reviews whatsoever, generic praise with no product-specific detail, reviewer profiles with no other review history, and language that sounds translated or templated."},{"question":"What payment method gives me the best protection when buying online?","answer":"Credit cards offer the strongest buyer protection through chargebacks. PayPal Goods and Services also offers dispute resolution. Debit cards have weaker chargeback rights. Wire transfers, crypto, and gift cards offer no recovery options."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-check-if-online-store-is-legitimate","url":"https://scamencyclopedia.org/questions/how-to-check-if-online-store-is-legitimate","question":"How do I check if an online store is legitimate before placing an order?","shortAnswer":"Beyond the basics of HTTPS and reviews, confirm the store has a traceable business registration, real customer-service contact, and a clear returns policy — and pay by credit card so you can dispute a non-delivery.","explanation":"Fake online stores mimic legitimate retailers so closely that even experienced shoppers get caught. Tactics include hijacking the names and logos of real brands, buying sponsored search-ad placements to appear above genuine sites, and manufacturing a large volume of fake reviews before a site is reported. The best defence is a multi-step verification routine before you commit to any purchase.\n\nStart with the URL. Brand impersonators register domains like 'niike.com' or 'amaz0n-deals.co' that are visually similar to well-known names. Type the retailer's URL directly rather than clicking search results or ads, and double-check the full domain in the address bar. If a deal arrived via social media or email, be especially careful — scam stores pay heavily for social ad placements.\n\nLook for a registered business number in the footer. In the UK this is a Companies House number; in the US, check state business-search databases. An absence of any registered entity behind the site is concerning for anything beyond very small sole traders. Confirm the returns and refunds policy is specific — legitimate stores provide clear timelines, not vague promises — and that customer service responds within a day or two.\n\nFor delivery scams specifically, check that the store offers a tracking number and uses a recognisable carrier. Stores that ship everything from overseas with three-to-six week delivery windows and no tracking are frequently dropshippers who may send counterfeit goods or nothing at all. Screenshot your order confirmation and keep all email receipts in case you need to file a chargeback.","redFlags":["Advertised via a social media ad with extremely low prices and countdown timers","No company registration number, VAT number, or traceable legal entity","Returns policy is vague, extremely short, or requires customer to pay return shipping to an overseas address","Only accepts PayPal Friends and Family, Venmo, or cryptocurrency","Shipping times quoted as four to eight weeks with no tracking","Domain is a misspelling or close variant of a well-known brand name"],"whatToDoNow":["Type the retailer's official URL directly — do not click social media ads for deals","Search the store name plus 'reviews 2024' or 'scam' in an independent search engine","Check the footer for a registered business number and verify it in a company database","Screenshot or save your order confirmation email before any purchase","Use a credit card only so you have chargeback rights if goods do not arrive","If goods do not arrive, dispute the charge with your card issuer within their dispute window"],"faq":[{"question":"What should I do if my order never arrives?","answer":"Contact the store first and give them a reasonable window to respond. If there is no satisfactory response, file a chargeback with your credit card issuer — for most cards you have 60 to 120 days from the charge. Keep all correspondence and order confirmation as evidence."},{"question":"Are social-media-advertised stores always scams?","answer":"Not always, but social media ads have become a primary channel for fake stores because targeting is precise and cost is low. Apply the same verification steps to any advertised store regardless of how polished the ad looks."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-check-if-charity-is-legitimate","url":"https://scamencyclopedia.org/questions/how-to-check-if-charity-is-legitimate","question":"How do I check if a charity is legitimate before donating?","shortAnswer":"Search the charity's name on a charity navigator site and confirm its registration number with your country's official charity regulator — legitimate charities welcome this scrutiny.","explanation":"Charity scams peak around disasters, holidays, and high-profile news events because donor goodwill is highest at those moments. Scammers register names that sound almost identical to well-known charities, buy look-alike domains, and sometimes reach out by phone or door-to-door. Before donating to any organisation you have not supported before, take two minutes to verify it.\n\nIn the United States, use the IRS Tax Exempt Organization Search (apps.irs.gov/app/eos) to confirm the charity has 501(c)(3) status, or check Charity Navigator (charitynavigator.org), GuideStar / Candid (candid.org), or the BBB's Wise Giving Alliance. In the UK, use the Charity Commission's public register at register-of-charities.charitycommission.gov.uk. These databases are free, take under a minute to search, and immediately flag unregistered organisations.\n\nLegitimate charities are transparent about how donations are spent. Review the charity's most recent Form 990 (US) or annual accounts (UK) to see what percentage of income goes to programme activities versus fundraising and administration. The BBB Wise Giving Alliance recommends at least 65% to programmes. A charity that refuses to provide this information, or whose financials are not publicly filed, is a red flag.\n\nBe especially cautious when donating after a disaster. Scam organisations spin up within hours of a major earthquake, hurricane, or refugee crisis, often using emotionally powerful images taken from news coverage. Give to organisations you already know or that appear in your country's disaster-relief coordination databases rather than a GoFundMe or social campaign you stumbled across.","redFlags":["Name nearly identical to a well-known charity with a slightly different word or spelling","Pressure to donate immediately, today, in cash or gift cards","Unable to provide a registered charity number or EIN when asked directly","Donor information goes to a P.O. box or offshore account","Very new organisation soliciting for a disaster or cause that just happened","Emotional appeal with no factual information about programs or financials"],"whatToDoNow":["Search the charity name on Charity Navigator, GuideStar, or your country's official register","Check the IRS EIN database or UK Charity Commission before donating","Look up their most recent financial filing and check the programme-expense ratio","Give via the charity's official website — type the URL directly rather than following a link","Ask for a written receipt showing the charity's registration number for your tax records","Report suspected fraudulent charities to the FTC and your state attorney general"],"faq":[{"question":"Can a scam charity have a registered 501(c)(3) number?","answer":"Yes. Some fraudulent organisations obtain legal charity status and then misuse donations. Look beyond registration to actual financial filings: if the organisation files a Form 990, it must be publicly available and should show meaningful programme spending."},{"question":"Is it safer to donate via a charity's website or a fundraising platform?","answer":"Donating directly via the charity's official website is generally safest. On crowdfunding platforms, verify the campaign is run by the official organisation rather than a third party fundraising in the charity's name without authorisation."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-check-if-company-is-legitimate","url":"https://scamencyclopedia.org/questions/how-to-check-if-company-is-legitimate","question":"How do I check if a company is legitimate before doing business with them?","shortAnswer":"Verify the business registration in an official company database, check for a physical address and working phone number, and look for independent reviews before signing a contract or sending money.","explanation":"With company formation available online for under $100, a convincing business front is easy to set up. Before entering any significant contract, paying a deposit, or sharing sensitive business information, spend a few minutes verifying the company's legal existence and track record.\n\nIn the United States, search the state's Secretary of State business registry (each state has one) using the company's full legal name. Confirm the business is in good standing and note how long it has been registered. In the UK, use Companies House (companieshouse.gov.uk). In many countries, you can also search for the company's VAT number in tax authority databases. If a company claiming to be 10 years old was registered last month, that is a serious discrepancy.\n\nNext, verify the physical address. Street-level photos from a mapping tool can reveal whether an address is a real office building, a residential house, a virtual-office service, or a fictional location. Call the published phone number during business hours and assess whether you reach a real person or a professional-sounding setup. Check LinkedIn for genuine employees with work histories at the company — a company with no verifiable employees is suspicious.\n\nRead independent reviews on Google Maps, Trustpilot, and the BBB. Pay particular attention to negative reviews that describe very similar experiences — a pattern of identical complaints is more telling than one bad outlier. Also search the owner's name or principals in court records via PACER (US) or your country's equivalent to check for fraud judgements or bankruptcy history.","redFlags":["Company registered in the past few months claiming years of experience","Physical address resolves to a virtual office service or does not exist","No LinkedIn presence or employees with verifiable work history at the company","Identical complaints on multiple review platforms about non-delivery or disappearing funds","Requests full payment upfront without any industry-standard contract protections","Principal's name appears in court records related to fraud or repeated business failures"],"whatToDoNow":["Search the company name in your state's Secretary of State or national company registry","Verify the physical address on a mapping tool and call the listed phone number","Check Trustpilot, BBB, and Google Maps reviews and look for patterns in negative feedback","Search the owner's name combined with the word 'lawsuit' or 'fraud' in a search engine","For large contracts, consider a commercial credit check (Dun and Bradstreet, Experian Business)","Require a signed contract before transferring any funds"],"faq":[{"question":"Is a company being incorporated enough to show it is legitimate?","answer":"No. Incorporation is easy and cheap. Many fraudulent companies are properly registered. Incorporation confirms legal existence but says nothing about honesty, financial health, or track record. Combine it with reviews, address checks, and principal background research."},{"question":"What is a virtual office and why is it a red flag?","answer":"A virtual office is a shared mailing address that makes a company appear to have a physical presence in a prestigious location. While some legitimate remote businesses use them, scam companies use them to appear local when they are not. Look for evidence of genuine operations at the location."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-check-if-investment-is-legitimate","url":"https://scamencyclopedia.org/questions/how-to-check-if-investment-is-legitimate","question":"How do I check if an investment opportunity is legitimate?","shortAnswer":"Verify the firm and any individual adviser are registered with your financial regulator, and be deeply sceptical of any investment promising guaranteed returns or pressure to decide quickly.","explanation":"Investment fraud destroys more wealth than almost any other scam category because the amounts involved are large and recovery is rare. The starting point is always regulatory registration. In the United States, use FINRA BrokerCheck (brokercheck.finra.org) to look up any broker or investment adviser, and the SEC's Investment Adviser Public Disclosure (IAPD) database (adviserinfo.sec.gov) for registered investment advisers. In the UK, use the FCA register (register.fca.org.uk). A firm that is not on these lists is either operating illegally or is a fiction.\n\nGuaranteed returns are illegal in most jurisdictions for non-bank investment products. Any pitch that promises you a specific annual return — especially one significantly above prevailing interest rates — is making a claim no legitimate investment can make. Ponzi schemes survive by paying early investors with later investors' money rather than real profits. The pitch sounds credible until withdrawals exceed deposits.\n\nHigh-pressure and urgency tactics are a consistent signature of investment scams: 'This opportunity closes tomorrow,' 'Only three spots left,' or 'My other clients have already committed.' Legitimate advisers do not rush clients. Similarly, any investment that cannot be clearly explained — 'proprietary algorithm,' 'exclusive arbitrage,' 'binary trading bot' — or that discourages questions about how returns are generated is a warning.\n\nBefore committing any money, ask for audited financial statements from an independent accounting firm, demand a clear explanation of where your money is held and how you can independently verify the balance, and ask specifically how and when you can withdraw funds. If any of these normal questions produce evasion or anger, walk away.","redFlags":["Firm or individual not listed on FINRA BrokerCheck, SEC IAPD, or your country's equivalent register","Guarantees of specific returns regardless of market conditions","Pressure to invest before a deadline or before telling family members","Vague or secretive explanation of the investment strategy","Referral-based structure where existing investors earn commissions for recruiting new ones","Difficulty withdrawing funds or consistent delays when you try to take money out","Returns show unrealistically consistent gains with no losing periods"],"whatToDoNow":["Look up the firm on FINRA BrokerCheck or your country's financial regulator register","Ask for audited financial statements from an independent accounting firm","Confirm where funds are custodied and how you independently verify your balance","Get a second opinion from a fee-only financial adviser not connected to the opportunity","Search the company name and promoter name with the word 'fraud' or 'SEC action'","Report suspected investment fraud to the SEC, CFTC (for commodities/forex), or FTC"],"faq":[{"question":"What is the difference between a Ponzi scheme and a pyramid scheme?","answer":"A Ponzi scheme pays existing investors with new investor money while fabricating investment returns. A pyramid scheme requires participants to recruit others and earn commissions primarily from recruitment rather than any genuine product or service. Both are illegal and eventually collapse."},{"question":"Can a registered firm still commit fraud?","answer":"Yes. Registration means the firm meets minimum regulatory requirements, but it does not guarantee honesty. Always verify registration, then go further with audited accounts, custodian confirmation, and independent reviews."},{"question":"What is affinity fraud?","answer":"Affinity fraud targets members of identifiable communities — religious groups, ethnic communities, professional associations — using trusted community members to promote the scam. The trust of the community makes it effective. Apply the same financial due diligence to any investment regardless of who recommends it."}],"lastReviewed":"2026-06-10"},{"slug":"what-to-do-after-a-data-breach","url":"https://scamencyclopedia.org/questions/what-to-do-after-a-data-breach","question":"What should I do immediately after a data breach affecting my accounts?","shortAnswer":"Change your password for the breached service immediately, check whether the same password was reused elsewhere, enable two-factor authentication, and monitor your credit for unusual activity.","explanation":"When a company you use suffers a data breach, the exposed information — which can include email addresses, passwords, phone numbers, and sometimes financial data — is often sold on criminal marketplaces and used to attack your other accounts within hours. The speed of your response matters: attackers run automated credential-stuffing scripts that try breached username-and-password combinations across hundreds of sites within minutes.\n\nThe first action is to change your password on the breached service. If you used the same or a similar password anywhere else, change those too. This is why password reuse is so dangerous — one breach becomes many if you have shared credentials. A password manager both highlights where you have reused passwords and makes replacing them fast.\n\nEnable two-factor authentication on the breached account and on any account that shared the same password or that is linked to the same email address. If financial information was exposed — credit card numbers, bank account details, or Social Security/National Insurance numbers — contact the relevant financial institutions immediately and ask for new card numbers or account numbers.\n\nFor high-severity breaches involving SSN, date of birth, or government ID numbers, place a credit freeze with all three major bureaus (Equifax, Experian, TransUnion in the US). A credit freeze is free and prevents new accounts from being opened in your name without your explicit action to lift the freeze. Check your existing accounts for any transactions you do not recognise and set up credit monitoring alerts. Visit the breached company's notifications page for specifics about exactly what data was compromised.","redFlags":["Email from a service saying your account was involved in a security incident","Password-reset requests arriving that you did not initiate","New credit accounts appearing on your credit report you did not open","Login attempts from unfamiliar locations in your account security log","Notifications from haveibeenpwned.com that your email appears in a breach","Unexpected charges on linked payment methods"],"whatToDoNow":["Change your password on the breached service immediately","Change passwords on every other account that shared the same password","Enable two-factor authentication on the breached account and related accounts","If financial data was exposed, contact your bank and card issuers for replacement numbers","Place a credit freeze with Equifax, Experian, and TransUnion if SSN or ID data was breached","Set up free credit monitoring via annualcreditreport.com and sign up for breach alerts at haveibeenpwned.com"],"faq":[{"question":"How do I freeze my credit and does it cost anything?","answer":"In the US, placing a credit freeze is free at all three major bureaus since 2018. Visit each bureau's website directly (Equifax, Experian, TransUnion) or call their freeze hotlines. You can lift the freeze temporarily when you apply for credit and refreeze afterward."},{"question":"Is it worth monitoring my credit after a breach?","answer":"Yes. Identity thieves may not use your information immediately — some stolen data is held for months before being exploited. Free tools like Experian's free tier or credit-card-provided monitoring are worth enabling after any breach involving personal information."},{"question":"The breach happened two years ago. Is it still risky?","answer":"Yes. Stolen data is resold repeatedly and used long after the original breach. If you have not already taken the steps above — password change, 2FA, credit freeze — do them now."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-freeze-credit","url":"https://scamencyclopedia.org/questions/how-to-freeze-credit","question":"How do I freeze my credit and why should I do it?","shortAnswer":"A credit freeze prevents new credit lines from being opened in your name without your permission — it is free in the US, takes about 15 minutes, and is one of the most powerful identity-theft protections available.","explanation":"A credit freeze, formally called a security freeze, tells credit bureaus not to release your credit file to lenders processing new credit applications. Without your credit file, a lender cannot approve a new card, loan, or account in your name. This means that even if a fraudster has your Social Security number, date of birth, and address, they cannot open new accounts unless you temporarily lift the freeze.\n\nIn the United States, placing a freeze is free at all three major bureaus: Equifax (equifax.com), Experian (experian.com), and TransUnion (transunion.com). You must freeze at all three separately — freezing one does not affect the others, and lenders use any of the three. The process takes about five minutes per bureau online or by phone. You will receive a PIN or password to use when you want to temporarily unfreeze, which you do when you are actively applying for credit, then refreeze afterward.\n\nA freeze does not affect your existing accounts, your credit score, your ability to use current credit cards, or your ability to check your own credit report. It only blocks new credit applications. It is different from a credit lock, which some bureaus offer as a paid subscription product with faster toggling but less legal protection than a formal freeze.\n\nConsider placing a freeze proactively — you do not need to be a victim of identity theft to benefit. Given how many data breaches have exposed SSNs and personal data, most security experts now recommend a credit freeze as a standard preventive measure for adults who are not actively applying for credit.","redFlags":["You received a notice that your SSN or personal data was exposed in a breach","New credit accounts appearing on your report that you did not open","Debt collection calls about accounts you do not recognise","IRS notification that another tax return was filed using your SSN","Denial of a benefit or service because records show a conflicting identity"],"whatToDoNow":["Visit each bureau's website directly: equifax.com, experian.com, transunion.com","Create an account on each bureau's site and request a security freeze","Save your freeze PIN or password somewhere secure — you will need it to unfreeze","Also freeze at NCTUE (ChexSystems) if you are concerned about bank account fraud","Check your existing credit report at annualcreditreport.com for any accounts you did not open","Set a calendar reminder to check your credit annually"],"faq":[{"question":"Will a credit freeze hurt my credit score?","answer":"No. A credit freeze has zero impact on your credit score. It only affects whether third parties can access your file for new credit decisions. Your existing accounts and their payment history continue to be reported normally."},{"question":"How do I unfreeze my credit when I need to apply for a loan?","answer":"Log in to each bureau's website and select a temporary lift, specifying the dates during which the file should be accessible. You can also permanently remove the freeze at any time. Refreezing after the application is complete is good practice."},{"question":"Do I need to freeze at all three bureaus?","answer":"Yes. Different lenders pull from different bureaus, and you cannot predict which one a lender will use. Freeze all three — Equifax, Experian, and TransUnion — to be fully protected."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-set-up-2fa","url":"https://scamencyclopedia.org/questions/how-to-set-up-2fa","question":"How do I set up two-factor authentication (2FA) on my accounts?","shortAnswer":"Go to each account's security settings, choose two-factor authentication, and select an authenticator app rather than SMS — this single step dramatically reduces account-takeover risk.","explanation":"Two-factor authentication (2FA) adds a second verification step to your login beyond your password. Even if an attacker has your password, they cannot log in without also having the second factor. It is one of the highest-impact security measures available to ordinary consumers, and enabling it on your email account is the most important starting point because email is the recovery method for nearly everything else.\n\nThere are several types of 2FA. SMS codes are the most common but the weakest, because they can be intercepted via SIM-swap attacks. Time-based one-time password apps (TOTP) — such as Google Authenticator, Authy, or Microsoft Authenticator — generate a six-digit code on your phone that changes every 30 seconds. This code never leaves your device and cannot be intercepted via SIM swap. Hardware security keys (YubiKey, Google Titan) are the strongest option: they require physical access to the device, making phishing and remote attacks essentially impossible.\n\nTo enable 2FA, go to the account's settings menu and look for sections labelled 'Security,' 'Privacy,' or 'Login.' The option is typically labelled 'Two-factor authentication,' 'Two-step verification,' or '2-Step Verification.' Select the authenticator app option, scan the QR code displayed on screen with your authenticator app, and enter the six-digit code to confirm the setup. Save the backup codes somewhere safe — printed or in a secure offline location — in case you lose access to your phone.\n\nPrioritise these accounts in order: primary email, banking and investment accounts, main social media, cloud storage, and password manager. Once your email is protected, attackers cannot reset your other accounts even if they have your passwords.","redFlags":["Any important account that only requires a password to log in","Receiving a 2FA code you did not request — indicates someone has your password","An authenticator app prompting you to approve a login you did not initiate","Your phone suddenly stops receiving SMS messages (possible SIM swap in progress)"],"whatToDoNow":["Download a reputable authenticator app (Google Authenticator, Authy, or Microsoft Authenticator)","Enable 2FA on your primary email account first","Enable 2FA on your banking, investment, and payment accounts","Enable 2FA on your password manager if you use one","Save backup codes in a secure offline location for each account","Review 2FA settings annually and remove old devices from your trusted list"],"faq":[{"question":"What if I lose my phone and cannot get my 2FA codes?","answer":"This is why backup codes matter. When you enable 2FA, most services provide single-use backup codes. Store these in a safe place offline (printed and locked away, or in an encrypted document). Authy also backs up your codes to the cloud so you can restore them on a new device."},{"question":"Is 2FA available on all websites?","answer":"Not all sites offer 2FA, but most major services do. The directory at 2fa.directory lists which services support it. If a financial service does not offer 2FA, consider switching to one that does."},{"question":"Do I need 2FA if I use a strong password?","answer":"Yes. Strong passwords protect against brute-force guessing but not against phishing, credential dumps from other breaches, or malware that captures what you type. 2FA protects even when your password is already known to the attacker."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-spot-spoofed-phone-number","url":"https://scamencyclopedia.org/questions/how-to-spot-spoofed-phone-number","question":"How do I spot a spoofed phone number?","shortAnswer":"Caller ID is not proof of identity — anyone can spoof any number. Hang up and call back using a number from an official source if you receive an unexpected call claiming to be from a bank, government agency, or utility.","explanation":"Phone number spoofing allows a caller to display any number they choose on your caller ID. Scammers use this to impersonate your bank's fraud line, government agencies like the IRS or Social Security Administration, and even numbers you already have saved in your phone. The caller ID is decorative — it carries no verification that the person calling is who it says they are.\n\nThe clearest sign that a call may be spoofed is that the caller creates urgency around your money: your account is about to be closed, you owe back taxes and will be arrested today, your Social Security number has been used in a crime. Real banks call to ask if a transaction is authorised, then wait for your answer — they do not instruct you to take action immediately. Real government agencies communicate by postal mail first and never demand immediate payment over the phone.\n\nThe safe response is to hang up — politely if you prefer — and independently dial the organisation's official number. For your bank, use the number on the back of your debit or credit card. For the IRS, use irs.gov. Do not call back a number left in a voicemail or given by the caller, as this may connect you directly back to the scammer. Wait five minutes before calling if you are using a landline, as some scammers hold the line open and you may reconnect to them.\n\nYour phone's built-in spam-call screening (Google Pixel's Call Screen, iPhone's Silence Unknown Callers) and third-party apps like Hiya or Nomorobo can identify and filter known spoofed numbers, though they cannot catch every one. The only certain defence is the rule: unexpected caller + urgent demand + money = hang up.","redFlags":["Caller ID shows your own bank's name but the caller immediately demands action","Government agency calling demanding immediate payment to avoid arrest or deportation","Caller insists you must stay on the phone while you take action","Known contact's number calling about something urgent and financial out of nowhere","Caller asks you to confirm your full account number, PIN, or SSN","Call feels 'off' — scripted, heavily accented in a way inconsistent with the supposed agency"],"whatToDoNow":["Hang up on any unexpected call creating urgency around money or your accounts","Find the organisation's number from their official website or card and call that number back","Never call a number left in a voicemail by a caller claiming to be from a government agency","Enable spam-call filtering on your device or install a third-party call-screening app","Tell elderly family members that caller ID cannot be trusted","Report spoofed government-impersonation calls to the FTC at ReportFraud.ftc.gov"],"faq":[{"question":"Can my phone company stop spoofed calls?","answer":"Carriers have deployed the STIR/SHAKEN framework that cryptographically attests that a call's number matches the originating network. Calls that pass show 'Caller Verified' on some phones. However, this does not cover all calls and scammers route around it using voice-over-IP intermediaries."},{"question":"Can I tell just from looking at the number whether it is spoofed?","answer":"No. A spoofed number can look exactly like your bank's legitimate published number. The only reliable check is to initiate a call back through an independently verified number."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-identity-online","url":"https://scamencyclopedia.org/questions/how-to-protect-identity-online","question":"How do I protect my identity online?","shortAnswer":"Minimise public personal information, use strong unique passwords with 2FA on every account, freeze your credit proactively, and monitor for breaches regularly.","explanation":"Online identity protection is less about installing a single product and more about layering several habits that together significantly reduce your attack surface. Scammers and identity thieves assemble profiles from multiple sources: data brokers, social media, phishing emails, and data breaches. Each piece of information you share publicly makes it easier to impersonate you or answer security questions.\n\nAudit what is publicly visible about you. Run your full name in a search engine and review results. Many data-broker sites aggregate your address history, phone numbers, relatives, and approximate income from public records — you can opt out of the major ones (Whitepages, Spokeo, BeenVerified, Intelius). This takes time but reduces the raw material available to scammers who target you specifically.\n\nFor account security: use a password manager to maintain unique strong passwords across all accounts, enable two-factor authentication using an authenticator app on your most important accounts, and review the 'connected apps' and active sessions in each account's security settings annually to revoke anything you no longer use. Be particularly careful with your email account, as it is the master key: compromise of your email allows password resets everywhere.\n\nFinancially, a proactive credit freeze costs nothing and prevents the most damaging form of identity theft — new accounts being opened in your name. Pair it with annual free credit report checks at annualcreditreport.com to catch any fraudulent accounts that preceded the freeze. Sign up for breach monitoring at haveibeenpwned.com so you learn about relevant breaches within hours rather than months.","redFlags":["Your full address, phone number, and relatives' names are easily found via a search engine","You use the same password across multiple sites","Important accounts have no two-factor authentication enabled","You have not checked your credit report in over a year","An email breach alert appears on haveibeenpwned.com for your address","New credit applications appear on your report that you did not initiate"],"whatToDoNow":["Opt out of major data-broker sites (Whitepages, Spokeo, BeenVerified)","Install a password manager and audit reused passwords","Enable two-factor authentication on email, banking, and social media","Freeze your credit at Equifax, Experian, and TransUnion","Check your credit report at annualcreditreport.com","Register your email at haveibeenpwned.com for breach notifications"],"faq":[{"question":"Do identity-protection services work?","answer":"Paid identity-protection services can add monitoring depth and offer restoration assistance, but the core actions — credit freeze, unique passwords, 2FA, breach monitoring — are free and provide most of the protection. Read exactly what a paid service covers before subscribing."},{"question":"How long does identity-theft recovery take?","answer":"Recovery from identity theft can take months to years if fraudulent accounts or loans were opened in your name. Acting quickly and keeping meticulous records — every call, every letter, every account reference number — speeds the process significantly."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-check-if-landlord-is-legitimate","url":"https://scamencyclopedia.org/questions/how-to-check-if-landlord-is-legitimate","question":"How do I check if a landlord or rental listing is legitimate before paying a deposit?","shortAnswer":"Verify ownership of the property through public records, insist on viewing the property in person before paying anything, and never wire a deposit to someone you have only communicated with online.","explanation":"Rental scams are one of the most emotionally distressing frauds because victims lose both money and housing. The two main types are: a fraudster copies a genuine listing and advertises it under their own contact details, and a tenant pays a deposit to someone who does not own or control the property; or a fake landlord creates a listing for a property that either does not exist or is not for rent. Both depend on the victim handing over a deposit before seeing the property or verifying ownership.\n\nThe most effective protection is an in-person viewing at the actual address before any money changes hands. If a landlord or agent claims they cannot show you the property because they are overseas or for vague reasons, treat this as a serious red flag. Verify that the person showing you the property is either the owner or an authorised letting agent — ask to see a property management agreement if they claim to be acting on the owner's behalf.\n\nCheck the ownership of the property through public records. In the US, county assessor websites typically list the registered owner of any property by address. In the UK, Land Registry searches are available online for a small fee. Compare the owner's name to the person asking for a deposit. A mismatch or a refusal to provide the owner's name is a significant warning.\n\nBe cautious about the payment method requested. Legitimate landlords and letting agencies accept bank transfers or cheques but can provide signed tenancy agreements in advance and are not operating under payment urgency. Anyone insisting on Western Union, wire transfer to an overseas account, cryptocurrency, or gift cards is running a scam.","redFlags":["Landlord is 'overseas' and cannot show the property in person","Rent is significantly below market rate for the area and size","Pressure to send a deposit urgently before you can arrange a viewing","Request to pay deposit via wire transfer, cryptocurrency, or gift cards","Keys will be mailed or given digitally — no in-person handover","Listing photos appear on other property sites for different addresses (reverse-image search them)"],"whatToDoNow":["Check property ownership via your county assessor (US) or Land Registry (UK) before paying","Insist on an in-person viewing at the actual property before sending any money","Reverse-image search listing photos to check if they appear on other sites","Request a signed tenancy agreement before transferring any deposit","Never send a deposit via wire transfer or cryptocurrency to a landlord you have not met","Report rental scams to the FTC, your state attorney general, and the platform where the listing appeared"],"faq":[{"question":"How do I reverse-image search a listing photo?","answer":"On a desktop, right-click on the photo and choose 'Search image with Google' or save the image and upload it to images.google.com or tineye.com. If the same photo appears as a different property in a different city, the listing is fraudulent."},{"question":"Is it safe to pay a deposit by bank transfer?","answer":"Bank transfer is standard for legitimate rentals but offers limited fraud protection — once the money is sent, recovery depends on your bank's fraud policies. Pay only after verifying ownership, signing a tenancy agreement, and meeting the landlord or agent in person."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-check-if-recruiter-is-legitimate","url":"https://scamencyclopedia.org/questions/how-to-check-if-recruiter-is-legitimate","question":"How do I check if a job recruiter or employer is legitimate?","shortAnswer":"Verify the recruiter's LinkedIn profile and the company's official website independently, and reject any 'employer' that asks for upfront fees, personal financial details before a job offer, or payment to access work.","explanation":"Fake job recruiters use professional-sounding names, cloned company branding, and job boards to reach candidates. The volume of fake recruitment activity has grown sharply with AI-generated job descriptions and fake employee profiles on professional networks. Warning signs are consistent: every legitimate hiring process moves in one direction for money — the employer pays the candidate, never the other way around.\n\nVerify the recruiter exists by searching their full name on LinkedIn and cross-referencing with the company's official website. Go to the company's actual website (typed directly, not from a link in an email or job post) and check whether there is a careers page listing the same role. If the role does not appear on the official site and the recruiter cannot explain why, be cautious. For well-known companies, a quick call to their main HR line can confirm whether the recruiter actually works there.\n\nPhishing is a common goal of fake recruitment: attackers send official-looking onboarding forms requesting your SSN, bank account for direct deposit, a copy of your passport, or a background-check fee. Legitimate employers collect this information after a formal offer is signed and through secure HR systems — not via PDF form attached to a personal Gmail account. Providing these details prematurely enables identity theft.\n\nJob scams that target work-from-home seekers often involve receiving and reshipping packages (receiving stolen goods), depositing cheques and wiring back funds (fake-cheque scams), or 'paid training' programs where you pay first. These may look like real employment but result in criminal liability, financial loss, or both.","redFlags":["Recruiter uses a personal Gmail or Yahoo address for a major company","Job offer arrives without an interview or after only a chat-based interview","Employer asks for upfront payment for training, equipment, or background checks","Onboarding asks for bank account details or SSN before any formal offer is signed","Role involves receiving packages and forwarding them to another address","Salary is unusually high for the described responsibilities with no experience required"],"whatToDoNow":["Search the recruiter's name on LinkedIn and check their connection to the company","Go to the company's official website directly and check their careers page","Never pay a fee to get a job — legitimate employers do not charge candidates","Do not provide SSN or bank details until you have a signed offer and are in a verified onboarding system","Call the company's main HR line to verify the recruiter if you are unsure","Report fake job postings to the FTC and the platform where they appeared"],"faq":[{"question":"Are remote-work job offers more likely to be scams?","answer":"Remote roles have been disproportionately faked because they require no in-person component to test legitimacy. Apply the same checks — independent company verification, LinkedIn cross-referencing, never pay fees — but add extra caution for roles that are entirely remote with no video interview."},{"question":"What is a reshipping scam?","answer":"A reshipping scam recruits people as 'package handlers' or 'quality control inspectors' to receive packages at home and forward them. The packages contain goods purchased with stolen credit cards. You become an unwitting accomplice to fraud and may face criminal charges."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-yourself-from-phishing-emails","url":"https://scamencyclopedia.org/questions/how-to-protect-yourself-from-phishing-emails","question":"How do I protect myself from phishing emails?","shortAnswer":"Hover over links before clicking, check the sender's full email domain character by character, and go directly to the organisation's website instead of following any link in an email about your account.","explanation":"Phishing emails impersonate banks, shipping companies, government agencies, online retailers, and popular platforms to trick recipients into clicking a link that goes to a fake login page or downloads malware. The emails are often visually identical to the real organisation's communications — same logo, same colour scheme, same sign-off — but there are reliable tells if you know where to look.\n\nThe sender's email address is the first check. Phishers use domains that look similar to the real one: paypa1.com, amazon-customerservice.net, or support@apple.com.accounts-help.net. The part that matters is the domain after the last '@' — not whatever is displayed as the sender's name. Hover your mouse over the sender's name to reveal the full email address, then read the domain carefully character by character.\n\nLinks inside the email are the second check. Hover over any link before clicking to see the actual URL in your browser's status bar. The visible text can say 'Click here to verify your account' while the underlying URL points to an entirely different domain. A mismatch between what the link says and where it goes is a red flag. For anything important, do not click the link at all — open a new tab and navigate directly to the organisation's website.\n\nEnable your email provider's phishing warnings. Gmail, Outlook, and Apple Mail all flag suspicious senders with banner warnings. Pair this with a reputable antivirus or endpoint security product that scans email attachments before you open them. Be particularly alert to emails creating urgency: 'Your account will be suspended in 24 hours,' 'Unusual sign-in detected — verify now,' or 'Your package is on hold — pay customs fee to release.'","redFlags":["Sender domain has extra words, numbers, or subtle misspellings compared to the real brand","Link URL does not match the organisation it claims to come from when you hover over it","Urgent language about account suspension, delivery failure, or legal action","Attachment you were not expecting, especially with extensions like .exe, .zip, or .docm","Generic greeting ('Dear Customer') from an organisation that should know your name","Email asking you to confirm personal details or re-enter payment information"],"whatToDoNow":["Before clicking any link in an email, hover over it and read the full URL","Check the sender's full email address — not just the display name","For any email about your accounts, go directly to the site by typing the URL","Enable phishing warnings in your email client and keep them turned on","Do not open unexpected attachments — scan them first or contact the sender via a separate channel","Report phishing emails to reportphishing@apwg.org and your email provider's report-spam function"],"faq":[{"question":"What is spear phishing?","answer":"Spear phishing is targeted phishing where the attacker uses personal information — your name, employer, recent purchases, or colleague names — to make the email appear more credible. It is harder to spot but the same rules apply: verify the sender domain and go directly to the site rather than following the link."},{"question":"Can I get infected just by opening an email?","answer":"Modern email clients make this rare, but some vulnerabilities exist with HTML email and preview panes. Clicking links and opening attachments remain the main risks. Keep your email app updated and disable automatic image loading from unknown senders if the option is available."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-verify-government-communication-is-real","url":"https://scamencyclopedia.org/questions/how-to-verify-government-communication-is-real","question":"How do I verify that a communication from a government agency is real?","shortAnswer":"Real government agencies initiate contact by official mail, not unexpected phone calls demanding immediate payment — hang up and call the agency's official published number to verify any contact.","explanation":"Government impersonation is one of the most common and emotionally effective scam categories because a fear of legal consequences overrides normal scepticism. Scammers impersonate the IRS, Social Security Administration, Medicare, USCIS, HMRC, and local courts. Understanding how real government agencies actually communicate is the most reliable defence.\n\nIn the United States, the IRS contacts taxpayers primarily by postal mail for most issues. They do not typically call without first sending a letter, do not demand immediate payment without giving you an opportunity to question or appeal, do not require specific payment methods like gift cards or wire transfer, and do not threaten immediate arrest for non-payment. Similarly, Social Security will not call you to say your number has been suspended — Social Security numbers cannot be suspended.\n\nWhen you receive any government-related communication — letter, call, or email — do not use the contact details provided in that communication to verify it. Instead, find the agency's official phone number from their official government website (e.g., irs.gov, ssa.gov, hmrc.gov.uk) and call that number. Ask them whether there is any open matter related to your account. Government agency numbers are publicly available and consistent.\n\nFor postal mail that looks official, check for the agency's full name, address, and case reference number. Real government mail does not typically have spelling errors, though sophisticated fraudsters can produce convincing fakes. The safest rule is always to verify through an independently-found contact method, not the one provided in the communication.","redFlags":["First contact is a phone call, not a letter","Caller demands immediate payment to avoid arrest or deportation","Payment method specified is gift cards, wire transfer, or cryptocurrency","Caller asks you to keep the conversation confidential from family or a lawyer","Email or text from what appears to be a government domain asking you to click a link","Caller becomes angry or threatening when you say you want to verify by calling back"],"whatToDoNow":["Hang up or set aside the communication and find the agency's official number independently","Call the official number from the agency's own website, not from the number provided by the caller","Ask the agency directly whether they have any open matter relating to your account","Do not pay anything via gift card, wire transfer, or crypto — these are never valid government payment methods","Report impersonation calls to the FTC at ReportFraud.ftc.gov","Alert elderly relatives to the most common government-impersonation scripts"],"faq":[{"question":"Can government agencies email or text me?","answer":"Some agencies do send email and text notifications, particularly for services you have signed up for online. But they will not send an unsolicited email or text asking you to click a link and enter personal information. Verify by logging in to your account through the official website directly."},{"question":"What if I already paid a government impersonator?","answer":"Report to the FTC at ReportFraud.ftc.gov and file a police report for your records. If you paid by gift card, call the card issuer immediately. If you paid by wire transfer, contact your bank the same day. Visit /recovery for a full checklist."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-avoid-romance-scam","url":"https://scamencyclopedia.org/questions/how-to-avoid-romance-scam","question":"How do I protect myself from a romance scam?","shortAnswer":"Video-call any online connection early and often, never send money or gifts to someone you have not met in person, and treat any request for financial help from an online-only relationship as a strong warning sign.","explanation":"Romance scams work by building genuine emotional connection over weeks or months before a financial request arrives. The scammer invests significant time to make you feel understood and valued, which makes the eventual request seem reasonable or even like an obligation to help someone you care about. This is deliberate and professional — most romance scammers operate in organised groups with scripts and rotating operators.\n\nThe most reliable early detection method is a video call. Scammers frequently use stolen photos of attractive real people — military personnel, doctors, engineers, and models are common persona choices — and cannot produce an on-demand live video matching those images. Request a video call early in the relationship, and if there is always an excuse (camera broken, overseas bandwidth, sensitive job that prohibits video), treat this as a serious red flag. Reverse-image search their photos using Google Images or TinEye to see if they appear elsewhere under a different name.\n\nFinancial requests are the definitive signal. The money is never asked for directly at first — it arrives as a crisis: a sudden medical emergency, a business investment going wrong, an emergency that prevents them from accessing their own funds, or a 'once in a lifetime opportunity' they want to share with you. Each payment tends to be followed by another, often larger one. Once you have sent money once, scammers know you are susceptible and will escalate.\n\nTell someone you trust about the relationship, especially if it is progressing quickly online without meeting. Trusted friends and family are often the first to notice warning signs you may be too emotionally invested to see. Many romance scams also lead into investment fraud — the partner introduces a crypto or trading platform and encourages investment — sometimes called 'pig butchering.'","redFlags":["Refuses or always has excuses to avoid video calling despite weeks of contact","Profile photos appear under a different name in a reverse-image search","Declares strong feelings unusually quickly — love or deep connection within days or weeks","Describes a glamorous profession that explains being abroad: military, doctor, oil-rig engineer, NGO worker","Requests money for an emergency: medical, legal, travel, or investment","Introduces a crypto or trading platform and urges you to invest through it"],"whatToDoNow":["Request a live video call early and note any excuse for not doing so","Reverse-image search their profile photos on Google Images or TinEye","Tell a trusted friend or family member about the relationship","Never send money, gift cards, or cryptocurrency to someone you have not met in person","Report suspected romance scammers to the FTC at ReportFraud.ftc.gov and the platform","If pig-butchering investment was involved, also report to the FBI IC3 at ic3.gov"],"faq":[{"question":"What is pig butchering?","answer":"Pig butchering (sha zhu pan) is a scam combining romance with investment fraud. The scammer builds a romantic relationship, introduces a fraudulent investment platform, encourages increasing deposits over time, and then vanishes when the victim tries to withdraw. The 'fattening' phase can last months."},{"question":"Is it possible to recover money lost in a romance scam?","answer":"Recovery is difficult. Funds sent via wire transfer, cryptocurrency, or gift cards are hard to retrieve. Report immediately to your bank and the FTC. Law enforcement has recovered some funds in large-scale operations but individual recovery is uncommon. See /recovery for the full checklist."},{"question":"Can I meet real people on dating apps?","answer":"Yes, most dating app users are genuine. The key protective habits are: meet in person within a reasonable time frame, video-call before developing deep emotional investment, and never send money regardless of the story."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-avoid-crypto-scam","url":"https://scamencyclopedia.org/questions/how-to-avoid-crypto-scam","question":"How do I protect myself from cryptocurrency scams?","shortAnswer":"Verify any crypto platform with your financial regulator before depositing, never invest based on advice from an online contact, and remember that crypto transactions are irreversible.","explanation":"Cryptocurrency scams range from fake exchanges and rug pulls to romance-based investment fraud and fake mining platforms. What makes crypto uniquely dangerous is that transactions are permanent and pseudonymous — there is no bank fraud team to call and no chargeback mechanism. Prevention is essentially the only option.\n\nOnly use crypto exchanges and platforms that are registered with your country's financial regulator. In the US, crypto exchanges handling securities must register with the SEC or CFTC depending on the asset type. In the UK, crypto businesses must register with the FCA for anti-money-laundering purposes. Check the regulator's register before depositing. Platforms promising unusually high returns, locked staking rewards, or guaranteed trading profits are almost universally fraudulent.\n\nBe extremely cautious about any platform introduced by someone you met online — a new friend, a romantic interest, or a social media contact. Pig-butchering scams involve cultivating a relationship and then introducing a fraudulent trading or investment platform. These platforms display false balance growth to encourage larger deposits; when you try to withdraw, you are told you need to pay fees or taxes first, and neither payment nor balance is ever returned.\n\nFor legitimate crypto activities: use hardware wallets for significant holdings, never share your seed phrase with anyone under any circumstance, verify smart contract addresses from multiple official sources before interacting with them, and be deeply sceptical of NFT minting events and new token launches promoted aggressively on social media.","redFlags":["Platform not listed on your financial regulator's register","Guaranteed returns or unusually consistent profits with no losing periods","Platform introduced by a new online contact, especially a romantic one","Withdrawal requests met with requests for additional fees or taxes before release","Pressure to recruit others to earn commissions","Unsolicited DM promising free crypto or access to an exclusive trading group","Any request to share your seed phrase, private key, or wallet recovery phrase"],"whatToDoNow":["Check any crypto platform against your financial regulator's register before depositing","Never share your seed phrase or private keys with anyone","Use only exchanges and wallets you reached through official sources, not links in DMs","Be sceptical of any investment platform introduced by someone you met online","Report suspected crypto scams to the FTC, FBI IC3, and your country's financial regulator","Visit /recovery if you have already lost money to see what options exist"],"faq":[{"question":"Can I recover stolen cryptocurrency?","answer":"Crypto transactions on the blockchain are permanent and cannot be reversed by any central authority. Some law enforcement agencies have seized and partially returned funds in large cases, but individual recovery is rare. Speed of reporting to IC3 and your exchange gives the best chance of any intervention."},{"question":"What is a rug pull?","answer":"A rug pull is when developers of a new crypto token or project collect investor funds and then abandon the project and drain the liquidity pool, leaving token holders with worthless assets. They are common in DeFi (decentralised finance) and NFT launches."},{"question":"Is crypto itself a scam?","answer":"No — cryptocurrency is a legitimate technology, but it attracts a disproportionate number of scams because of irreversibility, pseudonymity, and the technical complexity that many investors do not fully understand. Apply the same scepticism you would to any high-risk investment."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-spot-fake-tech-support-scam","url":"https://scamencyclopedia.org/questions/how-to-spot-fake-tech-support-scam","question":"How do I protect myself from tech support scams?","shortAnswer":"Microsoft, Apple, and Google never call you unsolicited about a virus on your computer — close any alarming pop-up by force-quitting your browser, and never give remote access to an unsolicited caller.","explanation":"Tech support scams arrive as alarming pop-up windows claiming your computer is infected and displaying a toll-free number to call, or as unsolicited phone calls from 'Windows Support' or 'Apple Security.' The goal is to get remote access to your computer, at which point the scammer either instals malware, steals data, or convinces you to pay hundreds of dollars for fictitious repairs.\n\nThe key fact to remember: Microsoft, Apple, Google, and antivirus companies do not monitor your computer for viruses and call you when they find one. They have no mechanism to do this. Any pop-up or call claiming your computer has been infected and urging you to call a number or grant remote access is a scam without exception.\n\nIf a pop-up freezes your browser and displays an alarming message with a phone number, do not call that number. Force-quit your browser using Task Manager (Windows) or Force Quit (Mac), restart your browser without restoring the previous session, and run a scan with legitimate security software. If you need technical help, use your computer's official support channels: apple.com/support, support.microsoft.com, or a local repair shop you have verified independently.\n\nIf you have already granted remote access to a caller, disconnect from the internet immediately by unplugging from the router or turning off WiFi. Change your passwords from a separate, unaffected device. Run a full scan with reputable security software. Notify your bank if you entered any financial information during the session or if the caller had visibility of your screen while financial accounts were open.","redFlags":["Browser pop-up with an alarm sound claiming your computer is infected with a phone number to call","Unsolicited phone call from 'Microsoft,' 'Apple,' or 'Windows Security'","Caller asks you to download remote-access software like AnyDesk or TeamViewer","Caller asks you to open Event Viewer (Windows) and tells you the normal warnings indicate a virus","Request for payment via gift cards, wire transfer, or cryptocurrency for repair services","Caller claims to refund you but needs access to your bank account to process it"],"whatToDoNow":["If a pop-up appears: force-quit the browser, do not call the number displayed","If you gave remote access: disconnect from the internet immediately, then change all passwords from another device","Run a scan with reputable security software to check for installed malware","Contact your bank if any financial information was visible or entered","Report the incident to the FTC at ReportFraud.ftc.gov","Warn family members about this scam — it particularly affects older adults"],"faq":[{"question":"How do I get rid of a browser pop-up that I cannot close?","answer":"On Windows, press Ctrl+Alt+Delete and open Task Manager, find your browser process and end it. On Mac, press Command+Option+Escape to open Force Quit, select your browser and click Force Quit. In both cases, restart your browser without restoring the previous session."},{"question":"My antivirus is telling me there is a virus. Is that a tech-support scam?","answer":"If the alert comes from legitimate security software you already have installed, it may be real. Legitimate security software does not direct you to call a phone number or buy a subscription to fix a specific virus — it quarantines the threat directly. If you are unsure, do not call any number shown in the alert; instead, go to your security software's official website to find support."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-yourself-from-subscription-traps","url":"https://scamencyclopedia.org/questions/how-to-protect-yourself-from-subscription-traps","question":"How do I protect myself from subscription traps and billing scams?","shortAnswer":"Read the full terms before entering card details on any free trial, set a calendar reminder before the trial ends, and use a virtual card number for subscriptions you are uncertain about.","explanation":"Subscription traps work by offering something free or cheap and burying a recurring billing clause in the terms and conditions. By the time you notice the charge — often weeks or months later — you have been billed multiple times, and some services make cancellation deliberately difficult. This is known as a 'negative option' business model, and while the most aggressive versions are illegal under FTC regulations, borderline cases are common.\n\nBefore entering your card on any free trial, scroll to the bottom of the page or find the terms and conditions and search for words like 'recurring,' 'automatic,' 'subscription,' and 'cancel.' If the trial converts to a paid subscription and the cancellation process requires a phone call to a number that is only available during restricted hours, that is a deliberate friction tactic. Document the terms with a screenshot dated on the day you sign up.\n\nA virtual card number is a one-time or limited-use card number provided by some banks and services (Capital One Eno, Privacy.com, Revolut) that you can create for a specific subscription and then lock or cancel without affecting your real card. Use one for any free trial you are uncertain about — if the company tries to charge after you cancel, the charge simply fails.\n\nCheck your bank and credit card statements monthly for recurring charges you do not recognise. Billing scam variants include a tiny initial charge — sometimes as little as $1.99 — designed to test whether the card is active before larger recurring charges begin. Report undisclosed or deceptive subscription charges to the FTC and your card issuer.","redFlags":["Free trial requires full credit card details with no clear cancellation terms","Cancellation process requires a phone call with no online option","Billing amount in the terms differs from the headline offer","Small unexplained charge on your statement you do not recognise","Company is very difficult to contact after you sign up","Privacy policy or terms not accessible or formatted to discourage reading"],"whatToDoNow":["Read the billing terms before entering card details on any free trial","Screenshot the terms on the day you sign up as a record of what you agreed to","Set a calendar reminder two days before the free trial ends","Use a virtual card number for uncertain subscriptions so you can cut off billing easily","Review your bank and card statements monthly for unrecognised recurring charges","Dispute undisclosed subscriptions with your card issuer and report to the FTC"],"faq":[{"question":"Can I get a refund on a subscription I was tricked into?","answer":"Dispute the charge with your credit card issuer as an unauthorised or deceptive subscription. Many card issuers will side with you if you can show the terms were not clearly disclosed. The FTC has taken enforcement action against companies using particularly deceptive negative-option tactics."},{"question":"What is a negative-option subscription?","answer":"A negative-option subscription is one where inaction counts as agreement to continue — for example, a free trial that converts to paid unless you actively cancel. The FTC's Negative Option Rule requires these terms to be clearly disclosed; any company hiding them in fine print may be in violation."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-yourself-from-lottery-prize-scams","url":"https://scamencyclopedia.org/questions/how-to-protect-yourself-from-lottery-prize-scams","question":"How do I protect myself from lottery and prize scams?","shortAnswer":"You cannot win a lottery you did not enter, and legitimate prizes never require an upfront fee to collect — any message saying you have won and must pay first is a scam.","explanation":"Lottery and prize scams are among the oldest fraud types and remain highly effective because the emotional appeal of unexpected good fortune is powerful. The structure is invariable: you receive a letter, email, text, or social media message saying you have won a prize, but to claim it you must pay a processing fee, tax, customs charge, or legal fee first. That payment goes directly to the scammer, and no prize exists.\n\nThe logical test is simple: you cannot win a lottery you did not enter. Legitimate sweepstakes — including Publisher's Clearing House, which is real — do not require any purchase or fee to enter or to claim a prize. Legitimate competition prizes have taxes withheld at source or handled by the organiser, not paid upfront by the winner. The notion that a winner must pay a release fee before receiving millions is a legal fiction invented specifically to defraud.\n\nScammers impersonate real lotteries (UK National Lottery, Powerball, Mega Millions), real technology companies (Google, Microsoft, Apple), and even government agencies. They use official-looking letterheads, realistic cheques for a partial prize that will bounce days later, and urgency to prevent you thinking carefully. If a cheque arrives and you deposit it and wire back a fee before it clears, you are liable for the full cheque amount when it bounces.\n\nIf you receive a prize notification that seems credible, look up the sponsoring organisation's actual contact details independently and call to confirm. Do not use any contact information provided in the notification itself.","redFlags":["Prize for a lottery, competition, or sweepstakes you did not enter","Required upfront fee, tax, or processing charge to release winnings","Urgency to respond within 24 to 72 hours or you forfeit the prize","Instructions to keep the prize confidential until funds are released","Contact details provided in the message rather than pointing to an official website","Partial-prize cheque arrives, and you are asked to deposit and wire back part of it"],"whatToDoNow":["Do not respond, pay any fee, or provide personal details","If you think there is a chance it is real, look up the organisation independently and call to verify","If a cheque arrived, do not deposit it — it will bounce and you will owe the bank","Report prize scam mail to the US Postal Inspection Service (postalinspectors.uspis.gov)","Report online or email prize scams to the FTC at ReportFraud.ftc.gov","Alert family members — older adults receive disproportionate numbers of prize scam letters"],"faq":[{"question":"Is Publisher's Clearing House real?","answer":"Yes, Publisher's Clearing House is a legitimate sweepstakes company and does give away real prizes. However, it never requires a purchase or fee to win, and it contacts winners in person at their door for major prizes — not via email or phone demanding a fee payment."},{"question":"I deposited the cheque and sent the fee. Can I get my money back?","answer":"Contact your bank immediately and explain the situation. Banks sometimes reverse wire transfers quickly if reported the same day, but success is not guaranteed. File a police report and report to the FTC. The fake cheque will bounce and the bank will recover that amount from your account."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-yourself-from-health-medical-scams","url":"https://scamencyclopedia.org/questions/how-to-protect-yourself-from-health-medical-scams","question":"How do I protect myself from health and medical scams?","shortAnswer":"Never buy prescription medication from an unverified online pharmacy, be deeply sceptical of any supplement or treatment promising to cure a serious condition, and verify any medical billing claim against your Explanation of Benefits.","explanation":"Health scams are particularly exploitative because they target vulnerability — people who are ill, in pain, or desperate for treatment that mainstream medicine has not resolved. Types range from fake online pharmacies selling counterfeit or contaminated medication, to fraudulent supplements claiming to reverse cancer or dementia, to Medicare fraud that bills for services you never received.\n\nFor online pharmacies, the safest rule is to only use pharmacies verified by your country's regulatory body. In the US, look for the NABP (.pharmacy) seal or verify at nabp.pharmacy. In the UK, look for the General Pharmaceutical Council (GPhC) logo which links to a confirmed register. Websites selling prescription medications without requiring a valid prescription from a licensed prescriber are operating illegally and the products they ship are frequently counterfeit, underdosed, or contaminated.\n\nSupplements and alternative treatments occupy a legal grey area. In the US, the FDA does not require dietary supplements to prove efficacy before being sold. Any supplement claiming to cure, treat, or prevent a specific disease is making an illegal drug claim, but enforcement is slow. Before spending significant money on a health product, check whether any independent clinical evidence exists — look for studies in peer-reviewed journals rather than the manufacturer's own testimonials. The FTC has information on health fraud at consumer.ftc.gov.\n\nMedicare and insurance fraud affects anyone on a government health programme. Review every Explanation of Benefits (EOB) statement you receive and report any charge for a service you did not receive to the Medicare fraud hotline at 1-800-MEDICARE or HHS Office of Inspector General at oig.hhs.gov.","redFlags":["Online pharmacy sells prescription drugs without requiring a prescription","Treatment or supplement claims to cure a serious disease with no side effects","Medicare or insurance EOB shows charges for appointments or equipment you never requested","Medical equipment company calls offering a free brace or device and asks for your Medicare number","Health product marketed exclusively through testimonials with no peer-reviewed evidence","'Miracle cure' product only sold through one website and unavailable from mainstream retailers"],"whatToDoNow":["Verify any online pharmacy at nabp.pharmacy (US) or GPhC register (UK) before ordering","Check health product claims against NIH MedlinePlus or consult a licensed healthcare provider","Review every insurance and Medicare EOB statement and report unfamiliar charges","Report healthcare fraud to 1-800-MEDICARE or the HHS OIG at oig.hhs.gov","Report fake supplement claims to the FTC at ReportFraud.ftc.gov","Never give your Medicare or insurance number to a cold caller"],"faq":[{"question":"How do I report a fake supplement claim?","answer":"Report to the FTC at ReportFraud.ftc.gov and to the FDA's MedWatch program at fda.gov/safety/medwatch. If you paid for a product that did not work as advertised, you may also be able to dispute the charge with your credit card issuer."},{"question":"Is ordering medication from Canada or Mexico safe?","answer":"Some Canadian pharmacies are legitimate and sell the same branded medications at lower prices, but the FDA prohibits importing prescription drugs for personal use in most cases. The risk is distinguishing legitimate foreign pharmacies from counterfeits using the same websites. Only use pharmacies accredited by CIPA (Canadian International Pharmacy Association)."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-yourself-from-utility-energy-scams","url":"https://scamencyclopedia.org/questions/how-to-protect-yourself-from-utility-energy-scams","question":"How do I protect myself from utility and energy company scams?","shortAnswer":"Real utility companies do not demand same-day payment to avoid disconnection, never require gift cards, and will give you time to verify a bill — hang up and call the number on your statement.","explanation":"Utility scams work by creating fear of immediate consequences: your power will be cut off today unless you pay right now. Scammers claim to be from your electricity, gas, or water provider, saying you have an overdue balance that must be settled within the hour or service will be disconnected. The payment method demanded is always one with no recall mechanism — prepaid debit card, gift card, wire transfer, or cryptocurrency.\n\nYour actual utility provider sends written notices before any disconnection, typically 10 to 30 days in advance depending on your state and provider. Disconnection also happens during business hours, not at night or on weekends. If you receive a call threatening imminent disconnection, call the customer service number printed on your actual bill — not any number provided by the caller — and ask whether you have a balance due.\n\nEnergy broker and switching scams also occur: a caller or door-to-door visitor claims to be able to save you significant money by switching your energy supplier and needs to see your current bill (to capture your account number and meter information) or to take payment to 'reserve' a rate. Legitimate energy brokers do not take upfront payments and the rate only changes after a switching process that you initiate through the new provider's verified channels.\n\nSolar-panel and energy-efficiency grant scams have grown significantly. Callers claim you qualify for a government grant for solar panels or home insulation, take an upfront installation deposit, and then either disappear or install substandard equipment. Check any claimed government scheme directly on the official government energy agency website before engaging.","redFlags":["Caller demands immediate payment to prevent disconnection today","Payment requested via gift card, prepaid debit card, or wire transfer","Call comes outside business hours, claiming imminent service cutoff","Caller asks to see your bill or account number to 'verify' your account","Door-to-door visitor offering large savings and needing an upfront deposit","Claim of a government grant that requires immediate action to secure"],"whatToDoNow":["Hang up and call your utility company using the number printed on your bill","Never pay a utility balance via gift card or wire transfer","For door-to-door callers, ask for written materials and verify the company independently before signing anything","Check claimed government schemes at official government energy websites","Report utility impersonation scams to the FTC and your state's public utility commission"],"faq":[{"question":"How much notice does a utility company give before disconnection?","answer":"Requirements vary by state and country, but most utilities must provide written notice at least 10 to 30 days before disconnection, must offer a payment plan, and are restricted from disconnecting during extreme weather or for certain vulnerable customers. Any threat of same-day disconnection by phone is a scam."},{"question":"What should I do if I already paid a utility scammer with gift cards?","answer":"Call the gift card issuer immediately to report fraud and ask them to freeze the remaining balance. Report to the FTC at ReportFraud.ftc.gov and file a police report. The chances of recovery are low but reporting helps track and prosecute scam rings."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-yourself-from-travel-scams","url":"https://scamencyclopedia.org/questions/how-to-protect-yourself-from-travel-scams","question":"How do I protect myself from travel and vacation scams?","shortAnswer":"Book through established platforms or directly with the accommodation, use a credit card for all travel purchases, and verify every booking confirmation through the supplier's official app or website before your trip.","explanation":"Travel scams exploit enthusiasm and the complexity of trip planning. Common types include fake holiday rental listings, fraudulent airline websites selling tickets that do not exist, accommodation booking sites with inflated prices and hidden fees, and 'vacation club' or timeshare high-pressure pitches promising savings that never materialise.\n\nFor accommodation, use well-known booking platforms or book directly with the hotel or host after verifying their identity on the platform. For vacation rentals, apply the same checks as you would for any rental: verify the host's profile history, look for consistent past reviews over a period of time, and insist on paying through the platform rather than directly to the host's personal bank account (which removes you from platform buyer-protection programs). Fake listings are a growing problem — if a property looks far better than comparable rentals at the same price, it may be a cloned listing.\n\nAirline booking scams use names and web designs that mimic official airline sites to sell non-existent tickets. Always book through the airline's official website or a well-known agent. Before any flight, verify your booking reference directly on the airline's official website — not via the booking site — to confirm the reservation actually exists in the airline's system. Book with a credit card to enable a chargeback if the ticket proves fraudulent.\n\nVacation club and timeshare presentations are legal but frequently use deceptive high-pressure sales tactics. If you attend in exchange for a promised free gift, the gift is usually conditional on sitting through a multi-hour pitch and purchasing. You typically have a statutory right to cancel within a cooling-off period — read the contract carefully before signing.","redFlags":["Vacation rental price significantly below comparable properties in the same area","Host asks you to pay outside the booking platform directly to their bank","Airline or hotel booking site domain does not match the official company website","Confirmation email asks you to re-enter payment details to 'confirm' your booking","Vacation club pitch promises savings you cannot verify before the event ends","Hotel or rental listing has no reviews or only very recent generic-sounding reviews"],"whatToDoNow":["Verify every accommodation booking via the official platform or supplier app before travelling","Book flights and accommodation on established platforms or official websites and pay by credit card","Reverse-image search property photos before booking a holiday rental","For vacation club pitches, do not sign anything without reading the cooling-off terms","If a booking does not exist in the airline's system, contact your card issuer immediately","Report travel scams to the FTC and the platform where the listing or offer appeared"],"faq":[{"question":"Is it safe to book directly with a rental host outside a platform to save fees?","answer":"Taking a booking off-platform removes you from the platform's buyer protection and dispute resolution, and makes it harder to verify the host's legitimacy. The fee savings rarely justify the risk, especially with hosts you have not used before."},{"question":"What is a timeshare exit scam?","answer":"Timeshare exit scams target existing timeshare owners who want to sell or exit their contract. The fraudster charges large upfront fees promising to legally exit the owner from their contract and then disappears or fails to deliver. Always verify any timeshare exit company with your state attorney general's office."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-yourself-from-auto-vehicle-scams","url":"https://scamencyclopedia.org/questions/how-to-protect-yourself-from-auto-vehicle-scams","question":"How do I protect myself from car-buying and vehicle scams?","shortAnswer":"Run a VIN check, have any used vehicle inspected by an independent mechanic, and never pay a deposit for a vehicle you have not seen in person — especially if the seller wants wire transfer or gift cards.","explanation":"Vehicle fraud costs buyers significant sums because the price points are high and the transactions happen relatively infrequently, making buyers less experienced at spotting manipulation. The most common types are: odometer fraud (rolling back the mileage to hide wear), salvage-title washing (disguising a written-off vehicle as a clean-title car), online vehicle listing scams (non-existent cars requiring a deposit to 'hold' them), and curbstoning (unlicensed dealers posing as private sellers to avoid consumer protections).\n\nA VIN history report from a service such as Carfax or AutoCheck checks reported mileage history, title status (clean, salvage, lemon-law buyback), accident history, and previous ownership. While not infallible, it catches a significant proportion of odometer and title problems. Cross-check the VIN on the report against the VIN plate on the dashboard and the VIN stamped on the door jamb — any mismatch suggests tampering.\n\nFor used vehicles, an independent pre-purchase inspection by a mechanic you choose (not one recommended by the seller) is the single best investment. A good inspection reveals rust, flood damage, undisclosed accident repairs, and mechanical issues that a seller has not disclosed. Budget the cost of the inspection into your decision — it is far cheaper than discovering major problems after purchase.\n\nFor online listings: never pay a deposit to hold a car you have not seen in person. Fake online vehicle listings frequently feature attractive cars priced below market and a seller who is 'moving abroad' or 'in the military' and needs the car moved quickly. They request a deposit before you can view the vehicle. This deposit is the scam; there is no car.","redFlags":["Seller asks for deposit before you can view the vehicle in person","Vehicle priced significantly below market with a vague explanation","Seller cannot meet in person due to being overseas, in the military, or 'on assignment'","VIN history shows salvage, flood, or lemon-law buyback title","Reported mileage jumps backward compared to previous inspection records","Seller insists on cash, wire transfer, or cryptocurrency and discourages bank financing"],"whatToDoNow":["Run a VIN check on any used vehicle before negotiating a price","Arrange an independent pre-purchase inspection before signing any contract","Never pay a deposit to hold a vehicle without seeing it in person first","Verify the seller's identity and, for dealer transactions, check their dealer licence number","Pay by certified cheque or finance through a bank rather than cash or wire transfer","Report vehicle fraud to your state's DMV or attorney general's consumer protection office"],"faq":[{"question":"What is title washing?","answer":"Title washing is the practice of re-registering a vehicle with a salvage, flood, or rebuilt title through a state with looser title-history requirements to obtain a clean title. A VIN history report from multiple sources and a physical inspection by a mechanic can sometimes detect washed titles."},{"question":"Is it safer to buy from a dealer than a private seller?","answer":"Licensed dealers are subject to consumer protection regulations and lemon laws that private sellers are not. However, some curbstoners impersonate private sellers while operating as unlicensed dealers. A dealer with a verified dealership licence and physical lot provides more legal recourse if something goes wrong."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-yourself-from-pet-scams","url":"https://scamencyclopedia.org/questions/how-to-protect-yourself-from-pet-scams","question":"How do I protect myself from pet and puppy scams?","shortAnswer":"Never pay for a pet you have not seen in person, meet the animal at the breeder's or seller's location before any money changes hands, and be very cautious of online-only pet listings requiring shipping.","explanation":"Pet scams have increased sharply as more people search for pets online, particularly during periods when demand for specific breeds is high. The most common format is a convincing website or social media profile featuring photos of adorable puppies or kittens at prices below market. The buyer pays a deposit or full price, and then receives requests for additional payments — 'transport insurance,' 'customs clearance,' 'climate-controlled crate' — until they stop paying or realise the pet does not exist.\n\nThe structure exploits emotional investment: by the time the first request for additional fees arrives, the buyer has often already told their family about the new pet and feels committed. Scammers use this attachment to extract multiple payments. The pet photos are typically stolen from legitimate breeders' websites or social media — a reverse-image search of the listing photos often reveals them appearing elsewhere under a different name.\n\nThe most reliable protection is meeting the animal and the seller in person before paying anything. Visit the breeder's actual premises, see the puppy with its mother, and confirm the living conditions are consistent with responsible breeding. Legitimate breeders welcome this visit. Sellers who refuse in-person meeting, claim the animal is in another state or country, or insist on payment before viewing are almost certainly running a scam.\n\nFor rescue organisations and shelters, verify the charity registration as you would for any charitable organisation. Legitimate rescues will have a physical location, verifiable social media presence with a history, and a proper adoption process that includes references and a home check rather than just payment.","redFlags":["Seller cannot meet in person and the pet is in another state or country","Additional fees requested after initial payment for shipping, insurance, or customs","Listing photos appear under different names in a reverse-image search","Seller pressure to complete payment quickly before someone else takes the pet","Price is significantly below breed-typical asking prices","No verifiable physical address or established online presence for the breeder"],"whatToDoNow":["Insist on meeting the animal and the seller in person before paying","Reverse-image search all photos from the listing","Verify breeders with the relevant kennel club or breed association","Pay by credit card so you have dispute rights if no pet arrives","Report pet scam listings to the FTC and the platform where they appeared","Visit the ASPCA or your country's animal welfare organisation for guidance on finding reputable sources"],"faq":[{"question":"Is it ever safe to buy a pet online without meeting in person?","answer":"It is possible to find legitimate sellers online, but you should always arrange an in-person meeting before any payment. If distance makes a visit impractical, at minimum arrange a live video call showing the actual animal, its environment, and the mother, and verify the breeder through independent sources such as a kennel club registry."},{"question":"How do I find a reputable breeder?","answer":"Start with the relevant national kennel club (AKC in the US, The Kennel Club in the UK) and their lists of registered breeders. Breed-specific clubs often maintain their own referral lists. Reputable breeders typically have waiting lists, health-test their breeding animals, and ask you as many questions as you ask them."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-yourself-from-insurance-scams","url":"https://scamencyclopedia.org/questions/how-to-protect-yourself-from-insurance-scams","question":"How do I protect myself from insurance scams?","shortAnswer":"Verify any insurance agent's licence with your state insurance department, buy only from insurers with an AM Best or similar rating, and be cautious of unusually cheap policies that lack a documented insurer behind them.","explanation":"Insurance scams come in two main forms: fake policies where premiums are collected but claims are never paid, and premium fraud where individuals exaggerate or fabricate claims — which ultimately costs everyone through higher premiums. From a consumer protection standpoint, the first type is the more urgent risk.\n\nAny person selling insurance in the US must hold a licence issued by the state they operate in. Check the agent's licence at your state insurance department's website (searchable online) using their name or licence number. For the insurance company itself, verify it is licensed in your state — unlicensed insurers are not subject to state consumer protections and may have no intention of paying claims. AM Best, Moody's, and S&P rate insurers for financial strength; a policy from an unrated or very low-rated insurer may be nearly worthless.\n\nPhantom insurance is a specific scam targeting small businesses and self-employed individuals: a broker sells a health or liability policy from a company that does not actually exist, collects monthly premiums for months or years, and disappears when a claim is filed. The victim is left with unpaid medical bills or liability exposure they thought was covered.\n\nFor healthcare coverage specifically, fake health plans are sometimes marketed as 'health sharing ministries' or 'association health plans' that are not subject to ACA regulations. These plans may have severe coverage limits or exclusions not clear from the marketing materials. Always read the full policy document, specifically the exclusions and limitations, before enrolling and paying premiums.","redFlags":["Agent unable to provide their licence number or it does not appear on the state database","Insurer is not listed in your state's approved insurer directory","Premium is dramatically lower than every other comparable quote","Policy documents are vague, poorly formatted, or take weeks to arrive","Claims process is described vaguely — no specific timeframes or documented procedures","Health plan marketed as not subject to standard insurance regulations"],"whatToDoNow":["Verify the agent's licence at your state insurance department's online lookup","Check the insurer is licensed in your state via the state insurance department","Look up the insurer's financial strength rating on AM Best before buying","Read the full policy document including exclusions before paying the first premium","For health coverage, verify the plan is ACA-compliant at healthcare.gov if you need comprehensive protection","Report unlicensed insurance sellers to your state insurance department"],"faq":[{"question":"What is phantom auto insurance?","answer":"Phantom auto insurance involves a fraudulent agent issuing a fake insurance certificate that looks legitimate but was never underwritten by a real insurer. The policyholder believes they are covered until they make a claim or are pulled over and the policy cannot be verified. Always verify with the named insurer directly."},{"question":"What should I do if I discover my insurance was fake?","answer":"Report to your state insurance department immediately. They can confirm whether the insurer is licensed and take enforcement action. File a complaint with the FTC. If you paid premiums, you may have a civil claim against the fraudulent agent. For health claims already incurred, contact the medical provider directly to arrange a payment plan while the fraud is investigated."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-yourself-from-social-media-scams","url":"https://scamencyclopedia.org/questions/how-to-protect-yourself-from-social-media-scams","question":"How do I protect my social media accounts from being compromised?","shortAnswer":"Use a unique strong password with app-based two-factor authentication on every social account, and recognise that a hijacked account will be used to scam your followers while appearing to be you.","explanation":"Social media account takeovers are valuable to scammers because a hijacked account comes pre-loaded with trusted followers who are more likely to engage with a message that appears to come from someone they know. Compromised accounts are used to spread investment scams, phishing links, fake giveaways, and emergency money requests — all in your name.\n\nThe most common takeover methods are: phishing links that go to a fake login page capturing your credentials, and third-party app authorisation where you grant excessive permissions to a quiz or tool that then posts on your behalf or harvests your data. Review the connected apps in your account settings regularly and revoke any you no longer use or do not recognise.\n\nFor passwords: use a password manager to generate a unique string for each social account. Reusing a password from a breached service is the fastest route to having your account taken over, since attackers run automated credential-stuffing scripts within hours of major breaches. Enable two-factor authentication using an authenticator app rather than SMS on your primary social accounts.\n\nBe cautious of direct messages that create urgency: a 'friend' who says they are in trouble and needs money via Venmo, a message saying your account will be deleted unless you click a link to verify it, or an offer to verify your account with a blue tick if you pay a fee. These are consistently scam formats. Treat unsolicited DMs that involve money or clicking a link with the same scepticism you would apply to an email.","redFlags":["Unexpected login notification from a device or location you do not recognise","Direct message from a friend asking for emergency money or to click an urgent link","Account posting content you did not create — possible takeover already occurred","Request for your login credentials to enter a giveaway or receive a prize","Message offering account verification for a fee","Friend's account sending a link to an investment or crypto platform"],"whatToDoNow":["Enable two-factor authentication on all social media accounts using an authenticator app","Use a unique password for each social platform stored in a password manager","Review connected apps in your account settings and revoke any you do not recognise","Set up login alerts so you are notified of any new device access","If your account is taken over, use the platform's account recovery process immediately","Warn your followers if your account was compromised so they do not fall for messages sent in your name"],"faq":[{"question":"What do I do if my social media account has already been hacked?","answer":"Use the platform's account recovery process — for most platforms this is an 'I can't access my account' flow accessible from the login page. Once recovered, change the password, review and revoke connected apps, check for profile changes (email, phone number) the attacker may have made, and post a notice to your followers warning them about any messages sent from your account while it was compromised."},{"question":"Why do scammers want to hack social media accounts?","answer":"A trusted account with an established follower base is a ready-made audience for scams. Followers are more likely to click a link, send money, or engage with an offer that appears to come from someone they already trust. Accounts with large followings are also sold outright on criminal marketplaces."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-yourself-from-mlm-pyramid-schemes","url":"https://scamencyclopedia.org/questions/how-to-protect-yourself-from-mlm-pyramid-schemes","question":"How do I protect myself from MLM and pyramid scheme recruitment?","shortAnswer":"Evaluate any multi-level marketing opportunity purely on retail product sales to customers outside the organisation — if income primarily comes from recruiting others, it is a pyramid scheme regardless of what products are sold.","explanation":"Multi-level marketing (MLM) companies and outright pyramid schemes are designed to make recruitment look like business success. The legal distinction is meaningful but often unclear in practice: legitimate direct-sales companies primarily earn revenue from selling products to genuine end consumers; illegal pyramid schemes primarily earn revenue from recruiting new members who pay to join and buy inventory they cannot sell.\n\nBefore joining any MLM, ask for the income disclosure statement — most companies are required to publish this. Read it carefully: for most MLMs, the median active participant earns very little or negative income after deducting product purchases required to maintain active status. The top earners are overwhelmingly those who joined earliest and built large downlines. If the disclosure is not available or the recruiter is evasive about it, that is significant.\n\nThe investment required to join is a red flag. Legitimate employment does not require you to purchase a starter kit or maintain monthly product purchases ('autoship') to remain eligible for commissions. These mandatory purchases benefit the company and the upline regardless of whether you can sell the product, and they are the primary mechanism by which most participants lose money.\n\nFriendship and family pressure are common recruitment tactics. Being recruited by someone you trust makes it harder to evaluate the opportunity objectively. Apply the same financial analysis you would to any business proposition: what is the realistic addressable market for this product in your area, what are your total costs including mandatory purchases, and what percentage of participants actually profit? If honest answers are not available, decline.","redFlags":["Income primarily depends on recruiting new members rather than selling to external customers","Required upfront payment for a starter kit or mandatory monthly product purchases","Recruiter emphasises lifestyle imagery and testimonials rather than verified product revenue","Income disclosure statement shows median earnings below minimum wage or negative","Claims that you will earn passively simply by building a 'team'","Pressure from friends or family combined with promises of residual income and flexibility"],"whatToDoNow":["Request and read the income disclosure statement before agreeing to anything","Calculate total annual costs (starter kit, mandatory autoship, events) versus realistic income","Research the company's BBB record and FTC history before joining","Ask the recruiter what percentage of their income comes from product sales versus recruiting","Consult a fee-only financial adviser if a large upfront purchase is involved","Report pyramid schemes to the FTC at ReportFraud.ftc.gov"],"faq":[{"question":"Is all MLM illegal?","answer":"No. Some direct-sales companies operate legally with real consumer demand for their products. The legal test focuses on where revenue originates. MLMs where income depends primarily on recruitment rather than external retail sales are illegal pyramid schemes under FTC guidelines, even if products exist."},{"question":"What is an autoship requirement?","answer":"Autoship is a mandatory monthly product purchase participants must maintain to qualify for commissions. This creates a situation where participants must spend a set amount each month regardless of whether they can sell the product, ensuring the company and upline earn from each participant regardless of their sales success."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-yourself-from-ai-powered-scams","url":"https://scamencyclopedia.org/questions/how-to-protect-yourself-from-ai-powered-scams","question":"How do I protect myself from AI-powered scams like voice cloning and deepfakes?","shortAnswer":"Establish a verbal code word with close family for emergency requests, and treat any call creating urgency around money with scepticism regardless of how authentic the voice sounds.","explanation":"Artificial intelligence has lowered the barrier to creating convincing fake audio and video of real people. Voice cloning requires only a short sample of someone's voice — obtainable from a voicemail, a social media video, or a public speech — to generate audio that sounds convincingly like that person saying anything. Deepfake video has become accessible enough to be deployed in scams. These technologies are being used to supercharge existing scam formats: grandparent scams with cloned grandchildren's voices, fake emergency calls from 'kidnapped' family members, and corporate fraud using a CEO's voice or face.\n\nThe most effective defence is a verification protocol that bypasses the audio or video entirely. Agree a secret code word with close family members — a word that a scammer would not know — that can be used to confirm genuine identity in any emergency request involving money. If the caller cannot produce the code word, hang up and call the real person on their known number using a second device.\n\nFor business contexts, implement the same verbal-confirmation rule that protects against business email compromise: any request from an executive to transfer funds must be confirmed by calling that executive on their known phone number, regardless of how convincing the original request sounded. A scammer impersonating a CFO on a call to authorise a wire transfer is defeated the moment an independent confirmation call is required.\n\nBe especially sceptical of unsolicited contact from investment advisers, celebrities, or public figures promoting opportunities via video — deepfake celebrity investment scams are common and are often promoted through social media. Verify any investment opportunity through the regulator register, not through the credibility of the face promoting it.","redFlags":["Unexpected call from a family member saying they are in danger and need money immediately","Caller sounds like someone you know but the request is unusual and urgent","Video call or social media video of a celebrity promoting a specific investment platform","Executive calling to authorise an urgent wire transfer outside normal channels","Slight audio artifacts, robotic pacing, or lip-sync inconsistencies in video","Call or message says to tell no one else about the emergency"],"whatToDoNow":["Establish a secret code word with close family for genuine emergencies","For any urgent money request, hang up and call the real person back on their known number","Apply verbal confirmation rules to all executive payment authorisations in your workplace","Treat all celebrity-endorsed investment offers with extreme scepticism regardless of the medium","Report AI-enabled scam attempts to the FTC at ReportFraud.ftc.gov","Visit /family-safety to share these protocols with family members"],"faq":[{"question":"How realistic is voice cloning today?","answer":"Consumer-accessible voice-cloning tools can produce convincing results from short audio samples. The output is not always perfect — there may be unnatural pacing or audio artifacts — but in a stressful situation a person may not notice. A code word removes the need to distinguish real from fake by ear."},{"question":"Can deepfake video be used in real-time calls?","answer":"Real-time deepfake video is technically possible and has been used in documented fraud cases. Video alone should not be treated as proof of identity for high-stakes decisions. A code word or calling back on a known number is a more reliable verification method."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-yourself-from-gaming-scams","url":"https://scamencyclopedia.org/questions/how-to-protect-yourself-from-gaming-scams","question":"How do I protect myself and my family from gaming and in-game scams?","shortAnswer":"Buy in-game currency and items only through the game's official store, never share your login credentials for boosting services, and set spending controls on your child's gaming account.","explanation":"Gaming scams exploit the enthusiasm players have for progression and rare in-game items. Free currency generators, boosting services, and account gifting scams are consistently among the most visited fraudulent sites by young users. Understanding the specific patterns protects both children and adult players.\n\nFree currency generators — sites claiming to add Robux, V-Bucks, Coins, or any other in-game currency to your account for free — are universally fraudulent. No third-party site has the API access to add currency to a game publisher's accounts. They exist to steal credentials, install malware, or keep users completing surveys that generate ad revenue. The moment a site asks for your username and password, close the page.\n\nAccount boosting services (paying a third party to play on your account to raise your rank) violate almost all game terms of service and result in bans, but also expose your account to theft. The boosting service now has your login credentials and can sell the account, steal linked payment methods, or hold it for ransom. Use the game's official channels exclusively for any account services.\n\nFor parents: enable parental controls that require approval for any purchase, set monthly spending limits through your console or platform's family settings, and link the child's account to your email so purchase confirmations go to you. Talk through what real in-game purchases look like so your child can recognise third-party scam sites.","redFlags":["Website offering free in-game currency, items, or ranks with no payment required","Service asks for your game login credentials to 'access your account'","Unexpected in-game purchase charges on your linked payment method","Friend or contact in-game promising to gift items if you share your account","Message claiming your account was flagged and you need to log in via a provided link","Purchase confirmation emails for amounts you did not authorise"],"whatToDoNow":["Enable parental controls and spending limits on your child's gaming accounts","Only buy in-game currency through the official in-game store or platform","Never share login credentials with any third-party service","Check linked payment methods for unauthorised charges regularly","Enable two-factor authentication on all gaming platform accounts","Report fraudulent gaming sites to the FTC and the platform"],"faq":[{"question":"My child was scammed in a game and lost Robux or V-Bucks. Can they get them back?","answer":"Contact the game publisher's official support — Roblox, Epic Games, and others have support processes for investigating fraudulent transfers, though recovery is not guaranteed. File a report so they can track the scammer's account. Going forward, ensure 2FA is enabled and review how the account was accessed."},{"question":"Are player-to-player trading platforms for in-game items safe?","answer":"Some are legitimate businesses, but third-party trading platforms carry real risks: chargebacks reverse payments leaving sellers without items or money, accounts involved in real-money trades may be banned, and the platforms themselves vary greatly in their fraud prevention. Evaluate each platform's reputation independently before using it."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-yourself-from-mail-courier-scams","url":"https://scamencyclopedia.org/questions/how-to-protect-yourself-from-mail-courier-scams","question":"How do I protect myself from fake parcel delivery and courier scams?","shortAnswer":"Track any delivery through the carrier's official website using a tracking number you received from the sender — never pay a customs or re-delivery fee by clicking a link in an unexpected text message.","explanation":"Smishing (SMS phishing) messages pretending to be from a delivery service are among the most prolific fraud attempts currently circulating. The typical format is a text claiming your parcel is on hold and requires a small customs payment or re-delivery fee to be released, with a link to a fake payment page that captures your card details. The charge is small enough to seem plausible, but the real goal is harvesting full card information for larger fraud.\n\nThe most important rule is to check delivery status only through the official carrier's website, using a tracking number you received from the actual sender when you placed an order. Go to the carrier's website directly — type it yourself — rather than clicking any link in a text or email. FedEx, UPS, Royal Mail, DHL, and USPS do not typically text you a payment link to release a parcel; any such text is highly likely to be fraudulent.\n\nCustoms charges on international deliveries are real, but they are handled at delivery by the carrier, not by a text message link. If a genuine customs charge is due, the carrier will either collect it at the door or send a formal notice by post. You can verify any claimed customs charge by calling the carrier's official customer service line.\n\nDo not ignore these texts — report them. In the US, forward smishing texts to 7726 (SPAM), which is a carrier reporting service. In the UK, forward to 7726. Report delivery scam messages to the FTC. Clicking the link (without entering data) does not necessarily compromise you, but it does confirm your number is active and may increase smishing volume.","redFlags":["Unexpected text about a parcel requiring a small fee payment via link","Link in the text does not match the official carrier's domain","Payment page in the link asks for full card number, expiry, and CVV","You have not placed any recent international order but the text claims customs is due","Text uses urgent language: 'parcel returned if not paid today'","Tracking number in the text does not resolve on the official carrier's website"],"whatToDoNow":["Do not click any link in an unexpected delivery-related text message","Check your delivery status by going directly to the carrier's official website","Forward smishing texts to 7726 (US and UK) to report them","Report delivery scam texts to the FTC at ReportFraud.ftc.gov","If you already entered card details, contact your bank immediately to report the potential fraud"],"faq":[{"question":"Are real customs charges collected via text message?","answer":"No. Legitimate customs charges are collected in person at delivery, by the carrier at the door, or via a formal written notice from the customs authority, not via a text message with a payment link. Any text asking for a customs or re-delivery fee via a link is a scam."},{"question":"I clicked the link but did not enter any details. Am I safe?","answer":"In most cases, just visiting the page without entering information poses minimal risk, especially if your device is up to date. However, your phone number is confirmed active. Monitor your accounts for unusual activity and ensure your device software is current."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-yourself-from-education-student-scams","url":"https://scamencyclopedia.org/questions/how-to-protect-yourself-from-education-student-scams","question":"How do I protect myself or my student from education and student loan scams?","shortAnswer":"Federal student aid is managed exclusively through studentaid.gov — any third party charging fees to apply for aid, forgiveness, or scholarships is almost certainly a scam.","explanation":"Students and parents are targeted by multiple overlapping scam categories: fake scholarship programs collecting application fees, student loan debt relief services charging money for things you can do for free, fake college enrollment scams, and accreditation fraud where a diploma mill sells credentials that are not recognised by legitimate employers.\n\nFor federal student aid in the US, the only legitimate entry point is studentaid.gov. The FAFSA, loan consolidation, income-driven repayment enrollment, and official loan forgiveness programs (such as Public Service Loan Forgiveness) are all free and managed through that portal. Any company charging fees to 'help' you apply for aid, consolidate loans, or access forgiveness programs is taking money for a service you can access for free.\n\nScholarship scams promise guaranteed awards in exchange for an application fee. Legitimate scholarships never charge to apply. Search for scholarships through free databases such as Fastweb, College Board's scholarship search, or your state's higher education agency. Be cautious of 'exclusive' scholarships that arrive unsolicited or that require payment to 'unlock' the application.\n\nDiploma mills sell official-looking degrees and transcripts from accredited-sounding institutions that have no legitimate accreditation recognised by the US Department of Education. These credentials do not qualify you for licensed professions (nursing, teaching, law) and employers increasingly screen for them. Verify any unfamiliar institution's accreditation status at the Department of Education's Database of Accredited Postsecondary Institutions.","redFlags":["Third party charging fees to apply for FAFSA, loan consolidation, or loan forgiveness","Scholarship requiring an application fee or upfront payment to claim the award","Unsolicited scholarship notification for which you never applied","'University' or 'college' promising a degree based on life experience with minimal coursework","Accreditation name that sounds official but does not appear on the DoE database","Pressure to enrol and pay tuition immediately before reviewing accreditation or course materials"],"whatToDoNow":["Access all federal student aid only through studentaid.gov","Search scholarships only through free databases — never pay to apply","Verify institution accreditation at the DoE's accreditation database before enrolling","Report fake scholarship and student loan debt relief scams to the FTC","If already enrolled in a diploma mill, contact your state attorney general for options"],"faq":[{"question":"Are student loan relief companies ever legitimate?","answer":"A small number of legitimate non-profit credit counselling agencies help borrowers navigate repayment options at no or low cost. However, any for-profit company charging hundreds or thousands of dollars to access programs available for free through studentaid.gov is likely a scam or at minimum offering poor value."},{"question":"How do I check if a college's accreditation is legitimate?","answer":"Search the institution's name at the US Department of Education's Database of Accredited Postsecondary Institutions and Programs (ope.ed.gov/dapip). For professional licenses, also check with the relevant professional body (nursing boards, state bar for lawyers, teaching certification boards)."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-yourself-from-legal-immigration-scams","url":"https://scamencyclopedia.org/questions/how-to-protect-yourself-from-legal-immigration-scams","question":"How do I protect myself from legal and immigration scams?","shortAnswer":"Only use licensed attorneys or accredited representatives for immigration help — notarios and notary publics have no authority to provide immigration advice in the US, regardless of what they claim.","explanation":"Immigration fraud is particularly harmful because it affects people whose legal status may depend on the advice they receive. Fraudsters call themselves 'immigration consultants,' 'notarios,' or 'visa specialists,' charge significant fees, and either file incorrect forms or do nothing while the deadline passes. Victims are left with wasted money, missed deadlines, and sometimes deportation proceedings.\n\nIn the United States, only licensed attorneys and accredited representatives (authorised by the Department of Justice) can charge fees to provide immigration advice. The term 'notario' in many Latin American countries refers to a highly trained legal professional, but in the US a notario is simply a notary public with no immigration authority. The cultural confusion is deliberately exploited by fraudsters targeting Spanish-speaking communities.\n\nFor immigration forms and instructions, USCIS (uscis.gov) provides all official forms for free. Any third party selling these forms is unnecessary. Free or low-cost help is available through non-profit legal organisations accredited by the DOJ Board of Immigration Appeals — search the BIA accredited organisations list at justice.gov.\n\nLegal scams outside immigration follow similar patterns: fraudulent debt settlement companies, fake lawsuit settlement notifications asking you to pay a fee to claim your share, and unsolicited calls from people claiming to be lawyers who have found money owed to you. Legitimate lawyers do not cold-call potential clients offering to recover money on their behalf without prior engagement.","redFlags":["Person offering immigration help uses the title 'notario' or 'immigration consultant' rather than licensed attorney","Immigration form being sold — USCIS forms are always free to download","Lawsuit settlement notification requiring an upfront fee before your share is released","Lawyer cold-calling to offer to recover money with no previous contact","Promise of guaranteed visa or immigration outcome no attorney can legally guarantee","Request for original identity documents to be left with the consultant"],"whatToDoNow":["Verify any immigration adviser is either a licensed attorney or DOJ-accredited representative","Search for DOJ BIA-accredited non-profit organisations at justice.gov for low-cost legitimate help","Download USCIS forms for free at uscis.gov — never pay a third party for forms","Report immigration fraud to USCIS at 1-800-375-5283 and to the FTC","For legal scams, report to your state bar association and state attorney general"],"faq":[{"question":"Is it legal for a non-lawyer to help with immigration paperwork?","answer":"In the US, non-lawyers can provide limited assistance such as translating and filling in forms at the direction of the applicant, but they cannot give legal advice, interpret the law, or represent clients before USCIS. Charging fees for these services beyond clerical tasks is generally illegal unless the person is a DOJ-accredited representative."},{"question":"What is a 'phantom barrister' or fake lawyer scam?","answer":"A phantom barrister is a fraudster who pretends to be a qualified lawyer, sometimes using a legitimate firm's name or fabricated credentials, to charge fees for legal services they are not qualified to provide. Always verify a lawyer's bar admission through your state bar's public registration database."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-yourself-from-housing-rental-scams-tenant","url":"https://scamencyclopedia.org/questions/how-to-protect-yourself-from-housing-rental-scams-tenant","question":"What steps should a renter take to avoid rental fraud before signing a lease?","shortAnswer":"View the property in person, confirm the landlord's ownership in public records, pay the deposit by traceable bank transfer with a signed lease in hand, and never pay in cash or via wire transfer before signing.","explanation":"Rental fraud causes victims to lose both a deposit and temporary housing simultaneously — among the most disruptive financial crimes for individuals and families. Most victims could have avoided the loss with a short chain of verification steps before any money changed hands.\n\nBefore agreeing to any rental terms, verify that the person you are dealing with actually controls the property. For an individual landlord, check the property ownership via county assessor records (US) or Land Registry (UK) and confirm the name matches the person you are communicating with. For a letting agent, verify the agency name on a professional regulatory body's website — in the UK, this is ARLA Propertymark or NAEA Propertymark; in the US, check the state real estate licensing board.\n\nSee the property in person before paying anything. Seeing the inside of the property confirms it is real and accessible, and meeting the landlord or agent in person allows you to assess whether they have the keys and knowledge of the property you would expect. If they are reluctant to meet at the property or make excuses about access, do not proceed.\n\nNever pay a deposit before having a signed tenancy or lease agreement in your hand. A verbal agreement is not enough. The agreement should include the landlord's full name and address, the agreed monthly rent, the deposit amount and the deposit protection scheme it will be held in (required by law for most assured shorthold tenancies in the UK), and the notice period for both parties. Keep a copy and keep the bank transfer receipt as your record of payment.","redFlags":["Landlord or agent cannot or will not meet at the property","Name on the lease does not match the owner's name in public records","Pressure to pay deposit immediately before seeing the property or signing a lease","Request to pay deposit in cash or via a payment method with no trace","Rent significantly below comparable properties in the same postcode or zip code","Lease agreement is vague, non-standard, or agent refuses to use a standard form"],"whatToDoNow":["Check property ownership at the county assessor or Land Registry before meeting","Arrange and complete an in-person viewing before any payment is made","Sign a proper tenancy or lease agreement before transferring the deposit","Transfer deposit via bank transfer — keep the payment receipt","Ensure UK deposits go into a recognised protection scheme (Deposit Protection Service, mydeposits, TDS)","Report rental fraud to the FTC, your local police, and the platform where the listing appeared"],"faq":[{"question":"What is a deposit protection scheme and is it legally required?","answer":"In England and Wales, landlords must protect tenancy deposits in one of three government-approved schemes (DPS, mydeposits, TDS) within 30 days of receipt. If a landlord does not, you can apply to court for compensation of one to three times the deposit amount. This requirement helps prevent landlords from simply keeping deposits without justification."},{"question":"Is it safe to send a deposit before signing the lease if I trust the agent?","answer":"No. Do not transfer any money — deposit, holding fee, or rent in advance — before you have a signed lease in your hands. An honest agent will not require payment before documentation is complete; a dishonest one is counting on your trust to take payment without legal obligation."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-yourself-from-charity-disaster-fraud","url":"https://scamencyclopedia.org/questions/how-to-protect-yourself-from-charity-disaster-fraud","question":"How do I avoid charity scams after a natural disaster or major news event?","shortAnswer":"Give only to established organisations you can verify in a charity register, donate directly on their official website, and wait a few days after a disaster for vetted relief organisations to be publicised.","explanation":"Disaster-related charity fraud is consistent and well-documented: within hours of a major earthquake, hurricane, flood, or refugee crisis, fraudulent donation sites and social media campaigns appear. They use powerful imagery from legitimate news coverage, emotional headlines, and newly registered domains that mimic established charities. The window before donors become sceptical is measured in hours.\n\nThe most important defence is donating only to organisations you can verify exist and are registered as charities before the disaster you are donating for. If an organisation you have never heard of appeared within days of the event, do not give to it. Instead, give to an established major relief organisation — Red Cross, UNICEF, Médecins Sans Frontières, Direct Relief — that you can verify in official charity registers.\n\nCrowdfunding campaigns for disaster victims carry elevated risk. While some are genuine, many are not, and the platforms' verification processes do not guarantee the funds reach the stated purpose. If you want to support individuals, consider established micro-giving platforms with stronger accountability or in-country organisations recommended by major relief coordinators such as OCHA or USAID.\n\nFor phone and door-to-door solicitation around disasters, ask for the charity's full legal name, registration number, and a written confirmation of how funds are used. A legitimate charity's representative will provide this; a scammer typically becomes defensive or vague. Do not give cash at the door — ask for their website and donate directly online after verifying their registration.","redFlags":["Charity name very similar to a well-known organisation with a small difference","Organisation domain was registered within days of the disaster","Crowdfunding campaign with no verifiable connection to legitimate relief operations","Social media page with no post history before the current disaster","Request for payment via gift card, wire transfer, or cryptocurrency","Pressure to donate immediately before the 'matching window' closes"],"whatToDoNow":["Give only to established charities you can verify in your country's charity register","Donate via the charity's official website — type the URL directly","Use Charity Navigator or GuideStar to confirm financial accountability","Wait 48 to 72 hours after a disaster for vetted organisation lists from USAID or government sources","Report fraudulent disaster charity solicitations to the FTC and your state attorney general"],"faq":[{"question":"How quickly do fake disaster charities appear?","answer":"Fraudulent domain registrations and social media campaigns targeting donors have been documented within two to four hours of a major disaster becoming international news. Waiting 48 to 72 hours allows established organisations and government agencies to publicise vetted relief channels."},{"question":"Is it safe to donate via a crowdfunding platform for disaster relief?","answer":"Some crowdfunding campaigns are legitimate and well-run. For maximum confidence, donate to campaigns run by verified registered charities rather than individual campaigns, and prefer platforms that hold funds in escrow until verified milestones are met."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-use-risk-checker-before-clicking-link","url":"https://scamencyclopedia.org/questions/how-to-use-risk-checker-before-clicking-link","question":"How do I quickly check whether a link or website is safe before clicking?","shortAnswer":"Use a combination of Google's Safe Browsing checker, your browser's built-in warnings, and the /risk-score/scam-risk-checker to assess unfamiliar URLs before you enter any personal or payment information.","explanation":"Not every suspicious link needs a full investigation — a quick two-step check catches most malicious URLs before any harm is done. The first step is hovering over the link without clicking to see the actual destination URL in your browser's status bar. If the visible text says 'Click here to verify your account at PayPal' but the status bar shows an unrelated domain, the link is fraudulent.\n\nFor links you are genuinely uncertain about, Google's Safe Browsing transparency report (transparencyreport.google.com/safe-browsing/search) allows you to check any URL against Google's database of known malicious sites. Similarly, VirusTotal (virustotal.com) scans a URL against dozens of security engines simultaneously and flags known threats. These checks take under a minute and are free.\n\nBrowser-level protection has improved significantly. Chrome, Firefox, Safari, and Edge all have built-in phishing and malware warnings that flag known bad sites as you navigate to them. Keep these warnings enabled — some users inadvertently disable them. Adding a browser extension such as uBlock Origin also blocks a large proportion of known advertising and phishing domains automatically.\n\nFor the ScamEncyclopedia risk checker at /risk-score/scam-risk-checker, you can paste a URL and receive an automated assessment that checks domain age, registration details, known blacklists, and other signals associated with fraudulent sites. Combine this with your own assessment of whether the site is asking for information proportional to the service it claims to offer — a free news site has no reason to ask for your credit card number.","redFlags":["Link text shows a trusted brand but the actual URL on hover shows a different domain","URL contains unusual subdomains mimicking a brand: paypal.verify-account.com","Shortened URL (bit.ly, tinyurl) from an unexpected message — the destination is hidden","Browser warning appears when you try to navigate to the site","URL uses HTTP rather than HTTPS for a site that handles personal information","VirusTotal or Safe Browsing check returns a malicious or phishing verdict"],"whatToDoNow":["Hover over every link before clicking to see the real destination URL","Check unknown URLs at transparencyreport.google.com or virustotal.com","Use the /risk-score/scam-risk-checker for a more detailed assessment","Keep browser built-in phishing and malware warnings enabled","Consider a browser extension like uBlock Origin for automatic blocking of known threats","Never enter personal or payment information on a site your browser flags as unsafe"],"faq":[{"question":"Does HTTPS mean a link is safe to click?","answer":"No. HTTPS only means the connection between your browser and the server is encrypted. Phishing sites, malware distribution sites, and fraudulent stores all use HTTPS. It is a necessary but not sufficient indicator of safety."},{"question":"Are URL shorteners automatically suspicious?","answer":"Not automatically — many legitimate links use shorteners for convenience. But a shortened URL in an unexpected message from an unknown contact is worth expanding before clicking. Use a URL expander service (urlexpander.io, expandurl.net) to see the destination before visiting."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-against-grandparent-scam","url":"https://scamencyclopedia.org/questions/how-to-protect-against-grandparent-scam","question":"How do I protect my family against the grandparent scam?","shortAnswer":"Establish a family code word for genuine emergencies, and remind older relatives that no real grandchild or lawyer will ask them to keep an emergency secret from other family members.","explanation":"The grandparent scam involves a caller posing as a grandchild in distress — typically claiming to have been in a car accident, arrested, or hospitalised abroad — and urgently requesting money to resolve the situation. A second caller, posing as a lawyer or police officer, reinforces the request and instructs the grandparent not to tell other family members to avoid embarrassment. The emotional pressure is severe, and older adults often comply before rational scepticism can override the fear for a loved one.\n\nAI voice cloning has made this scam more convincing: a short sample of the grandchild's voice from social media or a voicemail can now be used to generate audio that sounds authentically like them. The caller using this cloned voice adds a layer of apparent credibility that makes the 'hang up and verify' rule harder to follow in the moment.\n\nThe most effective prevention is establishing a family code word. The word should be something only family members know — not a publicly known fact, a pet's name that appears on social media, or a common word. In any emergency, the caller provides the code word before any money discussion. If they cannot or will not, the call is not genuine. Make this a pleasant family exercise rather than a solemn warning to avoid generating anxiety.\n\nTell older relatives these specific facts: (1) real lawyers and police do not instruct clients to keep a legal matter secret from family; (2) real courts accept a variety of payment methods and do not require same-day gift-card bail; (3) no legitimate emergency requires immediate gift-card payment to anyone. If the request involves gift cards, it is a scam without exception.","redFlags":["Caller identifies as a grandchild in distress but sounds slightly different from usual","Second caller posing as a lawyer or police officer reinforcing the urgency","Instruction to keep the matter secret from other family members","Request for payment via gift card, wire transfer, or cash courier","Excessive urgency — 'must be resolved today before you talk to anyone'","Story involves an overseas accident, arrest, or hospitalisation"],"whatToDoNow":["Establish a secret family code word and share it with older relatives","Tell relatives that real emergencies allow a five-minute pause to call back on a known number","Remind them: no court, lawyer, or police officer accepts gift cards","If the scam is already in progress, find an excuse to pause and call the real grandchild directly","Report grandparent scam calls to the FTC at ReportFraud.ftc.gov","Talk through the scam script with older relatives so they recognise it next time"],"faq":[{"question":"How does AI voice cloning make grandparent scams harder to spot?","answer":"With a short audio sample from social media, scammers can generate audio that mimics a grandchild's voice convincingly. This removes the old tell of 'sounds different from usual.' A code word that the AI cannot know is now the most reliable defence."},{"question":"What if my relative already sent money via gift cards?","answer":"Call the gift card issuer immediately to report fraud and attempt to freeze unredeemed balances. File a report with the FTC at ReportFraud.ftc.gov and a local police report. Avoid shaming your relative — the emotional manipulation used in these scams is professional-grade."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-against-romance-investment-fraud-pig-butchering","url":"https://scamencyclopedia.org/questions/how-to-protect-against-romance-investment-fraud-pig-butchering","question":"How do I protect myself from pig-butchering investment fraud?","shortAnswer":"Be deeply suspicious of any new online contact who eventually steers conversation toward investments, especially crypto platforms — the relationship is the setup, and the investment pitch is the scam.","explanation":"Pig butchering (sha zhu pan) is a sophisticated long-con combining romance with investment fraud. The scammer invests weeks or months building a genuine-feeling relationship through dating apps, WhatsApp, social media, or random 'wrong number' messages. Only once trust is established does the investment conversation begin — framed as sharing a personal opportunity, not a sales pitch. The target is introduced to a fraudulent crypto or forex trading platform that shows impressive fabricated returns.\n\nThe platform is designed to look completely legitimate: it displays real-time price charts (fake or copied from real markets), shows an account balance growing steadily, and allows small early withdrawals to build confidence. As the target deposits more, larger profits appear on screen. The entire balance — including both deposits and 'profits' — is fictitious; no real investment has occurred.\n\nWithdrawal attempts trigger a series of escalating obstacles: account verification requirements, taxes that must be paid upfront, 'anti-money laundering' holds, or upgrade fees. Each payment is framed as the last obstacle before releasing the full balance. Victims who recognise the scam at this point and stop paying are simply abandoned; those who continue lose escalating amounts.\n\nThe warning signs are present from the beginning of the relationship: the contact appears across the relationship funnel very quickly, has an attractive profile photo, has a high-status international career, claims to have financial expertise they are willing to share, and the relationship escalates unusually quickly. Sharing these characteristics with the person you are communicating about — asking a trusted friend to evaluate the profile and early conversation — often produces an immediate outside perspective.","redFlags":["New online contact who pivots to investment or financial discussions after building rapport","Platform introduced by the contact rather than discovered independently","Account shows consistently positive returns with no losing periods","Small initial withdrawal succeeds but larger withdrawals trigger fee or tax requirements","Contact has a glamorous career and claims inside knowledge of financial markets","Relationship progresses unusually quickly with strong emotional investment on their side"],"whatToDoNow":["Never invest via any platform introduced by an online-only contact","Verify any investment platform with the SEC, CFTC, or your country's financial regulator","Tell a trusted friend or family member about the relationship and platform","Do not pay fees, taxes, or 'verification' charges to release a balance on any platform","Report pig-butchering scams to the FBI IC3 at ic3.gov and the FTC","Visit /recovery if you have already lost money for the full checklist of next steps"],"faq":[{"question":"Why do these scams take so long — why not just ask for money immediately?","answer":"The extended relationship-building phase is deliberate. It creates genuine emotional connection that overrides scepticism, generates a sense of obligation to reciprocate the scammer's 'generosity,' and ensures the victim has already told family and friends about their new relationship — making it psychologically harder to admit they were wrong."},{"question":"Can the platform my contact uses really be verified as fake?","answer":"Yes. Fraudulent platforms typically have recently registered domains, no presence in any financial regulator's register, and no verifiable physical address or ownership. The platform design may even be identical to a different fraudulent platform with a different name — many share the same codebase."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-recognise-and-avoid-advance-fee-fraud","url":"https://scamencyclopedia.org/questions/how-to-recognise-and-avoid-advance-fee-fraud","question":"How do I recognise and avoid advance-fee fraud?","shortAnswer":"If receiving money, an inheritance, a prize, or a business deal requires you to pay fees first, it is advance-fee fraud — there is no money, and every payment leads to a request for another.","explanation":"Advance-fee fraud — also known by its Nigerian variant '419 fraud' — is one of the oldest and most consistently successful scam formats because the logic of paying a small fee to receive a large sum is superficially plausible. The formats are varied: a foreign official needs help moving funds and offers you a share; a lawyer informs you of an unclaimed inheritance from a distant relative; an investment requires a processing fee before your returns can be released; or a prize requires a customs payment before delivery.\n\nIn every case, the structure is the same: the promised large payment always remains just out of reach, separated from you by one more fee. Taxes, legal fees, customs charges, bank processing costs, and anti-money-laundering compliance fees arrive in sequence. Each is presented as the final obstacle. Victims who engage deeply may pay many fees over months, sometimes corresponding with multiple fictitious personalities who reinforce the narrative.\n\nThe emotional hook is both greed and, later, the sunk-cost fallacy — having paid substantial fees, stopping feels like losing everything already invested. Scammers actively exploit this by referencing previous payments and framing a continued commitment as 'almost there.' An objective outside view — telling a trusted person the full story — almost invariably reveals the scam immediately, which is why scammers often encourage secrecy.\n\nThere is also a secondary fraud within this category: recovery scams. Victims of advance-fee fraud are sometimes re-contacted by someone claiming to be a lawyer or government official who can recover the lost funds — for a fee. This is another scam layered on top of the first.","redFlags":["Unexpected windfall requiring an upfront fee before you can receive the money","Inheritance notification from a lawyer you have never heard of","Government official or business contact needing help moving funds in exchange for a commission","Each payment is followed by a request for one more payment before release","Urgency and secrecy — told not to tell family or friends","Recovery offer from someone claiming to help previous fraud victims — for a fee"],"whatToDoNow":["Do not pay any fee in advance of receiving money — legitimate windfalls do not work this way","Tell a trusted friend or family member the full story and ask for their honest assessment","Report advance-fee fraud to the FTC at ReportFraud.ftc.gov and your local police","If you already paid fees, do not pay further regardless of how plausible the next obstacle seems","Be aware of recovery scams offering to retrieve already-lost money — for a fee"],"faq":[{"question":"Why does advance-fee fraud still work despite being so well-known?","answer":"It works because the formats evolve constantly, the promised amounts are large enough to justify apparent risk, and the scam is structured to exploit the sunk-cost fallacy once any payment has been made. Awareness of '419 letters' does not protect against newer formats that do not resemble them."},{"question":"What is a recovery scam?","answer":"A recovery scam targets people who have already lost money to fraud. The scammer poses as a law firm, asset recovery specialist, or government agency that can retrieve your lost funds for an upfront fee. No fee will ever retrieve your money — this is another advance-fee scam."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-yourself-from-employment-advance-fee-scam","url":"https://scamencyclopedia.org/questions/how-to-protect-yourself-from-employment-advance-fee-scam","question":"How do I avoid paying fake fees to get a remote job or freelance contract?","shortAnswer":"Legitimate employers never charge fees for hiring, equipment, or training — any 'job' requiring upfront payment is a scam, and any cheque sent before you start work will bounce.","explanation":"Employment advance-fee scams exploit the large volume of people searching for remote work. The scam follows a consistent pattern: an attractive job offer arrives via email, LinkedIn, or a job board; the hiring process is minimal (often just a chat-based interview); an offer is extended; and before work begins, the 'employer' requests payment — for a background check, a software licence, home-office equipment, or a training course.\n\nA close variant involves the fake-cheque scam: the employer sends an overpayment by cheque and asks you to deposit it and send the difference to a third-party supplier. The cheque appears to clear initially because banks make funds available before full clearing, but the cheque bounces days later and you are left owing the bank the full amount plus any sum you forwarded.\n\nRemote 'jobs' that involve receiving and reshipping packages are another variant. The packages contain goods purchased with stolen credit cards, and you become an unwitting money mule or accessory to receiving stolen property. Legitimate freight and logistics companies do not hire home-based package handlers with no interview.\n\nFor freelancers: clients who require an upfront 'platform fee' or 'verification fee' before you can access their project posting are scammers. Legitimate freelance clients pay for work, not for your access to work. Similarly, any client who sends an overpayment by cheque and asks you to forward the excess is running a fake-cheque scheme.","redFlags":["Job offer requires upfront payment for background check, equipment, or training","Employer sends a cheque or bank transfer that exceeds the agreed amount and asks for the difference back","Work involves receiving packages at home and forwarding them to other addresses","Minimal interview process — offer comes after one text-based exchange","Freelance platform charges an initial access fee before you can see the project","Employment tax or clearance fee required before your first paycheck can be released"],"whatToDoNow":["Never pay any fee to get a job or access freelance work","If you receive an unexpected overpayment, do not spend or forward any of it","Verify any employer through the company's official website and a direct call to HR","Report fake job offers to the FTC and the platform where the offer appeared","If you forwarded money from a fake cheque, contact your bank immediately","Visit /recovery if you have already lost money for the full checklist"],"faq":[{"question":"Why does a bank-cleared cheque still bounce later?","answer":"Banks make funds from deposited cheques available before full clearing, which can take several business days. Scammers exploit this delay: you spend or forward money that appears available, then the cheque is returned as fraudulent and the bank debits your account for the full amount."},{"question":"Is reshipping illegal even if I did not know the goods were stolen?","answer":"Knowingly receiving or forwarding stolen goods is a crime, and prosecutors do not always require proof of specific knowledge if the facts strongly suggest it. Anyone hired as a 'package handler' or 'shipping coordinator' by an online-only employer they cannot verify should treat this as a serious legal risk."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-against-business-email-compromise","url":"https://scamencyclopedia.org/questions/how-to-protect-against-business-email-compromise","question":"What is business email compromise and how do I prevent it?","shortAnswer":"Business email compromise uses spoofed or hacked email accounts to impersonate executives and trick employees into wiring money — a verbal confirmation call on a known number defeats it every time.","explanation":"Business email compromise (BEC) is a targeted fraud where an attacker either hacks a corporate email account or registers a look-alike domain to send emails appearing to come from a senior executive, trusted vendor, or attorney. The email instructs an employee in finance or accounts payable to make an urgent wire transfer, change vendor banking details, or release payroll to a new account. The FBI considers BEC one of the costliest cybercrime categories, with multi-billion dollar annual losses across organisations of all sizes.\n\nThe attack relies on several conditions: employees who are conditioned to act quickly on senior requests, insufficient controls around payment authorisation, and email systems that do not clearly flag external look-alike domains. Attackers research their targets before striking — studying the corporate hierarchy from LinkedIn, learning financial reporting periods (when large transfers are common and less scrutinised), and identifying employees with payment authority.\n\nThe most effective single control is a verbal confirmation rule: any wire transfer, any change in vendor banking details, and any payroll modification requires a call to the requester on a number from your own contact list — not a number provided in the email. This one step defeats the vast majority of BEC attacks because the attacker cannot answer the phone as the real executive. Combine this with dual-approval thresholds so no single employee can authorise large transfers without a second signatory.\n\nTechnical controls complement the human process: enable multi-factor authentication on all corporate email accounts, configure email systems to tag messages from external domains that mimic internal addresses, and deploy DMARC email authentication to prevent attackers from spoofing your exact domain in messages to external parties.","redFlags":["Email from CEO or CFO requesting an urgent wire transfer, especially while they are 'travelling'","Vendor email updating banking details, with a new account that does not match your records","Sender address is one character different from a known internal or vendor address","Payment request explicitly asks you not to discuss with others or go through normal channels","Attorney email requesting confidential transfer related to an acquisition or legal matter","Unusual urgency around timing — 'must complete today before close of business'"],"whatToDoNow":["Implement a verbal confirmation rule for all wire transfers and banking-detail changes","Set dual-approval thresholds for payments above a defined limit","Enable multi-factor authentication on all corporate email accounts","Configure DMARC, DKIM, and SPF on your domain to prevent external spoofing","Train finance staff on BEC formats at least annually","Report BEC to the FBI IC3 at ic3.gov immediately if funds were transferred"],"faq":[{"question":"What is the best way to report BEC to law enforcement?","answer":"File a complaint with the FBI's Internet Crime Complaint Center (IC3) at ic3.gov. For same-day wire transfers, contact the FBI's Recovery Asset Team via the IC3 financial fraud kill chain — speed matters for fund recovery. Also notify your bank's fraud team the same day."},{"question":"Can DMARC prevent BEC?","answer":"DMARC prevents attackers from spoofing your exact domain in emails to external parties, reducing a significant category of BEC. However, it cannot prevent attackers from using look-alike domains or hacked accounts. DMARC combined with the verbal confirmation rule provides the strongest layered defence."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-against-smishing-sms-phishing","url":"https://scamencyclopedia.org/questions/how-to-protect-against-smishing-sms-phishing","question":"How do I protect myself from smishing (SMS phishing) attacks?","shortAnswer":"Never click a link in an unexpected text about a bank account, delivery, or government benefit — go directly to the organisation's app or website instead to check any claimed issue.","explanation":"Smishing (SMS phishing) sends fraudulent text messages that impersonate banks, delivery carriers, tax authorities, and government benefit programs. SMS is more trusted than email by many recipients because it feels more personal and immediate, and because phone numbers carry an appearance of accountability that email addresses do not. Scammers exploit this trust differential to achieve higher click rates.\n\nThe most common smishing formats are: bank fraud alerts asking you to call a number or click a link to verify a suspicious transaction; parcel delivery notifications requiring a small fee or address confirmation; HMRC or IRS notifications about a tax refund or overdue payment; and benefit or government account notifications about an update required to continue receiving payments. In each case, the link goes to a convincing fake login page that captures your credentials or card details.\n\nThe safe response to any unexpected text about a financial account or service is to go to that service's official app or website directly — never via the link in the text — and check whether there is any genuine notification waiting for you. Real banks send authenticated in-app alerts; real delivery carriers have a tracking page on their official website; real tax authorities communicate primarily by post for significant matters.\n\nIf you receive a smishing text, report it without clicking the link: forward it to 7726 (SPAM) in the US and UK. This feeds data to carrier systems that flag and block high-volume smishing campaigns. The FTC and NCSC in the UK also accept smishing reports.","redFlags":["Unexpected text from your bank saying a transaction was blocked — with a link","Delivery notification with a customs or re-delivery fee link from a number you do not recognise","HMRC, IRS, or government benefit notification requiring immediate action via a link","Text from a short code number with an offer that seems too good to be true","Link in the text does not match the official domain of the claimed organisation","Text creates urgency: 'act within 24 hours or your account will be closed'"],"whatToDoNow":["Never click links in unexpected texts about bank accounts, deliveries, or government benefits","Open your bank app or the carrier's official website directly to check any claimed issue","Forward smishing texts to 7726 (SPAM) without clicking the link","Block the sending number on your phone after forwarding","Report smishing texts to the FTC at ReportFraud.ftc.gov","If you already clicked and entered details, contact your bank immediately and change your passwords"],"faq":[{"question":"How do I know if a text is from my real bank?","answer":"Your bank sends texts from a short code or number you can verify by calling your bank directly and asking what sender ID they use. More importantly, no genuine bank text requires you to click a link to 'verify' account details — banks handle anomalies through their app or a call to the number on your card."},{"question":"Can I get a virus just from receiving a smishing text?","answer":"Receiving a text is safe. The risk occurs if you click the link, which may lead to a phishing page or trigger a malicious download. On most modern phones, simply receiving a text poses no risk. Block and delete the message."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-report-a-scam-effectively","url":"https://scamencyclopedia.org/questions/how-to-report-a-scam-effectively","question":"How do I report a scam effectively to maximise the chance of action?","shortAnswer":"File with the FTC at ReportFraud.ftc.gov as your primary report, then report to the specific relevant agency (FBI IC3 for cyber fraud, CFPB for financial institutions, state AG for consumer fraud), and report on the platform where the scam occurred.","explanation":"Reporting a scam matters beyond your individual case — reports create the data that helps regulators detect patterns, build cases, and protect future victims. Most people do not report, which means the agencies that investigate fraud are working with an incomplete picture. Even if you cannot recover your own money, your report may contribute to a larger case that leads to enforcement action.\n\nThe FTC at ReportFraud.ftc.gov is the primary US consumer fraud reporting portal. Reports are shared across federal and state law enforcement and feed the FTC's case-building database. For crimes involving the internet, email, or electronic funds transfer, also file with the FBI's Internet Crime Complaint Center (IC3) at ic3.gov. For financial institution complaints — including bank, credit card, or debt collector issues — the CFPB at consumerfinance.gov/complaint can compel responses from regulated entities.\n\nAlso report to the platform where the scam occurred. Marketplaces (Facebook Marketplace, eBay, Craigslist), app stores, social networks, and job boards have fraud reporting mechanisms that can remove fraudulent accounts and listings. This is one of the fastest ways to prevent the same scammer from victimising others using the same account.\n\nFor a report to be actionable, include: dates and times of all contacts, any phone numbers, email addresses, or usernames involved, screenshots or copies of messages and receipts, a description of what you were told and what you paid, and any bank reference numbers or transfer confirmation numbers. Keep your own copy of everything you report.","redFlags":["You have already lost money or provided personal information to a scammer","You received a fraudulent solicitation even if you did not respond","You know others who may have been targeted by the same scammer","A website, job listing, or profile appears fraudulent even if you were not directly victimised"],"whatToDoNow":["File at ReportFraud.ftc.gov with as much detail as possible","File at ic3.gov if the fraud involved the internet, email, or electronic transfers","Report to your state attorney general at naag.org (find your state's office)","Report the account, listing, or profile on the platform where the scam occurred","For investment fraud, report to the SEC (sec.gov/tcr) or CFTC (cftc.gov/complaint)","Keep copies of all evidence you submitted in case law enforcement contacts you for follow-up"],"faq":[{"question":"Will reporting a scam get my money back?","answer":"Not directly. The FTC and FBI investigate patterns and build cases; they cannot typically recover individual losses. However, the FTC has distributed refunds to consumers in some large enforcement actions. For direct recovery, contact your bank or card issuer on the same day as the fraud."},{"question":"I feel embarrassed about being scammed. Do I still need to give all the details?","answer":"Yes, and you should know that being scammed is not a reflection of intelligence — these operations are professionally run. The more detail you provide, the more useful the report. Your report is filed confidentially, and the FTC does not publish individual reports."},{"question":"Should I also report to local police?","answer":"Yes, especially for larger losses or identity theft. A police report creates an official record that may be required by your bank when filing a fraud claim, and local departments can coordinate with federal agencies. For losses involving wire fraud or organised crime, the FBI's local field office is also an option."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-yourself-from-impersonation-scams","url":"https://scamencyclopedia.org/questions/how-to-protect-yourself-from-impersonation-scams","question":"How do I protect myself from impersonation scams in general?","shortAnswer":"Hang up on any unexpected call creating urgency, call back on a number you find independently, and remember that no legitimate organisation will ever demand payment via gift card.","explanation":"Impersonation scams share a universal structure regardless of who is being impersonated: a caller, texter, or emailer claims to be a trusted authority (bank, government agency, utility, tech company, or known contact), creates urgency or fear, and demands immediate action — usually financial. The specific identity being impersonated changes constantly, but the mechanics do not.\n\nBuilding a general scepticism reflex is more durable than memorising specific scam scripts. The two most reliable red flags that cut across all impersonation variants are: urgency ('this must be resolved today') and unusual payment method ('pay via gift cards, wire transfer, or cryptocurrency'). No legitimate institution demands same-day gift-card payment. No legitimate government agency arrests you without prior written notice. No legitimate bank requires you to withdraw cash and hand it to a courier.\n\nThe defensive reflex is simple but requires practice: when any unexpected contact creates urgency around money or personal information, create a pause. Tell the caller you need to call back, end the contact, find the organisation's official number through an independent source (their website, the back of your card, a government directory), and call that. If the original contact was genuine, the organisation can verify your concern when you call back. If it was a scam, the original caller will have no trace in the organisation's system.\n\nShare this reflex with family members across all generations — it works for elderly relatives concerned about arrest warrants, teenagers worried about gaming account violations, and adults concerned about bank fraud. The pause and call back is universal.","redFlags":["Unexpected contact from any authority creating urgency about your money, account, or legal status","Payment demanded via gift card, wire transfer, cryptocurrency, or cash courier","Instruction to keep the contact confidential from family, friends, or a lawyer","Pressure to act immediately with no time to verify","Caller becomes angry or threatening when you say you want to verify","Contact method is a channel you did not initiate: cold call, unexpected email, or unsolicited text"],"whatToDoNow":["Practice the pause: when urgency is created, slow down rather than speed up","Find the organisation's official number independently and call back","Never pay via gift card regardless of who the caller claims to be","Share the pause-and-call-back rule with family members of all ages","Report impersonation attempts to the FTC and the relevant agency being impersonated","Visit /guides for a full library of practical prevention guides by scam type"],"faq":[{"question":"What if the caller becomes very threatening and I feel scared?","answer":"Hang up. Real law enforcement agencies do not arrest people over the phone or issue immediate threats designed to prevent verification. The anger and intimidation are deliberate psychological pressure designed to bypass rational decision-making. You can always call the real agency afterward if you remain concerned."},{"question":"Are impersonation scams illegal?","answer":"Yes. Impersonating a government agency, bank, or other institution to commit fraud is a federal crime in the US and criminal offence in most countries. However, many scammers operate internationally, making prosecution difficult. Reporting to the FTC and FBI IC3 contributes to cross-border enforcement efforts."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-yourself-from-social-engineering","url":"https://scamencyclopedia.org/questions/how-to-protect-yourself-from-social-engineering","question":"What is social engineering and how do I protect myself from it?","shortAnswer":"Social engineering manipulates human psychology rather than computer systems — scepticism of urgency, authority claims, and information requests you did not initiate are the main defences.","explanation":"Social engineering is the use of psychological manipulation to get people to take actions or reveal information they would not otherwise. It underlies almost all scam categories: phishing exploits trust in authority, romance scams exploit emotional connection, tech-support scams exploit fear of consequences. Understanding the psychological levers scammers use helps you recognise manipulation regardless of the specific format.\n\nThe most commonly exploited psychological mechanisms are: authority (compliance increases when a request comes from someone perceived as having power — a government official, senior executive, or technical expert); urgency (time pressure reduces thoughtful evaluation and increases impulse action); scarcity and fear of missing out; reciprocity (the instinct to repay a favour — scammers give small things first to create obligation); and social proof (others have done this, so it must be legitimate).\n\nRecognising these mechanisms in action creates a reflexive pause. When you notice that a situation is invoking strong urgency or fear, this is precisely the moment to slow down rather than comply. Verify the claimed authority through independent channels. Ask yourself: what is the worst realistic outcome if I wait 24 hours before acting? If the answer is 'nothing catastrophic,' the urgency is manufactured.\n\nFor organisational settings, training staff to recognise social engineering tactics reduces the effectiveness of pretexting attacks (callers impersonating IT support, auditors, or vendors to extract information), tailgating (following authorised personnel into secure areas), and voice phishing (vishing). The most important cultural norm is psychological safety around saying 'let me verify that before I proceed' without feeling rude or obstructive.","redFlags":["Situation invoking strong urgency, fear, or excitement that demands immediate action","Claim of authority (government, military, senior executive) used to justify an unusual request","Offer of something valuable first, followed by a request that seems small by comparison","Request for information being framed as 'just a verification step'","Pressure framed as protecting you — 'we are doing this for your security'","Request that bypasses normal processes or asks you to keep it confidential"],"whatToDoNow":["Learn to recognise the six core manipulation levers: authority, urgency, scarcity, reciprocity, social proof, and liking","Practice the pause: strong emotion in a financial context is a signal to slow down","Verify authority claims through independently-sourced contact details","Train family and colleagues to say 'let me verify that' without embarrassment","Share this framework with people in your life who may be less familiar with it","Visit /guides for practical guides on specific scam types that use these techniques"],"faq":[{"question":"Can smart, educated people fall for social engineering?","answer":"Yes. Social engineering targets psychological mechanisms that operate largely independently of intelligence. The most effective scams create conditions — fear, excitement, time pressure — that impair the rational evaluation that intelligence normally provides. Awareness of the mechanisms matters more than general intelligence."},{"question":"Is social engineering used in corporate cybersecurity attacks?","answer":"Extensively. Most major corporate data breaches involve at least one social-engineering component — a phishing email that captures credentials, a phone call that extracts a password reset, or a pretexting attack that provides internal access. Technical security controls are only as strong as the human behaviour they depend on."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-create-family-anti-scam-plan","url":"https://scamencyclopedia.org/questions/how-to-create-family-anti-scam-plan","question":"How do I create a family anti-scam plan that actually works?","shortAnswer":"Agree on a code word, a money-pause rule, and a designated person to call before any unusual financial request — these three elements cover most scam scenarios across all ages.","explanation":"An anti-scam plan for a family works best when it is framed positively — as a practical agreement, not a set of restrictions — and when every family member has a defined role. The most effective plans are simple enough to be remembered in a stressful moment: three rules that apply across almost all scam scenarios.\n\nRule one is the code word. A shared secret that any family member can use to prove their identity in a genuine emergency. It takes five minutes to agree on and completely defeats grandparent scam voice cloning and most fake-kidnap scenarios. Write it down and store it somewhere only family members have access to.\n\nRule two is the money pause. Any request for money from an unexpected source — phone call, text, email, or in person — gets 24 hours before any action is taken. In genuine emergencies involving family, 24 hours can usually be negotiated. The one exception is if the request comes with a code word. During the pause, the designated verification person (rule three) can be contacted.\n\nRule three is a designated verification person. Each family member — especially older or younger ones — has an agreed person they can call to get a reality check on any suspicious situation. This person has agreed to be reachable and willing to spend five minutes evaluating a scenario. Knowing there is someone to call reduces the isolation that scammers rely on.\n\nReview the plan annually as a family conversation, updating it when new scam formats emerge that affect your household. Including a discussion of real examples from the news makes it concrete and memorable.","redFlags":["Family member receives a contact asking for money and feels they cannot tell anyone","Elderly relative making unusual ATM withdrawals or buying gift cards","Younger family member receiving job or giveaway offers that seem too good to be true","Any family member expressing shame or secrecy around a financial situation"],"whatToDoNow":["Agree on a family code word today and write it in a shared private location","Establish the 24-hour money-pause rule across all family members","Designate a verification person for each family member","Visit /family-safety for a complete family protection checklist","Have an annual scam-awareness conversation, using news examples to keep it relevant","Create a simple contacts card for older relatives with official numbers for bank, utility, and government"],"faq":[{"question":"How do I introduce scam-awareness to an older relative without making them feel targeted or insulted?","answer":"Frame it as something you are doing for everyone in the family, including yourself: 'I have been reading about scams that target people across all ages, and I want us all to have a plan.' Involve them in choosing the code word — giving them ownership of the plan reduces the feeling of being talked at."},{"question":"What do I do if a family member has been scammed and is embarrassed to talk about it?","answer":"Reassure them first — these are professional operations that target specific psychological vulnerabilities, not a reflection on their intelligence. Focus on what can be done now (reporting, bank contact, account security) rather than how it happened. Shame prevents reporting and recovery."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-avoid-fake-online-marketplace-scams","url":"https://scamencyclopedia.org/questions/how-to-avoid-fake-online-marketplace-scams","question":"How do I avoid being scammed when buying or selling on online marketplaces?","shortAnswer":"Meet locally in a public place for cash transactions, use the platform's payment system rather than Venmo or Zelle, and never accept a cheque for more than the agreed price.","explanation":"Peer-to-peer marketplaces like Facebook Marketplace, Craigslist, and OfferUp are generally safe for straightforward local transactions, but both buyers and sellers face distinct scam risks. Knowing both sides helps you protect yourself regardless of which role you are in.\n\nAs a buyer: the main risks are non-delivery (paying before collecting), counterfeit goods, and bait-and-switch (item looks different in person). For local purchases, inspect the item before paying. Use cash or a payment method with buyer protection for anything of significant value. Avoid sellers who insist on payment before you can see the item, who are unwilling to meet in person, or who want to ship when local delivery makes no sense.\n\nAs a seller: the primary risks are fake payment confirmation screenshots, cheque overpayment scams, and counterfeit cash. Never release an item until payment has cleared in your actual account — not just a notification on your phone, which can be faked. Never accept a cheque for more than the agreed price with a request to return the difference. For high-value items, meet at your bank to receive a cashier's cheque and verify it before handing over the goods.\n\nFor both: meet in a well-lit public place with other people around, ideally near a police station or in a designated community safe-exchange location (many police departments offer their parking lots for this purpose). Tell someone where you are meeting. Take a photo of the other person's ID for high-value transactions.","redFlags":["Buyer offers to pay more than the listed price and asks you to return the difference","Seller insists on payment before you can see or collect the item","Payment confirmation screenshot instead of actual payment in your account","Buyer or seller refuses to meet in person despite being listed as local","Buyer asks for your email to send a payment outside the platform's system","Item price is dramatically below comparable listings and seller is eager to close quickly"],"whatToDoNow":["For local sales, inspect before paying and meet in a public place","Use the platform's built-in payment system rather than external payment apps","Never accept overpayment cheques — return them and request the correct amount","Verify payment is in your account before handing over any goods","Report fraudulent listings and profiles to the marketplace platform","Report financial losses to the FTC at ReportFraud.ftc.gov"],"faq":[{"question":"Is Facebook Marketplace safe to use?","answer":"Many millions of legitimate transactions happen on Facebook Marketplace daily. The risk factors are specific and avoidable: see items in person before paying, use Marketplace's purchase protection for shipped items, and apply the same common sense you would in any cash transaction with a stranger."},{"question":"What is a safe exchange location?","answer":"Many police departments designate their parking lots or lobbies as safe exchange zones for online marketplace transactions. The presence of security cameras and potential witnesses deters both fraud and physical crime. Search 'safe exchange zone near me' to find local options."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-yourself-from-tax-scams","url":"https://scamencyclopedia.org/questions/how-to-protect-yourself-from-tax-scams","question":"How do I protect myself from tax scams and IRS impersonators?","shortAnswer":"The IRS contacts taxpayers by postal mail first, never demands immediate gift-card or wire-transfer payment, and never threatens immediate arrest — any call making these claims is a scam.","explanation":"Tax impersonation scams peak between January and April during the US filing season, though they run year-round. Scammers impersonate IRS agents to collect fraudulent payments, and a separate category of scam involves filing a fraudulent tax return in your name to steal your refund before you file. Protecting against both requires slightly different actions.\n\nFor IRS impersonation calls: the IRS's normal process begins with a mailed notice, not a phone call. If there is a genuine balance due, you receive multiple letters before any escalation. The IRS does not demand same-day payment via gift card, wire transfer, or cryptocurrency. It does not threaten immediate arrest for non-payment. It does not ask for credit card numbers over the phone. Any call making these claims is fraudulent.\n\nFor tax refund fraud: if you try to file your return and are told one has already been filed under your Social Security number, a fraudster used your SSN to claim a fraudulent refund. Complete IRS Form 14039 (Identity Theft Affidavit) and file a police report. The IRS will process your legitimate return after investigation, though it may take longer than usual. Going forward, apply for an IRS Identity Protection PIN (IP PIN) at irs.gov — this is a six-digit number known only to you that is required on any return filed in your name.\n\nFile your tax return as early as possible each year. Filing early means a fraudster cannot file a fake return under your SSN before you do, since the IRS will only accept one return per SSN per year.","redFlags":["First contact about a tax issue is a phone call rather than a mailed letter","Caller demands immediate payment via gift card, wire transfer, or cryptocurrency","Caller threatens immediate arrest or deportation for non-payment","Caller asks for personal information to 'verify' your identity before discussing your account","Email claiming to be from the IRS asking you to click a link — the IRS does not email taxpayers unsolicited","Attempt to file your tax return is rejected because one already exists for your SSN"],"whatToDoNow":["Hang up on any IRS impersonation call and verify through irs.gov or by calling 1-800-829-1040","Apply for an IRS Identity Protection PIN at irs.gov to protect against return fraud","File your tax return as early as possible each year","If a return was already filed in your name, file IRS Form 14039 and a police report","Report IRS impersonation calls to TIGTA at tigta.gov and the FTC"],"faq":[{"question":"What is an IRS Identity Protection PIN?","answer":"An IP PIN is a six-digit number the IRS provides to taxpayers who have been identity theft victims, or who proactively request one. Any return filed with your SSN must include this PIN to be accepted. Without it, a fraudster cannot file a return under your SSN. Apply at irs.gov/ippin."},{"question":"Can the IRS email me?","answer":"The IRS does not initiate contact with taxpayers by email, text, or social media to discuss tax accounts or request personal information. Any email appearing to come from the IRS asking you to click a link or provide information is phishing. Forward it to phishing@irs.gov."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-against-account-takeover-fraud","url":"https://scamencyclopedia.org/questions/how-to-protect-against-account-takeover-fraud","question":"What is account takeover fraud and how do I prevent it?","shortAnswer":"Account takeover occurs when a fraudster gains access to an existing account using stolen credentials — prevent it with unique passwords, two-factor authentication, and immediate action on any breach notification.","explanation":"Account takeover (ATO) is distinct from identity theft, which focuses on opening new accounts. ATO targets accounts you already have — banking, email, e-commerce, streaming — using credentials obtained through data breaches, phishing, credential stuffing, or SIM swap. The attacker's goal is to drain financial accounts, make purchases on stored payment methods, or use the account as a launch pad for further fraud against your contacts.\n\nCredential stuffing is among the most common ATO methods: automated scripts try username-and-password combinations from previous data breaches across hundreds of websites simultaneously. If you have ever reused a password across multiple sites, a single breach can unlock all accounts that share that password. This is why password uniqueness is the most important individual security habit.\n\nReal-time monitoring helps catch ATO quickly. Enable transaction alerts on all bank and credit card accounts so you are notified of every charge by text or email. Review active sessions in your email and social accounts periodically — Google, Apple, Facebook, and others show you what devices are currently signed in. A device you do not recognise is a sign of ATO. Revoking sessions and changing the password immediately limits the damage.\n\nSome banks and services offer 'account monitoring' or 'login notification' features that alert you to every new login. Enable these wherever available. If you receive a notification about a login you did not make, treat it as a security incident: change the password, enable or change your 2FA, review recent transactions, and check linked accounts and apps for any changes the attacker may have made.","redFlags":["Login notification for a device, location, or browser you do not recognise","Password reset email or SMS you did not request","Inability to log in with a password you have not changed","Unexpected transactions or purchases on a linked payment method","Contacts receiving messages from your account that you did not send","Security questions or recovery email changed to something you do not recognise"],"whatToDoNow":["Enable login alerts on all banking, email, and social accounts","Review active sessions in your most important accounts and revoke unrecognised devices","Replace any reused passwords with unique ones using a password manager","Enable two-factor authentication using an authenticator app on important accounts","Check linked apps and connected services for anything added without your knowledge","If ATO has occurred, contact the platform's account security team and your bank immediately"],"faq":[{"question":"How do I know if my account has already been taken over?","answer":"Signs include: you cannot log in despite a correct password; you received a 2FA code you did not request; login notifications appear for unrecognised devices; friends receive suspicious messages from your account; or security settings like recovery email or phone number have changed without your knowledge."},{"question":"What is credential stuffing?","answer":"Credential stuffing is an automated attack that tries username-and-password combinations from known data breaches against other websites. It is cheap, fast, and effective against anyone who reuses passwords. A password manager generating unique passwords per site eliminates this risk entirely."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-spot-fake-bank-communication","url":"https://scamencyclopedia.org/questions/how-to-spot-fake-bank-communication","question":"How do I tell if a message from my bank is real or a scam?","shortAnswer":"Real banks send secure messages through their official app and never ask for your full password, PIN, or card CVV — contact your bank on the number on the back of your card if you have any doubt.","explanation":"Bank impersonation is one of the most immediately damaging scam types because victims believe they are protecting their accounts while actually handing them over. Scammers use SMS messages, emails, and phone calls to create the impression of a genuine bank fraud alert, then capture credentials or authorise transfers under the guise of security verification.\n\nLegitimate bank communications sent via SMS or email do not contain links asking you to log in. They may send a notification — 'a new payee was added to your account' — but for any action requiring login, they direct you to use the bank's own app or to call the number on the back of your card. If a message contains a link to a login page, treat it with extreme caution and access the bank directly via your app instead.\n\nYour bank will never ask for your full online banking password, PIN, or card CVV during a phone call. During genuine fraud-prevention calls, banks may ask you to confirm partial information (last four digits, memorable date) but never complete credentials. A caller who says 'I need your full password to verify your identity' is not from your bank.\n\nThe impersonation call format often starts with an authentic-sounding fraud alert: 'We have detected unusual activity and are calling to verify.' This hooks you into a conversation where you feel the bank is protecting you, at which point the caller asks you to authorise a 'safe account' transfer to secure your funds. Banks do not transfer your money to a 'safe account' on your behalf — this is a known fraud script.","redFlags":["Text or email containing a login link claiming to be your bank","Caller asking for your full online banking password, PIN, or card CVV","Request to transfer money to a 'safe account' while staying on the phone","Caller ID shows your bank's number (remember: caller ID can be spoofed)","Urgency about fraudulent transactions that must be addressed immediately","Text claiming to be from your bank with a different mobile shortcode from previous messages"],"whatToDoNow":["End any suspicious call and call your bank using the number on the back of your card","Access your account only through the bank's official app or typed website address","Never follow a link in a text or email to log in to your bank","If you suspect your online banking credentials have been compromised, change them immediately","Report bank impersonation to your bank's fraud line and to the FTC","For UK residents, report to the Report Fraud service (formerly Action Fraud) at reportfraud.police.uk"],"faq":[{"question":"My bank's name and logo appeared on the call screen. Does that mean it was real?","answer":"No. Caller ID can be spoofed to display any name or number. The visual appearance of your bank's name on an incoming call does not confirm the caller is actually your bank. Always hang up and call back using the number on your card."},{"question":"What is an 'authorised push payment' scam?","answer":"An authorised push payment (APP) scam is when a victim is deceived into authorising a bank transfer to a fraudulent account. Because the victim authorised the payment, banks historically treated this differently from unauthorised fraud. Regulatory changes in several countries now place more responsibility on banks to reimburse APP fraud victims."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-yourself-from-money-mule-recruitment","url":"https://scamencyclopedia.org/questions/how-to-protect-yourself-from-money-mule-recruitment","question":"How do I avoid accidentally becoming a money mule?","shortAnswer":"Never transfer money received into your account onward to a third party at someone else's request — this is money-mule activity that carries serious criminal liability regardless of whether you knew it was fraud.","explanation":"A money mule is someone who transfers money on behalf of a criminal, typically receiving it into their own bank account and forwarding it elsewhere while keeping a commission. Many money mules are recruited without fully understanding what they are participating in — through fake job offers, romance relationships, or social media offers — but ignorance of the criminal origin of funds is not a complete legal defence in most jurisdictions.\n\nThe most common recruitment methods are: fake 'financial agent' or 'payment processor' job advertisements paying commission to receive and forward payments; romance scams where the partner asks you to receive and forward money as a favour; and 'money flipping' offers on social media claiming to multiply your money through a short-term transfer arrangement.\n\nIf you receive money in your bank account from someone you do not personally know and are asked to forward it, this is the defining pattern of money mule activity. Legitimate employers and financial arrangements do not require you to use your personal bank account as a payment intermediary. Any commission offered for this activity is a strong signal of criminal involvement.\n\nBanks monitor for money mule patterns — rapid receipt and forwarding of funds through personal accounts — and will close accounts involved in confirmed mule activity. A closed bank account following mule activity can make it difficult to open new accounts for years. Criminal prosecution, while not automatic for all unwitting participants, is a real possibility for those who knew or should have known the funds were illegitimate.","redFlags":["Job or social media offer paying commission to receive and forward money","Online romantic partner asking you to receive money on their behalf and forward it","Money arrives in your account unexpectedly with instructions to send it elsewhere","Offered a percentage to help someone move funds for vague reasons","Employer instructs you to use your personal account rather than a business account","'Money flipping' offer claiming to multiply your funds through a short-term transfer"],"whatToDoNow":["Never transfer money received from an unknown source at someone else's instruction","If you already participated unknowingly, stop immediately and contact your bank","Report money mule recruitment to the FTC and your bank's fraud department","If you believe you are being recruited, report to the FBI IC3 at ic3.gov","Do not keep any commission received — it may be traceable and recoverable by law enforcement"],"faq":[{"question":"Can I be prosecuted as a money mule even if I did not know the money was criminal?","answer":"Potentially yes, depending on the circumstances and jurisdiction. 'Wilful blindness' — choosing not to ask questions about obvious red flags — can support a prosecution even without full knowledge. If you receive unexpected funds and instructions to forward them, refusing and reporting is the legally safest response."},{"question":"My bank account was closed after I unknowingly acted as a mule. What can I do?","answer":"Contact the bank and explain the circumstances in writing. Being a victim of recruitment rather than a knowing participant is a relevant factor. You may need to apply to other banks and disclose the account closure honestly. Citizens Advice (UK) or consumer protection agencies can advise on your options."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-yourself-from-counterfeit-product-scams","url":"https://scamencyclopedia.org/questions/how-to-protect-yourself-from-counterfeit-product-scams","question":"How do I avoid buying counterfeit goods online?","shortAnswer":"Buy directly from brand authorised sellers or the manufacturer's own website, be suspicious of prices significantly below the brand's RRP, and check for authentication features or serial number verification before purchasing.","explanation":"The counterfeit goods market spans luxury fashion, electronics, pharmaceuticals, cosmetics, and sporting goods. Beyond financial loss, counterfeits of electronics (batteries, chargers) and cosmetics (skin creams, makeup) have caused safety incidents. The legal risk also falls on the buyer in some jurisdictions, particularly for luxury counterfeits.\n\nPrice is the most accessible warning indicator. A designer handbag, a name-brand electronic, or a prescription medication at 40% to 80% below the brand's typical price is almost certainly counterfeit or unauthorised. Genuine bargains of this magnitude on branded goods are rare outside of verified discount events or clearly marked clearance sales by authorised retailers.\n\nFor electronics and particularly batteries and chargers, counterfeits can be difficult to distinguish visually but may lack safety certifications (UL, CE, FCC) or have substandard ones. Buy electronics and accessories from the manufacturer's own website, authorised resellers listed on the manufacturer's website, or well-established retailers with a clear returns policy.\n\nFor luxury goods, many brands offer authentication apps or serial-number verification through their customer service. Before buying from a resale platform, check whether the platform offers independent authentication services (The RealReal, Vestiaire Collective, and others do). A third party willing to stand behind the product's authenticity is a meaningful signal.","redFlags":["Price is dramatically below the brand's RRP or any authorised retailer's price","Seller is not listed as an authorised retailer on the brand's official website","Packaging has minor spelling errors, inconsistent fonts, or lower print quality than typical","Product lacks expected safety certifications or the certification marks look off","Seller cannot or will not provide a serial number that verifies on the manufacturer's website","Social media or marketplace seller with no returns policy and recently created profile"],"whatToDoNow":["Check the brand's official website for a list of authorised sellers before buying","Compare the price against the brand's official RRP and authorised retailers","For luxury resale, use a platform with independent authentication services","For electronics, buy only from the manufacturer or established authorised retailers","Report suspected counterfeit sales to the brand's IP protection team and to the CBP (US Customs) at cbp.gov","File a consumer complaint with the FTC if you received a counterfeit and the seller refuses a refund"],"faq":[{"question":"Is it illegal to buy counterfeit goods for personal use?","answer":"Laws vary by country and product type. In the US, importing counterfeit goods is illegal under trademark law, and customs may seize shipments. For counterfeit pharmaceuticals, the health risk is significant regardless of legal exposure. For luxury items, civil liability is possible in some jurisdictions."},{"question":"How can I tell if a review of a product is from someone who bought the genuine item?","answer":"Counterfeit sellers sometimes have a mix of reviews — genuine buyers who received the counterfeit and are satisfied, and buyers who expected the genuine article and were disappointed. Look for reviews that specifically mention authentication or compare to a previous genuine purchase, and for images showing the actual item received."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-against-unsolicited-financial-advice-scams","url":"https://scamencyclopedia.org/questions/how-to-protect-against-unsolicited-financial-advice-scams","question":"How do I protect myself from cold-call financial advisers and unsolicited investment pitches?","shortAnswer":"Legitimate financial advisers do not cold-call with unsolicited investment opportunities — hang up, verify the firm on your regulator's register, and never invest based on an unsolicited call.","explanation":"Cold-call investment fraud is illegal in most countries and yet persists because the volume of calls means a small conversion rate still generates significant revenue. The pattern involves an unsolicited call from someone presenting as a professional adviser or broker, a compelling investment pitch (typically shares, bonds, land, fine wine, rare metals, or crypto), urgency around a limited window, and a request for payment or personal details.\n\nIn the UK, cold calling about investments is banned for most products under FCA rules. In the US, unsolicited calls about securities must comply with FINRA rules and do-not-call regulations. A firm that is cold-calling about an investment and claiming to be regulated is worth checking immediately against the FCA register or FINRA BrokerCheck — if they are not listed, they are operating illegally.\n\nBoiler rooms are a specific variant: high-pressure call centres typically operating from overseas that cold-call potential investors and push shares or other securities that are either worthless or non-existent. The callers are professional and persuasive, may follow up multiple times, and often use soft-close tactics — sending materials that look legitimate and suggesting small initial investments to build confidence before escalating.\n\nThe simplest defence is a firm policy: no investment based on an unsolicited contact, ever. Research any investment opportunity independently, using information you find yourself rather than materials provided by the caller. Check the firm against your country's regulator register. Take at least 30 days before committing any money to give yourself time for a second opinion.","redFlags":["Unsolicited call from someone offering a specific investment opportunity","Firm not listed on FINRA BrokerCheck or the FCA register","Pressure to commit before a deadline or before consulting family or an independent adviser","Returns described are guaranteed or implausibly consistent","Initial contact by phone or social media rather than through your own research","Request for an unusually large initial investment for a 'special rate'"],"whatToDoNow":["Register on the national Do Not Call Registry to reduce unsolicited calls","Check any caller's firm against FINRA BrokerCheck or your country's financial regulator","Take at least 30 days and an independent second opinion before any investment","Never invest based solely on materials provided by the caller — research independently","Report unsolicited investment calls to the FTC and your country's financial regulator","If you already invested, report to the SEC, CFTC (US), or FCA (UK) immediately"],"faq":[{"question":"What is a boiler room scam?","answer":"A boiler room is a high-pressure call centre that cold-calls investors to push fraudulent or overpriced securities. Callers use professional scripts, fake office addresses, and forged regulatory documents to appear legitimate. All losses are typically total — the shares or assets either do not exist or are worthless."},{"question":"I already gave my bank details over the phone. What should I do?","answer":"Contact your bank immediately and explain the situation. Ask them to monitor your account for suspicious activity and consider requesting new account details. File a report with the FTC and with your country's financial regulator. Act the same day if possible."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-yourself-from-personal-information-harvesting","url":"https://scamencyclopedia.org/questions/how-to-protect-yourself-from-personal-information-harvesting","question":"How do I stop scammers from harvesting my personal information online?","shortAnswer":"Minimise what you share publicly on social media, opt out of data broker sites, use privacy-focused email settings, and treat every unsolicited contact asking for 'verification' information as a potential phishing attempt.","explanation":"Personal information is the raw material for most scams: your full name, date of birth, address, employer, phone number, and family members' names allow scammers to impersonate you, answer security questions, craft targeted phishing messages, and build convincing pretexts. Much of this information is either publicly available through data brokers or shared voluntarily on social media.\n\nData broker sites aggregate personal information from public records, voter rolls, property records, and previous data breaches, and make it available for a fee or for free. The major ones — Whitepages, Spokeo, BeenVerified, Intelius, PeopleFinder, MyLife — have opt-out processes, though they are deliberately laborious. Privacy-focused services like DeleteMe (paid) or Kanary automate the opt-out process across hundreds of sites. Manual opt-out is time-consuming but free.\n\nSocial media is a significant source of scammer-usable information. A public profile showing your full name, workplace, birthday, neighbourhood, friends list, and family members gives attackers most of what they need for spear phishing and social engineering. Review your privacy settings across all platforms and set most profile information to 'friends only' or equivalent. Be particularly careful about publicly listing your date of birth and home city together, as these combinations answer security questions on financial accounts.\n\nFor email: use a dedicated email address for sensitive financial accounts that is not visible on social media or used for newsletters and sign-ups. Enable privacy features in your email client that block tracking pixels in emails, which confirm your address is active and when you opened the message.","redFlags":["Your full name, address, and relatives appear in data broker search results","Social media profile is public and contains birthday, workplace, and location information","Using the same email address for everything from banking to newsletter subscriptions","Survey or quiz requesting personal details in exchange for a result","Any form asking for information beyond what is necessary for the stated service","Unsolicited email asking you to 'verify' your personal details to continue a service"],"whatToDoNow":["Search your name on major data broker sites and submit opt-out requests","Review privacy settings on all social media platforms and restrict sensitive profile fields","Create a dedicated email address for financial accounts","Enable tracking pixel blocking in your email app","Use a privacy-focused browser extension to block cross-site tracking","Visit /identity-theft-data-scams for a comprehensive guide to data exposure reduction"],"faq":[{"question":"How long does it take data broker opt-outs to take effect?","answer":"Individual opt-outs typically take two to six weeks per site, and data can reappear as sites re-aggregate from new sources. Paid services maintain suppression continuously. Check back every six months to confirm removal has held."},{"question":"Is it dangerous to share my birthday on social media?","answer":"Your birthday alone is low-risk. Combined with your full name, city, and workplace — all commonly public on the same profile — it provides answers to many security questions and enough information for spear-phishing messages that reference plausible personal details. Keeping birthday hidden or showing only the day and month without year is a reasonable precaution."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-against-fake-prize-notification-by-text","url":"https://scamencyclopedia.org/questions/how-to-protect-against-fake-prize-notification-by-text","question":"How do I handle unexpected prize or winning notifications sent by text or email?","shortAnswer":"You cannot win a competition you did not enter, and any prize requiring a fee, taxes, or personal details upfront is a scam — delete unsolicited prize notifications without responding.","explanation":"Unsolicited prize notifications delivered by SMS, email, or social media direct message follow one of two patterns: a lottery or sweepstakes you never entered, or a 'reward' from a brand or service congratulating you on being a 'selected customer.' Both are fraud formats with the same goal: obtaining an upfront payment, your personal information, or both.\n\nThe logic test: legitimate sweepstakes must be entered. If you did not fill out an entry form for a specific sweepstakes, you are not a winner. Companies cannot enter you in a sweepstakes without your consent. Any message claiming you were randomly selected for a prize from a pool of people who never knowingly entered is fabricating the contest.\n\nFor 'brand reward' texts — 'Congratulations, you have been chosen to receive a free gift from [major retailer], click here' — these are phishing links leading to credential harvesting, survey-loops collecting personal data, or subscription traps. The retailer name is chosen for credibility. Check the sending number or email domain: it will not match the brand's official domain.\n\nEven if a prize notification is from a legitimate-sounding competition you may have vaguely entered, apply the fee test: legitimate prizes do not require advance payment of any kind. Taxes on prizes in the US are the winner's responsibility but are handled when filing taxes, not paid upfront to the prize-giver. Any request for upfront payment — described as taxes, customs, processing, or legal fees — confirms the notification is fraudulent.","redFlags":["Prize from a competition you do not remember entering","Required fee of any kind before the prize can be released","Sending phone number or email domain does not match the claimed brand","Request for personal details including SSN, passport, or bank account","Urgency: 'claim within 48 hours or the prize is forfeited'","Instruction to keep the prize confidential until it is claimed"],"whatToDoNow":["Delete the message without clicking any link or calling any number","Search the claimed company name plus 'scam' or 'prize notification' to confirm","Report the number or sender to 7726 (SPAM) and to the FTC","If you already provided details, monitor your credit and change any passwords associated with shared information","Do not pay any fee to claim any prize regardless of how official the message appears"],"faq":[{"question":"What if I really did enter a competition and receive a winning notification?","answer":"Verify by going to the competition's official website, typed directly from the address you used to enter — not from a link in the notification. Check whether your name appears on a verified winners list. Call the company's main customer service line using a number from their official site. Legitimate competitions expect you to verify."},{"question":"Can responding to a prize text sign me up for a paid subscription?","answer":"Yes. Some prize-text scams are subscription traps: responding with a keyword or clicking a link enrolls you in a recurring SMS or service subscription. Check your phone bill for unexpected charges after receiving and interacting with any unsolicited prize message."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-protect-yourself-from-online-scams-generally","url":"https://scamencyclopedia.org/questions/how-to-protect-yourself-from-online-scams-generally","question":"What are the most important habits to protect myself from online scams?","shortAnswer":"Pause before acting on anything urgent or too good to be true, verify before paying, use strong unique passwords with 2FA, and know that gift cards are never a legitimate payment method for any real organisation.","explanation":"Most online scams succeed because they operate faster than normal deliberation — urgency, emotion, and surprise combine to bypass the scepticism that would normally catch the deception. The most durable protection is building habits that automatically create a pause regardless of the circumstances, so that verification happens before any money moves or information is shared.\n\nThe five habits that provide the broadest protection across scam categories: First, the urgency pause — any situation that demands immediate financial action is worth treating with heightened suspicion rather than speed. Real emergencies, unlike manufactured ones, can survive a five-minute pause while you call a real person. Second, the independent verification habit — find contact details yourself rather than using what a contact provides; this defeats most impersonation. Third, unique passwords with 2FA — if your accounts are individually secured, a single breach does not cascade. Fourth, the gift-card test — if any payment request involves gift cards, it is a scam without exception. Fifth, the too-good-to-be-true check — investment returns, prices, or job offers that significantly exceed market norms exist for a reason: they are attracting people who will not ask questions.\n\nBeyond individual habits, knowing where to find reliable information protects you in unfamiliar situations. The FTC's consumer.ftc.gov, the ScamEncyclopedia guides at /guides, and your country's consumer protection authority are free resources that keep pace with evolving scam formats. Staying generally informed means new formats are less likely to catch you before you have read about them.\n\nFinally, the social dimension matters: talking about scams openly with family and friends normalises scepticism, reduces the shame that prevents victims from asking for help or reporting, and extends your protective habits to people around you.","redFlags":["Any situation requiring immediate financial action with no time to verify","Payment method requested is gift cards, wire transfer, or cryptocurrency","Offer or opportunity is dramatically better than any legitimate comparable","Contact creates urgency while discouraging you from consulting others","Something a known-trust institution is asking for feels inconsistent with how they normally communicate","You feel uncomfortable but are being reassured that your discomfort is unfounded"],"whatToDoNow":["Practice the urgency pause: create a deliberate delay before any financial action prompted by an unexpected contact","Enable 2FA on email, banking, and key social accounts this week","Discuss the gift-card test and urgency pause with family members","Bookmark ReportFraud.ftc.gov, /guides, and /risk-score/scam-risk-checker for reference","Check your email at haveibeenpwned.com and change any breached passwords","Review your privacy settings on social media and revoke unnecessary app permissions"],"faq":[{"question":"Is there a single most important anti-scam habit?","answer":"The urgency pause is the most universally applicable: any situation demanding immediate financial action benefits from a deliberate delay. Scammers rely on urgency to prevent the normal scepticism that would catch them. Pausing consistently — even for five minutes — defeats this technique."},{"question":"How do I stay updated on new scam formats without becoming anxious?","answer":"Set a monthly reminder to read a scam-awareness source you trust — the FTC's consumer blog, the ScamEncyclopedia guides, or your bank's security updates. Treating it as regular maintenance rather than constant vigilance keeps you informed without creating anxiety."},{"question":"What if I still feel uncertain about a specific situation?","answer":"Use the /risk-score/scam-risk-checker to assess any website or communication, search the specific scenario on the questions page at /questions, or report your concern at /report-a-scam for guidance. No situation is too ambiguous to be worth checking."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-seniors","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-seniors","question":"How do scammers target seniors?","shortAnswer":"Scammers target older adults through phone calls, mail, and online channels, exploiting trust, social isolation, and unfamiliarity with digital red flags to run grandparent, Medicare, and tech-support scams.","explanation":"Older adults are disproportionately targeted because they are more likely to answer the phone, have accumulated retirement savings, and may be less familiar with the latest fraud tactics. Scammers exploit cognitive changes that come with age, a trusting communication style cultivated over decades, and the reality that many seniors live alone and crave social contact.\n\nCommon tactics include the grandparent scam (a caller impersonates a distressed grandchild needing bail money), Medicare and Social Security impersonation (demanding account verification or threatening benefit suspension), and tech-support fraud (a pop-up claims the computer is infected and a fake technician requests remote access and payment). All of these create artificial urgency to prevent the target from consulting family or doing research.\n\nFinancial exploitation often starts small. A scammer may call repeatedly, building a relationship over weeks before making a financial request. Gift cards, wire transfers, and cryptocurrency ATMs are favored because the money is nearly impossible to recover once sent.\n\nProtective steps focus on slowing down. Encouraging seniors to hang up, call a known family member, and never give payment in gift cards covers the most common attack vectors. Registering on the Do Not Call list and enabling call-blocking apps (Nomorobo, Hiya) reduce the initial contact surface.","redFlags":["Caller demands immediate payment via gift card, wire transfer, or cryptocurrency","Urgent story involving a grandchild, lawsuit, or benefit suspension","Request to keep the call secret from family or friends","Unexpected computer pop-up with a phone number to call","Medicare or Social Security card 'must be replaced' for a fee","Caller knows personal details like name or partial address to build false credibility"],"whatToDoNow":["Hang up and call the family member or agency directly using a number from your records","Never pay anyone who demands gift cards as the only acceptable payment form","Enable call-blocking apps or ask your carrier about scam-likely call filtering","Register your phone number at donotcall.gov to reduce cold calls","Tell a trusted person about any large unexpected payment requests before sending money","Report scam calls to the FTC at reportfraud.ftc.gov"],"faq":[{"question":"Are seniors more likely to lose money to scams than younger people?","answer":"FTC and FBI data consistently show that while older adults do not fall for scams more often per contact, when they do lose money the median loss is higher because they may have more savings and may be less likely to report the incident out of embarrassment."},{"question":"What is the grandparent scam?","answer":"A caller pretends to be a grandchild (or a lawyer or police officer on the grandchild's behalf) claiming the grandchild has been arrested or injured abroad and urgently needs bail money or medical funds sent by wire or gift card, often asking the grandparent not to tell anyone."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-college-students","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-college-students","question":"How do scammers target college students?","shortAnswer":"College students are targeted with fake job postings, scholarship scams, rental fraud, and student-loan phishing because they are financially stressed, digitally active, and often making major financial decisions for the first time.","explanation":"Students actively searching for part-time work, off-campus housing, and financial aid make ideal targets. Scammers post fake job listings on legitimate boards offering flexible remote roles that turn out to be check-washing, reshipping, or money-mule schemes. A student cashes an overpayment check, wires back the excess, and weeks later the bank reverses the fraudulent check — leaving the student liable.\n\nScholarship and grant scams promise guaranteed funding for an application fee or require a student to share their FSA ID login. Rental scams list non-existent or misrepresented properties at below-market rents, collect a deposit, and disappear before move-in day. Textbook and software sites offer pirated materials that come bundled with malware.\n\nStudents are also prime phishing targets. Lookalike emails from the financial-aid office, registrar, or bursar request login credentials or threaten holds on accounts. Campus Wi-Fi networks create interception risks for unencrypted sessions.\n\nBecause many students share their lives publicly on social media, scammers can personalize approaches with the student's major, club memberships, or hometown to appear credible. Developing a healthy skepticism about unsolicited financial offers is the most durable defense.","redFlags":["Job posting pays unusually well for minimal effort or asks you to use your own bank account","Scholarship requires an upfront fee or financial-aid login credentials","Landlord declines to show the property in person before taking a deposit","Email from 'financial aid' or 'bursar' requests password through a non-.edu link","Check arrives before work is done with instructions to wire a portion back","Unsolicited offer of a grant you never applied for"],"whatToDoNow":["Verify job postings through your college career center before responding","Never share your FSA ID; no legitimate scholarship needs it","See rental properties in person or via video with the landlord live before paying anything","Use your college's official portal URLs, not links in emails","Search the scholarship name on the FTC or BBB Scam Tracker before applying","Report scam job listings to the platform and your campus career center"],"faq":[{"question":"Is it a scam if the check they sent me bounced?","answer":"Almost certainly yes. Scammers send fraudulent checks knowing they will bounce after you have already wired money back or sent gift cards. You are responsible for any funds withdrawn before the check clears, so you lose the amount you sent even though you 'received' payment."},{"question":"How can I find legitimate scholarships without paying fees?","answer":"Use free databases like your college financial-aid office, Fastweb, Scholarships.com, and College Board. Legitimate scholarships never charge an application fee or require your FSA ID login."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-new-immigrants","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-new-immigrants","question":"How do scammers target new immigrants?","shortAnswer":"New immigrants face immigration-services fraud, fake government notices, employment scams, and notario fraud because language barriers, unfamiliarity with U.S. systems, and fear of authorities make them especially vulnerable.","explanation":"Immigrants newly arrived in a country are unfamiliar with how government agencies communicate, what fees are legitimate, and which professionals are authorized to provide legal help. Scammers exploit all three gaps. Notario fraud is particularly harmful: in many Latin American countries a 'notario publico' is a licensed legal professional, but in the U.S. the title has no such meaning. Unauthorized individuals charge large fees for immigration forms they fill out incorrectly, causing visa denials or deportation proceedings.\n\nFake government notices mimic letters from USCIS, ICE, or the IRS, threatening arrest, deportation, or loss of benefits unless immediate payment is made by wire or prepaid card. Because the consequences of ignoring real government notices are severe, many victims comply out of fear rather than skepticism.\n\nEmployment scams target those seeking work authorization, charging fees for nonexistent jobs, stealing identification documents, or running money-mule schemes where the immigrant's bank account is used to receive and forward fraudulent funds. The immigrant may face criminal exposure while the scammer disappears.\n\nCommunity-based protection is the most effective countermeasure. Trusted community organizations, accredited representatives listed on the EOIR website, and legal-aid societies provide free or low-cost immigration help. Encouraging newcomers to verify any individual claiming to offer immigration services against official accreditation lists before paying anything is critical.","redFlags":["Person claims to be a 'notario' or 'immigration consultant' who can file visa papers for a fee","Letter or call threatening deportation or arrest unless you pay immediately","Request to hand over original passport, green card, or other identity documents","Job offer requires you to pay a fee upfront or use your bank account to receive payments","Government agency demands payment by prepaid card, gift card, or cryptocurrency","Caller knows your immigration case number and uses it to seem legitimate"],"whatToDoNow":["Check EOIR.gov for accredited immigration representatives before paying for any immigration help","Contact USCIS directly at 1-800-375-5283 to verify any notice claiming to be from them","Never hand over original documents; keep certified copies instead","Contact a legal-aid organization or accredited immigration attorney if threatened","Report immigration fraud to the FTC and your state attorney general","Share warnings in community groups about known local immigration scammers"],"faq":[{"question":"What is notario fraud?","answer":"Notario fraud occurs when an unauthorized person misuses the title 'notario' or 'immigration consultant' to charge immigrants for visa or legal services they are not licensed to provide. Mistakes in filings can result in visa denials, delays, or deportation, and the money paid is usually not recoverable."},{"question":"Will real government agencies call and threaten deportation?","answer":"No. USCIS, ICE, and similar agencies communicate primarily by mail. They do not call to demand immediate payment by gift card or wire transfer to avoid deportation. Any such call is a scam."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-job-seekers","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-job-seekers","question":"How do scammers target job seekers?","shortAnswer":"Job seekers face fake employment listings, reshipping and money-mule schemes, and upfront-fee traps because their urgency to find work and willingness to share personal information make them easy to exploit.","explanation":"When someone is actively searching for work they are predisposed to respond quickly to opportunities, share their resume and contact details broadly, and give benefit of the doubt to strangers offering employment. Scammers exploit this by posting convincing fake listings on legitimate job boards, cloning real company names and logos, and conducting 'interviews' entirely over text or messaging apps to avoid being seen or recorded.\n\nThe overpayment check scam is common: a 'new employer' sends a check before work begins, asks the applicant to buy equipment or supplies from a specific vendor (another scammer), then disappears when the check bounces. The applicant loses the money spent. Reshipping scams recruit 'package processors' who unknowingly handle goods purchased with stolen credit cards, potentially making them criminally liable.\n\nPersonal information harvested during fake hiring processes — Social Security numbers, bank details for 'direct deposit setup,' driver's license photos — is used for identity theft. Victims may not realize the job was fake until a fraudulent credit card or loan appears in their name months later.\n\nJob seekers should apply caution proportional to how good an offer sounds. Legitimate employers do not ask for payment, personal account numbers, or identity documents before an official offer letter, a contract, and verified onboarding through proper HR channels.","redFlags":["Interview conducted entirely via text or chat app with no video or phone call","Job offer arrives within hours of applying with no real interview","Employer sends a check before work starts and asks you to buy supplies","Request for your SSN, bank account, or ID photos before an official offer letter","Job involves receiving packages and reshipping them to another address","Pay is far above market rate for simple or vague duties","Company name and logo look familiar but the email domain is slightly wrong"],"whatToDoNow":["Verify the company exists by searching its website independently and calling the main number","Never pay any fee to get a job; legitimate employers do not charge applicants","Delay sharing sensitive personal information until you have a signed offer letter from a verified source","Do a reverse image search on the recruiter's profile photo","Report fake listings to the job board and to the FTC at reportfraud.ftc.gov","If you received a suspicious check, do not cash it; take it to your bank to verify"],"faq":[{"question":"Can a fake job lead to identity theft?","answer":"Yes. Information collected during a fake hiring process — SSN, bank account numbers, driver's license — is frequently used to open credit cards, take out loans, or file fraudulent tax returns in the victim's name."},{"question":"Are work-from-home job offers more likely to be scams?","answer":"Remote-work listings do attract a disproportionate number of fraudulent postings because they are easy to fabricate and the lack of an office makes verification harder. That does not mean all remote jobs are fake; apply extra scrutiny to any listing that lacks a verifiable company presence."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-military-families","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-military-families","question":"How do scammers target military families?","shortAnswer":"Military families are targeted with romance scams impersonating deployed soldiers, predatory lending, fake VA benefits services, and moving-and-relocation fraud because frequent moves, deployment separations, and financial pressures create specific vulnerabilities.","explanation":"Active-duty service members and their families face a unique set of circumstances that scammers study and exploit. Frequent relocations create a constant demand for housing, movers, and local services — all of which have corresponding scam variants. Servicemembers deployed overseas cannot easily verify financial activity at home, making their families targets for high-pressure sales pitches and fraudulent contracts.\n\nRomance scams using stolen military photos are extremely common. A fraudster poses as a deployed soldier on dating platforms, quickly builds emotional intimacy over weeks, then requests money for R&R flights, medical bills, or communication equipment. The real soldier whose photos were stolen has no knowledge of this activity.\n\nPredatory lenders target young enlisted personnel with payday loans and car financing at extreme interest rates, often violating the Military Lending Act's 36% APR cap. Fake military-benefits consultants charge fees to 'navigate' VA benefits that are available free of charge through official VSO organizations.\n\nBefore deployment, families should set up financial power of attorney carefully and use MyArmyBenefits or official VSO organizations (VFW, American Legion) for any benefits questions. Commands and military family readiness groups are the right resource for financial distress — not strangers who reach out unsolicited.","redFlags":["Online romantic partner uses photos of a uniformed soldier and quickly requests money","Lender or car dealer implies military status makes the borrower exempt from standard credit checks","Company charges a fee to help apply for VA, GI Bill, or other military benefits","Moving company demands a large cash deposit before seeing inventory, then holds belongings hostage","Caller claims to be from the VA, JAG, or a military command demanding immediate payment","Financial product ignores or violates the 36% APR cap under the Military Lending Act"],"whatToDoNow":["Verify any online romantic interest claiming to be deployed through a reverse image search","Use accredited VSOs (VFW, American Legion, DAV) for VA benefits help — all services are free","Check lender compliance with the Military Lending Act at consumerfinance.gov/servicemembers","File moving-fraud complaints with FMCSA at protectyourmove.gov","Report military impersonation romance scams to the FTC and the IC3","Contact your installation's legal assistance office or financial readiness program for free help"],"faq":[{"question":"Is it common for scammers to use real soldiers' photos?","answer":"Yes. Scammers frequently steal profile photos from real service members' public social media accounts. The actual soldier is a victim of identity misuse and typically has no idea their image is being used. You can report such misuse to the platform and to the real service member if identifiable."},{"question":"What is the Military Lending Act?","answer":"The MLA is a U.S. federal law that caps the interest rate (MAPR) on most consumer loans to active-duty servicemembers and their dependents at 36%. Lenders who ignore this cap are violating federal law, and affected borrowers can report violations to the CFPB."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-small-business-owners","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-small-business-owners","question":"How do scammers target small-business owners?","shortAnswer":"Small-business owners are targeted with fake invoices, directory and advertising scams, fraudulent government-compliance notices, and supplier fraud because they receive high volumes of financial requests and may lack dedicated fraud-detection staff.","explanation":"Running a small business means processing invoices, paying vendors, managing listings, and dealing with government paperwork — all areas scammers mimic convincingly. The fake-invoice scam sends a professional-looking bill for services like directory listings, domain renewals, or office supplies that were never ordered. Staff who process payments without checking may pay them automatically.\n\nGovernment-compliance impersonation is particularly effective against small businesses. Scammers send official-looking mailings about mandatory OSHA poster updates, corporate annual-report filings, or new tax-form requirements, charging fees for documents that are free or services the business never needs. During COVID, fraudsters sent fake SBA loan and grant notices to harvest account numbers.\n\nBusiness email compromise (BEC) targets businesses of every size. Scammers spoof or hack a supplier's or executive's email and redirect a pending invoice payment to a fraudster-controlled account. By the time the real vendor follows up about non-payment, the money is gone.\n\nPublic business registrations, websites, and social media profiles give scammers a detailed picture of a company's vendors, staff, and financial activity. Establishing a call-back verification procedure for any new payment instructions or bank-account change requests is one of the most cost-effective fraud controls a small business can implement.","redFlags":["Invoice arrives for services or supplies with no matching purchase order","Official-looking mailing demands payment for mandatory government compliance documents","Email from a known supplier requests you change bank account details for future payments","Directory listing or advertising rep pressures immediate renewal payment over the phone","Grant or loan approval notice asks for account information to 'deposit funds'","New vendor insists on wire transfer only for the first order"],"whatToDoNow":["Implement a purchase-order matching policy: no payment without a corresponding internal PO","Verify any bank-account or payment-instruction change by calling the vendor on their known number","Search government agency websites directly to verify any compliance requirement before paying","Train accounts-payable staff to flag unfamiliar vendors and urgent payment requests","Report fake invoices to the FTC and your state attorney general","Use multi-factor authentication on all business email accounts to prevent BEC"],"faq":[{"question":"What is business email compromise (BEC)?","answer":"BEC is a scam in which fraudsters impersonate a company executive or trusted vendor via a spoofed or hacked email account and instruct an employee to wire funds or change payment details. It causes billions of dollars in business losses annually and is one of the FBI's highest-priority cyber threats."},{"question":"Are fake government compliance mailings illegal?","answer":"Yes. Sending misleading communications that mimic government agencies is fraud and in many cases violates the U.S. Postal Inspection Service's regulations on deceptive mailings. Report them to the USPS Postal Inspection Service and the FTC."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-first-time-crypto-investors","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-first-time-crypto-investors","question":"How do scammers target first-time cryptocurrency investors?","shortAnswer":"First-time crypto investors are targeted with fake exchanges, pump-and-dump groups, romance investment scams (pig butchering), and rug pulls because enthusiasm for potential gains and limited technical knowledge make them easy to mislead.","explanation":"The cryptocurrency space moves fast, uses unfamiliar terminology, and has relatively few consumer protections — an ideal environment for fraud targeting newcomers. First-time investors often learn about crypto through social media, where scam promoters pay for followers or use bots to simulate a thriving community around a worthless token.\n\nPig butchering is the dominant high-loss scam: a stranger establishes a weeks-long romantic or friendly relationship, then introduces the target to a 'can't miss' crypto investment platform. Early small investments appear to yield spectacular gains on the (fake) platform dashboard. When the victim invests a large sum, the platform freezes withdrawals, demands 'tax' or 'fee' payments to release funds, then disappears.\n\nFake exchanges and wallet apps mimic legitimate services. They may list on secondary app stores or be distributed via social media links. A user deposits real cryptocurrency, watches it vanish, and has no recourse because there is no actual company behind the app.\n\nPump-and-dump groups in Telegram or Discord signal coordinated buys of obscure tokens to drive the price up. By the time new followers buy in, the organizers have already sold and the token collapses. Unlike traditional securities, most cryptocurrency pump-and-dumps have no regulatory enforcement mechanism to return funds.","redFlags":["Investment platform introduced by a romantic or social contact you only know online","Profits on the platform look exceptional and withdrawals are denied or require additional fees","Social media group promises guaranteed crypto returns or signals specific tokens to buy","Exchange or wallet app was downloaded from a link rather than an official app store","Project promises fixed daily returns or referral bonuses for recruiting others","Pressure to invest more money quickly before a 'window' closes"],"whatToDoNow":["Only use exchanges registered with FinCEN and listed on official app stores (Coinbase, Kraken, etc.)","Never invest more than you can afford to lose entirely in any cryptocurrency","Verify any platform by checking independent reviews and regulatory registration before depositing","Be skeptical of any investment introduced through a romantic or social media relationship","Do not pay additional fees to 'unlock' withdrawals — this is a scam escalation tactic","Report crypto fraud to the FTC, CFTC, and FBI IC3"],"faq":[{"question":"What is pig butchering?","answer":"Pig butchering (sha zhu pan) is a long-con investment scam originating in Southeast Asia. Scammers 'fatten' victims with friendship or romance before leading them to a fraudulent trading platform. Victims invest escalating amounts, believing they are profitable, until withdrawal is blocked and the operation vanishes."},{"question":"Can I recover cryptocurrency sent to a scam?","answer":"Crypto transactions are generally irreversible on the blockchain. Recovery is very difficult. Legitimate law enforcement can occasionally trace and seize funds through blockchain analysis, but the chances diminish quickly. Anyone offering to recover your crypto for a fee upfront is almost certainly running a recovery scam."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-online-daters","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-online-daters","question":"How do scammers target people using online dating platforms?","shortAnswer":"Online daters are targeted with romance scams that build emotional dependency over weeks before requesting money, gifts, or crypto investment, exploiting loneliness and the trust formed through sustained personal communication.","explanation":"Romance scammers invest significant time creating a compelling persona — often using stolen photos of an attractive professional, military officer, or doctor working abroad. The relationship progresses rapidly: declarations of love come within days or weeks, future plans are discussed, and the target is made to feel uniquely understood and valued. This emotional investment is the foundation of the scam.\n\nThe money request always follows a crisis: a medical emergency, a business deal gone wrong, a flight home that falls through, or a customs fee holding a valuable package. The amounts start small and escalate. Each successful request signals the scammer that more can be extracted. Sums in the tens or hundreds of thousands of dollars are not unusual in extended cases.\n\nMore recently, romance scammers pivot to cryptocurrency investment (pig butchering): the romantic partner introduces a 'trading tip' and a platform. Victims believe they are making investment decisions independently, not realizing the platform and the relationship are both fraudulent.\n\nPlatform safety features — video call verification, identity checks, in-app payment blocking — reduce but do not eliminate risk. The strongest protection is a personal rule: never send money or gifts to someone you have not met in person, regardless of how compelling the story or relationship feels.","redFlags":["Profile photo returns results from other social media profiles under a different name","Relationship escalates unusually fast with early declarations of love","Person is always 'abroad' — deployed, working on an oil rig, or on a medical mission","Every attempt to meet in person is canceled by an emergency","Requests money, gift cards, or crypto for an urgent and sympathetic-sounding crisis","Introduces an investment platform and encourages you to deposit funds"],"whatToDoNow":["Reverse image search every profile photo before investing emotional energy in the conversation","Video call early; a scammer will find reasons to avoid appearing on camera","Apply a firm personal rule: no money, no gift cards, no crypto for someone you have not met in person","Tell a trusted friend about the person and take their reaction seriously","Report suspicious profiles to the dating platform using its built-in reporting tool","Report romance scam attempts to the FTC at reportfraud.ftc.gov"],"faq":[{"question":"Can someone be a scammer if we have video-called?","answer":"Yes. Deepfake technology allows scammers to animate a stolen photo in real time during video calls. Signs of deepfaking include slight visual lag, unnatural blinking, distorted edges around the face, and reluctance to move freely on camera. Insist on spontaneous actions like holding up a piece of paper with your name written on it."},{"question":"Should I feel embarrassed if I was targeted by a romance scam?","answer":"No. Romance scammers are professional psychological manipulators who often operate in organized teams. Being targeted reflects nothing about your intelligence or worth. Reporting the experience helps protect others and is the right response."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-new-parents","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-new-parents","question":"How do scammers target new parents?","shortAnswer":"New parents are targeted with counterfeit baby product listings, fake childcare job postings, birth-certificate and savings-account scams, and social media giveaway fraud because their emotional vulnerability, time pressure, and large new spending make them attractive targets.","explanation":"Welcoming a new child creates immediate high-value purchasing needs — car seats, formula, nursery furniture, baby monitors — and scammers flood marketplace listings and social media ads with counterfeit or non-existent versions of popular items at attractive prices. Unlike deceptive adult products, counterfeit baby items can pose direct safety hazards.\n\nChildcare fraud exploits the desperate search for affordable, trustworthy care. Fake nanny or daycare listings collect deposits and personal information from parents. Scam nanny agencies charge placement fees for fabricated candidates. Fake references and background-check services sell falsified reports.\n\nNew parents also face medical and insurance scams: fake claims that a procedure is mandatory for the newborn, billing for services not rendered, or upselling unnecessary genetic tests with inflated out-of-pocket charges.\n\nSocial media pregnancy announcement posts are mined by scammers who send congratulatory messages along with fake offers for free strollers, formula samples, or savings bonds for the baby. These offers harvest names, addresses, and payment information. Applying the same scrutiny to baby purchases as any other purchase, and buying from established retailers when safety is at stake, is the most practical protection.","redFlags":["Marketplace listing for a popular baby item is priced far below retail with no brand verification","Childcare agency charges a placement fee before providing any candidate information","Social media message offers a free baby product and asks for your address and credit card 'for shipping'","Medical billing for newborn services you do not recognize or were not informed about","Background check service for a nanny has no verifiable accreditation","Unsolicited 'congratulations' message offers savings bonds or government benefits requiring personal details"],"whatToDoNow":["Buy safety-critical baby items (car seats, cribs, formula) from established retailers or verified brands only","Verify nanny or childcare providers through in-person interviews and independently checked references","Never pay a childcare placement agency before meeting candidates","Dispute unrecognized medical bills with your insurer before paying","Ignore unsolicited 'free baby gift' messages that ask for payment details","Review social media privacy settings after birth announcements to limit who sees personal information"],"faq":[{"question":"How can I verify a baby product is genuine before buying online?","answer":"Buy directly from the brand website or authorized retailers listed on the manufacturer's site. Avoid marketplace third-party sellers with no reviews or with prices significantly below the brand's own price. Check for safety certifications (JPMA, CPSC compliance) on the product page."},{"question":"Are free sample offers for baby products real?","answer":"Some brands do run genuine sample programs, but these are announced on the brand's official website and do not require payment card details for shipping. Any unsolicited offer asking for a credit card number to receive a 'free' baby product is likely a subscription trap or data-harvesting scam."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-recently-bereaved","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-recently-bereaved","question":"How do scammers target people who are recently bereaved?","shortAnswer":"The recently bereaved are targeted with estate and probate fraud, fake charity solicitations in the deceased's name, debt collection scams, and obituary-mining schemes because grief impairs judgment and creates urgent financial and administrative tasks.","explanation":"Scammers monitor obituaries as a source of leads. A published obituary reveals the deceased's name, approximate age, surviving family members, and the date of death — enough to craft personalized approaches. Within days of a death notice, families may receive calls from people claiming the deceased owed a debt, had an unclaimed insurance policy, or left a balance in a financial account requiring immediate verification.\n\nEstate and probate fraud includes fake attorneys who offer to speed up the probate process for an upfront fee, investment advisors who target newly widowed spouses managing inherited assets for the first time, and 'beneficiary finders' who claim to have located unknown accounts but require a percentage of the estate in exchange.\n\nCharity fraud exploits the desire to memorialize the deceased. Scammers contact the family requesting donations to a fake charity in the loved one's honor, or they create fraudulent online memorial funds on crowdfunding platforms that skim or redirect donations.\n\nFinancial exploitation of bereaved people is most common in the first weeks when grief is sharpest and administrative demands are highest. Giving yourself permission to delay non-urgent financial decisions by at least 90 days, and routing all unexpected contacts about money through a trusted advisor or attorney, provides meaningful protection during this vulnerable period.","redFlags":["Caller claims the deceased owed a debt and demands immediate payment from the estate or family","Attorney or advisor contacts you unsolicited shortly after a death notice offering to manage the estate","Charity solicitation for an organization you cannot verify through Charity Navigator or GuideStar","'Beneficiary finder' demands a percentage of the estate to reveal unknown account details","Online memorial fund was set up by someone outside the immediate family without notification","Unsolicited offer to buy the deceased's property, vehicle, or valuables at an urgent low price"],"whatToDoNow":["Do not pay alleged debts of the deceased to cold callers; legitimate creditors communicate in writing","Engage a trusted estate attorney through a referral, not through unsolicited contact","Verify any charity before donating by searching it on Charity Navigator or your state's charity registry","Alert close family members to watch for suspicious contacts after any obituary is published","Delay major financial decisions for at least 90 days if grief makes clear thinking difficult","Report estate fraud and fake debt collection to the FTC and your state attorney general"],"faq":[{"question":"Am I responsible for my deceased spouse's debts?","answer":"In most cases, family members are not personally liable for a deceased person's debts unless they were co-signers. The estate may owe creditors, but legitimate creditors submit claims through the probate process — they do not call family members demanding immediate cash payment. Consult an estate attorney if you receive collection calls."},{"question":"How do I protect a published obituary from being mined by scammers?","answer":"Consider omitting the deceased's exact address, survivors' full names, and the funeral home schedule from publicly posted obituaries. Some families publish a minimal public notice and share detailed arrangements only with known contacts. Monitoring your mail and calls for suspicious contacts in the weeks after is also prudent."}],"lastReviewed":"2026-06-10"},{"slug":"protecting-relative-with-dementia-from-scams","url":"https://scamencyclopedia.org/questions/protecting-relative-with-dementia-from-scams","question":"How do I protect a relative with dementia from scams?","shortAnswer":"Protecting a person with dementia requires a combination of legal safeguards, practical account controls, and social supports because cognitive decline removes the filters that help most people recognize manipulation.","explanation":"Dementia progressively impairs the ability to evaluate unfamiliar situations, remember prior warnings, and resist social pressure. A person with moderate dementia may engage warmly with a scam caller, hand over payment details without awareness of risk, and have no memory of the transaction afterward. Scammers specifically seek out cognitively impaired individuals because they are less likely to report incidents and less likely to remember details that would help investigators.\n\nLegal safeguards are the foundation. A durable power of attorney allows a trusted person to manage finances proactively. A trusted contact designation on bank and investment accounts lets the institution alert a family member if concerning activity is observed. Some families work with the bank to require a second signatory for transfers above a threshold.\n\nPractical controls complement legal safeguards. Call-blocking apps and do-not-call registration reduce inbound scam calls. Limiting access to large amounts of cash or high-limit credit cards reduces the maximum possible loss. Mail forwarding to a family member's address prevents isolation and allows interception of fraudulent solicitations.\n\nSocial engagement matters too. Isolation is both a risk factor for scam targeting and a consequence of cognitive decline. Regular contact with trusted family and friends, and engagement with social programs through an adult day center or senior center, keeps others aware of the individual's circumstances and reduces the impact of scammers who rely on secrecy.","redFlags":["Unfamiliar charges appearing on bank or credit card statements","Large cash withdrawals or gift card purchases that cannot be explained","New 'friends' who appear suddenly and ask for financial help or gifts","Mail containing sweepstakes entries, lottery claims, or charity solicitations","Phone calls that leave the person confused, distressed, or secretive about money","Signed documents or agreements the person does not remember making"],"whatToDoNow":["Consult an elder-law attorney to establish a durable power of attorney while the person still has legal capacity","Add a trusted contact at each financial institution so the bank can alert you to unusual activity","Enable call-blocking apps and do-not-call registration on all household phones","Forward mail to your address or review it regularly to catch fraudulent solicitations","Set low daily spending limits on debit cards and remove high-limit credit access","Report any financial exploitation to Adult Protective Services in your state"],"faq":[{"question":"What is a trusted contact at a bank?","answer":"A trusted contact is a person the account holder designates — separate from a power of attorney — whom the financial institution can contact if it suspects exploitation, abuse, or that the account holder may lack capacity. It does not give the trusted contact authority to access the account."},{"question":"What should I do if I think my relative with dementia already sent money to a scammer?","answer":"Act quickly. Contact the bank to report a potentially unauthorized transaction and ask about recall procedures for wire transfers. Report to Adult Protective Services (1-800-677-1116 through the Eldercare Locator) and to the FTC. Document all transactions you find. A certified elder-law attorney can advise on next steps."}],"lastReviewed":"2026-06-10"},{"slug":"protecting-college-student-from-scams","url":"https://scamencyclopedia.org/questions/protecting-college-student-from-scams","question":"How do I protect a college student from scams?","shortAnswer":"Protecting a college student means having frank conversations about common campus-targeted scams, setting up lightweight financial monitoring, and establishing a standing permission for them to call you before making any unexpected financial decision.","explanation":"College is often the first time young adults manage their own finances, sign their own contracts, and navigate the world without real-time parental guidance. Scammers know this and design traps that target both inexperience and the specific stressors students face: academic pressure, financial strain, and the desire to succeed.\n\nBefore the semester starts, walk through the most common scams together: the overpayment check job scam, fake rental listings, scholarship-fee traps, and phishing emails that look like they come from the bursar or financial-aid office. Research from consumer-protection agencies consistently shows that young adults who have heard a specific scam described are significantly more likely to recognize it when encountered.\n\nFinancial account setup matters. Adding the student as a secondary user on a parent account (or vice versa) creates transparency without removing independence. Setting up transaction alerts at low thresholds — any transaction over $50, for example — means unusual activity is surfaced quickly. Many banks allow spending category limits on debit cards.\n\nEstablishing a no-judgment standing offer — 'If someone is pressuring you about money or you are unsure about something, call or text me before doing anything, any time, and I will not lecture you' — is one of the highest-impact things a parent can do. Students who fear being criticized for falling for a scam are less likely to report until it is too late.","redFlags":["Student receives a job offer without applying or with a very fast hiring process","Student has been asked to cash a check and wire back a portion","Unexpected large debit or transfer from a shared account","Student mentions a new 'friend' who keeps discussing investment opportunities","Student received an email claiming their financial aid will be canceled unless they verify login credentials"],"whatToDoNow":["Have a specific 'scam talk' before each semester covering the most common student scams","Set up low-threshold transaction alerts on any account you share or monitor","Make an explicit no-judgment standing offer to be called before any unexpected financial decision","Encourage the student to use the campus career center and financial-aid office for official guidance","Share the FTC consumer information website so they know where to research suspicious offers"],"faq":[{"question":"Should I monitor my college student's finances without telling them?","answer":"No. Covert monitoring damages trust and removes the student's motivation to self-report problems. Transparent account-sharing or transaction alerts agreed upon together is far more effective: the student knows you can see unusual activity, which reduces risky financial behavior, and knows you are available to help without judgment."},{"question":"What is the most important scam for a college student to know about?","answer":"The overpayment check scam causes some of the highest individual losses among students. A 'new employer' sends a check before any work is done and asks the student to wire back part of it. The check later bounces and the student owes the bank the full amount wired. Recognizing this pattern prevents one of the most financially damaging student frauds."}],"lastReviewed":"2026-06-10"},{"slug":"protecting-non-native-english-speaking-parent-from-scams","url":"https://scamencyclopedia.org/questions/protecting-non-native-english-speaking-parent-from-scams","question":"How do I protect a non-native-English-speaking parent from scams?","shortAnswer":"Protecting a parent who is not a fluent English speaker means bridging the information gap: ensuring they know how official agencies actually communicate, setting up simple verification habits, and being a trusted first call for anything that feels urgent or threatening.","explanation":"Language barriers create multiple overlapping vulnerabilities. A non-native-English speaker may miss the subtle signs that an official-sounding message is fraudulent: unusual phrasing, incorrect agency names, demands that no real government body would make. They may be less aware of consumer-protection norms in their adopted country and more inclined to comply with authority figures.\n\nScammers who speak the target's native language — often operating from overseas call centers — can exploit cultural norms of respect for authority or urgency more effectively than English-only scammers could. Native-language robocalls impersonating government agencies are common in Mandarin, Korean, Spanish, Tagalog, and other languages spoken by large immigrant communities.\n\nPractical steps include setting up a short list of verified contact numbers: the real Social Security Administration, the real Medicare helpline, and your own number. Teach the parent one universal rule: if anyone calls about money, taxes, or immigration and creates urgency, hang up and call one of these three numbers before doing anything else. This rule requires no nuanced English-language judgment — it is a simple behavioral trigger.\n\nHelping the parent install call-blocking apps, opt out of marketing lists in their primary language, and set up low-threshold bank alerts in their language of comfort reduces both the volume of suspicious contacts and the time to detection when something unusual occurs.","redFlags":["Call or message in the parent's native language from a 'government agency' demanding immediate payment","Threat of deportation, arrest, or benefit suspension unless money is sent within hours","Caller knows the parent's name, partial address, or case number to seem official","Request for iTunes, Google Play, or other gift cards to pay a government fee","Message claiming there is a tax problem that will result in arrest if not resolved immediately","New acquaintance who speaks the native language and quickly moves to financial topics"],"whatToDoNow":["Create a laminated reference card with three verified numbers: SSA, Medicare, and your own phone","Teach one universal rule: 'Hang up and call me first' before any money or information is given","Install a call-blocking app and set it to auto-block known scam patterns","Set up bank transaction alerts in the parent's preferred language if the bank offers it","Discuss how U.S. government agencies actually communicate (primarily by mail, not urgent phone calls)","Join community or cultural organizations that distribute scam warnings in the native language"],"faq":[{"question":"Are there scam warnings available in languages other than English?","answer":"Yes. The FTC publishes consumer alerts in Spanish at consumer.ftc.gov/es. AARP and consumer advocacy organizations publish materials in many languages. Ethnic media outlets and community organizations in major cities often distribute scam warnings in the dominant community language."},{"question":"Is it OK for me to manage my parent's finances to protect them?","answer":"If your parent has legal capacity, any financial management arrangement should be agreed upon transparently and documented. A durable power of attorney formalized with an attorney gives you legal authority to act if needed. Informally taking over finances without consent, even with good intentions, can create legal complications and undermine trust."}],"lastReviewed":"2026-06-10"},{"slug":"why-are-seniors-more-at-risk-of-scams","url":"https://scamencyclopedia.org/questions/why-are-seniors-more-at-risk-of-scams","question":"Why are seniors more at risk of financial scams?","shortAnswer":"Older adults are more at risk because of a combination of social isolation, accumulated savings, trust-based communication styles, cognitive changes, and the fact that scammers specifically study and target them.","explanation":"The risk factors for older adults are structural, not personal failings. Many seniors live alone, have more available time to answer the phone, and grew up in an era when a phone call from an authority figure warranted cooperation. These traits, combined with accumulated retirement savings and fewer workplace colleagues who might provide reality checks, make them statistically high-value targets.\n\nNormal aging affects some of the cognitive functions most relevant to scam recognition: processing speed, working memory, and the ability to rapidly evaluate novel social situations. Research in neuroscience and behavioral economics suggests that older adults may be somewhat less efficient at detecting intentional deception compared to younger adults, particularly under time pressure — exactly the pressure scammers create.\n\nScammers study their targets. They buy lists of older adults from data brokers, share information through criminal networks about individuals who have previously sent money, and mark those individuals as likely to respond again. A person who sends money once is likely to be contacted repeatedly and by different scam groups.\n\nSocial isolation amplifies all of these risks. A senior who rarely speaks to family or friends has fewer opportunities to hear 'that sounds like a scam' from people they trust. Regular social connection — even brief check-in calls — is both emotionally beneficial and a meaningful fraud-prevention measure.","redFlags":["Senior is receiving an unusually high volume of phone calls, prize notices, or mail solicitations","Unexplained withdrawals or gift card purchases on their bank statements","Senior seems secretive about a new relationship or financial opportunity","Bills are going unpaid while money is being sent to people not known to the family","Senior mentions a 'friend' who has been giving them investment advice","New unfamiliar names appearing as contacts in their phone"],"whatToDoNow":["Maintain regular contact and create natural opportunities for financial topics to come up","Set up transaction monitoring on shared accounts with the senior's knowledge and consent","Help register on donotcall.gov and install call-blocking tools","Have periodic, non-alarmist conversations about common scam tactics targeting older adults","Consult an elder-law attorney to establish protective documents before a crisis arises","Contact Adult Protective Services if you suspect ongoing financial exploitation"],"faq":[{"question":"Do seniors report scams less often than younger people?","answer":"Yes. Research suggests older adults report fraud at lower rates, often due to embarrassment, a belief they should have known better, or concern about losing financial autonomy if family members find out. Under-reporting means the true scale of elder fraud is likely much higher than official statistics show."},{"question":"Is cognitive decline required for a senior to be scammed?","answer":"No. People of all cognitive abilities are defrauded, and many victims of elder fraud have no diagnosable cognitive impairment. Scammers create conditions — urgency, emotional pressure, information overload — that impair judgment in everyone. Cognitive changes may increase vulnerability at the margins, but they are not a prerequisite."}],"lastReviewed":"2026-06-10"},{"slug":"why-are-immigrants-more-at-risk-of-scams","url":"https://scamencyclopedia.org/questions/why-are-immigrants-more-at-risk-of-scams","question":"Why are immigrants more at risk of scams?","shortAnswer":"Immigrants face higher scam risk because unfamiliarity with the new country's legal and financial systems, language barriers, fear of authorities, and reliance on untrusted information sources combine to create multiple points of exploitation.","explanation":"Scam risk for immigrants is not a matter of intelligence or gullibility. It is the predictable result of information asymmetry: a newcomer does not yet know how agencies actually communicate, what fees are legitimate, which professionals are licensed to help, or what consumer protections exist. Scammers who operate in immigrant communities know this and exploit it deliberately.\n\nFear of authorities is a significant factor for many immigrant communities, particularly those with uncertain immigration status. A scammer who threatens deportation or benefit loss can create panic that overrides careful judgment. This fear also reduces the likelihood of reporting fraud, since contacting law enforcement feels risky. The result is that scammers targeting these communities operate with less risk of consequences.\n\nTight-knit community networks are a strength in many ways, but they can also spread fraudulent recommendations. A scammer who wins the trust of one community influencer — a religious leader, a business owner, a community association president — can gain access to dozens of victims through referrals and word-of-mouth endorsements.\n\nLanguage barriers create additional exposure in legal and financial settings. Documents signed without full comprehension, verbal agreements with no written record, and the difficulty of navigating complaint processes in a second language all disadvantage immigrant victims. Multilingual consumer-protection resources and community legal-aid organizations provide a meaningful counterweight.","redFlags":["Services offered in the community's native language by someone who cannot provide credentials","Recommendation from a trusted community member for a financial or legal service you know nothing about","Any service that requires handing over original identity documents","Fees charged for services that official agencies provide for free","Anyone who warns you not to consult with others or to keep an arrangement confidential","Notario, consultant, or paralegal offering to handle immigration filings without attorney supervision"],"whatToDoNow":["Use the EOIR accredited-representative list to verify immigration help","Ask for credentials in writing from anyone providing legal, financial, or tax services","Contact your local legal-aid organization or immigrant-services nonprofit for free referrals","Remember that U.S. law-enforcement agencies generally do not demand immediate phone payments","Share information about specific scams circulating in your community to help others","Report scams to the FTC; reports can be made anonymously and do not affect immigration status"],"faq":[{"question":"Will reporting a scam to the FTC affect my immigration case?","answer":"No. The FTC is a consumer-protection agency and does not share reports with immigration authorities. You can report fraud anonymously. Reporting helps the FTC identify patterns, warn other consumers, and pursue enforcement action against scammers."},{"question":"How can immigrant communities protect themselves collectively?","answer":"Community-level protection is highly effective. Immigrant-serving nonprofits, ethnic media, religious institutions, and community associations can distribute scam warnings in the native language, run workshops on consumer rights, and maintain lists of accredited professionals in each community. Collective awareness is more durable than individual awareness alone."}],"lastReviewed":"2026-06-10"},{"slug":"why-are-job-seekers-at-risk-of-scams","url":"https://scamencyclopedia.org/questions/why-are-job-seekers-at-risk-of-scams","question":"Why are job seekers more vulnerable to scams than people who are employed?","shortAnswer":"Job seekers are more vulnerable because financial pressure, urgency to find work, willingness to respond quickly to opportunities, and the broad sharing of personal information during the job search all create conditions that scammers exploit.","explanation":"Unemployment or underemployment creates financial stress that distorts risk assessment. A person who urgently needs income is more likely to give benefit of the doubt to an opportunity that would seem suspicious under better circumstances. Scammers understand this and use urgency, high pay, and minimal requirements as bait.\n\nThe job search process involves sharing personal information — resume, contact details, work history, references — broadly and proactively. This information appears on job boards, LinkedIn, and in applications sent to hundreds of employers. Scammers harvest these submissions, particularly on less-moderated platforms, to target applicants with personalized approaches.\n\nJob seekers are conditioned to respond quickly. A recruiter who messages within hours of an application and schedules a same-day 'interview' exploits the applicant's desire not to miss an opportunity. The urgency-driven response pattern that helps in a real job search is exactly what scammers need to move quickly past a target's defenses.\n\nFinancial vulnerability also makes job seekers susceptible to 'advance-fee' variants: paying for required certifications, background checks, or equipment as a condition of starting a job. No legitimate employer asks a new hire to pay upfront for employment requirements.","redFlags":["Job offer with pay far above market rate for simple tasks requiring no special skills","Employer asks for payment to process your application, run a background check, or provide equipment","Hiring process conducted entirely over text or app with no video or voice interaction","Application form asks for SSN, bank account, or passport before an offer letter is signed","Job description is vague about the company, duties, or how the role generates revenue","New 'employer' sends a check before you start and asks you to forward part of it"],"whatToDoNow":["Research every employer through its website and verifiable news coverage before applying","Never pay any fee as a condition of employment","Hold off on sharing SSN or bank details until after a signed offer letter from a verified source","Conduct a video call early in any hiring process to verify the recruiter is real","Check the job posting against the company's own careers page for consistency","Report fake job listings to the platform and to the FTC"],"faq":[{"question":"Is urgency in a job posting always a red flag?","answer":"Not always — some legitimate roles are genuinely time-sensitive. The combination of urgency with other red flags (high pay for minimal work, upfront fees, vague job description) is what raises concern. Urgency alone warrants extra verification steps, not automatic rejection."},{"question":"Are freelance and gig-economy scams different from traditional job scams?","answer":"They share the same core mechanics but may appear on different platforms. Freelance scam variants include fake client projects that require the freelancer to purchase software or equipment first, platforms that charge high registration fees with no real work available, and clients who overpay and ask for a refund of the excess."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-online-gamers","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-online-gamers","question":"How do scammers target online gamers?","shortAnswer":"Gamers are targeted with fake item trading scams, account theft through phishing, game-currency fraud, and fake cheat-software that installs malware, exploiting both the financial value of in-game assets and the competitive desire to gain advantages.","explanation":"The online gaming economy is enormous, with rare skins, weapons, and in-game currency trading for real money on secondary markets. Scammers exploit the gap between the desire for these items and the high prices on legitimate platforms. A gamer offered a rare item at a discount via a private trade may hand over account credentials, real money, or both before realizing the trade never completes.\n\nPhishing in gaming communities is highly contextual. Fake login pages mimic popular game launchers (Steam, Battle.net, Epic Games). Messages in game chats or Discord servers warn that an account is under review and must be re-verified. Because these messages arrive in game-native contexts, they look far more credible than standard phishing emails.\n\nFake cheat software — aimbots, wallhacks, cheats sold on Discord or Reddit — often contains remote-access trojans (RATs) or credential stealers. A player who installs unauthorized software to gain a competitive edge may find their game account, banking credentials, and personal files compromised.\n\nGift card scams are also common in gaming communities: a 'friend' or giveaway asks for a Steam or PlayStation gift card code, which is immediately redeemed and untraceable. Gaming-specific consumer habits (fast transactions, peer-to-peer trades, in-app purchases) create a high-velocity environment with limited time to spot fraud.","redFlags":["Private trade offer for high-value in-game items at prices far below market","Link to 'verify your account' or 'claim your prize' sent via game chat or Discord","Free cheat or hack software distributed through non-official channels","Gift card code requested as payment for in-game items or a competition entry","Middleman trade service with no verifiable reputation","Steam Trade window showing account-level restrictions that were not there before"],"whatToDoNow":["Enable Steam Guard or platform-equivalent two-factor authentication on all gaming accounts","Only trade or sell in-game items through the official platform marketplace","Never install unofficial cheat software; use only mods from trusted sources","Type game launcher URLs directly into the browser rather than clicking links","Report suspicious trades or messages through the platform's built-in report system","Check your email account for unexpected login alerts after any unusual game activity"],"faq":[{"question":"Is it safe to buy or sell game accounts?","answer":"Most game terms of service prohibit account sales and buying a sold account carries the risk that the original owner can reclaim it through customer support. Third-party account sales sites vary widely in trustworthiness and offer limited consumer protection; buyers and sellers both bear significant risk."},{"question":"What is a Steam phishing scam?","answer":"Steam phishing scams direct users to fake login pages that look identical to the official Steam interface. After entering credentials, the scammer immediately takes over the account, changes the email and password, and may sell or strip the account's inventory. Enabling Steam Guard two-factor authentication is the primary defense."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-seniors-on-social-media","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-seniors-on-social-media","question":"How do scammers target seniors on social media?","shortAnswer":"Scammers on social media target older adults with fake grandchild emergencies, prize notifications, investment endorsements using stolen celebrity images, and fake friendship followed by financial requests.","explanation":"Social media has become a primary communication channel for many seniors, particularly for staying connected with family and community. Scammers have followed this demographic online, adapting classic phone-based fraud to social media mechanics. Facebook is the platform most commonly cited in elder fraud reports involving social media, though Instagram, YouTube, and messaging apps are also significant vectors.\n\nFake grandchild emergency messages arrive through Messenger or WhatsApp: a contact claiming to be a grandchild in trouble asks for immediate help. The grandchild account may be a cloned profile using stolen photos, or the scammer may have obtained enough personal details from public posts to be convincing.\n\nCelebrity-endorsed investment scams flood social media feeds. An advertisement using a cloned news segment and a real celebrity's image or voice promotes a cryptocurrency platform. The celebrity's name lends credibility; the platform takes deposits and disappears. Older adults who are less familiar with how advertisements are fabricated using AI-generated content are more likely to find these convincing.\n\nFake friend requests from attractive profiles create relationships over days or weeks before pivoting to financial requests — a variant of romance fraud adapted for social media. Public life events — anniversaries, health issues, travel plans — published in posts give the scammer personal details to make conversations feel genuine.","redFlags":["Message claiming to be a grandchild or family member in trouble sent from an unfamiliar account","Social media ad featuring a recognizable person endorsing an investment opportunity","New friend request from someone with few connections and photos that return results from other profiles","Notification that you have won a prize from a Facebook lottery or giveaway","Request to continue a conversation via WhatsApp or another private channel immediately","Romantic interest who only knows you from social media and avoids meeting in person"],"whatToDoNow":["Verify any emergency message from a 'family member' by calling their known phone number directly","Apply skepticism to all social media investment advertisements regardless of who appears in them","Set social media profiles to private and limit what life events are visible publicly","Do not accept friend requests from people with no mutual connections and no verifiable profile history","Report suspicious accounts and advertisements through the platform's report function","Share specific scam examples with older family members using the actual social media platform they use"],"faq":[{"question":"Are celebrities actually endorsing investment platforms on social media?","answer":"Almost never. Celebrity investment endorsements on social media are overwhelmingly either fabricated using AI-generated audio or video, or involve hacked accounts, or use images without the celebrity's consent. Legitimate investment platforms do not use unsolicited social media ads featuring celebrities as their primary marketing."},{"question":"What should I do if a social media account is using my family member's photos?","answer":"Report the account to the platform for impersonation. Most platforms have a dedicated process for reporting fake accounts using someone's identity. Document the fake account with screenshots before reporting in case the platform takes it down quickly."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-single-parents","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-single-parents","question":"How do scammers target single parents?","shortAnswer":"Single parents face romance scams, fake childcare and housing deals, work-from-home fraud, and government-benefit impersonation because financial pressure, time constraints, and the desire to provide for their children create multiple vulnerabilities.","explanation":"Single parents carry the full weight of household finances and childcare simultaneously, leaving less time for due diligence on financial decisions and creating higher sensitivity to any offer that might reduce cost or increase income. Scammers tailor pitches to these pressures: flexible remote income, subsidized housing, affordable childcare, or government assistance programs.\n\nRomance scams targeting single parents build on the genuine desire for companionship and support. A scammer who expresses interest in the parent and the children can establish unusual emotional resonance quickly. Requests for money follow the same pattern as general romance fraud but may be framed as helping the single parent's family.\n\nFake work-from-home jobs promise schedule flexibility compatible with school pickup times. Fake housing listings offer below-market rent for family-friendly properties. Fake childcare subsidies claim the parent qualifies for a government program and request account details to deposit the benefit. Each of these is designed to speak directly to a real, legitimate need.\n\nBuilding a support network of verified resources — local social services, community organizations, verified childcare platforms — before a financial crisis creates a buffer against fraud. Single parents who have reliable, trusted information sources to consult are less likely to make rushed financial decisions based on unsolicited offers.","redFlags":["Work-from-home offer with high pay and flexible hours that requires upfront purchase of supplies or software","Childcare provider or housing listing asks for a deposit without allowing in-person inspection","Romantic partner online shows unusual interest in both the parent and children very early","Government program you never applied for contacts you to verify bank details to receive a payment","Job offer requires using your personal bank account to receive and forward client payments","Subsidized housing waitlist can be 'skipped' by paying an unofficial facilitator fee"],"whatToDoNow":["Contact local social services through official websites to learn what programs you actually qualify for","Verify childcare providers through state licensing databases before paying any deposit","Apply extra scrutiny to any romantic connection formed online before meeting in person","Never use your personal bank account to receive payments for an employer","Join local single-parent community groups to share information about local scams","Contact 211 (U.S.) for verified local social services referrals without cost"],"faq":[{"question":"Are there scams specifically targeting child tax credits or child support?","answer":"Yes. Scammers send texts, emails, and calls impersonating the IRS or state agencies claiming that a child tax credit payment is ready but requires account verification, or that unpaid child support will result in arrest unless immediately settled by a payment method like gift cards. Legitimate IRS communications come by mail and do not demand gift cards."},{"question":"How can I find legitimate assistance programs for single parents?","answer":"The U.S. government's Benefits.gov portal lists federal programs by state and eligibility. The 211 helpline connects callers to local social services. Your state's department of social services website lists childcare subsidies, housing assistance, and food programs. None of these require a fee or personal bank account to apply."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-people-with-disabilities","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-people-with-disabilities","question":"How do scammers target people with disabilities?","shortAnswer":"People with disabilities are targeted with benefits impersonation, medical-equipment fraud, fake charitable fundraisers, and exploitative caregiver arrangements because fixed incomes, reliance on external assistance, and limited access to consumer-protection information create multiple vulnerabilities.","explanation":"People with disabilities often live on fixed incomes from Social Security Disability Insurance (SSDI) or Supplemental Security Income (SSI), making them attractive targets for scammers who pitch financial products, debt relief, or work-from-home income. Any scheme that promises to supplement a tight income or reduce bills can seem worth investigating.\n\nBenefits impersonation is particularly effective. Callers claim that SSDI or Medicare benefits are at risk unless a verification fee is paid or account information is confirmed. The threat of losing essential income or health coverage creates urgency that overwhelms careful evaluation.\n\nMedical and mobility equipment fraud charges Medicare and private insurers for equipment never received, or sells substandard equipment by misrepresenting its capabilities and regulatory approvals. This causes both financial harm and potential physical harm if needed medical equipment is unavailable or malfunctions.\n\nCaregiver exploitation — financial abuse by individuals who hold positions of trust — is a distinct and underreported problem. A paid caregiver, family member in a caregiving role, or new acquaintance who offers help may gradually gain access to finances, redirect payments, or coerce the person with a disability into signing documents. Clear financial oversight structures, trusted third-party monitoring, and awareness among social workers are the primary defenses.","redFlags":["Caller threatens loss of SSDI, SSI, or Medicare unless a fee is paid immediately","Medical equipment seller asks for Medicare or insurance card details over the phone","Caregiver or new acquaintance shows unusual interest in financial accounts or documents","Charity collecting on behalf of people with disabilities cannot provide verifiable registration details","Work-from-home scheme targets people whose disability limits traditional employment","Debt-relief offer promises to resolve medical debt for an upfront fee"],"whatToDoNow":["Verify any Social Security or Medicare communication by calling 1-800-772-1213 or 1-800-MEDICARE","Never provide Medicare or insurance information to unsolicited callers","If using a paid caregiver, designate a separate trusted person to monitor financial accounts","Report healthcare fraud to the HHS Office of Inspector General at 1-800-HHS-TIPS","Contact your state's disability rights organization for guidance on financial exploitation","Report suspected caregiver exploitation to Adult Protective Services"],"faq":[{"question":"What is medical equipment fraud?","answer":"Medical equipment fraud involves billing Medicare or other insurers for durable medical equipment (wheelchairs, CPAP machines, back braces) that was never delivered, was unnecessary, or was of far lower quality than billed. It also includes selling equipment to individuals at fraudulent prices with misrepresented specifications."},{"question":"How do I report a caregiver I suspect is financially exploiting someone I know?","answer":"Contact Adult Protective Services in the state where the person lives. In the U.S., the Eldercare Locator (1-800-677-1116) connects to local APS and legal-aid services. Document any financial irregularities you have observed. If crime is ongoing, local law enforcement can also be involved."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-recent-retirees","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-recent-retirees","question":"How do scammers target people who have recently retired?","shortAnswer":"Recent retirees are targeted with investment fraud, annuity scams, IRS impersonation, and reverse-mortgage exploitation because they typically have a lump sum from retirement accounts and are making complex financial decisions for the first time.","explanation":"The moment of retirement represents a unique financial vulnerability: a person receives or rolls over a large sum for the first time, must make investment and income-distribution decisions they have little experience with, and may be transitioning away from the employer and colleagues who previously provided informal financial reality checks.\n\nInvestment fraud targeting retirees is widespread. Seminars marketed as 'free lunch' or 'educational retirement workshops' are common sales environments where high-pressure advisors pitch unsuitable products: variable annuities with high surrender charges, limited partnerships, or speculative investments that are entirely inappropriate for someone in or near retirement.\n\nIRS impersonation specifically targets retirees around tax time with calls claiming that retirement income was incorrectly reported and that immediate payment is needed to avoid arrest. Reverse-mortgage scams target homeowners who are 'equity-rich but cash-poor,' offering products with misleading terms or pressuring them into arrangements that benefit the scammer rather than the homeowner.\n\nA new retiree who has not yet established a relationship with a fiduciary financial advisor is particularly exposed. Working with a fee-only fiduciary advisor (verified through NAPFA or the CFP Board) before making any major retirement-account decisions provides professional protection against both fraudulent advisors and predatory financial products.","redFlags":["Financial seminar invitation offering a free meal in exchange for attending a sales presentation","Investment advisor pushes a high-commission product and creates urgency about 'locking in rates now'","IRS call claiming back taxes on retirement income must be paid immediately to avoid arrest","Reverse-mortgage offer presented without a required independent HUD-approved counseling session","Advisor recommends rolling over your entire 401(k) into an annuity without a detailed needs analysis","Financial product promising guaranteed returns significantly above prevailing market rates"],"whatToDoNow":["Work with a fee-only fiduciary advisor found through NAPFA.org or CFP Board before touching retirement accounts","Take at least 90 days before making any major irreversible financial decision after retirement","Verify any financial advisor's credentials and disciplinary history at BrokerCheck (FINRA) or the SEC IAPD","Attend free-lunch seminars only with a trusted companion and commit to nothing on the day","HUD-approved reverse-mortgage counseling is required and free; use it before proceeding","Report financial advisor fraud to FINRA, the SEC, or your state securities regulator"],"faq":[{"question":"What is a 'free lunch' financial seminar?","answer":"A free-lunch seminar is a sales tactic in which a financial company invites people (often retirees) to a complimentary meal at a restaurant in exchange for attending a presentation. The presentation typically promotes high-commission financial products. The free meal creates a social obligation that can lower sales resistance. These events are legal but are flagged by regulators as environments where unsuitable products are frequently sold."},{"question":"What is a fiduciary financial advisor?","answer":"A fiduciary advisor is legally obligated to act in the client's best interest, not merely recommend 'suitable' products. Fee-only fiduciaries are paid only by the client, not by commissions from products they sell, which eliminates one significant conflict of interest. Look for credentials like CFP, and verify fiduciary status before engaging."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-low-income-consumers","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-low-income-consumers","question":"How do scammers target low-income consumers?","shortAnswer":"Low-income consumers are targeted with rent-to-own traps, predatory loans, fake government-assistance programs, and lottery scams because financial stress narrows options and makes modest amounts of money or benefits feel life-changing.","explanation":"Financial stress impairs decision-making in measurable ways — research in behavioral economics shows that scarcity of money or resources consumes cognitive bandwidth, leaving less capacity for the kind of careful deliberation that fraud detection requires. Scammers understand this and design offers that speak directly to real and urgent needs: utility shutoff prevention, grocery assistance, rent payment help.\n\nPredatory financial products targeting low-income consumers are sometimes technically legal but functionally exploitative: payday loans with triple-digit APRs, rent-to-own furniture that costs three times the retail price, and prepaid debit cards with high monthly fees that consume a significant portion of a benefit payment. Distinguishing these from outright scams is a matter of degree.\n\nFake government benefit programs are a major fraud category. Texts and social media posts claim that a low-income individual has been approved for a stimulus, energy assistance, or food benefit and just needs to 'verify' their information online. These phishing campaigns are timed to coincide with real government programs (SNAP, LIHEAP, stimulus payments) to gain maximum credibility.\n\nUtility shutoff impersonation is particularly effective against people who are behind on bills: a caller posing as the power company demands immediate payment in gift cards or the electricity will be cut off that afternoon. The threat is credible because the household may genuinely be behind on payments.","redFlags":["Text or social media post offering government benefit approval you never applied for","Utility company threatens same-day shutoff and demands gift card payment","Loan or credit offer with no credit check and terms involving extremely high fees","Lottery, sweepstakes, or prize notification requiring a fee to claim the winnings","Upfront fee required to access a rent-assistance, food, or energy benefit","Credit repair company charges a large fee before doing any work"],"whatToDoNow":["Contact real benefit programs through official government websites (Benefits.gov, 211.org) not through social media links","Call your utility company's main number to verify any shutoff threat before making payment","Report predatory lending to the CFPB at consumerfinance.gov/complaint","Use credit unions and community banks instead of payday lenders when possible","Check credit-repair company claims through the CFPB and your state attorney general","Report fake benefit programs to the FTC at reportfraud.ftc.gov"],"faq":[{"question":"Is a payday loan the same as a scam?","answer":"Not always in a legal sense, but payday loans are widely criticized by consumer advocates for APRs that can reach 400% or more. Some payday lenders operate without proper state licensing, which is fraud. Even licensed payday lenders can create debt traps. The CFPB website has guidance on alternatives including credit unions and community banks."},{"question":"How do I access real emergency utility assistance?","answer":"The Low Income Home Energy Assistance Program (LIHEAP) is a federal program that helps low-income households with heating and cooling costs. Contact your state energy office or call 211 to find local programs. Real LIHEAP assistance is applied for through official state agencies, never through social media or unsolicited texts."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-healthcare-workers","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-healthcare-workers","question":"How do scammers target healthcare workers?","shortAnswer":"Healthcare workers are targeted with credential-renewal phishing, student-loan forgiveness fraud, PPE and supply scams, and investment pitches exploiting their high income and trust in professional communications.","explanation":"Healthcare professionals have several characteristics that make them attractive fraud targets: high income (particularly physicians and nurses), professional credentials with monetary value, student loan burdens that make loan-forgiveness offers compelling, and a work environment that demands rapid trust in official communications and colleagues.\n\nCredential and license renewal phishing is a targeted threat. Emails claiming to come from state licensing boards, the DEA, or professional associations warn that a license renewal deadline is imminent and include a link to a fake payment portal. Because license lapses have serious professional consequences, urgency-driven compliance is common.\n\nStudent-loan forgiveness scams have intensified as awareness of Public Service Loan Forgiveness (PSLF) programs has grown. Healthcare workers at non-profit hospitals may legitimately qualify for PSLF, but third-party companies charging fees to apply are almost always fraudulent — the application is free through the official studentaid.gov website.\n\nDuring public health emergencies, supply-chain scams targeting healthcare facilities sell non-existent PPE, medicines, or equipment at inflated prices, collecting payment before disappearing. Individual healthcare workers are also targeted with investment seminars marketed specifically to medical professionals, often through professional associations or conferences.","redFlags":["Email about license renewal with a payment link that does not come from the official state licensing board domain","Company charges a fee to apply for Public Service Loan Forgiveness","Investment seminar specifically targeted at physicians or medical professionals promises above-market returns","Medical supply vendor requests advance payment for critical supplies and is not a known, verifiable company","DEA or board notification arrives via text message demanding immediate action","Continuing education offer that requires payment through an unofficial channel"],"whatToDoNow":["Renew all professional licenses directly through your state licensing board's official website","Apply for PSLF yourself through studentaid.gov — the application is free; any company charging is a scam","Vet investment advisors who target medical professionals through FINRA BrokerCheck","Verify supply vendors against hospital procurement lists and established distributors","Report phishing emails claiming to be from DEA or licensing boards to those agencies","Use your institution's legal or compliance office to review any unusual financial arrangement"],"faq":[{"question":"Is Public Service Loan Forgiveness real?","answer":"Yes. PSLF is a legitimate federal program administered by the Department of Education that forgives remaining federal student loan balances after 10 years of qualifying payments while working full-time for qualifying employers including non-profit hospitals. The application is free at studentaid.gov. Any company charging to 'enroll' you in PSLF is a scam."},{"question":"Do investment seminars at medical conferences have higher fraud risk?","answer":"The presence of an investment pitch at a professional conference does not validate it. Regulators have documented cases of investment fraudsters targeting physicians through conference sponsorships and professional networks. Apply the same scrutiny — verify credentials, check BrokerCheck, consult an independent advisor — regardless of how the introduction occurred."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-the-recently-divorced","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-the-recently-divorced","question":"How do scammers target people who have recently gone through a divorce?","shortAnswer":"The recently divorced face romance scams, financial-advisor exploitation, moving and housing fraud, and asset-transfer schemes because emotional distress, changed financial circumstances, and the rebuilding of a social life create multiple simultaneous vulnerabilities.","explanation":"Divorce creates a cluster of circumstances that scammers are positioned to exploit: emotional vulnerability, a new need to manage finances independently (often for the first time), a changing social circle, and the logistical demands of establishing a new household. All of these happen simultaneously, creating cognitive and emotional overload.\n\nFinancial advisors and divorce financial 'specialists' who approach newly divorced individuals without referral warrant scrutiny. Legitimate financial advisors do not cold-contact divorce filings. Predatory advisors may take advantage of unfamiliarity with investment accounts, retirement splits, or tax implications of settlement payments.\n\nRomance scams targeting the divorced are well-documented. The desire to rebuild social connections and companionship after a difficult process can accelerate emotional investment in online relationships, particularly when those relationships offer validation and understanding. Scammers study divorce-related social media posts and public records to craft targeted approaches.\n\nMoving and housing fraud affects newly single individuals searching for housing quickly, often under time pressure from the divorce timeline. Fake rental listings, security deposit theft, and moving-company fraud cluster around this transition. The combination of urgency and unfamiliarity with a new area makes the recently divorced particularly susceptible.","redFlags":["Financial advisor or 'divorce specialist' contacts you based on a public divorce filing","New romantic interest online mentions they also recently went through a painful divorce","Moving company or rental listing requires a large cash deposit before any viewing","Offer of investment help specifically mentioning recently divided retirement or settlement funds","Anyone who suggests keeping a financial arrangement secret from your attorney","Seller of large purchases (furniture, car) for the new home accepts only cash wire transfers"],"whatToDoNow":["Find a fiduciary financial advisor through NAPFA.org rather than someone who approaches you cold","Apply the same romantic-partner verification steps (reverse image, video call, no money) during rebuilding","Engage your divorce attorney before any major financial transaction in the months after settlement","Inspect rental properties in person and pay security deposits only by traceable methods","Tell a trusted friend about any unexpected financial opportunity that seems well-timed to your situation","Report suspicious financial advisor approaches to your state securities regulator"],"faq":[{"question":"Why are romance scammers drawn to recently divorced people?","answer":"Public divorce records, social media posts about life changes, and dating profile disclosures give scammers clear signals about who is newly single, emotionally processing a loss, and actively seeking connection. This combination of identified need and emotional vulnerability is exactly what long-con romance scammers look for."},{"question":"Should I tell a new financial advisor I just received a settlement?","answer":"Only tell a financial advisor details they need for the specific question you are asking, and only after verifying their credentials through FINRA BrokerCheck and confirming they are a fiduciary. Sharing the size of a recent settlement or inheritance with an unverified advisor is a fraud risk."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-gig-workers","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-gig-workers","question":"How do scammers target gig and freelance workers?","shortAnswer":"Gig and freelance workers face fake client projects, platform impersonation, overpayment check schemes, and false tax-debt threats because their income is variable, their client relationships are informal, and they often navigate complex tax situations independently.","explanation":"The informal nature of gig work — clients found online, contracts sometimes verbal, platforms acting as intermediaries — creates multiple entry points for fraud. A fake 'client' on a freelance platform approaches a worker, establishes a project, then issues an overpayment check and asks for a refund of the excess. By the time the check bounces, the worker has sent real money.\n\nPlatform impersonation targets gig workers with emails appearing to come from Upwork, Fiverr, Uber, Lyft, or DoorDash claiming that earnings are on hold, an account review is needed, or a new payment policy requires re-verification of bank details. Because payment delays are a genuine pain point in gig platforms, workers may not apply full skepticism to these messages.\n\nTax-related fraud specifically targets the self-employed. Fake IRS notices claim that a freelancer failed to report income and owes back taxes, with immediate payment required. Because self-employed tax filing is genuinely complex and freelancers may worry about having made errors, these threats create credible anxiety.\n\nRating and review manipulation offers — pay a fee to have negative reviews removed, or pay to boost a Lyft or seller rating — exploit gig workers' dependence on ratings for income. These services are either fraudulent (money taken, nothing done) or violate platform terms of service, resulting in account suspension.","redFlags":["Client sends a check larger than the agreed fee and asks you to wire back the difference","Platform email requests bank account re-verification through a link in the email","IRS notice via phone or email threatens arrest over freelance income discrepancies","Service offers to improve your gig platform rating for an upfront fee","New client insists on communicating outside the platform immediately","Project brief is vague but pay is well above market rate"],"whatToDoNow":["Always keep project communication within the official platform's messaging system","Access platform accounts directly through the official URL, not through email links","Reject any check payment larger than the agreed amount without a verified explanation","Consult a tax professional or the IRS directly (IRS.gov) to verify any tax notice","Report fake client accounts to the freelance platform's trust-and-safety team","Save all project communications and payment records in case of disputes"],"faq":[{"question":"Is it safer to work through a platform than to find clients directly?","answer":"Established platforms offer some protection — payment escrow, dispute resolution, and user verification — but they are not fraud-proof. Fake accounts and phishing targeting platform users are common. Working through a platform is generally safer than informal arrangements, but platform status is not sufficient verification on its own."},{"question":"What should I do if a client asks me to use Zelle or Venmo instead of the platform's payment system?","answer":"Decline. The platform's payment system is the primary protection for both parties. Once you accept payment outside the platform, you lose dispute resolution rights, and the platform may suspend your account for violating its payment terms. Person-to-person payment apps also offer essentially no fraud protection for sellers."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-people-in-debt","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-people-in-debt","question":"How do scammers target people who are in debt?","shortAnswer":"People in debt are targeted with fake debt-relief programs, credit-repair scams, advance-fee loan fraud, and debt-collection impersonation because financial desperation makes them receptive to any offer of relief.","explanation":"Debt creates a specific psychological vulnerability: the urgency of escaping a painful financial situation can override the skepticism that would ordinarily protect against fraud. Scammers calibrate their pitches to exactly how much relief a realistic solution would provide, making offers seem just plausible enough to act on.\n\nCredit-repair scams claim they can remove accurate negative information from credit reports, erase a debt, or boost a credit score rapidly. These claims are legally impossible: the Fair Credit Reporting Act gives individuals the right to dispute inaccurate information for free, but accurate negative information cannot be legally removed. Charging a fee to do something that is either impossible or available for free is the core of the scam.\n\nAdvance-fee loan fraud targets people who cannot qualify for traditional credit by promising a guaranteed personal loan requiring only an upfront insurance, processing, or origination fee. After the fee is paid, the loan never arrives and the company disappears. Legitimate lenders deduct fees from the loan proceeds; they do not require payment before funding.\n\nDebt-collection impersonation exploits fear of legal action. Fake collectors threaten arrest, wage garnishment, or lawsuits over debts that may be expired, already paid, or entirely fabricated. Real debt collectors are regulated by the Fair Debt Collection Practices Act and cannot threaten arrest for civil debt.","redFlags":["Debt-relief company requires payment of a fee before settling or reducing any debt","Loan offer guarantees approval regardless of credit history and requires an upfront fee","Credit repair company claims it can remove accurate negative items from your credit report","Debt collector threatens arrest or jail for an unpaid consumer debt","Collector demands immediate payment by wire or gift card and cannot provide written validation","Company promises to resolve all debts for 'pennies on the dollar' with a large upfront payment"],"whatToDoNow":["Dispute inaccurate credit information yourself for free at each credit bureau (Equifax, Experian, TransUnion)","Request written debt validation from any collector before paying; legitimate collectors must provide it","Contact a non-profit credit counseling agency (NFCC member agencies) for free or low-cost debt help","Never pay an upfront fee for a loan — legitimate loans deduct fees from proceeds","Report illegal debt collection tactics to the CFPB at consumerfinance.gov/complaint","Check the statute of limitations on any alleged old debt before paying anything"],"faq":[{"question":"Can a debt collector legally threaten to have me arrested?","answer":"No. Under the Fair Debt Collection Practices Act (FDCPA), it is illegal for a debt collector to threaten arrest for failing to pay a consumer debt. Consumer debts are civil matters, not criminal. If a collector threatens arrest, that is itself a violation of federal law that you can report to the CFPB."},{"question":"What is the difference between a debt-settlement company and a non-profit credit counselor?","answer":"Non-profit credit counseling agencies (accredited through NFCC) work with creditors to create manageable repayment plans for free or low cost, typically without damaging credit as severely as settlement. Debt-settlement companies charge significant fees, often worsen credit scores, and sometimes disappear with the payments made. Research any debt-help organization through the CFPB before engaging."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-online-shoppers","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-online-shoppers","question":"How do scammers target frequent online shoppers?","shortAnswer":"Online shoppers are targeted with fake storefronts, counterfeit product listings, non-delivery scams, and fake return portals because the frequency of purchases creates habits of quick action that scammers exploit.","explanation":"Frequent online shoppers have established behavioral habits: clicking buy with minimal friction, receiving multiple delivery notifications per week, and managing returns across several platforms. Scammers design their attacks to blend into these habits almost invisibly.\n\nFake online stores are sophisticated. They use stolen product photos, copied review text, and nearly correct brand names to mimic legitimate retailers. Social media advertising drives traffic to these sites before they can accumulate enough reports to be removed. Products ordered either never arrive, arrive as low-quality counterfeits, or arrive as entirely different items.\n\nDelivery notification phishing exploits the expectation of multiple packages. A text about a 'delivery issue' requiring fee payment or address confirmation looks unremarkable in a week when a shopper has five legitimate packages in transit. The link leads to a credential or payment harvesting site that mimics the carrier's portal.\n\nFake return portals appear in search results when shoppers search for return procedures for known retailers. These sites collect the product details and customer information provided during the 'return process' and in some cases charge a fabricated 'return processing fee.'","redFlags":["Online store reached through a social media ad has no verifiable physical address or contact information","Product price is 60-80% below established retail price with no clear explanation","Delivery notification asks you to pay a fee to release a package through a link in a text message","Return portal reached through a search result (not the retailer's direct website) asks for payment","Checkout only accepts wire transfer, cryptocurrency, or gift cards","No real customer service contact is available after a purchase"],"whatToDoNow":["Navigate directly to retailer websites rather than clicking links in ads or messages","Check the URL carefully before entering payment information: look for lookalike spellings","Pay by credit card when possible — it offers the strongest purchase-dispute protections","File a chargeback with your credit card issuer for items not received or significantly misrepresented","Report fake stores to the FTC, your state attorney general, and the platform that hosted the ad","Use your carrier's official app to track packages rather than clicking notification links"],"faq":[{"question":"Is it safe to buy from a store I found through a social media ad?","answer":"It can be, but social media ad platforms have variable vetting standards and fraudulent stores circulate frequently. Before buying from an unfamiliar store, check for an authentic returns policy and physical address, search the store name with 'reviews' or 'scam,' and look for the store on the Better Business Bureau. Pay by credit card for dispute protection."},{"question":"What is a brushing scam?","answer":"A brushing scam occurs when you receive a package you did not order. It typically means a seller used your address to post fake 'verified purchase' reviews on a marketplace. Your address may have been exposed in a data breach. Report unexpected packages to the marketplace and monitor your accounts for unauthorized activity."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-people-buying-their-first-home","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-people-buying-their-first-home","question":"How do scammers target first-time homebuyers?","shortAnswer":"First-time homebuyers face wire-fraud interception of closing funds, fake rental-to-own listings, title insurance scams, and mortgage-relief fraud because the transaction is large, unfamiliar, and involves extensive document exchange.","explanation":"Buying a home for the first time involves the largest financial transaction most people have made, managed through processes they have never navigated, with documents exchanged by email and wire transfers of tens of thousands of dollars. Every aspect of this combination is attractive to fraud.\n\nReal estate wire fraud is one of the fastest-growing financial crimes. A scammer monitors email communications between a buyer, real estate agent, title company, and lender (sometimes through a compromised email account), then sends a spoofed email from the title company with changed wire instructions just before closing. The buyer wires their down payment to a fraudster's account. Recovery is extremely difficult.\n\nFake real estate agents, title companies, and lenders operating in lookalike websites harvest both personal information and deposits from first-time buyers who do not know how to verify professional credentials. Fake inspection and repair requirements may be fabricated by corrupt third parties who split fees with a fraudulent agent.\n\nPost-closing, new homeowners receive realistic-looking notices offering deed monitoring, mortgage insurance, or tax exemption assistance for a fee. Many of these services are either free through the county recorder or entirely unnecessary. First-time buyers unfamiliar with what ownership entails may pay for services that have no value.","redFlags":["Last-minute email with changed wire transfer instructions for closing funds","Title company email domain is slightly different from all prior correspondence","Agent or lender cannot be verified on their state's license lookup website","Seller requires a large cash deposit directly before contract signing","Post-closing notice about mandatory deed registration or mortgage assistance with a fee","Inspection report reveals extensive issues only discovered after earnest money is non-refundable"],"whatToDoNow":["Verify wire instructions by calling your title company directly using a number you looked up independently","Confirm any last-minute change to wire instructions over the phone before sending funds","Verify real estate agent and loan officer licenses on your state's licensing board website","Be skeptical of any post-closing mail offering services for a fee before consulting your agent or attorney","Report wire fraud immediately to your bank and the FBI's IC3 within hours of discovery","Use a buyer's agent you found through referral rather than an agent who contacts you cold"],"faq":[{"question":"How can I verify wire instructions are really from my title company?","answer":"Always call the title company's main number — found on their official website, not in the email — to verbally confirm wire instructions before initiating any transfer. Do this for every closing, even if you have dealt with the company before, because email accounts can be compromised mid-transaction."},{"question":"What should I do if I wired closing funds to the wrong account?","answer":"Act immediately. Call your bank within minutes and say 'I need to recall a wire transfer I believe is fraudulent.' Then file a report with the FBI's IC3 (ic3.gov) and notify local law enforcement. Speed is critical: wire recalls have a brief window before funds are moved beyond recovery."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-people-after-natural-disasters","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-people-after-natural-disasters","question":"How do scammers target communities after natural disasters?","shortAnswer":"Disaster survivors face contractor fraud, fake charity solicitations, FEMA impersonation, and price gouging because urgent need, displacement, and information overload lower the defenses that normally filter out fraud.","explanation":"After a hurricane, wildfire, flood, or earthquake, communities face simultaneous infrastructure disruption, housing loss, and the emotional weight of loss. Scammers converge on disaster areas within hours, sometimes before official aid organizations. Their advantage is that the legitimate need for contractors, aid, and financial assistance is genuine and urgent.\n\nContractor fraud is the largest category. Door-to-door contractors offer immediate repairs for cash down payments, perform little or no work, and disappear. Unscrupulous operators demand cash before starting, use substandard materials, or significantly overbid for simple repairs in a market where competition has been reduced by the disaster.\n\nFake charity solicitations spike during widely covered disasters. Lookalike websites and social media fundraisers using disaster imagery collect donations that never reach survivors. During major events, the number of active charity solicitations can reach into the thousands within 48 hours.\n\nFEMA and government aid impersonation involves fraudsters who visit neighborhoods claiming to register residents for disaster assistance, collecting personal information that is used for identity theft. Real FEMA registration is done by the homeowner at DisasterAssistance.gov or by phone; FEMA representatives do not show up uninvited and ask for financial account information.","redFlags":["Contractor shows up uninvited offering repairs and demands cash upfront before starting","Charity website created recently using disaster-specific language and imagery","Person claiming to be a FEMA representative asks for bank account or Social Security information","Contractor refuses to provide a written contract, license number, or proof of insurance","Donation request arrives via social media from an unfamiliar account within hours of the disaster","Insurance claim adjuster shows up uninvited and pressures you to sign anything before you have read it"],"whatToDoNow":["Get at least three written quotes from licensed, insured contractors before signing any work agreement","Verify contractor licenses through your state contractor licensing board before paying anything","Register for FEMA assistance yourself at DisasterAssistance.gov or 1-800-621-3362","Donate only to established, registered charities verifiable through Charity Navigator or GuideStar","Do not sign any insurance document from an uninvited adjuster without consulting your own insurer first","Report contractor fraud to your state attorney general and the CSLB or equivalent licensing body"],"faq":[{"question":"How do I verify a contractor is legitimate after a disaster?","answer":"Check their license number on your state's contractor licensing board website, verify insurance by requesting a certificate directly from their insurer, check the BBB and online reviews, and get everything in writing before work begins. Legitimate contractors expect this scrutiny; scammers will pressure you to skip it."},{"question":"Are all charity fundraisers on social media after disasters fraudulent?","answer":"Not all, but many are. Established charities like the Red Cross, Salvation Army, and major community foundations run verified fundraisers. New accounts created after a specific disaster to raise money for that disaster specifically deserve extreme scrutiny. Confirm the organization's registration through your state's charity registry or Charity Navigator before donating."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-lgbtq-communities","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-lgbtq-communities","question":"How do scammers specifically target LGBTQ+ communities?","shortAnswer":"LGBTQ+ individuals face sextortion exploiting fear of outing, romance scams on LGBTQ+ dating apps, fake conversion therapy referrals, and discrimination-themed fraud because privacy concerns, community trust dynamics, and specific platform behaviors create targeted vulnerabilities.","explanation":"Sextortion against LGBTQ+ individuals — particularly those not fully out — carries an additional layer of threat beyond the usual. A scammer who obtains intimate images may threaten to out the victim to family, employers, or community members in addition to threatening public release of the content. This added dimension of harm gives the scammer significantly more leverage and makes victims less likely to report to authorities they fear may not be sympathetic.\n\nRomance and dating app scams are prevalent on platforms serving LGBTQ+ communities. Fake profiles mimicking community members establish trust quickly within what is perceived as a safer social environment. Once trust is established, the scam proceeds in the same pattern as general romance fraud, but the in-group credibility built up on a community platform accelerates emotional investment.\n\nHealthcare access scams target LGBTQ+ individuals seeking services that may be harder to find or more expensive, including gender-affirming care. Fake clinics or 'information services' charge fees for referrals to non-existent providers or collect insurance information for billing fraud.\n\nSocial engineering through community networks — LGBTQ+ Facebook groups, Discord servers, and community platforms — can be used to build false credibility before making fraudulent financial requests. Because community trust is higher, members may be less likely to scrutinize financial requests from community contacts than from strangers.","redFlags":["Romantic contact requests intimate photos and later threatens to expose your identity to others","Dating profile picture passes reverse search but the conversation quickly pivots to financial requests","Healthcare referral service charges a fee for connecting to a gender-affirming provider","Community group member requests funds for a community project with no verifiable organization","Link in a community forum claims to offer legal rights information but asks for personal data first","Person met through a community platform quickly suggests moving communication to a private payment app"],"whatToDoNow":["Never share intimate images digitally with someone you have not met in person","Report sextortion immediately to the FBI's IC3 (ic3.gov) — the agency handles these cases confidentially","Verify healthcare providers through official directories rather than community referrals alone","Apply the same financial skepticism to community contacts as to strangers","Report fake profiles on LGBTQ+ apps using the platform's built-in tool","Contact GLAAD, the Trevor Project, or local LGBTQ+ centers for trusted community resources"],"faq":[{"question":"Does reporting sextortion to the FBI risk outing me?","answer":"The FBI's IC3 handles reports with the same privacy standards as other federal reports. Reporting sextortion is a federal matter unrelated to your personal identity or relationships. Involving law enforcement can result in the perpetrator being stopped, protecting not just you but other victims. You can also contact NCMEC's CyberTipline anonymously."},{"question":"What should I do if someone on a dating app asks for money?","answer":"Any financial request from someone you have only met on a dating platform — regardless of the platform — is a strong indicator of romance fraud. Do not send money, gift cards, or cryptocurrency. End the conversation, report the profile using the app's report function, and report to the FTC if you believe a scam occurred."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-elderly-women-living-alone","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-elderly-women-living-alone","question":"How do scammers specifically target elderly women who live alone?","shortAnswer":"Older women living alone face intensified romance, grandparent, and caller-impersonation scams because loneliness, trust in social relationships, and the loss of a financial partner who might have provided a second opinion all combine to create heightened vulnerability.","explanation":"Women outlive men on average, meaning a significant portion of the oldest and most financially vulnerable seniors are women who have lost a spouse and now manage finances independently for the first time. Scammers recognize this demographic through obituaries, senior center records, and social media and design approaches that exploit the specific circumstances of this transition.\n\nRomance scams against older women follow the same general mechanics as other romance fraud but are often more sustained, with relationships built over months before any financial request. The scammer may position themselves as a late-life companion who understands the loneliness of widowhood, creating emotional bonds that make financial requests feel like helping a partner rather than paying a stranger.\n\nPhone-based authority impersonation — IRS, Medicare, Social Security, local sheriff — is more effective against older women living alone because there is no immediate family member present to provide reality checks. The absence of a second person to consult, and a social environment where defying authority was historically discouraged, both increase compliance.\n\nIn-person exploitation by service providers and new acquaintances is also documented: a handyman, gardener, or new 'friend' who earns trust through visits may escalate to requests for loans, gifts, or access to financial accounts. Isolation reduces the likelihood that anyone outside the relationship notices.","redFlags":["New online romantic interest who understands loss and provides intensive emotional support quickly","Caller knows the person's deceased spouse's name and uses it to establish credibility","New in-person acquaintance who assists with chores and gradually raises financial topics","Unexpected large withdrawal or wire transfer from the account of a widowed parent","Older family member becomes secretive about a new relationship or refuses to discuss finances","Multiple sweepstakes and lottery mailings arriving at a senior woman's address"],"whatToDoNow":["Maintain regular contact including conversations that naturally touch on finances and new relationships","Encourage the use of a trusted contact designation at all financial institutions","Install call-blocking apps and help set phone screening to require callers to identify themselves","Have an attorney prepare a durable power of attorney while the person has full legal capacity","Connect the person with a NCOA BenefitsCheckUp or senior center for verified social engagement","Report financial exploitation to Adult Protective Services and the FTC"],"faq":[{"question":"How do I raise the topic of scam risk with an older woman in my family without being patronizing?","answer":"Frame the conversation around specific examples rather than general capability concerns. 'I read about this Medicare scam that's targeting people in our area and wanted to share it with you' is more respectful than 'I'm worried you'll fall for something.' Sharing information treats the person as a partner, not a subject."},{"question":"What is the 'trusted contact' at a financial institution?","answer":"A trusted contact is someone the account holder designates who can be reached by the institution if it suspects exploitation or capacity issues — but who cannot access or transact on the account. It is a simple protective measure that takes minutes to set up and can provide an early warning signal for families."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-people-seeking-medical-treatment","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-people-seeking-medical-treatment","question":"How do scammers target people seeking medical treatment?","shortAnswer":"People seeking medical care face fake treatment providers, unproven cure scams, medical-billing fraud, and pharmaceutical counterfeiting because health anxiety, financial pressure from medical costs, and urgency undermine the normal skepticism people would apply to other purchases.","explanation":"A diagnosis of a serious illness, or the ongoing search for relief from a chronic condition, creates precisely the conditions scammers most want: a motivated buyer who cannot afford to miss a real solution, who may be researching outside mainstream channels, and who faces time pressure that discourages extended due diligence.\n\nFake or unproven treatments are advertised through health blogs, social media, and search advertising targeting condition-specific keywords. Products claiming to cure, reverse, or significantly treat conditions like cancer, Alzheimer's, diabetes, or chronic pain use testimonials, pseudo-scientific language, and carefully worded disclaimers to avoid regulatory action while still making implicit curative claims.\n\nMedical tourism fraud targets people seeking lower-cost procedures abroad. Fake clinic websites, misrepresented qualifications, and non-existent facilities collect deposits and leave patients without care. Even where facilities exist, credentials may be fabricated and follow-up care logistics misrepresented.\n\nBilling fraud harms patients directly through balance billing for services covered by insurance, surprise charges for out-of-network care not disclosed in advance, and phantom charges for procedures not performed. While not always criminal fraud in the traditional sense, these practices cause significant financial harm and patients have legal rights to dispute them.","redFlags":["Product or treatment claims to cure a serious condition not curable by conventional medicine","Medical clinic or provider found only through online ads or health forums, not verifiable in professional directories","Charge on your medical bill for a procedure or service you do not recognize","Medical tourism provider cannot provide verifiable facility accreditation and surgeon credentials","Supplement or device sold online claims FDA approval but cannot be verified on the FDA database","Healthcare provider requests payment outside normal billing channels or in cash only"],"whatToDoNow":["Verify any medical treatment claim with your physician or through peer-reviewed medical literature","Check FDA approval claims on the FDA's official database at accessdata.fda.gov","Request itemized medical bills and dispute any unrecognized charge with the billing department","Research medical tourism facilities through the Joint Commission International accreditation list","Report fraudulent health products to the FDA at MedWatch","Contact your state insurance commissioner if you suspect improper balance billing"],"faq":[{"question":"How can I tell if a health supplement is a scam?","answer":"Supplements are not required to prove effectiveness before sale in the U.S. Red flags include claims to cure or treat a specific disease, 'proprietary' ingredients that cannot be independently verified, celebrity or doctor endorsements that turn out to be fabricated, and prices significantly above similar products. The FDA's website lists supplements with warning letters and market alerts."},{"question":"What is surprise medical billing and how is it different from fraud?","answer":"Surprise billing occurs when a patient receives care at an in-network facility but is seen by an out-of-network provider (such as an anesthesiologist or radiologist) without prior disclosure. The No Surprises Act (effective 2022) limits what patients can be charged in most such situations. Disputes can be filed through your insurer or your state insurance commissioner."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-people-who-have-won-money","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-people-who-have-won-money","question":"How do scammers target people who have recently won a prize, lottery, or legal settlement?","shortAnswer":"People who receive large windfalls face investment fraud, tax impersonation, 'winner tax' scams, and predatory financial-services pitches because wealth in transition is more vulnerable than wealth that is already managed.","explanation":"News of a significant windfall — lottery winnings, a legal settlement, an inheritance, or prize money — rarely stays private. Court settlements appear in public records. Lottery wins are often announced publicly. Obituaries signal inheritance. Scammers monitor these sources and approach recent recipients quickly, before protective financial relationships are established.\n\nThe most common attack is the 'winner's curse' pattern: a person who has just received money is approached by multiple financial advisors, investment opportunities, and cause solicitations simultaneously. Under this pressure, poor decisions are made, unsuitable products are purchased, and fraudulent schemes receive funds that would not have been risked from savings.\n\nTax fraud targeting windfall recipients is specific. Fake IRS notifications claim that a large tax withholding is required before funds can be released, or that additional taxes are owed on an existing settlement. Real large-prize tax situations are genuinely complex, but the IRS communicates by mail and will not demand immediate electronic payment.\n\nFake prize notifications targeting people who have never won anything use a realistic variation of this psychology: a mailing or call says they have 'won' a secondary prize from a sweepstakes they may not remember entering, and a modest fee is required to release the prize. The fee is the scam.","redFlags":["Financial advisor contacts you very soon after a public announcement of your windfall","Tax authority calls demanding immediate payment before settlement or prize funds are released","Investment opportunity is presented as especially appropriate for someone in your new financial position","Prize notification requires an upfront tax or processing fee to claim winnings","Unknown charity or cause solicits a donation specifically mentioning your recent good fortune","Family member or acquaintance suddenly presents an urgent financial request after learning of the windfall"],"whatToDoNow":["Engage a fiduciary financial advisor and a CPA before making any major decision with windfall funds","Impose a 90-day pause on any large financial commitment after receiving a windfall","Consult a tax professional for your actual tax obligations rather than relying on unsolicited advice","Tell only a small number of trusted people about a windfall; avoid public announcements where possible","Verify any financial professional who contacts you through FINRA BrokerCheck before disclosing amounts","Report tax impersonation to the Treasury Inspector General for Tax Administration (TIGTA)"],"faq":[{"question":"Should I tell anyone about a lottery win or large settlement?","answer":"Minimizing disclosure protects you from unsolicited advisors, predatory relatives, and scammers. Before claiming a lottery prize, consult an attorney about anonymity options in your state, as some states allow trusts or LLCs to claim prizes. For legal settlements, non-disclosure provisions are common and protect both parties."},{"question":"What is the 'lottery curse' and is it avoidable?","answer":"The 'lottery curse' refers to the well-documented pattern of large windfall recipients losing the money within a few years, often through fraud, bad investments, and social predation. It is avoidable with preparation: establishing professional advisors immediately, imposing a decision pause, and limiting disclosures before those advisors are in place."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-high-net-worth-individuals","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-high-net-worth-individuals","question":"How do scammers target wealthy or high-net-worth individuals?","shortAnswer":"High-net-worth individuals face sophisticated investment fraud, business-email compromise, art and collectible fraud, and charity-exploitation schemes because larger available assets justify the significant effort and personalization scammers invest in each approach.","explanation":"Wealthy individuals are targeted differently from mass-market fraud: approaches are more personalized, take longer to develop, and are often executed through social networks rather than cold outreach. The goal is access to larger sums, and the investment in establishing credibility is proportional to the expected return.\n\nAffinity fraud exploits social and organizational networks. A scammer who gains entry to a professional association, golf club, alumni network, or charitable board uses the in-group credibility to pitch investment opportunities to members. Victims introduce the opportunity to their own networks, amplifying reach without additional effort by the scammer. Historical affinity frauds have targeted religious congregations, ethnic communities, and professional groups.\n\nBusiness email compromise at the personal level involves spoofing a financial advisor, attorney, or business partner to redirect a wire transfer or authorize a payment. Because high-net-worth individuals routinely transfer large sums, a single successful misdirection can yield six figures.\n\nArt, collectibles, and luxury goods fraud offers forgeries, misattributed works, or non-existent items through channels that appear legitimate: auction preview access, dealer networks, and estate sale access. Due diligence in art acquisition requires independent expert authentication — a step that is often skipped when transactions are embedded in trusted social contexts.","redFlags":["Investment opportunity introduced by a social contact rather than a registered financial professional","Returns promised significantly above market rates for the asset class described","Email from a trusted professional with changed payment or account details for a pending transaction","Art or collectible seller cannot provide full provenance documentation independently verified","Charitable foundation introduced through a social network asks for a large commitment quickly","New personal or business relationship rapidly escalates to significant financial involvement"],"whatToDoNow":["Verify all wire transfer instructions through an independent call to a known number before sending","Check any investment opportunity's registration with the SEC EDGAR or FINRA BrokerCheck","Require independent expert authentication for any significant art or collectible purchase","Engage a fiduciary financial advisor and a personal attorney to review any significant new investment","Report affinity fraud and investment fraud to the SEC at sec.gov/tcr","Use dedicated business email security protocols including SPF, DKIM, and DMARC to reduce BEC risk"],"faq":[{"question":"What is affinity fraud?","answer":"Affinity fraud is investment fraud that targets members of identifiable groups — religious communities, ethnic organizations, professional associations — using in-group trust to lower defenses. The fraudster often claims membership in the group or uses an existing trusted member as an unwitting introducer. The Bernie Madoff fraud is a well-known historical example of large-scale affinity fraud."},{"question":"How do I verify an investment manager's registration?","answer":"Investment advisers managing more than $110 million must register with the SEC (check IAPD at adviserinfo.sec.gov). Those below that threshold register with their state securities regulator. Broker-dealers and brokers are checked on FINRA BrokerCheck. Verify registration and any disciplinary history before providing any funds."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-people-going-through-foreclosure","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-people-going-through-foreclosure","question":"How do scammers target homeowners facing foreclosure?","shortAnswer":"Homeowners in foreclosure face loan-modification fraud, deed-theft schemes, and fake rescue companies because desperation to save a home creates willingness to trust anyone who offers a plausible solution.","explanation":"Foreclosure is one of the most financially and emotionally devastating experiences a family can face, and scammers know that desperation overrides the skepticism that normally protects against fraud. Homeowners are willing to pay significant fees and sign documents they may not fully read in pursuit of any solution that might save their home.\n\nLoan-modification fraud is the most common variant. A company charges upfront fees — sometimes several thousand dollars — to negotiate a mortgage modification with the lender. The modification either never happens or was something the homeowner could have negotiated directly with the lender for free through HUD-approved housing counselors.\n\nDeed theft is more severe: a scammer convinces a distressed homeowner to sign a document presented as a temporary loan or refinancing arrangement, which is actually a deed transfer. The scammer takes ownership of the property, sometimes renting it back to the original owner at above-market rates before eventually evicting them.\n\nLegitimate help is available. HUD-approved housing counselors provide free foreclosure counseling. State and federal mortgage assistance programs exist and can be accessed without a fee through official websites. Anyone charging upfront fees for services that are available for free is a red flag.","redFlags":["Company charges upfront fees before delivering any mortgage modification or foreclosure help","Advises you to stop communicating with your lender or mortgage servicer","Asks you to sign documents described as refinancing paperwork that you have not fully read","Guarantees stopping foreclosure or saving your home with no stated legal mechanism","Asks you to make mortgage payments to them rather than directly to the lender","Contact found through a flyer or door-hanger rather than a verified HUD referral"],"whatToDoNow":["Contact a HUD-approved housing counselor for free at 1-800-569-4287 or HUD.gov","Call your mortgage servicer directly; servicers have internal modification programs and obligations under federal law","Do not pay anyone upfront fees for foreclosure help before verifying they are HUD-approved","Read every document before signing; ask an attorney or counselor if anything is unclear","Report foreclosure fraud to your state attorney general and the CFPB","If you signed over a deed in error, consult a housing attorney immediately about your legal options"],"faq":[{"question":"Can foreclosure really be stopped through a modification?","answer":"Yes, in many cases. Lenders often prefer modification to foreclosure for economic reasons, and federal law requires servicers to evaluate eligible borrowers for alternatives before completing a foreclosure. HUD-approved counselors can help you understand what programs your servicer offers and how to apply — all at no cost to you."},{"question":"What is deed theft?","answer":"Deed theft is a form of real estate fraud in which a homeowner is tricked into signing over the title (ownership) of their home, often through documents misrepresented as refinancing or loan agreements. Once transferred, the scammer legally owns the property. Prevention requires reading all documents before signing and consulting an attorney for any transfer or refinancing paperwork."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-veterans","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-veterans","question":"How do scammers target military veterans?","shortAnswer":"Veterans are targeted with VA benefits claim fraud, pension poaching, fraudulent educational institutions, and investment pitches because VA benefits represent a reliable income stream and veterans may trust institutional authority and uniformed appearances more than average.","explanation":"Veterans have access to valuable benefits — VA healthcare, disability compensation, the GI Bill, home loan guarantees, pension — that represent a significant financial value. Each of these benefit streams has a corresponding fraud type: fake claims processors, pension management schemes, fake or substandard schools, and home loan predation.\n\nVA pension poaching is a sophisticated and harmful scheme. A financial advisor persuades a veteran or surviving spouse to transfer assets into an annuity or trust — often with high surrender charges — in a way that appears to make them eligible for the VA Aid and Attendance pension. The veteran loses access to their savings for years, and the financial product is often unsuitable for their needs.\n\nPredatory educational institutions have historically targeted veterans because the GI Bill represents guaranteed tuition revenue. Institutions with poor educational outcomes, high dropout rates, and exaggerated job placement claims recruit heavily on military bases. Veterans who leave with credentials of little labor-market value have lost their GI Bill entitlement permanently.\n\nThe VA provides accredited claims agents and veterans service organizations (VSOs) who assist with benefits claims for free. Any company charging fees to submit VA disability or pension claims is collecting payment for something that is legally available for free through official channels.","redFlags":["Company charges a fee to file a VA disability claim or appeal","Financial advisor recommends restructuring assets specifically to qualify for VA pension","For-profit school actively recruits veterans with claims of guaranteed job placement","Investment opportunity is presented as specifically beneficial for veterans or framed in military terminology","Person claiming to be a VA representative contacts you cold about your benefits","Agent takes a percentage of back-pay benefits for disability rating increases"],"whatToDoNow":["Use accredited VSOs (VFW, American Legion, DAV, PVA) for free claims assistance","Verify any financial advisor's credentials through FINRA BrokerCheck before discussing VA pension planning","Research schools using the VA's Comparison Tool at va.gov/gi-bill-comparison-tool before using GI Bill benefits","Report VA pension poaching to the VA Office of Inspector General at 1-800-488-8244","Check that any claims agent is accredited through the VA accreditation roster","Report fraudulent educational institutions to the VA and your state attorney general"],"faq":[{"question":"What is VA pension poaching?","answer":"VA pension poaching occurs when a financial advisor, typically unaccredited for VA work, convinces a veteran or surviving spouse to restructure their assets into financial products like annuities in order to appear eligible for the VA Aid and Attendance pension. The restructuring often benefits the advisor through commissions and harms the veteran through loss of asset access. The VA has published warnings about this practice."},{"question":"Are any legitimate companies allowed to charge for VA claims help?","answer":"VA-accredited attorneys and claims agents may charge fees for appeal work after an initial claim is denied (past the initial decision point). For initial claims and many appeals, accredited VSOs provide free assistance. Anyone charging fees for an initial claim submission is acting outside VA regulations."}],"lastReviewed":"2026-06-10"},{"slug":"protecting-teenager-from-online-scams","url":"https://scamencyclopedia.org/questions/protecting-teenager-from-online-scams","question":"How do I protect a teenager from online scams?","shortAnswer":"Protecting teenagers means building scam literacy through specific examples, creating a trust relationship where they will report problems without shame, and establishing simple account-level controls that reduce financial exposure while preserving independence.","explanation":"Teenagers are confident digital natives but paradoxically face some of the highest social media scam risk because their online activity is extensive, their social environments are new and changeable, and their life stage involves rapidly accepting new contacts and seeking peer validation. These conditions are ideal for scammers.\n\nSocial media giveaway scams, fake brand sponsorships, investment and crypto promises, gaming item fraud, and romance-adjacent sextortion are the most common scam types affecting teenagers. Each exploits something specific to adolescent social life: the desire for recognition, money for independence, gaming advantages, or romantic connection.\n\nSextortion of teenagers is particularly severe in both harm and underreporting. A teenager who shares intimate content — or is manipulated into it — may be threatened with exposure to parents, school, or the wider social network. The shame and fear of consequences prevent many from reporting, allowing the extortion to continue. Establishing in advance that you will respond without punishment if your teenager brings this to you is one of the most important protective conversations a parent can have.\n\nAge-appropriate financial controls — spending limits on debit cards, parental visibility on transactions, and explicit conversations about how to verify before buying — are practical and respectful. Framing scam education as 'here are tricks designed to make smart people fall for them' rather than 'don't be naive' preserves a teenager's sense of competence.","redFlags":["Teenager is secretive about a new online relationship or online financial activity","Game account or social media account is suddenly inaccessible","Unexpected charges on a shared payment method or gift card purchases","Teenager seems distressed after receiving messages on a device","Friend or peer has introduced them to an investment or money-making opportunity","Someone has offered to pay them for social media posts or account access"],"whatToDoNow":["Have specific conversations about the top scams targeting teens using real examples, not lectures","Establish explicitly that they can tell you about sextortion or financial mistakes without punishment","Set a daily spending limit on any debit card your teenager uses","Enable transaction notifications on any payment method accessible to the teenager","Teach the rule: never buy anything online without a parent or trusted adult's quick review first","Report sextortion to the National Center for Missing and Exploited Children (NCMEC) at cybertipline.org"],"faq":[{"question":"What is teen sextortion and how common is it?","answer":"Teen sextortion involves someone soliciting intimate images from a minor and then threatening to share them unless money or more images are provided. Reports to NCMEC have increased significantly in recent years. It is underreported because of shame. The FBI and NCMEC both have resources specifically for teenagers and parents facing this situation."},{"question":"How should I talk to a teenager about scams without sounding preachy?","answer":"Use specific recent examples from the news, share stories about how adults fall for the same scams, and frame detection as a skill rather than obvious common sense. Acknowledging that scammers are professionals who study psychology makes the topic less about gullibility and more about recognizing tactics, which most teenagers find genuinely interesting."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-people-with-bad-credit","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-people-with-bad-credit","question":"How do scammers target people with bad credit?","shortAnswer":"People with poor credit face guaranteed-approval loan fraud, credit-repair scams, fake secured cards, and predatory rent-to-own arrangements because limited access to mainstream financial products creates demand that scammers exploit with too-good-to-be-true offers.","explanation":"A poor credit score closes doors to conventional credit, creating a market of people who will accept less favorable terms and exercise less scrutiny about lender legitimacy. Scammers position themselves in this gap with offers that mimic the structure of real products — guaranteed approval loans, secured cards, credit-building programs — without delivering them.\n\nThe advance-fee loan is the most common variant: a lender guarantees approval regardless of credit history but requires an upfront fee for 'insurance,' 'processing,' or 'collateral.' After the fee is paid, the loan never materializes. A person with bad credit who desperately needs funds is left worse off than before.\n\nCredit-repair scams promise to 'clean' a credit report, sometimes by creating a new credit identity through a different SSN (a practice called CPN fraud that is itself illegal). While real negative items cannot be removed until they expire under law, scammers charge significant fees claiming otherwise.\n\nLegitimate options for people building credit are limited but real: secured credit cards from FDIC-insured banks, credit-builder loans from credit unions, and authorized-user status on a family member's account. Non-profit credit counseling agencies help people understand and improve their scores for free. None of these require upfront fees paid before services are rendered.","redFlags":["Loan guarantees approval regardless of credit history with no income or identity verification","Lender requires a fee before disbursing any loan funds","Credit repair company promises to remove accurate negative items from your report","Company offers a 'new credit identity' or 'second chance' SSN or credit profile","Secured card requires a large upfront fee paid to the card company before activation","Lender asks for payment by gift card, wire transfer, or cryptocurrency"],"whatToDoNow":["Obtain your free credit reports at AnnualCreditReport.com and dispute any inaccurate items for free","Research secured cards from FDIC-insured banks; legitimate ones report to credit bureaus without large upfront fees","Contact an NFCC member non-profit credit counselor at nfcc.org for free guidance","Never pay a fee for a loan before receiving it; legitimate fees are deducted from proceeds","Report advance-fee loan fraud to the FTC at reportfraud.ftc.gov","Avoid CPN fraud (using a fake SSN) — it is a federal crime regardless of who suggested it"],"faq":[{"question":"Is it legal for a credit repair company to dispute items on my behalf?","answer":"Yes, but they cannot legally do anything you cannot do yourself for free. The Credit Repair Organizations Act (CROA) requires credit repair companies to give you a disclosure of your rights before charging anything. Beware of companies that charge large upfront fees; the FTC has taken action against many credit repair scams."},{"question":"What is a CPN and why is it illegal?","answer":"A Credit Privacy Number (CPN) is presented by scammers as a legal alternative to your SSN for credit purposes. In reality, there is no such legal instrument. Using a number other than your SSN on a credit application is federal fraud. People who use CPNs are victimized twice: first by the scammer who sold them the number, then potentially by federal prosecution."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-people-learning-to-invest","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-people-learning-to-invest","question":"How do scammers target people who are learning to invest for the first time?","shortAnswer":"Beginning investors are targeted with pump-and-dump stock promotions, fake trading courses, copy-trading platforms, and MLM investment schemes because they are building knowledge in public channels where scammers are positioned to intercept them.","explanation":"The modern learning journey for investing runs through YouTube, Reddit, TikTok, Instagram, and Discord — all platforms with poor signal-to-noise ratios and where financial fraud is difficult for platform moderators to detect. A new investor searching for advice is likely to encounter paid promoters, coordinated manipulation, and outright fraud as frequently as legitimate educational content.\n\nPump-and-dump schemes have migrated from classic email blasts to coordinated social media campaigns. A group buys a low-liquidity stock or token cheaply, drives the price up through coordinated buy signals on social platforms, then sells to new investors who saw the price rising. The people who bought late hold a rapidly depreciating asset while promoters have already exited.\n\nFake trading courses and mentorship programs charge hundreds or thousands of dollars for educational content that is freely available, accompanied by fabricated trading records that show the instructor's spectacular returns. The business model is selling courses, not trading — a fact that is rarely disclosed honestly.\n\nCopy-trading platforms allow beginners to mirror the trades of 'expert' traders. Some platforms are legitimate; many are scams in which the 'expert' traders are fabricated identities, returns are manipulated, and withdrawals are blocked when users try to take profit.","redFlags":["Social media personality shows extreme returns from trading and sells a course or signal service","Group on Discord or Telegram provides 'exclusive' stock or crypto buy signals for a fee","Trading platform was introduced by a social contact rather than found through independent research","Investment course shows account screenshots as proof of returns but has no independently verifiable track record","Copy-trading platform makes withdrawals difficult or requires additional deposits to unlock profits","Anyone promising consistent above-market returns without explaining the mechanism or risk"],"whatToDoNow":["Learn investing through established, free resources: SEC Investor.gov, FINRA investor education, public library resources","Verify any investment course instructor's claimed trading record through independently verified brokerage statements","Check any platform's registration with FINRA or the SEC before depositing money","Be skeptical of any investment community that has a financial product to sell alongside 'education'","Start with small amounts in regulated accounts while learning, regardless of social media pressure","Report pump-and-dump schemes to the SEC at sec.gov/tcr"],"faq":[{"question":"Are all stock-picking newsletters and signals services scams?","answer":"Not all, but many operate on the edge of legality. The SEC requires anyone providing personalized investment advice for compensation to be a registered investment adviser. Free newsletters sharing general opinion are different from paid services providing trade signals. Check any paid service against SEC and FINRA registration before subscribing."},{"question":"Is investing through social media recommendations ever safe?","answer":"Social media can surface genuine information but cannot be trusted as a primary investment research source. Coordinated manipulation (paid promotion, pump groups) is widespread, and most retail investors on social media underperform the market. Use social media to surface ideas, then verify through independent research and regulated data sources before acting."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-people-in-recovery-from-addiction","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-people-in-recovery-from-addiction","question":"How do scammers target people in recovery from addiction?","shortAnswer":"People in recovery face fake rehabilitation center referrals, sober-living house fraud, insurance billing fraud, and exploitative 'patient brokering' because their vulnerability, limited support networks, and urgent need for treatment make them easy to manipulate.","explanation":"People seeking or in early recovery from addiction are among the most vulnerable targets in healthcare fraud because they are in crisis, their cognitive function may be affected, their social networks are disrupted, and they have a genuinely difficult time distinguishing legitimate treatment options from predatory ones in a fragmented treatment landscape.\n\nPatient brokering is a form of fraud where individuals receive kickbacks for recruiting people with addiction into specific treatment facilities, regardless of clinical suitability. In some states this practice is illegal; in others it falls in legal gray areas. The result is that people in crisis are steered toward facilities based on the financial benefit to the recruiter, not the clinical needs of the patient.\n\nFake or fraudulent sober-living houses collect rent from recovering individuals but provide no structured support, may be located in unsafe environments, and may actively facilitate relapse by allowing drug use on the premises. Some target individuals whose insurance or Medicaid will cover the cost, billing for services never provided.\n\nHealthcare billing fraud against people in recovery is pervasive. Facilities and laboratories bill insurance for unnecessary or fabricated tests, use samples from multiple patients interchangeably, or bill for treatment sessions that never occurred. These practices drive up insurance costs and can exhaust a patient's treatment benefits before legitimate care is received.","redFlags":["Treatment center recruiter found you at an AA meeting, online forum, or homeless shelter and offers incentives","Facility offers to pay for travel, food, or other benefits in exchange for attending their program","Sober-living house requires signing over benefits or insurance cards as a condition of residency","Treatment provider is unable to provide state licensure and accreditation information","Insurance is billed for frequent urine testing, genetic tests, or psychiatric evaluations you did not receive","Recovery program pressure to leave and transfer to a different facility after insurance coverage runs out"],"whatToDoNow":["Find accredited treatment through SAMHSA's National Helpline at 1-800-662-4357 (free, confidential)","Verify any treatment facility's state license and accreditation through your state behavioral health authority","Review all insurance explanation-of-benefits statements and report any service you did not receive","Contact your state attorney general if you suspect patient brokering or insurance billing fraud","Report healthcare fraud to the HHS Office of Inspector General at 1-800-HHS-TIPS","Involve a trusted family member or sponsor in evaluating any new treatment arrangement"],"faq":[{"question":"What is patient brokering?","answer":"Patient brokering is the practice of paying or receiving compensation for referring people to addiction treatment facilities. It is illegal in many states under patient brokering statutes and federal anti-kickback laws. It results in patients being placed in facilities based on who pays the most for referrals rather than which facility is best suited to the patient's needs."},{"question":"How do I report a sober-living house that seems fraudulent?","answer":"Report to your state's behavioral health licensing authority, which oversees sober-living and residential treatment facilities. If insurance fraud is involved, contact your insurer's fraud hotline and the HHS OIG. If criminal activity is occurring at the property, local law enforcement is the first contact."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-international-students","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-international-students","question":"How do scammers target international students studying abroad?","shortAnswer":"International students face visa-status threats, fake housing listings, banking and money-transfer fraud, and diploma mills because their immigration status is tied to their enrollment and unfamiliarity with local financial systems creates multiple entry points for exploitation.","explanation":"International students are in a uniquely exposed position: they are far from home and family support networks, their immigration status depends on maintaining enrollment and other conditions, they are unfamiliar with local consumer protection norms, and they manage significant money transfers across borders. Each of these factors is a separately exploitable vulnerability.\n\nVisa-status impersonation is highly effective. A caller claiming to be from USCIS, ICE, or the student's sponsoring institution threatens that the student's visa has been compromised due to a tax error, financial irregularity, or policy violation, and demands immediate payment to avoid deportation. The combination of bureaucratic complexity and status fear causes many students to comply.\n\nInternational housing scams target students searching for accommodation before arriving in a new country. Fake listings collected through platforms or social media collect security deposits from students who have not yet arrived and cannot verify properties. The student arrives to find no apartment and no recourse.\n\nMoney transfer and banking fraud affects students receiving funds from family abroad. Fake money transfer services offer attractive rates but steal the funds. Scammers also target the sending family with phishing communications claiming the student is in distress and needs emergency funds transferred through unofficial channels.","redFlags":["Call or email threatening immigration status unless a payment is made immediately","Housing listing available only through messaging apps with no lease agreement and deposit required before viewing","Money transfer service offering rates significantly better than established providers","Financial communication from an institutional email address that does not match the official university domain","Request to transfer emergency funds directly to an individual rather than through official university financial aid","Scholarship or stipend requiring repayment of a 'processing fee' before funds are released"],"whatToDoNow":["Contact your university's international student office immediately about any immigration threat","Use university-approved housing resources or view properties via live video before paying any deposit","Use established money transfer services (bank wire, licensed providers) rather than unknown platforms","Verify all financial communications by contacting the university directly through its official website","Report visa-status threats to USCIS and to the FTC at reportfraud.ftc.gov","Connect with your international student community for peer-shared knowledge about local scam types"],"faq":[{"question":"Can USCIS call me to threaten deportation?","answer":"No. USCIS communicates primarily by mail. Phone calls threatening immediate deportation unless you pay are always scams. If you receive such a call, hang up and contact your international student office or call USCIS directly at 1-800-375-5283."},{"question":"What should I do if I sent money to a housing scammer before arriving at my university?","answer":"Report the transaction to your bank or the payment platform immediately and request a recall if possible. Contact your university's international student office — many have emergency housing assistance for exactly this situation. Report the scam to the FTC and, if the platform was used, to the platform's trust-and-safety team."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-people-adopting-pets","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-people-adopting-pets","question":"How do scammers target people looking to adopt or buy a pet?","shortAnswer":"Pet seekers face fake online pet listings where a 'puppy' never exists, fraudulent shipping-fee escalations, and breed-specific scam websites because the emotional attachment formed before a purchase is complete makes buyers reluctant to abandon the transaction.","explanation":"Pet scams follow a consistent pattern: an appealing photo of a puppy, kitten, or exotic animal appears on a classified site or social media, priced below market. The 'seller' — often operating from overseas — communicates warmly and builds emotional connection around the animal. After a deposit is paid, escalating fees are demanded: shipping, insurance, veterinary clearance, a special travel crate. The animal never arrives.\n\nThe emotional mechanics of pet buying make this fraud especially effective. By the time a buyer has paid the deposit, they have named the animal, told their children, and mentally incorporated the pet into their family. Walking away means grieving a loss that feels real even though the animal never existed. Scammers leverage this sunk-cost psychology to extract multiple payments.\n\nFraudulent pet shipping companies are a parallel scam industry that feeds off the primary fraud: after the 'seller' creates a transportation need, a fake 'licensed pet transport' company charges for crates, insurance, and veterinary inspection, all while the animal still does not exist.\n\nLegitimate shelters, rescues, and responsible breeders follow consistent practices: they want to know your living situation, ask about your experience with the breed, allow and encourage in-person visits, and do not accept only wire transfers or Venmo. The experience of a legitimate adoption or purchase involves more scrutiny of the buyer, not less.","redFlags":["Seller is in a different state or country and offers to ship the pet after a deposit","Photos of the pet return results from other websites or appear in multiple listings","Price is well below breed average for a supposedly pedigreed animal","After initial payment, additional shipping or insurance fees are requested","Seller communicates only via email or messaging apps and deflects video calls showing the animal","Payment is required by wire transfer, gift card, or cryptocurrency only"],"whatToDoNow":["Visit any animal in person, or at minimum on a live video call with the animal visible and identifiable","Reverse image search every pet photo before sending any money","Adopt from local shelters or contact breed-specific rescues verified through PetFinder","Verify breeders through their breed's national club registry before purchasing","Never send money via wire transfer, gift card, or cryptocurrency for a pet purchase","Report pet scam listings to the FTC, IC3, and the platform hosting the listing"],"faq":[{"question":"Why do pet scammers always need to ship the animal?","answer":"The shipping narrative removes the need for an in-person verification that would immediately expose the scam. Once a buyer accepts the premise that the animal cannot be seen in person, they have removed the most effective fraud-detection step. Legitimate sellers encourage visits; scammers create reasons why visits are impossible."},{"question":"Is buying a pet online ever safe?","answer":"Local adoption from a shelter or meeting a breeder in person is always the safest option. If distance is truly unavoidable, research the breeder through their breed's national club, request live video with the animal shown next to a current newspaper or timestamped item, and use a payment method with fraud protection rather than wire or gift card."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-scammers-target-people-who-have-been-scammed-before","url":"https://scamencyclopedia.org/questions/how-do-scammers-target-people-who-have-been-scammed-before","question":"How do scammers re-target people who have already been victimized?","shortAnswer":"Scam victims are actively re-targeted through recovery scams because their details circulate on criminal networks, and because the desire to recover losses creates a new form of exploitable desperation.","explanation":"When someone falls for a scam, their details — name, contact information, the type of scam they responded to, and the amount lost — are often shared or sold within criminal networks as a 'sucker list.' This list is valuable because the individual has already demonstrated willingness to engage with the type of offer that caught them, and because the emotional need to recover losses creates a fresh vulnerability.\n\nRecovery scams are the most direct form of re-targeting. Someone contacts a known fraud victim claiming to be from a government agency, law firm, or consumer-protection organization that has identified the scammer and recovered the victim's funds. All the victim needs to do is pay a processing fee, provide their bank details, or hire the 'recovery lawyer' to receive the money. This is itself a scam layered on the original one.\n\nCryptocurrency recovery scams have grown significantly as crypto fraud losses have increased. Companies offer blockchain 'tracing' services and promise to recover stolen crypto for an upfront fee. While legitimate blockchain forensics exists in the law-enforcement context, private companies charging upfront fees to retail victims of crypto fraud are overwhelmingly fraudulent.\n\nThe psychological impact of being scammed twice can be severe and often silences victims entirely — they stop reporting and stop seeking help, which is exactly what criminal networks want. Understanding that re-targeting is a predictable, structural feature of criminal fraud networks (not a reflection of exceptional naivety) can help victims maintain the willingness to seek legitimate help.","redFlags":["Someone contacts you specifically about money you lost in a previous scam you never reported publicly","Recovery service requires an upfront fee to retrieve your funds","'Government agency' or law firm says your case has been resolved and funds are ready pending a payment","Crypto recovery company offers to trace and return stolen cryptocurrency for a percentage fee paid upfront","Unknown contact knows details of your previous scam that you did not share publicly","Recovery offer arrives very soon after you reported the original fraud to a government agency"],"whatToDoNow":["Do not pay any upfront fee to any recovery service regardless of how official it appears","Legitimate government fund recovery does not require payment from victims — report free of charge to the FTC","Report re-targeting attempts to the FTC as a new, separate fraud","Consult your state attorney general or a genuine non-profit consumer protection organization","Be especially cautious of any contact that references the original scam by name or amount","Speak with a licensed attorney about civil options if the original fraud was large"],"faq":[{"question":"Can the government actually recover money lost to scams?","answer":"In some cases law enforcement does recover and distribute money to victims, but this is rare, takes years, and is handled entirely by government agencies at no cost to victims. The FTC's Consumer Sentinel and the DOJ both have victim compensation programs for specific enforcement actions. These are announced publicly and do not involve cold outreach asking victims for payment."},{"question":"What should I do if I already paid a recovery scammer?","answer":"Report it to the FTC at reportfraud.ftc.gov as a separate incident. Contact your bank immediately if any payment can be recalled. Document everything. You are not alone — recovery fraud is one of the most widely reported follow-on scam types and law enforcement is aware of this pattern."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-pig-butchering-scam","url":"https://scamencyclopedia.org/questions/what-is-pig-butchering-scam","question":"What is a pig butchering scam?","shortAnswer":"A pig butchering scam is a long-con fraud where criminals build a fake romantic or friendly relationship with a victim over weeks or months, then lure them into a fraudulent cryptocurrency investment platform before draining all their money.","explanation":"The name comes from the practice of fattening a pig before slaughter. Scammers invest significant time cultivating trust, often through social media, dating apps, or a seemingly accidental wrong-number text. They present themselves as successful, charming professionals and gradually introduce the idea of a profitable investment opportunity.\n\nOnce trust is established, the victim is introduced to a fake crypto trading platform that appears to show real-time profits. Early small withdrawals are often permitted to build confidence. Victims are encouraged to invest more and recruit others. When they attempt a large withdrawal, they face fabricated \"tax\" or \"fee\" requirements and eventually lose everything.\n\nPig butchering operations are frequently run by organised crime networks, sometimes using trafficked workers in Southeast Asia who are forced to conduct the fraud. The victim loses money and also experiences profound emotional betrayal, since the relationship itself was a fabrication from the start.\n\nRecovery is extremely rare because funds are moved quickly through cryptocurrency wallets across multiple jurisdictions. The best protection is being sceptical of anyone online who pivots a personal relationship toward investment advice.","redFlags":["A stranger contacts you via wrong number, social media, or dating app and quickly becomes warm and attentive","The new contact mentions unusually high crypto or forex investment returns","They introduce a trading platform not listed on any regulated exchange","Early small withdrawals succeed, then larger ones are blocked by 'fees' or 'taxes'","You are asked to recruit friends or family to the same platform","The relationship accelerates unnaturally fast with professions of affection or friendship"],"whatToDoNow":["Stop all transfers immediately and do not pay any additional 'fees' — they will not unlock your funds","Screenshot and preserve all chat logs, transaction records, and platform URLs","Report to your national fraud authority and the platform where initial contact was made","Report to the FBI IC3 (US), Report Fraud (UK, formerly Action Fraud), or your regional equivalent","Contact your bank or payment provider about any fiat transfers made","Reach out to a victim support organisation — the emotional trauma is real and help is available"],"faq":[{"question":"Can I get my money back from a pig butchering scam?","answer":"Recovery is very difficult because funds are moved rapidly through cryptocurrency. Fiat transfers from bank accounts have a better chance if reported quickly. Contact your bank immediately and file a police report — some jurisdictions have victim restitution funds."},{"question":"Are the people I was talking to real?","answer":"Often the 'persona' is entirely fabricated — a mix of stolen photos and a scripted character. In some cases, the actual typist may themselves be a trafficking victim forced to run the scam, adding a layer of complexity to the situation."},{"question":"How long do these scams usually run before the victim loses money?","answer":"Campaigns typically run one to six months. Scammers are patient because larger investments yield larger payouts. The longest-running cases have continued for over a year before the final 'slaughter'."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-sextortion","url":"https://scamencyclopedia.org/questions/what-is-sextortion","question":"What is sextortion?","shortAnswer":"Sextortion is a form of online blackmail where a criminal threatens to share intimate images or videos of a victim unless they pay money or provide more images. The images may be real, stolen, or AI-generated.","explanation":"Sextortion follows two main patterns. In the first, a scammer builds an online relationship and persuades the victim to share intimate images. They then immediately threaten to send those images to the victim's contacts unless a payment is made. In the second pattern, criminals claim to have hacked the victim's webcam or device and demand payment to stay silent — usually a bluff backed up by a genuine leaked password from old data breaches to add credibility.\n\nA rapidly growing variant targets teenagers and young men through fake dating profiles. A 'match' on a social platform quickly escalates to exchanging explicit images. Within minutes the scammer reveals their extortion demand. These campaigns can be industrialised, running hundreds of targets simultaneously.\n\nAI tools have added a new dimension: deepfake sextortion, where criminals use publicly available photos to fabricate explicit images and then threaten the victim. No real intimate image needs to exist for the threat to feel devastating.\n\nCritically, paying rarely ends the problem — it signals willingness to pay again. The best response is to stop contact, preserve evidence, and report to authorities. Most platforms have emergency image removal tools and victim support pathways.","redFlags":["A new online contact pushes quickly toward exchanging intimate images","You receive a message claiming someone has hacked your webcam with a password you recognise","After sharing an image, the sender immediately pivots to demanding payment","The demand is for gift cards, cryptocurrency, or wire transfer rather than traceable payment","Threats to expose you to your employer, family, or school friends","Pressure to respond within hours or minutes to create panic"],"whatToDoNow":["Do not pay — payment confirms you are a viable target and rarely ends the extortion","Stop responding to the scammer immediately","Screenshot all messages before blocking","Report to the platform where contact occurred — most have emergency tools for removing content","File a report with local police and the national cybercrime authority","Contact the Cyber Civil Rights Initiative or a similar victim support organisation for guidance","Tell a trusted adult if you are a minor — this is especially important for teen victims"],"faq":[{"question":"What if the scammer actually has one of my images?","answer":"Report to the platform and use tools like StopNCII.org to create a hash of any image to prevent its spread across participating platforms. File a police report. In many countries, non-consensual sharing of intimate images is a criminal offence."},{"question":"Are webcam hack threats usually real?","answer":"The vast majority are bluffs. Scammers purchase leaked password lists and include a real password to make the threat feel credible. If you have not engaged in any activity on the device they claim to have recorded, it is almost certainly a bluff. Change the displayed password as a precaution."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-grandparent-scam","url":"https://scamencyclopedia.org/questions/what-is-a-grandparent-scam","question":"What is a grandparent scam?","shortAnswer":"A grandparent scam is a phone or messaging fraud targeting older adults, where a caller pretends to be a grandchild in urgent distress — arrested, hospitalised, or stranded abroad — and begs the target to send money secretly and quickly.","explanation":"The caller typically opens with something vague like 'Grandma, it's me!' allowing the target to fill in a name themselves. The scammer then confirms that name and builds on it. A second 'official' — a fake lawyer, bail bondsman, or police officer — often takes over the call to add authority and urgency.\n\nVictims are told to keep the situation secret from other family members, which prevents them from making a quick verification call. They are instructed to withdraw cash and hand it to a courier, purchase gift cards and read out the codes, or wire money to an overseas account.\n\nAI voice-cloning technology has made this scam far more convincing. Criminals can clone a real grandchild's voice from a short social media clip and use it to open the call, making the emotional pull almost overwhelming.\n\nThe scam exploits love, fear, and a natural instinct to protect family. The best defence is a family codeword or a simple rule: always hang up and call the family member directly on a known number before sending any money.","redFlags":["A caller uses vague 'it's me' language and lets you name them","An urgent scenario — arrest, accident, hospitalisation — that requires immediate secret money","You are told not to tell other family members 'to avoid embarrassment'","A second caller claims to be a lawyer, bail official, or law enforcement","Payment is requested via cash courier, gift cards, or wire transfer","Extreme pressure to act within the hour"],"whatToDoNow":["Hang up and call your grandchild or their parent directly on a number you already have","Do not send money before verifying — a real emergency can wait 10 minutes for a verification call","Agree on a family codeword for future emergencies","If you already sent money, contact your bank immediately and report to local police","Report the call to the FTC (US) or your national fraud authority"],"faq":[{"question":"Why do grandparent scams so often succeed?","answer":"They exploit a powerful combination: genuine love for a grandchild, sudden fear for their safety, and social engineering tactics (the secrecy instruction, fake authority figures) that short-circuit normal caution. The urgency deliberately prevents calm thinking."},{"question":"Can AI voice cloning make the call sound exactly like my grandchild?","answer":"Modern voice-cloning tools can produce convincing replicas from just a few seconds of audio taken from public social media. The quality varies but can be persuasive enough on a phone call. A family codeword remains the most reliable defence."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-quishing","url":"https://scamencyclopedia.org/questions/what-is-quishing","question":"What is quishing?","shortAnswer":"Quishing is phishing delivered through a QR code. Victims scan a malicious QR code that redirects them to a fake website designed to steal login credentials, financial details, or install malware on their device.","explanation":"Traditional email security filters scan URLs in the body of an email, but a QR code is just an image — the embedded link is invisible to most automated scanners. Criminals exploit this gap by embedding malicious URLs in QR codes attached to phishing emails, fake parking notices, restaurant table stickers placed over legitimate ones, or even printed flyers left in public spaces.\n\nWhen the victim scans the code with their phone, they are taken to a convincing replica of a bank, parcel delivery service, government portal, or corporate login page. Because the deceptive URL is in the phone's browser rather than a desktop email client, users may be less alert to it.\n\nSome quishing campaigns specifically target employees to harvest corporate credentials. Attackers send emails purportedly from IT departments instructing staff to scan a QR code to re-authenticate or enrol in multi-factor authentication. The irony of using a fake security step to bypass security is intentional.\n\nBefore scanning any QR code in an unexpected context, consider whether you requested or expected that code, and preview the URL your device shows before visiting it.","redFlags":["An unsolicited email, text, or letter containing a QR code asking you to log in or verify details","A QR code sticker placed over or next to an existing legitimate one in a public place","The destination URL looks similar but not identical to the legitimate service (e.g. extra characters or different domain)","A sense of urgency — 'scan within 24 hours to avoid account suspension'","Corporate emails asking you to scan a QR code to complete a security or IT action"],"whatToDoNow":["Preview the URL before tapping — most phone cameras and QR apps show the destination link first","If you have already scanned and entered details, change your password and enable MFA immediately","Report the suspicious message to your IT security team if it arrived at work","Forward phishing emails with QR codes to your national anti-phishing reporting address","Alert your bank if you entered any financial credentials"],"faq":[{"question":"Is it safe to scan QR codes in restaurants or shops?","answer":"Usually yes, but check whether a sticker has been placed over the original. Legitimate venue QR codes take you to a menu or ordering page — they should never ask for login credentials or payment details through an unfamiliar site."},{"question":"Why do security filters miss quishing attacks?","answer":"Email security tools primarily scan text-based URLs. A QR code is treated as an image attachment, so the embedded malicious link is not inspected. Some advanced tools now decode QR images in emails, but adoption is not yet universal."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-sim-swapping","url":"https://scamencyclopedia.org/questions/what-is-sim-swapping","question":"What is SIM swapping?","shortAnswer":"SIM swapping is a type of account takeover where a fraudster convinces your mobile carrier to transfer your phone number to a SIM card they control, giving them access to all SMS-based two-factor authentication codes sent to your number.","explanation":"Your phone number has become a master key for online security. When you forget a password, your bank texts you. When you log in to email, a code goes to your phone. SIM swapping hijacks that key by exploiting the process carriers use to move a number to a new SIM — for example, when you get a new phone.\n\nAttackers gather personal information about you from data breaches, social media, or phishing. Armed with enough of your details, they call your carrier and impersonate you, claiming to have a new SIM and needing the number ported. Some attacks involve bribing or socially engineering carrier store employees. Once the swap goes through, your phone loses signal and the attacker starts receiving your calls and texts.\n\nWithin minutes they can reset passwords on your email, then your bank accounts, crypto wallets, and anything else linked to that number. The attack window before detection can be small but the damage enormous.\n\nProtecting yourself means reducing your reliance on SMS-based 2FA. Switch to authenticator apps (like Google Authenticator or Authy) or hardware security keys for critical accounts. Also set a PIN or passcode with your mobile carrier that must be provided before any SIM change.","redFlags":["Your phone suddenly loses all signal or shows 'No Service' unexpectedly","You can no longer make or receive calls or texts","You receive emails about account changes or password resets you did not initiate","Your carrier account shows a recent SIM change you did not authorise","Login alerts appear for services you use, from unfamiliar locations"],"whatToDoNow":["Call your carrier immediately from another phone or visit a store to reclaim your number","Change passwords on email, banking, and crypto accounts using a device not linked to your phone number","Switch all critical accounts from SMS 2FA to an authenticator app or hardware key","Set a SIM-lock PIN with your carrier to require it for any future number transfer","Report the fraud to police and your carrier's fraud team","Contact your bank if any financial accounts may have been accessed"],"faq":[{"question":"How do I stop a SIM swap from happening to me?","answer":"Set a SIM-lock or account PIN with your carrier. Reduce use of SMS-based 2FA in favour of authenticator apps or hardware keys. Minimise the personal information you share publicly online that could be used to impersonate you."},{"question":"Can SIM swapping be used to steal cryptocurrency?","answer":"Yes — this is a primary motivation. Crypto wallets and exchange accounts that use SMS-based 2FA are particularly vulnerable. Hardware wallets and non-SMS 2FA are essential safeguards for significant crypto holdings."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-brushing-scam","url":"https://scamencyclopedia.org/questions/what-is-brushing-scam","question":"What is a brushing scam?","shortAnswer":"A brushing scam occurs when an online marketplace seller ships you unsolicited packages and then uses your name and address to post fake verified-purchase reviews for their own products, boosting their ratings fraudulently.","explanation":"Receiving a parcel you never ordered can be alarming, but in a brushing scam the package itself is not the attack on you — it is evidence that someone has your personal details. Third-party sellers on major e-commerce platforms obtain names and addresses from data breaches or scraped records, then send cheap items (seeds, phone accessories, small toys) to real addresses to create a 'delivered' order record.\n\nThat order record allows the seller to post a product review under your account name with a 'verified purchase' badge, which carries more algorithmic weight than unverified reviews. The goal is to inflate their product ratings to appear trustworthy and attract more buyers.\n\nFor the recipient, the more serious concern is why someone has your address. It may indicate your personal data has appeared in a breach. The packages themselves are typically harmless, but the underlying data exposure could facilitate more targeted fraud — junk mail is the least of it.\n\nIf you receive unexplained packages, check whether your marketplace account has been compromised, change your password, enable MFA, and notify the platform. In some jurisdictions you are legally entitled to keep goods you receive unsolicited.","redFlags":["You receive packages from unfamiliar senders containing cheap or random items you never ordered","Package labels show your name and address but an unknown sender or a foreign logistics label","You notice reviews appearing on your marketplace account that you never wrote","Multiple small parcels arrive over days or weeks"],"whatToDoNow":["Check your marketplace account login history and change your password","Enable multi-factor authentication on shopping accounts","Check if your email address appears in known data breaches (free tools like HaveIBeenPwned)","Report the packages to the marketplace — they have teams investigating brushing operations","You are not required to return or pay for goods you did not order","Monitor your credit report in case the data exposure is broader"],"faq":[{"question":"Is it illegal to send unsolicited packages to people for fake reviews?","answer":"Yes — in most jurisdictions this violates consumer protection laws and marketplace terms of service. The FTC (US) and Trading Standards (UK) have pursued cases against brushing operations, and major platforms ban sellers found engaging in it."},{"question":"Do I need to do anything with the packages I received?","answer":"No legal obligation to return them in most countries — unsolicited goods can generally be kept. The more important action is securing your accounts and finding out where your data came from."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-refund-scam","url":"https://scamencyclopedia.org/questions/what-is-a-refund-scam","question":"What is a refund scam?","shortAnswer":"A refund scam is a fraud where criminals impersonate customer service or a utility company and claim you are owed a refund, then trick you into transferring money to them or giving them remote access to your device.","explanation":"The caller claims to represent a company you may genuinely use — an internet provider, software company, bank, or government agency — and tells you that you have been overcharged or are owed a refund. To process it, they ask you to install remote-access software (such as AnyDesk or TeamViewer) so they can 'connect to your bank account'.\n\nOnce connected, they may show you a fake transaction screen that appears to credit you with a large sum — say £5,000 instead of the £50 you were supposedly owed. They then claim the 'error' must be corrected immediately by transferring the excess back using gift cards, bank transfer, or cryptocurrency. In reality, they may have hidden your real balance or used browser developer tools to alter displayed figures.\n\nVariants include fake overpayment emails saying you bought something you did not and should immediately claim a refund by clicking a link, which leads to credential theft. Another variant involves tech-support scammers pivoting to a refund angle after gaining remote access under a different pretext.\n\nLegitimate companies never need remote access to your device to process a refund, and they never ask you to 'send back' overpaid money via gift cards.","redFlags":["An unsolicited call or email claiming you are owed a refund from a company you use","A request to install remote-access software to 'process' the refund","A displayed balance that appears far higher than expected — the 'accidental overpayment' trick","Being asked to send money via gift cards, wire transfer, or crypto to 'correct' an overpayment","Urgency — the refund 'expires' if not claimed immediately","The caller becomes aggressive or threatening if you hesitate"],"whatToDoNow":["Hang up and do not install any software — legitimate refunds never require remote access","Call the company directly using a number from their official website, not one the caller provided","If you already installed remote-access software, disconnect from the internet and run a security scan","If money was transferred, contact your bank immediately to attempt a recall","Report the call to the Report Fraud service (UK, formerly Action Fraud), FTC (US), or your national authority"],"faq":[{"question":"How do scammers make the fake refund look real on my screen?","answer":"With remote access they can open your bank's website or use browser developer tools to edit the displayed text on a webpage. They may also show you a pre-made fake website that mimics your bank. The actual balance in your bank is never changed."},{"question":"Why do they ask for gift cards specifically?","answer":"Gift card codes are irreversible, anonymous, and can be quickly liquidated. Unlike bank transfers, there is no chargeback mechanism and no way to trace where the value ends up. This is a near-universal red flag for any type of scam."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-an-overpayment-scam","url":"https://scamencyclopedia.org/questions/what-is-an-overpayment-scam","question":"What is an overpayment scam?","shortAnswer":"An overpayment scam is a fraud where a buyer sends you a cheque or payment for more than the agreed amount and asks you to return the difference, but the original payment later bounces or is reversed, leaving you out of pocket.","explanation":"Overpayment scams are common in private sales (cars, furniture, pets, freelance work). After you list something for sale, a 'buyer' contacts you, agrees to your price, then sends a payment that is noticeably higher — claiming it was a mistake, a combined payment, or that a friend sent extra. They ask you to forward the difference via bank transfer, gift cards, or wire.\n\nThe original payment appears to clear in your account because banks make funds provisionally available before fully verifying them. A cheque may take days or weeks to officially bounce; a bank transfer can be recalled as fraudulent. By the time the reversal happens, the money you forwarded is gone and unrecoverable.\n\nThis scam also targets freelancers and remote workers. An employer sends a larger payment than agreed 'by mistake' and asks the worker to return the excess via a different method, often before their own payment fully clears.\n\nThe core rule: never spend or return funds from a payment that could still be reversed. Wait for full cleared funds — not provisional availability — before sending anything. If a buyer cannot explain a consistent, correctly sized payment, that is a significant warning sign.","redFlags":["A buyer sends more than the agreed amount and asks you to return the difference","Payment is via cheque (especially from overseas), money order, or a method with a reversal window","They want the 'excess' returned via gift cards, wire transfer, or a different payment method","Communication has grammatical errors or an overly formal tone inconsistent with local buyers","They are unwilling to cancel the transaction and send the correct amount instead","Pressure to act before you check whether the funds have truly cleared"],"whatToDoNow":["Do not send any money until the original payment has fully cleared — confirm with your bank, not just your online balance","Suggest the buyer cancel and resend the correct amount — a legitimate buyer will agree","If you already sent money and the payment bounced, report to your bank and local police","Remove the listing until you understand what happened","Report the buyer's contact details to the platform you were selling on"],"faq":[{"question":"Why does the money appear in my account if the payment is fake?","answer":"Banks often make funds provisionally available as a courtesy before verifying a cheque or confirming a wire transfer. This does not mean the payment is real. If the originating payment is reversed or bounced, the bank will claw back those provisional funds."},{"question":"Can this happen with PayPal or other digital payments?","answer":"Yes. Digital payments can also be reversed — through unauthorised transaction disputes, stolen account fraud, or chargeback abuse. The same rule applies: do not return any surplus until you are certain the original payment cannot be reversed."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-man-in-the-middle-attack","url":"https://scamencyclopedia.org/questions/what-is-a-man-in-the-middle-attack","question":"What is a man-in-the-middle attack?","shortAnswer":"A man-in-the-middle (MITM) attack is when a criminal secretly intercepts and potentially alters communications between two parties who believe they are talking directly to each other — for example, between you and your bank.","explanation":"In a MITM attack the attacker positions themselves as a silent relay between two communicating parties. Each party thinks they are communicating directly with the other, but all data passes through the attacker's system, who can read, copy, or modify it in real time.\n\nCommon MITM methods include creating fake Wi-Fi hotspots in public places (a coffee shop network named 'Free_CoffeeWifi' that looks legitimate), ARP spoofing on local networks, or DNS hijacking that redirects you to a fake website even when you type the correct address. SSL stripping attacks downgrade secure HTTPS connections to unencrypted HTTP.\n\nIn financial fraud, MITM attacks can intercept bank transfers. A criminal who has compromised your email or a business's email system monitors for invoices and replaces the legitimate bank account number with their own just before you make payment. This variant is sometimes called business email compromise or payment redirection fraud.\n\nProtection involves always using HTTPS (the padlock icon), avoiding public Wi-Fi for financial transactions, using a VPN on untrusted networks, and verifying payment account details by phone using a number from an independent source — never one in the email itself.","redFlags":["Using public or unsecured Wi-Fi for banking or shopping","A website shows HTTP rather than HTTPS when you expect a secure login","Your browser warns about an invalid or untrusted security certificate","An invoice arrives by email with account details that differ from previous ones","You are logged out of accounts unexpectedly or see unfamiliar login activity"],"whatToDoNow":["Always verify changed payment details by calling the recipient on a known, independently verified number","Use a VPN on public Wi-Fi networks","Look for HTTPS and check the certificate if you have any doubts about a site","If you suspect a payment was redirected, contact your bank immediately","Report suspected MITM fraud to your national cybercrime authority"],"faq":[{"question":"Can HTTPS protect me from a MITM attack?","answer":"HTTPS significantly raises the bar by encrypting traffic and authenticating the server's identity. However, sophisticated MITM attacks can sometimes strip HTTPS or use fraudulent certificates. Always check that the certificate is issued to the genuine domain."},{"question":"How common is public Wi-Fi MITM fraud?","answer":"Opportunistic attacks on public networks exist, but targeted financial MITM fraud more often exploits compromised routers or malware on the victim's device. The payment-redirection version, exploiting email systems, is currently more prevalent and costly."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-recovery-scam","url":"https://scamencyclopedia.org/questions/what-is-a-recovery-scam","question":"What is a recovery scam?","shortAnswer":"A recovery scam targets people who have already lost money to fraud and promises to recover their funds for an upfront fee — but takes more money and delivers nothing.","explanation":"Recovery scams are predatory by design. They specifically target fraud victims, who are already in a vulnerable, distressed state and are often willing to try almost anything to get their money back. Fraudsters monitor public databases, victim forums, social media complaints, and even their own previous victim lists to identify people who have been scammed.\n\nThe approach can be remarkably sophisticated. The 'recovery company' may have a professional website, fake testimonials, and staff who claim to be former law enforcement or blockchain specialists. They represent that they have special tools or legal avenues to recover crypto or wire transfers. They charge an initial consultation fee, then a 'processing' fee, then a 'release' fee — the demands continue as long as the victim pays.\n\nSome recovery scammers are the same criminal group who ran the original scam, or they have bought victim data from those groups. This practice of repeatedly victimising the same person is sometimes called 'reloading'.\n\nLegitimate legal and financial recovery services do exist but they do not cold-contact victims, do not guarantee recovery, and do not ask for upfront fees before doing any verifiable work. If you were scammed and want help, start with your national consumer protection agency or a non-profit victim support organisation.","redFlags":["You are contacted out of the blue by a 'recovery firm' after reporting a scam","They ask for upfront payment before any recovery work begins","They guarantee full or specific recovery amounts","They claim to have special government, FBI, or blockchain 'clearance' to recover funds","Each payment leads to another required fee before 'release' of your funds","They found you via a social media post or forum comment about being scammed"],"whatToDoNow":["Stop all payments immediately","Report the recovery scam to your national fraud authority as a separate crime","Contact your bank about any transfers made to the recovery scammer","Seek free help from legitimate sources: national consumer agencies, victim support charities, or financial ombudsmen","Be sceptical of any company that contacts you unsolicited about recovering money"],"faq":[{"question":"Are there any legitimate fund recovery services?","answer":"Some regulated legal firms and specialist financial investigators do assist with fraud recovery, particularly for large-sum cases. Verify they are licensed, do not cold-contact victims, and do not demand large upfront fees. Start with your national financial regulator's register of authorised firms."},{"question":"How do recovery scammers find me?","answer":"They monitor fraud reporting databases, social media complaints tagging companies or institutions, victim forums, and news articles. Some purchase victim lists directly from the original scammers. Contact from anyone who already knows you were scammed should raise immediate suspicion."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-an-advance-fee-scam","url":"https://scamencyclopedia.org/questions/what-is-an-advance-fee-scam","question":"What is an advance fee scam?","shortAnswer":"An advance fee scam promises a large future reward — a lottery win, inheritance, business deal, or loan — but requires the victim to pay an upfront fee first. The promised reward never arrives and the fees keep escalating.","explanation":"Advance fee fraud is one of the oldest scam types, historically associated with letters from Nigerian princes (the '419' scam, named after the relevant Nigerian criminal code). The premise is always the same: you have been selected to receive a large sum, but first you must pay a small fee to unlock it.\n\nModern variants are more varied and sophisticated. They include fake lottery notifications, unclaimed inheritance emails from solicitors, investment opportunities requiring a registration deposit, romance partners overseas who need travel money to visit, and fraudulent loan companies that require an 'insurance' or 'processing' fee before releasing the funds.\n\nThe defining characteristic is escalation. Every fee paid is followed by another obstacle requiring another fee — taxes, legal clearance, customs, bank charges. Victims who have already paid once are psychologically committed and more likely to pay again. This continues until the victim either runs out of money or recognises the fraud.\n\nNo legitimate lottery, inheritance, or loan requires advance payment from the recipient. Any message claiming otherwise is almost certainly a scam regardless of how official the paperwork looks.","redFlags":["You have 'won' or been 'selected' for a prize, inheritance, or opportunity you never applied for","Any form of upfront fee is required to receive a promised payment","Each payment you make creates a new reason for another payment before release","Official-looking documents arrive to legitimise the claim (fake court orders, bank statements, government letters)","You are asked to keep the arrangement confidential","Contact arrived unsolicited via email, social media, or post"],"whatToDoNow":["Do not pay any fee — any legitimate windfall is paid net of charges, not by you in advance","Do not share bank account details or personal documents","Report to your national fraud authority","If you have already paid, contact your bank immediately and file a police report","Warn friends and family, as the same fraudsters may contact others in your network"],"faq":[{"question":"Why do advance fee scam letters contain deliberate spelling errors?","answer":"Research suggests poor spelling filters out sceptical recipients, leaving only people who are genuinely credulous. Responding to a badly written letter signals to the fraudster that you are worth investing more time in."},{"question":"Could a real inheritance or lottery notification ever arrive by email?","answer":"Legitimate lottery organisations contact winners through official channels and do not ask for fees from winners. Real solicitors handling unclaimed estates use verifiable firm details and registered addresses. Neither will ask for upfront payment to release funds."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-the-difference-between-a-ponzi-and-pyramid-scheme","url":"https://scamencyclopedia.org/questions/what-is-the-difference-between-a-ponzi-and-pyramid-scheme","question":"What is the difference between a Ponzi scheme and a pyramid scheme?","shortAnswer":"A Ponzi scheme pays early investors using money from new investors, with a central operator controlling everything and no real product. A pyramid scheme requires each participant to recruit others to earn, with recruitment itself forming the revenue model.","explanation":"Both Ponzi and pyramid schemes are forms of investment fraud built on unsustainable mathematics, but they operate differently. In a Ponzi scheme, a single operator collects money from investors with promises of high returns. Those returns are paid using money from subsequent investors, not from legitimate profits. The operator keeps the scheme going by continually recruiting new money. Bernie Madoff's multi-decade fraud is the most famous example.\n\nA pyramid scheme is more decentralised. Participants pay to join and are rewarded primarily for recruiting new participants, each of whom pays to join and must recruit others in turn. The structure expands geometrically until there are not enough new recruits to sustain payments up the chain. Early participants at the top can profit while later participants — typically the majority — lose their money.\n\nMulti-level marketing (MLM) occupies a legal grey area. Legitimate MLMs sell a genuine product and commissions primarily come from product sales. Illegal pyramid schemes disguised as MLMs reward recruitment over sales or require large inventory purchases with little realistic chance of resale.\n\nBoth scheme types mathematically guarantee that the majority of participants will lose. The earlier you join, the higher your chance of profit; for every winner there are many losers. Promises of consistent above-market returns with no risk are a universal warning sign.","redFlags":["Guaranteed or consistently high returns regardless of market conditions","Vague or evasive explanations of how the investment actually generates profit","Emphasis on recruiting new members as the primary path to earnings","Difficulty withdrawing your principal or profits","Investment strategy described as 'secret' or 'proprietary' and not verifiable","Social pressure from friends, family, or community to join"],"whatToDoNow":["Verify any investment firm or fund is registered with your national financial regulator","Do not invest in any scheme you cannot fully understand or independently verify","If you suspect fraud, report to the SEC (US), FCA (UK), or your national financial authority","If you have lost money, consult a regulated financial adviser about recovery options","Warn others in your network who may also have been approached"],"faq":[{"question":"Is multi-level marketing the same as a pyramid scheme?","answer":"Not necessarily. Legal MLMs derive revenue primarily from genuine product sales to end consumers. The key test is: could you earn money without recruiting anyone? If real sales to non-participants are possible and the product has genuine retail demand, it may be legitimate. If recruitment is the only meaningful revenue source, it is likely an illegal pyramid scheme."},{"question":"How long can a Ponzi scheme survive?","answer":"Some have run for decades when operators were able to limit withdrawals and continually recruit new money. They typically collapse when investor withdrawals exceed new inflows — often triggered by broader economic downturns when investors need liquidity."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-money-mule","url":"https://scamencyclopedia.org/questions/what-is-a-money-mule","question":"What is a money mule?","shortAnswer":"A money mule is a person who transfers illegally obtained money through their own bank account on behalf of criminals, usually in exchange for a payment or under false pretences. Even if unwitting, a mule can face serious legal consequences.","explanation":"Criminal networks need to move and launder money from fraud, drug trafficking, or other crimes. Rather than using their own accounts (which may be flagged or frozen), they recruit 'mules' to receive the funds in a personal account and immediately forward them on, minus a commission.\n\nSome mules are aware they are doing something illegal and accept the risk for easy money. Many are deceived. Common recruitment methods include fake job advertisements for 'payment processors' or 'financial agents', romance scams where the partner asks a favour of forwarding a payment, and social media posts offering easy income for minimal work.\n\nOnce a mule transfers the funds they are almost always irrecoverable. Banks take a very dim view of money-mule accounts and will freeze them, report to law enforcement, and potentially close all of the customer's accounts. Criminal charges for money laundering carry prison sentences in most countries — ignorance of the underlying crime is not always an adequate defence.\n\nIf you are offered a job that involves receiving money and forwarding it on, or if a person you met online asks you to 'process' a payment through your account, this is almost certainly money mule recruitment. Refuse and report it.","redFlags":["A job offer requiring you to receive money and forward it to others, keeping a percentage","An online romantic partner asks you to receive a payment and transfer it elsewhere","A social media 'get rich quick' post mentioning transferring money through your account","An employer communicates only by messaging app and never through verifiable official channels","You are asked to open a new bank account for a third party","The 'employer' asks you not to mention the activity to your bank"],"whatToDoNow":["Refuse any request to use your account to transfer money for a third party","If you have already made transfers, stop immediately and contact your bank","Report the recruitment attempt to your bank and national fraud authority","If you fear you have been involved, seek legal advice early — voluntary disclosure can help","Report the job advert to the platform hosting it"],"faq":[{"question":"Can I be prosecuted if I genuinely did not know it was money laundering?","answer":"Potentially yes. In many jurisdictions, reckless disregard for the obvious signs of illegality is sufficient for a money laundering conviction. The safest approach is to never let your account be used by others to forward money, regardless of the explanation given."},{"question":"How do criminals recruit money mules?","answer":"Primarily through fake job ads on legitimate platforms, romance/friendship manipulation, and social media posts offering easy income. Students, young people, and recent immigrants are disproportionately targeted because they may be more financially vulnerable or less familiar with local banking norms."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-business-email-compromise","url":"https://scamencyclopedia.org/questions/what-is-business-email-compromise","question":"What is business email compromise (BEC)?","shortAnswer":"Business email compromise (BEC) is a sophisticated fraud where criminals impersonate a company executive, trusted supplier, or employee via email to trick staff into transferring money or sensitive data to fraudulent accounts.","explanation":"BEC is one of the costliest forms of cybercrime globally. Unlike mass-market phishing, BEC attacks are targeted and researched. Before striking, criminals study a company's organisational chart, payment processes, supplier relationships, and email styles — often gleaned from LinkedIn, company websites, or a prior email compromise.\n\nA typical CEO fraud variant involves an email appearing to come from the CEO to a finance employee, urgently requesting a wire transfer for a confidential acquisition, time-sensitive deal, or contractor payment. Because the email looks authentic and comes with apparent authority, staff often comply without following normal verification procedures.\n\nAnother common variant is invoice fraud: attackers compromise a supplier's email account or create a convincing lookalike domain, then send a modified invoice with the supplier's bank account details replaced by their own. Companies pay the invoice in good faith and the money goes directly to the criminals.\n\nDefences include multi-step verification for all payment changes (always call the requester on a known number), strict invoice change procedures, email authentication (DMARC, DKIM, SPF), and training staff to treat urgency and confidentiality requests in payment emails as red flags rather than reasons to act faster.","redFlags":["A request from a senior executive for an unusual or urgent wire transfer, especially marked confidential","A supplier sends updated bank account details by email only, without a phone follow-up","The sender email address has a subtle domain difference from the real one (e.g. .co vs .com, or an extra letter)","Requests to bypass normal approval or verification processes 'just this once'","Urgency framing — a deal will collapse, a fine will be incurred, or an opportunity will be missed","New instructions arrive on a Friday afternoon or before a holiday"],"whatToDoNow":["Never change bank account details or make large transfers based solely on an email request","Always verify payment changes with a phone call to a number from your internal directory, not the email","If a payment has been made, contact your bank immediately — some international transfers can be recalled quickly","Report to the FBI IC3 (US), Report Fraud (UK, formerly Action Fraud), or your national cybercrime unit","Review and tighten your company's payment authorisation procedures","Implement DMARC on your company's email domain to prevent spoofing"],"faq":[{"question":"Is BEC the same as phishing?","answer":"BEC is a targeted subset of email fraud but differs from mass phishing in that it is highly personalised, typically impersonates a known contact rather than a generic institution, and aims for a direct financial transfer rather than credential harvesting — though compromised credentials are often how BEC attackers gain initial access."},{"question":"How quickly can wired funds be recalled?","answer":"Speed is critical. Domestic transfers recalled within the same business day have a reasonable success rate. International SWIFT transfers are much harder to recall once the beneficiary bank has credited the account. Contact your bank within minutes of discovery, not hours."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-sweetheart-scam","url":"https://scamencyclopedia.org/questions/what-is-a-sweetheart-scam","question":"What is a sweetheart scam?","shortAnswer":"A sweetheart scam (also called a romance scam) is a long-term fraud where a criminal builds a fake romantic relationship with a victim to emotionally manipulate them into sending money, gifts, or personal information.","explanation":"Sweetheart scams differ from quick-hit romance fraud by their depth and duration. A skilled operator spends weeks or months cultivating genuine emotional intimacy, learning what the victim needs — companionship, love, adventure, security — and embodying it through daily messages, video calls using pre-recorded footage or deep-fake technology, and increasingly personal disclosures.\n\nOnce emotional investment is deep, a financial crisis emerges: a medical emergency, a business deal gone wrong, a problem with travel documents. The victim, who now sees the relationship as real and the person as someone they love, often sends money willingly and repeatedly. When friends or family raise doubts, the scammer may coach the victim to keep the relationship secret, deepening isolation.\n\nSweetheart scams cause dual harm: financial loss and severe psychological trauma. The grief of discovering a cherished relationship was entirely fabricated is comparable to bereavement, and victims are often too ashamed to report or seek help promptly.\n\nThe scam increasingly uses AI-generated profile photos and voice/video cloning. Warning signs centre on the structural implausibility of the relationship rather than any single message: the person is always abroad, always has a crisis, and despite months of communication has never met you in person.","redFlags":["The person is always working or living abroad and unable to meet in person","Video calls are always blocked or the picture quality is poor, glitchy, or brief","A financial emergency arises after the relationship becomes emotionally intense","They actively discourage you from telling friends or family about the relationship","Profile images are of unusually attractive people and reverse-image search shows them elsewhere","They quickly declare strong love or commitment very early in the relationship","Any request for money, gift cards, or wire transfer, however justified"],"whatToDoNow":["Stop sending money immediately regardless of how the request is framed","Perform a reverse image search on their profile photos","Talk to a trusted friend or family member — outside perspective is invaluable","Report the account to the platform and to your national fraud authority","Seek emotional support — victim support organisations offer confidential help without judgment","Contact your bank if any transfers were made"],"faq":[{"question":"Are sweetheart scam victims just lonely and gullible?","answer":"No. Sweetheart scam operators are professionally trained manipulators who exploit universal human needs. Victims include highly educated, professionally successful people. The psychological techniques used — love bombing, manufactured intimacy, isolation from support networks — are powerful and deliberately applied."},{"question":"Is the person I was talking to a real human being?","answer":"Often the profile is entirely fake — stock photos and a scripted persona. Some scam operations employ real people to manage relationships; occasionally those people are themselves victims of trafficking. In rare cases a real person may have developed genuine feelings, but the financial request pattern is the defining fraud element."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-phishing","url":"https://scamencyclopedia.org/questions/what-is-phishing","question":"What is phishing?","shortAnswer":"Phishing is a cyber-fraud technique where criminals send deceptive messages — usually by email — that impersonate trusted organisations to trick recipients into revealing passwords, financial details, or downloading malware.","explanation":"Phishing messages are designed to look legitimate. They copy the branding, logos, and writing style of banks, government agencies, courier services, or popular online platforms. The email or text typically creates urgency: your account will be suspended, your parcel could not be delivered, your payment failed. A link takes you to a fake site that harvests whatever credentials you enter.\n\nSpear phishing is a targeted variant. Instead of mass emails, criminals research specific individuals — using LinkedIn, company websites, or prior breaches — and craft highly personalised messages. A spear phishing email to a company finance director may reference real colleagues by name, recent projects, or authentic-looking internal formatting.\n\nSmishing (SMS phishing) and vishing (voice phishing) follow the same principle through different channels. Smishing sends a fraudulent text; vishing uses phone calls, sometimes with spoofed caller ID showing a legitimate number.\n\nThe most reliable defences are pausing before clicking any unexpected link, independently navigating to the organisation's genuine website rather than using the provided link, and using multi-factor authentication so that a stolen password alone is insufficient to access your account.","redFlags":["An urgent message about account suspension, failed payment, or parcel delivery","A sender address that looks similar but not identical to a legitimate organisation","Links in the email go to a different domain from the claimed sender","Generic greeting ('Dear Customer') rather than your actual name","Poor grammar, unusual formatting, or mismatched branding","A request to enter credentials, payment details, or personal information through a link"],"whatToDoNow":["Do not click the link — navigate directly to the organisation's website","If you already entered credentials, change your password and enable MFA immediately","Report phishing emails to your national cyber authority and to the impersonated organisation","Forward suspicious texts to 7726 (SPAM) in the UK or report to the FTC in the US","Run a security scan if you clicked a link and downloaded anything"],"faq":[{"question":"How can I tell if an email is a phishing attempt?","answer":"Check the actual sender email address (not just the display name), hover over links to see the true destination URL, look for urgency language, and ask yourself whether you expected this message. When in doubt, go directly to the organisation's website by typing the address yourself."},{"question":"What is the difference between phishing and pharming?","answer":"Phishing tricks you into clicking a link to a fake site. Pharming hijacks the DNS lookup process so that even when you type the correct address, you are silently redirected to a fraudulent site. Pharming is harder to spot but less common. Both are countered by HTTPS certificate checking."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-vishing","url":"https://scamencyclopedia.org/questions/what-is-vishing","question":"What is vishing?","shortAnswer":"Vishing (voice phishing) is a phone-based fraud where criminals impersonate banks, government agencies, or tech companies to trick victims into revealing passwords, PINs, or sensitive account information over the phone.","explanation":"Vishing exploits the trust people place in phone calls from institutions with official-sounding authority. A caller claims to be from your bank's fraud department, the IRS or HMRC, a tech company's security team, or law enforcement. They often already have partial information about you — your name, the last four digits of a card, or your address — obtained from data breaches or social media, which they use to appear legitimate.\n\nThe scenario varies: your account has been breached and you must verify your details; you owe back taxes and face arrest unless you pay immediately; your computer has been infected and a technician needs your login details. In each case the goal is to extract either sensitive credentials or an immediate payment.\n\nVoIP technology has made caller ID spoofing easy and cheap. The number displayed on your screen can be made to show any number the caller chooses, including the genuine number of your bank or a government agency. This means caller ID is no longer a reliable indicator of legitimacy.\n\nThe key principle: any unsolicited caller asking you to confirm sensitive information or make an urgent payment should be treated with suspicion. Hang up and call the organisation back using a number from their official website.","redFlags":["An unsolicited call claiming urgent action is required on your account or regarding a legal matter","The caller already knows some of your details and uses this to appear legitimate","Caller ID shows a recognised number (this can be spoofed)","You are asked to confirm passwords, PINs, or full card numbers over the phone","Threats of arrest, account closure, or legal action if you do not comply immediately","You are told not to discuss the situation with your bank or family"],"whatToDoNow":["Hang up and call back using a number from the organisation's official website","Wait a few minutes before calling back — some attacks keep the line open; call from a different phone if possible","If you gave credentials, change them immediately and contact your bank","Report the call to your national fraud authority","Register with a call-blocking service to reduce unsolicited calls"],"faq":[{"question":"Can I trust caller ID to verify who is calling?","answer":"No. Caller ID spoofing is technically straightforward and widely used by vishing attackers. The number displayed can be set to any number the caller chooses, including your bank's genuine fraud department number. Always call back independently."},{"question":"Would my bank ever call and ask for my full PIN?","answer":"No legitimate bank will ever ask for your full PIN, online banking password, or one-time passcode over the phone. These exist precisely so that no-one — including bank staff — needs to know them. Any caller asking for these is attempting fraud."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-smishing","url":"https://scamencyclopedia.org/questions/what-is-smishing","question":"What is smishing?","shortAnswer":"Smishing is phishing conducted via SMS text message. Fraudulent texts impersonate delivery services, banks, or government agencies and contain links designed to steal your credentials or personal information.","explanation":"Smishing became a major fraud vector as smartphones became universal and people grew accustomed to receiving legitimate transaction alerts and delivery notifications by text. Criminals mimicked this pattern, sending texts that blend in with the flow of real notifications.\n\nCommon smishing themes include: a parcel could not be delivered and a small customs fee is required; your bank has flagged suspicious activity; your government benefit payment needs to be confirmed; your streaming subscription is about to expire. The link leads to a convincing fake site that harvests card details, login credentials, or personal information.\n\nSmishing has some advantages over email phishing for criminals: there is no spam filter, messages are seen on a small screen where full URLs are harder to inspect, and people are habituated to tapping links in texts. Some smishing messages also carry malware payloads that install themselves when the link is opened on vulnerable devices.\n\nSince your mobile number is not linked to a specific bank or service, anyone can receive a smishing text about any institution. The fact that you receive a parcel notification does not mean you have a parcel. Always navigate to the courier or institution's official app or website rather than tapping a link in a text.","redFlags":["An unsolicited text with a link about a delivery, account alert, or payment","The URL in the text is short, obscured, or does not match the claimed sender's domain","A small fee or charge is mentioned — delivery fees, customs, or account reactivation","The message creates urgency about acting within hours","Generic language not using your name or specific account details","Texts arriving from unusual numbers, email addresses displayed as sender, or unknown short codes"],"whatToDoNow":["Do not tap the link — go directly to the company's official app or website","Forward the suspicious text to 7726 (SPAM) in the UK or report to the FTC in the US","If you entered details, change your password and contact your bank","Block the sender number on your phone","Report to the platform's abuse team if it came via a messaging app"],"faq":[{"question":"How do smishers get my phone number?","answer":"Phone numbers are obtained from data breaches, purchased from data brokers, scraped from social media, or simply generated in sequential batches and mass-texted. Receiving a smishing text does not mean the sender has any specific personal information about you."},{"question":"Are iMessages safer than regular SMS?","answer":"iMessages between Apple devices are end-to-end encrypted in transit, but smishing attacks do not rely on intercepting messages — they rely on you clicking a link. The risk from clicking a malicious link is the same regardless of the messaging platform."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-lottery-scam","url":"https://scamencyclopedia.org/questions/what-is-a-lottery-scam","question":"What is a lottery scam?","shortAnswer":"A lottery scam notifies victims that they have won a prize in a lottery they never entered, then requests fees, taxes, or personal information before the 'winnings' can be released — which never actually arrive.","explanation":"Lottery scam notifications arrive by email, text, post, or social media. They mimic well-known lotteries, prize draws, and sweepstakes — sometimes using the names and logos of legitimate organisations. The message is usually warm and congratulatory, providing a reference number and a contact to claim your prize.\n\nWhen you contact the number or email provided, you are connected to a 'claims agent' who explains a straightforward process, but it always involves fees: processing fees, insurance, customs, taxes, or legal clearance. Each payment clears one obstacle but creates another. No prize ever materialises.\n\nSome variants ask for personal identification 'to verify your identity' before releasing the prize — harvesting passport numbers, national insurance details, or date of birth for identity theft. Others combine the lottery pretext with an advance fee structure, promising the prize and then pivoting to a broader financial scam.\n\nThe fundamental logic: you cannot win a lottery you never entered. Legitimate lotteries do not ask winners to pay fees to receive their winnings. Any prize notification that requires payment or personal details is almost certainly a scam.","redFlags":["You are told you won a lottery or sweepstake you do not recall entering","A fee, tax, or charge must be paid before the prize can be released","The notification creates excitement and urgency — the prize expires soon","A claims agent, reference number, and official-looking certificate are provided","The contact email uses a free provider (Gmail, Yahoo) rather than a legitimate organisation domain","You are asked for personal identification documents before receiving anything"],"whatToDoNow":["Do not pay any fee — legitimate prize notifications never require the winner to pay in advance","Do not share personal documents with unknown parties","Verify independently whether the lottery organisation actually exists and matches the contact details provided","Report the notification to your national fraud authority","Delete or ignore further communications from the sender"],"faq":[{"question":"Can genuine prize draws contact winners by email or text?","answer":"Legitimate organisations do sometimes notify prize winners by email. The difference is that they never ask for fees to release the prize, they use a verifiable company email domain, and you can confirm the draw was real by checking the organisation's official website independently."},{"question":"What if they send me an official-looking certificate?","answer":"Fake certificates and documents are trivially easy to produce. A convincing PDF or headed letter does not verify legitimacy. Always verify the organisation independently rather than trusting documents sent by the supposed prize issuer."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-charity-scam","url":"https://scamencyclopedia.org/questions/what-is-a-charity-scam","question":"What is a charity scam?","shortAnswer":"A charity scam uses the name of a real or fictitious charity to solicit donations that go directly to fraudsters rather than any legitimate cause, often exploiting recent disasters or humanitarian crises.","explanation":"Charity scams peak during and after major disasters — earthquakes, floods, disease outbreaks, or conflicts — when public willingness to donate is highest and urgency reduces careful scrutiny. Scammers create fake charities with convincing names, professional-looking websites, and social media accounts, or they impersonate established real charities.\n\nDonation solicitations arrive by phone, email, door-to-door, and increasingly through social media fundraisers and crowdfunding platforms. Some fraudsters are highly sophisticated: they register a charity name that closely resembles a legitimate one, create a charity registration number that appears official, and produce emotional appeals with real-sounding beneficiary stories.\n\nAside from pure fabrications, legitimate-looking operations can misuse charitable status — collecting real donations but directing the bulk to the operators as 'administration fees' or 'fundraising costs', with only a tiny fraction reaching any actual beneficiaries.\n\nDonating through established, verifiable organisations is the safest approach. Charity watchdog organisations in most countries maintain registers of legitimate charities and publish financial transparency data. Never make donations through an unsolicited phone call or a social media link you cannot independently verify.","redFlags":["High-pressure or emotionally manipulative appeals with no time to consider","Solicitation via unsolicited phone call, door-to-door visit, or social media message","Vague description of how funds are used or evasive answers about charitable registration","A charity name very similar to a well-known legitimate one","Payment methods that are irreversible: cash, wire transfer, gift cards, or cryptocurrency","Website created very recently, especially after a major disaster"],"whatToDoNow":["Verify the charity on your national register (Charity Commission in the UK, IRS Tax Exempt database in the US)","Donate directly through the charity's official verified website, not through a link in a solicitation","If you donated to a suspected scam, report to your fraud authority and the charity regulator","Check charity ratings on organisations like Charity Navigator or GiveWell for financial transparency"],"faq":[{"question":"How can I tell a real charity from a fake one?","answer":"Check registration on your national charity regulator's public database, look for audited accounts, and verify that the payment methods offered include traceable options. Legitimate charities welcome scrutiny rather than rushing you to donate immediately."},{"question":"Is it safe to donate via crowdfunding platforms?","answer":"Established crowdfunding platforms have fraud reporting tools and often verify large campaigns. Check whether the organiser is verifiable, look at their history on the platform, and prefer campaigns linked to known organisations rather than anonymous individuals for large amounts."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-job-scam","url":"https://scamencyclopedia.org/questions/what-is-a-job-scam","question":"What is a job scam?","shortAnswer":"A job scam advertises fake employment opportunities to steal money, personal information, or labour from victims under the guise of a legitimate recruitment process.","explanation":"Job scams have grown substantially with the rise of remote work. Common forms include upfront fee requests (pay for training materials, background checks, or equipment that never arrives), fake data-entry or work-from-home roles that require victims to process fraudulent payments (making them unwitting money mules), and fake interviews that harvest identity documents during an apparently normal application process.\n\nTask scams are an emerging and particularly effective variant: a 'job' involving completing simple online tasks (app reviews, hotel ratings, Amazon product ratings) for pay. The victim is asked to make small purchases as part of the task process, then told they must complete a larger batch or pay a deposit to unlock their accumulated earnings. The earnings never arrive.\n\nRecruitment impersonation is also common. Fraudsters impersonate well-known employers or staffing agencies, conduct convincing 'interviews' via messaging platforms, and then issue offer letters requesting personal information or bank details for 'payroll setup' before any work begins.\n\nLegitimate employers do not ask you to pay to apply, buy your own equipment through a company account with reimbursement, or receive a large payment and forward part of it. If an opportunity arrived unsolicited and sounds unusually easy or lucrative, treat it with significant caution.","redFlags":["A job offer arrives unsolicited without any application from you","You are asked to pay for training, equipment, certification, or background checks","The work involves receiving and forwarding payments through your personal bank account","The employer communicates only through WhatsApp, Telegram, or a personal email address","The role offers unusually high pay for simple tasks requiring no experience","You are asked to provide identity documents early in a process that has not verified the employer's legitimacy"],"whatToDoNow":["Research the employer independently — verify their website, registered address, and phone number","Never pay any fee as part of a job application process","Do not provide bank details before you have independently confirmed the employer is legitimate","Report fake job listings to the platform and your national fraud authority","If you provided identity documents to a suspected scammer, place a fraud alert on your credit file"],"faq":[{"question":"What is a task scam specifically?","answer":"Task scams present themselves as gig work or micro-job platforms. They invite victims to complete repetitive tasks (ratings, reviews, clicks) for per-task pay. Victims are required to fund their 'account' to access tasks, and those funds are never recoverable. They are a modern variant of advance fee fraud."},{"question":"Can a job scam on LinkedIn be real?","answer":"Scammers do post on LinkedIn. Fake profiles and hijacked legitimate company pages are both used. Verify any job opportunity through the company's official careers page before proceeding, even if contacted on a professional network."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-tech-support-scam","url":"https://scamencyclopedia.org/questions/what-is-a-tech-support-scam","question":"What is a tech support scam?","shortAnswer":"A tech support scam tricks victims into believing their computer is infected or compromised, then charges them for unnecessary 'repairs' or gains remote access to steal data and money.","explanation":"Tech support scams begin in several ways: a scary pop-up on a website displaying a fake virus alert with a phone number; an unexpected call from someone claiming to be from Microsoft, Apple, or an ISP; or, more recently, an email or text stating your account has been charged for a renewal and you should call to cancel.\n\nOnce contact is made, the 'technician' uses legitimate-looking tools — Windows Event Viewer, system logs showing normal but alarming-sounding entries, or remote monitoring software — to convince the victim that serious problems exist. They then offer to fix the issue for a payment, often in gift cards, or ask the victim to install remote-access software to 'fix the problem directly'.\n\nWith remote access, the real damage begins. Scammers may navigate to the victim's bank account, show them a fake balance that appears to have been 'accidentally' altered, and use the refund scam technique to extract further payments. They may install persistent malware, exfiltrate passwords, or lock files for ransom.\n\nA key fact: Microsoft, Apple, Google, and your ISP will never proactively call you about a virus on your computer. Browser pop-ups cannot detect viruses. If you did not initiate the support call, hang up or close the browser tab.","redFlags":["A pop-up on a website saying your computer is infected with a phone number to call","An unsolicited call from someone claiming to be Microsoft, Apple, or tech support","You are asked to download remote-access software (AnyDesk, TeamViewer) to receive support","The caller shows you system logs and says alarming-sounding normal entries are infections","Payment for support is requested via gift cards, wire transfer, or cryptocurrency","You receive an email about a large subscription renewal you did not make, with a phone number to dispute it"],"whatToDoNow":["Do not call numbers in pop-ups — close the browser tab (or force-quit if it will not close) and run a genuine antivirus scan","If you gave remote access, disconnect from the internet immediately and run a full security scan","Change passwords for any accounts that could have been visible during remote access","If you paid, contact your bank or gift card issuer to attempt recovery","Report to your national fraud authority and the software company being impersonated"],"faq":[{"question":"Can a website really detect a virus on my computer?","answer":"No. A web page in your browser has no access to your operating system or files. Pop-ups claiming to have detected malware are always fake, regardless of how convincing or frightening they look. They are designed to alarm you into calling the displayed number."},{"question":"What if I already gave them remote access — what should I do first?","answer":"Disconnect from the internet immediately (pull the ethernet cable or disable Wi-Fi). This terminates their remote session. Then run a full antivirus scan from a trusted tool, change all your passwords from a different device, and check for any banking transactions you did not authorise."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-catfishing","url":"https://scamencyclopedia.org/questions/what-is-catfishing","question":"What is catfishing?","shortAnswer":"Catfishing is the practice of creating a fake online identity to deceive another person into a relationship, usually using stolen photos and a fabricated persona. When financial fraud is involved it overlaps with sweetheart and romance scams.","explanation":"The term 'catfish' entered popular culture through a 2010 documentary and subsequent television series, describing people who create false online identities to pursue relationships. Motivations vary: some catfishers seek emotional connection through a idealised persona; others are engaged in deliberate financial fraud.\n\nThe mechanics are consistent: a profile is created using photos stolen from a real person — often a model, soldier, doctor, or oil-rig engineer with a legitimately compelling life story. The catfisher builds a relationship over months through messaging, learning what the target values emotionally, and providing it through the persona.\n\nWhen the catfish is engaged in financial fraud, the structure mirrors romance scam patterns: after emotional investment is deep, financial requests begin — medical emergencies, travel costs, investment opportunities, or help with a customs problem. Each payment is justified by the fabricated relationship.\n\nPractical verification includes reverse image searching the profile photos, noting whether the person can ever meet or video-call, and checking whether their story is internally consistent over time. Inconsistencies in claimed location, occupation, or timeline are common catfish tells.","redFlags":["The person refuses or always has a reason to avoid video calls or in-person meetings","Reverse image search of their photos shows them on other profiles or stock photo sites","Their backstory has inconsistencies — claimed location, employer, or age shifts over time","An intense, fast-moving relationship that escalates quickly","Financial requests arising after emotional investment has built","Their social media accounts have very few friends, old posts, or no mutual connections"],"whatToDoNow":["Reverse image search their photos using Google Images or TinEye","Propose a live video call — genuine people with nothing to hide will generally accept","Stop all financial transfers regardless of the justification given","Report the profile to the platform where you met","Seek support from friends, family, or a victim support service — the emotional impact is real"],"faq":[{"question":"Are all catfishers trying to steal money?","answer":"Not always. Some catfish for emotional reasons — loneliness, insecurity, or a desire to experience a different identity. However, if financial requests arise at any point, the interaction should be treated as fraud regardless of the initial motivation."},{"question":"Can I find out who is really behind a catfish profile?","answer":"In some cases, reverse image searches can lead to the original person whose photos were stolen. Identifying the actual catfisher is harder without law enforcement resources. Focus on protecting yourself and reporting rather than trying to unmask the individual."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-rental-scam","url":"https://scamencyclopedia.org/questions/what-is-a-rental-scam","question":"What is a rental scam?","shortAnswer":"A rental scam tricks prospective tenants into paying a deposit or rent for a property the fraudster does not own or that does not exist, leaving the victim without accommodation or money.","explanation":"Rental scams proliferate on classified sites, social media marketplaces, and even mainstream property portals. A fraudster takes photos and details from legitimate property listings and reposts them at an attractive below-market price. When prospective tenants enquire, the 'landlord' engages genuinely-feeling correspondence, explains they are temporarily abroad, and asks for a holding deposit or first month's rent to secure the property before viewing.\n\nOnce payment is sent, contact ceases or the landlord provides endless delays. Some victims arrive at the address to find either a real tenant who knows nothing about any rental listing, or a property that is for sale, not rent. Others are given keys to a property the scammer has no right to enter — this particularly happens with rental properties the scammer has briefly 'rented' to harvest keys.\n\nVariants target landlords too: fake tenant enquiries request a landlord's bank details for 'credit checks', or send fake holding deposits via a payment method that can be reversed after the landlord has forwarded keys.\n\nAlways view a property in person before paying anything. Verify the landlord's identity and right to rent through land registry records where available. Pay only through traceable methods with a clear tenancy agreement in place.","redFlags":["The rental price is significantly below the local market rate","The landlord is abroad and cannot meet you or arrange a viewing","You are asked for a deposit or rent before viewing the property","The listing appears on multiple platforms with different prices or contact details","The landlord requests payment via wire transfer, gift cards, or a money transfer service","Pressure to commit quickly because 'many people are interested'"],"whatToDoNow":["Never pay any money before viewing the property in person with proof of identity from the landlord","Verify the landlord owns or has the right to let the property using land registry records","If you already paid, report to police, the platform, and your bank immediately","Report the listing to the platform for removal","Check whether the listing appears on other sites with different contact details"],"faq":[{"question":"Is it safe to pay a holding deposit before viewing?","answer":"No. A holding deposit before any viewing is a major red flag. Legitimate landlords understand that tenants need to view a property before committing money. If a landlord insists on payment first, walk away."},{"question":"How can I verify a landlord is genuine?","answer":"Ask for their full name, confirm ownership through your national land registry (HM Land Registry in the UK; county recorder offices in the US), ask to see their ID at viewing, and use a written tenancy agreement with the correct property address and their registered details."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-identity-theft","url":"https://scamencyclopedia.org/questions/what-is-identity-theft","question":"What is identity theft?","shortAnswer":"Identity theft occurs when someone uses your personal information — such as your name, national insurance number, or financial details — without your permission to commit fraud, open accounts, or make purchases in your name.","explanation":"Identity theft encompasses a wide range of frauds, but the unifying element is the misuse of someone's personal information without consent. Criminals may use your identity to open credit card accounts, take out loans, file fraudulent tax returns, rent property, receive medical treatment, or create false employment records.\n\nPersonal data is obtained through data breaches at companies holding your information, phishing attacks, SIM swapping, physical theft of documents, dumpster diving, or purchasing stolen data on dark-web markets. A single breach can expose enough information to facilitate multiple types of fraud.\n\nIdentity theft can go undetected for months or years. Victims often discover it when they are rejected for credit despite good finances, receive bills for purchases they did not make, or are contacted by debt collectors about accounts they did not open. The damage to credit ratings and the process of proving fraud and clearing your name can take months of work.\n\nRegular credit report checks and fraud alerts are the most effective early-detection tools. Where available, a credit freeze prevents new accounts from being opened in your name without your explicit consent — it is free in many jurisdictions and does not affect existing credit.","redFlags":["Credit or loan applications rejected despite no known financial problems","Unfamiliar accounts, charges, or enquiries appearing on your credit report","Bills, letters, or collection calls about accounts or purchases you did not make","Your tax return is rejected because one has already been filed in your name","Receiving unexpected credit cards, welcome letters, or statements in the post","You stop receiving regular mail — a redirect may have been set up in your name"],"whatToDoNow":["Place a fraud alert or credit freeze with all three major credit bureaus immediately","Order copies of your credit reports and review for unfamiliar accounts or enquiries","Report to your national identity theft authority (IdentityTheft.gov in the US)","Contact any affected financial institutions directly using numbers on their official websites","File a police report — you may need this as evidence when disputing fraudulent accounts","Change passwords for email and financial accounts"],"faq":[{"question":"What is the difference between identity theft and identity fraud?","answer":"Identity theft is the act of stealing personal information. Identity fraud is using that stolen information to commit a crime. In practice the terms are often used interchangeably, but the distinction matters legally — some jurisdictions treat the theft and the fraud as separate criminal offences."},{"question":"Does a credit freeze affect my existing accounts?","answer":"No. A credit freeze only prevents new credit being opened in your name. Your existing credit cards, loans, and accounts continue to function normally. You can temporarily lift the freeze when you need to apply for legitimate new credit."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-deepfake-scam","url":"https://scamencyclopedia.org/questions/what-is-a-deepfake-scam","question":"What is a deepfake scam?","shortAnswer":"A deepfake scam uses AI-generated audio or video to impersonate a real person — a family member, celebrity, CEO, or public official — to deceive victims into transferring money or sharing sensitive information.","explanation":"Deepfake technology uses machine learning to synthesise realistic audio and video of a person saying or doing things they never did. What once required studios and skilled effects artists can now be produced by free or cheap consumer tools from a few minutes of source material — a social media video, a public speech, or a phone conversation.\n\nIn financial fraud, deepfakes are used in several ways. 'Virtual kidnap' calls use a cloned child's or grandchild's voice to demand ransom. CEO fraud deploys a CFO's convincing voice in an urgent call requesting a wire transfer. Celebrity deepfake videos promote fake investment platforms and crypto giveaway scams to millions of viewers simultaneously.\n\nAt the personal level, deepfakes compound romance and sweetheart scams: a fake video call with an AI-generated face convinces a victim they have seen their online partner, dispelling doubts. At the corporate level, deepfake video calls have been used in boardroom-level fraud where executives are impersonated to authorise transactions.\n\nDefences include establishing out-of-band verification — a family code word, a known phone number to call back on, or a challenge question agreed in advance. For businesses, multi-person authorisation for high-value transactions and a strict policy of never changing payment details based on a video or call alone are essential.","redFlags":["A video or audio call from a known person making an urgent, unusual financial request","Celebrity or public figure videos promoting investment opportunities with guaranteed returns","A 'live' video in which the face is stiff, lighting inconsistent, or lip-sync slightly off","Emotional pressure to act immediately without telling anyone else","The person in the video is unable to respond naturally to unexpected questions","Payment or credential requests that bypass normal verification procedures"],"whatToDoNow":["Hang up and call the person back independently on a known, saved number","Use an agreed family or corporate code word to verify genuine emergencies","Do not transfer money or share credentials based on a video or voice call alone without secondary verification","Report AI-generated impersonation to the platform and to your national fraud authority","For businesses, review payment authorisation procedures to require multi-person sign-off"],"faq":[{"question":"How good are deepfakes now — are they detectable?","answer":"Quality varies. Some deepfakes are clearly artificial; others are convincing enough to pass a brief real-time call. Detection tools exist but are not perfect. Behavioural verification — asking unexpected questions, using code words — is more reliable than trying to spot visual artefacts."},{"question":"Is it illegal to make a deepfake of someone?","answer":"Laws vary by jurisdiction. Many countries now have or are introducing laws against non-consensual intimate deepfakes and fraudulent deepfakes used in crime. Using a deepfake to commit fraud is already criminal under existing fraud statutes in most places."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-investment-fraud","url":"https://scamencyclopedia.org/questions/what-is-investment-fraud","question":"What is investment fraud?","shortAnswer":"Investment fraud involves deceptive schemes that promise high financial returns but are designed to steal money from investors, covering everything from fake trading platforms and crypto scams to unregulated securities and Ponzi schemes.","explanation":"Investment fraud takes many forms but all share a common promise: exceptional returns with little or no risk. The investment opportunity may be presented as a proprietary trading algorithm, a new cryptocurrency, foreign exchange arbitrage, rare commodities, or an exclusive early-stage business deal. What makes it fraudulent is not the vehicle but the deception: false claims about returns, hidden fees, undisclosed risks, or outright theft of funds.\n\nFraudulent investment platforms can be sophisticated. They may show investors a real-time dashboard of growing balances, issue plausible account statements, and even permit initial small withdrawals to build confidence. The entire visible interface is a fiction: no real trading is occurring and the balance shown exists only on a screen.\n\nThe social element is powerful. Investment frauds spread through trusted networks — church groups, immigrant communities, professional associations, and sports clubs. A trusted peer endorsing an opportunity dramatically lowers critical thinking. This is sometimes called affinity fraud.\n\nLegitimate investments involve risk, regulated advisers, audited accounts, and transparent fees. Any investment promising guaranteed returns, pressure to decide quickly, or a requirement for secrecy about your participation should be verified with your national financial regulator before any money is committed.","redFlags":["Promised returns that consistently beat market rates with no explained risk","Pressure to invest quickly before an 'opportunity closes'","The investment strategy is explained vaguely or as a trade secret","Difficulty withdrawing your principal or profits","The adviser or platform is not registered with your national financial regulator","You heard about it through a trusted community connection rather than an independent search","Requests for secrecy about the investment from family or other advisers"],"whatToDoNow":["Verify the firm is registered with your national financial regulator before investing","Check the regulator's warning list for named unregistered schemes","Never invest money you cannot afford to lose in any unverified scheme","If you suspect fraud, report to the SEC, FCA, or your national financial authority","Seek advice from a regulated, independent financial adviser"],"faq":[{"question":"What does 'unregulated' investment mean and why does it matter?","answer":"Regulated investments are supervised by a financial authority that can investigate complaints, require transparent accounts, and compensate victims through guarantee schemes. Unregulated investments have none of these protections. If an unregulated investment goes wrong or is fraudulent, your recourse is very limited."},{"question":"Can a cryptocurrency investment be legitimate?","answer":"Cryptocurrency itself is a real asset class with genuine risk. Legitimate crypto investing carries substantial volatility risk. The red flags — guaranteed returns, unregistered platforms, withdrawal restrictions — apply regardless of the investment vehicle. The asset being crypto does not by itself make an opportunity a scam or legitimate."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-subscription-trap","url":"https://scamencyclopedia.org/questions/what-is-a-subscription-trap","question":"What is a subscription trap?","shortAnswer":"A subscription trap lures consumers with a free trial or low-cost offer, then automatically enrolls them in a recurring subscription with difficult cancellation terms, often with the ongoing charges buried in fine print.","explanation":"Subscription traps, sometimes called negative option marketing, present an attractive short-term offer — a free trial for 14 days, a product for just the cost of postage — and obtain card details to 'verify identity' or cover minor shipping costs. In the terms and conditions, often displayed in small text on a separate page, the customer has agreed to a recurring monthly charge if they do not explicitly cancel before the trial ends.\n\nNotification of the upcoming charge is often minimal or absent. Cancellation is deliberately made difficult: no online cancellation option, customer service numbers that are hard to reach or use high-pressure retention tactics, or a requirement to cancel in writing within a narrow window.\n\nThe subscription trap model is widely used in health products, beauty boxes, weight loss programmes, and online services. Some operate in grey areas of law; others are straightforwardly deceptive. Regulatory actions have successfully pursued many operators, but new variants appear regularly.\n\nBefore entering card details for any free trial, read the full terms, note the cancellation deadline in your calendar, use a virtual card number where possible, and check reviews for a pattern of complaints about unauthorised charges.","redFlags":["A 'free trial' that requires full card details rather than just an email address","Very low introductory price with terms about ongoing billing in small or hard-to-find text","No obvious online cancellation button — cancellation requires calling a phone number","Charges appear on your statement from a company name you do not recognise","Customer reviews mentioning difficulty cancelling or unexpected ongoing charges"],"whatToDoNow":["Check your bank or credit card statements for unfamiliar recurring charges","Contact the company to cancel and document the date and method of cancellation","If the company is unresponsive, ask your bank to raise a chargeback for unauthorised recurring charges","Report to consumer protection authorities in your country","Use a virtual card or prepaid card for future free trials to limit exposure"],"faq":[{"question":"Can my bank reverse subscription charges I did not authorise?","answer":"Yes, under chargeback rules for most card types. You generally need to show the recurring charge was not clearly disclosed and that you attempted to cancel. Contact your bank promptly; there are time limits on chargeback claims."},{"question":"Are all free trials subscription traps?","answer":"No. Many legitimate businesses offer genuine free trials with clear terms and easy cancellation. The difference lies in transparency: legitimate offers make the ongoing cost, cancellation process, and billing date prominent — not hidden in footnotes."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-utility-scam","url":"https://scamencyclopedia.org/questions/what-is-a-utility-scam","question":"What is a utility scam?","shortAnswer":"A utility scam impersonates electricity, gas, water, or phone providers to threaten disconnection unless an immediate payment is made, often by gift card or wire transfer.","explanation":"Utility scams prey on the fear of essential service disconnection. A caller, email, or door-to-door visitor claims to represent your energy or water provider, warning that your account is severely overdue and your service will be disconnected within hours unless you pay immediately. The payment method requested is always non-standard — prepaid cards, gift cards, wire transfer, or cryptocurrency — distinguishing it from a legitimate bill.\n\nDoor-to-door variants may show fake identification and claim to need to inspect your meter or connection 'as part of the disconnection process'. Once inside, they may steal valuables, install skimming devices, or attempt to extract payment under pressure.\n\nEnergy affordability scam variants also circulate: fraudsters offer government-backed energy rebates, efficiency grants, or price-reduction programmes and request personal or banking details to 'enrol' the victim, then use those details for identity fraud or to raid bank accounts.\n\nLegitimate utility companies send written notices well in advance of any disconnection, provide multiple payment options, and never request payment via gift card or wire transfer. If in doubt, call the number on your bill or your provider's official website.","redFlags":["An unsolicited call threatening imminent disconnection unless you pay immediately","Payment is demanded via gift cards, prepaid debit cards, or wire transfer","A door-to-door visitor claiming to be from your utility provider without a scheduled appointment","An offer of an energy rebate or government grant requiring your bank details","Extreme urgency — 'your power will be off in two hours'","The caller becomes hostile or threatening when you question the legitimacy"],"whatToDoNow":["Do not pay — call your utility provider directly using the number on your bill to verify any genuine balance","Do not let unannounced visitors claiming to be from a utility company inside without verified appointment confirmation","If you paid by gift card, call the card issuer immediately — some funds can be frozen","Report the call or visit to your utility provider's fraud line and your national fraud authority"],"faq":[{"question":"Why do utility scammers ask for gift cards?","answer":"Gift card payments are irreversible, anonymous, and untraceable. They are the equivalent of cash but can be handled remotely. No legitimate utility company accepts gift cards as a payment method for a real overdue balance — this is always a scam."},{"question":"How do scammers know I am a customer of a specific utility company?","answer":"Often they do not. Scammers frequently operate by region and assume people use the major local provider. They may make dozens of calls hoping to reach genuine customers of that provider. Caller ID can be spoofed to show the real utility's number."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-travel-scam","url":"https://scamencyclopedia.org/questions/what-is-a-travel-scam","question":"What is a travel scam?","shortAnswer":"Travel scams deceive consumers into paying for non-existent or misrepresented holiday packages, flights, accommodation, or visa services, often resulting in people arriving at a destination with no valid booking.","explanation":"Travel scams span a broad spectrum. At the fraudulent end, entirely fake travel agencies or third-party booking sites accept payment for holidays, hotels, or flights that were never booked. The victim arrives at the airport or destination to find their ticket is invalid and the booking does not exist.\n\nMore subtle variants involve timeshare pressure selling, where consumers at resort destinations are invited to 'free' presentations and subjected to high-pressure sales for overpriced, illiquid timeshare contracts. Visa scam services charge large fees for assistance that is unnecessary (for nationalities that do not require a visa) or simply take the money and disappear. Fake holiday rental listings — beautiful villas photographed from someone else's listing — collect deposits that never secure any booking.\n\nTravel club memberships and discount travel programmes frequently promise substantial savings on future holidays in exchange for significant joining fees, with terms and conditions making the promised savings difficult or impossible to realise.\n\nAlways book through platforms with verifiable track records, check for independent reviews, verify ATOL or ABTA protection (or your jurisdiction's equivalent) for package holidays, and be very cautious about any travel deal that arrives unsolicited or requires immediate payment.","redFlags":["Travel deals significantly below market price from an unfamiliar provider","Upfront payment required in full before any documentation is provided","A booking reference that cannot be verified on the airline or hotel's official website","Visa service agencies that charge high fees for assistance with a visa-free destination","High-pressure resort presentations offering 'free' gifts in exchange for attending","Third-party booking sites that are not established and have no verifiable reviews"],"whatToDoNow":["Verify any booking reference directly on the airline or hotel's official website","Check for ATOL/ABTA protection or your country's equivalent before paying for package holidays","If you have been defrauded, report to your national fraud authority and trading standards","If you paid by credit card, initiate a chargeback with your card provider","Warn others by leaving reviews on the platform where you encountered the fraudulent listing"],"faq":[{"question":"What does ATOL protection mean for a holiday?","answer":"ATOL (Air Travel Organisers' Licensing) is a UK scheme that protects consumers who book package holidays with a licensed operator. If the operator fails, ATOL covers your costs and repatriation. Equivalent protections exist in the EU (Package Travel Directive) and other jurisdictions."},{"question":"Is it safe to book a villa directly through a private owner online?","answer":"It can be, but the risk is higher than using an established platform with a refund policy. Use platforms that hold payments in escrow until check-in, read recent reviews from verified guests, video-call the owner, and never pay fully in advance without written confirmation of the booking."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-crypto-rug-pull","url":"https://scamencyclopedia.org/questions/what-is-a-crypto-rug-pull","question":"What is a crypto rug pull?","shortAnswer":"A rug pull is a cryptocurrency exit scam where developers create a new token or project, attract investment, then drain the liquidity pool or sell all their holdings at once, abandoning the project and leaving investors with worthless tokens.","explanation":"Rug pulls are most common in decentralised finance (DeFi) ecosystems where tokens can be created and listed on decentralised exchanges with minimal oversight. A team launches a token with an appealing name, a professional-looking website, aggressive social media promotion, and promises of utility or high yields. Early investors see the price rise as more people buy in, which amplifies the hype.\n\nWhen the developers judge that the liquidity pool is large enough, they execute the exit. 'Hard rug pulls' involve malicious smart contract code that allows the developers to mint unlimited tokens, remove all liquidity, or restrict selling by other holders. 'Soft rug pulls' involve the team simply selling all their pre-allocated tokens simultaneously, crashing the price while they collect the liquidity.\n\nProject abandonment — sometimes called a slow rug — involves developers gradually reducing activity, missing roadmap milestones, and eventually disappearing without formally executing a liquidity drain. Investors who hold on hoping for recovery are left with tokens of negligible value.\n\nDue diligence for DeFi projects includes reading smart contract audits from reputable firms, checking whether the team is doxxed (publicly identifiable), verifying token lock-ups for team allocations, and being sceptical of any project with anonymous founders, no audit, and extreme urgency to invest.","redFlags":["Anonymous or unverifiable development team","No independent smart contract audit, or an audit from an unknown 'auditor'","Team token allocations that are not locked for a significant period","Extremely rapid price rises driven primarily by social media hype","A whitepaper or roadmap with vague, grandiose promises and no technical substance","Liquidity pool is small relative to market cap, making it easy to drain","Pressure to buy before 'it's too late' across social channels"],"whatToDoNow":["Do not invest more than you can afford to lose in any DeFi project regardless of hype","Check for audits from established firms (CertiK, Hacken, Trail of Bits) before investing","If you have lost funds, report to your national fraud authority and relevant blockchain analytics platforms","Document all transactions for any potential future legal proceedings","Share warnings in relevant communities to prevent others from investing"],"faq":[{"question":"Is every new crypto token a potential rug pull?","answer":"No. Many legitimate projects launch new tokens. The risk factors are specific: anonymous teams, no audits, unlocked team allocations, and no real utility. Due diligence significantly reduces (though never eliminates) the risk of participating in a fraudulent project."},{"question":"Can rug pull losses be recovered?","answer":"Rarely. Blockchain transactions are irreversible. Law enforcement sometimes pursues rug pull operators when they are identifiable, but anonymous teams in multiple jurisdictions are effectively impossible to pursue without significant investigative resources."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-government-impersonation-scam","url":"https://scamencyclopedia.org/questions/what-is-a-government-impersonation-scam","question":"What is a government impersonation scam?","shortAnswer":"A government impersonation scam involves criminals posing as tax authorities, law enforcement, immigration officials, or other government agencies to frighten victims into making urgent payments or sharing personal information.","explanation":"Government impersonation scams exploit the authority and fear that government agencies can inspire. The scenario is almost always urgent and threatening: you owe unpaid taxes and will be arrested; your national insurance number has been used in criminal activity; your immigration status is under review; a warrant has been issued in your name. The goal is to bypass calm thinking by creating overwhelming fear.\n\nCalls may arrive from spoofed numbers displaying genuine government phone numbers. Correspondence can include official-looking letters with government branding. More recently, automated pre-recorded calls (robocalls) have been used at scale to reach thousands of potential victims simultaneously.\n\nPayment demands are always in unusual forms: gift cards, wire transfers to foreign accounts, or cryptocurrency. This is the clearest distinguishing feature, since no government agency accepts these payment methods for legitimate obligations.\n\nImmigrant communities are disproportionately targeted, as the fear of immigration consequences can be particularly acute. Fraudsters may specifically search for people with recent visa activity or foreign-sounding names. The same targeting applies to people with recent business formations or tax filings.","redFlags":["An official-sounding call or letter demanding immediate payment to avoid arrest or penalty","Payment is required by gift card, wire transfer, cryptocurrency, or a money service","The scenario involves urgency — you must act today to avoid arrest or deportation","You are told to keep the matter confidential and not to speak to a lawyer or family","A genuine-looking government number appears on caller ID (which can be spoofed)","The penalty or amount due changes each time you call back or question it"],"whatToDoNow":["Hang up. Real government agencies send written notices before any enforcement action","Call the relevant agency directly using the number from their official government website","Do not pay in gift cards, cryptocurrency, or wire transfer — these are never legitimate government payment methods","Report the call to your national fraud authority and the specific agency being impersonated","If you paid, contact your bank and report to police immediately"],"faq":[{"question":"Would the IRS (or HMRC) ever call me about an unpaid tax bill?","answer":"Tax authorities do communicate by phone in some circumstances, but only after sending written notices first. They will never demand immediate payment by gift card, cryptocurrency, or wire transfer during a phone call, and they will never threaten immediate arrest on the phone."},{"question":"I received an official-looking letter about a tax debt. Is this real?","answer":"Fraudsters do send physical letters as well as calls. Verify by calling the tax authority using the number on their official website — not the number in the letter — to confirm whether the correspondence is genuine."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-healthcare-scam","url":"https://scamencyclopedia.org/questions/what-is-a-healthcare-scam","question":"What is a healthcare scam?","shortAnswer":"Healthcare scams sell fake, unproven, or dangerous medical products, exploit fear of illness to harvest personal information, or fraudulently bill insurance companies for services never provided.","explanation":"Healthcare fraud takes several distinct forms. Consumer-facing scams target people with serious health conditions or health anxiety, selling products claiming miraculous cures — for cancer, diabetes, dementia, weight loss, or chronic pain — without scientific evidence and sometimes with dangerous ingredients. These products range from supplements to devices to online consultations.\n\nIdentity-based healthcare fraud uses personal and insurance information to bill healthcare payers for services never rendered. Victims may discover the fraud only when they receive Explanation of Benefits statements for treatments they never received, or when they face complications from false records in their medical history.\n\nDuring health crises, pop-up fraudulent testing or vaccination services have appeared — collecting copayments for tests or jabs that are not administered, or harvesting insurance details and personal information under the guise of health screening.\n\nOnline pharmacies are a particularly significant concern. Many sites operate illegally, selling counterfeit drugs, prescription medications without a prescription, or products with dangerous substituted ingredients. Counterfeit medicines can be ineffective, contaminated, or actively harmful.","redFlags":["A product claiming to cure, treat, or reverse a serious condition without medical trial evidence","Unsolicited contact about a free medical test or health screening that requires your insurance details","Explanation of Benefits statements from your insurer for services you never received","An online pharmacy offering prescription drugs without requiring a prescription","Prices dramatically lower than regulated pharmacies for branded medications","Medical testimonials that are anonymous, unverifiable, or suspiciously uniform"],"whatToDoNow":["Check any medical product claim against your national health authority or medicines regulator","Review your health insurance Explanation of Benefits statements regularly for unfamiliar claims","Report suspicious claims to your insurance provider's fraud hotline","Report miracle cure products to the FDA (US), MHRA (UK), or your national medicines regulator","Only purchase medicines from pharmacies registered with your national regulator"],"faq":[{"question":"How do I know if an online pharmacy is legitimate?","answer":"In the UK, look for the General Pharmaceutical Council registration logo. In the US, use the NABP Accredited Online Pharmacy list. A legitimate online pharmacy requires a valid prescription for prescription medications and has a physical address and registered pharmacist contactable by phone."},{"question":"Can health supplement claims be believed?","answer":"Supplement claims are less regulated than pharmaceutical claims in most jurisdictions, but claims of treating, curing, or reversing disease are subject to regulatory scrutiny. If a supplement makes medical claims, be sceptical and check whether the ingredients have been evaluated in independent clinical trials."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-student-loan-scam","url":"https://scamencyclopedia.org/questions/what-is-a-student-loan-scam","question":"What is a student loan scam?","shortAnswer":"Student loan scams target borrowers with fake offers to forgive, reduce, or consolidate their student debt in exchange for upfront fees or personal financial information, ultimately stealing money or enabling identity fraud.","explanation":"Student loan scams proliferate because loan forgiveness and repayment assistance programmes do exist through legitimate government channels, giving scammers a plausible hook. Fraudulent companies advertise aggressively to student loan borrowers, promising rapid forgiveness, reduced monthly payments, or zero-interest consolidation — often for an upfront processing fee or monthly subscription.\n\nIn some cases the scammer files real applications for existing public forgiveness programmes on the borrower's behalf — something the borrower could do for free — and charges hundreds or thousands of dollars for the service. In other cases, no application is ever made, the fees are simply pocketed, and the loan situation worsens as the borrower stops making payments believing forgiveness is imminent.\n\nThe most damaging variant involves the borrower surrendering their federal student aid login credentials to the scammer, who then changes contact details and diverts payments — essentially taking control of the account. This can result in loans going into default without the borrower's knowledge.\n\nAll legitimate federal student loan management in the US, UK, and most countries is handled directly through government portals at no extra charge. Repayment assistance programmes are accessed through the official loan servicer. Any third party charging a fee for these services is almost certainly operating a scam.","redFlags":["An offer to 'eliminate' student debt quickly for an upfront fee","A company asking for your student loan servicer login credentials","A demand for a monthly fee to maintain loan forgiveness enrolment","High-pressure sales claiming an offer expires imminently","Claims of guaranteed forgiveness regardless of loan type, income, or employment","Unsolicited contact by phone or social media about your student loans"],"whatToDoNow":["Manage student loans only through your official government loan servicer portal","Never pay a third party for services available for free through official channels","If you shared your login credentials, change them immediately","Report the company to the FTC (US), Student Loans Company (UK), or your national authority","If you paid fees, dispute with your card company and file a fraud report"],"faq":[{"question":"Is student loan forgiveness real?","answer":"Yes. Various legitimate forgiveness and income-based repayment programmes exist in many countries, administered by government agencies through official loan servicers. They are free to apply for. No third party can accelerate or guarantee forgiveness beyond what the programme already provides."},{"question":"What happens if I gave a scammer my loan servicer password?","answer":"Change it immediately through the official portal's password recovery process. Check that your contact email, phone, and mailing address have not been altered. Verify your payment history and contact your servicer directly to flag potential fraud on your account."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-pet-scam","url":"https://scamencyclopedia.org/questions/what-is-a-pet-scam","question":"What is a pet scam?","shortAnswer":"A pet scam involves advertising puppies, kittens, or other animals for sale or adoption that do not exist, collecting deposits and delivery fees without ever providing an animal.","explanation":"Pet scams surged during periods of increased demand for companion animals. Fraudulent sellers create convincing listings on classified sites, social media, and even dedicated pet sale platforms, using appealing photos of animals (usually stolen from legitimate breeders' websites or social media). Prices are typically slightly below market rate to attract buyers.\n\nOnce a buyer expresses interest, the scammer confirms availability and requests a deposit to hold the animal. Delivery is always 'arranged' rather than an in-person handover. Then a series of additional charges follow: shipping insurance, veterinary health certificates, customs fees, a special climate-controlled travel crate. Each payment leads to another required payment before the animal 'arrives'.\n\nThe animal never arrives. The scammer disappears after extracting maximum payment, and victims lose both money and the emotional investment they had made in anticipation of their new pet.\n\nSome variants involve 'rehoming' rather than sale — someone claims to be giving away a valuable pedigree animal for free because of a life change, then requests a small fee for transport. The same escalating charges follow.\n\nAlways meet the animal in person before any payment. Be very cautious about any seller who cannot facilitate a local viewing, and verify any claimed breeder credentials independently.","redFlags":["The seller cannot or will not arrange an in-person viewing of the animal","The animal is available to be shipped but not collected","Requests for a deposit before viewing, or escalating fees for shipping, insurance, or health certificates","Photos appear elsewhere online when reverse image searched","A 'free to good home' pedigree animal that requires transport fees","The seller claims to be overseas, in the military, or moving abroad as a reason for urgency"],"whatToDoNow":["Insist on viewing any animal in person at the seller's location before paying anything","Reverse image search the animal's photos to check if they appear elsewhere","If you already paid and no animal arrived, report to police and the platform hosting the listing","Contact your bank to initiate a chargeback for any card payments","Warn others by reporting the listing and leaving reviews where possible"],"faq":[{"question":"Are all online pet sellers fraudulent?","answer":"No. Many legitimate breeders sell online. The key safeguard is always meeting the animal in person before paying. A real breeder or seller will always welcome this. Reluctance or inability to facilitate an in-person meeting is the defining red flag."},{"question":"Can I get a refund if the pet never arrived?","answer":"If you paid by credit card, a chargeback is the most accessible route — contact your bank. Report to police for a crime reference number, which may help with the bank dispute. Recovery from bank transfers or gift cards is much more difficult."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-social-media-impersonation-scam","url":"https://scamencyclopedia.org/questions/what-is-a-social-media-impersonation-scam","question":"What is a social media impersonation scam?","shortAnswer":"A social media impersonation scam creates a fake profile mimicking a real person — a celebrity, friend, or family member — to solicit money, extract personal information, or spread fraudulent promotions.","explanation":"Impersonation on social platforms takes two main forms. Celebrity impersonation creates fake accounts using a famous person's name and profile photo to promote fake investment schemes, crypto giveaways, or miracle products. The fake account may gain followers by liking and commenting from other fraudulent accounts, appearing legitimate through social proof. Any 'giveaway' requiring you to send cryptocurrency first to receive more is always fraud.\n\nPersonal impersonation targets individuals rather than celebrities. A scammer creates a fake account mimicking a real person's profile, then contacts that person's friends claiming to be in an emergency — stranded abroad, phone stolen, money needed urgently. Friends who trust the familiar face and name may transfer money before checking whether the contact is genuine.\n\nAccount cloning is a variant where the scammer copies all photos and information from a public profile and creates an identical-looking second account, then sends friend requests to all the original person's contacts. This is typically the precursor to running the friend-in-distress money request.\n\nIf you discover an impersonation of you, report it to the platform immediately — most have streamlined processes for verified impersonation reports. Alert your contacts that the fake account exists. If you receive unexpected requests for money via social media, verify via phone call before taking any action.","redFlags":["A celebrity account promoting a crypto giveaway where you must send funds first","A friend or family member contacts you through a new account asking for urgent financial help","An account with your friend's name and photo has sent you a new friend request","Investment opportunities promoted by social accounts of famous investors or billionaires","The account was created very recently despite claiming to be a long-established profile","Grammar and phrasing inconsistent with how you know the person to communicate"],"whatToDoNow":["Report impersonation accounts to the platform immediately using their reporting tools","Alert the real person and their contacts if you discover an account impersonating someone you know","Verify any urgent financial request through a direct phone call before sending anything","Never send cryptocurrency to a 'giveaway' that requires you to send funds first","Tighten your own profile privacy settings to reduce data available for cloning"],"faq":[{"question":"Would a real celebrity actually give away crypto on social media?","answer":"No. The 'send X to receive 2X back' format is always fraud. No legitimate giveaway requires you to send funds first to receive a larger amount. Even if an account appears verified, verification can be purchased on some platforms and does not confirm the person is who they claim."},{"question":"How do I report a fake account impersonating me?","answer":"All major platforms have a reporting category specifically for impersonation. Provide a link to both your genuine account and the fake one. Platforms typically respond quickly to genuine impersonation reports, especially where financial fraud is evident."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-an-nft-scam","url":"https://scamencyclopedia.org/questions/what-is-an-nft-scam","question":"What is an NFT scam?","shortAnswer":"NFT scams exploit the non-fungible token market through fake marketplaces, counterfeit digital art, wash trading to inflate values, and rug pulls that abandon projects after collecting buyers' funds.","explanation":"Non-fungible tokens (NFTs) are blockchain-based digital ownership records. Legitimate NFT projects exist, but the space attracted extensive fraud during peak market enthusiasm. Common scam types include: fake NFT marketplaces that collect payment and deliver nothing; counterfeit NFTs minting copies of artists' work without permission and selling them as originals; and celebrity endorsement scams where fraudsters impersonate known figures to promote worthless collections.\n\nWash trading is another manipulation: a group of coordinated wallets repeatedly buy the same NFT among themselves at escalating prices, creating a false sales history and apparent value. Unsuspecting buyers pay inflated prices based on this fabricated transaction history.\n\nNFT project rug pulls mirror crypto rug pulls. Developers launch an NFT collection with compelling art and roadmap promises (games, utility, physical goods, exclusive access), collect sale proceeds, then abandon the project entirely. Holders are left with NFTs that have no development behind them and rapidly declining value.\n\nPhishing in the NFT space is pervasive: fake minting sites, Discord messages claiming free NFT airdrops that require wallet connection, and wallet-draining smart contracts. Connecting a wallet to a malicious contract can result in all assets in that wallet being transferred to the attacker.","redFlags":["A project with an anonymous team and no verifiable track record","Unusually high recent sale prices with many transactions between wallets created at the same time","Unsolicited offers of free NFT airdrops requiring you to connect your wallet","A roadmap with promises that depend entirely on future sales volumes","Minting sites that appear suddenly and are promoted only through social media with no independent reviews","Smart contracts that have not been independently audited"],"whatToDoNow":["Research any project team for verifiable identities and prior work before investing","Never connect your primary wallet to an unknown site — use a separate wallet for minting","If your wallet was drained, revoke all outstanding token approvals on revoke.cash or equivalent","Report fraud to the NFT platform and your national fraud authority","Document all transaction hashes for any potential legal proceedings"],"faq":[{"question":"Are all NFTs a scam?","answer":"No. NFTs are a technology for verifiable digital ownership with legitimate applications in art, gaming, collectibles, and event ticketing. The scam risk comes from specific bad actors, not the technology itself. Due diligence on teams, smart contracts, and market data is the relevant safeguard."},{"question":"What does 'revoking token approvals' mean?","answer":"When you sign a smart contract interaction, you may grant that contract permission to move tokens from your wallet indefinitely. Revoking approvals removes those standing permissions. Tools like revoke.cash or Etherscan's token approval checker let you see and remove all outstanding approvals."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-prize-notification-scam","url":"https://scamencyclopedia.org/questions/what-is-a-prize-notification-scam","question":"What is a prize notification scam?","shortAnswer":"A prize notification scam informs victims they have won a prize and requests personal information or a payment to claim it. The prize does not exist and the purpose is either to steal money through advance fees or harvest personal details for fraud.","explanation":"Prize notification scams differ slightly from lottery scams in that they can arrive for any type of supposed prize: a retail draw, a social media competition, a survey reward, a brand anniversary giveaway, or a random selection. The supposed sponsor may be a real company whose name is being used without authorisation, which adds apparent credibility.\n\nThe mechanics are consistent with other advance fee fraud: a reference number is provided, a warm letter of congratulation is sent, and then a claims process is introduced that involves fees. Alternatively, the notification directs you to a form that harvests personal information — name, address, date of birth, national ID number — ostensibly for prize fulfilment but actually for identity theft.\n\nSocial media prize scams are particularly prevalent. Fake accounts impersonating well-known brands run 'competitions' that require sharing a post, liking a page, or submitting contact details. This simultaneously expands the scammer's reach through social sharing and harvests contact details for future scam targeting.\n\nLegitimate competition winners are notified through channels they actually used to enter, by organisations with verifiable identities, and are never asked for fees to receive their prize. If you did not enter, you cannot have won.","redFlags":["You are told you have won a prize from a competition you never entered","A processing fee, tax, or charge is required to release the prize","The notification asks for personal identification documents before releasing winnings","The contact email uses a free provider domain rather than a company domain","Social media competitions requiring you to share widely and provide contact details","The prize claim expires in an unusually short timeframe"],"whatToDoNow":["Do not pay any fee to receive a prize","Do not submit personal documents to unverified contacts","Search independently for the competition or promotion to verify it exists","Report fake prize notifications to your fraud authority and the impersonated brand","If you submitted personal details, monitor your credit file and consider a fraud alert"],"faq":[{"question":"Could I really have been randomly selected for a prize by a company I use?","answer":"Legitimate promotional draws do happen. The key tests are: Did you enter or opt in? Is the prize issuer independently verifiable? Is there any upfront cost? No legitimate prize ever requires a payment from the winner."},{"question":"What if a real brand's social media account is running the giveaway?","answer":"Verify the account is the official verified account for the brand, not an impersonator. Check the account's history and follower count. A legitimate brand giveaway will never ask for payment, your ID documents, or bank details."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-an-insurance-scam","url":"https://scamencyclopedia.org/questions/what-is-an-insurance-scam","question":"What is an insurance scam?","shortAnswer":"Insurance scams can target policyholders directly (fake policies, ghost brokers) or involve fraud against insurers (staged accidents, inflated claims) that ultimately raises premiums for all honest customers.","explanation":"Insurance fraud operates on two sides of the market. Consumer-facing insurance scams include ghost broking: fraudsters pose as legitimate brokers, sell fake motor or travel insurance at attractive prices, and issue worthless policy documents. Victims discover they are uninsured only when they make a claim or are stopped by police. Premium diversion scams collect premiums from customers but never forward them to a real insurer.\n\nOn the other side, some policyholders commit fraud against insurers. Staged vehicle accidents, deliberately caused property damage, and exaggerated or fabricated claims are common. While individual fraud may seem victimless against a large corporation, these frauds increase premiums industrywide, effectively transferring cost to all honest policyholders.\n\nInsurance fraud in hiring contexts also occurs: contractors and tradespeople present fake certificates of employers' liability or public liability insurance to win contracts. Clients who rely on this coverage later discover they have no recourse if an incident occurs.\n\nVerify any insurance policy by contacting the named insurer directly using a number from their official website — not the one your broker provides. For motor insurance specifically, check the relevant national database of registered vehicles and policies.","redFlags":["Insurance premiums significantly below market rate from a non-standard broker","Policy documents that look genuine but cannot be verified on the insurer's official systems","A broker who communicates only through messaging apps with no verifiable physical address","Premium payments requested in cash, bank transfer, or gift cards rather than standard payment","A contractor or tradesperson who is reluctant to provide insurance documents in advance","Third parties at the scene of a minor accident who are unusually insistent or have a lawyer on call"],"whatToDoNow":["Verify any insurance policy with the named insurer directly before relying on it","Check motor insurance on your national Motor Insurance Database if available","Report ghost broking to your national financial regulator and police","If involved in a suspicious accident, note all details and report concerns to your own insurer","Report suspected contractor insurance fraud before commencing work, not after an incident"],"faq":[{"question":"What is ghost broking?","answer":"Ghost broking is when someone poses as an insurance broker, sells a fake or improperly obtained policy, and takes the premium payment. The victim has a policy document but is not actually insured. This is most common in motor insurance and can leave drivers facing serious legal consequences."},{"question":"Why does insurance fraud affect me as an honest policyholder?","answer":"Insurers factor fraud losses into premium calculations across all policyholders. Fraud raises the overall claims cost that premiums must cover. Reducing insurance fraud is therefore in every honest policyholder's financial interest."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-gaming-scam","url":"https://scamencyclopedia.org/questions/what-is-a-gaming-scam","question":"What is a gaming scam?","shortAnswer":"Gaming scams target players through fake in-game item trades, phishing for game account credentials, fraudulent marketplaces for virtual goods, and social engineering within gaming communities to steal money or account access.","explanation":"Online gaming communities have become a significant target for fraud because they combine substantial real-money economies (in-game purchases, item trading, tournament prizes) with large populations of younger players who may have less experience identifying manipulation.\n\nItem and currency scams are pervasive in games with tradeable virtual goods. A trader offers a deal that appears favourable but uses interface tricks — a quick swap at the last moment, a visual copy of a rare item with slightly different stats — to leave the victim with something worthless. Account-for-account trades frequently result in one party taking the other's account and immediately changing credentials.\n\nPhishing for gaming credentials is common. Fake websites mimicking Steam, EA, PlayStation Network, or Roblox collect login details under the guise of account recovery, free in-game currency, or skin giveaways. With account access, fraudsters either sell the account directly or access stored payment methods.\n\nFor younger players, 'modding' offers and free Robux, V-Bucks, or similar currency are consistently fraudulent. No third-party service can legitimately add currency to a game account — these always end in credential theft or malware installation.","redFlags":["Offers of free in-game currency from third-party sites rather than the official game platform","A trade that requires you to go first without escrow","Deals significantly above or below standard market value that seem too good","Someone in-game asking you to visit an external site to claim a prize or verify your account","Requests to share your account login to 'boost' your character or verify ownership","Excessive urgency to complete a trade before you can check item values"],"whatToDoNow":["Only make in-game purchases through the official platform store","Enable two-factor authentication on all gaming platform accounts","Use the platform's official trade escrow systems and never trade outside them","If your account was compromised, contact the platform's support immediately","Change your email password if your gaming account credentials match"],"faq":[{"question":"Are free in-game currency generators real?","answer":"No. There is no legitimate third-party method to add currency to a game account. Every site claiming to offer free Robux, V-Bucks, or similar currency either harvests your credentials, installs malware, or completes fraudulent offer walls that benefit the scammer. The currency never arrives."},{"question":"How can I help my child avoid gaming scams?","answer":"Discuss the specific scam types relevant to the games they play. Explain that no legitimate service offers free currency. Set up two-factor authentication on their accounts. Encourage them to ask you before making any trades outside the official game system."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-romance-investment-scam","url":"https://scamencyclopedia.org/questions/what-is-a-romance-investment-scam","question":"What is a romance investment scam?","shortAnswer":"A romance investment scam combines fake romantic relationship-building with fraudulent cryptocurrency or forex investment platforms, using emotional manipulation to persuade victims to invest growing sums before disappearing with all funds.","explanation":"The romance investment scam — sometimes also called CryptoRom or sha zhu pan (the Chinese term for pig butchering) — is a convergent form of fraud that combines the emotional manipulation of romance fraud with the financial mechanics of investment fraud. It is distinguished from pure pig butchering by the degree to which the investment component is integrated throughout the relationship, not just as a final act.\n\nThe contact begins on dating apps, social media, or messaging platforms. The scammer presents as an attractive, successful professional who gradually builds genuine-feeling affection. Investment conversation is introduced organically — they mention making money on a platform, show screenshots of gains, and offer to share the opportunity with someone they care about.\n\nThe victim is guided to a convincing trading platform where initial investments appear to grow dramatically. The psychological mechanism combines FOMO (fear of missing out), trust in the romantic partner, and apparent evidence of real profits. Victims invest more and encourage others. Withdrawal attempts face endless bureaucratic obstacles and escalating fee demands.\n\nThis scam causes some of the highest average losses of any fraud type because the relationship investment runs parallel to the financial investment — victims are not just betting money but betting on a person they believe loves them. Recognising and accepting that the relationship was fabricated is psychologically extremely difficult.","redFlags":["An online contact who is always attractive, successful, and immediately warm","Investment advice introduced naturally in the context of a deepening personal relationship","A trading platform recommended by your online partner that is not independently verifiable","Returns on a platform that consistently outperform market rates","Technical obstacles to withdrawing — taxes, fees, verification — that require additional deposits","The person you are investing with has never met you in person despite months of communication"],"whatToDoNow":["Stop all transfers immediately","Do not pay any further fees on the promise of unlocking funds — they will not be released","Report to your bank about any transactions and to your national fraud authority","Preserve all communications and transaction records","Seek emotional support — dual financial and relationship trauma requires specific support","Talk to someone you trust; isolation compounds the harm"],"faq":[{"question":"Is there any way to know for certain the platform was fake?","answer":"Fraudulent investment platforms are often designed to be visually convincing. Key verification steps: check whether the platform holds a licence with your national financial regulator; search the platform name plus 'scam' or 'review'; attempt a small withdrawal and document any obstacles. Regulatory registers are the definitive check."},{"question":"Should I feel ashamed if I fell for this scam?","answer":"No. These operations are sophisticated, professionally resourced, and exploit fundamental human needs for connection and security. Victims are diverse in age, education level, and life experience. The shame belongs entirely to the perpetrators."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-account-takeover-fraud","url":"https://scamencyclopedia.org/questions/what-is-account-takeover-fraud","question":"What is account takeover fraud?","shortAnswer":"Account takeover (ATO) fraud occurs when a criminal gains unauthorised access to one of your online accounts and uses it to steal money, make purchases, or harvest personal information.","explanation":"Account takeover is typically enabled by credential theft — your username and password obtained through a data breach, phishing, malware, or credential stuffing (automated testing of leaked credentials from one breach against other services, relying on password reuse). Once inside, attackers move quickly, changing contact details to prevent recovery alerts, then extracting value.\n\nFor financial accounts, this means authorising transfers or purchases. For email accounts, it means accessing other linked accounts through password reset flows. For social media, it means impersonating you to scam your contacts or selling the account. For business email, it enables BEC fraud.\n\nMulti-factor authentication (MFA) is the single most effective defence. Even with your password, an attacker without access to your second factor (authenticator app, hardware key) cannot complete the takeover. SMS-based MFA is better than none but can be bypassed by SIM swapping; authenticator apps and hardware keys are more robust.\n\nPassword managers solve the password reuse problem by generating unique, complex passwords for every service. A breach at one service then cannot cascade to others. Regularly reviewing your accounts for unfamiliar login activity allows early detection before significant damage occurs.","redFlags":["Login alerts for accounts you did not access, from unfamiliar locations or devices","Password reset emails you did not request","Your email or phone number on an account has been changed without your action","Friends or contacts report unusual messages from your accounts","Unexpected charges or transfers on financial accounts","You are locked out of an account you were recently using normally"],"whatToDoNow":["Attempt to recover the account through official account recovery channels immediately","Contact the platform's support team if standard recovery is unavailable","Change the passwords of any linked accounts that share the same password","Enable MFA on all accounts, prioritising email and financial services","Review and revoke any third-party applications connected to the compromised account","Report to the platform and to your national fraud authority if money was lost"],"faq":[{"question":"How do attackers access so many accounts so quickly after a breach?","answer":"Automated credential-stuffing tools can test millions of username/password combinations per hour across hundreds of services. Reusing the same password across multiple sites means a single breach can unlock many accounts. Unique passwords per site are the direct countermeasure."},{"question":"Is SMS two-factor authentication enough?","answer":"SMS MFA is significantly better than no MFA and will block most automated credential-stuffing attacks. However, it can be bypassed by SIM swapping or real-time phishing. For accounts holding significant financial value, an authenticator app or hardware security key provides stronger protection."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-fake-invoice-scam","url":"https://scamencyclopedia.org/questions/what-is-a-fake-invoice-scam","question":"What is a fake invoice scam?","shortAnswer":"A fake invoice scam sends fraudulent payment requests to businesses or individuals, hoping that recipients will pay them without checking whether the goods or services billed were actually ordered or received.","explanation":"Fake invoice scams target businesses most often because corporate payment processes can be complex and involve many suppliers. Fraudsters send professional-looking invoices for services that appear plausible — website hosting, office supplies, advertising, domain renewal, health and safety compliance — in the hope that accounts payable staff will process them without cross-referencing purchase orders.\n\nDirectory scams are a long-running variant: a company receives an invoice for a 'business listing' in an online directory they were supposedly registered in, or an apparent renewal notice that closely resembles a genuine domain or trademark renewal. The invoices are designed to look like bills from services already in use.\n\nSome fake invoices arrive by post, some by email, and increasingly some arrive through compromised supplier accounts (overlapping with BEC fraud). The common element is that no legitimate business relationship or purchase order underlies the invoice.\n\nControls include requiring all invoices to match a purchase order before payment, maintaining a verified supplier list against which new payment details are checked, and training staff to verify any new banking details by phone before updating records.","redFlags":["An invoice for a service not in your supplier list or that no one remembers ordering","A 'renewal' notice for a directory listing, domain, or registration in small print","Invoice sender banking details differ from those used previously for this supplier","An invoice arrives via email only with no corresponding purchase order","The invoice amount is small enough to fall below standard authorisation thresholds","A new supplier appears in the system for the first time with a payment due immediately"],"whatToDoNow":["Implement a three-way matching requirement: purchase order, delivery note, and invoice must match before payment","Call any supplier requesting updated banking details using a number from your existing records, not the new invoice","If you paid a fraudulent invoice, contact your bank immediately to attempt recall","Report to your national fraud authority and trading standards","Review your supplier master file for any accounts added without verified identity checks"],"faq":[{"question":"Are invoice scams illegal?","answer":"Yes. Sending fraudulent invoices for goods or services not provided is fraud. In most jurisdictions it also violates consumer protection and trading laws. However, grey-area directory invoices often use deliberately ambiguous language to stay just below criminal thresholds."},{"question":"What makes directory renewal invoices effective as scams?","answer":"They mimic legitimate renewals with official-looking formats, reference numbers, and urgent payment terms. Businesses receive hundreds of legitimate supplier invoices and directory renewals, so fraudulent ones blend in. Staff processing payments often do not recall what subscriptions the business holds."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-romance-scam","url":"https://scamencyclopedia.org/questions/what-is-a-romance-scam","question":"What is a romance scam?","shortAnswer":"A romance scam involves a criminal building a fake online romantic relationship with a victim to manipulate them into sending money, gifts, or personal information. The romantic partner is entirely fictitious.","explanation":"Romance scams can range from relatively brief cons to long-term relationships sustained for years. The fraudster creates an appealing persona — typically attractive, successful, emotionally available, and often in a profession associated with being abroad (military, doctor working with NGOs, oil industry engineer). Contact is made through dating apps, social media, or even chance messages.\n\nThe relationship is carefully managed. The scammer learns what the victim values and reflects it back. Affection escalates faster than would occur naturally. Within weeks or months the victim has developed genuine emotional attachment to someone they have never met in person and likely never video-called successfully.\n\nWhen the financial request comes, it is always embedded in the relationship narrative: the scammer needs help, the victim wants to help the person they love, the request feels like part of caring for someone rather than sending money to a stranger. Subsequent requests follow, each justified within the story.\n\nThe harm is twofold: financial and psychological. Victims often describe the emotional aftermath as grief — the loss of a relationship they believed was real. This grief, combined with shame, means many victims do not report or seek help promptly. Non-judgmental support is critical.","redFlags":["An online relationship that has never been in-person and shows no real prospect of meeting","A partner who always has a professional or personal reason to remain abroad","Video calls that never work, are very brief, or show a person who does not interact naturally","Any request for money, no matter how emotionally justified","Discouragement from telling friends and family about the relationship","The relationship escalated much faster than any previous relationship you have had"],"whatToDoNow":["Pause all financial transactions and step back before sending any money","Share the situation with a trusted friend or family member and listen to their perspective","Reverse image search all photos from the relationship","Propose an in-person meeting or live video call with an unexpected question","Report the profile to the platform and your national fraud authority","Contact a victim support organisation — support is available without judgment"],"faq":[{"question":"How do I raise the topic with a friend I think is in a romance scam?","answer":"Gently and without accusation. Share specific observations rather than conclusions: 'I noticed they always have a reason they cannot visit' rather than 'You are being scammed'. Avoid ultimatums that could cause your friend to cut contact with you and become more isolated."},{"question":"Can romance scammers be prosecuted?","answer":"Yes, when identifiable. Many operate across international borders, which complicates prosecution, but law enforcement agencies do pursue major operators. Reporting provides intelligence that helps build cases even if your individual case is not prosecuted."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-ransomware","url":"https://scamencyclopedia.org/questions/what-is-ransomware","question":"What is ransomware?","shortAnswer":"Ransomware is malicious software that encrypts the victim's files or locks their device and demands payment — typically in cryptocurrency — for the decryption key needed to restore access.","explanation":"Ransomware arrives through phishing emails with malicious attachments, drive-by downloads from compromised websites, exploit kits targeting unpatched software vulnerabilities, or remote desktop protocol (RDP) brute-force attacks. Once executed on a device, it silently encrypts documents, photos, databases, and other files, then displays a ransom demand.\n\nModern ransomware attacks against organisations combine encryption with data theft — criminals copy sensitive data before encrypting it and threaten to publish it if the ransom is not paid (double extortion). Some add a third pressure: launching DDoS attacks against the victim's external services.\n\nFor individuals, ransomware is often delivered through email attachments pretending to be invoices, parcel notifications, or legal documents. The ransom demand is usually in the hundreds to low thousands of dollars' worth of cryptocurrency. Payment does not guarantee decryption — some ransomware variants have no functional decryption key at all.\n\nFor organisations, attacks can be devastating: encrypting backup systems, halting operations, and demanding ransoms in the hundreds of thousands. Regular offline backups — tested for restorability — are the most important protection because they allow restoration without paying.","redFlags":["Files suddenly have a new, unfamiliar extension and cannot be opened","A ransom note appears on your desktop or as a text file in affected folders","Your screen is locked with a message demanding payment","Unusual network activity or high CPU usage that you did not initiate","Antivirus software has been disabled or appears to have been removed"],"whatToDoNow":["Disconnect the device from the network immediately to limit spread","Do not pay the ransom — payment does not guarantee recovery and funds further attacks","Check nomoreransom.org for free decryption tools for known ransomware variants","Report to your national cybercrime authority","Restore from clean backups if available, after fully reimaging the affected system","Engage a cybersecurity firm if the attack affects business systems"],"faq":[{"question":"Should I ever pay a ransomware demand?","answer":"Most security authorities advise against payment. It funds criminal infrastructure, does not guarantee decryption, and may mark you as a willing payer for future attacks. Explore decryption tools on nomoreransom.org first. For critical business situations, consult a specialist before deciding."},{"question":"How can I protect against ransomware?","answer":"The key defences are: maintain regular offline or air-gapped backups tested for restorability; keep operating systems and software patched; use email filtering to block malicious attachments; disable macros in Office documents from unknown senders; and limit RDP exposure."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-puppy-mill-scam","url":"https://scamencyclopedia.org/questions/what-is-a-puppy-mill-scam","question":"What is a puppy mill scam?","shortAnswer":"A puppy mill scam involves breeders or sellers who misrepresent the health, breed purity, and conditions of puppies, selling sick or poorly-bred animals that quickly develop serious medical conditions at great emotional and financial cost.","explanation":"Unlike outright pet scams where no animal ever arrives, puppy mill scams do deliver an animal — but it is often a very different animal from what was advertised. Sellers falsely claim pure-bred status, provide fabricated pedigree papers, misrepresent the puppy's age or health history, and fail to disclose genetic conditions.\n\nPuppies from intensive breeding operations are frequently weaned too young, inadequately socialised, and exposed to diseases in overcrowded conditions. They may appear healthy initially but develop serious conditions within weeks or months of purchase — parvo, kennel cough, genetic abnormalities, or behavioural problems from poor socialisation.\n\nOnline sales have made this easier for disreputable operations. Photos can be staged; reviews can be fabricated; distance prevents buyers from seeing the true conditions. Imported puppies from overseas breeding operations add a further layer of documentation fraud.\n\nResponsible breeding involves health testing of parent animals, appropriate socialisation periods, transparent veterinary records, and willingness to show you the animal's environment and parent. Any reluctance to allow viewing of where the puppy was raised is a significant warning sign.","redFlags":["You are not allowed to visit where the puppy was raised or meet the parent animals","The breeder always seems to have the exact breed you want immediately available","Pedigree papers are difficult to verify or come from an unfamiliar registry","Health guarantees are extremely vague or are offered for only a very short period","The puppy is offered for sale significantly younger than eight weeks","The price is much lower than comparable breeders for a supposedly rare breed"],"whatToDoNow":["Always visit the puppy and meet at least one parent animal in person before purchasing","Verify pedigree papers with the stated registry directly","Take the puppy to a vet within 48 hours of purchase for an independent health check","If the animal has undisclosed health conditions, report to trading standards and the selling platform","Consider only adopting from registered rescues or verified breed-specific organisations"],"faq":[{"question":"Are puppies sold in pet shops from mills?","answer":"Some jurisdictions now restrict or ban pet shop puppy sales specifically because of links to intensive breeding operations. Rules vary significantly by country and region. Check your local laws and consider rescue adoption or verified independent breeder purchase as alternatives."},{"question":"What recourse do I have if a puppy develops a condition not disclosed at sale?","answer":"Consumer protection laws in many jurisdictions treat animals sold with undisclosed pre-existing conditions as a breach of contract. Document all veterinary findings promptly and contact trading standards. The breeder's 'health guarantee' paperwork is relevant evidence."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-debt-collection-scam","url":"https://scamencyclopedia.org/questions/what-is-a-debt-collection-scam","question":"What is a debt collection scam?","shortAnswer":"A debt collection scam involves fraudsters impersonating debt collectors and threatening victims with arrest, lawsuits, or wage garnishment to coerce payment for debts that do not exist or have already been paid.","explanation":"Debt collection scams exploit confusion, fear of legal consequences, and the social shame around debt. A caller claims to represent a collections agency and asserts that you owe money on a payday loan, credit card, utility account, or legal judgement. They may have some personal details about you — obtained from data breaches or public records — to lend credibility.\n\nThe threats escalate rapidly: a warrant has been issued, police are en route, your employer will be contacted, your wages will be garnished. The script is designed to create panic that overrides rational evaluation. Payment is demanded immediately in the form of a wire transfer, gift cards, or prepaid debit card.\n\nLegitimate debt collection is regulated in most countries. Collectors must identify themselves and their company, confirm the debt in writing if requested, and are prohibited from threatening arrest (as civil debt does not result in arrest in most common law jurisdictions) or using abusive language. Knowing these rules is the most powerful defence.\n\nIf you receive a suspicious call, ask for the caller's name, company name, and mailing address. Tell them you will call back after reviewing the debt in writing. A real collector will provide this. A scammer will resist or become more aggressive.","redFlags":["A caller threatens immediate arrest for an unpaid debt","You are asked to pay via gift cards, wire transfer, or prepaid card","The caller refuses to provide written validation of the debt","The debt is for an account you do not recognise and the caller cannot provide the original creditor","Extreme urgency — payment must be made before the end of the business day","The caller becomes abusive or threatening when you ask questions"],"whatToDoNow":["Request written validation of the debt by mail — you have a legal right to this in most jurisdictions","Check your credit report for the debt in question","Do not pay without validating the debt is real and the collector is legitimate","Report abusive or fraudulent debt collection to the FTC (US), FCA (UK), or your national consumer authority","If you paid, report to your bank and file a police report"],"faq":[{"question":"Can I be arrested for not paying a civil debt?","answer":"In most common law jurisdictions (US, UK, Australia, Canada), civil debts do not lead to arrest. You cannot be imprisoned for owing money on a credit card or loan. Threats of arrest for civil debt are a hallmark of fraud. Contempt of court arising from ignoring a court order is a separate matter."},{"question":"What is debt validation and how do I request it?","answer":"Debt validation is a formal written confirmation of the debt, including the amount, original creditor, and your rights. In the US, the Fair Debt Collection Practices Act (FDCPA) gives you the right to request this within 30 days of first contact. The collector must cease collection until they provide it."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-courier-parcel-scam","url":"https://scamencyclopedia.org/questions/what-is-a-courier-parcel-scam","question":"What is a courier parcel scam?","shortAnswer":"A courier parcel scam mimics delivery notifications from major logistics companies to trick recipients into paying fake customs fees, releasing personal information, or clicking malicious links.","explanation":"Parcel delivery notification scams align closely with actual shopping and delivery behaviour — everyone orders things online, and receiving a delivery update by text or email is entirely normal. Criminals exploit this familiarity by sending messages indistinguishable in format from those sent by DHL, Royal Mail, FedEx, UPS, or local national postal services.\n\nThe most common pretext is a small fee: a customs charge, a delivery surcharge, a storage fee for a parcel held at a depot. The fee is small — often under £5 or $5 — precisely because a small amount feels low-risk and easy to pay without scrutiny. The link leads to a convincing fake payment page that harvests full card details, enabling subsequent fraudulent charges far larger than the stated fee.\n\nOther variants attempt to harvest credentials by redirecting to a fake account login page for the delivery service, or deliver malware through a fake tracking app download.\n\nIf you receive an unexpected delivery notification, navigate directly to the carrier's official website or app to check for any genuine delivery issues. Do not use any link, phone number, or contact detail provided in the suspicious message.","redFlags":["An unexpected text or email requesting payment of a customs or delivery fee via a link","A link in the message goes to a domain different from the carrier's official website","You are not currently expecting a delivery but receive a notification about a held parcel","The fee requested is unusually small, making it feel safe to pay without checking","The message asks you to download a tracking app from an unfamiliar source"],"whatToDoNow":["Do not click the link — go directly to the carrier's official website to check for genuine issues","Report smishing texts to 7726 (UK) or the FTC (US)","If you entered card details, contact your bank immediately to report potential fraud","Block the sender and delete the message","Check your statements for any unauthorised charges in the days following"],"faq":[{"question":"How do scammers know I might be expecting a delivery?","answer":"Usually they do not. The messages are sent in bulk to millions of numbers. A small percentage of recipients will happen to be expecting a delivery at the time, which is enough for the scam to be profitable. The specificity is an illusion."},{"question":"Would a real carrier ever charge me for customs via a text link?","answer":"Legitimate customs charges do exist for international deliveries, but carriers handle them either before delivery, at the door on delivery, or through clearly official notification processes. Legitimate notifications will always direct you to the carrier's own authenticated app or website."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-bank-impersonation-scam","url":"https://scamencyclopedia.org/questions/what-is-a-bank-impersonation-scam","question":"What is a bank impersonation scam?","shortAnswer":"A bank impersonation scam involves criminals posing as your bank's fraud or security team to trick you into moving your money to a 'safe account' or revealing your credentials, leading to complete loss of the transferred funds.","explanation":"Bank impersonation scams are among the most financially devastating consumer frauds, partly because the impersonation is so effective. Caller ID can be spoofed to display your bank's genuine fraud department number; the caller may know your name, partial account number, and recent transaction history (obtained from breaches or social engineering).\n\nThe scenario is always urgent: suspicious transactions have been detected on your account; there is an insider fraud at your branch; your account is compromised and funds must be moved immediately for protection. The 'safe account' where you are directed to transfer your money is controlled entirely by the fraudster.\n\nKey distinguishing facts that victims often learn too late: your bank will never ask you to move money to a safe account; your bank will never ask for your full PIN or online banking password; your bank will never send a courier to your home to collect your card. These requests, however plausible the caller sounds, are always fraud.\n\nAuthorised Push Payment (APP) fraud — where the victim is tricked into authorising transfers themselves — is now treated more sympathetically by regulators in many countries, with banks required to contribute to reimbursement. However, prevention is far preferable to recovery.","redFlags":["A call claiming to be from your bank's fraud team asking you to move money to a 'safe account'","The caller knows partial personal and account details and uses this to build trust","You are asked to confirm your full PIN, online banking password, or one-time passcode","A courier is offered to collect your bank card at your door","The urgency and confidentiality of the situation makes normal verification feel inappropriate","You are told your local branch staff cannot be trusted due to an ongoing investigation"],"whatToDoNow":["Hang up immediately — your bank will not be offended, and if the situation was real, you can call back","Wait several minutes (some attacks maintain the line) or use a different phone to call your bank's official number","Never transfer money to a 'safe account' suggested by an inbound caller","Report to your bank's fraud team immediately if you did transfer funds","Report to your national fraud authority","Document everything for an APP fraud reimbursement claim"],"faq":[{"question":"Can I get my money back if I was tricked into an APP transfer?","answer":"In many countries, including the UK, regulations now require banks to reimburse victims of APP fraud in most circumstances. Contact your bank immediately and request a reimbursement under the APP fraud rules. A police report and fraud authority report strengthens your case."},{"question":"Would my bank ever call me without a scheduled appointment?","answer":"Yes — banks do make fraud alert calls. The difference is that genuine bank fraud calls never ask you to move money, never ask for your PIN or full password, and never ask for one-time passcodes. If asked for any of these, hang up and call back."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-fake-escrow-scam","url":"https://scamencyclopedia.org/questions/what-is-a-fake-escrow-scam","question":"What is a fake escrow scam?","shortAnswer":"A fake escrow scam in a buyer/seller transaction proposes using a fraudulent escrow service controlled by the scammer, giving the victim false confidence that funds are protected while the fraudster simply steals the payment.","explanation":"Escrow services legitimately protect both parties in high-value transactions by holding funds until agreed conditions are met — often used in property, business acquisitions, and high-value goods sales. Scammers exploit the credibility of this concept by either creating a fake escrow website or directing victims to a 'trusted' escrow service that they secretly control.\n\nIn a typical scenario, a fraudulent buyer in a car or domain name sale insists on using a specific escrow service, sending a link to what appears to be a professional platform. The seller transfers the item or provides access before checking their own 'funds received' notification — which is also fake. The buyer disappears with the goods and the escrow service, being fraudulent, never releases payment.\n\nThe reverse also occurs: a fraudulent seller directs a buyer to a fake escrow, the buyer deposits funds 'safely', then both the seller and the escrow service disappear.\n\nAlways verify escrow services independently. Legitimate services are licenced financial intermediaries with verifiable registration, regulated in the jurisdictions where they operate, and do not accept customer direction to their platform from the other party in a transaction.","redFlags":["The other party insists on a specific escrow service and sends you the link","The escrow service website was recently created or has minimal independent reviews","The escrow company cannot be found on your national financial regulator's register","You receive a 'funds received' notification before you have confirmed the transaction independently","The buyer or seller becomes unusually insistent about the escrow service choice"],"whatToDoNow":["Only use escrow services you find and verify independently, never one introduced by the other party","Check escrow service registration with your national financial regulator","If defrauded, report to police and your national fraud authority","Contact your bank if any payment method allows for a dispute","Warn the platform where the fraudulent buyer or seller was found"],"faq":[{"question":"How do I find a legitimate escrow service?","answer":"Search your national financial regulator's authorised firms database for 'escrow' or 'payment intermediary'. For US transactions, Escrow.com is a well-known registered service. Verify the site independently using a search engine rather than a link from the transaction counterpart."},{"question":"Is it safer to use a platform's built-in payment protection?","answer":"Yes, generally. Established marketplaces (eBay, Etsy, Airbnb, Upwork) offer their own buyer and seller protections integrated into the transaction flow. These protections evaporate the moment a transaction is moved off-platform — which is a common scammer tactic."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-scholarship-scam","url":"https://scamencyclopedia.org/questions/what-is-a-scholarship-scam","question":"What is a scholarship scam?","shortAnswer":"A scholarship scam charges students fees to apply for financial aid opportunities that either do not exist, are freely available without a middleman, or guarantee awards no legitimate scholarship could promise.","explanation":"Scholarship and financial aid scams target students and families navigating the complex and stressful world of higher education funding. The operations typically offer to find matching scholarships, process applications, or guarantee awards in exchange for upfront fees, subscription payments, or personal financial information.\n\nSome simply take the fee and provide nothing. Others provide a list of scholarship opportunities that is freely available on any scholarship search database. Some send official-looking 'award notifications' that require a fee to 'claim' the scholarship — a direct advance fee scam in educational clothing.\n\nPhishing targeting FAFSA (US), student finance portals, and university login systems is a related vector: students receive emails appearing to be from their institution or financial aid office requesting login credentials or bank details for 'disbursement purposes'.\n\nAll legitimate scholarship applications are free. Scholarship matching databases are free. No legitimate scholarship requires you to pay a fee to claim your award. Any scholarship-related service that charges money for what is freely available elsewhere, or guarantees results, should be treated with scepticism.","redFlags":["A fee is required to apply for or claim a scholarship","A guaranteed scholarship award regardless of your academic profile or eligibility","Unsolicited notification that you have been awarded a scholarship you did not apply for","A scholarship search service charges a monthly fee for access to its database","Requests for your Student Aid ID (FSA ID) or other educational portal credentials","Pressure to respond quickly before the 'scholarship opportunity closes'"],"whatToDoNow":["Use free scholarship databases (Fastweb, Scholarships.com, your institution's financial aid office)","Never pay a fee to apply for or claim a scholarship","Report scholarship scams to the FTC (US) or your national consumer authority","If you shared login credentials for educational portals, change them immediately","Contact your institution's financial aid office directly if you receive any suspicious communications about your aid"],"faq":[{"question":"Are scholarship search services legitimate?","answer":"Free scholarship search services are legitimate and widely available. Paid services charge for something you can do for free and may add little value. The paid services that are outright scams provide no value at all and may harvest your personal information."},{"question":"Can a university email be spoofed for scholarship phishing?","answer":"Yes. Scammers send emails with university branding and domain-lookalike addresses. Always verify financial aid communications by logging into your student portal directly or calling your institution's financial aid office using a number from the university's official website."}],"lastReviewed":"2026-06-10"},{"slug":"can-i-get-scammed-through-apple-pay","url":"https://scamencyclopedia.org/questions/can-i-get-scammed-through-apple-pay","question":"Can I get scammed through Apple Pay?","shortAnswer":"Apple Pay itself is technically secure, but you can absolutely be scammed if you use it to pay a fraudulent seller, because payments sent to individuals via Apple Cash are treated like cash and are not reversible.","explanation":"Apple Pay uses device-stored tokens rather than transmitting your actual card number, which makes it very hard for a merchant to steal your card details. However, the fraud protection you receive depends entirely on which underlying payment method is tied to the transaction. If you pay a legitimate business using a credit card through Apple Pay, your credit card's dispute rights apply exactly as they would for any other card purchase.\n\nThe danger arises when someone asks you to pay via Apple Cash, the peer-to-peer feature. Once you send Apple Cash to another person it behaves like handing over physical cash: Apple does not reverse it, and there is no buyer protection. Scammers advertising fake goods on social media or classifieds specifically request Apple Pay because the payment is instant and irreversible from the sender's side.\n\nCommon scenarios include fake puppy sellers, concert ticket fraud, apartment deposit scams, and online marketplace fraud where the 'seller' asks you to Apple Pay before they ship anything. If the item never arrives, Apple's response is that they facilitated the transfer of funds as requested — they do not investigate the underlying transaction.\n\nFor purchases from strangers or unfamiliar online sellers, use a credit card directly rather than Apple Cash. Reserve Apple Cash for people you personally know and trust, such as splitting a dinner bill with a friend.","redFlags":["Seller insists on Apple Pay or Apple Cash as the only accepted method","Price is far below market value for the item being sold","Seller cannot or will not meet in person for a local transaction","Urgency pressure to pay before you see the item","No verifiable business address or return policy","Contact only through social media DMs with a recently created profile"],"whatToDoNow":["Use a credit card (not Apple Cash) when buying from anyone you do not personally know","For marketplace transactions, prefer platforms with built-in buyer protection","If you already sent Apple Cash to a scammer, report it to Apple and to the FTC at ReportFraud.ftc.gov","Contact your bank immediately if your credit or debit card was also compromised","File a local police report for any amount over a few hundred dollars","Visit /payments for a full comparison of payment method protections"],"faq":[{"question":"Is Apple Pay safer than a regular card swipe?","answer":"For card-data security, yes — it uses tokenisation so the merchant never sees your real card number. But that security does not help you if the merchant is a scammer who simply takes your payment and disappears."},{"question":"Can Apple reverse an Apple Cash payment?","answer":"Generally no. Apple treats Apple Cash transfers as final once completed. In limited cases of clear technical error Apple may intervene, but they do not mediate disputes about goods or services not delivered."}],"lastReviewed":"2026-06-10"},{"slug":"can-i-get-scammed-through-google-pay","url":"https://scamencyclopedia.org/questions/can-i-get-scammed-through-google-pay","question":"Can I get scammed through Google Pay?","shortAnswer":"Google Pay is secure for card-based purchases with buyer protection, but Google Wallet peer-to-peer transfers are treated as cash — once sent, they cannot be reversed by Google.","explanation":"Google Pay functions as a digital wallet that passes your stored card details to merchants using tokenisation, meaning the actual card number is never shared with the seller. When you make a purchase at a store or online retailer using a credit card through Google Pay, your credit card's chargeback rights remain intact, giving you dispute protection if the transaction goes wrong.\n\nThe risk sits with peer-to-peer transfers. Google Wallet allows you to send money directly to another person, and once that transfer is completed and accepted, Google will not reverse it. This is the vector scammers use: they pose as sellers of goods, landlords collecting a holding deposit, or service providers asking for upfront payment, then direct victims to Google Pay to collect a transfer that is immediately withdrawn.\n\nAnother common scenario involves scammers posing as Google Pay customer support and asking for your payment details or a verification code. Google will never call you asking for your PIN, one-time code, or card details. If you receive such a call, it is a scam.\n\nTo stay safe: use Google Pay's credit-card payments for purchases from merchants, not for peer-to-peer transfers to strangers. If a seller insists on a Google Pay transfer over an in-app checkout or credit card payment, treat that as a major red flag.","redFlags":["Seller, landlord, or service provider demands Google Pay transfer as the only option","Someone calls claiming to be Google Pay support asking for a verification code","Offer seems too good to be true and payment must happen today","No seller reviews, website, or traceable business identity","Requests you send money 'to unlock' a prize or refund","Payment request comes from a newly created social media account"],"whatToDoNow":["Use a credit card through Google Pay for purchases — not direct peer-to-peer transfers to strangers","Never share one-time verification codes with anyone over the phone","Report suspicious transfers to Google Pay support and to the FTC","Contact your bank if a debit card linked to Google Pay was used in a suspected scam","Check /payments for a side-by-side comparison of payment protection levels"],"faq":[{"question":"Does Google Pay offer purchase protection?","answer":"Purchase protection applies through the underlying credit card, not Google Pay itself. Peer-to-peer Google Wallet transfers carry no buyer protection from Google."},{"question":"What should I do if I sent money to a scammer via Google Pay?","answer":"Report it to Google Pay immediately through the app, file a complaint with the FTC, and contact your bank if the source account was a debit card rather than a credit card."}],"lastReviewed":"2026-06-10"},{"slug":"can-i-get-scammed-through-a-wire-transfer","url":"https://scamencyclopedia.org/questions/can-i-get-scammed-through-a-wire-transfer","question":"Can I get scammed through a wire transfer?","shortAnswer":"Wire transfer fraud is one of the most damaging scam types because wires are nearly impossible to reverse once processed — they are the payment method of choice for high-value scams.","explanation":"A domestic or international wire transfer moves funds directly between bank accounts and settles within hours. Unlike a credit card purchase or an ACH bank transfer, there is no built-in dispute window: once the receiving bank releases the funds, your bank cannot simply recall them. This is why scammers in romance fraud, business email compromise, real estate fraud, and tech-support scams all gravitate toward requesting wire transfers for large amounts.\n\nReal estate wire fraud deserves special mention because the amounts are enormous. Scammers intercept or spoof email communications between buyers and title companies and send fraudulent wiring instructions. Buyers following those instructions wire their entire down payment to a fraudster's account. The FBI receives thousands of these complaints every year and recovery is rare.\n\nIf a wire is sent to a domestic account that still holds the funds, your bank can attempt a 'wire recall' — essentially a formal request to the receiving bank to return the money. Success depends on timing and whether the scammer has already withdrawn the cash. International wires are even harder to recover. Acting within the first 24 hours gives the best chance; contact your bank the moment you suspect fraud.\n\nLegitimate businesses rarely require a wire for consumer transactions. If a seller, landlord, or contractor insists on a wire rather than a business cheque, ACH, or card payment, confirm their identity through a verified phone number before sending anything.","redFlags":["Wire instructions arrive by email and differ from those given verbally or in a previous document","Any request to wire money to a 'closing attorney' you have not independently verified","Contractor or landlord insisting on wire payment only, refusing cheque or card","Urgency framing: 'Transfer today or the deal falls through'","Instructions from someone you have only ever communicated with online or by phone","Request to wire funds overseas for a domestic product or service"],"whatToDoNow":["Always call the recipient using a number from an independent, verified source before wiring","If you just sent a wire to a scammer, call your bank fraud line immediately — every minute matters","Ask your bank to attempt a wire recall and get the reference number","File a complaint with the FBI Internet Crime Complaint Center (IC3) at ic3.gov","Report to the FTC at ReportFraud.ftc.gov","For real estate fraud, also contact your state real-estate regulator and title insurance provider"],"faq":[{"question":"Can a bank reverse a wire transfer?","answer":"A bank can attempt a wire recall if you act quickly, but once the receiving bank releases the funds to the recipient there is no guarantee of recovery. Domestic recalls have a better success rate than international ones."},{"question":"Is a wire transfer ever safe to send to a stranger?","answer":"Wire transfers can be legitimate for large transactions like real estate closings or business payments, but you must independently verify the recipient's banking details through a trusted contact number before sending. Never wire based solely on emailed instructions."}],"lastReviewed":"2026-06-10"},{"slug":"can-i-get-scammed-with-a-cashiers-check","url":"https://scamencyclopedia.org/questions/can-i-get-scammed-with-a-cashiers-check","question":"Can I get scammed with a cashier's check?","shortAnswer":"Fake cashier's check fraud is extremely common: your bank makes funds available before the check clears, and when it bounces days later you are liable for the full amount you withdrew.","explanation":"A cashier's check looks like one of the safest forms of payment because it is drawn on a bank rather than a personal account. In reality, counterfeit cashier's checks are easy to produce with widely available software, and the consequences of accepting a fake one fall on the recipient, not the scammer.\n\nHere is how the fraud works: a buyer sends you a cashier's check, often for more than the agreed amount, and asks you to deposit it and wire or send back the excess. Your bank is required by federal regulation to make most deposited funds available within one to two business days — but the actual verification of the check can take a week or more. You withdraw cash that technically does not exist yet, send part of it away, and several days later the check is flagged as counterfeit. The bank reverses the deposit, and you owe every penny you withdrew.\n\nThis scam appears in overpayment fraud for selling cars or electronics online, fake rental deposits, work-from-home cheque-cashing schemes, and romance scams. The target is always the same: make you move fast before the check bounces.\n\nIf you receive an unexpected cashier's check or one for more than the agreed amount, do not deposit it. Call the issuing bank directly using a number from their official website (not a number printed on the check) and ask them to verify the check by serial number before you act on it.","redFlags":["Check is for more than the agreed sale price with a request to return the difference","Buyer you have never met insists on a cashier's check rather than a bank transfer","Urgency to deposit and wire back the overage immediately","Check arrives before any real communication about the transaction","Phone number or bank address on the check does not match the official bank website","Seller or buyer found you on a classifieds site and escalated quickly to payment"],"whatToDoNow":["Never withdraw funds against a deposited check until you have independently verified it cleared — this can take up to 10 business days","Call the issuing bank using a number from their official website to verify the check by serial number","Refuse any deal that involves depositing a check and sending back a portion","If you already withdrew and sent money, report to your bank and the FTC immediately","File a police report as counterfeit check fraud is a federal crime","Visit /recovery for a step-by-step checklist on next steps"],"faq":[{"question":"My bank said the funds were available — does that mean the check was real?","answer":"No. 'Available' means the bank has given you provisional access to the money while they verify the check. If the check later bounces, they will reverse the deposit and you owe the amount you withdrew."},{"question":"How long does a cashier's check actually take to clear?","answer":"While funds may appear available in one to two business days, full verification can take up to 10 business days for large or out-of-state checks. Do not spend funds from an unexpected or suspicious check until that window has passed."}],"lastReviewed":"2026-06-10"},{"slug":"can-i-get-scammed-with-a-money-order","url":"https://scamencyclopedia.org/questions/can-i-get-scammed-with-a-money-order","question":"Can I get scammed with a money order?","shortAnswer":"Money orders can be counterfeited, altered, or used in overpayment scams the same way fake cashier's checks are — always verify with the issuer before spending the money.","explanation":"Money orders are widely accepted as a secure payment method, which is exactly why fraudsters forge them. Counterfeit money orders from fake issuers or altered legitimate money orders where the amount has been changed upward are common tools in overpayment scams and online marketplace fraud.\n\nThe mechanics mirror the cashier's check scam: you receive a money order for more than the agreed amount, cash or deposit it, and are asked to return the excess. When the money order is later found to be fraudulent, you owe the full face value. Because real USPS and bank money orders have a face value cap (typically $1,000 for USPS), any money order for a very large amount from an unexpected sender is suspicious.\n\nMoney orders can also be genuinely stolen and resold on dark marketplaces, meaning even a legitimate-looking money order may have already been reported lost or stolen, triggering a hold or reversal when you try to cash it.\n\nIf you are a seller accepting a money order from a stranger: do not ship goods until the money order has fully cleared. For USPS money orders you can verify the serial number by phone or at a post office. For Western Union or MoneyGram orders, use their online verification tools. Any money order with signs of alteration — smeared ink, inconsistent fonts, or a wavy serial number — is likely fraudulent.","redFlags":["Money order amount is higher than what was agreed","Sender asks you to wire or send back the difference before shipping","Money order is from an obscure issuer you cannot verify online","Serial number or dollar amount shows signs of physical alteration","Deal came together quickly with minimal back-and-forth","Buyer says they accidentally sent too much and needs the overage in gift cards"],"whatToDoNow":["Verify any money order with the issuer before cashing — USPS has a phone verification line","Do not ship goods or return any overage until the money order fully clears your account","Refuse deals that involve depositing a money order and sending back a portion","Report suspected counterfeit money orders to the US Postal Inspection Service","File an FTC complaint at ReportFraud.ftc.gov"],"faq":[{"question":"How do I verify a USPS money order?","answer":"You can verify a USPS money order by calling 1-866-459-7822 or by taking it to a post office with the serial number and the purchaser's details. Do not cash it until it is verified."},{"question":"Are money orders traceable?","answer":"Legitimate money orders have serial numbers that allow the issuer to track them. However, counterfeit ones have no real trail, and by the time a fraud is detected the scammer is often untraceable."}],"lastReviewed":"2026-06-10"},{"slug":"can-i-get-scammed-through-buy-now-pay-later","url":"https://scamencyclopedia.org/questions/can-i-get-scammed-through-buy-now-pay-later","question":"Can I get scammed through buy-now-pay-later?","shortAnswer":"BNPL fraud happens in two ways: scammers use stolen identities to open BNPL accounts, and scam merchants accept BNPL then disappear — leaving you with a debt and no goods.","explanation":"Buy-now-pay-later services like Klarna, Afterpay, and Affirm allow you to split purchases into instalments. They are convenient but introduce specific fraud risks that differ from traditional credit card purchases.\n\nThe first risk is identity fraud: criminals who obtain enough personal information can open a BNPL account in your name and make purchases charged to you. BNPL providers historically had lighter identity verification than traditional lenders, though most have tightened this since. If you discover a BNPL account you did not open, dispute it immediately with the provider and with the credit bureaus.\n\nThe second risk is merchant fraud. Unlike a credit card with a well-established chargeback system, BNPL dispute processes vary widely by provider. If you use BNPL to buy from a fraudulent online store — one that takes your order and never ships — your ability to dispute the debt and get it cancelled depends on the specific BNPL provider's policies and how quickly you report the problem. Some providers handle disputes well; others are slow.\n\nA third scenario involves phishing pages mimicking BNPL providers. You click a link claiming your BNPL account needs verification, enter your credentials on a fake page, and your real account is taken over. Always log into BNPL apps directly, never through an emailed link.","redFlags":["BNPL provider sends an alert for a purchase you did not make","Online store accepts BNPL but has no physical address, no returns policy, and recent reviews are suspiciously positive","Email or text saying your BNPL account is locked with a link to 'verify' it","Price on a BNPL-enabled site is dramatically below all other sellers","Checkout flow asks for more personal data than usual","You receive BNPL statements or collection notices for accounts you did not open"],"whatToDoNow":["Check your credit report for BNPL accounts you did not open — dispute them immediately","Enable purchase notifications on all BNPL apps so unauthorised charges appear instantly","If goods never arrive, dispute the charge with the BNPL provider before the next instalment is due","Never click links in BNPL-themed emails — go directly to the app or official website","Report identity-related BNPL fraud to the FTC at IdentityTheft.gov","Visit /scams/finance-scams for more on lending and credit-related fraud"],"faq":[{"question":"Do BNPL purchases have chargeback protection like credit cards?","answer":"BNPL dispute rights vary by provider and are generally weaker than credit card chargeback rights under the Fair Credit Billing Act. Check your provider's dispute policy before you buy from an unfamiliar merchant."},{"question":"What happens if I dispute a BNPL charge I cannot resolve?","answer":"File a complaint with the Consumer Financial Protection Bureau (CFPB) at consumerfinance.gov/complaint. BNPL providers are increasingly subject to CFPB oversight, and a formal complaint often accelerates resolution."}],"lastReviewed":"2026-06-10"},{"slug":"can-i-get-scammed-through-a-credit-card","url":"https://scamencyclopedia.org/questions/can-i-get-scammed-through-a-credit-card","question":"Can I get scammed through a credit card?","shortAnswer":"Credit cards offer the strongest buyer protection of any common payment method, but you can still be defrauded — the key difference is that you have a legal right to dispute fraudulent charges.","explanation":"Credit cards in the United States are protected by the Fair Credit Billing Act, which gives you the right to dispute charges for goods or services not received, not as described, or made without your authorisation. You typically have 60 days from the statement date to raise a dispute. This is the chargeback right, and it makes credit cards the most consumer-protective way to pay for online and unfamiliar-vendor purchases.\n\nHowever, owning a credit card does not make you immune to fraud. Card details can be stolen through phishing, data breaches, skimming devices at ATMs or petrol stations, or by buying from a compromised merchant. Once a fraudster has your card number, expiry date, and CVV they can make card-not-present purchases online before you notice.\n\nDispute success is not guaranteed. Chargebacks require you to show that the goods were not delivered or materially misrepresented. If you authorised the payment but the seller simply did not deliver, most issuers will side with you. But if a scammer persuades you to voluntarily pay for something fraudulent and then shows the transaction was 'authorised,' disputes can sometimes fail — so the circumstances matter.\n\nFor maximum protection: use a credit card (not debit) for all online purchases, enable transaction alerts, set up virtual card numbers for subscription services, and review your statement every month.","redFlags":["Unfamiliar charge appears on your statement, even for a small 'test' amount","Merchant processes your card but the order confirmation never arrives","A subscription continues billing after you cancelled","Your card issuer flags an unusual transaction from a foreign country","You receive a replacement card you did not request — your account may have been compromised","A website asks for your full card details over an unencrypted HTTP connection"],"whatToDoNow":["Dispute fraudulent charges through your card issuer — you have up to 60 days from the statement date","Enable real-time transaction alerts so you spot unauthorised charges immediately","Use virtual card numbers for subscriptions and one-off online purchases","If your physical card may have been skimmed, request a replacement card with a new number","Check all open subscriptions and cancel any you do not recognise","Report the merchant to the FTC at ReportFraud.ftc.gov"],"faq":[{"question":"Is a credit card safer than a debit card for online shopping?","answer":"Yes. Credit cards have stronger federal dispute protections. Debit card fraud can drain your actual bank balance while the dispute is being investigated, whereas a fraudulent credit card charge sits on a balance you have not yet paid."},{"question":"What is a chargeback and how do I file one?","answer":"A chargeback is a formal dispute you raise with your card issuer asking them to reverse a charge. Call the number on the back of your card or use the dispute function in your banking app. Provide order details, correspondence with the merchant, and evidence the goods were not received."}],"lastReviewed":"2026-06-10"},{"slug":"can-i-get-scammed-through-a-debit-card","url":"https://scamencyclopedia.org/questions/can-i-get-scammed-through-a-debit-card","question":"Can I get scammed through a debit card?","shortAnswer":"Debit cards carry more financial risk than credit cards in a scam because fraudulent charges come directly from your bank account — and while dispute rights exist, they are weaker and your cash is gone while the investigation proceeds.","explanation":"Debit cards are linked directly to your checking or savings account. When a fraudulent charge hits a debit card, the money leaves your account immediately. Your bank may freeze those funds as a provisional credit during an investigation, but this is not guaranteed and the timeline varies significantly by institution.\n\nThe Electronic Fund Transfer Act provides some debit card protections, but the timeframes for reporting matter enormously. If you report an unauthorised debit card transaction within two business days, your maximum liability is $50. Between two and 60 days, liability can rise to $500. After 60 days, you may be liable for the full amount. These windows are far less forgiving than the credit card rules.\n\nCard-not-present fraud — where someone uses your debit card number for online purchases without the physical card — is the most common scenario. Data breaches, phishing emails mimicking your bank, and skimming devices at ATMs or fuel pumps are the main sources of stolen debit card details.\n\nFor online and unfamiliar purchases, using a credit card instead of a debit card is strongly recommended by consumer advocates precisely because the stakes of a fraud are lower: you are disputing a charge on borrowed money, not fighting to get your own cash back while bills need to be paid.","redFlags":["ATM or petrol station card reader feels loose, has extra hardware attached, or the keypad feels thick","Small unfamiliar charge appears — scammers test cards with micro-transactions first","Bank texts asking you to confirm a transaction you did not make","Your account balance drops without a corresponding transaction you recognise","Email or text from 'your bank' asking you to verify card details by clicking a link","PIN changed or card blocked without your initiation"],"whatToDoNow":["Report any suspicious debit card charges to your bank within two business days to limit your liability","Request an immediate card freeze if you suspect your card details are compromised","Enable transaction alerts so you see every purchase in real time","For online purchases, switch to a credit card or a virtual card tied to a limited balance","File a complaint with the CFPB if your bank does not resolve the dispute properly","Visit /payments for a comparison of protections across payment methods"],"faq":[{"question":"Why is a debit card riskier than a credit card for online shopping?","answer":"A debit card charge takes real money from your bank account immediately. A credit card charge is a liability you have not yet paid. Losing cash while your bank investigates can cause overdrafts and missed payments, which do not happen with a disputed credit card charge."},{"question":"Does my bank have to refund an unauthorised debit card charge?","answer":"Under the Electronic Fund Transfer Act, banks are required to investigate disputes within 10 business days and provide a provisional credit during the investigation for most claims. However, if the bank concludes you authorised the transaction, they can reverse the credit."}],"lastReviewed":"2026-06-10"},{"slug":"are-gift-cards-traceable","url":"https://scamencyclopedia.org/questions/are-gift-cards-traceable","question":"Are gift cards traceable if I get scammed?","shortAnswer":"Gift card transactions are very difficult to trace and almost never reversed — which is precisely why scammers demand them as payment above all other methods.","explanation":"Gift cards are pre-loaded stored-value cards with no direct link to an identifiable bank account. Once a scammer receives the gift card number and PIN — usually by having you read them over the phone or send a photo — they can redeem the balance instantly and anonymously. The retailer has no obligation to reverse the transaction, and the scammer's identity is essentially untraceable through the card alone.\n\nLaw enforcement can sometimes subpoena retailer records and trace where a gift card was redeemed, which occasionally leads to arrests. However, sophisticated scam operations redeem cards immediately through automated systems, convert the value to cryptocurrency or foreign transfers, and the money trail goes cold within minutes.\n\nThe FTC has documented thousands of reports where scammers specifically told victims 'do not tell the cashier what the gift cards are for' — because cashiers at many retailers are now trained to spot gift-card scam purchases and intervene. If a cashier asks why you are buying $500 in gift cards, please answer honestly.\n\nIf you have already purchased gift cards for a scammer, call the card issuer immediately using the number on the back. In rare cases, if the balance has not yet been redeemed, the issuer may be able to block it. Report to the FTC at ReportFraud.ftc.gov and include which retailer's cards were used — this data helps the FTC work with retailers to identify and stop ongoing scam campaigns.","redFlags":["Any government agency, utility, or tech company demands payment in gift cards","Caller instructs you to buy gift cards and read the numbers over the phone","Request to buy multiple gift cards from different stores to avoid suspicion","Told to scratch off the PIN and photograph it rather than sharing it in person","Gift cards requested as payment for a fine, tax bill, or to 'release a prize'","Pressure to complete the transaction immediately before hanging up"],"whatToDoNow":["Call the gift card issuer immediately using the number on the back of the card — act within the first hour","Report to the FTC at ReportFraud.ftc.gov and specify which brand of cards","File a police report even if recovery is unlikely — the data matters for investigations","Tell the retailer where you bought the cards — some have victim assistance programs","Visit /recovery for the full post-scam checklist","Know that no legitimate entity ever demands gift card payment — this rule has no exceptions"],"faq":[{"question":"Will the gift card company refund my money?","answer":"Occasionally, if you call fast enough and the balance has not been redeemed, the issuer may freeze it. Refunds are rare but not impossible. Always call immediately and then follow up in writing to create a paper trail."},{"question":"Why do scammers specifically ask for gift cards?","answer":"Gift cards are the closest thing to anonymous, irreversible cash that is available at every petrol station and supermarket. The value moves instantly with just a number and PIN, with no bank account or ID attached."}],"lastReviewed":"2026-06-10"},{"slug":"is-crypto-traceable-if-scammed","url":"https://scamencyclopedia.org/questions/is-crypto-traceable-if-scammed","question":"Is crypto traceable if I get scammed?","shortAnswer":"Cryptocurrency transactions are recorded permanently on a public blockchain and are technically traceable, but converting that trace into a real-world identity and recovering funds is difficult and often unsuccessful.","explanation":"Every Bitcoin or Ethereum transaction is recorded on a public ledger called the blockchain. Anyone can see that wallet A sent funds to wallet B, and blockchain analytics companies can follow the trail across multiple hops. Law enforcement agencies regularly use these tools in large fraud investigations, and major exchange platforms comply with subpoenas requiring them to identify account holders.\n\nHowever, there is a significant gap between 'traceable' and 'recoverable.' Scammers use several techniques to obscure the trail: moving funds through multiple wallets, using privacy coins, mixing services, or decentralised exchanges that do not collect identity documents. By the time a fraud victim reports the crime, the funds may have passed through dozens of hops and been cashed out through an overseas exchange that does not cooperate with US or UK law enforcement requests.\n\nLaw enforcement has had success in high-profile cases — the FBI has recovered hundreds of millions in crypto from various fraud and ransomware operations. But individual consumer losses of a few thousand dollars rarely receive the investigative resources needed to trace and recover funds. Private blockchain investigation firms exist and some victims hire them, though fees are substantial and success is not guaranteed.\n\nThe practical takeaway for consumers: treat any crypto payment as irreversible. No reputable investment platform, government agency, or tech company will demand crypto payment. Once you send it, assume it is gone.","redFlags":["Investment platform demands you send crypto before you can withdraw any returns","Someone asks you to convert money into crypto and send it to 'secure' your account","Crypto ATM instruction sheet left near the machine with a phone number to call","Romantic partner you have never met in person suggests a crypto investment platform","Unsolicited message offering to show you a 'sure' crypto trading strategy","Website shows impressive returns on your 'balance' but you cannot withdraw"],"whatToDoNow":["Report to the FTC at ReportFraud.ftc.gov and to the FBI IC3 at ic3.gov","Note all wallet addresses, transaction IDs, and platform URLs immediately","File a report with your local police — a case number helps with any later civil recovery","Contact the exchange you used to send funds and report it as fraud","Consider consulting a blockchain forensics firm if the amount justifies the cost","Visit /scams/crypto-web3-scams for the full landscape of crypto fraud types"],"faq":[{"question":"Can the FBI trace and recover crypto sent to a scammer?","answer":"In large, high-profile cases yes — the FBI has seized hundreds of millions in crypto. For smaller individual losses, available investigative resources are limited and recovery is uncommon, though reporting still helps build the cases that lead to eventual prosecutions."},{"question":"Is a blockchain analytics company worth hiring?","answer":"Reputable firms can trace where your funds went, which is useful for legal proceedings or working with law enforcement. However, tracing does not equal recovering — fees can be significant, and if funds went to a non-cooperative jurisdiction recovery may be impossible."}],"lastReviewed":"2026-06-10"},{"slug":"are-crypto-atm-payments-reversible","url":"https://scamencyclopedia.org/questions/are-crypto-atm-payments-reversible","question":"Are crypto ATM payments reversible if I get scammed?","shortAnswer":"Crypto ATM transactions are essentially irreversible — the moment you feed cash into the machine and confirm the transaction, the funds leave on the blockchain and cannot be recalled.","explanation":"Crypto ATMs allow you to insert cash and receive cryptocurrency sent to a wallet address. They are convenient but carry zero consumer protection: there is no intermediary holding the funds, no chargeback mechanism, and no dispute window. Scammers are well aware of this, which is why government-impersonation scams, Social Security fraud calls, utility disconnection threats, and tech-support scams frequently end with the victim being directed to a crypto ATM.\n\nThe fraud script is consistent: you receive an urgent call claiming your account is compromised, you owe a tax debt, or a family member is in trouble. The caller walks you step-by-step to a crypto ATM, tells you which amount to insert, and provides a QR code for the destination wallet. Sometimes a physical instruction sheet is taped near the ATM — this is placed there by the scammer. Once you scan the QR code and confirm, the transaction broadcasts to the blockchain and cannot be reversed by the ATM operator or anyone else.\n\nSome states have introduced regulations requiring crypto ATM operators to display fraud warnings, set limits on transactions to new users, and verify identity for large transactions. These measures have had some effect, but the fraud continues. Many crypto ATM operators now display notices warning that no government agency, utility company, or business will ever ask you to pay with a crypto ATM.\n\nIf you are standing at a crypto ATM because someone on the phone told you to go there, stop. No legitimate authority does this. End the call.","redFlags":["Any phone caller directing you to go to a crypto ATM to pay a bill or fine","Instruction sheet near the ATM with a phone number claiming to be a government agency","QR code emailed or texted to you to scan at a crypto ATM","Caller insists you stay on the phone the entire time you are at the machine","Request to send crypto to 'protect' or 'verify' your existing bank account","Claim that the crypto ATM is the only way to pay immediately and avoid arrest"],"whatToDoNow":["Leave the machine immediately if anyone has directed you there by phone","If you already sent funds, note the machine's location, transaction receipt, and destination wallet address","Report to the FTC at ReportFraud.ftc.gov and to IC3 at ic3.gov","Contact the ATM operator — their number is on the machine — and report the fraud","File a local police report with your transaction receipt","Visit /scams/government-impersonation-scams for the full playbook these callers use"],"faq":[{"question":"Can a crypto ATM operator reverse my transaction?","answer":"No. Once a crypto transaction is confirmed on the blockchain, no one — including the ATM operator — can reverse it. The operator can provide transaction records to law enforcement, but the funds themselves are gone."},{"question":"Why do scammers use crypto ATMs instead of bank transfers?","answer":"Crypto ATMs accept cash, require minimal identity verification for small amounts, and complete irreversible blockchain transactions. A scammer can empty a wallet to an overseas exchange within minutes of you making the deposit."}],"lastReviewed":"2026-06-10"},{"slug":"are-payment-app-transfers-refundable","url":"https://scamencyclopedia.org/questions/are-payment-app-transfers-refundable","question":"Are payment app transfers refundable if I get scammed?","shortAnswer":"Most payment apps — Venmo, Cash App, Zelle, PayPal Friends and Family — treat peer-to-peer transfers as final. Refunds are at the discretion of the recipient, not the platform.","explanation":"Payment apps exist on a spectrum when it comes to buyer protection. The distinction that matters most is whether you used the platform's goods-and-services payment option or its peer-to-peer transfer function.\n\nPayPal Goods and Services is the main exception to the 'no refund' rule: it provides buyer protection that covers items not received or significantly not as described, funded by a seller protection fee paid by the merchant. If you use PayPal Friends and Family instead — which carries no seller fee — you are treated as giving money to a friend, with no dispute rights.\n\nZelle is operated by US banks and is explicitly designed for payments to people you know. Their official guidance is that if you authorised the transfer, even if you were tricked, they have no obligation to refund. Banks began voluntarily refunding more Zelle fraud cases following regulatory pressure, but this is not universal.\n\nVenmo and Cash App offer limited recourse for authorised transfers. If a stranger persuades you to send money and you confirm the transfer, the platform's dispute process typically concludes that you authorised the payment. Chargeback rights may apply if the payment came from a linked credit card, but banks often deny these claims on the grounds that you directed the transfer.\n\nThe safest rule: only use peer-to-peer payment apps with people you know personally. For any transaction with a stranger or business, insist on a payment method with formal dispute rights.","redFlags":["Seller on a classifieds or social media site insists on Zelle, Venmo, or Cash App","Buyer sends too much and asks you to return the overage via a payment app","Someone requests PayPal Friends and Family specifically to avoid 'fees' — this removes your buyer protection","Landlord or property manager asks for a deposit via payment app before you have signed a lease","Job offer requires you to receive funds in a payment app and forward them onward","Romantic interest asks for money to be sent via payment app for an emergency"],"whatToDoNow":["Contact the app's support immediately and report the transaction as fraud","If the transfer came from a linked credit card, dispute with your card issuer simultaneously","File a complaint with the CFPB — regulatory pressure has improved refund policies at Zelle in particular","Report to the FTC at ReportFraud.ftc.gov","Use PayPal Goods and Services (not Friends and Family) for any purchase from a stranger","Visit /payments for a full comparison of peer-to-peer app protections"],"faq":[{"question":"What is the difference between PayPal Goods and Services and Friends and Family?","answer":"Goods and Services includes buyer protection: if you do not receive what you paid for, PayPal may refund you. Friends and Family has no buyer protection and is intended only for payments between people who know each other. Choosing the wrong option removes all recourse."},{"question":"Has Zelle changed its refund policy after public pressure?","answer":"Major US banks that operate Zelle voluntarily began refunding some fraud cases following Senate scrutiny and CFPB guidance in 2023. However, policies are inconsistent between banks. Filing a CFPB complaint remains the most effective escalation path if your bank denies a refund."}],"lastReviewed":"2026-06-10"},{"slug":"safest-way-to-pay-a-stranger","url":"https://scamencyclopedia.org/questions/safest-way-to-pay-a-stranger","question":"What is the safest way to pay a stranger?","shortAnswer":"A credit card through a platform with buyer protection is the safest way to pay an unknown person or seller — it gives you chargeback rights if the transaction goes wrong.","explanation":"When you are paying someone you have never met in person and have no independent way to verify, you want a payment method that has a formal dispute process and does not put your bank account directly at risk. Credit card chargebacks, available under the Fair Credit Billing Act, allow you to dispute a charge if goods or services are not received or not as described. This makes a credit card the consumer-protective default.\n\nFor in-person transactions, paying cash at the time of pickup — rather than in advance — eliminates almost all payment risk because you do not hand over money until you have the item. The risk shifts to the item itself: inspect carefully before paying.\n\nFor online purchases from an individual seller, using a platform with built-in buyer protection (such as eBay's Money Back Guarantee or PayPal Goods and Services) adds a dispute layer. These platforms mediate between buyer and seller and can issue refunds from funds they hold.\n\nAvoid peer-to-peer apps (Zelle, Venmo, Cash App), gift cards, wire transfers, or cryptocurrency for any transaction with a stranger. These are irreversible payment methods with no consumer protection — they are appropriate for trusted friends and established business relationships, not marketplace strangers.\n\nFor higher-value purchases like private car sales or electronics, consider an escrow service that holds funds until both parties confirm the transaction is complete.","redFlags":["Seller refuses all payment methods except one that is irreversible","Pressure to pay before seeing, inspecting, or receiving the item","Deal that appeared online and the seller will only communicate by text or email","Seller offers to ship internationally but requires upfront wire transfer","Too-good price that requires immediate commitment","Seller claims a platform's standard payment method has 'extra fees' they can avoid if you pay directly"],"whatToDoNow":["Use a credit card or platform buyer-protection checkout for all stranger transactions","For in-person deals, bring the exact cash and pay at pickup after inspecting the item","For high-value transactions, research escrow services licensed in your state","Reverse image search listing photos to check they were not stolen from elsewhere","Meet in a public place with security cameras for in-person private transactions","Visit /payments for a ranked comparison of payment method safety"],"faq":[{"question":"Is PayPal safe for paying a stranger?","answer":"PayPal is relatively safe if you use the Goods and Services option, which provides buyer protection. Do not use Friends and Family — it has no buyer protection and is only appropriate for actual friends."},{"question":"What if a seller only accepts Zelle?","answer":"A seller insisting exclusively on Zelle is a red flag. Legitimate sellers on most platforms accept multiple payment methods. If Zelle is the only option offered, strongly reconsider the transaction or insist on an in-person cash-at-pickup arrangement."}],"lastReviewed":"2026-06-10"},{"slug":"safest-way-to-pay-online-seller","url":"https://scamencyclopedia.org/questions/safest-way-to-pay-online-seller","question":"What is the safest way to pay an online seller?","shortAnswer":"Use a credit card through the platform's official checkout, or PayPal Goods and Services — both provide dispute rights if the item never arrives or is not as described.","explanation":"Online seller payments carry specific risks that in-person transactions do not: you are paying before receiving anything, and you may have no way to verify the seller's identity. The goal is to insert a third-party intermediary with a dispute process between you and the money.\n\nCredit cards offer the strongest individual protection: the Fair Credit Billing Act entitles you to dispute charges for items not received or significantly not as described within 60 days of the statement date. Using a credit card at an established marketplace (Amazon, eBay, Etsy) adds the marketplace's buyer-protection layer on top of your credit card rights.\n\nPayPal Goods and Services is a strong second option for smaller independent sellers. PayPal holds the funds and mediates disputes. The key phrase is 'Goods and Services' — if a seller asks you to use Friends and Family, decline. That request is a red flag: it removes your buyer protection and often signals the seller knows the transaction might not go smoothly.\n\nAvoiding direct bank transfers (ACH, Zelle, wire) for online purchases from strangers is important. If you transfer directly to an unknown seller's bank account and the goods do not arrive, you have no automatic recourse — you would need to pursue civil recovery independently.\n\nCheck seller reviews from multiple sources, look for a verifiable physical address, and be especially cautious of any new seller with no feedback history and prices well below market rate.","redFlags":["Seller asks you to pay outside the platform's official checkout","Prices significantly below those of other sellers for the same product","Seller has zero or very recently created feedback history","Request to use Friends and Family instead of Goods and Services on PayPal","Website URL that looks similar to a well-known retailer but is slightly different","Checkout page does not show a padlock and HTTPS in the address bar"],"whatToDoNow":["Always use the platform's official checkout rather than paying directly to the seller","Use a credit card as the underlying payment method whenever possible","Screenshot your order confirmation, tracking information, and all communications","If goods do not arrive, open a dispute with the platform before contacting the seller","Dispute the credit card charge if the platform dispute fails to resolve in your favour","Report fraudulent sellers to the platform and to the FTC"],"faq":[{"question":"Is it safe to pay a small independent online store?","answer":"Small stores can be legitimate, but they carry more risk than established marketplaces because there is less accountability if they disappear. Use a credit card, check for verifiable contact information, and look for reviews on independent platforms like Trustpilot."},{"question":"What should I do if an online order never arrives?","answer":"First contact the seller with your order number and a reasonable deadline. If there is no satisfactory response, open a dispute through the payment platform or your credit card issuer. Keep all communication records as evidence for the dispute."}],"lastReviewed":"2026-06-10"},{"slug":"safest-way-to-pay-private-car-seller","url":"https://scamencyclopedia.org/questions/safest-way-to-pay-private-car-seller","question":"What is the safest way to pay a private car seller?","shortAnswer":"A bank-issued cashier's check, cash in person at a bank or police station exchange zone, or an in-person wire transfer arranged at your bank are the safest methods for a private car purchase.","explanation":"Private vehicle sales involve large sums, no formal buyer protection from an intermediary, and two strangers meeting to exchange significant money for a high-value item. The risks run in both directions: the buyer can be defrauded by a scammer who disappears with the payment, and the seller can receive a counterfeit payment instrument.\n\nCash remains the simplest for both parties on smaller transactions, with the significant caveat that it should be counted and verified in a safe public location. Many police departments offer community exchange zones in their car parks specifically for private sale transactions.\n\nFor amounts that make cash impractical, a cashier's check issued by your own bank at the time of sale is effective — but the seller should accompany you to the bank or ask your bank to confirm the check is valid before releasing the car. Sellers should never accept a cashier's check and then hand over the title without verifying it; as discussed elsewhere, fake cashier's checks are easily produced.\n\nEscrow services for vehicles allow both parties to complete the transaction through a licensed third party that holds the funds until both the title transfer and payment are confirmed. Legitimate vehicle escrow is not free, but for transactions over a few thousand dollars the fee provides significant fraud protection.\n\nAvoid completing payment entirely by wire transfer in advance without seeing the car or having title documentation ready. Scammers list vehicles at attractive prices, collect the wire, and are never heard from again.","redFlags":["Seller insists on wire transfer before you see the vehicle in person","Car is priced significantly below market value for the make, model, and condition","Seller is in another state or country and offers to ship the car after payment","Seller offers an escrow service they have already chosen and linked — use your own verified service","Title is not ready at time of sale or seller promises to mail it later","VIN on the car does not match the title document"],"whatToDoNow":["Insist on seeing and test-driving the vehicle before any payment changes hands","Run the VIN through a vehicle history service to check for title issues, accidents, or theft","Complete the sale at your bank where a cashier's check can be issued and verified immediately","Use a licensed escrow service for out-of-state purchases where in-person meeting is not practical","Never send a wire or P2P transfer to a private seller before the title is in your hands","Visit /scams/auto-vehicle-scams for the full landscape of vehicle purchase fraud"],"faq":[{"question":"Is Zelle or Venmo acceptable for a private car sale?","answer":"Only for low-value transactions where the risk is acceptable to you, and only when you have already seen the car, test-driven it, and have the title in hand. Never send a large payment app transfer before receiving the title and keys."},{"question":"What is a vehicle escrow service?","answer":"A licensed escrow company holds the buyer's payment until the seller transfers the title. Once both are confirmed, the funds are released. The cost is typically a small percentage of the sale price or a flat fee. Verify the escrow company independently — do not use one the seller suggests without checking it yourself."}],"lastReviewed":"2026-06-10"},{"slug":"safest-way-to-pay-contractor","url":"https://scamencyclopedia.org/questions/safest-way-to-pay-contractor","question":"What is the safest way to pay a contractor?","shortAnswer":"Pay by cheque or credit card in milestone instalments tied to completed work — never pay the full amount upfront, and never pay in cash with no receipt.","explanation":"Home improvement and contractor fraud is one of the most common ways people lose money to scams. A contractor takes a large deposit, does little or no work, and disappears. Or the work is completed but is shoddy and disputes arise about the quality. The payment method you choose significantly affects your ability to recover money or seek redress.\n\nCheques create a paper trail: the payee is named, the amount is recorded, and you have a cancelled cheque as proof of payment. Credit card payments are even better because the chargeback right allows you to dispute charges for services not rendered. Be aware that some contractors apply a convenience fee for card payments; for large projects it may be worth paying this fee for the protection it provides.\n\nAvoid large upfront cash payments entirely. Cash has no paper trail, no dispute mechanism, and a contractor who accepts only cash may not be licensed and insured, which affects both your legal protections and the quality guarantee. A legitimate contractor will accept cheque or card.\n\nStructure payments in milestones: a reasonable deposit (typically 10-30% for most projects, never more than 50%), a progress payment at a defined stage, and a final payment on completion and inspection. Retain the last payment until you have walked through the finished work and are satisfied. Get all payment terms written into a signed contract before work begins.","redFlags":["Contractor demands full payment upfront before any work begins","Cash only with no written contract or receipts offered","Very low quote that requires immediate decision before 'the price goes up'","Contractor shows up unsolicited after a storm and pushes for same-day commitment","Cannot provide a license number, insurance certificate, or business address when asked","Wants payment made out to a personal name rather than a business name"],"whatToDoNow":["Pay by cheque or credit card and require a written receipt for every payment","Structure the contract with milestone payments, not a single upfront sum","Verify the contractor's license number with your state licensing board before hiring","Check reviews on multiple independent platforms and ask for references from recent clients","If work was abandoned after a large deposit, report to the state contractor licensing board","Dispute credit card charges for work not completed before the 60-day window closes"],"faq":[{"question":"How much deposit is normal for a contractor?","answer":"Industry norms vary, but a deposit of 10-30% is typical for most residential projects. Be very cautious of any contractor asking for 50% or more upfront. Some states cap contractor deposits by law."},{"question":"What if a contractor refuses to accept cheque or card?","answer":"A cash-only policy is a significant red flag. It may mean the contractor is unlicensed, uninsured, or not declaring income. You should at minimum demand a detailed written receipt for any cash paid and verify their credentials independently before proceeding."}],"lastReviewed":"2026-06-10"},{"slug":"safest-way-to-pay-landlord","url":"https://scamencyclopedia.org/questions/safest-way-to-pay-landlord","question":"What is the safest way to pay a landlord?","shortAnswer":"Pay rent and deposits by cheque, bank transfer to a verified account, or through a reputable property management platform — always get a written receipt and verify the landlord's identity before sending any money.","explanation":"Rental payment fraud falls into two main scenarios: fake landlords who collect a deposit and first month's rent for a property they do not own, and legitimate landlords whose payment details are intercepted or spoofed by fraudsters. The safest payment approach depends on which risk you face.\n\nFor initial deposit payments to a new landlord, verify their identity and ownership before sending anything. Check that the property is listed in public records under their name, meet in person, and view the property inside with them. If a landlord cannot meet you or insists on receiving a deposit before showing you the inside of a rental, stop the process.\n\nOnce you have verified the landlord, pay deposits by cheque made out to the business or person by their verified legal name, or by bank transfer to an account you have confirmed through a separate in-person or phone conversation — not through an emailed change of bank details. Rental scams increasingly involve fraudsters intercepting email communications and sending modified bank details.\n\nFor ongoing monthly rent, many property management platforms (like those used by larger landlords or property managers) offer secure online payment with a paper trail. Personal cheques remain reliable for private landlords. Peer-to-peer apps like Zelle or Venmo are used by some landlords for convenience but offer no protection if there is a dispute about payments made.","redFlags":["Landlord requests deposit payment before you have viewed the property in person","Property listing is suspiciously below local market rent","Landlord says they are abroad and will mail the keys after payment","Email arrives with 'updated' bank details for rent payment","Landlord asks for cash only with no receipt","Lease agreement is vague, incomplete, or pressure is applied to sign immediately"],"whatToDoNow":["Verify the landlord's ownership by checking public property records before paying any deposit","Always view the inside of the property with the landlord or their agent in person before paying","Pay deposits by cheque or verified bank transfer — never by gift card, crypto, or wire to an unverified account","Get a signed, dated receipt for every payment","Report suspected rental fraud to the FTC and to your local housing authority","Visit /scams/housing-rental-scams for the full landscape of rental fraud types"],"faq":[{"question":"Is it safe to pay rent via Zelle or Venmo?","answer":"It can be convenient if you have a verified, ongoing relationship with your landlord, but these apps have no dispute mechanism. If a payment goes wrong or a receipt is disputed, you have no platform to mediate. A bank transfer with a payment reference leaves a cleaner trail."},{"question":"What should I do if I paid a deposit to a fake landlord?","answer":"Report to local police immediately and to the FTC. Contact your bank — if paid by bank transfer, ask about a recall. If paid by credit card, dispute the charge. Visit /recovery for the full post-fraud checklist."}],"lastReviewed":"2026-06-10"},{"slug":"is-credit-card-protected-if-scammed","url":"https://scamencyclopedia.org/questions/is-credit-card-protected-if-scammed","question":"Is a credit card protected if I am scammed?","shortAnswer":"Credit cards offer strong protection — the statutory right is the Fair Credit Billing Act (US) or Section 75 (UK), and chargeback is the card-scheme dispute process used to enforce it — but protection is not absolute, it applies to items not received or misrepresented, and you must dispute within 60 days of the statement date.","explanation":"The Fair Credit Billing Act gives US consumers the right to dispute credit card charges in specific circumstances: goods or services not received, goods significantly not as described, billing errors, and unauthorised charges. When you raise a dispute, the credit card issuer investigates and, if they rule in your favour, reverses the charge — this is a chargeback. The issuer can then pursue the merchant for the funds.\n\nChargebacks work well for most consumer transactions gone wrong: an online store that takes payment and never ships, a service that was not delivered, or a charge you did not authorise. They work less well when a scammer tricks you into voluntarily initiating the payment for something that turns out to be fraudulent — issuers may argue you authorised the transaction.\n\nThe 60-day window is critical. Disputes filed after 60 days from the statement date when the charge appeared are generally rejected. This means you must review your statements regularly and act quickly when something looks wrong.\n\nFor the best outcome: document everything before disputing. Screenshot the order confirmation, the seller's claims (product description, delivery timeline), and all correspondence. A well-documented dispute with clear evidence that goods were not received or were misrepresented has a high success rate.","redFlags":["Merchant provides a tracking number that shows delivered to a different address","Subscription that continues charging after you cancelled and have confirmation","Statement shows a charge from a company name you do not recognise","Online purchase where the website has since disappeared","Merchant refusing to respond to refund requests within their stated policy period","Charge is slightly different from what was agreed, suggesting bait-and-switch"],"whatToDoNow":["Gather all evidence: order confirmation, product description screenshots, delivery tracking, and correspondence","File the dispute through your card issuer within 60 days of the statement date — not the purchase date","Contact the merchant first; a documented failed resolution attempt strengthens your dispute","If the issuer denies your dispute, request escalation to a supervisor and file a CFPB complaint","Report fraudulent merchants to the FTC at ReportFraud.ftc.gov","Visit /questions for related consumer protection Q&As"],"faq":[{"question":"Will I always win a credit card dispute?","answer":"No. Success depends on the evidence and circumstances. Disputes for items clearly not received have high success rates. Disputes where you voluntarily sent money and the scammer has 'proof' of delivery are harder. Document everything before filing."},{"question":"Can a merchant challenge a chargeback?","answer":"Yes. When you file a dispute, the merchant has an opportunity to respond with evidence. If they provide compelling proof — such as delivery confirmation to your address — the issuer may side with them. You can then escalate to arbitration if the amount justifies it."}],"lastReviewed":"2026-09-21"},{"slug":"is-zelle-protected-if-scammed","url":"https://scamencyclopedia.org/questions/is-zelle-protected-if-scammed","question":"Is Zelle protected if I get scammed?","shortAnswer":"Zelle does not provide buyer protection for payments you voluntarily authorised — but if someone made an unauthorised transfer from your account without your knowledge, you may have recourse under your bank's fraud policies.","explanation":"Zelle distinguishes sharply between two types of incidents: unauthorised transactions (where someone moved money without your knowledge or consent) and authorised transactions (where you were tricked but you pressed 'send' yourself). These receive very different treatment.\n\nFor unauthorised transactions — such as account takeover fraud where someone gained access to your banking app and initiated transfers — your bank is generally obligated to refund you under the Electronic Fund Transfer Act. These cases are relatively clear-cut.\n\nFor authorised transactions where you were scammed — you sent money to someone posing as a landlord, a seller who never delivered, or a romantic partner — Zelle's original policy was that you took the risk by authorising the payment. However, following substantial regulatory scrutiny and Senate hearings in 2022-2023, the major US banks operating Zelle agreed to expand voluntary refunds to cover more cases of authorised push-payment fraud, particularly involving impersonation scams.\n\nThis expanded policy is not uniform and not guaranteed. Your bank may or may not refund you depending on the specific circumstances and their current policies. Filing a complaint with the Consumer Financial Protection Bureau significantly increases the chance of resolution, as banks take CFPB complaints seriously.\n\nFor any future transaction: use Zelle only with people you personally know. No government agency, utility company, or online seller should be asking you to pay via Zelle.","redFlags":["Anyone you have not met in person asks for Zelle payment","Government agency or court system contacts you and asks for Zelle payment","Scam job offer says they will pay you via Zelle first and you send a portion elsewhere","Landlord collects deposit via Zelle before you have signed a lease or seen the property","Your bank sends a fraud alert text and the 'bank fraud investigator' who calls asks you to Zelle them","Utility company calls threatening disconnection and demands immediate Zelle payment"],"whatToDoNow":["Report the fraud to your bank's Zelle support line and fraud department immediately","File a complaint with the CFPB at consumerfinance.gov/complaint — this is the most effective escalation","Report to the FTC at ReportFraud.ftc.gov and include all transaction details","File a local police report for any significant amount","Review your bank's current authorised push-payment fraud policy in writing","Visit /payments for a comparison of P2P app protections"],"faq":[{"question":"Does Zelle have any buyer protection?","answer":"Zelle does not have a formal buyer protection program. Protection depends on whether the transfer was unauthorised (stronger recourse) or authorised by you under false pretences (weaker recourse, dependent on your bank's voluntary policy)."},{"question":"Why do so many scammers ask for Zelle?","answer":"Zelle transfers are instant and final, moving directly between bank accounts with no intermediary holding the funds. The historical lack of buyer protection for authorised transactions made it attractive to scammers, though regulatory pressure has begun to shift this."}],"lastReviewed":"2026-06-10"},{"slug":"is-venmo-protected-if-scammed","url":"https://scamencyclopedia.org/questions/is-venmo-protected-if-scammed","question":"Is Venmo protected if I get scammed?","shortAnswer":"Venmo peer-to-peer payments are not protected if you voluntarily sent the money. Venmo's Purchase Protection applies only to transactions specifically marked as purchases from eligible sellers.","explanation":"Venmo is primarily a peer-to-peer payment app, and the core feature — sending money to a friend — has no buyer protection. If you send $300 to someone posing as a concert ticket seller and they disappear, Venmo's position is that you authorised the transfer and they cannot reverse it.\n\nVenmo introduced a business profile and Purchase Protection feature that provides limited coverage when you pay an eligible Venmo business profile and check the 'purchases' category at the time of payment. This protection does not apply to personal profiles, which is how the vast majority of individuals sell tickets, goods, or services through the app.\n\nLike other peer-to-peer apps, Venmo will investigate and potentially refund cases of clear account takeover — where a fraudster gained access to your Venmo account and transferred funds without your knowledge. These are treated as unauthorised transactions.\n\nVenmo is owned by PayPal, and some victims have had partial success escalating Venmo disputes to PayPal's resolution centre, particularly if the transaction was funded by a linked PayPal balance or credit card. This is not guaranteed, and results vary.\n\nPractical advice: treat any Venmo payment to a stranger as permanent. Only use Venmo with people you trust personally. For purchases from individuals or small businesses, use PayPal Goods and Services which provides formal buyer protection.","redFlags":["Seller on a classifieds site or social media insists on Venmo","Ticket seller you found online demands Venmo before you receive any proof of the tickets","Buyer 'accidentally' sends too much and asks for the overage back via Venmo","Personal profile claiming to be a legitimate store asking for Venmo payment","Romantic partner asks for money via Venmo for an urgent situation","Someone asks you to receive a Venmo payment and forward it — this is a money mule scheme"],"whatToDoNow":["Report the fraud to Venmo support and request an investigation","If the payment was funded by a linked credit card, dispute it with your card issuer","File a complaint with the CFPB at consumerfinance.gov/complaint","Report to the FTC at ReportFraud.ftc.gov","For purchases from strangers, switch to PayPal Goods and Services going forward"],"faq":[{"question":"What is the difference between Venmo peer-to-peer and Venmo Purchase Protection?","answer":"Peer-to-peer transfers between personal accounts have no buyer protection. Purchase Protection applies only when you pay a verified Venmo business profile and select 'Purchases' as the payment type. This is a small subset of transactions."},{"question":"Can Venmo reverse a payment I made?","answer":"Venmo cannot reverse a completed peer-to-peer payment. They can contact the recipient on your behalf, but unless the recipient agrees to return the money, or the transaction was clearly unauthorised, reversals do not happen."}],"lastReviewed":"2026-06-10"},{"slug":"is-cash-app-protected-if-scammed","url":"https://scamencyclopedia.org/questions/is-cash-app-protected-if-scammed","question":"Is Cash App protected if I get scammed?","shortAnswer":"Cash App peer-to-peer payments are not refundable if you authorised them. Cash App does not mediate disputes between senders and recipients the way a bank or credit card issuer would.","explanation":"Cash App, operated by Block (formerly Square), is designed for instant money transfers and is explicit in its user agreements that payments you send are final. Once a Cash App payment is sent and accepted, Cash App does not intervene in disputes about whether goods or services were delivered in exchange for that payment.\n\nUnauthorised transactions — where your Cash App account was hacked and transfers were made without your knowledge — are treated differently. Cash App investigates these and may issue a refund if account compromise is confirmed, similar to the process at any financial institution.\n\nCash App also offers a Cash App Card, a Visa debit card tied to your Cash App balance. Purchases made with the Cash App Card at merchants benefit from more protections than peer-to-peer transfers, and Visa's dispute process may apply for certain card-based fraudulent charges.\n\nBitcoin transactions through Cash App are fully irreversible — even Cash App itself cannot undo a Bitcoin transfer once it is broadcast to the blockchain.\n\nA specific scam to know about: 'Cash App Friday' or 'Cash App blessing' scams circulate on social media promising that if you send a small amount you will receive a multiplied return. Cash App itself does not run these promotions — any account claiming otherwise is fraudulent.","redFlags":["Social media account claiming to be Cash App offers a 'Cash App Friday' multiplier","Stranger asks you to receive a large Cash App payment and forward most of it elsewhere","Seller of goods insists on Cash App payment in advance of shipping","Someone claims your Cash App needs 'verification' and asks for your login credentials","Request to send a small Cash App payment to 'unlock' a larger transfer","Job that pays via Cash App and asks you to immediately buy gift cards"],"whatToDoNow":["Report fraud transactions through the Cash App in-app support and request a formal investigation","If funded by a linked debit or credit card, dispute with your card issuer simultaneously","File a complaint with the CFPB and report to the FTC","Change your Cash App PIN and enable additional security features if your account may be compromised","Report Bitcoin transactions to the FBI IC3 — blockchain forensics are used in large fraud cases"],"faq":[{"question":"Does Cash App offer buyer protection?","answer":"Cash App does not offer buyer protection for peer-to-peer transfers. Card purchases using the Cash App Visa debit card may have some Visa dispute protections, but these are weaker than credit card chargeback rights."},{"question":"Are Cash App Bitcoin transactions reversible?","answer":"No. Bitcoin transactions are irreversible on the blockchain. Cash App cannot reverse a Bitcoin transfer regardless of circumstances. Treat any Bitcoin sent via Cash App as permanent."}],"lastReviewed":"2026-06-10"},{"slug":"is-paypal-protected-if-scammed","url":"https://scamencyclopedia.org/questions/is-paypal-protected-if-scammed","question":"Is PayPal protected if I get scammed?","shortAnswer":"PayPal Goods and Services purchases are protected by PayPal's buyer protection program. PayPal Friends and Family payments have no buyer protection — the choice of payment type is critical.","explanation":"PayPal is unique among major payment apps in offering a formal, well-established buyer protection program for eligible transactions. When you pay using the 'Goods and Services' option, PayPal's Purchase Protection covers you if the item does not arrive or is significantly different from the description. You can open a dispute within 180 days of the payment date, which is a much longer window than most credit card chargeback policies.\n\nThe critical distinction is the payment type. PayPal Friends and Family — the personal payment option — carries no buyer protection whatsoever. Scammers routinely ask buyers to use Friends and Family, citing the absence of a transaction fee for the seller. This is a major red flag. A legitimate seller who is concerned about fees will adjust their price; they will not ask you to waive your buyer protection.\n\nIn practice, PayPal's dispute resolution process can take time and may not always result in a refund, particularly for digital goods or services. PayPal tends to rule in favour of buyers who have documented evidence (tracking showing non-delivery, side-by-side comparison of product description vs received item) and against sellers with prior dispute histories.\n\nPayPal accounts can also be the target of phishing: fake emails mimicking PayPal's design ask you to click a link and log in, where your credentials are stolen. Always access PayPal by typing the URL directly in your browser, not through email links.","redFlags":["Seller specifically requests PayPal Friends and Family to 'save on fees'","Email claiming to be PayPal with a link to verify your account","Seller asks you to mark the transaction as 'Friends and Family' after you have already started checking out","PayPal payment request arrives from someone you did not initiate contact with","Seller has no transaction history or very new account with inflated positive feedback","Overpayment via PayPal asking you to refund the difference by a different method"],"whatToDoNow":["Always use Goods and Services when buying from any seller you do not personally know","Open a PayPal dispute within 180 days if goods are not received or not as described","Do not provide your PayPal login credentials to anyone or through any link in an email","If your account was compromised, report to PayPal security immediately and change your password","Escalate unresolved disputes to a CFPB complaint"],"faq":[{"question":"How long do I have to dispute a PayPal transaction?","answer":"PayPal's Purchase Protection window is 180 days from the date of payment. This is significantly longer than the typical 60-day credit card chargeback window, giving you more time to realise something has gone wrong."},{"question":"What happens after I open a PayPal dispute?","answer":"PayPal gives the seller 10 days to respond. If no response, PayPal typically rules in the buyer's favour. If the seller responds, PayPal reviews evidence from both sides. You can escalate to a claim if the seller and you cannot reach agreement."}],"lastReviewed":"2026-06-10"},{"slug":"is-wire-transfer-reversible","url":"https://scamencyclopedia.org/questions/is-wire-transfer-reversible","question":"Is a wire transfer reversible after it is sent?","shortAnswer":"Wire transfers are designed to be final — reversal is possible only in a narrow window before the receiving bank releases funds, and success is not guaranteed.","explanation":"The near-irreversibility of wire transfers is a core feature, not a bug: businesses and real estate transactions depend on the certainty that wired funds will not be clawed back. But for fraud victims, this same certainty makes recovery extremely difficult.\n\nIf you realise immediately — within the same business day — that a wire was sent under false pretences, call your bank's fraud line and ask them to initiate a wire recall. Your bank sends a formal SWIFT or Fedwire recall message to the receiving bank, asking them to hold or return the funds. If the receiving bank still has the funds in the account and has not yet released them, they may cooperate. However, they are not legally required to do so unless a court order is involved.\n\nScam operations typically drain wired funds within hours of receipt: converting to cryptocurrency, transferring internationally, or withdrawing cash through money mules. By the time most victims realise they have been defrauded — often days later — the money has moved far beyond the reach of a simple recall.\n\nInternational wire recalls are significantly more complex. They require cooperation from a foreign bank operating under different laws and regulatory frameworks, and many jurisdictions do not have mutual legal assistance treaties that cover civil wire fraud. Government intervention through agencies like the FBI or Secret Service is sometimes successful for large amounts.\n\nThe most effective protection against wire fraud is prevention: verify beneficiary details by calling a known, independently verified number before sending any wire.","redFlags":["Wire instructions arrive by email or text and differ from those given in a previous contract","Any 'last minute change' to bank details for a real estate closing","Caller claiming to be your bank asking you to wire funds to 'protect' your account","Investment platform asking you to wire more money to 'unlock' returns","Urgency to wire today before a deadline that was not previously established"],"whatToDoNow":["Call your bank's fraud hotline immediately — ask for a wire recall within the same business day","File a complaint with the FBI IC3 at ic3.gov and request they contact the receiving bank","Report to the FTC at ReportFraud.ftc.gov","Contact your local FBI field office for high-value fraud (over $10,000)","Preserve all communications: emails, call logs, wire confirmation documents","Visit /recovery for the full post-fraud action checklist"],"faq":[{"question":"How quickly must I act to have a chance at recovering a wire?","answer":"The faster the better — ideally within the same business day. Every hour that passes increases the chance the receiving bank has released the funds. Call your bank's fraud line, not the general customer service number, for the fastest response."},{"question":"Is there a government fund that compensates wire fraud victims?","answer":"There is no automatic government compensation fund for wire fraud victims. Recovery depends on successful law enforcement action or civil litigation. Some victims receive partial restitution if the fraudster is caught and convicted."}],"lastReviewed":"2026-06-10"},{"slug":"what-payment-methods-are-refundable","url":"https://scamencyclopedia.org/questions/what-payment-methods-are-refundable","question":"What payment methods are refundable if I get scammed?","shortAnswer":"Credit cards offer the strongest refund rights through chargebacks. Debit cards have weaker but present rights. Most peer-to-peer apps, wire transfers, gift cards, and crypto are not refundable after the fact.","explanation":"Understanding the refundability spectrum before you pay is the single most powerful consumer protection tool available to you. Payment methods range from legally protected to completely final.\n\nCredit cards sit at the most protected end. The Fair Credit Billing Act gives you the right to dispute charges for items not received or not as described. You have up to 60 days from the statement date, and the credit card issuer investigates and can reverse the charge. Your liability for unauthorised credit card charges is capped at $50 by law.\n\nDebit cards come next. The Electronic Fund Transfer Act provides dispute rights for unauthorised transactions, but the liability limits depend on how quickly you report — potentially rising to $500 or more if you wait beyond 60 days. Your money is also gone from your account during the investigation period.\n\nPlatform-protected payments — PayPal Goods and Services, eBay checkout, Amazon — add a marketplace dispute layer. The underlying payment method's rights still apply, and the platform mediates as a first step.\n\nPeer-to-peer apps (Zelle, Venmo peer-to-peer, Cash App, Apple Cash) are at the bottom of the protection stack for authorised transfers. No statutory dispute right exists for payments you voluntarily sent.\n\nWire transfers, gift cards, money orders, and cryptocurrency sit at the completely-final end. Once sent, recovery depends entirely on luck, timing, and law enforcement action rather than any consumer protection right.","redFlags":["Any situation where the only accepted payment method is one from the unprotected end of the spectrum","Pressure to choose a payment method other than the platform's default checkout","Instructions to pay in a way that bypasses the normal transaction flow","Request that you not use a credit card because of 'fees' when no legitimate seller would care that much"],"whatToDoNow":["Default to credit card for any purchase from an unfamiliar seller or platform","Use platform-protected checkouts (PayPal G and S, eBay, Amazon) as a second choice","Reserve peer-to-peer apps for people you know personally","Never use gift cards, wire transfers, or crypto for consumer purchases unless you fully understand the finality","Visit /payments for the full ranked guide to payment method safety"],"faq":[{"question":"Is an ACH bank transfer refundable?","answer":"ACH transfers (standard bank-to-bank transfers) offer a short reversal window — typically two business days for the originating bank to recall the transfer. After that, recovery depends on the receiving bank's cooperation."},{"question":"Can a cryptocurrency payment ever be refunded?","answer":"Only if the recipient voluntarily sends it back. There is no chargeback, recall, or platform dispute mechanism for on-chain cryptocurrency transactions. Some centralised exchanges can freeze accounts on law enforcement request, but this does not guarantee recovery."}],"lastReviewed":"2026-06-10"},{"slug":"can-crypto-payments-be-traced-by-police","url":"https://scamencyclopedia.org/questions/can-crypto-payments-be-traced-by-police","question":"Can crypto payments be traced by police?","shortAnswer":"Law enforcement can trace cryptocurrency transactions on public blockchains using blockchain analytics tools, and major exchanges comply with lawful subpoenas — but tracing does not always lead to recovery.","explanation":"Every transaction on Bitcoin, Ethereum, and most major public blockchains is recorded permanently and publicly. Law enforcement agencies at the FBI, Secret Service, and IRS-CI have dedicated cryptocurrency forensics units and work with private blockchain analytics firms. These tools can follow the movement of funds across hundreds of wallet hops and flag when funds enter a regulated exchange.\n\nWhen funds reach an exchange that operates under US, EU, or UK financial regulations — such as Coinbase, Kraken, or Binance US — law enforcement can serve a subpoena or court order requiring the exchange to identify the account holder. This has led to successful prosecutions and fund seizures in multiple high-profile fraud and ransomware cases.\n\nThe limitations: privacy-focused coins (Monero), mixing services, and decentralised exchanges that require no identity verification create gaps in the trail. Sophisticated fraud operations move funds through multiple steps specifically to reach uncooperative endpoints. Overseas exchanges in jurisdictions without mutual legal assistance treaties may not comply with requests from US or UK authorities.\n\nFor individual consumer fraud cases involving amounts under $50,000, available investigative resources are limited. Reports are still valuable because they contribute to pattern analysis that leads to prosecutions of the criminal operations behind multiple frauds. For significant individual losses, engaging a blockchain forensics firm alongside law enforcement reporting is sometimes worth the cost.","redFlags":["Platform asks you to send crypto to multiple wallet addresses 'for security'","Investment scheme moves your funds through several crypto types before showing a 'balance'","Instructions to use Monero or other privacy coins for payment","Exchange or platform not registered in any country with financial oversight"],"whatToDoNow":["Preserve all wallet addresses, transaction IDs, and timestamps immediately","Report to the FBI IC3 at ic3.gov — include blockchain evidence","Report to the FTC at ReportFraud.ftc.gov","Contact the exchange you used and report the destination address as fraudulent","Consult a blockchain forensics firm for losses above a threshold where fees are justified","Visit /scams/crypto-web3-scams for the full crypto fraud landscape"],"faq":[{"question":"Do I need a lawyer to get law enforcement to trace crypto?","answer":"No. You can report directly to the FBI IC3 without a lawyer. However, for very large losses, a lawyer or blockchain forensics firm may help organise evidence in a way that makes law enforcement engagement more productive."},{"question":"Are privacy coins like Monero truly untraceable?","answer":"Privacy coins use cryptographic techniques that obscure transaction details, making them significantly harder to trace than Bitcoin. They are not absolutely untraceable — academic researchers and some forensics firms have made partial progress — but practical tracing is very difficult compared to transparent blockchains."}],"lastReviewed":"2026-06-10"},{"slug":"does-travel-insurance-cover-scams","url":"https://scamencyclopedia.org/questions/does-travel-insurance-cover-scams","question":"Does travel insurance cover scams?","shortAnswer":"Most standard travel insurance policies do not cover financial fraud or scams — they cover trip cancellation, medical emergencies, and lost luggage, not being deceived by a scammer.","explanation":"Travel insurance is designed around insurable events: a sudden illness that forces trip cancellation, a flight delay, baggage loss, or emergency medical costs abroad. The policy language almost universally excludes 'self-inflicted' financial loss, which insurers interpret to include paying money voluntarily to a fraudulent seller, fake tour operator, or scam accommodation.\n\nHowever, there are scenarios where travel insurance intersects with scam-related losses. If a tour operator goes into insolvency and cannot fulfil your booking, some travel insurance and travel agent bonding schemes (like ATOL in the UK) protect you. This is a corporate failure rather than a personal fraud, and the distinction matters for coverage.\n\nCredit card purchase protection is typically more relevant for travel-related scams. If you booked accommodation through a fake website and paid by credit card, a chargeback for services not rendered is available. This is why paying for travel bookings by credit card — even when the airline or hotel accepts other methods — is recommended.\n\nFor package holidays in the UK, ATOL protection covers you if your tour operator fails, and many package holidays are protected by Section 75 of the Consumer Credit Act if paid by credit card. In the US, the Fair Credit Billing Act provides similar protection for travel booked by credit card.\n\nAlways review your specific travel insurance policy for fraud-related exclusions before assuming you are covered.","redFlags":["Travel booking site that is not verifiably connected to the airline, hotel, or tour operator","Accommodation price significantly below comparable listings on major platforms","Tour operator or agency that cannot provide a physical address or licence number","Request for wire transfer or gift card to confirm a travel booking","Rental property with a landlord who asks for a deposit before you can view the listing details"],"whatToDoNow":["Pay for all travel bookings by credit card to preserve chargeback rights","Verify booking platforms against the official airline or hotel website before paying","In the UK, book package holidays with ATOL-protected operators","If defrauded by a travel scam, dispute the credit card charge and report to the FTC or Report Fraud (UK, formerly Action Fraud)","Visit /scams/travel-scams for the full landscape of travel fraud"],"faq":[{"question":"Does travel insurance cover a fake airline ticket?","answer":"Typically no — fraud exclusions in most policies prevent coverage. Your best protection for a fake ticket is a credit card chargeback for services not provided."},{"question":"What is ATOL protection and does it cover scams?","answer":"ATOL (Air Travel Organiser's Licence) in the UK protects consumers when an ATOL-licensed tour operator fails financially. It does not cover paying a fake or unlicensed operator. Always verify an operator's ATOL number on the CAA website."}],"lastReviewed":"2026-06-10"},{"slug":"should-i-pay-online-seller-with-bank-transfer","url":"https://scamencyclopedia.org/questions/should-i-pay-online-seller-with-bank-transfer","question":"Should I pay an online seller with a bank transfer?","shortAnswer":"Paying an unknown online seller by direct bank transfer is high risk — unlike credit cards, bank transfers offer minimal buyer protection and are difficult to reverse once processed.","explanation":"A direct bank transfer (ACH in the US, Faster Payments or BACS in the UK, SEPA in Europe) moves money from your account directly to the seller's account. Unlike a credit card payment, a bank transfer has no chargeback mechanism — chargeback is a card-scheme process, not a law — and no Section 75-style statutory protection for goods not delivered.\n\nIn the UK, Authorised Push Payment (APP) fraud reimbursement has been mandatory since 7 October 2024, covering Faster Payments and CHAPS transfers up to £85,000 per claim, split 50/50 between the sending and receiving bank, with exceptions where the consumer failed to take reasonable care. But this only applies if you were deceived into paying a fraudster — it does not cover a civil dispute with a genuine seller who takes your money and simply does not deliver, which is the more common outcome when an online marketplace purchase goes wrong. In the US, there is no equivalent mandate, and reimbursement depends on your bank's own policies. In both countries, the statutory purchase protections remain Section 75 of the Consumer Credit Act (UK) and the Fair Credit Billing Act (US) — not chargeback itself.\n\nBank transfers are appropriate for paying established businesses you have an existing relationship with, services from verified providers, or large transactions where a credit card's spend limit is a practical constraint. They are not appropriate for one-off purchases from strangers on classifieds, social media, or unknown websites.\n\nIf you must pay a small business or individual by bank transfer, verify their identity thoroughly, check reviews independently, and start with a small order rather than a large one. In the UK, the Confirmation of Payee system (where your bank checks the account name matches the sort code and account number) provides some protection against fraudulent bank details.","redFlags":["Online seller only accepts bank transfer and no other payment method","Payment instructions arrive by email from a seller you just found","Seller cannot provide a verifiable business registration number","Pressure to transfer today before the offer expires","No returns policy or physical address provided","Reviews only on the seller's own website with no third-party verification"],"whatToDoNow":["Default to credit card or platform-protected checkout for online purchases","If a bank transfer is unavoidable, verify the recipient's identity through independently sourced contact information","In the UK, confirm the Confirmation of Payee matches before sending","Report any fraud to your bank immediately — UK banks are required to investigate APP fraud","Report to the FTC (US) or Report Fraud (UK, formerly Action Fraud), and visit /recovery"],"faq":[{"question":"Is an ACH bank transfer safe for paying a business?","answer":"For established businesses with a verified track record, ACH is generally safe and widely used. The risk is with unknown individuals or new businesses where you cannot independently verify the account details or the seller's legitimacy."},{"question":"What is APP fraud and am I covered?","answer":"Authorised Push Payment fraud is when you are tricked into voluntarily transferring money to a scammer. In the UK, the Payment Systems Regulator introduced mandatory reimbursement requirements for most APP fraud cases, applying to payments made on or after 7 October 2024. In the US, coverage depends on your bank's voluntary policies."}],"lastReviewed":"2026-09-21"},{"slug":"can-scammer-access-my-account-through-payment","url":"https://scamencyclopedia.org/questions/can-scammer-access-my-account-through-payment","question":"Can a scammer access my bank account through a payment I made?","shortAnswer":"A payment you make to a scammer does not give them access to your bank account — but some payment methods can expose account details that scammers may attempt to exploit further.","explanation":"Simply paying a scammer does not hand them the keys to your bank account. When you make a payment, the information that travels with it depends on the payment method. A credit or debit card number used at a fraudulent website exposes that card number, which could be used for further fraudulent charges — but does not give the scammer your full bank account credentials or access to your online banking.\n\nA cheque is the most information-rich payment instrument: it contains your account number, routing number, bank name, and your full legal name. Someone with a physical cheque has enough information to attempt ACH fraud using your account details. For this reason, some financial advisors recommend using electronic payments rather than cheques for new or unfamiliar payees.\n\nPeer-to-peer apps like Zelle and Venmo show your name and sometimes your profile picture — they do not expose your bank account number to the recipient. However, your banking credentials (username, password, one-time codes) should never be shared with anyone. Some scams specifically target these: a caller poses as bank fraud support and asks you to 'verify' your online banking by providing a one-time code they triggered. Sharing that code gives them account access.\n\nAfter any transaction with a suspected scammer, monitor your accounts closely, review all linked payment methods, and consider freezing your credit if any personal information may have been shared.","redFlags":["Fraudulent website asked for your full debit card details including PIN","Caller claimed to be your bank and asked you to confirm a one-time passcode they sent","You shared a cheque image that includes your account and routing number","Scam website collected your name, address, date of birth, and card details together","Any site that asked for your online banking username and password"],"whatToDoNow":["Monitor your bank account for any unfamiliar charges over the following days","Freeze your credit if you shared identity information (name, date of birth, SSN) with the scammer","Contact your bank if your debit card or cheque details were exposed — request a new account number","Enable two-factor authentication on all financial accounts","File a report with the FTC at ReportFraud.ftc.gov","Visit /scams/identity-theft-data-scams for the full identity theft response guide"],"faq":[{"question":"Does paying someone on Venmo reveal my bank account number?","answer":"No. Peer-to-peer app payments do not expose your bank account or routing number to the recipient. They see your display name and profile picture. Your risk from Venmo is losing the transferred funds, not further account access."},{"question":"What should I do if I shared my online banking password with a scammer?","answer":"Change your password immediately and enable two-factor authentication. Call your bank's fraud line and inform them that your credentials may be compromised. Review all recent transactions and set up transaction alerts."}],"lastReviewed":"2026-06-10"},{"slug":"is-escrow-safe-for-online-purchases","url":"https://scamencyclopedia.org/questions/is-escrow-safe-for-online-purchases","question":"Is escrow safe for online purchases?","shortAnswer":"Legitimate escrow services provide strong protection for high-value transactions, but fake escrow is a common scam — always verify the escrow company is licensed and independent before trusting it.","explanation":"A genuine escrow service holds funds from the buyer until the seller delivers the agreed goods or services, then releases payment. This model is sound and widely used for domain sales, vehicle purchases, real estate, and high-value freelance projects. It removes the 'who goes first' dilemma from high-stakes transactions between strangers.\n\nThe scam version works by the fraudster — usually posing as a seller — insisting on a specific 'escrow' service they have already chosen and linked to. The buyer sends funds to what appears to be a legitimate escrow company, but the site is fake and controlled by the scammer. Once the buyer transfers funds, the scammer and the fake site disappear.\n\nProtecting yourself means choosing the escrow service independently. Research escrow providers before agreeing to one: in the US, escrow companies for internet transactions are licensed state by state, and the California Department of Business Oversight maintains a list of licensed internet escrow companies. Escrow.com is among the most widely recognised licensed services, though there are others.\n\nIf a seller insists on a specific escrow company you have never heard of and provides the link, treat this as a red flag. Propose using your own verified escrow provider. A legitimate seller selling in good faith will have no objection to using a licensed, independent escrow service.","redFlags":["Seller provides the link to the escrow service themselves","Escrow website was registered very recently or has no verifiable business history","Escrow company cannot be found on any state licensing database","Escrow fee is requested upfront separately from the main deposit","Website design has spelling errors or appears to mimic a well-known service","Escrow company has no phone number or only a generic email for contact"],"whatToDoNow":["Verify any escrow company against your state's licensed business database before sending money","Propose using a well-known licensed escrow provider you found independently","Never pay escrow fees separately or upfront — legitimate escrow fees come from the transaction proceeds","If you sent funds to a fake escrow, report to the FBI IC3 and to your bank immediately","Visit /scams/online-shopping-scams for the full landscape of online purchase fraud"],"faq":[{"question":"How do I verify a US escrow company is legitimate?","answer":"For internet escrow, check the California Department of Business Oversight's licensed internet escrow list, as California licenses most nationally operating internet escrow services. Also check your own state's financial services regulator."},{"question":"Is Escrow.com safe?","answer":"Escrow.com is a licensed, regulated escrow service widely used for domain and high-value online transactions. As with any service, verify you are on the real website (check the URL carefully) and do not use a link provided by the seller."}],"lastReviewed":"2026-06-10"},{"slug":"what-happens-if-i-send-money-to-wrong-person","url":"https://scamencyclopedia.org/questions/what-happens-if-i-send-money-to-wrong-person","question":"What happens if I send money to the wrong person?","shortAnswer":"Sending money to the wrong person by mistake is different from being scammed — banks can attempt a recall if contacted quickly, but if the recipient refuses to return it, your recourse is through civil channels.","explanation":"Accidental misdirected payments are a genuine issue separate from fraud. If you typed an account number incorrectly or selected the wrong contact in a payment app, the funds land in someone else's account through no bad intent on their part.\n\nFor bank transfers, contact your bank immediately and provide details of the error. Your bank will send a formal recall request to the receiving bank asking them to flag the funds. The receiving bank must notify its customer that a recall has been requested. If the recipient agrees to return the funds, the bank will facilitate the transfer. If they refuse, your bank cannot force the return — that requires civil legal action, which is practical only for significant amounts.\n\nFor peer-to-peer apps, the process varies: Venmo, Cash App, and Zelle have support channels for accidental transfers and will attempt to contact the recipient on your behalf. The recipient receiving an unexpected windfall and returning it voluntarily happens in some cases. Platform terms of service technically require users to return accidental payments, but enforcement is limited.\n\nFor credit card charges to the wrong amount or duplicate charges, the chargeback process handles these efficiently as billing errors under the Fair Credit Billing Act.\n\nBeing scammed is legally different: the recipient obtained your money through deception, which is fraud. That changes the law enforcement and legal options available, even if the practical outcome — difficulty recovering funds — may be similar.","redFlags":["Payment app auto-completed the wrong contact name from your phone book","You entered a sort code or account number manually and mistyped a digit","Duplicate charge appeared from a merchant — these are typically billing errors, not fraud"],"whatToDoNow":["Contact your bank or payment platform immediately with the error details","Request a formal recall or accidental payment notice to the recipient","Follow up in writing to create a paper trail","If the amount is significant and the recipient refuses to return it, consult a consumer law attorney","For peer-to-peer apps, use their official support channels rather than contacting the recipient directly"],"faq":[{"question":"Is the recipient legally required to return an accidental payment?","answer":"In most jurisdictions, yes — keeping a payment you know was sent in error is legally unjust enrichment, which is actionable in civil court. However, enforcing this against an individual through the courts is time-consuming and expensive for small amounts."},{"question":"What if I sent money to the wrong person on Zelle?","answer":"Contact Zelle support immediately through your bank's app. Zelle will reach out to the recipient and ask them to return the funds. They cannot force the return, but the recipient has been notified of the accidental nature of the payment."}],"lastReviewed":"2026-06-10"},{"slug":"can-i-get-scammed-paying-for-a-rental-deposit","url":"https://scamencyclopedia.org/questions/can-i-get-scammed-paying-for-a-rental-deposit","question":"Can I get scammed paying a rental deposit?","shortAnswer":"Rental deposit fraud is extremely common — fake landlords collect deposits for properties they do not own or control, then disappear. Always verify ownership and view the property in person before paying anything.","explanation":"Rental deposit scams target people at a financially and emotionally vulnerable moment: you need a place to live, competition for rentals is stiff, and a good deal can feel worth moving fast on. Scammers exploit this urgency by listing properties at below-market rent, often using photos stolen from legitimate listings or property websites.\n\nThe scammer poses as a landlord or property manager and insists on collecting a deposit and first month's rent before showing the property 'to secure it.' Once payment is received, contact stops. The victim shows up to find either that the address does not exist, the property is occupied by someone else, or the real owner has never heard of any rental arrangement.\n\nA variant targets renters already in contact with a legitimate property: a fraudster intercepts email communications or creates a near-identical email address and sends 'updated' payment instructions, redirecting the deposit to their account.\n\nProtect yourself by verifying ownership. Check property records through your county assessor's website to confirm the person you are dealing with owns the property. Meet the landlord in person and view the inside of the property before any money changes hands. Pay by cheque or credit card if possible — never by wire, gift card, or cryptocurrency.\n\nIn the UK, rental deposits above a certain size are legally required to be held in a government-approved tenancy deposit scheme within 30 days of payment. Verify this is done after paying.","redFlags":["Rent is significantly below comparable properties in the same area","Landlord cannot meet in person or show the inside of the property before deposit","Claims to be abroad and will manage everything remotely","Requests deposit payment via wire transfer, crypto, Zelle, or gift cards","Property listing photos appear on multiple rental sites under different contact details","No signed lease offered before payment is requested"],"whatToDoNow":["Check property ownership records through your county assessor's website before paying","View the inside of the property with the landlord in person before sending any deposit","Pay by cheque made out to the property owner's legal name — not cash or irreversible transfer","In the UK, confirm the deposit will be placed in a government-approved scheme","Report rental fraud to local police and the FTC at ReportFraud.ftc.gov","Visit /scams/housing-rental-scams for the full rental fraud guide"],"faq":[{"question":"How do I check if a landlord actually owns a property?","answer":"Most US counties have an online assessor or recorder database where you can search by address to see the registered owner. Compare the registered owner's name to the person you are dealing with. In the UK, Land Registry searches are available online."},{"question":"What if I already paid a deposit to a fake landlord?","answer":"Report to local police and the FTC immediately. If you paid by credit card, file a chargeback for services not rendered. If by bank transfer, contact your bank for a recall attempt. Visit /recovery for the full checklist."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-scammer-take-money-with-just-my-account-number","url":"https://scamencyclopedia.org/questions/can-a-scammer-take-money-with-just-my-account-number","question":"Can a scammer take money from my account with just my account number?","shortAnswer":"A bank account and routing number together can be used to initiate ACH withdrawals — so yes, this information can be misused, though most banks have protections against unauthorised transactions.","explanation":"Your bank account number and routing number together are the credentials needed to set up an ACH (electronic) transaction. ACH debits — used for direct debits, bill payments, and most automated subscriptions — are initiated using exactly this combination. If a fraudster obtains your account and routing numbers, they can attempt to set up an unauthorised direct debit.\n\nMost banks have controls that reduce this risk: new ACH debit mandates may trigger verification, unusual large withdrawals may be flagged, and your bank monitors for patterns inconsistent with your normal account use. If an unauthorised ACH debit occurs, the Electronic Fund Transfer Act gives you the right to dispute it — report it to your bank within 60 days.\n\nWhere does someone get your account and routing number? A personal cheque contains both. If you wrote a cheque to a fraudulent 'contractor' or sent one to a scam address, those details are now in their hands. Data breaches at businesses that store your banking details, and phishing attacks where you enter banking details on a fake website, are other common vectors.\n\nIf you believe your account and routing numbers have been compromised, contact your bank. Some banks can close the existing account and open a new one, assigning you a new account number — this is the most effective prevention once compromise has occurred.","redFlags":["You wrote a cheque to someone who turned out to be a scammer","A form you filled in on a suspicious website asked for your bank account and routing numbers","Unexpected small debit appeared from a company name you do not recognise","A data breach notification mentioned your banking information was exposed"],"whatToDoNow":["Contact your bank immediately to report suspected account number compromise","Request a new account number and check whether your bank can proactively block suspicious ACH debits","Monitor all transactions closely for the next 90 days and set up alerts for any debit over a small amount","Dispute any unauthorised ACH debits within 60 days through your bank","File a report with the FTC at ReportFraud.ftc.gov"],"faq":[{"question":"Is it safe to share my account and routing number for legitimate direct debits?","answer":"Sharing them with established, reputable businesses for legitimate direct debits (rent, utilities, subscriptions) is normal practice. The risk is sharing them with individuals or businesses whose trustworthiness you cannot verify."},{"question":"Can a scammer take money with just my account number, without the routing number?","answer":"An account number alone is not sufficient to initiate most ACH transactions — the routing number is also needed. However, both appear together on every cheque, so they are usually obtained together."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-refund-scams-work-with-payments","url":"https://scamencyclopedia.org/questions/how-do-refund-scams-work-with-payments","question":"How do refund scams work and which payment methods do they use?","shortAnswer":"Refund scams claim to overpay you or process an erroneous refund, then ask you to return the 'excess' via a different method — allowing them to net a real payment from you while the original funding proves fake.","explanation":"Refund scams exploit the delay between when a payment appears in your account and when it is verified as legitimate. The fraudster sends you an 'overpayment' — by fake cashier's check, counterfeit money order, or occasionally a real transaction quickly reversed after the fact — and then contacts you claiming a mistake was made and asking for the difference back via gift card, wire transfer, cryptocurrency, or a peer-to-peer app.\n\nYou return the 'excess' using a real, irreversible payment method. Days later, the original payment bounces, is reversed, or is revealed as fraudulent. You have now paid real money out, and the fake payment you received is reversed by your bank. The net result: you have lost the amount you sent back.\n\nTech-support refund scams follow a slightly different script: a caller claims your account was overcharged for a service and they need to process a refund. They remotely access your computer, 'show' you a fake bank balance that appears inflated, and then tell you the refund was too large. They insist you return the excess by gift card or wire — exploiting the fact that you can see what looks like real money in your account.\n\nThe protection: never send money back via a different method from how you received the payment. A legitimate refund comes back to your original payment method through the same process. Any request to 'return excess funds' via gift card, wire, Zelle, or crypto should be treated as fraud.","redFlags":["Received a cheque or transfer for more than the agreed amount","Tech-support caller shows an inflated bank balance and asks you to return the excess","Seller, employer, or service provider sends a 'refund' and asks you to forward part of it","Caller says their payment system erroneously overpaid and needs you to wire the difference back","Any situation where you are asked to send money via a different method than the original payment"],"whatToDoNow":["Do not send anything until the original payment has fully and verifiably cleared","A legitimate overpayment is resolved by returning through the same payment channel — no exceptions","If you received a cheque, wait 10 business days before acting on the funds","Contact your bank if a suspicious transfer appeared in your account","Report the attempt to the FTC at ReportFraud.ftc.gov even if you did not lose money","Visit /scams/tech-scams for the tech-support variant of this fraud"],"faq":[{"question":"What should I do if I received an unexpected payment in my account?","answer":"Do not spend it and do not send any of it back via a different method. Contact your bank and ask them to investigate the source. If it is a genuine error, the sending bank can recall it through normal channels without you needing to wire anything anywhere."},{"question":"How do tech-support refund scams make the bank balance look inflated?","answer":"Scammers use remote access software to show you a manipulated view of your online banking — often using browser developer tools to change numbers on screen — while your real balance is unchanged. This is entirely cosmetic and does not reflect real transactions."}],"lastReviewed":"2026-06-10"},{"slug":"can-someone-steal-money-through-contactless-payment","url":"https://scamencyclopedia.org/questions/can-someone-steal-money-through-contactless-payment","question":"Can someone steal money through contactless payment or NFC?","shortAnswer":"Contactless card skimming is technically possible but rare in practice — the far bigger risk is physical card theft, data breaches, and phishing rather than someone waving a reader near your wallet.","explanation":"Contactless payment cards use NFC (near-field communication) to transmit payment data to a reader held very close — typically within a few centimetres. The theoretical concern is that a fraudster could build or purchase an NFC reader and brush close to you in a crowd to skim your card. In practice, this attack is very difficult to execute for meaningful gain: the transaction requires a live network connection, the data transmitted is a one-time token (not your real card number), and contactless transactions above small amounts require a PIN.\n\nMost contactless transactions use dynamic tokenisation, meaning each tap generates a unique cryptographic code that is useless for subsequent transactions. This is fundamentally different from old-style magnetic stripe skimming where a real card number was captured.\n\nReal contactless-related fraud is almost always digital rather than physical: stolen card details used for card-not-present online transactions, phishing sites harvesting card details, or malware on a merchant's payment system. The consumer's card never needs to be physically near the fraudster for this type of fraud.\n\nIf you are concerned about theoretical NFC skimming, RFID-blocking wallets do prevent NFC reads. But the security time and money are almost certainly better spent enabling transaction alerts, using virtual card numbers for online purchases, and monitoring your statements.","redFlags":["Unexpected small contactless charge on your statement from an unrecognised merchant","Multiple micro-transactions from unknown sources","Card lost or stolen with no physical evidence of how","Emails or texts claiming your contactless card has been accessed remotely"],"whatToDoNow":["Enable real-time transaction alerts to catch any unauthorised contactless charges immediately","Report any unrecognised contactless charge to your card issuer for investigation","If your card is lost or stolen, report it immediately for a freeze and replacement","Use virtual card numbers for online purchases to protect your real card details","Visit /payments for a full guide to card fraud types and protections"],"faq":[{"question":"Does an RFID-blocking wallet actually help?","answer":"It prevents the theoretical NFC skimming scenario, which is rare. It does not protect you from online card fraud, data breaches, or phishing — which are far more common threats. It is a reasonable precaution but not a priority over the more impactful security practices."},{"question":"Is contactless safer than inserting my card?","answer":"For in-person transactions, contactless is generally at least as secure as chip-and-PIN because it uses the same EMV tokenisation technology. The contactless limit acts as a natural cap on potential losses from a single unauthorised tap."}],"lastReviewed":"2026-06-10"},{"slug":"is-paypal-friends-and-family-safe","url":"https://scamencyclopedia.org/questions/is-paypal-friends-and-family-safe","question":"Is PayPal Friends and Family safe to use?","shortAnswer":"PayPal Friends and Family is safe to use with actual friends and family — but using it for purchases from strangers or businesses removes all buyer protection and is what scammers specifically request.","explanation":"PayPal Friends and Family exists to let people split bills, pay back a friend for dinner, or send money to a family member without PayPal taking a transaction fee. For this intended use — sending money between people with an established personal relationship — it is perfectly appropriate and secure.\n\nThe problem arises when sellers ask buyers to use Friends and Family for commercial transactions. This is specifically prohibited by PayPal's terms of service for sellers, but enforcement is difficult. For the buyer, the practical consequence is devastating: you have no buyer protection, no dispute pathway, and PayPal will not investigate the underlying transaction.\n\nWhy do scammers ask for it so specifically? Because they know that once you hit 'send' on a Friends and Family payment, the transaction is effectively final. There is no cooling-off period, no chargeback, and no investigation they need to worry about. The absence of the seller fee is the hook — 'save 3%' sounds like a bargain until you realise you just waived your only protection.\n\nIf a seller you found online, on a classifieds site, or on social media requests PayPal Friends and Family, decline. Offer to use Goods and Services instead. A legitimate seller may push back due to fees, but no legitimate seller should refuse all protected payment options. A refusal is a reliable signal of fraudulent intent.","redFlags":["Any seller or business asking you to choose Friends and Family for a purchase","Seller claims Friends and Family is 'the same' as Goods and Services but cheaper","Pressure to complete the payment quickly before switching payment type becomes awkward","Seller found on classifieds, social media, or an unfamiliar website","Item priced just below the threshold where buyers might think twice"],"whatToDoNow":["Always use Goods and Services when buying from anyone who is not a personal contact","If a seller demands Friends and Family, walk away from the transaction","If you already paid via Friends and Family to a scammer, contact PayPal support and report fraud","File a CFPB complaint if PayPal declines to investigate despite clear fraud","Report the seller account to PayPal to protect other potential victims"],"faq":[{"question":"What if I accidentally used Friends and Family for a purchase?","answer":"Contact PayPal support and explain the situation. While their standard policy is no dispute for F&F transactions, some victims have had success reporting clear fraud cases. Simultaneously, if you funded the payment by credit card, contact your card issuer."},{"question":"Why does PayPal allow Friends and Family if it is commonly misused?","answer":"Friends and Family serves a legitimate purpose for genuine personal transfers. The misuse is a consequence of scammers exploiting the feature. PayPal's terms prohibit using it for commercial transactions, but buyers are not always aware of this."}],"lastReviewed":"2026-06-10"},{"slug":"can-gift-card-scam-happen-at-any-store","url":"https://scamencyclopedia.org/questions/can-gift-card-scam-happen-at-any-store","question":"Can gift card scams happen at any store?","shortAnswer":"Gift card scams can use cards from any major retailer — Google Play, iTunes, Amazon, Steam, Walmart, and many others are all frequently demanded by scammers because they are universally available.","explanation":"Scammers do not limit themselves to a single type of gift card — they use whichever is convenient and available at stores near the victim. The most commonly demanded cards in reported fraud cases include Google Play, Apple iTunes, Amazon, eBay, Steam, Walmart, Target, Best Buy, and prepaid Visa or Mastercard gift cards. The choice often reflects what is available locally or what the scammer can liquidate quickly.\n\nMany retailers have responded to the scale of gift card fraud. Walmart, Target, and CVS among others have placed purchase limits, added warning stickers to card racks, and trained cashiers to ask about unusually large gift card purchases. Some stores now require ID for purchases above certain amounts. These measures have deterred some fraud but have not eliminated it.\n\nScammers adapt by telling victims to buy cards from multiple stores to avoid triggering limits, to say the cards are for personal use if a cashier asks, or to photograph the PIN rather than reading it aloud to avoid looking suspicious at the register.\n\nThe single most important thing to remember: no government agency, utility company, tech company, court system, or IRS representative has ever requested payment in gift cards. This claim has no exceptions. Any payment request in gift cards, from anyone, for any stated purpose, is a scam.","redFlags":["Told to buy gift cards from multiple stores to stay under the per-store limit","Instructed to tell the cashier the cards are for personal use or a gift","Asked to photograph the back of the card and text the photo","Request for gift cards as payment for a fine, tax bill, utility, or tech support","Caller stays on the phone throughout the store visit","Urgency that increases if you suggest another payment method"],"whatToDoNow":["Stop immediately if you are in a store buying gift cards because someone on the phone told you to","Tell the cashier what is happening — they are trained to help and will not judge you","If you already purchased cards, call the issuer immediately to try to block unredeemed balances","Report to the FTC at ReportFraud.ftc.gov — the retailer brand matters for data collection","File a local police report"],"faq":[{"question":"Why do scammers prefer some gift card brands over others?","answer":"Scammers prefer cards that are easy to redeem online, widely accepted, and sold at many locations. Google Play and Apple iTunes are especially common because the digital goods can be quickly converted to value that is moved further before anyone investigates."},{"question":"Can I get a refund if I report gift card fraud quickly?","answer":"Occasionally. If the card balance has not yet been redeemed, the issuer may freeze it. Call the number on the back of the card immediately after reporting to the FTC. Some retailers also have victim assistance programs, so informing the store manager is worthwhile."}],"lastReviewed":"2026-06-10"},{"slug":"is-cryptocurrency-safer-than-cash","url":"https://scamencyclopedia.org/questions/is-cryptocurrency-safer-than-cash","question":"Is cryptocurrency safer than cash for large transactions?","shortAnswer":"Cryptocurrency is not safer than cash for most consumer transactions — it is irreversible, volatile, and lacks consumer protection. For some business use cases it has advantages, but those come with significant caveats.","explanation":"Comparing cryptocurrency and cash for safety depends on what type of risk you are trying to mitigate. Cash carries physical theft risk, does not earn interest, and leaves no audit trail. Cryptocurrency eliminates physical theft risk but introduces a different risk profile: private key loss, exchange hacks, irreversible fraudulent transactions, and extreme volatility.\n\nFor consumer transactions, cash and credit cards both have characteristics that make them safer in practice than cryptocurrency. Cash handed over in an in-person transaction is witnessed and cannot be reversed by the recipient. Credit cards have chargeback rights. Cryptocurrency transactions are irreversible and anonymous — once sent, they are gone, with no dispute mechanism and no customer service.\n\nFor specific use cases — cross-border remittances where bank fees are high, business contracts that benefit from smart contract automation, or situations where both parties distrust traditional banking — cryptocurrency may offer genuine advantages. However, these advantages come with the user responsibility of properly securing private keys and understanding the technology, which introduces its own failure modes.\n\nFor a typical consumer purchasing goods or services, cryptocurrency offers no meaningful safety advantage over credit cards and substantially worse fraud protection. The volatility alone — cryptocurrency values can change dramatically in hours — makes it an inappropriate medium for routine transactions unless both parties understand and accept that risk.","redFlags":["Anyone specifically requesting cryptocurrency payment for a consumer transaction where alternatives exist","Seller claiming cryptocurrency is 'safer' as justification for requesting it","Investment opportunity that requires cryptocurrency deposits","Platform showing cryptocurrency returns you cannot withdraw without additional fees"],"whatToDoNow":["For routine consumer transactions, use a credit card for maximum protection","If you choose to transact in cryptocurrency, verify the recipient's identity through independent means","Store cryptocurrency in a hardware wallet if holding any significant amount","Never send cryptocurrency to someone you met online based solely on their instructions","Visit /scams/crypto-web3-scams for the full landscape of cryptocurrency fraud"],"faq":[{"question":"Is stablecoin safer than regular cryptocurrency for transactions?","answer":"Stablecoins reduce volatility risk because they are pegged to a fiat currency. However, they still share cryptocurrency's core transactional risks: irreversibility, lack of buyer protection, and dependence on the issuer's solvency and the peg maintaining stability."},{"question":"Why do businesses accept cryptocurrency if it is riskier for consumers?","answer":"Businesses benefit from lower processing fees, no chargebacks (which can be costly for merchants), and faster international settlement. These advantages come at the expense of consumer protection, which is why consumer advocates recommend credit cards for purchases."}],"lastReviewed":"2026-06-10"},{"slug":"what-to-do-after-sending-money-to-scammer","url":"https://scamencyclopedia.org/questions/what-to-do-after-sending-money-to-scammer","question":"What should I do immediately after sending money to a scammer?","shortAnswer":"Act within hours, not days: contact your bank or payment platform immediately, report to the FTC and relevant agencies, and document everything — early action maximises your chance of any recovery.","explanation":"The moments after realising you have sent money to a scammer are critical. The speed of your response directly affects whether any recovery is possible, because scammers typically move funds within hours of receiving them.\n\nFor bank transfers and wire transfers: call your bank's fraud hotline immediately — not the general customer service line. Explain the situation and ask them to initiate a wire recall or payment recall. Get a reference number for this request. Your bank has specific fraud procedures; triggering them quickly is essential.\n\nFor credit card payments: call your card issuer and dispute the charge. The Fair Credit Billing Act dispute window starts from the statement date, but acting now means the dispute is logged while you still remember all the details.\n\nFor peer-to-peer apps (Zelle, Venmo, Cash App, PayPal F&F): report through the app's support channel and simultaneously report to the FTC. Ask the platform to freeze the receiving account if possible.\n\nFor gift cards: call the number on the back of the card and report the fraud immediately. Ask whether the balance has been redeemed. Then report to the FTC.\n\nIn parallel with the above: file reports with the FTC at ReportFraud.ftc.gov and, for amounts over $10,000 or international fraud, with the FBI IC3 at ic3.gov. Document everything: screenshots, email threads, phone numbers, account names, transaction IDs.\n\nFinally, check whether you shared any personal information — if so, consider a credit freeze and identity monitoring. Visit /recovery for the complete post-scam checklist.","redFlags":["The realisation that an opportunity was too good to be true","Contact with the other party goes quiet or stops after money was sent","Payment method you used was one the person specifically insisted on","Promised goods, services, or returns have not materialised"],"whatToDoNow":["Call your bank fraud hotline right now — every minute matters for wire recalls","Report to the FTC at ReportFraud.ftc.gov within the same day","Report to FBI IC3 at ic3.gov for amounts over $10,000 or any international wire","For gift cards, call the issuer number on the back of the card immediately","Screenshot and save all communications, transaction records, and any contact information you have","Visit /recovery for the full step-by-step post-scam action checklist"],"faq":[{"question":"Is there any chance of getting money back after a scam?","answer":"Recovery rates are low overall, but not zero. Credit card chargebacks, fast wire recalls, and blocked gift card balances all succeed in some cases. The key variable is speed: every hour of delay reduces the chance. File reports regardless of the amount — they help future investigations."},{"question":"Should I confront the scammer directly to try to get my money back?","answer":"No. Confronting the scammer rarely results in recovery and can lead to further manipulation, threats, or escalation. Direct your energy to official channels — your bank, the FTC, and law enforcement. Document all contact they initiated but do not engage further."}],"lastReviewed":"2026-06-10"},{"slug":"does-section-75-protect-online-purchases","url":"https://scamencyclopedia.org/questions/does-section-75-protect-online-purchases","question":"Does Section 75 protect online purchases?","shortAnswer":"Section 75 of the UK Consumer Credit Act gives you a joint liability claim against your credit card provider for purchases over £100 and up to £30,000 — it applies to online purchases if you paid by credit card.","explanation":"Section 75 is a powerful UK consumer protection that many people are unaware of or underuse. Under this law, your credit card provider is jointly and severally liable with the seller for a misrepresentation or breach of contract on purchases between £100 and £30,000. This means if the seller disappears, the goods are not as described, or the service is not delivered, you can claim directly from your credit card company — even if the seller is insolvent or based overseas.\n\nFor online purchases, Section 75 applies when: the purchase is made directly with a credit card (not through a third-party service like PayPal), the transaction is for a single item or service costing over £100, and the purchase falls within the £30,000 ceiling. Note that the full purchase must be over £100 — you cannot buy a £90 item and charge part to a credit card to bring it into scope.\n\nOne common misunderstanding: Section 75 does not apply to debit cards or charge cards. It specifically covers credit cards under the Consumer Credit Act. It also does not apply to purchases made through PayPal, because PayPal is the contracting party with the seller — not your card issuer.\n\nFor purchases under £100, Chargeback is still available as a scheme-level protection offered by Visa and Mastercard, though it is a voluntary scheme rather than a statutory right like Section 75. Both mechanisms are worth pursuing for any purchase where the seller has failed to deliver.","redFlags":["UK online seller that delivers nothing after payment","Item arrives significantly different from what was advertised","Seller is insolvent or unreachable after payment","Service contract breached with no refund offered"],"whatToDoNow":["Contact your credit card provider and specifically mention Section 75 — use this language so it is processed correctly","Provide evidence of the purchase, the seller's breach, and any correspondence","For purchases under £100, request a Chargeback — also available on debit cards through Visa/Mastercard schemes","Report the seller to Trading Standards and to Report Fraud (formerly Action Fraud) (reportfraud.police.uk)","Visit /payments for a full UK and US comparison of payment protections"],"faq":[{"question":"Does Section 75 apply if I paid through PayPal?","answer":"No. When you pay via PayPal, the contract is between you and PayPal, not between your card and the seller. Section 75 requires a direct creditor-supplier relationship. Use PayPal Goods and Services protection instead."},{"question":"Does Section 75 apply to purchases from overseas sellers?","answer":"Yes. The law applies based on where the card is issued, not where the seller is based. If you paid with a UK credit card for a purchase over £100 from an overseas seller, Section 75 applies."}],"lastReviewed":"2026-06-10"},{"slug":"can-i-dispute-a-bank-transfer-in-the-uk","url":"https://scamencyclopedia.org/questions/can-i-dispute-a-bank-transfer-in-the-uk","question":"Can I dispute a bank transfer in the UK if I get scammed?","shortAnswer":"UK banks are now required to reimburse most victims of Authorised Push Payment fraud under Payment Systems Regulator rules in force since 7 October 2024 — but there are conditions and caps.","explanation":"Authorised Push Payment (APP) fraud is when you are manipulated into voluntarily transferring money to a scammer. For many years, UK banks took the position that because the customer authorised the payment, they bore the loss. This changed when the Payment Systems Regulator (PSR) introduced mandatory reimbursement rules for APP fraud, which took effect on 7 October 2024.\n\nUnder the new framework, banks and payment firms must reimburse most APP fraud victims up to a maximum of £85,000 per claim. Victims must report the fraud promptly and cooperate with the investigation. The reimbursement obligation is split between the sending and receiving bank.\n\nThere are exceptions: banks can reduce or deny reimbursement if they believe the victim was grossly negligent, ignored clear fraud warnings, or paid someone they knew or had a business dispute with. These exceptions are intended to prevent abuse rather than to deny legitimate fraud victims.\n\nFor Faster Payments and CHAPS transfers, the Confirmation of Payee (CoP) system now cross-checks account name against account number and sort code before you complete a transfer — if they do not match, you receive a warning. Proceeding after a CoP mismatch warning may affect your reimbursement claim.\n\nIf your bank refuses a reimbursement claim, escalate to the Financial Ombudsman Service (FOS), which is a free service for consumers and has authority to direct banks to pay out in valid cases.","redFlags":["Transfer to a new payee with an account name that does not match the sort code and account number","Urgency to transfer before CoP warnings can be investigated","Request to pay a 'safe account' that a caller claiming to be your bank has set up for you","Invoice from a supplier with different bank details than used previously"],"whatToDoNow":["Report to your bank immediately and use the words 'APP fraud' so they apply the correct process","Request reimbursement under the PSR APP fraud rules — cite this specifically","If your bank refuses, escalate to the Financial Ombudsman Service at financial-ombudsman.org.uk","Report to the Report Fraud service (formerly Action Fraud) at reportfraud.police.uk","Keep all evidence: transfer records, communications, and any CoP warnings you received"],"faq":[{"question":"What is the PSR APP fraud reimbursement cap?","answer":"The maximum reimbursement under the PSR rules is £85,000 per claim. The payment comes from both the sending and receiving bank, split equally."},{"question":"What counts as 'gross negligence' that could reduce my claim?","answer":"Ignoring explicit fraud warnings from your bank, failing to take reasonable steps to verify a payee, or continuing a transfer after being advised not to may constitute gross negligence. Simply being deceived, even if in hindsight the signs were there, does not automatically count."}],"lastReviewed":"2026-09-19"},{"slug":"is-bnpl-reversible-if-item-not-delivered","url":"https://scamencyclopedia.org/questions/is-bnpl-reversible-if-item-not-delivered","question":"Is a buy-now-pay-later purchase reversible if the item is not delivered?","shortAnswer":"BNPL dispute rights vary by provider — some have good dispute processes, others are slow or difficult. Act quickly before instalments continue and document everything from the start.","explanation":"The reversibility of a BNPL transaction depends heavily on which provider you used and how quickly you report the problem. BNPL services are increasingly regulated as credit products, which means their dispute processes are subject to consumer credit rules in many jurisdictions — but the level of protection still lags behind credit card chargebacks.\n\nFor items not delivered, the first step is to open a dispute with the BNPL provider as early as possible — ideally before the next instalment is due. You do not want to keep paying instalments toward a debt for goods you never received. Most major BNPL providers will pause future payments while an investigation is ongoing, but you need to request this.\n\nIf the BNPL provider resolves in your favour, the remaining balance is cancelled and any payments already made are refunded. If they rule against you or the process stalls, escalate. In the US, file a complaint with the CFPB. In the UK, the Financial Ombudsman Service can investigate BNPL complaints from regulated providers.\n\nOne complication: some BNPL arrangements pass the debt to a third-party loan provider shortly after the transaction. If this happens, you may need to dispute with both the BNPL platform and the loan provider. Keep copies of all communications and track which company you are dealing with at each stage.","redFlags":["BNPL merchant site disappears after you complete checkout","Tracking number is invalid or shows the parcel delivered to a different address","Merchant ignores refund requests for more than a week after non-delivery","BNPL account shows instalments continuing despite an open dispute","Merchant was found on social media with no verifiable business history"],"whatToDoNow":["Open a dispute with the BNPL provider immediately and ask them to pause future instalments","Document the original listing, order confirmation, and all communication with the merchant","If BNPL resolution stalls, file a complaint with the CFPB (US) or Financial Ombudsman (UK)","Report the fraudulent merchant to the FTC or Trading Standards","Visit /scams/online-shopping-scams for the broader online marketplace fraud guide"],"faq":[{"question":"Do I have to keep paying BNPL instalments if the item never arrived?","answer":"Open a dispute immediately and ask the BNPL provider to pause payments during investigation. Do not simply stop paying without an open dispute — that creates a debt default that damages your credit. The goal is a formal cancellation of the balance."},{"question":"Which BNPL providers have the strongest buyer protection?","answer":"Protections vary and change over time as regulation evolves. Generally, providers with longer operating histories and more regulatory oversight have clearer dispute processes. Always check the provider's dispute policy before making a purchase from an unfamiliar merchant."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-pay-safely-on-facebook-marketplace","url":"https://scamencyclopedia.org/questions/how-to-pay-safely-on-facebook-marketplace","question":"How do I pay safely on Facebook Marketplace?","shortAnswer":"For local pickup, pay cash at time of exchange. For shipped items, use Facebook's checkout with buyer protection or PayPal Goods and Services — never Zelle, Venmo, or wire transfer to a stranger.","explanation":"Facebook Marketplace transactions fall into two categories with different payment guidance: local pickup and shipped-item sales. Each has a distinct safe payment approach.\n\nFor local pickup transactions, cash on exchange is the safest option for both parties. You see the item, verify it matches the description, and hand over cash only when you are satisfied. This eliminates payment risk entirely, though you should still meet in a safe public place and tell someone where you are going.\n\nFor shipped items, Facebook Marketplace offers an in-app checkout with payment protection for eligible purchases — this is the safest digital payment option on the platform because Facebook mediates disputes. If an item does not arrive or is significantly not as described, you can file a claim through Facebook. If this in-app option is available and the seller is pushing you toward a direct payment, that is a red flag.\n\nPayPal Goods and Services is a good alternative for shipped items when the in-app checkout is not available. It provides PayPal's buyer protection and is widely accepted. Peer-to-peer apps (Zelle, Venmo, Cash App) are not appropriate for Marketplace transactions with strangers because they offer no buyer protection and are commonly used in overpayment and non-delivery scams.\n\nWatch for the common Marketplace scams: sellers who accept payment and then claim shipping was delayed indefinitely, overpayment schemes where a buyer sends too much and asks for a refund, and 'off-platform' pressure to move conversations away from Messenger.","redFlags":["Seller insists on Zelle, Venmo, or wire rather than Facebook's in-app checkout","Seller asks you to continue the conversation outside of Marketplace Messenger","Buyer sends more than the asking price and requests the difference back","Price is significantly below comparable listings from more established accounts","Seller profile was created recently and has no transaction history","Seller uses urgency ('another buyer is interested') to rush payment before you can verify"],"whatToDoNow":["For local pickup: cash on exchange at a safe public location","For shipped items: use Facebook's in-app checkout or PayPal Goods and Services","Never move the transaction off-platform before completing payment","Report suspicious listings or sellers using the in-app report tool","If scammed, report to Facebook and to the FTC at ReportFraud.ftc.gov"],"faq":[{"question":"Does Facebook Marketplace have buyer protection?","answer":"Facebook's in-app checkout includes Purchase Protection for eligible items. This covers items not received or significantly not as described. The protection only applies to transactions completed through Facebook's payment system, not to off-platform payments."},{"question":"Is it safe to meet a Facebook Marketplace seller in person?","answer":"It can be safe with precautions: meet in a busy public place with security cameras, bring someone with you for higher-value items, and tell someone your location. Many police stations offer designated exchange zones for this purpose."}],"lastReviewed":"2026-06-10"},{"slug":"is-wire-transfer-traceable","url":"https://scamencyclopedia.org/questions/is-wire-transfer-traceable","question":"Is a wire transfer traceable?","shortAnswer":"Wire transfers leave a detailed paper trail through banking systems, but tracing the funds and actually recovering them from a scammer are two very different things.","explanation":"Every domestic and international wire transfer leaves records at multiple points: the originating bank, the intermediary banks that route the transfer, and the receiving bank. In the US, domestic Fedwire transactions are recorded by the Federal Reserve. SWIFT international transfers create a message trail across correspondent banks. Law enforcement with appropriate legal authority can subpoena these records and follow the money step by step.\n\nThis traceability is real and has contributed to successful fraud prosecutions. The FBI, Secret Service, and financial regulators have used wire transfer records to build cases against money laundering operations, romance scam networks, and business email compromise rings. Banks are required to maintain records of wire transfers for a minimum period under the Bank Secrecy Act.\n\nThe practical gap: tracing funds does not automatically return them. If a wire went to a domestic bank account, law enforcement can potentially freeze the account if they act quickly. For international wires, the receiving bank is in a different jurisdiction with its own laws, and many countries do not have mutual legal assistance treaty obligations that compel cooperation on civil fraud cases.\n\nScammers are aware of traceability and deliberately route funds through multiple accounts and countries to extend the chain beyond practical recovery. A wire that goes from your bank to a US account, then to a UK account, then to a Hong Kong account, and finally to cryptocurrency has a complete paper trail — but recovering from that endpoint is an international legal challenge that can take years and often yields nothing.\n\nReport every wire fraud case to IC3 and the FTC even when recovery seems unlikely. Pattern data from many reports helps law enforcement disrupt the infrastructure these operations depend on.","redFlags":["Wiring instructions include multiple intermediate accounts or 'relay' steps","Destination account is in a jurisdiction known for limited financial cooperation","Instructions to wire to a cryptocurrency exchange rather than a traditional bank","Multiple wires requested over several days to different accounts"],"whatToDoNow":["Act within the same business day: call your bank and request an urgent wire recall","Report to FBI IC3 at ic3.gov with all wire transfer details","Report to the FTC at ReportFraud.ftc.gov","Preserve all transfer confirmation documents and communications","Ask your bank for the SWIFT or Fedwire trace number for use in law enforcement reports"],"faq":[{"question":"How long does a wire transfer trace take?","answer":"A bank-initiated recall investigation typically takes a few business days for domestic transfers. International traces can take weeks. Providing all details upfront — recipient account, bank name, SWIFT code, and amount — speeds up the process."},{"question":"Does reporting wire fraud to IC3 help recover funds?","answer":"Not directly for individual cases, but IC3 can issue a Financial Fraud Kill Chain alert to receiving banks when cases are reported quickly, which has led to successful account freezes. Report as early as possible and include complete wire details."}],"lastReviewed":"2026-06-10"},{"slug":"is-crypto-refundable-from-exchange","url":"https://scamencyclopedia.org/questions/is-crypto-refundable-from-exchange","question":"Is cryptocurrency refundable from an exchange if I was scammed?","shortAnswer":"Centralised cryptocurrency exchanges can freeze accounts and cooperate with law enforcement, but they cannot reverse on-chain transactions — once crypto leaves the exchange, the exchange cannot retrieve it.","explanation":"Centralised cryptocurrency exchanges (Coinbase, Kraken, Binance US, and others) operate like financial institutions in some respects: they hold customer funds in custodial accounts, verify user identities, and cooperate with law enforcement subpoenas and court orders. If fraud is reported quickly — before the funds have been withdrawn from the exchange — the exchange can freeze the receiving account and preserve the funds pending an investigation.\n\nHowever, if the scammer withdrew the cryptocurrency to an external wallet address, the exchange has no ability to reverse or recover those funds. Blockchain transactions are final once confirmed; the exchange was only a temporary holder and cannot recall transfers that left their platform.\n\nIf you sent cryptocurrency directly from your wallet to a scammer's wallet (without using an exchange as an intermediary), there is no institution in the middle at all — recovery is entirely dependent on law enforcement action.\n\nSteps that matter: report the fraud to the exchange as soon as possible, providing the destination wallet address and transaction ID. Exchanges have fraud teams that flag suspicious accounts and can assist law enforcement. File with FBI IC3, providing the same information. For larger losses, some blockchain analytics firms can trace where the funds moved and provide reports useful for law enforcement or civil litigation.","redFlags":["Platform instructing you to withdraw crypto to an 'external wallet' for 'security'","Investment platform where your balance grows but any withdrawal requires additional deposits","Pressure to move funds off a major exchange to a smaller or unknown platform","Any platform without a verifiable regulatory registration or physical business presence"],"whatToDoNow":["Report to the exchange immediately — provide wallet addresses and transaction IDs","Report to FBI IC3 at ic3.gov with full transaction details","Report to the FTC at ReportFraud.ftc.gov","Preserve all screenshots of the platform, wallet addresses, chat logs, and transaction records","For large losses, consult a blockchain forensics firm and a solicitor"],"faq":[{"question":"Can Coinbase or Kraken reverse a transaction if I was scammed?","answer":"If the funds are still within the exchange's custodial system, the exchange may be able to freeze them at law enforcement request. If withdrawn to an external wallet, the exchange cannot reverse the blockchain transaction."},{"question":"Should I pay a recovery service to get my crypto back?","answer":"Be extremely cautious. Many 'crypto recovery' services are scams themselves, charging upfront fees and delivering nothing. Legitimate blockchain analytics firms charge for their investigation services but do not guarantee recovery. Verify any firm thoroughly before engaging."}],"lastReviewed":"2026-06-10"},{"slug":"difference-between-chargeback-and-refund","url":"https://scamencyclopedia.org/questions/difference-between-chargeback-and-refund","question":"What is the difference between a chargeback and a refund?","shortAnswer":"A refund is the merchant voluntarily returning your money. A chargeback is a forced reversal initiated through your bank when the merchant will not cooperate — they are very different processes with different implications.","explanation":"Understanding the distinction between a refund and a chargeback helps you choose the right path when a transaction goes wrong, and avoid the mistake of waiting too long for a refund when a chargeback is the appropriate escalation.\n\nA refund is initiated by the merchant. You contact them, request your money back, and if they agree, they process the reversal to your original payment method. This is the first step in any dispute — most merchants, including scam-adjacent merchants who delivered something subpar, prefer to quietly refund rather than face a chargeback.\n\nA chargeback is initiated by you, through your card issuer, when the merchant will not refund you or cannot be reached. Under the Fair Credit Billing Act (US) or relevant card scheme rules, your bank can reverse the charge and debit the merchant's account. The merchant can contest a chargeback by providing evidence (delivery confirmation, correspondence showing you received what was ordered), which creates a dispute arbitration process.\n\nChargebacks have time limits: typically 60 days from the statement date in the US, and up to 120 days under Visa and Mastercard scheme rules in some categories. Beyond this window, your card issuer will reject the dispute regardless of the merits. This is why acting promptly is essential.\n\nChargebacks also come with consequences for merchants: too many chargebacks lead to higher processing fees and eventually account termination. This is why fraudulent merchants often specifically request payment methods that have no chargeback mechanism.","redFlags":["Merchant is unresponsive beyond their stated refund policy period","Merchant keeps extending a delivery delay without evidence the item has shipped","Refund promised by merchant has not appeared within 10 business days","Merchant website has gone offline since your purchase"],"whatToDoNow":["Contact the merchant first and document the attempt — this is required evidence for a chargeback","If no resolution within a reasonable time, file a chargeback with your card issuer","Meet the 60-day window from the statement date for US credit cards","Gather all evidence: order confirmation, product description, delivery tracking, and correspondence","Report fraudulent merchants to the FTC even after a successful chargeback"],"faq":[{"question":"Should I try to get a refund before filing a chargeback?","answer":"Yes — most card issuers ask whether you attempted to resolve the issue with the merchant first. A documented refund attempt strengthens your chargeback case. However, do not let the attempt eat into your 60-day window — if the merchant is unresponsive, escalate to a chargeback."},{"question":"Can a merchant sue me for filing a chargeback?","answer":"Technically yes, but it is extremely rare and impractical for small amounts. Filing a chargeback for a genuine dispute (goods not received, not as described) is a legal consumer right. Filing one falsely when you received what you paid for is different and could constitute fraud."}],"lastReviewed":"2026-06-10"},{"slug":"can-i-get-scammed-buying-concert-tickets-online","url":"https://scamencyclopedia.org/questions/can-i-get-scammed-buying-concert-tickets-online","question":"Can I get scammed buying concert tickets online?","shortAnswer":"Ticket fraud is extremely common, particularly for sold-out events — fake or invalid tickets are sold through social media, classifieds, and lookalike websites. Pay by credit card through verified platforms only.","explanation":"Concert and event ticket fraud peaks whenever popular events sell out quickly. Scammers create fake tickets, duplicate real ones, or sell tickets to events that do not exist, collecting payment before disappearing. Secondary ticket market fraud on social media and classifieds platforms is particularly prevalent because sellers are anonymous.\n\nCommon scenarios include: fake PDF tickets emailed after payment (the barcode is duplicated from a real ticket and will not scan at the door), tickets sold twice to multiple buyers (only the first scan works), and entirely fake events advertised on convincing but fraudulent websites.\n\nFor secondary market ticket purchases, the payment method matters enormously. Buying through an established, guarantor-backed resale platform (such as Ticketmaster Resale, StubHub, or Viagogo, which are regulated differently by country) provides some protection if a ticket is invalid. Buying from an individual via social media DM or Craigslist with a Venmo or Zelle payment provides virtually none.\n\nCredit card payments provide chargeback protection if the event never occurred or the ticket does not grant entry. For in-person purchases of physical tickets, inspect the ticket carefully and request to buy outside the venue where you can verify the ticket is scannable before paying.\n\nFan-to-fan transfers through the official platform (when available) are the safest secondary market option because the seller can only transfer a ticket they actually hold in their verified account.","redFlags":["Ticket price well below face value for a sold-out event","Seller only accepts peer-to-peer apps with no buyer protection","Ticket sent as a PDF immediately without confirmation of transfer through the ticketing platform","Seller found through a social media post, not an established resale marketplace","Website URL looks similar to the official ticketing site but differs in small ways","No contact number or business address for the seller or resale site"],"whatToDoNow":["Buy through official ticketing platforms or guaranteed resale marketplaces","Pay by credit card for chargeback protection if the ticket is invalid","If buying from an individual, insist on a transfer through the official platform rather than a PDF","Check the resale platform's guarantee policy before buying","Report fraudulent ticket sellers to the FTC and to the platform they used to advertise"],"faq":[{"question":"Is a PDF concert ticket always a scam?","answer":"No — many legitimate tickets are PDF or e-tickets. The problem is when the barcode is duplicated or invalid. The safest approach is to have the ticket transferred through the official ticketing platform's account system rather than receiving a file."},{"question":"What can I do if I arrive at a concert with a fake ticket?","answer":"File a complaint with the venue security for documentation, then file a credit card chargeback (if paid by card) and report to the FTC. Contact the platform through which you found the seller to report the fraudulent listing."}],"lastReviewed":"2026-06-10"},{"slug":"how-does-pig-butchering-scam-use-crypto","url":"https://scamencyclopedia.org/questions/how-does-pig-butchering-scam-use-crypto","question":"How does a pig-butchering scam use cryptocurrency?","shortAnswer":"Pig-butchering scams build a fake romantic or friendship relationship over weeks, introduce a fraudulent crypto investment platform, and harvest increasingly large deposits — all via irreversible cryptocurrency transfers.","explanation":"Pig butchering (a translation of the Chinese 'sha zhu pan') is an organised fraud in which scammers invest significant time in building a relationship with a victim — through dating apps, social media, or even wrong-number texts — before steering them toward a fraudulent cryptocurrency investment scheme.\n\nThe 'fattening up' phase involves weeks or months of genuine-seeming conversation: shared interests, emotional intimacy, and casual mentions of impressive investment returns. The victim is introduced to a trading platform — typically a convincing fake — and encouraged to make a small initial deposit that shows immediate 'gains.' Encouraged by success, the victim deposits more. The platform may even allow small withdrawals initially to build trust.\n\nEventually the scammer encourages a very large deposit, often by creating urgency ('a once in a lifetime opportunity closes today'). At this point, the platform may lock the account claiming taxes, fees, or compliance issues must be paid before withdrawal — further extracting money before the victim realises the platform is fraudulent.\n\nAll deposits are typically in cryptocurrency because it is irreversible, internationally transferable, and difficult to trace through multiple hops. By the time the fraud is discovered, the cryptocurrency has been moved through multiple wallets and often converted to cash through money mule networks.\n\nRecovery is rare. Reporting to FBI IC3 with full details of the platform URL, wallet addresses, and all transaction IDs is the most important step. Researchers have linked multiple pig-butchering operations to organised crime groups using coerced labour in Southeast Asia.","redFlags":["New online connection — especially on a dating app — quickly mentions their investment returns","Introduction to a trading platform you have not independently found through research","Platform shows impressive gains but the account 'requires fees' before you can withdraw","Romantic partner becomes unavailable or distant if you stop depositing","Request to switch from a major exchange to a smaller, unfamiliar platform","Any investment that requires ongoing deposits to unlock previous 'profits'"],"whatToDoNow":["Stop all deposits immediately — any claimed gains on a fraudulent platform are not real","Report to FBI IC3 at ic3.gov with the platform URL, wallet addresses, and all transaction records","Report to the FTC at ReportFraud.ftc.gov","Document all communication and preserve it as evidence","Seek emotional support — these scams cause significant psychological harm; you are not at fault","Visit /scams/crypto-web3-scams and /scams/romance-relationship-scams for the full picture"],"faq":[{"question":"Can I recover money lost in a pig-butchering scam?","answer":"Recovery is difficult because funds are moved quickly through multiple wallets. However, reporting to IC3 with complete transaction information gives law enforcement the best chance to act. Some victims have received partial restitution when operations were dismantled."},{"question":"Are the people running the chats always willing participants in the scam?","answer":"Researchers and journalists have documented that some operations use people who were themselves trafficked and coerced into conducting the chats under threat. The individual chatting with a victim may themselves be a victim of a different crime."}],"lastReviewed":"2026-06-10"},{"slug":"can-i-be-scammed-paying-with-paypal-goods-and-services","url":"https://scamencyclopedia.org/questions/can-i-be-scammed-paying-with-paypal-goods-and-services","question":"Can I still be scammed even if I pay with PayPal Goods and Services?","shortAnswer":"PayPal Goods and Services significantly reduces your risk but does not eliminate it — scammers can still attempt to win disputes by providing fake tracking information or by violating policies in ways that take time to prove.","explanation":"PayPal's Purchase Protection under Goods and Services is a genuine and meaningful layer of protection that resolves a large proportion of buyer complaints. However, the system is not foolproof, and scammers have adapted techniques to circumvent it.\n\nFake tracking scam: a seller marks an order as shipped, provides a real tracking number that shows delivery — but it is a package sent to your ZIP code rather than your address. PayPal's automated systems may initially side with the seller because tracking shows 'delivered.' You must escalate and insist that PayPal review the full delivery address on the tracking details.\n\nDigital goods exclusions: PayPal's Purchase Protection historically did not cover digital goods, codes, or services in all cases. If you bought a software licence or game code that turned out to be invalid, resolution may be harder.\n\nDispute time limits and escalation: if you open a dispute but do not escalate it to a claim within the required window, it closes without resolution. Scammers sometimes run out the clock by delaying responses. Monitor all open disputes and escalate to a claim if the seller does not respond constructively within a few days.\n\nPayPal account limits: some PayPal accounts used by scammers are deliberately limited before you receive your item, preventing the seller from accepting the refund. PayPal's process still works, but it may take longer.\n\nFor high-value purchases from unknown sellers, credit card with chargeback remains the strongest protection — you can dispute at both the PayPal level and the card level.","redFlags":["Seller provides tracking that shows delivered to your ZIP code but not your address","Digital goods that turn out to be invalid codes or access credentials that do not work","Seller goes quiet after opening a dispute and never responds","Seller's PayPal account appears limited or unusual","Listing photos that reverse image search shows are stolen from another source"],"whatToDoNow":["Open a dispute immediately if goods are not received or not as described","Escalate to a claim within a few days if the seller does not respond constructively","For fake tracking disputes, request that PayPal check the full delivery address on the carrier's record","If PayPal rules against you, file a credit card chargeback if a credit card funded the PayPal payment","Report the seller account to PayPal to protect other buyers"],"faq":[{"question":"What is the fake tracking number scam and how do I fight it?","answer":"The scammer ships a small package to your ZIP code (not your address) and marks the order shipped with that real tracking number. When PayPal sees 'delivered,' they may close in the seller's favour. Escalate and provide the carrier's detailed scan showing a different delivery address."},{"question":"Does PayPal Goods and Services cover all purchase types?","answer":"There are exclusions including vehicles, real estate, custom or made-to-order items, and some digital goods. Check PayPal's Purchase Protection policy for the full list before making an unusual purchase."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-pay-safely-for-services-online","url":"https://scamencyclopedia.org/questions/how-to-pay-safely-for-services-online","question":"How do I pay safely for services online?","shortAnswer":"For online services, pay by credit card with milestone billing tied to delivered work — never pay the full amount upfront to an unverified provider, and use contracts that specify deliverables.","explanation":"Paying for online services — website design, writing, graphic design, marketing, or any remote work — carries different risks from buying physical goods. Services are intangible, subjective, and cannot be inspected before delivery the way a product can. This creates opportunities for unscrupulous providers to underdeliver or disappear after receiving payment.\n\nCredit card payment is the strongest protection for service-based transactions because the Fair Credit Billing Act covers 'services not rendered' — if you pay for a service that is never delivered, you can dispute the charge. 'Services significantly not as described' is also covered, though proving this for subjective work is harder and disputes can go either way.\n\nPlatform escrow — offered by freelance marketplaces like Upwork and Fiverr — provides a structured alternative: the platform holds payment and releases it only when you mark the work as complete. This is particularly appropriate for larger projects where the stakes are higher.\n\nFor smaller service purchases on independent websites, credit card plus a clear written understanding of deliverables, timelines, and revision policies gives you the best position if a dispute arises. Screenshot the service description page, pricing, and any chat or email commitments before paying.\n\nSubscription services deserve special attention: some providers make it easy to sign up and difficult to cancel. Before subscribing, check the cancellation terms explicitly and use a virtual card number or a credit card that allows you to dispute recurring charges.","redFlags":["Service provider requests full payment upfront with no contract or deliverables timeline","No written scope of work or agreement before payment is requested","Provider cannot be reached through a verified business contact outside of the transaction platform","Price is dramatically below market for the stated scope of service","Reviews are all five stars with no detail, or only exist on the provider's own website","Payment method requested is irreversible (wire, crypto, gift card)"],"whatToDoNow":["Pay by credit card and agree on clear deliverables in writing before paying","Use platform escrow (Upwork, Fiverr) for larger freelance projects","For ongoing subscriptions, check cancellation terms before subscribing","If service is not delivered as agreed, dispute with the platform first, then your card issuer","Report fraudulent service providers to the FTC and any platform they used"],"faq":[{"question":"Is it safe to pay for services on freelance platforms?","answer":"Established freelance platforms with escrow systems (like Upwork or Fiverr) provide meaningful dispute processes. Check each platform's buyer protection policy — they vary in scope and reliability."},{"question":"Can I dispute a credit card charge for a service I am unhappy with?","answer":"You can dispute a charge for services 'not rendered' (provider disappeared) or 'significantly not as described' (work delivered is fundamentally different from what was sold). Disputes over quality where the service was delivered but you are unhappy are harder and often do not succeed."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-scammer-hack-my-phone-through-a-text","url":"https://scamencyclopedia.org/questions/can-a-scammer-hack-my-phone-through-a-text","question":"Can a scammer hack my phone through a text message?","shortAnswer":"Receiving a text alone is safe, but tapping a link in a malicious text can install malware or steal credentials if your phone is unpatched.","explanation":"Simply receiving a text message does not give anyone access to your phone. Your messaging app processes the text as data, and no code executes just because a message arrives. The risk begins the moment you interact with the content — especially links.\n\nSo-called smishing attacks work by sending links that lead to fake websites designed to capture your login details, or to pages that exploit browser or OS vulnerabilities to silently install spyware. On fully updated phones these exploits are much harder to pull off, but zero-day vulnerabilities do exist and are sometimes used in targeted attacks.\n\nPremium-rate SMS fraud is a different vector: your carrier charges you for texts sent to premium numbers without you realising it, usually after you install a shady app that sends them in the background. This doesn't require you to click anything in the original text.\n\nKeep your phone's operating system and apps updated, never tap unsolicited links even if they look official, and avoid sideloading apps outside the official store. If you did tap a suspicious link, run a reputable mobile security scan and change any passwords you may have entered.","redFlags":["Unexpected text from an unknown number containing a link","Text claims to be a parcel delivery notice with a tracking link","Link domain is misspelled or uses a URL shortener","Message urges immediate action or threatens account suspension","Text arrives immediately after you shared your number somewhere new","Unusual battery drain or data usage after tapping a link"],"whatToDoNow":["Do not tap any link in a suspicious text — delete the message","If you already tapped, do not enter any credentials on the page that loaded","Run a mobile security scan (Malwarebytes or your device's built-in scanner)","Change passwords for any accounts you accessed on the phone shortly after","Check your carrier bill for unexpected premium-rate charges","Report the number to your carrier by forwarding to 7726 (SPAM)","Keep your OS and apps fully updated to close known exploit windows"],"faq":[{"question":"Does opening an MMS picture message carry the same risk as tapping a link?","answer":"MMS images are decoded by your media library. Unpatched vulnerabilities in media parsers have historically allowed exploit code to run — keep your OS updated to close those gaps."},{"question":"I got a strange text but didn't tap anything — am I safe?","answer":"Almost certainly yes. No action on your part means the attacker has no foothold. Delete the message and block the number as a precaution."}],"lastReviewed":"2026-06-10"},{"slug":"can-scammer-drain-bank-account-with-just-my-phone-number","url":"https://scamencyclopedia.org/questions/can-scammer-drain-bank-account-with-just-my-phone-number","question":"Can a scammer drain my bank account with just my phone number?","shortAnswer":"Your phone number alone is not enough to access your bank, but scammers can use it to intercept SMS authentication codes or to impersonate you, which can lead to account takeover.","explanation":"Banks require multiple credentials before allowing transfers, so a phone number by itself does not unlock your account. The danger is indirect. If your bank uses SMS one-time passcodes (OTPs) for login or transaction approval, a scammer who already has your username and password can try to intercept that OTP via SIM swapping, SS7 network attacks, or social engineering your carrier into forwarding your calls and texts.\n\nSIM swapping is the most common route: a fraudster calls your mobile carrier, pretends to be you, claims their phone was lost, and asks for your number to be moved to a new SIM they control. Once successful, your SMS OTPs go to them rather than you. They then log in to your bank with your credentials (obtained through earlier phishing or data breaches) and approve transfers using the stolen codes.\n\nSS7-based interception is technically sophisticated and mostly used in targeted fraud rather than mass campaigns. Social engineering attacks can also combine your phone number with other personal data to convince a bank's customer service team to reset your account.\n\nThe strongest defence is switching from SMS-based two-factor authentication to an authenticator app or hardware security key wherever your bank supports it, because those methods are tied to a physical device rather than a phone number. Also add a SIM-lock PIN with your carrier.","redFlags":["You suddenly lose all cellular service without any known reason","Your carrier sends a confirmation that your SIM was changed — and you didn't request it","You receive OTP codes you didn't request, suggesting someone is trying to log in","Unknown logins appear in your bank's recent activity","You receive an email confirming a password reset you never initiated","Scammer claims to 'already have' most of your details and just needs your OTP"],"whatToDoNow":["Set a SIM-lock or port-freeze PIN with your mobile carrier immediately","Replace SMS two-factor authentication with an authenticator app (Google Authenticator, Authy)","Check your bank account for any unauthorised transactions","If you suspect a SIM swap already happened, call your carrier and bank right away","Change your bank password and any email password used to recover your banking login","Enable account alerts for all transactions, no matter how small","File a report with your national cybercrime agency if money was taken"],"faq":[{"question":"My bank only uses SMS OTPs — what can I do?","answer":"Ask your bank whether it offers an authenticator-app or biometric option. If not, add a SIM-lock PIN with your carrier as a fallback, and monitor your account activity daily."},{"question":"Can a scammer access my account if they only know my number and not my password?","answer":"Unlikely on its own, but your number can help them reset your password if your account recovery relies on an SMS code. That is why protecting your number and your email is equally important."}],"lastReviewed":"2026-06-10"},{"slug":"can-scammer-clone-my-sim-card","url":"https://scamencyclopedia.org/questions/can-scammer-clone-my-sim-card","question":"Can a scammer clone my SIM card?","shortAnswer":"SIM cloning is technically possible on older SIM cards but rare; SIM swapping — convincing your carrier to transfer your number to a new SIM — is far more common and effective.","explanation":"True SIM cloning involves copying the unique identifier (IMSI) and authentication key stored on your physical SIM onto a blank card using specialised hardware. This was feasible on older 2G-era SIMs but modern SIM cards use encryption that makes physical cloning extremely difficult without cooperation from the manufacturer. For most consumers, physical cloning is not a realistic everyday threat.\n\nSIM swapping is the real-world equivalent that scammers use instead. They call your carrier, use personal details gathered from social media or data breaches to pass security questions, and request that your number be ported to a SIM card they control. Once the transfer is approved by the carrier, all calls and texts meant for you — including bank OTPs — go to the attacker's phone.\n\neSIM fraud is a newer variant: scammers request an eSIM QR code for your number to be sent to a device they control, effectively achieving the same result as a SIM swap without needing a physical SIM card. Carriers are increasingly aware of this risk and adding extra verification steps.\n\nYour best defences are a SIM-lock PIN (separate from your regular account password) set with your carrier, and replacing SMS-based two-factor authentication with an authenticator app or hardware key for your most sensitive accounts.","redFlags":["Your phone shows 'No service' or 'SIM not registered' unexpectedly","You stop receiving calls and texts with no apparent reason","Your carrier sends a confirmation email or text about a SIM change you didn't make","You receive OTPs for accounts you weren't trying to access","Someone calls pretending to be your carrier, asking to confirm your account details","Bank or email password-reset texts never arrive"],"whatToDoNow":["Call your carrier immediately if you suspect a SIM swap — ask them to freeze your account","Set a SIM-lock PIN or verbal passcode with your carrier right now, before any incident","Switch important accounts from SMS 2FA to an authenticator app","Change passwords for your email and bank from a device not connected to your number","Report the incident to your national telecom regulator and cybercrime unit","Check your financial accounts for unauthorised transactions","Alert your bank so it can flag your account for suspicious activity"],"faq":[{"question":"How do I set a SIM-lock PIN with my carrier?","answer":"Log in to your carrier's account portal or call customer service. Look for 'SIM protection', 'port protection', or 'account security PIN'. This PIN must be given before any SIM change is approved."},{"question":"Can a scammer do a SIM swap if I have two-factor authentication enabled?","answer":"If your 2FA uses SMS, a successful SIM swap defeats it entirely — which is why switching to an authenticator app or hardware key is so important."}],"lastReviewed":"2026-06-10"},{"slug":"can-scammer-see-my-screen-via-remote-access-app","url":"https://scamencyclopedia.org/questions/can-scammer-see-my-screen-via-remote-access-app","question":"Can a scammer see my screen using a remote-access app?","shortAnswer":"Yes — if you installed a legitimate remote-access app at a scammer's request, they can see everything on your screen and control your device in real time.","explanation":"Remote-access tools such as AnyDesk, TeamViewer, and similar programs are designed for genuine IT support but are routinely weaponised in tech-support scams and banking scams. When you grant access, the other person can view your screen live, move your mouse and keyboard, open banking apps, copy files, and even install additional software — all while talking to you on the phone to keep you distracted.\n\nScammers typically create a pretext: they may claim to be from your bank's fraud team, a government agency, or a well-known tech company. They say they need to 'fix' a problem or 'protect' your account and walk you through downloading a remote tool. Once connected, they may tell you to look away, enter a password, or log in to your banking app so they can 'check' it — while actually initiating transfers.\n\nThese apps are fully legitimate when used with people you trust and have contacted yourself. The danger is entirely in who is on the other end. No genuine bank, tax authority, or tech-support team will ever ask you to download remote-access software to resolve an issue.\n\nIf you realise what is happening mid-session, end the internet connection immediately (turn off Wi-Fi and mobile data), then close and uninstall the app. Change all passwords from a different device and contact your bank.","redFlags":["Caller asks you to download AnyDesk, TeamViewer, or similar software","Supposed 'bank fraud team' or 'Microsoft support' is the one calling you","They ask you to log in to your banking app while they are connected","They tell you to look away from the screen or close your eyes","They claim there is an 'infection' or 'hack in progress' that only they can fix","Cursor moves or windows open on your screen without you touching anything","They request a code displayed on your screen to 'verify' the connection"],"whatToDoNow":["Immediately disconnect from the internet — toggle flight mode or unplug your cable","End the call; do not re-engage with the caller","Uninstall the remote-access app and reboot your device","From a different device, change all passwords starting with email and banking","Check your bank account for unauthorised transactions and alert your bank","Run a full malware scan — remote sessions can leave behind additional tools","Report the incident to your national cybercrime reporting centre"],"faq":[{"question":"Is it dangerous to have AnyDesk or TeamViewer installed even if I'm not using it?","answer":"The apps themselves are not dangerous while inactive. Risk arises only when you start a session with someone you don't know. Uninstall them if you installed them at a stranger's request."},{"question":"Can a scammer still access my device after I uninstall the remote-access app?","answer":"If they installed additional software during the session, possibly yes. Run a full malware scan and consider a factory reset for high-confidence clean-up."}],"lastReviewed":"2026-06-10"},{"slug":"can-scammer-steal-money-via-tap-to-pay","url":"https://scamencyclopedia.org/questions/can-scammer-steal-money-via-tap-to-pay","question":"Can a scammer steal money from my card using tap-to-pay?","shortAnswer":"Contactless skimming is theoretically possible but extremely difficult in practice; the far greater risk is scammers obtaining your card details through other means and using them in online transactions.","explanation":"Tap-to-pay (NFC contactless) cards transmit a one-time encrypted token to the reader — they do not broadcast your card number in plain text. To read the signal, an attacker would need a device very close to your card (within a few centimetres), and even then the token they capture is designed to be valid only for the merchant's reader it was generated for, making replay attacks against other merchants technically complex.\n\nMost contactless transactions are also limited to small amounts without a PIN, and banks monitor tap-to-pay patterns for anomalies. Real-world contactless theft cases are rare relative to the volume of transactions processed globally each day.\n\nBy contrast, card-not-present fraud — where a scammer uses your card number, expiry, and CVV to make online purchases — is far more common and does not require physical proximity to you. Those details are typically obtained through phishing, data breaches at merchants, or card-skimming devices attached to ATMs and point-of-sale terminals.\n\nIf you are concerned, carrying your cards in an RFID-blocking sleeve provides peace of mind, though most security experts regard it as a low-priority measure compared to checking statements regularly, using virtual card numbers for online shopping, and enabling transaction alerts.","redFlags":["Someone brushes close to you in a crowd and lingers near your bag or pocket","An unusual or bulky attachment is visible on an ATM card slot or retail terminal","Small unexplained charges appear on your statement","Your bank sends an alert for a contactless transaction you didn't make","You receive a card reader in the mail you didn't order"],"whatToDoNow":["Enable real-time transaction alerts with your bank so you spot unauthorised charges instantly","Review your statement at least weekly and dispute any charges you don't recognise","Use virtual card numbers (offered by many banks and services) for online purchases","If suspicious charges appear, cancel your card and request a replacement immediately","Use an RFID-blocking sleeve if it gives you peace of mind, but do not rely on it as your only protection","Cover your PIN when entering it at any terminal to guard against shoulder surfing"],"faq":[{"question":"Should I buy an RFID-blocking wallet?","answer":"It doesn't hurt, but it addresses a low-likelihood threat. More impactful steps are enabling transaction alerts and reviewing your statement regularly."},{"question":"My tap-to-pay limit is small — can scammers still cause real damage?","answer":"Multiple small transactions can add up. More importantly, contactless skimming is not the primary fraud vector; online card-not-present fraud with your full card details is a bigger risk."}],"lastReviewed":"2026-06-10"},{"slug":"i-clicked-a-suspicious-link-but-didnt-enter-anything-am-i-safe","url":"https://scamencyclopedia.org/questions/i-clicked-a-suspicious-link-but-didnt-enter-anything-am-i-safe","question":"I clicked a suspicious link but didn't enter anything — am I safe?","shortAnswer":"In most cases you are fine, but some pages can attempt drive-by exploits or track your device; checking your device and changing passwords on any site that was open is a sensible precaution.","explanation":"The vast majority of phishing links lead to fake login pages that only become dangerous when you submit your credentials. If you landed on the page, saw it looked wrong, and closed it without entering any information, your data is very likely intact.\n\nThat said, a small number of malicious pages attempt 'drive-by' attacks that exploit vulnerabilities in your browser or operating system to run code without any user interaction beyond the page loading. These are far more common in targeted attacks than mass phishing, and they are largely mitigated by keeping your browser and OS fully up to date.\n\nClicking a link also tells the sender that your device is real and your number or email is active — a piece of intelligence that may lead to more targeted follow-up messages. Your IP address and basic browser fingerprint may also be logged.\n\nIf your phone or computer was on a reputable browser with auto-updates enabled and you didn't enter anything, the risk is low. Run a quick malware scan to be thorough, and if you had any accounts open in other tabs, changing those passwords is a reasonable belt-and-braces step.","redFlags":["The page asked for login details, payment information, or a verification code","A file began downloading automatically when the page loaded","Your browser showed a security warning before you reached the page","The URL in the address bar was clearly not the legitimate site","Your device behaved unusually after visiting the page","You received a follow-up text or email very quickly after clicking"],"whatToDoNow":["Close the page if it is still open and do not return to it","Run a malware scan on your device as a precaution","If a file downloaded automatically, do not open it — delete it immediately","Change passwords for any accounts you were logged into on the same browser session","Update your browser and operating system if you haven't recently","Block the sender's number or email address","Report the link to your national cybercrime centre or forward phishing emails to the relevant authority"],"faq":[{"question":"Can clicking a link on an iPhone or Android infect my device without me doing anything else?","answer":"It is possible but rare, and mainly a risk on unpatched devices. Keep your OS and browser updated — patches close the vast majority of known exploit windows."},{"question":"The link opened in my email app, not a browser — does that change my risk?","answer":"Email clients often have built-in link preview or WebView components. The same update-and-scan advice applies; risk is still low if you didn't interact further with the content."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-know-if-my-phone-is-compromised","url":"https://scamencyclopedia.org/questions/how-do-i-know-if-my-phone-is-compromised","question":"How do I know if my phone has been compromised?","shortAnswer":"Warning signs include unexplained battery drain, high data usage, unfamiliar apps, overheating, and accounts showing logins you don't recognise.","explanation":"Modern smartphones rarely show a single dramatic sign of compromise. Instead, look for a cluster of subtle changes: your battery draining faster than usual, your phone running noticeably hotter when idle, mobile data consumption spiking without a clear reason, or your phone becoming slow and unresponsive. These can all indicate background processes running that shouldn't be there — including spyware or stalkerware.\n\nCheck your installed apps for anything you don't remember installing. On Android, look for apps with broad permissions (location, contacts, camera, microphone) that have no obvious reason to need them. On iPhone, review Privacy settings to see which apps have access to sensitive resources. An unfamiliar app combined with unusual data usage is a strong indicator.\n\nCheck your accounts: look at recent login history for your email and social media, review active sessions in your banking app, and check whether your email has forwarding rules you didn't set up. Scammers who gain access to a device often set up silent email forwarding to intercept verification codes.\n\nIf you suspect compromise, start with a factory reset (back up essential data to a clean location first). Before restoring, change all your passwords from a different device, revoke access for third-party apps connected to your accounts, and re-evaluate which apps you reinstall.","redFlags":["Battery life has shortened dramatically with no new apps installed","Data usage is far higher than usual even when you're not actively using the phone","Phone feels warm or hot when lying idle","Unfamiliar apps appear, especially those requesting broad permissions","Contacts report receiving strange messages or calls from your number","Accounts show logins from unfamiliar locations or devices","Your screen lights up or the phone makes sounds when you're not using it"],"whatToDoNow":["Review all installed apps and remove anything you don't recognise","Check app permissions and revoke camera, microphone, and location access from apps that don't need them","Look at recent login history for email, social media, and banking accounts","Check your email for forwarding rules and connected third-party apps you didn't authorise","Change your most sensitive passwords from a different device","Run a reputable mobile security scan (Malwarebytes, Avast Mobile, or built-in device scan)","If concern remains high, perform a factory reset and restore only essential data"],"faq":[{"question":"Could my phone be compromised without me installing anything?","answer":"Rarely, but possible through unpatched browser or OS exploits. Keeping software updated closes most of those gaps. Stalkerware is often installed by someone with brief physical access to your device."},{"question":"Will a factory reset remove all spyware?","answer":"A full factory reset removes virtually all software-based threats. The exception is extremely sophisticated firmware-level implants used in high-targeted attacks, which are rare for most people."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-know-if-my-email-account-is-compromised","url":"https://scamencyclopedia.org/questions/how-do-i-know-if-my-email-account-is-compromised","question":"How do I know if my email account has been compromised?","shortAnswer":"Key signs include login alerts from unknown locations, sent messages you didn't write, password reset emails you didn't request, and missing messages that may have been deleted.","explanation":"Your email inbox is one of the most valuable targets for fraudsters because it is the recovery point for almost every other account you own — banking, shopping, social media, and more. A compromised email account often shows subtle signs that are easy to overlook.\n\nCheck your sent folder for emails you don't remember sending, particularly to contacts asking for money or containing suspicious links. Scammers who take over accounts sometimes use them as spam relays while leaving the rest of the inbox untouched to avoid detection. Also look in your trash and spam folders for messages that were auto-routed there — they may contain password reset confirmations for accounts the attacker was accessing.\n\nReview your account's active sessions or 'recent activity' page (available in Gmail, Outlook, Yahoo, and most major providers). This shows IP addresses, device types, and geographic locations. A login from a country you haven't visited is a clear red flag. Also check your email's forwarding and filtering rules — attackers often set up silent forwarding to a secondary address or create filters that auto-delete security alerts.\n\nIf you find evidence of compromise, revoke all sessions immediately, change your password, enable two-factor authentication with an authenticator app (not SMS if possible), audit all accounts that use the email for password recovery, and notify important contacts that your account was compromised in case they received suspicious messages from you.","redFlags":["Login notifications from locations or devices you don't recognise","Emails in your sent folder that you didn't write","Friends or colleagues report receiving strange emails from your address","Password reset emails arriving for accounts you weren't trying to access","Forwarding rules or filters you didn't create","Missing emails, especially security alerts or bank notifications","Your password no longer works even though you haven't changed it"],"whatToDoNow":["Log in and immediately check 'recent activity' for unrecognised sessions — revoke all of them","Change your password to a long, unique one you haven't used elsewhere","Enable two-factor authentication using an authenticator app","Check and delete any forwarding rules or suspicious filters","Review connected apps and revoke access to any you don't recognise","Change passwords for key accounts (bank, shopping, social media) that use this email for recovery","Inform your contacts that your account was compromised so they can disregard any suspicious messages"],"faq":[{"question":"Can I tell if someone read my emails without logging them out?","answer":"Most providers show the last login time and IP address in the account activity page. If the most recent login time is not when you last checked, someone else may have accessed it."},{"question":"My provider says my password is wrong — does that mean I've been locked out by a hacker?","answer":"Possibly. Use your provider's account recovery process immediately. Act fast because the attacker may also be working to take over your recovery phone number or backup email."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-know-if-my-identity-has-been-stolen","url":"https://scamencyclopedia.org/questions/how-do-i-know-if-my-identity-has-been-stolen","question":"How do I know if my identity has been stolen?","shortAnswer":"Common signs include unfamiliar accounts on your credit report, bills or collection notices for debts you didn't incur, tax filing rejections, and unexplained benefit or benefit-application activity.","explanation":"Identity theft often goes undetected for months or years because the fraudster is careful not to disturb your everyday accounts — they open new ones instead. The most reliable early detection method is checking your credit report regularly. In many countries you can access your report for free from the major credit bureaus. Look for credit accounts, loans, or hard inquiries you don't recognise.\n\nOther signs appear in your physical and digital mail. Bills from companies you've never done business with, collection agency letters, or medical bills for treatment you never received can all indicate someone is using your identity. In the US, receiving a tax rejection notice because a return was already filed under your Social Security Number is a strong sign of tax identity theft.\n\nGovernment benefit fraud is another form: you may only discover it when you apply for benefits yourself and are told you're already receiving them. Employment identity theft — where someone uses your Social Security or National Insurance number to gain employment — can surface when you receive tax documents from employers you've never worked for.\n\nPlace a fraud alert or credit freeze with the credit bureaus if you suspect identity theft. This prevents new credit being opened in your name. Then file a report with your national identity theft authority and your local police, as these reports are often required by banks and creditors when disputing fraudulent accounts.","redFlags":["Unfamiliar accounts or hard inquiries on your credit report","Collection calls or letters for debts you don't owe","Tax return rejected because one was already filed under your details","Medical bills for treatment you never received","Benefit claims denied because you're 'already enrolled'","Mail for credit cards or loans arrives that you didn't apply for","Your credit score drops sharply for no reason you can identify"],"whatToDoNow":["Pull your credit report from all major bureaus and review every account and inquiry","Place a fraud alert or credit freeze with each credit bureau — a freeze is stronger and free in most countries","File an identity theft report with your national authority (FTC IdentityTheft.gov in the US)","File a police report — many creditors require this when disputing fraudulent accounts","Contact every institution where a fraudulent account was opened and provide your report number","Change passwords for financial and government accounts and enable two-factor authentication","Monitor your credit report monthly for the next year"],"faq":[{"question":"What is the difference between a fraud alert and a credit freeze?","answer":"A fraud alert tells lenders to take extra steps to verify identity before opening new credit. A credit freeze goes further by blocking any new credit inquiry entirely until you lift it — stronger protection but requires action when you legitimately need credit."},{"question":"Can identity theft be reversed?","answer":"Yes, though it takes time and documentation. Keeping copies of all reports, correspondence, and disputed account details speeds the process considerably."}],"lastReviewed":"2026-06-10"},{"slug":"what-to-do-if-my-phone-number-was-ported-without-permission","url":"https://scamencyclopedia.org/questions/what-to-do-if-my-phone-number-was-ported-without-permission","question":"What do I do if my phone number was ported away without my permission?","shortAnswer":"Contact your carrier immediately to reverse the port, then alert your bank and change passwords for accounts that use your number for authentication — acting within hours matters.","explanation":"An unauthorised number port (SIM swap) means a fraudster has successfully convinced your carrier to move your mobile number to a SIM or eSIM they control. From that moment, every call and text to your number — including bank OTPs and password-reset codes — goes to the attacker's device, not yours. Speed of response is critical.\n\nCall your carrier's fraud line (not the general customer service number, as wait times are longer) and tell them you are the victim of an unauthorised port. Ask them to reverse the port and lock the account against further changes. Request that a verbal security code or PIN be mandatory for any future account changes. Some carriers can action a port reversal within minutes; others may take longer.\n\nWhile the port is active, a scammer may be using your number to log in to accounts. Immediately — from a different device, ideally on a different network — change the passwords for your email account, bank, and any account that shows your phone number as a recovery method. Enable authenticator-app based 2FA where you have been using SMS 2FA.\n\nAfter recovering your number, review your financial accounts for unauthorised transactions and file a report with your national telecom regulator and cybercrime unit. Document everything: the time you lost service, what you were told by the carrier, and any accounts that were accessed without your consent.","redFlags":["Your phone suddenly has no service and shows 'No SIM' or 'No service'","You cannot make or receive calls or texts","Your carrier sends a confirmation of a port or SIM change you didn't request","You receive OTP codes or password-reset messages for accounts you weren't logging in to","You get locked out of your email or bank immediately after losing service"],"whatToDoNow":["Call your carrier's fraud line immediately — ask for an emergency port reversal","Ask the carrier to add a mandatory verbal PIN to all future account changes","From a different device, change passwords for your email and bank accounts","Disable SMS-based 2FA and switch to an authenticator app","Check your bank, email, and key accounts for any activity during the window of loss","File reports with your national telecom regulator and cybercrime authority","Contact your bank if you spot any transactions you didn't authorise"],"faq":[{"question":"How long does it take a carrier to reverse a port?","answer":"It varies by carrier and country. Some complete reversals within an hour; others take up to 24 hours. Escalate to the carrier's fraud team or regulator if you experience delays."},{"question":"Can I prevent a port-out from happening again?","answer":"Yes. Add a SIM-lock PIN or 'port protection' flag with your carrier, and replace SMS-based 2FA with an authenticator app so a future port would not compromise your accounts even if it succeeded."}],"lastReviewed":"2026-06-10"},{"slug":"what-to-do-if-i-installed-a-suspicious-app","url":"https://scamencyclopedia.org/questions/what-to-do-if-i-installed-a-suspicious-app","question":"What should I do if I installed a suspicious app on my phone?","shortAnswer":"Uninstall the app immediately, revoke its permissions, change passwords for any accounts accessed on the device, and run a malware scan.","explanation":"A suspicious app may do nothing harmful, or it may be silently logging keystrokes, forwarding messages, recording your screen, or acting as a remote-access backdoor. Since you cannot easily tell which is true from the outside, the safest course is to act as though compromise has occurred and clean up accordingly.\n\nFirst, uninstall the app. On Android, go to Settings > Apps and force-stop it before uninstalling, to prevent it from running cleanup routines. On iPhone, delete it from the home screen or via Settings > General > iPhone Storage. After removal, check app permissions — sometimes poorly coded apps leave behind configuration files, though this is uncommon on managed mobile operating systems.\n\nChange passwords for any accounts you accessed while the app was installed, starting with your email and banking apps. If you entered passwords into any website or app while the suspicious app was on your phone, those passwords should be considered potentially exposed. Enable two-factor authentication on accounts that don't already have it.\n\nRun a reputable mobile security scan. Most major antivirus vendors offer free Android scans; iPhone malware is rarer but tools exist. If you have significant concerns, particularly if the app was installed for a long time or you noticed unusual behaviour, a factory reset is the most thorough option — just make sure you back up only your data (photos, contacts, documents) and not app data that might carry over the infection.","redFlags":["App asked for permissions that seem unrelated to its stated purpose (e.g., a torch app wanting microphone access)","You downloaded it from outside the official App Store or Google Play","Someone sent you a link to download it and asked you to allow installation from unknown sources","You noticed unusual battery drain, data usage, or device heating after installing it","The app had very few reviews or a suspicious developer name","It requested accessibility permissions, which grant very broad device control"],"whatToDoNow":["Uninstall the app immediately — force-stop it first on Android","Review and revoke all remaining app permissions in your phone settings","Change passwords for your email, banking, and social accounts from a different device","Enable two-factor authentication on accounts that didn't have it","Run a reputable mobile security scan","Check your bank and email accounts for any unusual activity","If the app was installed for weeks or you have serious concerns, consider a factory reset"],"faq":[{"question":"I installed the app from Google Play — does that mean it's safe?","answer":"Not necessarily. Google Play Protect scans apps, but malicious apps occasionally pass initial review before being removed. Unusual permissions and post-install behaviour are still worth investigating."},{"question":"Can a suspicious app affect my accounts on other devices?","answer":"Not directly, but if it captured your passwords or OTPs, the attacker could use those credentials on any device. Changing your passwords from a clean device closes that window."}],"lastReviewed":"2026-06-10"},{"slug":"can-scammer-access-my-accounts-with-just-my-email-address","url":"https://scamencyclopedia.org/questions/can-scammer-access-my-accounts-with-just-my-email-address","question":"Can a scammer access my accounts with just my email address?","shortAnswer":"Your email address alone is not enough to break in, but it gives scammers a starting point for phishing, credential stuffing, and account recovery attacks.","explanation":"An email address is a public-facing identifier — you hand it out to sign up for services — so by itself it doesn't grant access to anything. The risk is in how it can be combined with other information or techniques.\n\nCredential stuffing is the most automated attack: scammers take email addresses from data breaches paired with leaked passwords and test them against popular sites. If you reuse passwords, an old breach becomes a key to current accounts. This is one of the most common real-world account takeover methods and operates at scale entirely without phishing.\n\nAccount recovery attacks exploit 'forgot my password' flows. If your email address is known and your recovery method is another email or SMS that the attacker can reach (through a compromised inbox or SIM swap), they can initiate password resets without ever knowing your current password. This is why protecting your recovery email and enabling two-factor authentication is essential.\n\nPhishing uses your email address as a delivery address for convincing fake messages designed to trick you into entering your password on a spoofed site. Knowing your email makes a phishing message more targetable — scammers can tailor it to services you're known to use.\n\nThe best defences: unique passwords for every account (a password manager makes this practical), two-factor authentication, and not clicking password-reset links from emails you didn't request.","redFlags":["You receive password-reset emails for accounts you didn't try to access","Login attempts appear in your account activity from unknown locations","Your inbox is suddenly flooded with phishing emails","You receive an email claiming you signed up for a service you didn't","Accounts show changes to email, password, or recovery details you didn't make"],"whatToDoNow":["Check whether your email appears in known breaches at haveibeenpwned.com","Change any password you have reused across multiple sites to unique ones","Enable two-factor authentication on your email account and key services","Review account activity and active sessions across your most sensitive accounts","Be extra sceptical of password-reset emails that arrive unannounced","Use a password manager to generate and store unique passwords"],"faq":[{"question":"Should I use a different email address for important accounts?","answer":"Using a dedicated email for banking and government accounts — one you don't share publicly — reduces your attack surface. A scammer who doesn't know which email is tied to your bank cannot target that account via phishing."},{"question":"Can someone impersonate me just by knowing my email address?","answer":"They can send emails that appear to come from you using spoofing techniques, or contact your contacts pretending to be you. They cannot actually send from your address without access to your account."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-know-if-my-accounts-have-been-compromised","url":"https://scamencyclopedia.org/questions/how-do-i-know-if-my-accounts-have-been-compromised","question":"How do I know if any of my online accounts have been compromised?","shortAnswer":"Check each account's recent activity log, look for unrecognised login locations, and use breach-checking tools to see if your credentials appeared in a known data breach.","explanation":"Most major platforms — Google, Apple, Facebook, banking apps — provide an 'account activity' or 'recent logins' section that shows every device and location that has accessed your account. This is your first port of call. A login from a country you've never visited, or from a device type you don't own, is a strong indicator of compromise. Review this regularly rather than only when you suspect a problem.\n\nBreach notification services such as haveibeenpwned.com let you enter your email address and see whether it appears in any publicly reported data breaches, along with what data was exposed. If your email appears alongside a password, that specific password should be changed everywhere you use it immediately.\n\nSilent indicators are trickier: some attackers access accounts without making changes so as not to trigger alerts. Watch for emails in your sent folder you don't remember writing, contacts who report receiving odd messages from you, changes to your account recovery settings (backup email, phone number), and new device authorisations in your security settings.\n\nMake account security reviews a monthly habit rather than a crisis response. Enable login notifications on every account that offers them — these send an immediate alert to your existing device whenever a new login occurs, giving you real-time visibility.","redFlags":["Login activity shows a device or location you don't recognise","You receive a security alert email about a new device login","Your account settings show a recovery email or phone number you didn't set","Contacts report receiving messages from your account that you didn't send","You're unexpectedly locked out — someone may have changed your password","Your email appears in a data breach notification service"],"whatToDoNow":["Review the account activity / recent logins page for each key account","Enable login notifications on all accounts that support them","Check your recovery email and phone number settings and remove any you don't recognise","Review connected apps and revoke access to any that are unfamiliar","Change passwords on any account where you see suspicious activity","Use haveibeenpwned.com to check whether your email is in a known breach","Enable two-factor authentication everywhere it is offered"],"faq":[{"question":"How often should I check my account activity?","answer":"Monthly is a reasonable baseline. For banking accounts, weekly is better. Enable push notifications for logins so you get real-time alerts without manual checks."},{"question":"I found an unrecognised login — what should I do first?","answer":"Sign out all other sessions (most platforms offer a 'sign out everywhere' button), then immediately change your password and enable or review your two-factor authentication method."}],"lastReviewed":"2026-06-10"},{"slug":"can-scammer-steal-my-identity-with-just-my-name-and-address","url":"https://scamencyclopedia.org/questions/can-scammer-steal-my-identity-with-just-my-name-and-address","question":"Can a scammer steal my identity with just my name and address?","shortAnswer":"Name and address alone are rarely enough for full identity theft, but combined with other data points they can be used to open accounts, file fraudulent claims, or pass basic verification checks.","explanation":"Your name and address are semi-public information — they appear on electoral rolls, company filings, and are easily inferred from social media. Most financial institutions and government services require additional identifiers (date of birth, Social Security or National Insurance number, bank account details, or the answer to security questions) before acting on a request, so name and address alone rarely unlock high-value fraud.\n\nThe risk escalates sharply when this information is combined with just one or two more data points that scammers often obtain through different channels. Date of birth is frequently available on social media. A partial credit card number might come from a merchant breach. Together, these fragments can be enough to pass low-security phone verification, open catalogue credit accounts, register for government benefits, or convince a bank to post a replacement card to a redirected address.\n\nMail redirection fraud is a specific threat: a scammer who knows your name and address can submit a change-of-address request with the postal service to redirect your mail to a different address, then intercept bank statements, card replacements, and other sensitive documents. Monitor your post — if regular mail suddenly stops arriving, check with your postal provider.\n\nProtect yourself by being selective about what you share publicly online, reviewing your credit report regularly for accounts you don't recognise, and opting out of electoral roll public versions where your country allows it.","redFlags":["You stop receiving regular mail unexpectedly","A mail redirection confirmation arrives from the postal service that you didn't request","New accounts appear on your credit report at your address","You receive letters from government agencies or creditors about things you didn't apply for","Your details appear in data broker listings combined with other personal information"],"whatToDoNow":["Check with your postal provider if expected mail stops arriving — ask if a redirect is active","Review your credit report for new accounts or inquiries linked to your address","Search your name combined with your address on data broker websites and submit opt-out requests","Place a fraud alert with credit bureaus if you believe your details were combined in a recent breach","Avoid posting your full name, address, and date of birth together on social media or public websites","Opt out of the public electoral register version if your country allows it"],"faq":[{"question":"Is my address on public electoral registers dangerous?","answer":"Slightly. Many countries allow you to opt out of the public version of the electoral register while remaining on the full version used for official purposes. Check your local authority's guidance."},{"question":"Should I worry that my address is on LinkedIn or a company website?","answer":"A work address carries less risk than a home address. Be more careful about your home address. If it is publicly listed somewhere unnecessary, request its removal."}],"lastReviewed":"2026-06-10"},{"slug":"is-my-phone-listening-to-my-conversations","url":"https://scamencyclopedia.org/questions/is-my-phone-listening-to-my-conversations","question":"Is my phone actually listening to my conversations?","shortAnswer":"There is no credible evidence that mainstream smartphone apps listen to ambient audio for advertising; the more likely explanation for eerily relevant ads is the large amount of behavioral data already collected about you.","explanation":"The 'my phone is listening' feeling is extremely common, but security researchers who have tested this hypothesis — including by having conversations near devices while monitoring network traffic — have found no evidence of constant audio surveillance by mainstream apps. Continuous audio capture would also generate detectable battery drain and data traffic, and would represent a serious regulatory and legal exposure for any major app developer.\n\nWhat IS happening is sophisticated. Advertising platforms track your location, browsing history, purchase history, app usage patterns, demographic profile, and the browsing and purchase history of people whose devices are near yours (cross-device tracking). They also build models of your interests based on what people similar to you search for or buy. This produces coincidences so striking that it feels like your device must be listening.\n\nThat said, some apps do access the microphone for legitimate reasons (voice assistants, transcription features, push-to-talk) and permissions can be misconfigured or misused. Checking which apps have microphone access in your privacy settings is worthwhile. If you find an app with microphone access that has no obvious reason to need it — a shopping app, a game — revoke that permission.\n\nVoice assistants (Siri, Google Assistant, Alexa) are a separate matter: they use a local wake-word detector and can occasionally trigger on sounds that resemble the wake word. Those short clips may be sent to servers for processing, which is documented in each provider's privacy policy.","redFlags":["An app you never associated with audio has microphone permission enabled","You have never used the microphone feature in an app but it still holds that permission","A voice assistant frequently activates without you saying the wake word","Your phone's battery and data usage suggest more background activity than expected"],"whatToDoNow":["Check microphone permissions for all apps in Settings > Privacy and revoke access where it isn't needed","Review which apps have location access — limit to 'while using' rather than 'always'","Consider whether your voice assistant wake-word sensitivity can be reduced in settings","Use browser tracking protection and consider a privacy-focused browser for searches","Understand that coincidental ads are more likely algorithmic inference than audio surveillance"],"faq":[{"question":"What about less mainstream apps from smaller developers?","answer":"Smaller apps with fewer regulatory eyes on them carry higher risk of privacy violations. Apply the same rule: revoke microphone access unless the app clearly needs it and you trust the developer."},{"question":"Can my smart speaker be hacked to listen without activation?","answer":"Academic researchers have demonstrated this is technically possible in controlled environments, but it requires sophisticated effort and is not a widespread consumer threat. Keep firmware updated and review your voice history in your provider's app."}],"lastReviewed":"2026-06-10"},{"slug":"can-someone-track-my-location-without-me-knowing","url":"https://scamencyclopedia.org/questions/can-someone-track-my-location-without-me-knowing","question":"Can someone track my location without me knowing?","shortAnswer":"Yes — stalkerware apps, hidden AirTags, shared account settings, and social media check-ins can all reveal your location to someone without your awareness.","explanation":"Location tracking without consent is a serious privacy and safety concern, particularly in abusive relationship contexts. The methods range from simple to technically sophisticated.\n\nThe most common is a tracking app (sometimes called stalkerware) installed directly on your phone by someone with brief physical access. These apps hide from your home screen and app drawer while sending your GPS coordinates to a remote dashboard. They often request or abuse accessibility permissions to remain active and avoid being shut down. Signs include faster battery drain, unexplained data usage, and the phone running warm.\n\nSmall Bluetooth trackers like AirTags can be slipped into bags, cars, or clothing. Apple has built anti-stalking alerts into iOS that notify you when an unknown AirTag has been travelling with you, and there are Android apps that scan for nearby tracking devices. Physically checking your bags and car is still worthwhile.\n\nShared account settings are easier to overlook: family sharing plans, shared Google or Apple accounts, Find My Friends features accepted without thinking, or shared tablet and computer sessions can all broadcast your location to others on the shared account. Review which people have location-sharing access in your device settings.\n\nSocial media check-ins and geotagged photos also reveal your location to anyone who can view your posts. Metadata in photos can encode precise GPS coordinates even if you haven't manually checked in.","redFlags":["Someone consistently knows where you are without you telling them","Your phone battery drains faster than normal","You receive an AirTag or 'item found moving with you' alert on your phone","Someone with past access to your phone behaves as though they know your movements","Unfamiliar apps with location permission appear in your settings","You notice a small unfamiliar device in your bag, car, or belongings"],"whatToDoNow":["Review all apps with location access in Settings > Privacy > Location Services and remove any you don't recognise","Physically inspect your bag, car, and frequently carried items for small tracking devices","Check family sharing, location-sharing, and Find My settings and remove any entries you didn't add","Change the password and review trusted devices on any shared accounts","Enable your iPhone's 'Unknown Item Alerts' or install a Bluetooth scanner app on Android","If you believe you are being tracked in a domestic abuse context, contact a support organisation before making device changes — they can advise on safe steps"],"faq":[{"question":"Can someone track me through an app I know about, like Life360?","answer":"Yes, if you granted a person access in a location-sharing app. Audit which accounts have access to each app and revoke entries you no longer consent to."},{"question":"If I'm being tracked by a stalker, should I remove the device immediately?","answer":"If you are in a dangerous situation, contact a domestic abuse hotline or law enforcement before removing any device — removing tracking unexpectedly can escalate risk in some situations. Experts can guide you on safe steps."}],"lastReviewed":"2026-06-10"},{"slug":"can-scammer-get-into-my-accounts-using-my-old-passwords","url":"https://scamencyclopedia.org/questions/can-scammer-get-into-my-accounts-using-my-old-passwords","question":"Can a scammer get into my accounts using old passwords from a data breach?","shortAnswer":"Yes — credential stuffing attacks automatically test leaked username-password pairs against hundreds of sites, so any account where you reused a breached password is at risk.","explanation":"Every time a major data breach occurs, the leaked email-and-password combinations are tested against banking sites, email providers, retail platforms, and countless other services using automated tools. This is called credential stuffing and it operates at industrial scale — millions of combinations can be tested per hour. The success rate is low in percentage terms, but because databases contain hundreds of millions of entries, even a fraction of one percent represents a large number of compromised accounts.\n\nThe key vulnerability is password reuse. If you used the same password on a breached site as you use on your bank, your bank is now exposed even though the bank itself was never breached. Even minor variations like adding a number or exclamation mark at the end are often anticipated by cracking algorithms.\n\nReusing passwords is understandable — humans cannot memorise dozens of unique random strings. That is exactly what password managers are designed to solve. They generate and store unique, complex passwords for every site so you only need to remember one master password. Major reputable options include Bitwarden (open source, free tier), 1Password, and the built-in managers in Chrome, Safari, and Firefox.\n\nIf you discover through breach notifications or account activity alerts that a credential stuffing attempt succeeded, change the affected password, check for any changes made to the account during the intrusion window, and look for new authorised devices or apps connected to the account.","redFlags":["Login alerts from unfamiliar locations on accounts you haven't used recently","A password manager or your browser warns you that a saved password appeared in a breach","haveibeenpwned.com shows your email paired with a specific password in a breach","You cannot log in to an account even though you know your password — someone may have changed it","You receive OTP codes for accounts you weren't trying to access"],"whatToDoNow":["Start using a password manager and replace all reused passwords with unique generated ones","Check haveibeenpwned.com for your email addresses to see what has been leaked","Change the password on any account where you used a password known to be in a breach","Enable two-factor authentication on every account that supports it","Review recent account activity for accounts that used reused passwords","Set up breach monitoring alerts (offered by haveibeenpwned.com and many password managers)"],"faq":[{"question":"How old does a breach need to be before I can stop worrying about the leaked password?","answer":"If you're still using the leaked password anywhere, the age of the breach doesn't matter — change it now. If you changed the password after the breach was disclosed, you are protected on that site."},{"question":"Will two-factor authentication protect me from credential stuffing?","answer":"Yes, effectively. Even with the correct password, an attacker will be blocked by the second factor they don't have. This is one of the strongest reasons to enable 2FA on every account."}],"lastReviewed":"2026-06-10"},{"slug":"what-happens-if-a-scammer-has-my-social-security-number","url":"https://scamencyclopedia.org/questions/what-happens-if-a-scammer-has-my-social-security-number","question":"What can a scammer do if they have my Social Security Number?","shortAnswer":"With your SSN a fraudster can open credit accounts, file false tax returns, claim government benefits, and gain employment in your name — the damage can take years to undo.","explanation":"Your Social Security Number (SSN) is one of the most sensitive identifiers in the US system because it is permanent, cannot be easily changed, and is used as a verification key by financial institutions, employers, and government agencies. A scammer who has it — typically obtained through data breaches, tax document fraud, or phishing — can cause long-lasting damage across multiple domains.\n\nFinancial identity theft is the most common outcome: the fraudster applies for credit cards, personal loans, or mortgages using your SSN, name, and date of birth. They may not even need your current address — they can use their own. You won't know until the debt appears on your credit report or a collection agency contacts you.\n\nTax identity theft occurs when a fraudster files a tax return under your SSN before you do, claiming a refund. The IRS then rejects your legitimate return because one has already been filed. Medical identity theft involves using your SSN to receive healthcare services billed to your insurance, potentially corrupting your medical records. Employment identity theft means someone uses your SSN for work, which can create tax complications when the income appears under your number.\n\nPlace credit freezes with all three major bureaus (Equifax, Experian, TransUnion) immediately. Sign up for an IRS Identity Protection PIN if you are in the US. File a report with the FTC at IdentityTheft.gov. Unlike passwords, you cannot change your SSN except in extreme circumstances, so monitoring becomes a permanent responsibility.","redFlags":["Unfamiliar accounts or inquiries appear on your credit report","Tax return rejected because one was already filed under your SSN","Medical Explanation of Benefits arrives for treatment you didn't receive","W-2 forms arrive from employers you never worked for","Government benefit claim denied because you're 'already enrolled'","Debt collectors contact you about accounts you don't recognise"],"whatToDoNow":["Freeze your credit with Equifax, Experian, and TransUnion immediately — it's free","File an identity theft report at IdentityTheft.gov and follow its personalised recovery plan","Apply for an IRS Identity Protection PIN at irs.gov/ippin to protect your tax filings","Review your Social Security earnings record at ssa.gov for employment you don't recognise","Contact every institution where a fraudulent account was opened with your police/FTC report","Monitor your credit report monthly for at least two years","Alert your health insurer so it can flag and review any suspicious claims"],"faq":[{"question":"Can I get a new Social Security Number?","answer":"In theory yes, but the SSA only issues new numbers in extreme documented cases of ongoing harm. Your original number remains linked to your records, so a new number does not erase prior fraud."},{"question":"If I freeze my credit, will it affect my ability to apply for credit myself?","answer":"You need to temporarily lift the freeze (usually done online in minutes) before applying for new credit. It is a minor inconvenience and worth it for the protection."}],"lastReviewed":"2026-06-10"},{"slug":"can-someone-hack-my-wifi-and-see-what-im-doing","url":"https://scamencyclopedia.org/questions/can-someone-hack-my-wifi-and-see-what-im-doing","question":"Can someone hack my Wi-Fi and see what I'm doing online?","shortAnswer":"If someone accesses your Wi-Fi network, they can potentially intercept unencrypted traffic, but HTTPS protects the content of most web browsing; the main practical risks are bandwidth theft and being on the same network as a malicious device.","explanation":"A person on your Wi-Fi network sits in a position where they can potentially see the traffic flowing through the router. The extent of what they can read depends heavily on encryption. Since most websites now use HTTPS, an attacker on your network sees that you connected to a site, but the content of what you sent and received — passwords, messages, page content — is encrypted and unreadable without breaking TLS.\n\nFor unencrypted connections (older sites using plain HTTP, some older smart home devices), data can be read in plain text. DNS queries — the lookups your browser makes to convert website names to IP addresses — may also be visible, revealing which sites you visited even when the content is hidden. Using an encrypted DNS service (DNS over HTTPS) reduces this exposure.\n\nIf someone gains access to your router itself rather than just your Wi-Fi, the risk increases significantly: they can redirect DNS queries, intercept traffic before it's encrypted, or set up rogue access points. Router access is obtained through default or weak admin passwords, or through unpatched firmware vulnerabilities.\n\nThe practical remediation is strong: use WPA3 or WPA2 encryption on your Wi-Fi with a long, unique password; change the router's admin password from the factory default; keep router firmware updated; and consider placing smart home devices on a separate guest network so a compromised device doesn't have access to your computers.","redFlags":["Unknown devices appear in your router's connected device list","Your internet feels much slower than usual with no other explanation","Your router is using its factory default admin password","You use a public Wi-Fi network and are accessing sensitive accounts","Your router has an old firmware version and the manufacturer has published security updates"],"whatToDoNow":["Log in to your router admin panel and review the list of connected devices — remove any you don't recognise","Change your Wi-Fi password to a long, unique one if it is weak or shared widely","Change your router's admin password from the factory default","Check for and apply any available firmware updates for your router","Set up a separate guest network for IoT and smart home devices","On public Wi-Fi, avoid accessing banking or other sensitive accounts unless using a VPN","Enable DNS over HTTPS in your browser settings to reduce DNS visibility"],"faq":[{"question":"Can a neighbour using my Wi-Fi actually steal my passwords?","answer":"For HTTPS sites, no — those passwords are encrypted in transit. The bigger concern is bandwidth theft, router security, and potentially malicious traffic from a device they introduce to your network."},{"question":"Does a VPN protect me on public Wi-Fi?","answer":"A reputable VPN encrypts all traffic between your device and the VPN server, effectively shielding your activity from anyone on the local network including the access point operator. Choose a paid VPN with a clear no-logs policy."}],"lastReviewed":"2026-06-10"},{"slug":"can-scammer-open-bank-account-in-my-name","url":"https://scamencyclopedia.org/questions/can-scammer-open-bank-account-in-my-name","question":"Can a scammer open a bank account in my name?","shortAnswer":"Yes — with enough personal data (name, SSN or national ID, date of birth, address) a fraudster can apply for accounts online, often passing identity checks at less rigorous institutions.","explanation":"Opening a bank account in your name is a common form of identity fraud. The scammer uses your personal details — typically obtained through a data breach, phishing campaign, or dark web purchase — to complete an online application. If the institution's identity verification is weak, the account passes through with the fraudster in control.\n\nThese fraudulent accounts are then used in several ways: as money-mule accounts to receive and launder stolen funds, to write bad checks in your name, or as part of larger synthetic identity schemes. Overdrafts and bad checks can be reported to ChexSystems (a banking consumer reporting agency in the US), affecting your ability to open legitimate bank accounts in the future.\n\nYou may not discover the fraudulent account for months until you try to open an account and are declined, receive a collection notice, or see an unknown account when you pull your credit report. Some bank accounts do generate credit inquiries or appear in consumer reporting databases, making regular monitoring important.\n\nPlace a credit freeze with the major bureaus to make it harder for anyone to open financial accounts in your name, since many institutions run a credit check as part of the process. You can also place an alert with ChexSystems if bank account fraud is specifically a concern.","redFlags":["You are declined when trying to open a bank account for no apparent reason","ChexSystems shows accounts or activity you didn't create","You receive bank statements or welcome letters from institutions you never contacted","Collection agencies contact you about a bank overdraft you don't recognise","Your credit report shows a financial account inquiry from a bank you never applied to"],"whatToDoNow":["Request your free ChexSystems report and dispute any accounts you didn't open","Freeze your credit with all major bureaus to prevent new financial account openings","File a report with the FTC at IdentityTheft.gov and get a personalised recovery plan","Contact the fraudulent bank directly, provide your FTC report, and request account closure","File a police report — the bank will likely require this to process your dispute","Monitor your credit report for further financial accounts opened in your name"],"faq":[{"question":"What is ChexSystems and why does it matter?","answer":"ChexSystems is a consumer reporting agency that banks use to screen applicants for deposit accounts. Fraudulent activity under your name can result in you being declined for legitimate accounts. You can request your free annual ChexSystems report at chexsystems.com."},{"question":"Will the fraudulent bank account affect my credit score?","answer":"Standard checking accounts don't directly affect credit scores, but overdrafts or unpaid fees sent to collections will. The credit inquiry made during the application may also appear on your report."}],"lastReviewed":"2026-06-10"},{"slug":"can-scammer-take-over-my-social-media-account","url":"https://scamencyclopedia.org/questions/can-scammer-take-over-my-social-media-account","question":"Can a scammer take over my social media account?","shortAnswer":"Yes — through phishing, password reuse from breaches, SIM swapping, or account recovery manipulation, social media accounts are taken over regularly and used to scam your contacts.","explanation":"Social media account takeover is extremely common because it is both lucrative and relatively easy. Once a scammer controls your account, they have access to your contact list, your trusted identity, and sometimes payment features — making it an ideal launching pad for further fraud against people who trust you.\n\nThe most common entry point is phishing: a fake login page designed to capture your credentials. These pages circulate as links in messages, emails, or even comments, often claiming to show you who viewed your profile, offer a prize, or warn you about a copyright strike. Credential stuffing (using email-and-password pairs from unrelated data breaches) is equally common, exploiting password reuse.\n\nOnce inside your account, scammers typically lock you out by changing the password and recovery email, post fraudulent content (fake crypto giveaways, romance scam solicitations, fake emergency messages asking for money), and message your followers directly. Even after you recover the account, some followers may have already been defrauded.\n\nProtect your accounts with a unique password and authenticator-app based 2FA — most major platforms now support this. Review authorised apps regularly. Understand your platform's account recovery process before you need it, and set up a recovery email and phone number from a separate, secure account.","redFlags":["You are suddenly logged out and your password no longer works","Friends message you about strange posts or direct messages from your account","The recovery email or phone number on the account was changed without your knowledge","Login activity shows access from an unfamiliar country or device","You receive a phishing message in your DMs claiming to be from the platform","A 'verify your account' link arrives that wasn't triggered by you"],"whatToDoNow":["Use the platform's account recovery process immediately if you are locked out","Change your password as soon as you regain access, then revoke all active sessions","Enable two-factor authentication using an authenticator app","Check and update your recovery email and phone number","Review authorised third-party apps and revoke any you don't recognise","Post a notice to your followers that your account was compromised so they disregard any suspicious messages","Report the incident to the platform using the 'compromised account' reporting tool"],"faq":[{"question":"Can the platform help me recover if the scammer changed my email and phone number?","answer":"Most platforms have a dedicated compromised account recovery flow that uses alternative verification methods — identity documents, trusted contacts, or video selfies. Start with the platform's help centre under 'hacked account'."},{"question":"My account was taken over and used to scam people. Am I liable?","answer":"Generally not, as the fraud was committed by the attacker. Document the takeover and recovery timeline clearly. Contacting the platform's trust and safety team to have the fraudulent posts removed quickly helps protect others."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-stalkerware-and-how-do-i-find-it","url":"https://scamencyclopedia.org/questions/what-is-stalkerware-and-how-do-i-find-it","question":"What is stalkerware and how do I find it on my device?","shortAnswer":"Stalkerware is software installed on a device without consent to secretly monitor calls, messages, location, and activity; it is often used in domestic abuse contexts and usually requires brief physical access to install.","explanation":"Stalkerware (also called spouseware or monitoring software) is different from typical malware in that it is usually installed deliberately by someone who had brief physical access to your unlocked device — a partner, family member, or controlling acquaintance. It hides from the home screen and app drawer while transmitting your location, messages, call logs, browsing history, and sometimes live audio or camera feeds to a remote portal the installer controls.\n\nOn Android, stalkerware often arrives through sideloaded APKs (apps installed outside the Play Store) and may require you to grant accessibility permissions, which allow broad device control. On iPhone, it is harder to install without a jailbreak, but iCloud account access can achieve similar surveillance through synced data. If someone knows your Apple ID and password, they may be monitoring your messages, location, and photos through iCloud web access without any app on your phone at all.\n\nSigns to look for: faster than normal battery drain, unexplained data usage, phone warming when idle, apps with broad permissions you don't remember granting, unfamiliar entries in your accessibility services list (Android), and any behaviour suggesting the person tracking you knows things they shouldn't.\n\nThe Coalition Against Stalkerware (stopstalkerware.org) provides guidance and resources. If you are in a potentially dangerous situation, consult a domestic abuse organisation before removing stalkerware — unexpected disappearance of the monitoring capability can sometimes escalate risk. A safety plan developed with an advocate is the right starting point.","redFlags":["Your partner or someone else knows details about your day that you didn't share with them","Your phone battery drains unusually fast with no new apps installed","Unfamiliar apps appear in Settings > Accessibility or Notification Access on Android","Data usage is higher than expected","Your phone was left unattended with someone who had opportunity and motive to install software","Your iCloud account was or is shared with someone you no longer trust"],"whatToDoNow":["If in a domestic abuse situation, contact a support hotline before taking any action on the device","Check Settings > Apps (Android) for apps you don't recognise, especially those with no icon","Check Settings > Accessibility > Installed Apps on Android for apps with broad control","On iPhone, review whether your Apple ID is used on other trusted devices — remove any you don't authorise","Change your Apple ID or Google account password from a completely separate device","Run a reputable mobile security scan — Malwarebytes and Certo are options for stalkerware detection","Consider using a new device if you cannot safely resolve the situation on the current one"],"faq":[{"question":"Is stalkerware legal?","answer":"Installing monitoring software on an adult's device without their knowledge or consent is illegal in most jurisdictions, even between partners. It is a form of coercive control."},{"question":"Can parental monitoring apps be considered stalkerware?","answer":"Parental monitoring apps used transparently on a child's device with the child's knowledge are generally legal. The same apps used covertly on an adult's device without consent cross into stalkerware territory."}],"lastReviewed":"2026-06-10"},{"slug":"can-scammer-use-my-photo-to-steal-my-identity","url":"https://scamencyclopedia.org/questions/can-scammer-use-my-photo-to-steal-my-identity","question":"Can a scammer use my photo to steal my identity?","shortAnswer":"A photo alone is unlikely to enable financial identity theft, but it can be used to create fake profiles for romance scams, impersonate you socially, or in some cases pass weak biometric verification.","explanation":"Identity theft in the financial sense — opening bank accounts or obtaining credit — requires documentary evidence like government IDs, Social Security Numbers, and proof of address. A facial photo on its own does not satisfy those requirements at most institutions.\n\nHowever, photos are valuable to scammers in other ways. Romance scammers harvest photos from real people's social media to build convincing fake identities, then use those fake identities to defraud victims emotionally and financially. If your photos are used this way, you may become known as the face of a scammer's operation without knowing it, occasionally leading victims to contact you.\n\nDeepfakes are a growing concern: an AI model trained on multiple photos of your face can generate convincing video or images of you saying or doing things you never did. These can be used for blackmail, impersonation, or social engineering attacks against your employer, family, or contacts. The risk is greater for people with a large volume of publicly available photos.\n\nFor most people, the most realistic photo-related risks are social impersonation and romance fraud victimisation using their likeness. Setting social media accounts to private, watermarking profile photos, and enabling reverse-image-search alerts (through Google Images or TinEye) are practical countermeasures.","redFlags":["You find your photos on profiles you didn't create (use Google reverse image search)","Strangers contact you claiming you defrauded them — this may mean your photos were used by a scammer","Your profile photos are visible to everyone on social media including people you don't know","You receive blackmail threats based on a fabricated or deepfake video or image","A service claims to verify identity using only a selfie with minimal other documentation"],"whatToDoNow":["Do a reverse image search on your profile photos using Google Images or TinEye to check for misuse","Set your social media accounts to private or 'friends only' to limit access to your photos","Report fake profiles using your photos to the relevant platform immediately","If you are being impersonated in a romance scam, contact the platform's trust and safety team and your local police","If blackmailed using a fabricated image, do not pay — contact authorities; paying escalates demands","Enable Google Alerts for your name to monitor new mentions online"],"faq":[{"question":"Can someone pass face ID or selfie-based ID verification using my photo?","answer":"Sophisticated liveness checks (blinking, head movements, 3D depth sensing) are designed to defeat photo attacks. Basic selfie uploads without liveness checks are more vulnerable, but such weak checks are increasingly rare in regulated financial services."},{"question":"A romance scam victim contacted me saying I defrauded them. What should I do?","answer":"You are a victim too — your photos were stolen and used without your consent. Explain the situation calmly, point them to anti-romance scam resources, and report the fake profiles to the platform."}],"lastReviewed":"2026-06-10"},{"slug":"can-scammer-access-my-icloud-or-google-account","url":"https://scamencyclopedia.org/questions/can-scammer-access-my-icloud-or-google-account","question":"Can a scammer access my iCloud or Google account?","shortAnswer":"Yes — and if they do, they potentially have access to your photos, messages, contacts, location, backups, and any services that sync through that account.","explanation":"Your iCloud or Google account is the master key to your digital life on Apple or Android. These accounts store backups of your phone (which include messages, contacts, and app data), your photos, your emails, your calendar, sometimes your saved passwords, your payment methods, and your device's real-time location. A compromised cloud account gives an attacker more information than physical access to your phone.\n\nThe main attack vectors are: phishing emails or text messages that mimic Apple or Google login pages; credential stuffing using leaked passwords; and social engineering Apple or Google support into recovering access to the account. Fake 'account suspended' or 'unusual activity' notifications are used to drive victims to phishing pages where they enter their credentials.\n\nIf an attacker gains access, they may not alert you immediately — they may silently monitor your location, read your messages, download your photos, or wait for a financially valuable moment. They may also activate Find My iPhone to lock your device and demand a ransom to unlock it.\n\nEnable two-factor authentication on your Apple ID and Google account — this is the single most effective protection, as it blocks access even when the password is known. Use a strong, unique password. Review trusted devices and recent activity in your account settings periodically. Be sceptical of any email claiming to be from Apple or Google that asks you to click a link and log in.","redFlags":["An Apple or Google login notification arrives for a device you don't own","Unfamiliar devices appear in your Apple ID or Google account's trusted devices list","Your phone suddenly shows a locked 'Activation Lock' or 'Apple ID Locked' screen","Someone mentions details about your private messages or photos they couldn't otherwise know","You receive an email from 'Apple' or 'Google' urging you to log in urgently — do not click","Your recovery email or phone number in the account was changed without your action"],"whatToDoNow":["Enable two-factor authentication on your Apple ID and Google account immediately","Review trusted devices in your account settings and remove any you don't recognise","Change your Apple ID or Google account password to a strong, unique one","Check for and remove any unrecognised connected apps with access to your account","Review your account's recent activity / security events for unfamiliar logins","If locked out, use Apple's or Google's official account recovery processes — not third-party tools"],"faq":[{"question":"Can someone use my iCloud to track my location without touching my phone?","answer":"Yes — if they have your Apple ID credentials and are added to your Family Sharing or Find My network, they can see your location in real time from any device."},{"question":"I got a 'Sign in from new device' notification I didn't authorise. What now?","answer":"Use the notification to deny the sign-in request if that option is presented. Then immediately change your Apple ID or Google account password and review trusted devices."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-phishing-attack-and-how-does-it-work","url":"https://scamencyclopedia.org/questions/what-is-a-phishing-attack-and-how-does-it-work","question":"What exactly is a phishing attack and how does it work against me?","shortAnswer":"Phishing is a deceptive communication — usually an email, text, or fake website — designed to trick you into revealing credentials, financial details, or installing malware by impersonating a trusted entity.","explanation":"Phishing is one of the most successful attack vectors in fraud because it exploits human psychology rather than technical vulnerabilities. A convincing email appearing to come from your bank, a well-known retailer, or a government agency can be almost indistinguishable from the real thing at a glance. The message typically creates urgency — your account will be suspended, a parcel is waiting, a refund is ready — and provides a link to 'resolve' the issue.\n\nThat link leads to a fake website built to look like the real one, where you are prompted to enter your login credentials or payment details. Once submitted, those details go to the attacker's server, not the legitimate company. Some phishing pages are sophisticated enough to pass your credentials through to the real site in real time (real-time phishing proxies), so you don't notice anything wrong — you just log in successfully, while the attacker captures your session.\n\nSpear phishing is a targeted variant that uses your name, job title, organisation, or other personal details gathered from social media to seem highly personalised. Vishing (voice phishing) and smishing (SMS phishing) follow the same playbook via phone calls and texts instead of email.\n\nThe most reliable defence is to never click links in unsolicited messages to log in. Instead, open a new browser tab and navigate to the site directly from a bookmark or by typing the address yourself. No legitimate company will penalise you for doing this.","redFlags":["Unsolicited message creates urgency — 'act now or your account will be closed'","Sender address looks almost right but has a small spelling variation or uses a free email domain","Link in the email shows a different URL to the legitimate site when you hover over it","Generic greeting ('Dear Customer') instead of your actual name","The page that loads looks like the real site but the URL in the address bar is different","You are asked to provide login details, OTPs, or payment information to 'verify' your account"],"whatToDoNow":["Never click login links in unsolicited emails or texts — navigate to the site directly","If you already entered credentials, change that account's password immediately","Enable two-factor authentication so stolen passwords alone are not enough","Report phishing emails to your email provider (use the 'report phishing' button)","Forward suspicious texts to 7726 (SPAM) to report to your carrier","If financial details were entered, contact your bank immediately"],"faq":[{"question":"Can my email spam filter catch all phishing emails?","answer":"Spam filters catch most phishing but not all — sophisticated campaigns specifically craft messages to evade filters. Treat unexpected urgency or login requests with scepticism regardless of which folder they arrive in."},{"question":"What is the difference between phishing and spear phishing?","answer":"Phishing is a mass campaign sent to many people with generic content. Spear phishing is targeted — the attacker researches you first and personalises the message, making it much more convincing."}],"lastReviewed":"2026-06-10"},{"slug":"can-a-scammer-hack-me-through-public-wifi","url":"https://scamencyclopedia.org/questions/can-a-scammer-hack-me-through-public-wifi","question":"Can a scammer hack me through public Wi-Fi?","shortAnswer":"Public Wi-Fi carries real risks including rogue access points and traffic interception, but HTTPS encryption protects most browsing; the biggest risks are unencrypted apps and account access on network operator-controlled routers.","explanation":"Public Wi-Fi (in cafes, airports, hotels) is a shared network where all connected devices route traffic through the same router. This creates opportunities for network-level attacks that don't exist on your private home network.\n\nThe most common active attack is a rogue access point (evil twin): an attacker sets up a Wi-Fi hotspot with a convincing name (similar to the venue's real network) and waits for devices to connect. Because the attacker controls this router, they can perform SSL stripping attacks on misconfigured sites, inject content into pages, or redirect you to phishing pages when you type a URL.\n\nOn legitimate public networks, a sophisticated attacker who is also connected can attempt ARP poisoning to intercept traffic. In practice, HTTPS protects the content of your web browsing, but DNS queries, metadata, and traffic to legacy HTTP sites may be visible.\n\nThe most practical risks on public Wi-Fi are: connecting to a rogue hotspot and being redirected to fake login pages; apps that use unencrypted connections being intercepted; and your device being exposed to other devices on the same local network (particularly relevant if file sharing or remote login services are enabled on your computer).\n\nUsing a reputable VPN on public Wi-Fi encrypts everything from your device to the VPN server, effectively eliminating these local network threats. If you don't have a VPN, at minimum ensure you are on HTTPS, use two-factor authentication on accounts, and avoid entering financial credentials on public networks.","redFlags":["Multiple Wi-Fi networks with similar names to the venue's official network","No password required to join a network in a location where you'd expect one","You are redirected to unexpected pages or asked to log in via a captive portal with a login form","Browser shows certificate warnings on pages that normally load fine","Your device shows an unfamiliar network name in a location you trust"],"whatToDoNow":["Use a reputable VPN whenever on public Wi-Fi — turn it on before connecting to the network","Verify the exact network name with venue staff before connecting","Avoid accessing banking or sensitive accounts on public networks without a VPN","Turn off file sharing and network discovery on your laptop when on public networks","Prefer mobile data over unknown public Wi-Fi for sensitive transactions","Check that sites show HTTPS (padlock icon) before entering any credentials"],"faq":[{"question":"Is hotel Wi-Fi safer than a coffee shop network?","answer":"Not necessarily. Both are shared networks managed by third parties. Hotel networks are often larger and less carefully managed. Use the same precautions — VPN and HTTPS — regardless of venue type."},{"question":"Can my phone be hacked just by having Wi-Fi turned on near a rogue hotspot?","answer":"Simply having Wi-Fi on doesn't expose you — you need to actually connect to a network. On iOS and newer Android, automatic connection to unknown networks is disabled by default."}],"lastReviewed":"2026-06-10"},{"slug":"what-personal-data-do-scammers-buy-on-the-dark-web","url":"https://scamencyclopedia.org/questions/what-personal-data-do-scammers-buy-on-the-dark-web","question":"What personal data do scammers buy on the dark web and what do they do with it?","shortAnswer":"Dark web markets sell full identity packages (name, SSN, DOB, address), banking credentials, credit card numbers, and email-password combos — each enabling a different type of fraud.","explanation":"The dark web hosts marketplaces where stolen personal data is traded, often at surprisingly low prices. Understanding what is available and how it is used helps you prioritise which defences matter most.\n\nFull identity packages (called 'fullz') contain name, date of birth, Social Security Number, address, and sometimes driver's license or passport numbers. These enable full identity theft — opening credit accounts, filing tax returns, or applying for government benefits in your name. A fullz can sell for as little as a few dollars for older, less-verified data, or significantly more for verified, recently active profiles.\n\nBanking credentials (username, password, and sometimes account number and routing number for a specific institution) are sold separately and used to drain accounts, authorise ACH transfers, or sell access to money mule networks. The price typically correlates with the balance in the account.\n\nCredit card dumps (card number, expiry, CVV) are used for card-not-present online fraud or cloned physical cards for in-store use before the card is reported. Email-and-password combos from breaches are used in credential stuffing attacks against other platforms.\n\nThe presence of your data on the dark web does not mean fraud is inevitable, but it does mean you should act as though your credentials could be tested at any moment: use unique passwords, enable 2FA, and monitor your credit report and accounts regularly.","redFlags":["haveibeenpwned.com shows your email in a data breach — your credentials may be in circulation","Credit accounts appear on your report that you didn't open","You receive targeted phishing messages that include your real name and partial personal details","Your bank alerts you to login attempts from unusual locations","You receive tax rejection notices or benefit denial letters"],"whatToDoNow":["Check haveibeenpwned.com for your email addresses and change exposed passwords immediately","Use unique passwords for every account — a password manager makes this practical","Enable two-factor authentication on all key accounts","Place a credit freeze if you believe fullz data with your SSN is in circulation","Set up credit monitoring alerts to catch new account openings early","Check your IRS transcript and Social Security earnings record for signs of tax or employment fraud"],"faq":[{"question":"Should I pay a service to scan the dark web for my data?","answer":"Free tools like haveibeenpwned.com cover most known breach databases well. Paid dark web monitoring services vary in quality. Taking protective actions (2FA, unique passwords, credit freeze) is more valuable than monitoring alone."},{"question":"If my data is on the dark web, can it be removed?","answer":"Once data is distributed on the dark web, it cannot practically be removed — copies proliferate across multiple servers. Focus on changing the exposed credentials and securing your accounts rather than attempting removal."}],"lastReviewed":"2026-06-10"},{"slug":"can-scammer-access-my-device-via-bluetooth","url":"https://scamencyclopedia.org/questions/can-scammer-access-my-device-via-bluetooth","question":"Can a scammer access my device via Bluetooth?","shortAnswer":"Bluetooth attacks are possible but require close physical proximity; keeping Bluetooth off or set to non-discoverable and applying OS updates closes the main attack windows.","explanation":"Bluetooth vulnerabilities have been documented over the years — attacks like BlueBorne (2017) and newer BLE-based exploits showed that under certain conditions an attacker within Bluetooth range (typically up to 10 metres) could execute code or intercept data without you pairing with them. These attacks almost always exploit unpatched OS vulnerabilities, which is why keeping your phone and laptop updated is your most effective defence.\n\nBluejacking was an older form of Bluetooth harassment: sending unsolicited messages to nearby Bluetooth-enabled devices. It was annoying rather than harmful — no data was stolen — and is rarely encountered on modern devices.\n\nBluesnarfing involved accessing contact lists, messages, or files on a device without pairing, but required older Bluetooth implementations. Again, patched devices are not vulnerable to known techniques.\n\nThe risk profile for most people is low as long as their OS is current. Larger concerns are pairing with unknown devices (which can allow data exchange) and car Bluetooth — some vehicles store contact data and recent call history, which stays accessible to the next driver unless cleared.\n\nPractical steps: turn Bluetooth off when not in use, especially in crowded public spaces; ensure your device is not in 'discoverable' mode unless actively pairing; keep OS updates applied promptly; and clear car Bluetooth pairing data when selling a vehicle.","redFlags":["Unknown pair request appears on your device in a public space","Your device shows an unfamiliar Bluetooth device in its 'connected' or 'previously connected' list","You receive a file transfer request from an unknown source","Your OS has pending updates and you are using Bluetooth regularly in public"],"whatToDoNow":["Turn Bluetooth off when not actively using it, especially in airports, public transport, and events","Keep your phone OS and laptop OS updated — patches close known Bluetooth exploit windows","Decline unexpected pair requests from unknown devices","Review your 'previously paired devices' list and remove any you don't recognise","When selling a car, delete all paired phones from the car's Bluetooth settings","Set your device to 'non-discoverable' mode by default"],"faq":[{"question":"Is using Bluetooth headphones risky?","answer":"No — actively using Bluetooth with a trusted device you own is fine. The risk is from your device being discoverable or connecting to unknown devices in your vicinity."},{"question":"Can AirDrop on iPhone be exploited similarly to Bluetooth attacks?","answer":"AirDrop uses Bluetooth discovery combined with Wi-Fi Direct for transfer. Setting AirDrop to 'Contacts Only' or 'Off' in public places eliminates exposure to unsolicited file transfer requests."}],"lastReviewed":"2026-06-10"},{"slug":"what-should-i-do-if-my-computer-was-hacked","url":"https://scamencyclopedia.org/questions/what-should-i-do-if-my-computer-was-hacked","question":"What should I do if I think my computer has been hacked?","shortAnswer":"Disconnect from the internet immediately, run a malware scan, change all passwords from a separate device, and consider reinstalling the operating system if you cannot be certain the machine is clean.","explanation":"Discovering or suspecting that your computer has been compromised is alarming, but acting systematically limits the damage. The first step is isolation: disconnect from Wi-Fi and remove any ethernet cable. This cuts the attacker's live access and prevents further data exfiltration or remote commands while you investigate.\n\nBoot from a trusted malware scanner. On Windows, Microsoft Defender Offline or Malwarebytes Premium can run a scan from outside the normal OS environment, making it harder for rootkits to hide. On Mac, Malwarebytes also provides good coverage. If you cannot boot normally, a bootable USB scanner is an option. Document anything the scanner finds.\n\nChange your passwords — starting with your email account and any banking accounts — from a different, known-clean device (your phone on mobile data, not Wi-Fi routed through the compromised machine). Enable two-factor authentication. Revoke active sessions on your email and any financial accounts so any session cookies the attacker captured are invalidated.\n\nIf the malware was extensive or you cannot be confident the scan found everything (ransomware, rootkits, and advanced persistent threats can be hard to fully remove), the safest and cleanest solution is reinstalling the operating system from scratch. Back up important documents — ideally scan them for malware before restoring — but do not restore from an image backup created while the machine was compromised.","redFlags":["Your computer is running unusually slowly or fan is constantly running when the device should be idle","Unknown programs appear in your task manager or startup items","Files have been encrypted and you see a ransom demand","Your cursor moves or applications open without you touching the input devices","Your security software was disabled or cannot update","Friends report receiving suspicious emails or messages from your address"],"whatToDoNow":["Immediately disconnect from the internet — unplug ethernet and turn off Wi-Fi","Run a malware scan from a reputable security tool (Malwarebytes, Microsoft Defender Offline)","From a clean separate device, change passwords for email, banking, and other key accounts","Revoke all active sessions on your email and financial accounts","Enable two-factor authentication on accounts that don't have it","If you cannot be certain the machine is fully clean, back up only your data files and reinstall the OS","Report any financial theft to your bank and national cybercrime authority"],"faq":[{"question":"My files have been encrypted and I'm being asked to pay a ransom — should I pay?","answer":"Law enforcement agencies generally advise against paying, as payment funds criminal operations and doesn't guarantee file recovery. Check nomoreransom.org for free decryption tools for known ransomware families before considering any other action."},{"question":"After reinstalling Windows, do I need to worry about BIOS-level malware?","answer":"UEFI/BIOS-level firmware malware is extremely rare and typically used only in state-level espionage. For the vast majority of people, a clean OS reinstall provides complete remediation."}],"lastReviewed":"2026-06-10"},{"slug":"can-someone-spy-on-me-through-my-laptop-camera","url":"https://scamencyclopedia.org/questions/can-someone-spy-on-me-through-my-laptop-camera","question":"Can someone spy on me through my laptop camera without me knowing?","shortAnswer":"It is technically possible if your device is infected with remote-access malware, but it requires deliberate compromise; the most practical prevention is keeping software updated, using a camera cover, and watching for the camera indicator light.","explanation":"Remote Access Trojans (RATs) are a class of malware that, once installed on a computer, can give an attacker full control including the ability to activate your camera and microphone without triggering the indicator light in some cases. In documented cases of RAT-based camera hijacking, victims were typically targeted by someone they knew or were compromised through a convincing phishing attachment.\n\nFor this to happen, malware must be on your device. That malware gets there through clicking malicious email attachments, downloading cracked software or games from unofficial sources, visiting exploit-laden websites on an unpatched browser, or having someone with physical access install it directly. Keeping your OS and software updated, using a reputable antivirus, and being cautious about what you download addresses the root cause.\n\nThe camera indicator light is a hardware-level feature on some laptops (particularly ThinkPads and many MacBooks) that cannot be disabled in software — a physical circuit requires the light to activate with the camera. Not all laptops have this hardware-level protection; on those, malware can in theory activate the camera without the light.\n\nA physical camera cover (a sliding cover or a piece of tape) is a simple and effective solution regardless of your threat model. It is the one control that works even against advanced malware that bypasses the indicator light.","redFlags":["Your camera indicator light activates when you are not using any video application","Task manager shows an unfamiliar process consuming CPU or GPU resources","You discover unknown software on your computer you didn't install","Someone reveals knowledge of something that occurred in front of your computer camera","Your webcam application reports 'already in use by another app' when you try to open it"],"whatToDoNow":["Put a physical camera cover or tape over your laptop camera — this works regardless of software controls","Check your running processes for unfamiliar applications accessing the camera","Run a full malware scan with an up-to-date security tool","Keep your OS and all applications fully updated","Avoid downloading software from unofficial sources or clicking email attachments from unknown senders","If you find RAT malware, disconnect from the internet and follow the 'computer hacked' response steps"],"faq":[{"question":"I keep receiving 'I have footage of you from your camera' blackmail emails. Are they real?","answer":"Almost always no — these are mass-sent sextortion scam emails sent to millions of addresses. They typically include a password from an old breach to seem credible, but they have no footage. Do not pay; block and delete the email."},{"question":"Does covering the camera affect the microphone too?","answer":"No. The camera cover only blocks visual access. To protect the microphone, manage microphone permissions per-app in your OS settings, and for high-sensitivity environments use a physical microphone blocker plug."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-secure-my-accounts-after-a-scam","url":"https://scamencyclopedia.org/questions/how-do-i-secure-my-accounts-after-a-scam","question":"How do I secure all my accounts after falling victim to a scam?","shortAnswer":"Work systematically through your most critical accounts first: change passwords, enable two-factor authentication, revoke unexpected access, and monitor for any changes made during the period of compromise.","explanation":"After a scam involving account access — whether through phishing, a remote-access session, or a compromised device — your goal is to re-establish control across your digital accounts before the attacker can do lasting damage. Doing this methodically rather than in a panic produces better results.\n\nStart with the highest-impact accounts: your primary email account, then your bank and credit accounts, then any accounts where your email is used for password recovery. Your email is the master key — anyone who controls it can reset almost everything else via 'forgot password'. Change to a strong, unique password and immediately enable two-factor authentication using an authenticator app.\n\nFor each account, also review: active sessions (sign out all others), connected third-party apps (revoke anything unfamiliar), recovery email and phone number (ensure they point to accounts you control), and recent account activity for any changes made. Attackers often make small changes — adding a forwarding rule, changing the recovery contact — designed to maintain persistence.\n\nAs you work through accounts, use a password manager to generate and store unique passwords. This process also gives you an opportunity to delete accounts you no longer use, reducing your attack surface. After the immediate response, set a calendar reminder to check account activity across your key accounts monthly.","redFlags":["You gave a scammer access to your device via a remote-access app","You entered credentials on a phishing page","A device or account was compromised and you are unsure what was accessed","You notice small unexplained changes to account settings (recovery contacts, forwarding rules)"],"whatToDoNow":["Change your email account password first, using a device you are confident is clean","Enable authenticator-app 2FA on your email, then your bank, then all key accounts","Sign out all other sessions on each account and revoke unknown connected apps","Check recovery email and phone numbers in every account and correct any that were changed","Check your email for forwarding rules and delete any you didn't create","Review your bank and card statements for any transactions during the compromise window","Use a password manager from this point forward to maintain unique passwords across accounts"],"faq":[{"question":"How many accounts do I need to change passwords on?","answer":"Any account where you used the same or a similar password to one that was compromised, and any account the scammer could have accessed on your device or in your email. A password manager's breach monitoring feature can identify affected accounts."},{"question":"Should I close accounts I haven't used in years?","answer":"Yes — dormant accounts you no longer monitor can be compromised without you noticing, and old accounts sometimes contain payment details. Closing them reduces your attack surface."}],"lastReviewed":"2026-06-10"},{"slug":"can-scammer-access-my-accounts-via-a-fake-charging-cable","url":"https://scamencyclopedia.org/questions/can-scammer-access-my-accounts-via-a-fake-charging-cable","question":"Can a scammer hack my phone through a fake charging cable or USB charger?","shortAnswer":"Weaponised charging cables exist and have been demonstrated by security researchers, but they require physical access to your cable or device; public USB charging ports carry a real but overstated 'juice jacking' risk.","explanation":"Security researchers have demonstrated modified USB cables — such as the OMG Cable — that contain a hidden Wi-Fi chip and microcontroller, allowing an attacker within range to execute commands on your device when you plug in the cable. These are real but require someone to physically give you or swap out your cable, limiting attacks to targeted scenarios.\n\nJuice jacking is the more widely discussed risk: charging at a public USB port could expose your device to data transfer commands if the port is controlled by a malicious actor. In practice, modern iOS and Android devices prompt you to 'Trust This Computer' when data transfer is attempted via USB. Declining that prompt defeats data theft. Charging-only attacks that inject malware directly are technically more demanding and have not been widely documented outside research environments.\n\nThe US FBI and some travel security agencies advise against using public USB charging stations as a precaution, which is reasonable advice. The practical risk for most people is low, but the mitigation is also very low cost.\n\nUsing your own charger and cable plugged into a standard electrical outlet is the simplest defence. A USB data blocker (also called a 'USB condom') allows you to charge safely from public USB ports by physically removing the data pins from the connection, allowing only power through.","redFlags":["A 'well-wisher' gives you a free USB cable or charger you didn't ask for","A cable you received as a gift behaves unusually when plugged in","Your device shows a 'Trust This Computer' prompt when connected to a charger (not a computer)","You plug in at a public kiosk and your device shows an unexpected prompt"],"whatToDoNow":["Use your own verified charging cable and adapter wherever possible","At public charging stations, use an AC outlet with your own adapter rather than USB ports","If you must use a public USB port, use a USB data blocker device","Never 'Trust' an unknown device when your phone shows the trust prompt during charging","Inspect any gifted cables especially if from a stranger, and stick to reputable branded accessories"],"faq":[{"question":"Is wireless/inductive charging safe from these attacks?","answer":"Wireless charging does not carry data, so it eliminates USB-based attack vectors entirely. It is a safe alternative at public charging stations that offer it."},{"question":"What is a USB data blocker and where can I get one?","answer":"A USB data blocker is a small adapter that passes through power but blocks the data pins. They are widely available from electronics retailers for a few dollars and are worth carrying when travelling."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-two-factor-authentication-and-do-i-really-need-it","url":"https://scamencyclopedia.org/questions/what-is-two-factor-authentication-and-do-i-really-need-it","question":"What is two-factor authentication and do I really need it?","shortAnswer":"Two-factor authentication (2FA) adds a second verification step beyond your password, and yes — it is one of the single most effective steps you can take to protect your accounts.","explanation":"Two-factor authentication works on the principle that even if an attacker steals your password, they still cannot access your account without a second proof of identity. The three classic factors are something you know (your password), something you have (your phone or a hardware key), and something you are (a fingerprint or face scan). 2FA combines at least two of these.\n\nThe most common form is a time-based one-time passcode (TOTP) generated by an authenticator app like Google Authenticator, Authy, or Microsoft Authenticator. These codes change every 30 seconds and are generated on your device — they are not sent over the network and cannot be intercepted by sniffing traffic. This is the recommended form.\n\nSMS-based 2FA is better than nothing but weaker because it is vulnerable to SIM swapping (where the attacker redirects your texts) and SS7-based interception. Most security professionals recommend switching to an authenticator app for any account that supports it.\n\nHardware security keys (YubiKey and similar) are the strongest form — they are physical devices that must be present, are resistant to phishing because they verify the site's domain before responding, and cannot be remotely intercepted. They are the gold standard for high-value accounts.\n\nEnabling 2FA stops the overwhelming majority of automated account takeover attacks, even when your password has been stolen in a breach. If you only do one thing to improve your account security, enabling authenticator-app 2FA on your email and bank accounts is it.","redFlags":["You have not enabled 2FA on your email, banking, or social media accounts","You use SMS as your only 2FA method and your carrier has not added a SIM-lock PIN","Your accounts do not have login notifications enabled"],"whatToDoNow":["Enable 2FA on your email account today — use an authenticator app, not SMS","Enable 2FA on your banking accounts with whatever option they offer","Work through your other key accounts (social media, shopping) and enable 2FA on each","Save backup codes provided during 2FA setup in a secure location offline","If any accounts only offer SMS 2FA, add a SIM-lock PIN with your carrier","Consider a hardware security key for your highest-value accounts"],"faq":[{"question":"What happens if I lose my phone and can't access my authenticator app?","answer":"Save the backup codes provided when you set up 2FA — they allow access without the app. Also consider using Authy, which allows encrypted backups of your 2FA codes accessible from another device."},{"question":"Can an attacker bypass 2FA?","answer":"Sophisticated real-time phishing proxies can capture both your password and your 2FA code simultaneously in a live session and use them before they expire. Hardware security keys that verify the site domain are resistant to this attack."}],"lastReviewed":"2026-06-10"},{"slug":"can-scammer-commit-fraud-using-my-stolen-debit-card-number","url":"https://scamencyclopedia.org/questions/can-scammer-commit-fraud-using-my-stolen-debit-card-number","question":"Can a scammer commit fraud using just my debit card number and expiry date?","shortAnswer":"Yes — card-not-present fraud only requires the card number and expiry date, and often the CVV, all of which are obtainable through phishing, skimming, or data breaches.","explanation":"Online purchases do not require the physical card — only the card number, expiry date, and usually the CVV (the three-digit code on the back). This combination is all a scammer needs to make purchases on many websites. The card details can be obtained through phishing sites, skimming devices attached to ATMs or point-of-sale terminals, data breaches at merchants, or dark web purchases of stolen card data.\n\nDebit cards carry more risk than credit cards in a fraud scenario because they draw directly from your bank account. While most banks have fraud protections and a process for disputing debit card charges, the money leaves your account first and the timeline for getting it back is longer. Credit cards have stronger legal protections in most jurisdictions for unauthorised transactions.\n\nSmall test charges are a common precursor to larger fraud: attackers first run a micro-transaction (often under a dollar) to verify the card is active before using it for bigger purchases. If you see an unexpected tiny charge from an unfamiliar merchant, treat it as a fraud indicator and contact your bank.\n\nReport unauthorised charges to your bank immediately. Most banks will issue a chargeback and replace your card. The fraud window on debit card disputes is time-sensitive — in the US, Regulation E gives stronger protection if you report within two business days of noticing the charge. Document everything.","redFlags":["Small unexplained charges (under a few dollars) appear from unfamiliar merchants","You receive a decline notification for a purchase you didn't attempt","A larger unexpected transaction follows a small unrecognised charge","Your card details may have been entered on a site you're no longer sure was legitimate","You used your card at an ATM or terminal that may have had a skimmer"],"whatToDoNow":["Enable real-time transaction alerts with your bank so you see every charge as it happens","Contact your bank immediately if you see any charge you don't recognise","Ask your bank to cancel the current card and issue a replacement with a new number","Use a virtual card number for online purchases where possible — many banks and services offer this","Prefer credit cards over debit cards for online shopping due to stronger fraud protections","Review all merchant sites where your card is saved and remove it from any you no longer use"],"faq":[{"question":"What is a virtual card number and how does it protect me?","answer":"A virtual card number is a single-use or merchant-locked substitute for your real card number, generated by your bank or a service like Privacy.com. If the virtual number is compromised, your real card is unaffected and the virtual number can be deleted."},{"question":"Do I have to pay for unauthorised charges on my debit card?","answer":"Generally no, provided you report them in a timely manner. In the US, Regulation E limits your liability to zero if reported before any fraudulent transaction occurs, rising to $50 if reported within two business days. Report immediately for the strongest protection."}],"lastReviewed":"2026-06-10"},{"slug":"can-scammer-commit-fraud-if-they-know-my-bank-account-number","url":"https://scamencyclopedia.org/questions/can-scammer-commit-fraud-if-they-know-my-bank-account-number","question":"Can a scammer commit fraud if they know my bank account number and routing number?","shortAnswer":"Yes — account and routing numbers can be used to initiate ACH transfers or create fraudulent checks; however, receiving a direct deposit doesn't expose these numbers to your employer in a way that creates risk.","explanation":"Your bank account number and routing number together are enough to initiate ACH (Automated Clearing House) debit transactions — the electronic transfer system used for direct debits, bill pay, and payroll. A scammer who has these details can potentially set up a fraudulent ACH pull from your account. Many online bill payment systems accept these two numbers with minimal additional verification.\n\nPaper check fraud is another vector: a fraudster can print counterfeit checks bearing your account number and routing number and attempt to cash them or use them for purchases. These same two numbers are printed on every check you write, which is why paper checks remain a fraud risk in a digital age.\n\nHowever, the risk is often overstated for routine situations. Your account number is already shared widely in normal financial activity — it is given to your employer for direct deposit, to utility companies for direct debit, and is printed on checks. The fraud risk emerges when these details fall into the hands of someone who would misuse them.\n\nMonitor your account regularly for small debit transactions you don't recognise. Your bank's ACH dispute process should reverse fraudulent debits, typically within a few business days once reported. If you discover your account details are in circulation through a scam or breach, contact your bank — in severe cases you can close the account and open a new one.","redFlags":["Small unexplained ACH debits appear in your transaction history","A bill pay service you don't use appears in your statement","You receive a notice from your bank about an ACH transaction you didn't initiate","Your check number sequence is disrupted — checks may have been reproduced","You shared your account and routing number with someone who turned out to be fraudulent"],"whatToDoNow":["Enable transaction alerts on your account so ACH debits trigger immediate notifications","Review your recent transaction history for small unrecognised debits","Report any fraudulent ACH transactions to your bank promptly — ask about their dispute process","If your bank details were part of a scam, discuss with your bank whether closing and re-opening the account is advisable","Minimise your use of paper checks — use card payments or bank transfers instead","Be cautious about sharing account and routing numbers with parties you haven't verified"],"faq":[{"question":"My employer has my account and routing number for direct deposit — should I be worried?","answer":"No — this is a standard and necessary part of receiving direct deposits. The risk arises when these details reach an unauthorised person. Payroll data breaches do occur, which is why monitoring is useful."},{"question":"How long do I have to dispute an unauthorised ACH debit?","answer":"Under US Regulation E you have 60 days from the statement date on which the error appeared to dispute it. Earlier reporting generally leads to faster resolution and stronger protection."}],"lastReviewed":"2026-06-10"},{"slug":"can-scammer-use-my-passport-or-drivers-license-details","url":"https://scamencyclopedia.org/questions/can-scammer-use-my-passport-or-drivers-license-details","question":"Can a scammer misuse my passport or driver's license details?","shortAnswer":"Passport and license details enable identity verification fraud — opening financial accounts, applying for loans, or verifying identities on platforms that accept government ID — making them among the most sensitive personal data you hold.","explanation":"Government-issued identity documents carry significant fraud value because many institutions use them as the primary proof of identity. A scammer with your passport number, name, date of birth, and the ability to produce a convincing copy can attempt to verify their identity in your name for financial accounts, online platforms with KYC (know-your-customer) requirements, or even travel-related services.\n\nDriver's license details are used by financial institutions, some employers, and background check services. In the US, your license number combined with state, date of birth, and address can be used in DMV record lookups and some verification APIs. In countries where the driver's license is a common everyday ID, its details are particularly valuable.\n\nBiometric passport data stored on the chip is harder to misuse without the physical document, but the printed data page is enough for many types of fraud. A photo of your passport circulating in a breach or shared carelessly with a scammer provides a fraudster with the data they need to impersonate you in writing.\n\nBe very selective about sharing passport or license copies: use redaction where possible (cover the document number if submitting for a name verification, for example), watermark copies with the purpose and date ('for visa application to X, date Y'), and avoid sending clear copies via unencrypted email or messaging apps. If you know your documents were part of a breach, monitor your credit, alert your financial institutions, and in some cases report to the relevant government passport or licensing authority.","redFlags":["Your passport or license copy was part of a data breach at an institution that holds it","You sent a copy to a party that turned out to be fraudulent","New financial accounts appear on your credit report after your documents were shared","You are denied identity-based services because 'you already have an account'","You receive official communications about applications or registrations you never made"],"whatToDoNow":["Place a credit freeze if your government ID details are confirmed to have been exposed","Contact your financial institutions to alert them and request enhanced identity verification before account changes","File a report with the national identity theft authority if fraud has occurred","In severe cases, contact the issuing authority about placing a flag on your passport or license","Watermark all future ID copies with the purpose, recipient, and date","Monitor credit and government benefit accounts closely for the next two years"],"faq":[{"question":"I sent a photo of my passport to someone who turned out to be a scammer. What now?","answer":"Act as though your identity details are now in circulation: place a credit freeze, alert your bank, and file a report with your national identity theft authority. The sooner you act, the more damage you can prevent."},{"question":"Can I get a new passport number if mine was compromised?","answer":"You can apply for a new passport, which will carry a new number. Report the compromise to your passport authority — in some countries they can flag the old number as compromised."}],"lastReviewed":"2026-06-10"},{"slug":"can-scammer-intercept-my-text-messages","url":"https://scamencyclopedia.org/questions/can-scammer-intercept-my-text-messages","question":"Can a scammer intercept my text messages?","shortAnswer":"In targeted scenarios, SS7 network vulnerabilities and SIM swapping allow interception of SMS; for most people the risk is lower-tech: malware on your device or access to linked accounts that sync messages.","explanation":"The SS7 protocol is the backbone of the global telephony network and has known security weaknesses that allow sophisticated actors — typically nation-state level or criminal enterprises with network access — to intercept calls and texts by targeting a specific phone number. This is not a threat most people face from opportunistic scammers; it requires resources and access unavailable to most fraudsters.\n\nSIM swapping redirects all your calls and texts to a SIM the attacker controls. This is a more accessible attack available to any scammer who can socially engineer your carrier into performing the swap. Once successful, the attacker receives your SMS messages, including OTPs.\n\nAt the device level, malware (particularly stalkerware) installed on your phone can read your messages in real time and send them to a remote server. This is a significant risk in targeted situations, particularly domestic abuse contexts.\n\nFor iMessage users synced to iCloud, and Android users with Google Messages backing up to Google Drive: if your cloud account is compromised, your messages can be read remotely without touching your phone. Protecting your Apple ID or Google account is therefore also protecting your messages.\n\nFor sensitive communications, end-to-end encrypted messaging apps — Signal being the gold standard — are designed so that only the sender and recipient can read messages, with no interception possible even at the network level.","redFlags":["You suspect a SIM swap has occurred and your service is gone","Someone has knowledge of text message content they shouldn't have access to","Stalkerware is suspected on your device","Your iCloud or Google account may be compromised","You are receiving OTPs for accounts you weren't logging in to"],"whatToDoNow":["For sensitive communications, switch to Signal or another end-to-end encrypted messaging app","Secure your iCloud or Google account with a strong password and authenticator-app 2FA","Add a SIM-lock PIN with your carrier to prevent SIM swaps","Check for stalkerware if you suspect someone installed monitoring software on your device","Replace SMS-based 2FA with an authenticator app on your key accounts","If a SIM swap occurred, contact your carrier's fraud team immediately"],"faq":[{"question":"Is WhatsApp safe from message interception?","answer":"WhatsApp uses end-to-end encryption for messages, so network-level interception should not reveal content. The vulnerabilities with WhatsApp are at the device level (malware, device access) and through backups (which may be unencrypted in older versions)."},{"question":"If I use Signal, are my messages completely safe?","answer":"Signal offers the strongest publicly available messaging privacy. Messages are end-to-end encrypted and Signal stores minimal metadata. The remaining risks are physical device access and the recipient's device security."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-money-mule-and-could-i-accidentally-become-one","url":"https://scamencyclopedia.org/questions/what-is-a-money-mule-and-could-i-accidentally-become-one","question":"What is a money mule and could I accidentally become one?","shortAnswer":"A money mule unknowingly or knowingly transfers stolen money through their own bank account; scammers recruit mules through fake job offers, romance relationships, or lottery wins — and being used as a mule can result in account freezes, credit damage, and criminal charges.","explanation":"Money mules are individuals whose bank accounts are used as relay points for fraud proceeds. Scammers need to move stolen money quickly across accounts to obscure its origin before withdrawing it, and using a real person's genuine bank account makes the trail harder to follow. The mule may receive funds and be instructed to send them on by wire transfer, cryptocurrency, or gift cards, keeping a 'commission' as payment.\n\nUnwitting mules are recruited through convincing deceptions. Work-from-home job scams offer a 'payment processing' role where your only task is to receive funds and send them on. Romance scam victims may be asked to help their 'partner' receive and forward money they can't access themselves. Lottery and overpayment scams send a fraudulent check for more than the 'winnings' and ask you to wire back the overpayment — when the check bounces weeks later, you are liable for the full amount.\n\nThe consequences for mules — even unwitting ones — can be severe. Banks typically freeze and close accounts used in money mule activity. The frozen funds may be seized. Credit reports and banking history can be affected for years, making it harder to open new accounts. In cases where law enforcement determines the person acted knowingly or recklessly, criminal charges for money laundering are possible.\n\nThe common thread in recruitment is always the same: you are asked to receive money from a third party and send it somewhere else, keeping a percentage. Legitimate employers never operate this way.","redFlags":["A job offer pays you to receive funds and forward them to another account","A romantic partner asks you to receive money on their behalf and send it elsewhere","You receive a check for more than expected and are asked to return the difference","You are asked to withdraw cash at an ATM and send it via money transfer","Instructions involve gift cards, cryptocurrency, or wire transfers to unfamiliar parties","The 'employer' communicates only via messaging apps and cannot be independently verified"],"whatToDoNow":["Stop participating immediately if you realise you may be acting as a money mule","Contact your bank and explain the situation — being transparent is better than waiting for them to discover it","Keep all communications and transaction records as documentation","Report the situation to your national cybercrime authority","Do not keep any 'commission' — it is proceeds of crime","Seek legal advice if you are concerned about your criminal exposure — early disclosure is generally viewed more favourably"],"faq":[{"question":"I already forwarded money — can I get it back?","answer":"Probably not from the recipient. If you sent money from your own account expecting to be reimbursed and haven't been, contact your bank about a wire recall — success depends on speed and whether the recipient account still holds funds."},{"question":"Can I be charged with a crime if I was genuinely deceived?","answer":"Being deceived is a relevant fact but does not automatically provide a complete legal defence in all jurisdictions. Acting quickly, cooperating with authorities, and keeping records all support a case for unwitting involvement. Seek legal advice."}],"lastReviewed":"2026-06-10"},{"slug":"can-scammer-take-loans-or-credit-out-in-my-name","url":"https://scamencyclopedia.org/questions/can-scammer-take-loans-or-credit-out-in-my-name","question":"Can a scammer take out loans or credit cards in my name?","shortAnswer":"Yes — with enough personal data (name, SSN, DOB, address) fraudsters apply for credit and loans in your name; a credit freeze is the most reliable prevention.","explanation":"Fraudulent credit applications are among the most damaging forms of identity theft because they affect your credit file, can lead to debt collection, and may take considerable time and documentation to dispute. Scammers obtain the necessary personal data through data breaches, phishing, purchasing from dark web markets, or by piecing together information from multiple public sources.\n\nOnline credit applications are particularly vulnerable because many lenders perform only automated checks. Synthetic identity fraud — where the attacker combines real and fabricated details, such as your SSN with a different name and address — is a growing variant that can be harder to detect on your credit report because the fabricated identity doesn't exactly match you.\n\nThe damage extends beyond the fraudulent debt itself. New credit inquiries lower your credit score. Collections from unpaid fraudulent accounts appear on your report. Negative history from accounts you didn't open can remain for seven years unless successfully disputed. The dispute process typically requires a police report, identity theft affidavit, and correspondence with each creditor and credit bureau.\n\nA credit freeze (also called a security freeze) is the most reliable prevention: it prevents any new credit file from being accessed for lending decisions, meaning a lender cannot approve a new account in your name unless you temporarily lift the freeze. It is free in most countries and can be implemented and lifted quickly online.","redFlags":["Hard credit inquiries appear from lenders you never contacted","New credit accounts show on your credit report that you didn't open","Collection notices arrive for debts on accounts you don't recognise","You are declined for credit for no reason you can identify","Your credit score drops suddenly without any change in your own accounts"],"whatToDoNow":["Pull your free credit report from all major bureaus and review every account and inquiry","Place a credit freeze with each bureau — Equifax, Experian, and TransUnion in the US","Dispute any fraudulent accounts by sending written disputes to each bureau with your FTC report number","File an identity theft report at IdentityTheft.gov and with your local police","Contact each creditor where a fraudulent account was opened and provide documentation","Set up credit monitoring alerts to catch any new inquiries or account openings"],"faq":[{"question":"How long does it take to remove fraudulent accounts from my credit report?","answer":"Credit bureaus have 30 days to investigate a dispute (45 days if initiated with documentation). Complex cases involving multiple fraudulent accounts may take several months. Persistence and clear documentation are key."},{"question":"Will a credit freeze prevent me from getting credit I legitimately want?","answer":"Only if you forget to lift it first. Most bureaus allow you to lift a freeze online within minutes, approve a specific lender's request, then re-freeze. It is a minor inconvenience for strong protection."}],"lastReviewed":"2026-06-10"},{"slug":"can-scammer-gain-access-through-a-fake-browser-extension","url":"https://scamencyclopedia.org/questions/can-scammer-gain-access-through-a-fake-browser-extension","question":"Can a scammer gain access to my accounts through a fake browser extension?","shortAnswer":"Yes — malicious browser extensions can read everything you type in your browser, including passwords and payment details, and capture session cookies that allow account access without needing your password.","explanation":"Browser extensions have deep access to your browsing session by design — they can read and modify page content, capture form inputs, and access cookies. When that access is granted to a malicious or compromised extension, the consequences are serious.\n\nMalicious extensions typically enter browser stores disguised as useful tools: PDF converters, ad blockers, screenshot utilities, VPNs, or productivity tools. Some start legitimate and later push malicious updates after building a user base. Others are outright fakes riding on the name of a popular extension with minor spelling variations.\n\nSession cookie theft is particularly effective: your browser stores session tokens (cookies) that keep you logged in to sites. An extension with the right permissions can exfiltrate these tokens to an attacker's server, allowing them to impersonate your logged-in session on that site without knowing your password — even bypassing 2FA on sites that only require 2FA at the initial login.\n\nKeylogging extensions capture what you type on any page, including passwords, credit card numbers, and any private messages. They can also read the DOM of any page you visit, extracting any displayed data.\n\nInstall only extensions you genuinely need, from developers you can verify. Check the permissions an extension requests before installing — an extension that asks to 'read and change all data on websites you visit' should be scrutinised carefully. Regularly audit your installed extensions and remove any you no longer use.","redFlags":["An extension requests permissions that seem excessive for its stated purpose","You installed an extension from a source other than the official Chrome Web Store, Firefox Add-ons, or similar official store","An extension you have prompts you to update and asks for new, broader permissions","Accounts show unexpected activity after you installed a new extension","You see ads or redirects in your browser that were not there before installing an extension","An extension was installed without your knowledge — check your extension list"],"whatToDoNow":["Open your browser's extension manager and review every installed extension — remove anything unnecessary","If you find a suspicious extension, remove it, then change passwords for accounts you were logged into","Sign out all sessions on your key accounts to invalidate any captured session cookies","Enable 2FA on your key accounts so session cookie theft requires more than just the cookie","Only install extensions from verified developers with clear privacy policies","Run a malware scan to check whether any browser settings were also modified"],"faq":[{"question":"How do I audit my browser extensions safely?","answer":"Go to your browser's extension or add-on manager. For each extension, click 'Details' or 'Manage' to see the permissions it holds. If you don't recognise an extension or cannot find the developer's legitimate website, remove it."},{"question":"Can a malicious extension access my password manager's stored passwords?","answer":"A well-designed password manager extension encrypts its vault and typically protects it with a master password separate from your browser session. However, if the password manager is open and autofilling, a malicious extension that can read page content may capture the filled-in credentials."}],"lastReviewed":"2026-06-10"},{"slug":"can-someone-spy-on-me-using-a-smart-speaker","url":"https://scamencyclopedia.org/questions/can-someone-spy-on-me-using-a-smart-speaker","question":"Can someone spy on me through a smart speaker or smart TV?","shortAnswer":"Smart speakers listen for wake words locally and may occasionally send clips to cloud servers; smart TVs can have microphones and cameras; both can be monitored if the associated account is compromised.","explanation":"Smart speakers (Amazon Echo, Google Nest, Apple HomePod) are designed with a local wake-word detector that continuously listens for its trigger phrase without sending data to the cloud. Once the wake word is detected, the following request is sent to the manufacturer's servers. These are legitimate, documented behaviours. Where the privacy risk sits is in false activations — sounds that resemble the wake word — and in whether those clips are reviewed by human contractors for quality improvement (most manufacturers now offer an opt-out).\n\nFor smart TVs, the picture is more varied. Many smart TVs have built-in microphones for voice search and some have cameras (especially older models with gesture control or video calling features). Some smart TV operating systems include Automatic Content Recognition (ACR), which samples what you're watching and sends it to advertising networks. These are tracked and disclosed in privacy policies, but many users are unaware of them.\n\nThe more realistic spy scenario is account compromise: if someone gains access to your Amazon, Google, or Apple account, they can review your voice history, see your smart home device activity, and in some cases configure devices remotely. Protecting your cloud account with a strong password and 2FA is therefore relevant to smart device privacy.\n\nPractical steps: mute the microphone on your smart speaker when not in use (most have a physical mute button), review and delete your voice history periodically, disable ACR in your smart TV settings, and use separate strong passwords for your smart home accounts.","redFlags":["Your smart speaker activates frequently without you saying the wake word","Someone knows details of your home conversations that were not shared elsewhere","Your smart home account shows logins from unrecognised devices","Your smart TV was not set up with an account but shows personalised ads based on your viewing"],"whatToDoNow":["Enable two-factor authentication on your smart speaker's associated account (Amazon, Google, Apple)","Review and delete your voice history in the provider's privacy settings","Physically mute the microphone on smart speakers when having sensitive conversations","Find and disable ACR (Automatic Content Recognition) in your smart TV's privacy or picture settings","Check for and disable the camera on smart TVs that have one, if you don't use video features","Review connected devices in your smart home account and remove any you don't recognise"],"faq":[{"question":"Can I completely prevent my smart speaker from sending voice data to the cloud?","answer":"Using the physical mute button prevents wake-word activation entirely. Some devices offer local processing options, but cloud connectivity is core to their function. If full privacy is a priority, a non-networked smart assistant or offline voice assistant may be preferable."},{"question":"Should I cover the camera on my smart TV?","answer":"If your TV has a camera and you don't use video calling features, covering it with a small sticker is a reasonable precaution at zero cost."}],"lastReviewed":"2026-06-10"},{"slug":"how-do-i-remove-my-personal-information-from-the-internet","url":"https://scamencyclopedia.org/questions/how-do-i-remove-my-personal-information-from-the-internet","question":"How do I remove my personal information from the internet?","shortAnswer":"You can reduce your online footprint by submitting opt-out requests to data brokers, requesting removal from Google search results, deleting unused accounts, and tightening social media privacy settings — full removal is impossible but meaningful reduction is achievable.","explanation":"Complete erasure of your personal information from the internet is not realistic — data spreads to many sources and much of it is beyond your direct control. But a targeted campaign to reduce your exposure can significantly lower your risk of targeted scams, identity fraud, and privacy violations.\n\nData brokers are companies that collect, aggregate, and sell personal information — name, address, relatives, phone numbers, workplace history. They draw on public records, social media, and purchased datasets. Most have opt-out processes, though they vary in responsiveness. Sites like Whitepages, Spokeo, BeenVerified, Intelius, and dozens of others all operate this way. You can submit opt-out requests manually, use a service like DeleteMe or Privacy Bee to do it on your behalf, or follow freely available opt-out guides from organisations like Privacy Rights Clearinghouse.\n\nSearch engine removal requests allow you to ask Google and Bing to remove specific search results from their indexes — not from the underlying site, but from search results. Google offers a removal request tool for certain categories including personal information in some jurisdictions (EU right to be forgotten, US 2023 policy updates). These do not remove data from the source site.\n\nDeleting old, unused accounts removes potential breach exposure and reduces data broker input. Use a service like JustDeleteMe to find deletion links for major platforms.\n\nSocial media is a significant source for data brokers and scammers. Make profiles private, remove birth date and phone number from public views, and reconsider which information you post publicly.","redFlags":["Your address, phone number, and relatives appear in data broker search results","You receive highly personalised scam messages referencing your real name, employer, or address","You found your personal details published on a website without your consent","Your old email addresses appear in data broker databases"],"whatToDoNow":["Search your name on Google and note which data broker sites surface your information","Submit opt-out requests to the top data brokers — prioritise those that appear first in search","Request removal from Google Search for pages containing your personal details using their removal tool","Delete accounts on services you no longer use (haveibeenpwned.com shows which services may have your data)","Set social media profiles to private and remove your phone number and address from public profile fields","Consider a paid data removal service if the manual process is too time-consuming"],"faq":[{"question":"Do I need to pay for data removal services?","answer":"No — you can do it manually for free. Paid services save time by automating repeat opt-out submissions (data brokers often re-add your information after a few months). Whether the time savings justifies the cost is a personal decision."},{"question":"How long does data broker opt-out take to process?","answer":"Most brokers remove listings within a few days to four weeks of a valid opt-out request. Some are faster; a few require follow-up. Re-check after 60 days as data can be re-added."}],"lastReviewed":"2026-06-10"},{"slug":"can-scammer-use-ai-to-clone-my-voice","url":"https://scamencyclopedia.org/questions/can-scammer-use-ai-to-clone-my-voice","question":"Can a scammer use AI to clone my voice and commit fraud?","shortAnswer":"Yes — AI voice cloning tools can produce convincing replicas of your voice from short recordings, and scammers use them in family emergency scams, business fraud, and audio deepfakes.","explanation":"AI voice synthesis has advanced to the point where a convincing clone of someone's voice can be created from only a few seconds to a few minutes of recorded speech. These recordings are readily available for anyone with a public social media presence, a YouTube channel, a podcast, or any other medium where they speak on record.\n\nThe most commonly reported use is the grandparent or family emergency scam: a caller uses a cloned voice that sounds like a relative (typically a young adult family member) to report an emergency — arrested, in a car accident, in need of urgent money. Because the voice sounds genuinely familiar, victims are significantly more likely to comply.\n\nIn business contexts, voice cloning has been used to impersonate executives on phone calls or voice messages, authorising financial transfers. CEO fraud, already a high-value category, is now enhanced by voice authenticity.\n\nVerification tactics defeat most voice clone attacks: establish a family safe word that only real family members know, and always call the person back on a number you already have for them (not the one provided by the caller). For business calls requesting unusual financial actions, always verify through an independent, pre-established channel.\n\nThis is a fast-moving area. The appropriate response is process-level verification (call back, safe words, dual authorisation for transfers) rather than trying to detect deepfakes by ear.","redFlags":["A call arrives from a 'family member' in an emergency situation asking for money","The voice sounds right but the story is urgent and involves wire transfer, gift cards, or cryptocurrency","The caller refuses to let you hang up and call back on the number you have for the person","An 'executive' voice message or call authorises an unusual financial transfer","The person calling claims to be someone you know but hesitates at personalised verification questions"],"whatToDoNow":["Establish a family safe word that only real family members know — use it to verify emergency calls","Hang up on suspected voice clone calls and call the person back on their known number independently","Never transfer money, buy gift cards, or wire funds based solely on a voice call without independent verification","Limit the publicly available recordings of your voice where practical","For businesses, implement dual-authorisation procedures for any financial transfer requests received by phone","Alert elderly family members to the existence of voice cloning scams — they are primary targets"],"faq":[{"question":"Can I tell by listening whether a voice has been AI-cloned?","answer":"Sometimes there are artefacts — slight robotic quality, unusual pauses, or unnatural breathing — but modern systems are improving rapidly. Do not rely on detecting fakes by ear; use process verification instead."},{"question":"What is a family safe word and how does it work?","answer":"A family safe word is a pre-agreed secret word or phrase that any family member can use to verify their identity in an emergency call. Because a scammer does not know the word, they cannot pass this verification."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-sim-swapping-and-how-do-i-prevent-it","url":"https://scamencyclopedia.org/questions/what-is-sim-swapping-and-how-do-i-prevent-it","question":"What is SIM swapping and how do I prevent it?","shortAnswer":"SIM swapping is when a fraudster convinces your mobile carrier to transfer your phone number to a SIM they control, giving them your calls and texts including banking OTPs; prevention centres on a carrier SIM-lock PIN and switching to authenticator-app 2FA.","explanation":"SIM swapping exploits the carrier's account recovery process. When a customer reports a lost or damaged phone, a carrier employee will transfer the customer's number to a new SIM. Scammers call carriers pretending to be the account holder, armed with personal details gathered from data breaches, social media, or phishing. If they convince the agent to perform the swap, they gain control of the victim's phone number.\n\nWith the number under their control, the attacker receives all calls and SMS messages, including the one-time passcodes that banks and other services send for login verification or transaction approval. Combined with passwords obtained through phishing or credential stuffing, this defeats SMS-based two-factor authentication.\n\nThe window between the swap and the victim realising their service is gone can be as little as a few hours — time for an attacker to access banking, email, and other accounts, change recovery details, and initiate transfers.\n\nCarrier-side prevention: ask your carrier to add a SIM-lock PIN, verbal password, or port-freeze flag to your account. This means any future SIM change request — legitimate or fraudulent — requires providing this code. In some countries, number portability regulations also allow you to request a number-port lock with your carrier.\n\nAccount-side prevention: switch every account from SMS-based 2FA to an authenticator app or hardware key. A SIM swap cannot intercept TOTP codes generated on a physical device the attacker doesn't have.","redFlags":["Your phone loses service and shows 'No service' or 'SIM not registered' unexpectedly","You stop receiving texts and calls with no explanation","Your carrier sends an email or text confirming a SIM change you didn't request","OTP codes start arriving for accounts you weren't accessing","You are locked out of accounts minutes after losing phone service"],"whatToDoNow":["Call your carrier and add a SIM-lock PIN or verbal security code to your account today","Ask your carrier about a 'port freeze' or 'number lock' feature if available","Switch all SMS-based 2FA accounts to authenticator apps or hardware security keys","Set up login notifications on your key accounts so you are alerted to any access","If a swap happens, call your carrier's fraud line immediately for an emergency port reversal","Change passwords for key accounts from a different device if a swap is suspected"],"faq":[{"question":"Are some carriers better at preventing SIM swaps than others?","answer":"Yes — carriers vary significantly in their identity verification requirements for SIM changes. Research your specific carrier's security options and escalate if you are unhappy with the protections offered."},{"question":"I have a SIM-lock PIN — am I now protected from SIM swapping?","answer":"A SIM-lock PIN is a strong deterrent and significantly raises the bar for an attacker. It is not infallible — a social engineering attempt that bypasses the PIN check is possible but much harder. Combine it with authenticator-app 2FA for defence in depth."}],"lastReviewed":"2026-06-10"},{"slug":"can-scammer-commit-identity-fraud-with-my-date-of-birth","url":"https://scamencyclopedia.org/questions/can-scammer-commit-identity-fraud-with-my-date-of-birth","question":"Can a scammer commit identity fraud with just my date of birth?","shortAnswer":"Your date of birth alone is rarely enough, but combined with your name and other identifiers it significantly assists verification fraud, account recovery attacks, and social engineering of institutions.","explanation":"Date of birth is used extensively as a verification question by banks, healthcare providers, government agencies, and other institutions. 'Please verify your date of birth' is a standard customer service security check. Alone, it provides little — but in combination with your name, address, and either a partial account number or government ID number, it can be enough to pass telephone-based verification.\n\nAccount recovery attacks are one practical risk: if your bank's identity verification over the phone relies on name, date of birth, and the last four digits of your SSN — all of which may be available from different breach sources — a determined attacker can pass that check. Healthcare providers frequently use date of birth as a primary identifier, enabling medical identity theft.\n\nSocial engineering is enhanced when the attacker can answer the 'security question' correctly. Date of birth is particularly susceptible because many people post it publicly on social media (including Facebook birthday reminders) without considering it a sensitive detail.\n\nRemove your date of birth from public social media profiles. Be aware that every institution that uses date of birth for verification should ideally have additional verification layers. When setting up accounts, the 'date of birth' security question — if offered — is one that can be answered with a memorable but fictional date stored in your password manager, providing slightly better security than your real date.","redFlags":["Your date of birth is publicly visible on social media profiles","You receive calls or messages referencing your correct birth date from unsolicited contacts","Account activity shows changes you didn't make after an institution using DOB verification was involved","Your date of birth appeared in a data breach alongside your name and address"],"whatToDoNow":["Remove or restrict visibility of your date of birth on Facebook and other social media","Use a fictional but memorable date as an answer to 'date of birth' security questions in non-critical contexts","Review which institutions use date of birth as a primary verification factor and add additional security where possible","Place a fraud alert with credit bureaus if your DOB was part of a confirmed breach alongside other identifiers"],"faq":[{"question":"Is it safe to enter my date of birth on a legitimate government or banking website?","answer":"Yes — providing your real date of birth during a legitimate account setup is appropriate and necessary. The concern is public display of your DOB and its use in weak verification challenges."},{"question":"My date of birth is already everywhere — what should I prioritise?","answer":"Focus on adding stronger verification (2FA, SIM-lock PINs) to your most critical accounts so that your DOB alone or in combination with other leaked data is not sufficient to defeat your account security."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-keylogger-and-how-do-i-detect-one","url":"https://scamencyclopedia.org/questions/what-is-a-keylogger-and-how-do-i-detect-one","question":"What is a keylogger and how would I know if one is on my device?","shortAnswer":"A keylogger records every keystroke you make, capturing passwords and personal data; most keyloggers arrive via malware and can be detected through security software and careful monitoring of unusual device behaviour.","explanation":"A keylogger is a piece of software (or in rare cases hardware) that records every key you press and sends those logs to an attacker. Because everything you type passes through it — passwords, credit card numbers, messages, search queries — a keylogger is among the most comprehensive data-theft tools.\n\nSoftware keyloggers typically arrive bundled with malware from malicious downloads, phishing email attachments, or infected websites exploiting browser vulnerabilities. They operate silently in the background and may run as a process disguised with a legitimate-sounding name. Some are packaged within pirated software, games, or utilities available from unofficial sources.\n\nHardware keyloggers are physical devices plugged between a keyboard and a computer, or built into a malicious keyboard or USB device. These are typically used in targeted attacks in shared-access environments (offices, shared computers, hotel business centres).\n\nDetection: reputable antivirus and anti-malware software catches most software keyloggers during scheduled scans. Signs of an active keylogger can include slightly increased CPU usage, higher than normal background data transmission, and disk activity when you're not actively doing anything. Task Manager (Windows) or Activity Monitor (Mac) can reveal suspicious processes, though well-designed keyloggers may disguise themselves.\n\nIf you suspect a keylogger, run a full malware scan, then change all your passwords from a clean device after the suspected keylogger is removed. On shared computers (libraries, hotels), never enter passwords — use your phone or a trusted personal device instead.","redFlags":["You downloaded software from an unofficial source and notice unusual device behaviour after","You opened an email attachment and your computer started behaving differently","CPU or disk usage is elevated when the device appears idle","Passwords to your accounts were used without your knowledge after you typed them on a specific device","You used a public or shared computer to log in to sensitive accounts"],"whatToDoNow":["Run a full malware scan with an up-to-date security tool (Malwarebytes, Windows Defender Offline)","If keylogger malware is found, remove it, then change all passwords from a clean device","Never enter passwords on public or shared computers — use your own device","Inspect USB ports on any computer in a shared environment for physical keylogger devices","Consider using a password manager with auto-fill — this types for you rather than using keyboard input, bypassing some keylogger designs","Keep OS and browser updated to close the vulnerabilities keyloggers exploit"],"faq":[{"question":"Does a password manager protect me from keyloggers?","answer":"Partially. Password managers auto-fill credentials without keyboard strokes in many cases, which can bypass keystroke-based keyloggers. However, some advanced keyloggers capture clipboard content and form data rather than just keystrokes."},{"question":"Are hardware keyloggers common?","answer":"Very rare for most consumers. They primarily appear in targeted attacks on specific individuals or in tampered shared terminals. Physical inspection of unfamiliar USB devices and keyboards in shared environments is sufficient protection."}],"lastReviewed":"2026-06-10"},{"slug":"should-i-use-a-password-manager-after-a-scam","url":"https://scamencyclopedia.org/questions/should-i-use-a-password-manager-after-a-scam","question":"Should I use a password manager and which type is safest after a scam?","shortAnswer":"Yes — a reputable password manager is one of the most effective security tools available; after a scam it helps you replace all exposed credentials systematically with strong, unique passwords.","explanation":"A password manager generates, stores, and auto-fills strong unique passwords for every site you use, meaning a breach at any single service never cascades to others. After a scam or breach, its most immediate value is that it helps you work through all affected accounts systematically, replacing every reused or weak password with a strong generated one.\n\nThe main types are: cloud-based managers (Bitwarden, 1Password, Dashlane) that sync across all your devices via encrypted vault storage; local or device-based managers (KeePass, Apple Keychain, browser-built-in) that store your vault on your device; and hardware-integrated solutions (tied to a physical key).\n\nCloud-based managers have the advantage of syncing across devices so your passwords are available on phone, laptop, and tablet. They use strong encryption (the vault is unreadable even to the provider without your master password). The risk is that if the provider experiences a breach, the encrypted vault may be exposed — though it remains secure as long as your master password is strong and unique. The LastPass breach of 2022 is the prominent cautionary example where vaults were stolen; users with weak master passwords were at elevated risk.\n\nLocal-only managers like KeePass eliminate cloud exposure but require you to manage backups. Browser-built-in managers (Chrome, Safari, Firefox) are convenient but tie your credentials to the browser vendor's security. A separate dedicated password manager is generally recommended for high-stakes security.\n\nThe most important step is simply to start using one — any reputable option is dramatically better than reusing passwords.","redFlags":["You reuse the same password or small variations across multiple accounts","You recently experienced a scam where a password was exposed","Your email appeared in a breach database","You cannot confidently say you have unique passwords across your key accounts"],"whatToDoNow":["Choose a reputable password manager (Bitwarden is free, open source, and well-audited; 1Password is a strong paid option)","Set a strong, memorable master password that you have never used elsewhere","Import or manually add your existing accounts and let the manager generate new unique passwords for each","Start with your email, banking, and social media accounts, then work through remaining accounts","Enable 2FA on your password manager account itself","Store your master password recovery method safely offline"],"faq":[{"question":"What if I forget my master password?","answer":"Most password managers provide a recovery method — an emergency kit, recovery codes, or a trusted contact recovery option. Set this up when you create your account and store it somewhere physically secure."},{"question":"Is it safe to store my banking passwords in a password manager?","answer":"Yes — a properly implemented password manager with a strong master password is much safer than the alternative of reusing weak passwords or writing them down. The encryption used by reputable managers is robust."}],"lastReviewed":"2026-06-10"},{"slug":"can-scammer-misuse-my-medical-records","url":"https://scamencyclopedia.org/questions/can-scammer-misuse-my-medical-records","question":"Can a scammer misuse my medical records or health insurance information?","shortAnswer":"Yes — medical identity theft involves fraudsters using your insurance details to receive healthcare services or file false claims; it can corrupt your medical records and result in bills for treatment you never received.","explanation":"Medical identity theft is among the most complex and damaging forms of identity fraud to resolve. Healthcare data is valuable on dark web markets because it can be used to obtain prescription drugs, medical equipment, or healthcare services billed to your insurance. Unlike financial fraud, medical fraud can corrupt your medical records — an attacker who receives treatment under your identity may introduce their blood type, allergies, medications, or diagnoses into your records, creating a patient safety risk if you later need emergency care.\n\nHealth insurance credentials — insurer name, policy number, and group number — are the primary target. These are obtained through insurer data breaches, healthcare provider breaches, or phishing attacks targeting healthcare portals. Fraudulent claims filed against your policy may exhaust your lifetime benefit limits or trigger audits that delay legitimate care.\n\nSigns are often delayed: you may receive an Explanation of Benefits (EOB) from your insurer for services you never received, get a bill from a provider you've never visited, or only discover the fraud when your insurer flags unusual claim patterns. Some victims only discover medical identity theft when a debt collector contacts them or when a provider refuses care because 'your insurance was already used today'.\n\nActions: review every EOB from your insurer promptly and question any service you don't recognise. Request your medical records from providers annually to check for unfamiliar treatments. Contact your insurer's fraud department immediately if you spot suspicious claims. As a precaution after a healthcare data breach, request that your insurer add a note to your account requiring additional verification before processing claims.","redFlags":["An Explanation of Benefits arrives for a medical service or prescription you didn't receive","A bill arrives from a healthcare provider you've never visited","Your insurer contacts you about a claim for a date when you weren't receiving care","A provider tells you your insurance was already used today for a different patient","Your medical records include treatments, medications, or diagnoses you don't recognise"],"whatToDoNow":["Review your EOBs each time they arrive and question anything unfamiliar","Request your medical records from providers you regularly use and review for inaccuracies","Contact your insurer's fraud department immediately if you find suspicious claims","File a report with the FTC and with the US Department of Health and Human Services (OCR) if your health data was part of a HIPAA breach","Request that your insurer add extra verification steps before processing future claims under your policy","Correct fraudulent entries in your medical records by submitting a written amendment request to each provider"],"faq":[{"question":"How do I get my medical records to check for fraudulent entries?","answer":"Under HIPAA (US) you have the right to request copies of your medical records from any provider. Most providers allow requests online or by form. There may be a copying fee but it is often waived for an initial records request."},{"question":"Can medical identity theft affect my future healthcare?","answer":"Yes — fraudulent diagnoses, medications, or blood type entries can affect treatment decisions in emergencies. This is why correcting medical records promptly is as important as resolving the financial aspects."}],"lastReviewed":"2026-06-10"},{"slug":"what-to-do-if-a-scammer-has-my-home-address","url":"https://scamencyclopedia.org/questions/what-to-do-if-a-scammer-has-my-home-address","question":"What should I do if a scammer has my home address?","shortAnswer":"Knowing your address enables mail fraud, physical threats, and combined identity attacks; monitor your mail, alert your household, and take steps to reduce public display of your address.","explanation":"A scammer who has your home address alone cannot do very much financially, but it becomes a serious concern when combined with other personal details or as part of stalking, harassment, or physical intimidation. The practical fraud risks include mail redirection (redirecting your deliveries to intercept cards, statements, and documents), fraudulent documents using your address, and acting as one piece of a larger identity theft package.\n\nMail redirection fraud is the most immediate financial risk: someone submits a change-of-address request to the postal service in your name, diverting your mail — including bank correspondence, card replacements, and government documents — to an address they control. You may not notice until you expect mail that doesn't arrive. Monitor your mail flow and contact your postal service if regular deliveries stop.\n\nIn a doxxing context, your address shared publicly enables harassment, swatting (falsely reporting a serious emergency to send armed police to your home), and physical intimidation. If you believe you are a target for this type of attack, contact local law enforcement and consider whether publicising your home address on any platforms needs to be reduced.\n\nFor combined fraud risk: if your address appears alongside your SSN, name, and date of birth in a breach, treat it as a full identity exposure. Freeze your credit and monitor your accounts.\n\nFor most people the immediate steps are monitoring mail, being alert to packages or correspondence that doesn't arrive, and submitting opt-out requests to data broker sites that list your address.","redFlags":["Regular mail stops arriving without explanation","A postal change-of-address confirmation arrives that you didn't request","Bank correspondence, cards, or statements you were expecting don't arrive","Your address appears prominently on data broker sites alongside other personal details","You receive communications from people suggesting they know where you live and intend to visit"],"whatToDoNow":["Contact your postal service to verify no change-of-address request has been placed on your address","Submit opt-out requests to data broker sites that display your home address","Sign up for USPS Informed Delivery (US) or your country's equivalent to monitor expected mail","Alert your household members to be cautious about unsolicited visitors or deliveries","If you receive threatening communications referencing your address, report to local police","If your address was part of a larger data exposure, place a credit freeze and review your full identity exposure"],"faq":[{"question":"Should I move house if a scammer has my address?","answer":"For the vast majority of people, moving is not necessary or practical. Focus on monitoring your mail, reducing the public availability of your address, and if there is a genuine physical threat, consult law enforcement."},{"question":"Can I place a mail hold or redirect myself to counteract a fraudulent redirect?","answer":"Yes — many postal services allow you to manage your mail digitally. Registering with USPS Informed Delivery (US) or similar services gives you visibility into incoming mail and the ability to manage redirects yourself, catching any fraudulent ones."}],"lastReviewed":"2026-06-10"},{"slug":"can-i-sue-a-scammer-in-civil-court","url":"https://scamencyclopedia.org/questions/can-i-sue-a-scammer-in-civil-court","question":"Can I sue a scammer in civil court to recover my money?","shortAnswer":"Yes, you can file a civil lawsuit against a scammer, but collecting a judgment is often very difficult if they are anonymous, overseas, or have no assets — this is general information, not personalised legal advice.","explanation":"Civil courts can award you a judgment against a scammer, but a judgment is only as valuable as the defendant's ability and willingness to pay it. If the scammer used a fake name, operated from abroad, or has already dissipated the funds, winning the case may still leave you with nothing in practice.\n\nFor smaller losses, small claims court is accessible, low-cost, and does not normally require a lawyer. Each country and state sets its own small claims limit — typically between £1,000 and £10,000 in the UK or $2,500–$25,000 in US states. You file a claim, serve the defendant, attend a hearing, and a magistrate or judge issues a decision, usually within a few weeks.\n\nFor larger amounts or when the scammer is a traceable business, a civil solicitor or attorney can advise on asset-freezing injunctions, third-party disclosure orders against banks, and cross-border enforcement treaties. These avenues cost money upfront, so it is worth weighing likely recovery against legal fees before proceeding.\n\nThis is general information only and does not constitute legal advice for your specific situation. Always consult a qualified legal professional who can assess the full facts of your case.","redFlags":["Scammer used an untraceable alias or burner phone number","Payment was made in cryptocurrency or gift cards — very hard to reverse","Scammer is located in a country with no mutual legal assistance treaty","No contract, invoice, or written agreement exists as evidence","Scammer has already transferred or hidden the funds","You have no verified identity information for the defendant"],"whatToDoNow":["Gather every piece of evidence: screenshots, emails, bank statements, usernames, phone numbers","Check whether small claims court is appropriate for your loss amount","Contact a consumer law solicitor or legal aid service for a free initial assessment","Report to your national fraud authority — a crime reference number supports civil action","Ask your bank about third-party disclosure orders to identify where funds went","Consider whether a court judgment is enforceable given what you know about the scammer"],"faq":[{"question":"Does winning a court case guarantee I get my money back?","answer":"No. A judgment is an official ruling that the defendant owes you money, but collecting it requires enforcement steps such as wage garnishment, asset seizure, or charging orders. If the scammer has no traceable assets, the judgment may be unenforceable in practice."},{"question":"Can I sue if the scammer is in another country?","answer":"You can still file in your own jurisdiction if there is a connection (e.g., the scammer targeted you there), but enforcing a foreign judgment depends on mutual enforcement treaties, which may not exist with every country."}],"lastReviewed":"2026-06-10"},{"slug":"small-claims-court-scam-how-it-works","url":"https://scamencyclopedia.org/questions/small-claims-court-scam-how-it-works","question":"How does small claims court work for scam victims?","shortAnswer":"Small claims court is a simplified, low-cost legal process where you can sue for a set maximum amount without needing a lawyer — it is often the most practical civil option for scam victims with traceable defendants.","explanation":"Small claims court (called the Small Claims Track in England and Wales, or small claims court in US states and Canadian provinces) is designed to be accessible to ordinary people. The filing fees are modest, the procedures are simplified, and hearings are relatively quick — often resolved in one appearance before a judge or magistrate.\n\nTo bring a claim you need to identify the defendant clearly enough to serve court papers. If you only have a username or an email address with no linked legal identity, you may struggle at this first hurdle. However, if you paid a traceable company or individual, or if your bank can provide details under a disclosure order, you may be able to proceed.\n\nBefore filing, you are usually required to send the defendant a formal 'letter before action' outlining your claim and giving them a reasonable period to respond. Keeping records of this correspondence is important evidence. If the defendant ignores the claim, you may obtain a default judgment, but enforcement still requires further steps.\n\nThis is general information only. Court procedures vary by jurisdiction, and a legal adviser or citizens advice bureau can walk you through the specific rules in your area.","redFlags":["You cannot identify the defendant by their legal name or registered business address","Your loss exceeds the small claims limit for your jurisdiction","The defendant is based in another country — enforcement becomes much harder","You paid via an untraceable method such as gift cards or cash","Scammer has already closed the account or disappeared"],"whatToDoNow":["Check the small claims limit in your country or state and compare it to your loss","Send a formal letter before action to the defendant's last known address","Gather all evidence: contracts, receipts, chat logs, emails, wire transfer records","File your claim online or at your local courthouse and pay the filing fee","Attend the hearing prepared with printed copies of your evidence","If you win, research enforcement options such as attachment of earnings or charging orders"],"faq":[{"question":"Do I need a lawyer for small claims court?","answer":"Usually not — small claims is designed to be accessible without legal representation. In some jurisdictions, lawyers are even prohibited from appearing in small claims hearings. A citizens advice bureau or consumer law clinic can help you prepare."},{"question":"What if the defendant does not show up?","answer":"If the defendant is properly served and does not attend, you can typically apply for a default judgment in your favour. You would then need to take additional steps to enforce that judgment."}],"lastReviewed":"2026-06-10"},{"slug":"bank-refuses-refund-unauthorised-transaction","url":"https://scamencyclopedia.org/questions/bank-refuses-refund-unauthorised-transaction","question":"What are my rights if my bank refuses to refund an unauthorised transaction?","shortAnswer":"In most countries, banks are legally required to refund genuinely unauthorised transactions unless they can show you acted fraudulently or with gross negligence — if your bank refuses, you have escalation options including the financial ombudsman.","explanation":"Under UK Payment Services Regulations and similar frameworks in the EU and many other countries, your bank must refund an unauthorised payment — one made without your knowledge or consent — unless it can demonstrate that you were grossly negligent or acted fraudulently. 'Gross negligence' is a high bar: simply being deceived does not automatically disqualify you from a refund.\n\nIf your bank refuses your chargeback or refund request, ask them to give their refusal in writing, citing the specific rule or exception they are relying on. This written explanation is important for any appeal or ombudsman complaint. Keep all correspondence.\n\nThe next step is usually the financial ombudsman service in your country (the Financial Ombudsman Service in the UK, the CFPB complaints process in the US, or equivalent bodies elsewhere). These services are free for consumers and the bank must comply with binding decisions. Many disputes that banks initially refuse are upheld at ombudsman level.\n\nThis is general information and does not constitute personalised legal or financial advice. The exact rules depend on your country and the type of payment involved, so consulting a consumer rights adviser is recommended for your specific case.","redFlags":["Bank refuses in writing without citing a specific rule or regulation","Bank claims you 'authorised' the transaction when you did not","Bank delays beyond the statutory investigation period","Refusal letter uses vague language like 'your account was used'","Bank does not acknowledge your complaint within the required timeframe"],"whatToDoNow":["Request the bank's refusal in writing with specific regulatory justification","Submit a formal written complaint to the bank's complaints department","Escalate to your national financial ombudsman if the bank does not resolve within 8 weeks","Gather all evidence of the unauthorised transaction: transaction records, communication logs","Check your country's payment services regulations to understand your legal entitlements","Consider consulting a consumer law adviser or citizens advice bureau for your specific situation"],"faq":[{"question":"What is the difference between an unauthorised and an authorised push payment?","answer":"An unauthorised transaction is one you did not approve at all — such as a card used fraudulently after theft. An authorised push payment (APP) is one where you were tricked into sending the money yourself. The legal protections differ, though many countries are extending APP fraud reimbursement obligations to banks."},{"question":"How long does my bank have to investigate?","answer":"Under UK rules, banks must respond to payment disputes within prescribed timeframes and must refund provisionally while investigating in many cases. Timescales vary by jurisdiction — check your national regulator's guidance."}],"lastReviewed":"2026-06-10"},{"slug":"app-fraud-bank-liability-reimbursement","url":"https://scamencyclopedia.org/questions/app-fraud-bank-liability-reimbursement","question":"What is the bank's liability under APP fraud reimbursement rules?","shortAnswer":"In the UK, new mandatory APP reimbursement rules require most banks and payment firms to reimburse victims of authorised push payment fraud up to £85,000 per claim, with limited exceptions — similar rules are developing in other countries.","explanation":"Authorised Push Payment (APP) fraud occurs when a victim is tricked into sending money to a scammer — for example, through an impersonation scam, a fake investment, or a purchase that never arrives. Unlike card fraud, the victim technically 'authorised' the payment, which historically made recovery much harder.\n\nIn the UK, the Payment Systems Regulator introduced mandatory APP fraud reimbursement requirements effective from October 2024, applicable to Faster Payments transactions. Banks and payment service providers must reimburse victims up to £85,000 per claim. There are exceptions: victims who acted with 'gross negligence', ignored clear fraud warnings, or were involved in the fraud themselves may not qualify. Vulnerable consumers receive additional protections.\n\nBanks also have a 'sending bank' and 'receiving bank' split responsibility — both institutions share in the reimbursement obligation. If your bank is reluctant to reimburse, cite the PSR rules specifically and escalate to the Financial Ombudsman Service if needed.\n\nThis is general information only and does not constitute personalised legal or financial advice. Rules differ by payment type, jurisdiction, and the specific facts of your case. Consulting your bank's complaints process and the FOS is the recommended path.","redFlags":["Your bank does not acknowledge the APP fraud reimbursement scheme","Bank claims you showed 'gross negligence' without providing evidence","Scammer's account was at the same bank and no Confirmation of Payee warning was shown","Payment was made via a method not covered by the scheme (e.g., CHAPS, international wire)","Bank delays beyond the 35 business day decision window"],"whatToDoNow":["Report the fraud to your bank immediately and request a claim under APP fraud reimbursement rules","Ask your bank to cite the specific exception if they refuse reimbursement","Lodge a formal complaint if the bank does not respond within 35 business days","Escalate to the Financial Ombudsman Service if unsatisfied with the bank's decision","Report to the Report Fraud service (UK, formerly Action Fraud) or your national fraud authority for a crime reference number","Keep all records of the fraudulent communication that induced you to make the payment"],"faq":[{"question":"Does the APP reimbursement rule apply to all UK banks?","answer":"The mandatory PSR rules apply to payment service providers participating in Faster Payments. Some smaller institutions may operate under slightly different timescales during transitional periods. Check with your specific bank whether they are covered."},{"question":"What if my bank says I ignored a warning and therefore I am not eligible?","answer":"Banks must show that a clear, proportionate fraud warning was given and that you consciously disregarded it. A generic warning buried in small print is unlikely to constitute 'gross negligence'. Challenge the bank's reasoning in writing and escalate to the FOS if you believe the refusal is wrong."}],"lastReviewed":"2026-06-10"},{"slug":"chargeback-rights-scam-purchase","url":"https://scamencyclopedia.org/questions/chargeback-rights-scam-purchase","question":"What are my chargeback rights when I have been scammed on a purchase?","shortAnswer":"If you paid by debit or credit card, chargeback lets you dispute a transaction with your card provider and potentially recover the funds — credit card purchases may also carry additional Section 75 protection in the UK.","explanation":"A chargeback is a reversal of a card transaction initiated by your bank or card issuer. You can typically request a chargeback if goods or services were not received, were significantly not as described, or if the merchant is uncontactable. Chargeback is available on both debit and credit cards, though the specific rules vary by card network (Visa, Mastercard, Amex) and by country.\n\nIn the UK, credit card purchases between £100 and £30,000 are also covered by Section 75 of the Consumer Credit Act, which makes the credit card company jointly liable with the merchant. This is a stronger protection than chargeback because it is a statutory right, not just a card scheme rule, and it applies even if only part of the purchase was on credit.\n\nChargebacks must usually be raised within a time limit — typically 120 days from the transaction date or from when you expected delivery. Acting quickly matters. Gather evidence: order confirmations, tracking information showing non-delivery, screenshots of the seller's website, and any communications.\n\nThis is general information and does not constitute personalised legal or financial advice. Chargeback outcomes depend on the specific facts and your bank's investigation.","redFlags":["Seller website has disappeared since you made payment","Tracking number provided does not exist or was never updated","Product arrived but was completely different from what was described","Seller is unreachable for a refund and is ignoring communications","You are approaching the chargeback time limit — time-sensitive"],"whatToDoNow":["Contact your card provider immediately to initiate a chargeback dispute","Gather all evidence: order confirmation, screenshots, delivery tracking, communications","For UK credit card purchases over £100, mention Section 75 specifically","Submit the chargeback within the time limit — typically 120 days from transaction","If the chargeback fails, escalate to the financial ombudsman with your evidence","Report the fraudulent seller to your national consumer protection authority"],"faq":[{"question":"Can I do a chargeback on a bank transfer?","answer":"No. Chargeback is a card payment mechanism and does not apply to bank transfers. If you sent money via bank transfer to a scammer, you would need to pursue APP fraud reimbursement through your bank or take legal action separately."},{"question":"What is the difference between chargeback and a refund from the merchant?","answer":"A refund comes from the merchant voluntarily. A chargeback is a forced reversal you request through your bank, which then disputes the transaction with the merchant's bank. Chargebacks are used when the merchant refuses to refund or is unreachable."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-illegal-to-send-scam-texts","url":"https://scamencyclopedia.org/questions/is-it-illegal-to-send-scam-texts","question":"Is it illegal to send scam text messages?","shortAnswer":"Yes — sending fraudulent or deceptive text messages is illegal in virtually every jurisdiction, typically under fraud, computer misuse, and communications offences laws, carrying significant criminal penalties.","explanation":"Sending scam texts (known as 'smishing' when designed to steal information) is a criminal offence in nearly all countries. In the UK it can constitute fraud under the Fraud Act 2006 (fraud by false representation), potentially combined with offences under the Computer Misuse Act 1990 and the Communications Act 2003. Penalties include substantial fines and imprisonment.\n\nIn the United States, the Computer Fraud and Abuse Act, the Telephone Consumer Protection Act, and various state fraud statutes all create criminal and civil liability for mass fraudulent text campaigns. The FTC and FCC actively investigate and prosecute smishing operations.\n\nSending a single deceptive message with intent to gain financially or cause someone to act to their detriment is typically sufficient to constitute fraud. The sender does not need to actually succeed in stealing money — the attempt itself is criminal. Using spoofed sender IDs to impersonate banks or government agencies adds further offences in most jurisdictions.\n\nIf you receive scam texts, reporting them to the relevant authority (7726 / SPAM in the UK and US, or your national fraud body) helps build cases against operators. This is general information rather than a specific legal opinion.","redFlags":["Message asks you to click a link and enter banking or personal details","Sender ID appears to be a bank or government agency but the message is unexpected","Message creates false urgency ('your account will be closed in 24 hours')","Link in the message leads to a site that is not the organisation's genuine domain","Grammar and spelling suggest a mass automated message"],"whatToDoNow":["Do not click any links in the suspicious message","Forward the message to 7726 (SPAM) on your mobile network in the UK or US","Report to the Report Fraud service (UK, formerly Action Fraud), the FTC (US), or your national fraud authority","Block the sender number on your device","If you did click and enter details, contact your bank immediately","Alert family members who may receive similar messages"],"faq":[{"question":"Can smishing operators be prosecuted if they are abroad?","answer":"Yes, in many cases. If the fraud targets victims in a particular country, that country often asserts jurisdiction. International cooperation through Interpol, Europol, and bilateral treaties has led to prosecutions of overseas smishing rings."},{"question":"What if I accidentally sent a scam text because my phone was hacked?","answer":"If your device was compromised and sent messages without your knowledge, you are generally not criminally liable as intent is a required element of fraud. Report the compromise to your carrier and network authority immediately and have your device checked for malware."}],"lastReviewed":"2026-06-10"},{"slug":"am-i-liable-as-unwitting-money-mule","url":"https://scamencyclopedia.org/questions/am-i-liable-as-unwitting-money-mule","question":"Could I be liable if I unknowingly acted as a money mule?","shortAnswer":"Unknowingly receiving and forwarding money for a fraudster can still carry criminal or civil consequences, though genuine unawareness is a defence — if you suspect you have been used as a money mule, stop immediately and report it.","explanation":"A money mule is someone who receives funds from a scammer and transfers them on, usually keeping a small percentage as 'commission.' Criminals often recruit mules through fake job offers, romance relationships, or 'easy money' schemes without making the illegal purpose clear.\n\nIn the UK, handling the proceeds of crime is an offence under the Proceeds of Crime Act 2002 even if you did not know the specific crime that generated the money — though genuine ignorance and absence of suspicion is relevant to whether a prosecution is pursued. Banks can also close accounts and report individuals to fraud databases. In the US, similar provisions under the Bank Secrecy Act and money laundering statutes apply.\n\nThe key legal element is 'knowledge or suspicion.' Courts and prosecutors look at whether warning signs were present that a reasonable person would have noticed: being paid to receive and forward money from strangers is an obvious red flag. Acting quickly to report once you suspect the arrangement, and not retaining any profit, demonstrates good faith that can affect how authorities treat your case.\n\nThis is general information only. If you believe you have been used as a money mule, cease all transfers and speak with a solicitor or legal aid provider immediately.","redFlags":["You were asked to receive money from strangers and forward it to another account","A 'job offer' required no skills but involved moving funds through your account","You kept a percentage of each transfer as 'commission'","The person who recruited you was a new online contact or a romance connection","You were told to keep the arrangement confidential","You received more money than expected and were asked to send the excess elsewhere"],"whatToDoNow":["Stop all transfers immediately — do not send any more money","Do not spend or withdraw the funds currently held","Contact your bank and explain the situation honestly","Report to your national fraud authority to create a record of your co-operation","Seek legal advice promptly — free legal aid or a duty solicitor may be available","Preserve all communications from the person who recruited you as evidence"],"faq":[{"question":"Will my bank close my account if I was a money mule?","answer":"Banks have wide discretion to close accounts and may do so if they suspect money laundering activity. They may also file Suspicious Activity Reports. Being co-operative and reporting the matter yourself can help your position, but account closure remains a real possibility."},{"question":"Can I be prosecuted if I gave back all the money?","answer":"Returning the money reduces the harm but does not automatically prevent prosecution — it does, however, show good faith and is a significant mitigating factor. Prompt self-reporting and co-operation with authorities strengthens your position considerably."}],"lastReviewed":"2026-06-10"},{"slug":"embarrassed-i-was-scammed-is-that-normal","url":"https://scamencyclopedia.org/questions/embarrassed-i-was-scammed-is-that-normal","question":"I am embarrassed that I was scammed — is that a normal feeling?","shortAnswer":"Yes, embarrassment and shame are among the most commonly reported emotional responses after being scammed, but they are based on a misunderstanding — scammers are highly trained professionals, and being targeted is not a reflection of your intelligence.","explanation":"Shame and embarrassment are reported by the majority of scam victims across all age groups, income levels, and educational backgrounds. These feelings are understandable but are often based on the false belief that only naive or unintelligent people get scammed. In reality, fraud investigators note that high-intelligence, well-educated individuals are frequently targeted precisely because scammers invest significant time and psychological sophistication in their approaches.\n\nScammers use techniques rooted in social psychology — urgency, authority, social proof, reciprocity, and gradual trust-building. They exploit universal human tendencies, not individual weaknesses. Romance scammers may spend months cultivating emotional bonds; investment scammers use professional-looking materials; impersonation scammers leverage real fear about taxes, law enforcement, or health. These are practised deceptions.\n\nEmbarrassment also has a practical cost: it often stops victims from reporting scams, warning others, or seeking help. This suits scammers very well, which is one reason victim-blaming culture — even when internalised by the victim themselves — causes wider harm.\n\nYou were targeted by a professional whose entire job is deception. Allowing shame to prevent recovery would compound the harm the scammer has already done. Talking to someone — a trusted person, a support line, or a counsellor — is often the first step toward feeling better and taking action.","redFlags":["You are delaying reporting because you feel embarrassed","You are blaming yourself rather than the person who deceived you","You are withdrawing from friends and family because of shame","You are minimising what happened ('it was just money') rather than processing it","Shame is preventing you from warning others who might be targeted"],"whatToDoNow":["Remind yourself that professional scammers target people of all backgrounds and intelligence levels","Speak to someone you trust about what happened — you do not have to face it alone","Contact a victim support or fraud support line in your country for non-judgemental help","Report the scam — your report may protect others and does not require you to feel ashamed","Consider speaking with a counsellor or therapist who has experience with fraud trauma","Read accounts from other scam survivors — understanding you are not alone can help"],"faq":[{"question":"Do smarter people get scammed less often?","answer":"Research does not consistently support this. Scammers adapt their tactics to their target. High-confidence individuals are sometimes more susceptible to investment and authority scams. The factors that affect vulnerability include emotional state, context, and the sophistication of the specific scam — not raw intelligence."},{"question":"Should I tell my family that I was scammed?","answer":"Telling trusted family members can provide emotional support and may help protect them from similar scams. Many victims find that speaking about it reduces shame significantly. You do not owe anyone details you are not ready to share, but isolation tends to prolong recovery."}],"lastReviewed":"2026-06-10"},{"slug":"how-to-emotionally-recover-after-being-scammed","url":"https://scamencyclopedia.org/questions/how-to-emotionally-recover-after-being-scammed","question":"How do I emotionally recover after being scammed?","shortAnswer":"Emotional recovery from fraud involves acknowledging the grief, reducing self-blame, seeking social support, and taking practical steps that restore a sense of control — many people fully recover with time and the right help.","explanation":"Being scammed can feel like a bereavement. You may grieve the lost money, the relationship (in romance scams), or the trust you placed in what seemed like a legitimate opportunity. Reactions including sadness, anger, anxiety, difficulty sleeping, and loss of confidence are all common and valid responses to a genuine trauma.\n\nPsychologists who work with fraud victims emphasise that recovery follows recognisable stages, similar to other forms of loss. Acknowledging what happened — rather than suppressing it — is usually the healthiest starting point. Journalling, speaking with a counsellor, or joining a fraud survivor support group (many exist online) can help process the experience.\n\nTaking practical action — reporting the scam, securing your accounts, and beginning any recovery process — can restore a sense of agency. One reason scam victims experience prolonged distress is that they feel powerless. Each concrete step, however small, counteracts that feeling.\n\nIf distress is severe, persistent, or affecting daily life, talking to a GP or mental health professional is a good step. Trauma-focused therapies such as cognitive behavioural therapy (CBT) are effective for fraud-related distress. Recovery takes different amounts of time for different people, and there is no 'correct' pace.","redFlags":["You are experiencing persistent feelings of worthlessness or hopelessness","Sleep, appetite, or concentration are significantly disrupted weeks after the scam","You are avoiding all financial activity out of fear of being scammed again","You are isolating from friends and family because of shame","You are in contact with people claiming to be 'scam recovery agents' — these are often secondary scams"],"whatToDoNow":["Acknowledge what happened and give yourself permission to feel upset about it","Talk to someone you trust — a friend, family member, or support line","Contact a victim support organisation or fraud survivor support group","Take one practical step each day, such as securing an account or filing a report","See your GP or a counsellor if distress persists or is affecting daily functioning","Be alert to recovery scam approaches — people offering to recover your money for a fee"],"faq":[{"question":"Is it normal to feel angry long after a scam?","answer":"Yes. Anger is a natural response to being deceived and victimised. Processing anger constructively — through exercise, talking it out, or channelling it into action like reporting and warning others — is healthier than suppression. Prolonged, intense anger that interferes with life may benefit from professional support."},{"question":"What is a recovery scam and how do I avoid it?","answer":"A recovery scam targets people who have already been defrauded, claiming to be able to retrieve their money for an upfront fee. They cannot. Legitimate authorities never charge victims for fraud investigations. Any approach promising to recover your funds for a fee is itself a scam."}],"lastReviewed":"2026-06-10"},{"slug":"is-online-fraud-a-criminal-offence","url":"https://scamencyclopedia.org/questions/is-online-fraud-a-criminal-offence","question":"Is online fraud a criminal offence or just a civil matter?","shortAnswer":"Online fraud is a criminal offence in virtually all jurisdictions, not merely a civil matter — criminals can face imprisonment and fines, though civil remedies and criminal prosecution are separate processes and both may be pursued.","explanation":"Online fraud is prosecuted under criminal law in every major jurisdiction. In the UK, the primary statute is the Fraud Act 2006, which covers fraud by false representation, fraud by failing to disclose information, and fraud by abuse of position. Offences carry up to 10 years imprisonment. Computer-facilitated crimes may also fall under the Computer Misuse Act 1990.\n\nIn the US, wire fraud, mail fraud, computer fraud, and identity theft each carry their own federal criminal penalties. State-level consumer fraud laws add further layers. The FBI's Internet Crime Complaint Center (IC3) coordinates federal investigation of online fraud.\n\nThe criminal justice system and the civil court system operate independently. Police and prosecutors pursue the criminal case (on behalf of the state), while you pursue a civil case (on your own behalf) for compensation. A criminal conviction can help a civil case but is not required for one. Conversely, a civil settlement does not preclude criminal prosecution.\n\nThis is general information. Whether a specific incident meets the threshold for criminal prosecution depends on the facts, jurisdiction, and investigative resources. Consult a legal adviser for your specific situation.","redFlags":["Scammer used false identity or impersonated a legitimate organisation","Substantial sums were transferred to the fraudster","Multiple victims were targeted in the same scheme","Scammer used technology to impersonate or intercept communications"],"whatToDoNow":["Report the fraud to your national police and fraud authority — this triggers the criminal process","Obtain a crime reference number to support any civil or insurance claim","Preserve all digital evidence — do not delete emails, texts, or social media conversations","Contact your bank to report the fraud and initiate recovery procedures","Consult a solicitor about parallel civil action if the losses are significant"],"faq":[{"question":"Will police investigate my case if the amount is small?","answer":"Police resources for individual small-value fraud cases are limited, but reporting is still important. Reports contribute to intelligence that helps identify patterns and larger operations. The financial ombudsman, your bank, and civil courts are often more practical routes for recovery of smaller sums."},{"question":"Can I press criminal charges myself?","answer":"In most jurisdictions, criminal charges are brought by the state (police and prosecutors), not by individuals. You report the crime; the authorities decide whether to prosecute. In some countries, private prosecutions are possible but are rare and expensive."}],"lastReviewed":"2026-06-10"},{"slug":"identity-theft-rights-and-recourse","url":"https://scamencyclopedia.org/questions/identity-theft-rights-and-recourse","question":"What are my rights and recourse options if my identity is stolen?","shortAnswer":"Identity theft victims have legal rights including the right to have fraudulent entries corrected on credit files, the right to dispute fraudulent debts, and access to specialist identity theft support services — acting quickly significantly limits the damage.","explanation":"Identity theft occurs when someone uses your personal information — name, date of birth, National Insurance or Social Security number, address — to open accounts, take out loans, or commit other fraud in your name. The consequences can include damaged credit files, unexpected debt collection, and even criminal records in your name from fraud committed by others.\n\nIn the UK, you have the right to add a Notice of Correction to your credit file explaining that entries relate to identity theft, to dispute inaccurate entries with credit reference agencies (Experian, Equifax, TransUnion), and to ask lenders to investigate fraudulent accounts. Cifas operates a fraud prevention service (Protective Registration) that flags your file to lenders to apply extra verification.\n\nIn the US, you can place a fraud alert or credit freeze at the three major bureaus, file an identity theft report with the FTC at IdentityTheft.gov, and dispute fraudulent accounts under the Fair Credit Reporting Act, which gives you rights to have inaccurate information removed.\n\nThis is general information only. The specific steps depend on your country, the type of information stolen, and what the thief did with it. A consumer law adviser or identity theft support organisation can help you navigate the process.","redFlags":["Unexpected credit applications or new accounts appearing on your credit file","Debt collection letters for debts you do not recognise","Being declined for credit unexpectedly due to unknown entries","Receiving bills or statements for services you did not sign up for","Tax or government agencies contact you about activity you did not authorise"],"whatToDoNow":["Obtain your credit report from all three major credit reference agencies and check for unknown entries","Add a fraud alert or place a credit freeze with credit reference agencies","Report to the Report Fraud service (UK, formerly Action Fraud), the FTC (US), or your national fraud authority","Contact each lender where a fraudulent account was opened and raise a dispute","Apply for Protective Registration with Cifas (UK) to flag your file to future lenders","Report to the police and obtain a crime reference number for disputes with lenders"],"faq":[{"question":"Can I be held liable for debts taken out in my name by an identity thief?","answer":"You should not be held liable for genuinely fraudulent debts if you report them promptly and co-operate with lenders' investigations. Under UK and US law, you have clear rights to dispute fraudulent credit entries. Document everything and escalate through the ombudsman if a lender refuses to resolve a clearly fraudulent account."},{"question":"How long does it take to clean up identity theft?","answer":"Resolution varies — simple cases may take weeks, while complex ones involving multiple fraudulent accounts, government records, or overseas identity use can take months or longer. Staying organised, keeping records of every dispute, and following up persistently are key."}],"lastReviewed":"2026-06-10"},{"slug":"romance-scam-legal-options","url":"https://scamencyclopedia.org/questions/romance-scam-legal-options","question":"Are there legal options if I was defrauded in a romance scam?","shortAnswer":"Romance scam victims have the same civil and criminal complaint options as other fraud victims, though recovery is often complicated by the scammer's overseas location and anonymity — emotional support should be prioritised alongside legal steps.","explanation":"Romance scams involve criminals building fake relationships over weeks or months to extract money, often for fabricated emergencies, travel to visit you, or investment opportunities. They are among the most psychologically devastating forms of fraud because the victim not only loses money but also grieves a relationship that was entirely fabricated.\n\nLegal options include reporting to your national fraud authority and police, making a chargeback or APP fraud claim with your bank if payments were made by card or bank transfer, and potentially civil action if the scammer is identifiable. Social media platforms where the scam originated may also have abuse reporting mechanisms, and in some cases have co-operated with law enforcement investigations.\n\nBecause romance scammers typically operate from overseas using fake identities, the practical prospects for criminal prosecution or civil recovery of funds are often limited. However, reporting matters: it contributes to intelligence that supports larger enforcement operations targeting the criminal networks behind these scams.\n\nEmotional recovery is as important as financial recovery. Specialist support organisations for romance fraud victims exist in several countries. This is general information only — your specific legal options depend on your country, the method of payment, and the facts of your case.","redFlags":["Your online contact has never been willing to video call or always has technical problems when trying","They are abroad and there was always a reason you never met in person","Multiple requests for money for emergencies, travel, or investment","They discouraged you from telling friends or family about the relationship","The relationship moved unusually quickly and became intensely emotional"],"whatToDoNow":["Stop all financial transfers immediately and do not send anything further","Report to your national fraud authority and provide all communication records","Contact your bank about any payments and ask about APP fraud reimbursement","Seek emotional support — contact a fraud survivor support line or counsellor","Report the fake profile to the social media or dating platform","Tell a trusted person what happened — isolation prolongs recovery"],"faq":[{"question":"Is it my fault for trusting someone who turned out to be a scammer?","answer":"No. Romance scammers invest enormous time and psychological skill in building trust. They study what you want to hear and present it consistently over months. Trusting someone you had an extended emotional relationship with is entirely normal human behaviour. The deception was sophisticated and deliberate."},{"question":"Could the person I was talking to have been a real person being used by scammers?","answer":"Yes, in some operations. Scammers sometimes use real people's stolen photos, or may themselves be victims forced into running scams. This does not change your situation, but it means the person in the pictures may be innocent. Reporting helps identify both the perpetrators and any unwilling participants."}],"lastReviewed":"2026-06-10"},{"slug":"can-police-recover-scam-money","url":"https://scamencyclopedia.org/questions/can-police-recover-scam-money","question":"Can the police actually recover money lost to scammers?","shortAnswer":"Police can recover scam proceeds in some cases — particularly where the scammer is domestic and identifiable — but recovery is far from guaranteed and is more likely through your bank than through a criminal investigation.","explanation":"Police forces have specialist fraud and economic crime units that investigate significant fraud cases, and they do recover assets in some operations. In the UK, the National Economic Crime Centre and regional police fraud squads work on serious cases. However, their capacity is not unlimited, and individual cases below a certain threshold may not receive active investigation, though reports still contribute to intelligence.\n\nAsset recovery powers under the Proceeds of Crime Act 2002 (UK) or equivalent statutes abroad allow authorities to freeze and seize criminal proceeds. However, these powers are typically used in cases where a suspect has been identified and prosecuted, or where there is sufficient evidence for a civil asset recovery order.\n\nFor the majority of scam victims, the more practical path to financial recovery is through the bank — chargeback, APP fraud reimbursement, or Section 75 claims — rather than waiting for criminal asset recovery. These processes are faster, do not depend on identifying and apprehending the scammer, and are available regardless of whether police investigate.\n\nThis is general information and outcomes vary enormously depending on the nature of the scam, the amount involved, and whether the scammer can be identified. A legal adviser can assess your specific situation.","redFlags":["You have been contacted by someone claiming to be a police officer who can recover your money for a fee — this is a scam","Your case has been open for a long time with no update","The scammer operated entirely overseas using untraceable methods"],"whatToDoNow":["Report to police and your national fraud authority — you will receive a crime reference number","Pursue bank-level recovery in parallel: chargeback, APP reimbursement, Section 75","Keep your crime reference number — it supports bank disputes and insurance claims","Follow up periodically with your fraud authority on the status of your report","Do not pay anyone claiming to recover your money — recovery scams are common"],"faq":[{"question":"Should I hire a private investigator to find the scammer?","answer":"This is a personal decision but comes with significant costs and uncertain outcomes. A reputable PI may help identify a domestic scammer, but most fraud originates overseas and untraceable funds rarely make private recovery viable. Consult a legal adviser before spending on private investigations."},{"question":"What is a crime reference number and why do I need it?","answer":"A crime reference number is issued when you report a crime to police. It is your official record that the matter has been reported. Banks, insurers, and financial ombudsman services may ask for it when processing fraud claims. Always request one when reporting."}],"lastReviewed":"2026-06-10"},{"slug":"crypto-scam-legal-recourse","url":"https://scamencyclopedia.org/questions/crypto-scam-legal-recourse","question":"Is there any legal recourse if I lost money in a cryptocurrency scam?","shortAnswer":"Legal recourse exists for crypto scam victims, but recovery is challenging due to the pseudonymous nature of blockchain transactions — your options depend heavily on whether the platform was a regulated entity.","explanation":"Cryptocurrency scams range from fraudulent exchanges and fake investment platforms to pig butchering schemes and rug pulls. The pseudonymous nature of crypto transactions makes tracing and recovering funds difficult, but not impossible: blockchain analytics firms and some law enforcement units have successfully traced crypto proceeds.\n\nIf the platform was a regulated financial services firm, you may be able to make a complaint to your financial regulator (FCA in the UK, SEC or CFTC in the US) and potentially claim through a compensation scheme. The UK Financial Services Compensation Scheme (FSCS) covers certain regulated investments; many crypto platforms are not, however, covered.\n\nFor transfers via your bank that funded the crypto purchase, APP fraud reimbursement claims remain relevant even though the end destination was crypto. Your bank funded a payment under deception and that payment characteristic does not change simply because the funds were then converted to cryptocurrency.\n\nChain analysis companies have assisted in civil litigation in some cases. Several law firms now specialise in crypto fraud civil claims, including freezing orders against exchanges. This is general information only — consult a solicitor with crypto fraud experience for your specific situation.","redFlags":["The platform is unregulated and not listed on your national financial regulator's register","Your 'investment' showed extraordinary returns that could not be withdrawn","You were asked to pay taxes or fees to release your funds","The platform vanished or became unresponsive after you attempted to withdraw","You were recruited through social media or a romantic contact"],"whatToDoNow":["Report to your national financial regulator and fraud authority","Contact your bank about the payments you made — APP fraud rules may apply","Preserve all platform records, wallet addresses, and transaction hashes","Consult a solicitor experienced in crypto fraud for advice on civil recovery options","Check whether the platform appears on your regulator's warning list","Do not pay anyone claiming to be able to recover your crypto for a fee"],"faq":[{"question":"Are crypto transactions really untraceable?","answer":"No — most public blockchains are pseudonymous, not anonymous. Every transaction is permanently recorded on the blockchain and can be analysed. When crypto is converted to fiat currency at an exchange, KYC requirements mean identities are often linked to addresses. Law enforcement and blockchain analytics firms use this routinely."},{"question":"Does FSCS cover crypto investment losses?","answer":"In most cases, no. FSCS covers deposits with regulated banks and certain regulated investments. Many crypto platforms are not authorised under the Financial Services and Markets Act. Always check the FCA register before investing in any platform."}],"lastReviewed":"2026-06-10"},{"slug":"gift-card-scam-can-i-get-money-back","url":"https://scamencyclopedia.org/questions/gift-card-scam-can-i-get-money-back","question":"I paid a scammer with gift cards — can I get my money back?","shortAnswer":"Recovering money paid via gift cards is very difficult, but you should still contact the gift card issuer immediately, as a small number of cards are stopped before they are drained if you act within hours.","explanation":"Scammers routinely demand gift cards (Google Play, iTunes, Amazon, Steam) because they are fast, largely irreversible, and difficult to trace. This is one of the clearest warning signs of a scam — no legitimate business, government agency, or utility company will ever ask you to pay in gift cards.\n\nIf you act within hours of purchase, there is a small chance the gift card issuer can freeze the balance before the scammer redeems it. Call the issuer's customer service using the number on the back of the card, explain it was used for fraud, and provide the card number and PIN. Success rates are low but improve with speed.\n\nFor cards already redeemed, prospects are poor. Gift card transactions are generally treated as equivalent to cash and most issuers have very limited liability once funds are spent. Some card networks have dedicated fraud reporting lines and do investigate patterns that suggest organised fraud.\n\nReport the incident to your national fraud authority regardless — even if recovery is unlikely, your report builds the intelligence picture that helps disrupt these operations. This is general information; specific outcomes vary.","redFlags":["You were asked to pay a government fine, unpaid tax, or utility bill using gift cards","You were told to buy multiple gift cards quickly and provide the codes","You were asked to keep the transaction confidential while at the shop","The scammer was insistent, urgent, and kept you on the phone","You were told gift cards are the only accepted payment method"],"whatToDoNow":["Call the gift card issuer immediately using the number on the card or packaging","Provide the card numbers, PINs, and explain you were scammed","Report to the Report Fraud service (UK, formerly Action Fraud), FTC (US), or your national fraud authority","Report to your local police station — some forces investigate gift card fraud rings","Warn the shop where you bought the cards — staff can be trained to spot this","Check if your bank can reverse the debit card transaction used to buy the cards"],"faq":[{"question":"Why do scammers specifically ask for gift cards?","answer":"Gift cards are near-instant, largely irreversible, and the codes can be used globally without the scammer ever being physically present. Unlike bank transfers, there is no APP fraud reimbursement scheme for gift card payments, making them ideal for criminals seeking untraceable value."},{"question":"Can the shop where I bought the cards do anything?","answer":"Shops are increasingly aware of gift card fraud and some have policies to ask questions when large gift card purchases are made. The shop cannot reverse a purchase that was voluntary, but reporting to them may help them better protect future customers."}],"lastReviewed":"2026-06-10"},{"slug":"investment-scam-financial-regulator-complaint","url":"https://scamencyclopedia.org/questions/investment-scam-financial-regulator-complaint","question":"How do I make a complaint to a financial regulator about an investment scam?","shortAnswer":"You can report investment scams to your national financial regulator — in the UK the FCA, in the US the SEC and CFTC — but regulatory complaints pursue the firm on behalf of the public rather than recovering your individual funds, so bank and legal remedies should be pursued in parallel.","explanation":"Financial regulators such as the FCA (UK), SEC (US), ASIC (Australia), and their equivalents worldwide have powers to investigate and sanction unauthorised financial services firms, freeze assets, and publish warnings. Reporting to them is important and can prevent others from being defrauded by the same operation.\n\nHowever, it is important to understand that a regulatory complaint is not the same as a compensation claim. Regulators act in the public interest — they pursue the firm and may eventually distribute recovered assets through a compensation process, but this is slow, uncertain, and often results in only partial recovery if anything at all.\n\nFor individual compensation, your faster routes are: chargeback or APP fraud claim with your bank (if a qualifying payment method was used), the Financial Services Compensation Scheme (if the firm was UK-regulated), civil litigation, or the Financial Ombudsman Service. Some of these require the firm to have been regulated — if you dealt with an unauthorised firm, FSCS cover generally does not apply.\n\nThis is general information. A financial adviser or solicitor can help you identify which compensation or recovery mechanisms are available in your specific situation.","redFlags":["The firm was not listed on the FCA register or your national equivalent","Investment returns promised were unrealistically high with no risk disclosed","You were cold-called or contacted through social media with an investment offer","Withdrawals were refused or subject to escalating fees","The firm used a name very similar to a legitimate registered firm (clone firm)"],"whatToDoNow":["Report to the FCA (UK), SEC/CFTC (US), or your national regulator using their online form","Check the regulator's warning list to see if the firm is already flagged","Contact your bank about APP fraud reimbursement for any payments made","Report to the Report Fraud service (formerly Action Fraud) or your national fraud authority for a crime reference number","Consult a solicitor about civil recovery if losses are substantial","Do not pay any further 'fees' or 'taxes' to release your investment — these are further scam charges"],"faq":[{"question":"What is a clone firm and why is it so dangerous?","answer":"A clone firm mimics the name, logo, and registration numbers of a legitimate authorised firm to appear trustworthy. Victims believe they are dealing with a regulated entity, making them more likely to invest and less likely to suspect fraud. Always verify contact details directly with the regulator, not using information provided by the firm."},{"question":"Does FSCS protect me if I invested with an unregulated firm?","answer":"Generally no. FSCS protection applies to regulated firms that fail financially. If you dealt with an unregulated or clone firm, FSCS cover is typically not available. This is one reason verifying a firm's regulation status before investing is so important."}],"lastReviewed":"2026-06-10"},{"slug":"employer-liable-if-employee-scammed-company","url":"https://scamencyclopedia.org/questions/employer-liable-if-employee-scammed-company","question":"Is an employer liable if an employee was scammed and the company lost money?","shortAnswer":"Generally, liability depends on whether the employee followed established procedures and acted reasonably — if adequate controls were in place and the employee disregarded them, the employee may bear some responsibility; if controls were inadequate, the employer's exposure may be greater.","explanation":"Business email compromise (BEC) and CEO fraud are among the most financially damaging forms of corporate fraud. An employee receives a convincing email appearing to come from a senior colleague, supplier, or client and is instructed to transfer funds to a new account. When the fraud is discovered, the question of who bears legal and financial responsibility arises.\n\nIn employment law, an employee who follows a fraudulent instruction in good faith and within their normal scope of authority is generally not personally liable for the resulting loss — the loss falls to the employer. However, if the employee acted outside their authority, ignored clear fraud warning signs (such as new bank details without phone confirmation), or failed to follow explicitly established payment verification procedures, disciplinary or civil action against the employee is possible.\n\nFrom a civil recovery standpoint, the employer's primary recourse is against the bank (APP fraud reimbursement for the sending bank's obligations) and potentially the receiving bank, as well as any cyber insurance policy. Many cyber insurance policies specifically cover BEC losses.\n\nThis is general information only. Employment law and corporate liability vary significantly by jurisdiction and by the specific facts of the incident. A solicitor specialising in employment or commercial law should be consulted.","redFlags":["Payment instructions arrived by email only with no phone confirmation","Supplier notified a change of bank details shortly before a large payment was due","No two-person authorisation process was in place for high-value transfers","The instruction came from an email domain with a subtle typo","Staff were not trained in payment fraud verification procedures"],"whatToDoNow":["Report to the bank immediately and request an urgent recall of the funds","Report to the Report Fraud service (formerly Action Fraud) or your national fraud authority","Preserve all emails and communication records as evidence","Review your cyber insurance policy to check cover for BEC losses","Notify your solicitor and, if relevant, your data protection officer (if personal data was involved)","Implement two-factor payment verification procedures to prevent recurrence"],"faq":[{"question":"Can the employee be dismissed for falling for a BEC scam?","answer":"This depends on whether they followed established procedures and acted reasonably. Dismissal following a scam loss would need to meet the legal test of fair dismissal in your jurisdiction — gross misconduct may be arguable if the employee clearly deviated from explicit procedures, but dismissal purely for being deceived by a sophisticated fraud is unlikely to be fair."},{"question":"Can the company sue the receiving bank for accepting fraudulent funds?","answer":"Increasingly, yes — both the sending and receiving bank share obligations under the APP reimbursement framework in the UK. The receiving bank has obligations not to facilitate fraud, and civil claims against receiving banks have succeeded in some cases. This is a developing area of law."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-section-75-claim","url":"https://scamencyclopedia.org/questions/what-is-a-section-75-claim","question":"What is a Section 75 claim and when can I use it?","shortAnswer":"Section 75 of the UK Consumer Credit Act 1974 makes your credit card company jointly liable with the merchant for purchases between £100 and £30,000 — it is a powerful consumer right that applies even if only part of the price was on the credit card.","explanation":"Section 75 is a statutory protection unique to UK credit card purchases. When you buy something costing between £100 and £30,000 with a credit card and the merchant breaches the contract (goods not delivered, significantly not as described, business becomes insolvent), your credit card company is equally liable with the merchant. This means you can claim directly from your card company for a refund, even if you only put a deposit on the card and paid the rest by other means.\n\nTo make a Section 75 claim, contact your credit card issuer in writing, explain the purchase, describe the breach of contract, and request reimbursement under Section 75. The issuer may conduct its own investigation. Unlike chargeback (which is a card scheme rule with time limits), Section 75 is a legal right and the card company cannot simply refuse it without legal basis.\n\nSection 75 does not apply to debit cards, to purchases via third-party payment systems in some circumstances, or to amounts outside the £100–£30,000 range (though chargeback may help with amounts below £100). It is one of the strongest protections available to UK consumers.\n\nThis is general information. The specific application of Section 75 depends on the facts of your purchase and whether there was a genuine breach of contract. Consult a consumer law adviser if your claim is disputed.","redFlags":["Merchant has gone out of business before delivering goods or services","Goods delivered were significantly different from what was described or advertised","Service paid for was never provided","Merchant is refusing to honour a warranty or guarantee","Purchase was fraudulent and the merchant identity was entirely fabricated"],"whatToDoNow":["Contact your credit card company in writing and specifically cite Section 75","Describe the breach of contract clearly and attach supporting evidence","Include your transaction details, the merchant name, and the amount","If the card company disputes your claim, escalate to the Financial Ombudsman Service","Keep copies of all correspondence in case of escalation"],"faq":[{"question":"Does Section 75 apply if I paid through PayPal?","answer":"Generally no. When you use a credit card via PayPal, the contract is between you and PayPal, not you and the merchant, which has typically excluded Section 75. PayPal has its own buyer protection, but if that fails you may not have a fallback Section 75 claim. Direct card payments to the merchant are safer for this reason."},{"question":"Is there a time limit for Section 75 claims?","answer":"There is no specific statutory time limit in the legislation itself, but the general 6-year limitation period for contract claims in England applies. Card companies may have their own internal processes with shorter timescales. Acting promptly is always advisable."}],"lastReviewed":"2026-06-10"},{"slug":"pension-scam-legal-protection-redress","url":"https://scamencyclopedia.org/questions/pension-scam-legal-protection-redress","question":"What legal protections and redress exist if I was victim of a pension scam?","shortAnswer":"Pension scam victims may have redress through the Financial Ombudsman Service, the Pension Ombudsman, compensation schemes, and civil litigation — but transfers to unregulated vehicles typically have limited compensation cover, making reporting and acting quickly essential.","explanation":"Pension scams — where victims are persuaded to transfer their pension into fraudulent or high-risk schemes — are particularly devastating because they can destroy retirement savings built over decades. They often involve promises of high returns, unusual 'loan-back' arrangements, or access to pension funds before age 55 (now 57).\n\nIf your pension was transferred out of a workplace scheme and into a scam vehicle, your former pension scheme trustees may themselves have liability if they failed to carry out required due diligence checks before authorising the transfer. The Pension Regulator has guidance on when trustees should have refused or delayed suspicious transfers.\n\nThe Pension Ombudsman (UK) can investigate complaints about pension providers and trustees. If a regulated financial adviser recommended the transfer, you can complain to the Financial Ombudsman Service and potentially the Financial Services Compensation Scheme (FSCS) covers up to £85,000 for poor advice from a regulated firm. Unregulated introducers (who organised the transfer but were not themselves FCA-regulated) are outside FSCS protection.\n\nThis is general information only. Pension fraud cases are complex and fact-specific. Specialist legal advice from a firm experienced in pension mis-selling is strongly recommended.","redFlags":["You were cold-called or contacted unsolicited about your pension","The offer promised guaranteed high returns or 'pension loans'","You were promised early access to your pension before retirement age","The adviser was not on the FCA register","You were pressured to transfer quickly and discouraged from seeking independent advice"],"whatToDoNow":["Report to the Report Fraud service (UK, formerly Action Fraud) and the Pensions Regulator immediately","Contact the Pension Ombudsman if your previous scheme trustees failed in their duty","If regulated advice was given, complain to the FCA and the Financial Ombudsman Service","Apply to FSCS if the adviser was FCA-regulated and has since failed","Seek specialist legal advice from a firm experienced in pension fraud","Do not pay any fees to 'release' your pension or 'unfreeze' the scheme"],"faq":[{"question":"Can I reclaim a pension transfer I made under duress or deception?","answer":"In some cases, yes — if you can show the transfer was induced by misrepresentation or undue influence, civil remedies may be available. This depends heavily on the specific facts and whether any of the parties are still traceable and solvent. Specialist legal advice is essential."},{"question":"Is the Pension Protection Fund relevant to scam victims?","answer":"The PPF protects members of defined benefit occupational pension schemes when an employer becomes insolvent — it is not designed to compensate pension scam victims. FSCS and the Pension Ombudsman are more relevant routes for scam victims."}],"lastReviewed":"2026-06-10"},{"slug":"data-breach-rights-after-scam","url":"https://scamencyclopedia.org/questions/data-breach-rights-after-scam","question":"Do I have rights if a company's data breach led to me being scammed?","shortAnswer":"Yes — if a company failed to protect your personal data and that failure led to fraud against you, you may have a claim for damages under data protection law, depending on the nature of the breach and whether it caused you identifiable harm.","explanation":"Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, organisations holding your personal data have legal obligations to protect it. If they fail to implement adequate security measures and your data is exposed in a breach that subsequently enables fraudsters to target you, you may have a right to compensation for the material or non-material damage you suffered.\n\nThe Information Commissioner's Office (ICO) in the UK investigates data protection breaches. You can make a complaint to the ICO, which can investigate and issue enforcement action and fines against the company — though the ICO does not award individual compensation directly.\n\nFor individual compensation, you would need to bring a civil claim against the company, either in the county court or potentially through a group litigation order if many people were affected. You must show that the data breach occurred, the company was responsible, and that you suffered identifiable damage as a result of the breach.\n\nThis is general information only. Data breach claims are legally complex and causation between a breach and subsequent fraud can be difficult to establish. Consult a data protection solicitor if you believe you have a claim.","redFlags":["A company notified you of a data breach involving your personal or financial information","You received targeted phishing emails shortly after a data breach from a company you use","Your identity was misused and the data used could only have come from a specific source","The company failed to notify you of a breach within the required 72-hour window"],"whatToDoNow":["Raise a complaint directly with the company and request details of what data was exposed","Report the breach to the ICO (UK) or relevant data protection authority","Document any fraud or loss that occurred following the breach","Consult a data protection or consumer law solicitor about a compensation claim","Monitor your credit file for signs of identity fraud following the breach","Change passwords for any accounts using the same credentials as the breached service"],"faq":[{"question":"Can I claim compensation without proving I actually lost money?","answer":"Under UK GDPR, compensation can be claimed for non-material damage including distress, anxiety, and loss of control over personal data — not just financial loss. However, courts require identifiable harm. A purely technical breach with no discernible impact on you would be harder to base a claim on."},{"question":"What is the ICO and can it get me compensation?","answer":"The ICO is the UK's data protection regulator. It investigates breaches and can take enforcement action against companies, but it does not award individual compensation. For compensation you need to pursue a civil claim separately, though an ICO finding against a company strengthens your civil case."}],"lastReviewed":"2026-06-10"},{"slug":"consumer-rights-fake-online-shop","url":"https://scamencyclopedia.org/questions/consumer-rights-fake-online-shop","question":"What consumer rights do I have against a fake online shop?","shortAnswer":"Your most effective recourse against a fake online shop is through your payment method — card chargeback, Section 75, or APP fraud claims — rather than through the shop itself, which will typically vanish or ignore communications.","explanation":"Fake online shops are designed to take your money and either deliver nothing, deliver counterfeit goods, or disappear entirely. Because they are often built and abandoned quickly, operated under false business names, and hosted in jurisdictions with limited consumer protection enforcement, pursuing the shop directly is generally not the most productive approach.\n\nHowever, you do have several practical recourse options through your payment method. If you paid by credit card, Section 75 (for UK purchases between £100–£30,000) or chargeback applies. Debit card chargeback is available through Visa and Mastercard. If you paid via bank transfer, APP fraud reimbursement rules may help. PayPal purchases may be covered by PayPal's Buyer Protection programme.\n\nYou should also report the fake shop to trading standards authorities (Trading Standards in the UK, the FTC in the US), which can investigate and take enforcement action, and to the web hosting company or registrar to have the site taken down and warn others. Report to the Report Fraud service (formerly Action Fraud) for a crime reference number.\n\nThis is general information. The specific options available depend on how you paid and your jurisdiction.","redFlags":["The shop's contact details are incomplete, vague, or fictional","Prices are dramatically below market rates","Website was created very recently (check creation date via WHOIS)","No genuine customer reviews exist on independent platforms","Payment options are limited to bank transfer, cryptocurrency, or non-reversible methods"],"whatToDoNow":["Contact your card issuer or bank to initiate a chargeback or APP fraud claim","Report the shop to Trading Standards (UK), FTC (US), or your national consumer authority","Report the URL to the web host and registrar asking for investigation and takedown","Report to the Report Fraud service and obtain a crime reference number","Leave a warning review on consumer review platforms to protect others","Report to your national cybersecurity authority if the site is still active and taking orders"],"faq":[{"question":"Can I report a fake shop to Google to get it removed from search results?","answer":"Yes — Google has a reporting mechanism for phishing and malware sites. You can also report deceptive content via Google's Transparency Report. Removing a site from search reduces the number of future victims, though it does not recover your money."},{"question":"The shop delivered something, but it is fake — do I still have recourse?","answer":"Yes. Receiving counterfeit goods is a breach of contract (goods not as described). You have the same chargeback and Section 75 options, and you can report the goods to trading standards as counterfeit products, which is a separate offence involving the supply chain."}],"lastReviewed":"2026-06-10"},{"slug":"ptsd-after-scam-is-it-real","url":"https://scamencyclopedia.org/questions/ptsd-after-scam-is-it-real","question":"Can being scammed cause PTSD or serious psychological harm?","shortAnswer":"Yes — financial fraud can cause clinically significant psychological distress including symptoms consistent with PTSD, anxiety disorders, and depression, particularly when the loss was large, involved betrayal of trust, or compromised financial security.","explanation":"Mental health professionals increasingly recognise that fraud victimisation can cause genuine psychological harm beyond short-term distress. For some people — particularly those who lost life savings, were targeted through a sustained relationship-based scam, or whose sense of identity or competence was deeply shaken — the experience meets clinical criteria for trauma responses including post-traumatic stress disorder.\n\nSymptoms that may indicate serious psychological impact include intrusive thoughts about the scam, nightmares, hypervigilance (being unable to trust any financial interaction), avoidance of financial activities, persistent shame or guilt, and significant disruption to sleep, concentration, or daily functioning.\n\nVictim support organisations and mental health charities recognise fraud trauma as a legitimate category of harm. NHS Talking Therapies (formerly IAPT) in the UK provides evidence-based treatment including CBT and trauma-focused interventions. Your GP can refer you, and many services accept self-referrals.\n\nThe harm is real and taking it seriously matters. You do not need a clinical diagnosis to seek support — if you are struggling, reaching out is the right thing to do.","redFlags":["You are experiencing intrusive memories or flashbacks related to the scam","You are avoiding all financial activity or online interaction out of fear","Sleep or appetite has been significantly disrupted for several weeks","You are experiencing persistent thoughts of worthlessness or self-blame","You are withdrawing from normal social and work activities"],"whatToDoNow":["Speak to your GP about the psychological impact of what happened","Self-refer to NHS Talking Therapies (England) or equivalent in your country","Contact a fraud victim support line — trained advisers provide confidential non-judgemental help","Allow yourself to acknowledge that what happened was genuinely traumatic","Consider a support group where you can speak with other fraud survivors","Ask a trusted person to help you with any financial tasks you find overwhelming right now"],"faq":[{"question":"Is psychological harm from fraud taken seriously by courts or insurers?","answer":"Yes, in appropriate circumstances. If your case involves civil litigation, psychiatric injury is a recognised head of damage if it is a clinically identifiable condition caused by the defendant's wrongful act. Documented treatment records and expert assessment are typically required. Speak with a personal injury or civil solicitor for advice specific to your situation."},{"question":"I feel fine most of the time but have moments of intense distress — is this normal?","answer":"Yes. Trauma responses are not always constant. Triggers such as receiving emails, seeing bank statements, or encountering reminders of the scam can provoke acute distress even in people who function well otherwise. This 'intermittent' pattern is recognised and treatable."}],"lastReviewed":"2026-06-10"},{"slug":"housing-deposit-scam-legal-rights","url":"https://scamencyclopedia.org/questions/housing-deposit-scam-legal-rights","question":"What legal rights do I have if I lost a rental deposit to a housing scam?","shortAnswer":"If you paid a deposit for a rental that did not exist or was not the landlord's to rent, you have civil claim rights against the fraudster and payment method recourse options — acting quickly to dispute the payment gives the best chance of recovery.","explanation":"Rental fraud typically involves advertising a property that is not available (taken from a genuine listing), requiring a deposit and sometimes first month's rent before viewing, then disappearing. Victims are often in urgent housing need, which makes the scam particularly harmful.\n\nIf you paid by bank transfer, APP fraud reimbursement rules (UK) apply — report to your bank immediately. If you paid by credit card, chargeback or Section 75 for amounts over £100 may apply. Speed matters: the sooner you report, the higher the chance the bank can attempt a recovery.\n\nYou can also report to your local council's fraud team, Trading Standards, Report Fraud (formerly Action Fraud), and the National Landlord Association (if relevant). Rental property fraud is often committed by someone who does not own the property — report to the genuine property owner or agent so the listing can be taken down.\n\nThis is general information only. Specific rights depend on how you paid, the exact circumstances, and your jurisdiction. A housing law adviser or citizens advice bureau can assess your options.","redFlags":["Landlord will not meet in person or let you view the property before paying a deposit","Property is advertised at significantly below market rent","Landlord claims to be abroad and asks for funds via bank transfer only","Listing images appear on multiple websites under different names or prices","Pressure to pay quickly before 'other applicants' take the property"],"whatToDoNow":["Report to your bank immediately and request reversal under APP fraud rules","Report to the Report Fraud service, your local police, and local council fraud team","Contact the genuine property owner or letting agent to have the listing removed","Report the fraudulent listing to the advertising platform","Contact a housing law adviser or citizens advice bureau about your rights","Document everything: the listing, correspondence, payment records"],"faq":[{"question":"Can I sue the real property owner if someone fraudulently rented out their property?","answer":"Generally no — the genuine property owner is also a victim in most cases. They did not authorise the rental and cannot be held liable for a fraud committed without their knowledge. Your claim is against the fraudster. However, if an estate agent or letting agency was involved and showed negligence, there may be a claim against them."},{"question":"What if I moved into the property and the real owner asks me to leave?","answer":"This is a serious situation. You may have limited occupier rights depending on your jurisdiction and circumstances. Seek urgent legal advice — a duty solicitor or housing law charity can advise. You are the victim of fraud, not an illegal occupier acting in bad faith."}],"lastReviewed":"2026-06-10"},{"slug":"job-offer-scam-what-to-do-legally","url":"https://scamencyclopedia.org/questions/job-offer-scam-what-to-do-legally","question":"What can I do legally if I paid money in response to a fake job offer?","shortAnswer":"Fake job scams that require upfront payments for training, equipment, or DBS checks are fraud — you can pursue chargeback or APP fraud recovery through your bank and should report to the appropriate fraud and employment authorities.","explanation":"Advance fee job scams ask applicants to pay for background checks, training materials, work equipment, visas, or 'starter kits' before they can begin a role that does not exist. These scams exploit people who are unemployed, underemployed, or urgently seeking work — making them a particularly harmful form of fraud.\n\nLegitimate employers do not require applicants to pay for their own recruitment, training, or equipment before starting work. Any job offer requiring an upfront payment before employment begins is a red flag that warrants serious scrutiny.\n\nFor recovery, the same bank recourse options apply: if you paid by credit card, chargeback or Section 75 (UK) may be available. If by bank transfer, APP fraud reimbursement rules apply. Report to your national fraud authority for a crime reference number, and report to the job platform or site where the listing appeared so it can be removed.\n\nThis is general information. Your specific options depend on how you paid, whether the 'employer' was identifiable, and your jurisdiction.","redFlags":["You were asked to pay for a DBS check, training kit, or uniform before starting","The job required no experience but offered unusually high pay","Communication was through a personal email or messaging app rather than a company address","The offer arrived unsolicited after you uploaded a CV to a job site","The 'company' address or registration cannot be verified on official registers"],"whatToDoNow":["Stop all further payments immediately","Report to your bank and request recovery under APP fraud or chargeback rules","Report to the Report Fraud service (UK, formerly Action Fraud), the FTC (US), or your national fraud authority","Report to the job platform where the advert appeared so it can be removed","Report to ACAS (UK) or your equivalent employment authority if the fake company is named","Warn others by leaving a review on job-search feedback platforms"],"faq":[{"question":"Is it illegal for an employer to charge for DBS checks or training?","answer":"While there is no universal law banning employers from passing on DBS costs in all circumstances, requiring a payment before any employment begins — with no guarantee of a job — is a hallmark of fraud. Legitimate employment offers a contract before any financial commitment is required of the employee."},{"question":"What if I also gave the fake employer my bank details for 'salary payments'?","answer":"If you shared your bank account details, contact your bank immediately to discuss whether your account needs additional security measures. Sharing bank details does not automatically give someone access to your funds, but if you shared further information (sort code, account number, and authentication details) additional steps may be needed."}],"lastReviewed":"2026-06-10"},{"slug":"financial-ombudsman-what-it-does","url":"https://scamencyclopedia.org/questions/financial-ombudsman-what-it-does","question":"What does the Financial Ombudsman Service do and how do I use it?","shortAnswer":"The Financial Ombudsman Service (FOS) in the UK is a free, independent service that resolves disputes between consumers and financial businesses — it can order banks and other firms to reimburse victims in ways that court action cannot always achieve.","explanation":"The Financial Ombudsman Service (FOS) was created by law to provide consumers with a free, impartial way to resolve disputes with UK financial services firms. It covers banks, insurers, investment firms, credit card companies, and other regulated financial businesses. You do not need a solicitor to use the FOS and there is no charge to consumers.\n\nBefore approaching the FOS, you must give your financial firm the opportunity to resolve your complaint directly — typically eight weeks. If you are still unhappy after receiving their final response (or if they do not respond in time), you can refer the matter to the FOS within six months of that final response letter.\n\nAn FOS investigator reviews the case and issues an initial assessment. If you and the firm accept it, the matter is resolved. If either party disputes it, an ombudsman makes a binding final decision. These decisions can include ordering refunds, compensation, and interest. Firms are legally bound to comply; consumers are not obliged to accept a decision they dislike.\n\nThis is general information about how the FOS works. Your specific case outcome depends on the facts, the applicable rules, and the ombudsman's assessment.","redFlags":["Your bank gave a final response rejecting your refund claim without adequate justification","Your bank has not responded within 8 weeks of your formal complaint","The firm uses technical language to obscure why your claim was refused","You were told to accept a partial settlement that does not reflect your full loss"],"whatToDoNow":["Send a formal written complaint to your financial firm first and keep a copy","Wait up to 8 weeks for a final response (or accept an earlier one if provided)","If unsatisfied with the final response, submit your case to the FOS within 6 months","Provide all evidence: the firm's response, your original complaint, supporting documents","Use the FOS online complaints form or call their consumer helpline"],"faq":[{"question":"Is the Financial Ombudsman the same as a court?","answer":"No. The FOS is an alternative dispute resolution service, not a court. It is free and informal compared to litigation. Ombudsman decisions are binding on firms but consumers can still go to court if they prefer — though in practice the FOS resolves the vast majority of disputes faster and at no cost to the consumer."},{"question":"Can I use the FOS against overseas banks or non-UK firms?","answer":"The FOS covers firms regulated by the FCA and PRA in the UK. If a firm was not UK-regulated, the FOS cannot consider your complaint. For overseas firms, you would need to use the relevant ombudsman or regulator in that country."}],"lastReviewed":"2026-06-10"},{"slug":"telling-family-friends-you-were-scammed","url":"https://scamencyclopedia.org/questions/telling-family-friends-you-were-scammed","question":"Should I tell my family and friends that I was scammed?","shortAnswer":"Telling trusted people about a scam has significant practical and emotional benefits — it provides support, protects them from similar scams, and breaks the cycle of silence that allows scam stigma to persist.","explanation":"Many scam victims keep the experience secret, driven by shame, embarrassment, or concern about how others will react. While the decision is personal and you are not obliged to tell anyone, the evidence strongly suggests that isolation tends to prolong recovery and that honest disclosure to trusted people has real benefits.\n\nPractically, telling family and friends means they can be alert to similar approaches, which may protect them directly. It also means you have people who know what happened and can notice if you are targeted again — for example, by a 'recovery scam' following up on the original fraud.\n\nEmotionally, many people find that the anticipated reaction is far more judgemental in their imagination than in reality. Most friends and family, when told what happened, respond with empathy rather than blame. The act of speaking about it often reduces the shame significantly.\n\nIf you are worried about judgement, choosing one trusted person as a first step is a reasonable approach. You control how much detail you share, who you tell, and when.","redFlags":["You are keeping the scam completely secret because you fear being judged","You are in contact with someone online following up on the original scam — potential recovery scam","Family have noticed changes in your mood or finances but do not know why","You are making financial decisions in secret because you are embarrassed to involve others"],"whatToDoNow":["Choose one trusted person and tell them what happened in your own time and at your own pace","If you are nervous, write it down first — sometimes a message is easier than a conversation","Allow the other person to respond before assuming how they will react","Consider whether family members may benefit from knowing to protect themselves","Seek external support if family dynamics make disclosure difficult"],"faq":[{"question":"What if my family makes me feel worse by being unsupportive?","answer":"Not all families respond helpfully, and if you anticipate a judgemental reaction, you do not have to disclose to people who will not be supportive. Fraud victim support organisations, online survivor communities, and counsellors can provide the non-judgemental support that family sometimes cannot."},{"question":"My partner does not know I was scammed. Do I have to tell them?","answer":"If the financial loss affects shared finances or your relationship, transparency is generally advisable, but there is no legal obligation to disclose. Many couples navigate this with the help of a relationship counsellor if the conversation is difficult. Ongoing financial decisions made in secret often create more harm to a relationship than the original disclosure would have."}],"lastReviewed":"2026-06-10"},{"slug":"can-i-report-scam-anonymously","url":"https://scamencyclopedia.org/questions/can-i-report-scam-anonymously","question":"Can I report a scam anonymously without giving my personal details?","shortAnswer":"Yes — most national fraud authorities accept anonymous reports, though providing your details significantly increases the chance of an investigation and is required to pursue personal recovery claims.","explanation":"If you are embarrassed, fearful, or simply prefer not to be identified, you can report a scam anonymously through several channels. In the UK, Report Fraud (formerly Action Fraud) accepts anonymous reports. Crimestoppers (0800 555 111) takes anonymous tips. In the US, the FTC's reportfraud.ftc.gov and the FBI's IC3 allow reports without full identification.\n\nAnonymous reporting contributes to the intelligence picture and can trigger investigations, particularly if the scam is large-scale or the same operation is reported multiple times. Each report adds to the data that helps investigators identify patterns and disrupt operations.\n\nHowever, if you want the bank to investigate your specific case, for a chargeback, for an ombudsman complaint, or for civil legal action, you will need to identify yourself and provide your account details. Anonymous reports support the public interest; identified reports support your personal recovery.\n\nIf your fear about reporting is related to concerns that you may have been complicit (for example, if you unknowingly acted as a money mule), speaking with a legal adviser before reporting can help you understand your position. Voluntary self-reporting is almost universally treated as a mitigating factor.","redFlags":["You are afraid of retaliation from the scammer if you report","You are concerned that reporting will reveal personal information publicly","You were partially involved (e.g., as an unknowing money mule) and are uncertain of your liability"],"whatToDoNow":["Use Report Fraud (UK), FTC (US), or your national authority's anonymous reporting option","Call Crimestoppers (UK) if you prefer not to report online","Provide as much detail as possible even anonymously — account numbers, URLs, phone numbers help","Consider that identified reports are far more likely to support personal recovery","Speak to a legal adviser if you are concerned about your own liability before reporting"],"faq":[{"question":"Will reporting lead to my details being passed to the scammer?","answer":"No. Fraud reports are confidential investigative records. Your details are not shared with the subject of the investigation. Information may be shared with other law enforcement agencies, but appropriate data protection safeguards apply."},{"question":"Does anonymous reporting ever lead to prosecution?","answer":"Yes, in some cases — particularly where the anonymous tip identifies a specific organisation or individual that investigators already have on their radar, or where the information is corroborated by other reports. It is less likely to lead to prosecution on its own than an identified witness statement."}],"lastReviewed":"2026-06-10"},{"slug":"insurance-claim-for-fraud-loss","url":"https://scamencyclopedia.org/questions/insurance-claim-for-fraud-loss","question":"Can I make an insurance claim for money lost to a scam?","shortAnswer":"Some insurance policies cover fraud losses — particularly home contents insurance with financial fraud extensions, standalone identity theft policies, and some bank accounts with packaged fraud cover — but many standard policies do not, so check your policy terms carefully.","explanation":"Insurance cover for fraud losses is not universal, but it exists in several forms. Some home contents insurance policies include an extension for 'cyber' or 'financial fraud' cover. Packaged bank accounts (premium accounts with a monthly fee) in the UK often include fraud protection elements. Standalone identity theft insurance policies are available and some credit card products include purchase protection.\n\nBusiness insurance policies frequently include crime cover or cyber insurance that covers employee-related fraud losses, business email compromise, and social engineering fraud. These are distinct from personal consumer policies.\n\nWhen making a claim, you will typically need: a crime reference number from police or your fraud authority, full documentation of the loss, evidence that you took reasonable steps to protect yourself, and in some cases evidence that you reported promptly. Insurers may refuse claims if they believe you acted negligently.\n\nThis is general information. Policy terms vary enormously and your specific situation will determine whether cover applies. Read your policy documents and speak with your insurer or an insurance broker for advice on your circumstances.","redFlags":["Your standard home contents policy excludes 'voluntary' payments to third parties","You have not reported to police (required for most insurance claims for fraud)","The loss resulted from something your policy specifically excludes (e.g., online gambling losses misrepresented as fraud)","You delayed reporting significantly — insurers require prompt notification"],"whatToDoNow":["Check your home contents, bank account, and any standalone insurance policies for fraud cover","Obtain a crime reference number from your fraud authority before claiming","Notify your insurer promptly — late notification can invalidate claims","Document the loss fully and prepare to submit all evidence","If a claim is refused, escalate to the Financial Ombudsman Service","Speak to an insurance broker about suitable cover for the future"],"faq":[{"question":"Does cyber insurance cover individuals or just businesses?","answer":"Cyber insurance is available for both. Business cyber insurance is well-established and commonly purchased. Personal cyber insurance (for individuals and households) is a growing product line, sometimes bundled into home contents or sold as a standalone policy. Check what your existing policies include before purchasing additional cover."},{"question":"If my bank reimburses me, can I also claim on insurance for the same loss?","answer":"No — insurance operates on the principle of indemnity: you cannot recover more than your actual loss. If your bank has already reimbursed you, an insurance claim for the same loss would not be payable. You must disclose any recovery already received when claiming."}],"lastReviewed":"2026-06-10"},{"slug":"scam-victim-rights-elderly-vulnerable","url":"https://scamencyclopedia.org/questions/scam-victim-rights-elderly-vulnerable","question":"Are there extra legal protections for elderly or vulnerable scam victims?","shortAnswer":"Yes — banks, regulators, and financial ombudsman services recognise enhanced obligations when dealing with vulnerable consumers, and in serious cases involving abuse of a vulnerable person, criminal law provides additional protections.","explanation":"Vulnerability in the context of financial consumer protection refers to circumstances that affect a person's ability to make informed decisions or protect their own interests — including age-related cognitive decline, bereavement, mental health conditions, learning disabilities, and serious illness. Regulators including the FCA in the UK have issued specific guidance requiring financial firms to identify and appropriately treat vulnerable consumers.\n\nIn practice, this means banks and financial services firms should apply additional scrutiny to transactions that may indicate a vulnerable customer is being exploited. If your bank failed to apply appropriate vulnerability safeguards and you suffered loss as a result, this can be a ground for an ombudsman complaint or civil claim.\n\nCriminal law also provides additional protections. In England and Wales, the Mental Capacity Act 2005 and offences under the Fraud Act and the Care Act address financial abuse of people lacking capacity or in a position of vulnerability. Financial abuse of an elderly person may constitute a safeguarding matter, which should be reported to the local authority's adult safeguarding team alongside any fraud authority report.\n\nThis is general information. The specific protections available depend on the individual's circumstances, their relationship to the scammer, and the jurisdiction. A solicitor experienced in elder law or adult safeguarding can provide specific advice.","redFlags":["A vulnerable person was persuaded to make large or repeated transfers without apparent understanding","A person with cognitive impairment was targeted or exploited by someone in a position of trust","Bank processed repeated unusual transactions without applying vulnerability checks","A carer or family member may have been involved in the financial abuse"],"whatToDoNow":["Report to your local authority adult safeguarding team if the victim is a vulnerable adult","Report to the Report Fraud service (formerly Action Fraud) and specify that a vulnerable person was the victim","Contact the bank and specifically raise the vulnerability dimension of the complaint","Seek legal advice about powers of attorney or Court of Protection involvement if appropriate","Contact Age UK, Mind, or relevant charity for support and signposting"],"faq":[{"question":"Can a family member report a scam on behalf of a vulnerable relative?","answer":"Yes. Family members can report to fraud authorities, contact banks, and file ombudsman complaints on behalf of a vulnerable relative — especially if they have lasting power of attorney. Banks should have processes for accepting reports and complaints from authorised third parties."},{"question":"What is adult safeguarding and when is it relevant to scams?","answer":"Adult safeguarding refers to the multi-agency process for protecting adults with care and support needs from abuse and neglect. Financial abuse — including fraud and exploitation — triggers safeguarding obligations for local authorities and other bodies. If a vulnerable adult is being systematically exploited, safeguarding referral may be more effective than a standard fraud report alone."}],"lastReviewed":"2026-06-10"},{"slug":"bank-transfer-fraud-can-money-be-recalled","url":"https://scamencyclopedia.org/questions/bank-transfer-fraud-can-money-be-recalled","question":"When a bank transfer was made to a scammer, can the money be recalled?","shortAnswer":"Banks can attempt to recall a fraudulent transfer, and recalls sometimes succeed if the scammer's receiving account still holds the funds — speed is critical, as scammers typically move money within hours.","explanation":"When you report a fraudulent bank transfer immediately, your bank can contact the receiving bank to request a recall of the funds. A recall is a best-efforts request between the two banks rather than a right you can enforce, and success depends entirely on whether the receiving account still holds the money — fraudsters typically drain receiving accounts very quickly into further mule accounts or convert to cash or cryptocurrency.\n\nAct within the hour if possible. Call your bank's fraud line immediately, not their general number. Request they place an urgent payment recall and log it as a fraud-related transaction. Obtain a reference number for the recall request.\n\nA failed recall does not end your claim, and the two routes are separate. If you were deceived into making the payment, reimbursement under the UK's mandatory Authorised Push Payment (APP) fraud rules — in force since 7 October 2024 for Faster Payments and CHAPS transfers, up to £85,000 per claim — does not depend on the money still being recoverable. UK banks are also required to offer 'Confirmation of Payee', which warns you when the account name you enter does not match the account you are paying; a missing or overridden warning is useful evidence, but you do not need it to claim.\n\nThis is general information. Recall success rates vary and are not guaranteed. Reimbursement is subject to exceptions, including where the consumer failed to take reasonable care, and your options also depend on the type of payment made.","redFlags":["You made a transfer to new bank details supplied via email without phone verification","The account name did not match when you checked Confirmation of Payee but you proceeded anyway","You are now unable to reach the recipient you believed you were paying","The payment was to an account you had not used before for a large sum"],"whatToDoNow":["Call your bank's fraud line immediately — minutes matter","Request an urgent payment recall and obtain a reference number","Report to the Report Fraud service (formerly Action Fraud) and provide the receiving account details","If the recall fails, make a formal APP fraud reimbursement claim","Escalate to the Financial Ombudsman if the bank refuses reimbursement without valid reason","Preserve all communications that induced you to make the transfer"],"faq":[{"question":"What is Confirmation of Payee and should I always use it?","answer":"Confirmation of Payee is a UK service that checks whether the name you enter matches the account details you are sending to. It helps prevent misdirected payments and can flag when you are paying an unexpected account. If CoP warns you of a name mismatch, investigate before proceeding — do not simply override the warning."},{"question":"How quickly do scammers move funds from a receiving account?","answer":"Very quickly — often within minutes to a few hours through a layered network of mule accounts. This is why reporting within minutes of discovering the fraud gives the best chance of recall. After 24 hours, the money has typically been dispersed across multiple accounts or converted to untraceable assets."}],"lastReviewed":"2026-09-21"},{"slug":"scam-impersonating-hmrc-or-irs-rights","url":"https://scamencyclopedia.org/questions/scam-impersonating-hmrc-or-irs-rights","question":"What are my rights if I was scammed by someone impersonating HMRC or the IRS?","shortAnswer":"Government impersonation scams are serious criminal offences — victims have the same bank recovery and reporting options as for other fraud, and reporting specifically to the impersonated agency is important as they track and publicise such operations.","explanation":"HMRC (UK) and IRS (US) impersonation scams involve criminals contacting victims by phone, text, or email claiming the victim owes unpaid tax and faces immediate arrest or asset seizure unless they pay immediately. The urgency and authority conveyed make these scams highly effective, even against people who would normally be cautious.\n\nIt is important to know that genuine HMRC and IRS communications are almost never made by unexpected telephone call demanding immediate payment by unusual methods. Genuine tax authorities send formal letters, allow time to respond, and do not demand gift cards, cryptocurrency, or wire transfers.\n\nFor recovery, the same options apply as for other fraud: if payment was made by bank transfer, APP fraud reimbursement; if by card, chargeback or Section 111 75. Report to the Report Fraud service (formerly Action Fraud), your local police, and specifically to HMRC's phishing reporting service (phishing@hmrc.gov.uk) or the IRS impersonation reporting process.\n\nThis is general information. If you received a threatening communication purporting to be from a tax authority and are unsure if it is genuine, contact the authority directly using contact details from their official website — never call a number provided in the suspicious message.","redFlags":["You received an unexpected call claiming you owe tax and face imminent arrest","Payment was demanded by gift card, wire transfer, or cryptocurrency","You were told to keep the matter confidential and not tell family","The caller became aggressive when you questioned them or offered to call back","You were given a phone number to call that is not the official published number"],"whatToDoNow":["Report to the Report Fraud service (UK) or IC3/IRS impersonation hotline (US)","Report to HMRC directly at phishing@hmrc.gov.uk or via their fraud reporting pages","Contact your bank immediately about recovery of any payments made","Warn family members — HMRC/IRS scams target multiple people in the same household","Block the number and do not engage further with any follow-up contacts"],"faq":[{"question":"Does HMRC ever call people on the phone?","answer":"HMRC does sometimes make outbound calls, but they will never demand immediate payment over the phone or threaten arrest. They will always follow up in writing and allow time to respond. If you receive an unexpected call claiming to be HMRC, hang up and call HMRC directly on their published number to verify."},{"question":"Could I face real tax issues after reporting a fake HMRC contact?","answer":"No — reporting a scam impersonating HMRC to the real HMRC does not trigger any investigation of your actual tax affairs. The two matters are entirely separate."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-gross-negligence-in-bank-fraud","url":"https://scamencyclopedia.org/questions/what-is-gross-negligence-in-bank-fraud","question":"What does 'gross negligence' mean when banks refuse scam refunds?","shortAnswer":"Gross negligence in the context of bank fraud refusals means conduct significantly below what a reasonable person would do — it is a high legal bar that simply being deceived does not meet, and banks must prove it rather than merely assert it.","explanation":"'Gross negligence' is the standard banks use to deny refunds on unauthorised or APP fraud claims. Under UK payment services rules, banks cannot deny a refund simply because the victim was careless — they must show the customer acted with a level of recklessness substantially below what a reasonable person would do in the circumstances.\n\nExamples of what courts and the FOS have found to be gross negligence include: ignoring explicit fraud warnings from the bank during the payment process, sharing a PIN with another person, or making a payment after being clearly told it was fraudulent by the bank. Examples of what has been found not to constitute gross negligence include: being deceived by sophisticated impersonation, trusting someone over a long period of relationship-building, or clicking a phishing link.\n\nBanks sometimes assert gross negligence without proper evidence or based on reasoning that would not withstand scrutiny. If your bank refuses your claim citing gross negligence, ask them to provide their specific reasoning in writing and challenge any reasoning that does not account for the sophistication of the fraud you experienced.\n\nThis is general information. What constitutes gross negligence in any specific case is a factual and legal question. The Financial Ombudsman Service has upheld many complaints where banks incorrectly applied the gross negligence standard.","redFlags":["Your bank asserts gross negligence without specifying exactly what you did wrong","The bank argues you should have spotted obvious red flags without acknowledging how convincing the fraud was","You ignored a specific fraud warning shown by the bank during the payment flow","The bank's refusal letter uses vague language rather than specific facts"],"whatToDoNow":["Request the bank's specific reasoning for gross negligence in writing","Challenge any characterisation that does not reflect the actual sophistication of the scam","Escalate to the Financial Ombudsman Service with a full account of the fraud","Include evidence of how convincing the scam was — screenshots, emails, call records","Cite the FCA's Consumer Duty and vulnerability obligations if applicable"],"faq":[{"question":"Does sharing my bank account details count as gross negligence?","answer":"It depends on context. Sharing your sort code and account number is not generally considered gross negligence — this information is routinely given for receiving payments. Sharing your full card details, online banking password, or one-time passcode with someone who then uses them fraudulently is a different matter and may affect your position."},{"question":"If I ignored a Confirmation of Payee warning, is that gross negligence?","answer":"Possibly — it depends on the specific warning and your reasons for proceeding. If the bank showed a clear mismatch warning and you continued without further verification, this is a factor the FOS will consider. However, being told by a convincing fraudster that the mismatch is normal or due to a business name difference is a relevant counter-argument."}],"lastReviewed":"2026-06-10"},{"slug":"scam-on-social-media-platform-liability","url":"https://scamencyclopedia.org/questions/scam-on-social-media-platform-liability","question":"Can a social media platform be held liable if I was scammed through it?","shortAnswer":"Social media platforms currently have very limited direct legal liability for individual fraud in most jurisdictions, though online safety legislation in some countries is beginning to impose obligations on platforms to tackle fraud — reporting to the platform remains important.","explanation":"Under existing law in the UK and US, online platforms benefit from broad liability protections for third-party content — Section 230 of the US Communications Decency Act and the previous Electronic Commerce Regulations in the UK have historically insulated platforms from liability for user-generated content including fraudulent advertisements and scam accounts.\n\nHowever, this is changing. The UK Online Safety Act 2023 imposes obligations on platforms to address illegal content including fraud, with potential regulatory action from Ofcom for non-compliance. The EU Digital Services Act imposes due diligence obligations on very large online platforms. These are regulatory frameworks rather than direct civil liability to individual victims in most cases.\n\nFor advertising fraud specifically — where a scam advertisement appeared on a platform — there have been civil claims and regulatory actions against platforms, with varying outcomes. The UK has introduced the Online Advertising Programme to address fraudulent advertising specifically.\n\nThis is general information. The law in this area is developing quickly. Consulting a media law or consumer law solicitor can provide up-to-date advice on specific platform liability in your situation.","redFlags":["You were targeted by a fraudulent advertisement on a major social media platform","A scam account impersonating a public figure ran on the platform for weeks","You reported the scam account or ad and the platform took no action","The platform's ad targeting allowed a scammer to reach you based on your financial interests"],"whatToDoNow":["Report the fraudulent account, advertisement, or content directly to the platform","Screenshot the fraudulent content and keep records of your report and the platform's response","Report to your national fraud authority and Ofcom (UK) for Online Safety Act compliance issues","Report to the ASA (UK) if the fraud was in the form of an advertisement","Pursue recovery through your bank and payment method rather than the platform"],"faq":[{"question":"Does reporting a scam to a social media platform actually do anything?","answer":"It varies by platform and volume of reports. Major platforms have automated and human moderation teams that respond to reports. A single report may result in removal of the scam content; multiple reports on the same operation often accelerate action. It also creates a record of platform knowledge, which may be relevant in any regulatory investigation."},{"question":"What is the Online Safety Act and does it help scam victims?","answer":"The Online Safety Act 2023 requires platforms to have systems to identify and remove illegal content including fraud and scam content. It does not create a direct right of action for individual victims against platforms. Ofcom oversees compliance and can impose substantial fines, which may over time incentivise platforms to act more effectively on fraud."}],"lastReviewed":"2026-06-10"},{"slug":"travel-scam-consumer-rights-refund","url":"https://scamencyclopedia.org/questions/travel-scam-consumer-rights-refund","question":"What consumer rights do I have if I was scammed by a fake travel booking?","shortAnswer":"Fake travel bookings — whether hotels, flights, or package holidays — trigger the same payment recourse options as other purchase scams, and ATOL and ABTA protections may apply if a regulated travel provider was involved.","explanation":"Travel scams range from fake holiday rental listings to fraudulent booking sites that take payment but issue no genuine reservation. Victims often only discover the fraud upon arrival or when the genuine hotel confirms no booking was made in their name.\n\nFor payment recovery, the key factor is how you paid. Credit card payments benefit from Section 75 (UK, £100–£30,000) and chargeback. Debit card payments may benefit from chargeback. Bank transfers are covered by APP fraud reimbursement rules in the UK.\n\nFor package holidays booked with an ATOL-licensed operator, ATOL protection covers you if the operator fails financially. For ABTA-affiliated operators, ABTA codes of conduct and bonding provide additional layers of protection. These protections apply to licensed operators that become insolvent — they do not apply to fraudulent imposters pretending to be licensed operators, though the impersonation is itself a fraud that should be reported.\n\nThis is general information. The specific protections available depend on the nature of the booking, the payment method, and whether a licensed operator was involved. A consumer law adviser can assess your specific situation.","redFlags":["The booking confirmation came from an unofficial email domain, not the genuine company","Price was dramatically below comparable offers from established platforms","Payment was required by bank transfer rather than credit card","The 'booking' was made through a third-party site with no genuine connection to the hotel or airline","On arrival, the hotel has no record of your reservation"],"whatToDoNow":["Contact your card issuer or bank immediately to initiate a chargeback or APP fraud claim","Report to the Report Fraud service (formerly Action Fraud) and your national consumer protection authority","Inform the genuine hotel, airline, or booking platform that their brand is being impersonated","Check whether the operator was ATOL/ABTA licensed for package holiday claims","Retain all booking confirmations, communications, and payment records"],"faq":[{"question":"Does ATOL cover me if I booked through a fake website impersonating a real operator?","answer":"No. ATOL protection applies when you book with a genuine ATOL-licensed operator that then fails financially. If you were defrauded by a site impersonating a licensed operator, ATOL does not cover you. Your recovery route is through your payment method and fraud reporting. However, reporting the impersonation to ATOL helps them take action."},{"question":"Can I get a refund on flights I cannot board because my booking was fraudulent?","answer":"Not directly from the airline — you never had a genuine booking. Your refund claim is against the fraudulent seller through your payment method (chargeback, Section 75, APP fraud). The airline itself has no obligation in respect of a booking that was never genuinely made with them."}],"lastReviewed":"2026-06-10"},{"slug":"power-of-attorney-misused-financial-abuse","url":"https://scamencyclopedia.org/questions/power-of-attorney-misused-financial-abuse","question":"What can I do if someone used a power of attorney to steal from me or a relative?","shortAnswer":"Misuse of a power of attorney is a serious criminal and civil matter — victims can apply to the Court of Protection, report to the Office of the Public Guardian, and in serious cases have the power revoked and assets recovered through civil litigation.","explanation":"A lasting power of attorney (LPA) or enduring power of attorney (EPA) gives an attorney significant legal power over someone's finances. When that power is abused — for example, by an attorney who transfers funds to themselves, makes gifts to family members, or depletes assets for personal benefit — it constitutes financial abuse and may be both a criminal offence and grounds for civil action.\n\nIn England and Wales, the Office of the Public Guardian (OPG) investigates complaints about attorneys and deputies. You can report concerns about LPA misuse to the OPG, which can investigate and, in serious cases, apply to the Court of Protection to revoke the LPA and appoint a different decision-maker.\n\nThe Court of Protection can also make recovery orders, requiring an abusive attorney to repay funds taken without proper authority. Criminal prosecution for theft, fraud, or abuse of position may also follow where the evidence is sufficient.\n\nThis is general information. Cases of LPA misuse are legally complex and often emotionally difficult, particularly when the attorney is a family member. A solicitor experienced in Court of Protection work should be consulted as soon as concerns arise.","redFlags":["Large or unexplained withdrawals from the donor's account since the LPA was registered","The attorney has made gifts to themselves or family from the donor's assets","The donor's financial affairs are being kept hidden from other family members","The donor's living standards have declined despite having significant assets","The attorney is making financial decisions outside the scope of the LPA"],"whatToDoNow":["Report concerns to the Office of the Public Guardian (England and Wales)","Apply to the Court of Protection for an investigation and potential LPA revocation if abuse is confirmed","Contact Adult Safeguarding at the donor's local authority if the donor is a vulnerable adult","Consult a Court of Protection solicitor urgently about recovery options","Gather financial records showing the pattern of withdrawals or transfers"],"faq":[{"question":"Can an LPA be cancelled if an attorney has been dishonest?","answer":"Yes. The Office of the Public Guardian can apply to the Court of Protection to revoke an LPA if the attorney is found to have acted dishonestly, recklessly, or against the donor's interests. The Court of Protection has wide powers to make this happen."},{"question":"What if the person who misused the LPA has spent all the money?","answer":"Civil recovery is still possible even if the money has been spent. A court can issue a money judgment against the attorney personally. Recovery depends on whether the attorney has assets of their own against which the judgment can be enforced. Criminal proceedings and recovery orders can run in parallel."}],"lastReviewed":"2026-06-10"},{"slug":"building-trust-again-after-scam","url":"https://scamencyclopedia.org/questions/building-trust-again-after-scam","question":"How do I rebuild trust in people and institutions after being scammed?","shortAnswer":"Rebuilding trust after a scam is a gradual process that involves distinguishing healthy caution from excessive fear, re-engaging with social connections, and taking small positive steps that restore confidence in your own judgement.","explanation":"One of the lasting harms a scam can cause is damage to a person's capacity to trust — in other people, in institutions, and in their own judgement. This is a normal response to betrayal, but when it becomes generalised and prevents ordinary life functioning, it benefits from active attention.\n\nPsychologists suggest a calibrated approach: rather than abandoning all caution or surrendering entirely to distrust, gradually testing trust in low-stakes situations builds confidence. Reconnecting with people whose trustworthiness is already established — old friends, family members with a track record of reliability — is a good starting point.\n\nFor institutions, learning about the specific safeguards and regulations that exist (deposit protection, fraud reimbursement rights, ombudsman services) can help replace vague fear with accurate, manageable risk assessment. Understanding that legitimate organisations have specific identifying characteristics helps distinguish them from fraudsters.\n\nIf distrust is pervasive, causing significant distress, or affecting your ability to work or maintain relationships, professional support from a counsellor or therapist familiar with fraud trauma can be genuinely transformative. Recovery is possible.","redFlags":["You are unable to use banking or financial services at all out of fear","You are distrusting everyone, including people with a long track record of reliability","You are making financial decisions based entirely on fear rather than reasonable assessment","Mistrust is affecting close relationships or work functioning"],"whatToDoNow":["Identify one low-risk financial or social interaction you can test trust in","Learn specifically what protections exist (deposit protection, fraud refund rights) to replace vague fear","Reconnect with established trusted relationships as a foundation","Speak with a therapist if distrust is causing significant functional impairment","Seek out fraud survivor communities where others share their recovery experiences"],"faq":[{"question":"Is it reasonable to be permanently more cautious after a scam?","answer":"A degree of heightened caution is reasonable and even beneficial — being aware of common fraud patterns, verifying identities before paying, and slowing down when urged to act quickly are protective behaviours. The goal is calibrated vigilance, not paralysing distrust."},{"question":"What if I was scammed by someone I knew personally?","answer":"Fraud by a known person — a friend, family member, or colleague — is particularly damaging to trust because the foundation of the relationship itself was exploited. These situations often benefit from professional therapeutic support as well as the same legal and financial recourse available for any fraud."}],"lastReviewed":"2026-06-10"},{"slug":"advance-fee-fraud-legal-options","url":"https://scamencyclopedia.org/questions/advance-fee-fraud-legal-options","question":"What legal options do I have after an advance fee fraud?","shortAnswer":"Advance fee fraud victims can pursue bank recovery (chargeback, APP fraud), report to fraud authorities, and in limited cases pursue civil action — but since perpetrators are typically overseas and anonymous, bank recovery is usually the most practical route.","explanation":"Advance fee fraud (also known as '419 fraud') involves paying an upfront fee to receive a much larger sum that never materialises — classic forms include lottery winnings, inheritance releases, or investment returns. The scammer demands a series of escalating fees and the promised payment never arrives.\n\nBank recovery options depend on how you paid. Card payments may qualify for chargeback; bank transfers are subject to APP fraud reimbursement rules in the UK. Each individual payment may need to be disputed separately, which requires evidence for each transaction.\n\nReporting to the Report Fraud service (UK, formerly Action Fraud) or the FTC (US) is important. Advance fee fraud is well-documented and the intelligence from your report contributes to larger investigations. The FTC has taken enforcement action resulting in consumer redress in some cases, though individual recovery from these funds is uncertain and slow.\n\nCivil action against overseas perpetrators is rarely practical, but if you can identify a domestic facilitator — a domestic bank account used to receive funds, a UK-based company in the chain — there may be more tractable targets for legal action. This is general information only.","redFlags":["You paid multiple fees to 'release' a large sum that kept being delayed","Each payment was justified by a new unexpected requirement","The person communicating with you claimed to be a lawyer, banker, or official","You were promised an extraordinary sum in return for a modest upfront payment","The 'opportunity' involved wealth from an overseas estate, lottery, or inheritance"],"whatToDoNow":["Stop all further payments immediately — no legitimate opportunity requires ongoing advance fees","Contact your bank about each individual payment and request chargeback or APP fraud claims","Report to the Report Fraud service and the FTC with full details of all payments and communications","Preserve all emails, correspondence, and payment records","Do not engage with any follow-up contact claiming to help you recover previous losses"],"faq":[{"question":"Is there a statute of limitations on fraud claims?","answer":"Yes. In England and Wales, the standard limitation period for civil fraud claims is six years from when the fraud was discovered, or could with reasonable diligence have been discovered. In the US it varies by state and type of claim. Acting within limitation periods matters for civil cases."},{"question":"I sent money in stages over several months — does that affect my claims?","answer":"Each payment must generally be disputed separately with your bank, but all payments are part of the same fraudulent scheme, which is relevant to the overall APP fraud claim. Provide a full chronological account of all payments when reporting to your bank and the fraud authority."}],"lastReviewed":"2026-06-10"},{"slug":"health-medical-scam-consumer-rights","url":"https://scamencyclopedia.org/questions/health-medical-scam-consumer-rights","question":"What rights do I have if I was scammed by a fake health product or treatment?","shortAnswer":"Health product scam victims have consumer rights including chargeback and Section 75, and can report to the Medicines and Healthcare products Regulatory Agency (MHRA in the UK) or FDA (US) — misrepresentation of health products is both a consumer fraud and a regulatory offence.","explanation":"Health scams range from fake supplements promising miracle weight loss to unproven cancer cures and fraudulent clinical trial recruitment. They are particularly harmful because victims may delay genuinely effective treatment, and because they target people who are already vulnerable or unwell.\n\nFor financial recovery, the standard payment recourse options apply: chargeback for card payments, Section 75 for UK credit card purchases over £100, and APP fraud reimbursement for bank transfers. Misrepresenting the nature, effectiveness, or ingredients of a product is a clear breach of consumer protection law and the Consumer Rights Act.\n\nBeyond financial recovery, health scams should be reported to the MHRA (UK) for unlicensed medicines or medical devices, the ASA for misleading health advertising, and Trading Standards for general consumer protection issues. These regulators have powers to remove products from the market and prosecute manufacturers.\n\nThis is general information only. If you experienced any adverse health effects from a fraudulent product, consult a medical professional first and a personal injury solicitor about any compensation claim.","redFlags":["Product claimed to cure or treat a disease without any evidence or medical approval","Testimonials were the only evidence of effectiveness","The seller recommended stopping conventional medical treatment","Product was not licensed by any recognised health authority","Ingredients or concentrations were not clearly disclosed"],"whatToDoNow":["Stop using the product and consult a doctor if you have any health concerns","Contact your card issuer or bank to dispute the payment","Report to the MHRA (UK), FDA (US), or your national medicines regulator","Report to Trading Standards and the ASA (UK) for consumer protection action","Report to the Report Fraud service (formerly Action Fraud) if substantial sums were involved","Preserve the product, packaging, and all communications as evidence"],"faq":[{"question":"Can I sue a health supplement company for a product that did not work?","answer":"Simply failing to deliver expected results is not necessarily fraud if the claims were sufficiently hedged. However, if the product was fundamentally misrepresented (e.g., claimed to be a licensed medicine when it was not, or contained no active ingredient), you may have a claim for misrepresentation. A consumer law solicitor can assess the specific facts."},{"question":"What if I bought a health product from an overseas website?","answer":"Card payment recovery options still apply regardless of where the seller is based. Regulatory reporting to the MHRA (UK) is relevant if the product was imported into or sold within the UK. Criminal enforcement against overseas operators is more difficult but the MHRA does work with international counterparts."}],"lastReviewed":"2026-06-10"},{"slug":"online-dating-fraud-evidence-reporting","url":"https://scamencyclopedia.org/questions/online-dating-fraud-evidence-reporting","question":"What evidence should I keep and how do I report an online dating fraud?","shortAnswer":"Keep all messages, photos, profile links, payment records, and email correspondence — then report to your national fraud authority, the dating platform, and your bank, providing as much identifying detail about the scammer as possible.","explanation":"Online dating fraud investigation relies heavily on victim evidence, since scammers typically use fake identities. The more complete your documentation of the interaction, the more useful it is to investigators working to identify the underlying criminal operation.\n\nPreserve: all messages and chat logs (take screenshots before they are deleted); the scammer's profile and any profile pictures; email addresses and phone numbers used; any documents they sent (often stolen); all payment records including amounts, dates, account details, and methods used; and any video call recordings if you made them.\n\nReport to the Report Fraud service (UK, formerly Action Fraud) or your equivalent national fraud authority, providing this evidence. Also report to the dating platform — they may be able to identify the real account behind the fake profile, cross-reference it with reports from other victims, and assist investigators. If payments were made, contact your bank simultaneously.\n\nSome countries have specialist online fraud reporting channels and dedicated romance fraud units within police forces. Check your national police service for specialist guidance. This is general information.","redFlags":["Your online partner has deleted their profile or messages","You are now receiving messages from different accounts claiming to be the same person","You have been contacted by someone claiming they can help you recover money from the scammer — this is a secondary scam","The scammer's location as described does not match other details they have mentioned"],"whatToDoNow":["Screenshot and save all messages, profiles, and photos before they disappear","Note all contact details: usernames, email addresses, phone numbers, account numbers","Report to the Report Fraud service and include all the evidence you have collected","Report the profile to the dating platform for investigation and takedown","Contact your bank about any payments and request recovery","Seek emotional support — romance fraud is psychologically very impactful"],"faq":[{"question":"Will my conversations with the scammer be made public if I report?","answer":"No. Fraud reports are confidential and are used for investigative purposes only. The content of your private messages will not be published. Investigators and prosecutors handle evidence sensitively. Embarrassing or personal content will not be circulated beyond those who need it for the investigation."},{"question":"What if the scammer threatened to expose personal content I sent them?","answer":"This is a form of sextortion or blackmail and is a separate serious criminal offence. Report to the police immediately in addition to the fraud authority. Do not pay — payment does not guarantee compliance and typically encourages further demands. Platforms like StopNCII.org can help prevent distribution of intimate images."}],"lastReviewed":"2026-06-10"},{"slug":"scam-financial-hardship-mental-health","url":"https://scamencyclopedia.org/questions/scam-financial-hardship-mental-health","question":"I am in financial hardship after a scam and my mental health is suffering — what help is available?","shortAnswer":"If a scam has caused both financial hardship and mental health difficulties, you can access practical financial help through debt charities and bank hardship programmes, and mental health support through your GP, NHS services, and specialist fraud victim support organisations.","explanation":"The combination of financial hardship and mental health distress following a scam is a recognised crisis requiring support on both fronts simultaneously. Trying to manage mental health in the context of acute financial pressure, or financial recovery while in significant psychological distress, is extremely difficult without appropriate support.\n\nFor financial hardship, contact your bank's hardship or vulnerability team — banks have obligations to treat customers in financial difficulty with forbearance. Debt advice charities including StepChange, Citizens Advice, and National Debtline provide free, non-judgemental advice on managing debt, prioritising essential bills, and accessing benefits. If the hardship resulted from fraud, this context is relevant to any debt management discussions.\n\nFor mental health, your GP is the first point of contact. NHS Talking Therapies (England) and equivalent services provide evidence-based psychological therapy, and many areas have specific bereavement and trauma services. Mind, Samaritans, and other charities provide immediate support. If you are in crisis, the Samaritans are available 24/7.\n\nYou do not have to choose between financial and mental health support — both should be addressed at the same time. Many advice organisations are experienced in helping people facing both challenges simultaneously.","redFlags":["You are unable to cover essential bills including food, rent, or utilities following the scam","You are in contact with debt collectors about debts you cannot pay","You are having thoughts of harming yourself — seek immediate help","Distress is affecting your ability to work or care for yourself or dependants"],"whatToDoNow":["Call your bank's hardship team and explain your situation","Contact StepChange (UK) or equivalent free debt charity for financial guidance","Book an appointment with your GP to discuss the mental health impact","Contact the Samaritans (116 123, UK) or equivalent crisis line if in immediate distress","Self-refer to NHS Talking Therapies or apply for a GP referral","Contact Citizens Advice for help understanding benefits and financial entitlements"],"faq":[{"question":"Can my bank freeze interest or charges while I am in financial hardship?","answer":"Yes — banks have obligations under FCA guidance to treat customers in financial difficulty fairly, which includes forbearance measures such as reduced minimum payments, interest freezes, and deferred repayment. Ask your bank's hardship or vulnerability team explicitly. Charities like StepChange can also negotiate on your behalf."},{"question":"Is there emergency financial help for scam victims in the UK?","answer":"There is no single dedicated emergency fund for scam victims, but local authorities may provide crisis support through Local Welfare Assistance schemes, food banks and charities can assist with immediate needs, and your bank's hardship team may have discretionary funds. Citizens Advice can identify what you are entitled to in your area."}],"lastReviewed":"2026-06-10"},{"slug":"subscription-trap-refund-rights","url":"https://scamencyclopedia.org/questions/subscription-trap-refund-rights","question":"What are my rights when I was signed up to a subscription without proper consent?","shortAnswer":"Being enrolled in a subscription without clear informed consent — or through a misleading free trial — may constitute an unfair commercial practice, and you are entitled to a refund of charges taken without genuine authorisation under consumer protection and payment law.","explanation":"Subscription traps typically involve a free trial or low-cost offer where future ongoing charges are either hidden in small print or not clearly communicated at all. When a consumer discovers regular charges on their account, they often find it very difficult to cancel. These practices may constitute unfair commercial practices under the Consumer Protection from Unfair Trading Regulations 2008 (UK) or the FTC Act (US).\n\nFor charges taken without clear informed consent, you can raise a chargeback dispute with your card provider. Recurring billing disputes are a specific chargeback category. You can also report to Trading Standards (UK) or the FTC (US) for regulatory action against the business.\n\nIn the UK, the Consumer Contracts Regulations 2013 require pre-contractual information to be clear and prominent for online sales, including the existence of any subscription element. Hiding subscription terms in small print or pre-ticking boxes may render the 'consent' invalid.\n\nThis is general information. Whether a specific subscription arrangement was legally consented to depends on the exact presentation of terms and what you were shown at the time of sign-up. A consumer law adviser can assess the specific facts.","redFlags":["Subscription charges appeared after a 'free trial' that was not clearly disclosed as one","The terms and price of ongoing subscription were buried in very small print","You ticked a box to agree to terms without being shown what they said","Cancellation is deliberately complicated, requiring multiple steps or a phone call","Charges continued after you attempted to cancel"],"whatToDoNow":["Contact the company by email or phone to request cancellation and a refund","If refused, initiate a chargeback dispute with your card provider for recent charges","Contact your bank to instruct cancellation of the continuous payment authority (CPA)","Report to Trading Standards (UK) or FTC (US) for regulatory action","Leave a public review documenting the misleading practices to warn others"],"faq":[{"question":"Can I instruct my bank to stop a recurring subscription charge?","answer":"Yes. You can instruct your bank to cancel a continuous payment authority (CPA) at any time, and the bank must comply. The bank cannot refuse this request on the grounds that you have an ongoing obligation to the company — that is a matter between you and the company separately."},{"question":"What is a continuous payment authority and how is it different from a direct debit?","answer":"A continuous payment authority (CPA) is a recurring payment authorised via your card details. A direct debit is authorised via your bank sort code and account number with a specific mandate. Both can be cancelled through your bank, but the process differs slightly. CPAs can be stopped by contacting the card issuer."}],"lastReviewed":"2026-06-10"},{"slug":"scam-loss-tax-implications","url":"https://scamencyclopedia.org/questions/scam-loss-tax-implications","question":"Are there any tax implications when I lose money to a scam?","shortAnswer":"In some countries and circumstances, scam losses may be deductible for tax purposes — particularly for business taxpayers or investors — but the rules are complex and jurisdiction-specific; always seek advice from a qualified tax professional.","explanation":"Tax treatment of scam losses varies significantly by country and by the nature of the loss. In the UK, losses from investment fraud may sometimes qualify for capital loss relief for income tax purposes, depending on whether the investment qualified as a 'negligible value claim' asset. HMRC has specific guidance on investment losses in fraudulent schemes.\n\nIn the US, the IRS has specific rules on theft loss deductions following the 2017 Tax Cuts and Jobs Act, which significantly restricted personal theft loss deductions. Business theft losses retain more deductibility. Ponzi scheme victims have specific guidance under IRS Revenue Procedure 2009-20.\n\nFor most individuals with consumer-type losses, the tax implications are likely minimal or non-existent. The most relevant scenarios involve significant investment losses, business losses, or losses with a documented capital nature.\n\nThis is general information only and does not constitute tax advice. Tax rules change regularly and the application to a specific situation requires professional assessment. Consult a qualified tax adviser or accountant for your circumstances.","redFlags":["You received a tax form or payment from an alleged 'tax refund' as part of a scam — do not report this as income","You are unsure whether a recovery payment you received from a fraud case should be declared"],"whatToDoNow":["Consult a qualified accountant or tax adviser about whether your loss has any tax deductibility","Gather all financial records relating to the scam loss in case they are needed for tax purposes","If you received any recovery payments, ask your tax adviser how to treat these","Contact HMRC or your national tax authority's helpline for general guidance"],"faq":[{"question":"Do I need to declare scam losses on my self-assessment tax return?","answer":"In most cases, consumer fraud losses are not declared on tax returns as they do not constitute a recognised deductible loss for income tax purposes. However, if you had significant investment losses or business-related losses, a tax adviser should assess whether any deduction or relief is available."},{"question":"What if the scammer sent me a 'partial refund' as part of a secondary scam?","answer":"Partial refunds offered by scammers are often part of an overpayment scam — they send more than the 'refund' via cheque or transfer and ask you to return the excess. Do not accept these. Report the approach to your fraud authority. Any payment received as part of a scam operation is not genuine income."}],"lastReviewed":"2026-06-10"},{"slug":"is-it-ok-to-feel-angry-at-scammer","url":"https://scamencyclopedia.org/questions/is-it-ok-to-feel-angry-at-scammer","question":"Is it okay to feel angry at the person who scammed me?","shortAnswer":"Absolutely — anger is a natural, healthy response to being deliberately deceived and harmed, and it is a normal stage of recovery when channelled constructively rather than allowed to become consuming or harmful.","explanation":"Anger following victimisation is a psychologically healthy and appropriate response. It reflects an accurate recognition that a wrong was done to you — a person deliberately chose to deceive you for their own gain, causing real harm. Anger is the appropriate emotional response to injustice, and feeling it does not make you a bad person or suggest you are stuck.\n\nThe question is not whether to feel angry but how to work with that anger constructively. Some people channel anger into positive action — reporting the scam, warning others, advocating for better consumer protections, or volunteering with anti-fraud organisations. This can transform a painful experience into something purposeful.\n\nAngry feelings become problematic when they are consuming significant mental energy, interfering with daily functioning, or being directed inward as self-blame. If you find yourself ruminating intensely and unable to function normally, or if anger is being turned inward into shame, speaking with a counsellor can help process and redirect it.\n\nYou are entitled to be angry. You were wronged. Processing that anger at a pace that works for you, with support if needed, is part of recovery.","redFlags":["Anger is consuming most of your daily mental energy","You are taking risks trying to track down or confront the scammer — this can be dangerous","Anger is being directed at yourself rather than at the perpetrator","Intense anger is affecting your relationships or work"],"whatToDoNow":["Allow yourself to feel angry without judging the feeling","Consider channelling anger into positive action: reporting, warning others, advocacy","Exercise, writing, or creative outlets can help process intense emotions","If anger feels overwhelming, speak with a counsellor or therapist","Avoid actions that could be dangerous or escalate contact with the scammer"],"faq":[{"question":"Should I try to contact the scammer to confront them?","answer":"This is generally not advisable. Scammers rarely respond with remorse and may use further contact as an opportunity to attempt more fraud. In some cases, confronting a scammer can escalate the situation in ways that could affect your safety. Reporting to authorities is a safer way to pursue accountability."},{"question":"Is anger a stage of grief?","answer":"Yes — models of grief include anger as a recognised stage, and the experience of being scammed can involve genuine grief for the money lost, the relationship lost (in romance scams), or the trust lost. Understanding your anger as part of a grief process can make it feel less frightening and more manageable."}],"lastReviewed":"2026-06-10"},{"slug":"debt-taken-out-by-scammer-in-my-name","url":"https://scamencyclopedia.org/questions/debt-taken-out-by-scammer-in-my-name","question":"What do I do if a scammer took out debt in my name?","shortAnswer":"Fraudulent debts taken out in your name must be disputed with each lender, reported to the police and your credit reference agencies, and flagged to your national fraud prevention service — you are not liable for debts you did not take out.","explanation":"When a scammer uses your identity to take out loans, credit cards, or other credit in your name, you may not discover it for months — when creditors begin chasing payment. This is a form of identity fraud that requires systematic action across several fronts.\n\nContact each lender individually, in writing, explaining that you are the victim of identity fraud and did not apply for or authorise the credit. Provide a crime reference number from your fraud authority. Lenders are required to investigate and, where identity fraud is confirmed, write off the debt and remove it from your credit file.\n\nSimultaneously, add a Notice of Correction or fraud alert to your file with all three major credit reference agencies (Experian, Equifax, TransUnion in the UK) and apply for Cifas Protective Registration, which flags future applications in your name for additional checks. In the US, a credit freeze prevents any new credit being opened in your name.\n\nThis is general information only. The process can be lengthy and each lender investigation is separate. A consumer law adviser or identity theft support service can help you navigate multiple simultaneous disputes.","redFlags":["Debt collection letters arriving for accounts you did not open","Credit report shows applications or accounts you do not recognise","You are being declined for credit due to adverse entries you did not cause","Lenders are contacting you for defaults on loans you never received the proceeds of"],"whatToDoNow":["Obtain your credit report from all three agencies immediately and identify all fraudulent entries","Report to the Report Fraud service (UK, formerly Action Fraud) or equivalent and obtain a crime reference number","Write to each lender with the crime reference number and request a fraud investigation","Apply for Cifas Protective Registration (UK) or a credit freeze (US)","Add a Notice of Correction to your credit file explaining the fraud","Check whether your home address has been fraudulently changed — contact Royal Mail (UK) to verify"],"faq":[{"question":"How long does it take to resolve fraudulent debts on a credit file?","answer":"It varies. Some lenders resolve disputes within weeks; others take several months, particularly if the fraud was sophisticated. Staying organised, following up regularly in writing, and escalating to the Financial Ombudsman Service when lenders are unresponsive are important for keeping the process moving."},{"question":"Can a fraudulent debt affect my ability to rent a home or get a mortgage?","answer":"Yes — fraudulent entries on your credit file affect your credit score and may cause applications to be declined. This is one reason acting quickly and adding a Notice of Correction is important. Lenders can be shown the fraud documentation when you apply, which should prevent adverse decisions based on fraudulent entries."}],"lastReviewed":"2026-06-10"},{"slug":"cryptocurrency-wallet-hacked-rights","url":"https://scamencyclopedia.org/questions/cryptocurrency-wallet-hacked-rights","question":"What are my rights if my cryptocurrency wallet or exchange account was hacked?","shortAnswer":"If a regulated exchange account was hacked due to the platform's security failure, you may have a claim against the platform — but most crypto held in unhosted wallets has no equivalent to deposit protection, making prevention the main line of defence.","explanation":"The rights available to a hacked crypto user depend heavily on where the crypto was held. Regulated cryptocurrency exchanges in the UK must comply with FCA requirements and maintain appropriate safeguards. If an exchange was compromised through its own security failure rather than your own error, you may have a claim against the platform. Some exchanges have voluntary compensation funds.\n\nFor unhosted ('self-custody') wallets, there is no third party responsible for security. If a private key is compromised through malware, phishing, or social engineering and crypto is stolen, there is no equivalent of deposit protection or chargeback. Blockchain transactions are irreversible.\n\nIf your exchange account was accessed through your own credentials being compromised (phishing for a seed phrase or exchange password), the platform is less likely to bear liability — though it depends on whether they provided adequate security features (e.g., 2FA requirements) and appropriate warnings.\n\nThis is a rapidly evolving area of law. Some class actions and regulatory proceedings against major exchanges following hacks have resulted in user compensation, but outcomes vary. A solicitor experienced in crypto litigation can advise on your specific situation.","redFlags":["You entered your seed phrase into a website or gave it to someone — do not share a seed phrase with anyone","Your exchange account shows transactions you did not authorise","You received a message claiming to be from your exchange asking you to verify your account","An 'exchange upgrade' or 'wallet migration' required you to re-enter credentials"],"whatToDoNow":["Report to your exchange immediately and request account security measures and investigation","Report to the Report Fraud service (formerly Action Fraud) and your national cybersecurity authority","Contact the FCA if the exchange is UK-regulated and they failed in their security obligations","Consult a solicitor about claims against an exchange that failed to protect your account","Preserve all transaction records and communications as evidence","Review and upgrade your personal security practices for any remaining assets"],"faq":[{"question":"Does FSCS protect cryptocurrency held at a UK exchange?","answer":"Generally no. FSCS covers deposits at authorised banks and certain regulated investments. Most crypto held at exchanges does not qualify as a protected deposit. Some exchanges have their own insurance policies; check your exchange's terms."},{"question":"Can stolen crypto be traced and recovered?","answer":"In some cases, yes. Blockchain analytics firms can trace movements of stolen crypto across wallets. When funds reach a regulated exchange that applies KYC, there is a chance of freezing and recovery. Law enforcement has successfully traced and recovered significant crypto theft proceeds in notable cases, though it requires speed and expertise."}],"lastReviewed":"2026-06-10"},{"slug":"scam-victim-support-organisations-uk","url":"https://scamencyclopedia.org/questions/scam-victim-support-organisations-uk","question":"What UK organisations provide support to scam victims?","shortAnswer":"Several UK organisations provide free support to scam victims — including Report Fraud for reporting, Victim Support and Citizens Advice for practical help, and specialist services like Mind and the Samaritans for emotional and mental health support.","explanation":"Navigating the aftermath of a scam is easier with access to the right organisations. UK scam victims have access to a range of free, non-judgemental services spanning financial recovery, practical advice, and emotional support.\n\nFor reporting and crime reference numbers: Report Fraud (reportfraud.police.uk) is the national fraud reporting centre. For practical recovery advice: Citizens Advice (citizensadvice.org.uk) provides free guidance on consumer rights, bank disputes, debt, and ombudsman processes. For victim support: Victim Support (victimsupport.org.uk) provides free, confidential support for people affected by crime including fraud. For mental health: Mind (mind.org.uk) and the Samaritans (116 123) provide emotional support and signposting. For financial difficulty: StepChange (stepchange.org) provides free debt advice.\n\nSpecialist fraud organisations include the Take Five campaign (co-ordinated by UK Finance) for prevention resources, and the Stop Scams UK coalition for reporting and awareness. For elderly victims, Age UK (ageuk.org.uk) and Friends Against Scams provide tailored support.\n\nThis list is not exhaustive and availability of services may change. Using official .gov.uk or well-established charity websites to find services ensures you are reaching genuine organisations rather than further scam sites.","redFlags":["You found a 'scam recovery service' through a search engine that charges for help — legitimate organisations listed here are free","You are reluctant to seek help because you believe your case is too small or too embarrassing"],"whatToDoNow":["Report to the Report Fraud service at reportfraud.police.uk to create an official record","Contact Citizens Advice for practical consumer rights and recovery advice","Contact Victim Support for emotional and practical support specific to your needs","Call the Samaritans on 116 123 if you are experiencing acute distress","Contact StepChange if the scam has caused financial hardship and debt"],"faq":[{"question":"Is Citizens Advice completely free?","answer":"Yes. Citizens Advice provides free, independent advice on a wide range of issues including consumer rights, debt, employment, and benefits. You can access advice by phone, in person at local offices, or online through their website."},{"question":"Does Victim Support help with financial scams, or only violent crime?","answer":"Victim Support assists victims of all crimes including fraud. They provide emotional support, practical information, and can help you navigate the criminal justice system regardless of the type of crime you experienced."}],"lastReviewed":"2026-06-10"},{"slug":"mlm-pyramid-scheme-legal-options","url":"https://scamencyclopedia.org/questions/mlm-pyramid-scheme-legal-options","question":"Is an MLM I joined a scam, and do I have legal options to recover my money?","shortAnswer":"Multi-level marketing schemes occupy a legal grey area, but pyramid schemes (where income comes primarily from recruitment rather than product sales) are illegal — if you joined one, you may have claims for misrepresentation and should report to your trading standards authority.","explanation":"The legal boundary between a legitimate MLM and an illegal pyramid scheme lies in how participants make money. A legitimate MLM generates income primarily from selling products to genuine end customers outside the scheme. An illegal pyramid scheme generates income primarily from recruiting new participants, whose entry fees flow upward to earlier members.\n\nIf the scheme was illegal, claims for misrepresentation may be available if you were given false information about expected earnings or the nature of the business before joining. The FTC in the US has pursued major MLMs for illegal pyramid practices. In the UK, the Consumer Protection from Unfair Trading Regulations and the Pyramid Selling Regulations 1989 apply.\n\nFor recovery, the practical options depend on how you paid entry fees and purchased inventory. Card payments may support chargeback; bank transfers may support APP fraud claims if the nature of the scheme involved deception. Victims can also report to Trading Standards (UK) or the FTC (US).\n\nThis is general information. Whether a specific MLM was illegal and what claims you might have depends on the specific facts. A consumer law solicitor can assess your case.","redFlags":["You were told your earnings would come primarily from recruiting others, not from selling products","You were required to buy large amounts of inventory you could not sell to genuine customers","Realistic earnings disclosures were absent or buried in small print","Earlier members always earned significantly more than new joiners regardless of effort","The scheme emphasised the 'opportunity' and 'lifestyle' more than the actual products"],"whatToDoNow":["Stop all further payments and inventory purchases","Document what you were told before joining and compare it to actual earnings","Report to Trading Standards (UK) or FTC (US) with your evidence","Contact your card issuer or bank about payment recovery options","Consult a consumer law solicitor about misrepresentation claims"],"faq":[{"question":"Does the fact that an MLM is registered as a company mean it is legitimate?","answer":"No. Company registration at Companies House or equivalent does not mean the business model is legal or ethical. Illegal pyramid schemes operate through registered companies. Legality depends on the structure of compensation and sales activity, not registration status."},{"question":"Am I liable for tax on MLM income I earned before discovering it was a scam?","answer":"Income you received before discovering the scheme may still be taxable, depending on your country's rules. Separately, losses from the scheme may have some tax relevance. A qualified accountant should advise on your specific situation."}],"lastReviewed":"2026-06-10"},{"slug":"charity-scam-rights-and-reporting","url":"https://scamencyclopedia.org/questions/charity-scam-rights-and-reporting","question":"What can I do if I donated to a fake charity or was misled about how donations are used?","shortAnswer":"Fake charity fraud and misrepresentation of how donations are used are criminal and regulatory offences — report to your national charity regulator, fraud authority, and consider payment recovery options for recent donations.","explanation":"Charity fraud comes in two main forms: entirely fake charities that pocket all donations, and legitimate charities that seriously misrepresent how funds are used. Both are legally actionable, though through different routes.\n\nFake charities are straightforwardly fraudulent. In the UK, the Charity Commission investigates concerns about charities and can remove them from the register, require repayment of funds, and refer matters to the Serious Fraud Office or Report Fraud (formerly Action Fraud) for criminal investigation. The same reporting pathway applies as for any fraud.\n\nFor legitimate but misleading charities (using exaggerated claims about fund use, or diverting unreasonably large proportions to administration), complaints to the Charity Commission are the main route. The Fundraising Regulator also handles complaints about fundraising practices.\n\nFor financial recovery of recent donations, card chargeback may be possible if the donation was made online by card — the misrepresentation argument supports a chargeback. For older donations or cash, recovery is more difficult.\n\nThis is general information. What constitutes fraudulent misrepresentation versus permissible marketing by a charity depends on the specific facts.","redFlags":["The charity cannot be found on the Charity Commission register or has a very similar name to a well-known charity","Collectors pressured you heavily or did not provide clear identification","The charity's accounts are not publicly available as required","Donation requests came after a disaster and the organisation was not a known charity","You cannot find a working address or legitimate contact information"],"whatToDoNow":["Report to the Charity Commission (England and Wales) or your national charity regulator","Report to the Report Fraud service for criminal investigation if the charity was entirely fake","Contact your card issuer to initiate a chargeback for recent card donations","Report to the Fundraising Regulator if fundraising practices were misleading","Check the Charity Commission register before donating to confirm registration"],"faq":[{"question":"Does the Charity Commission compensate donors?","answer":"No. The Charity Commission is a regulator, not a compensation body. It investigates misconduct and can take action against trustees, but it does not refund individual donors. Recovery of donations is typically through payment method chargebacks or, in criminal cases, through prosecution and asset recovery."},{"question":"Is it legal for a charity to spend a large proportion of donations on administration?","answer":"There is no fixed legal percentage — charities must act in the best interests of their beneficiaries and use funds appropriately. High administrative costs are not automatically illegal but may be cause for regulatory scrutiny. The Fundraising Regulator and Charity Commission assess proportionality as part of their oversight functions."}],"lastReviewed":"2026-06-10"},{"slug":"mail-courier-parcel-scam-rights","url":"https://scamencyclopedia.org/questions/mail-courier-parcel-scam-rights","question":"What are my rights if I was scammed by a fake parcel or courier message?","shortAnswer":"Fake parcel notifications that trick you into entering card details or paying a fake redelivery fee are phishing fraud — if you entered financial details, contact your bank immediately; if you paid a fee, card chargeback may apply.","explanation":"Fake parcel scams send text messages or emails impersonating Royal Mail, DPD, FedEx, or other courier services, claiming a parcel is awaiting collection and requiring a small redelivery fee or customs charge. The fee itself is small but the real goal is often capturing card details for larger subsequent fraud.\n\nIf you entered your card details on a fake site, contact your bank or card issuer immediately to have the card stopped and a replacement issued. Your bank may also want to monitor your account for subsequent unauthorised transactions. This is an urgent action — do not wait.\n\nIf you paid the fake fee and only that fee was taken, initiate a chargeback for the fraudulent payment. Report the fraudulent site to the Report Fraud service (formerly Action Fraud) and to the genuine courier company being impersonated, who may take down the site or issue warnings.\n\nReport the original message to 7726 (SPAM) on your mobile to help your network identify and block the sender. This is general information — the specific steps depend on what you entered and whether any subsequent unauthorised transactions have occurred.","redFlags":["The message arrived unexpectedly and you are not expecting a delivery","The link in the message does not go to the genuine courier's official website","You are asked to pay a customs or redelivery fee you have never paid before for a delivery","The message contains spelling errors or an unofficial-looking sender address","You are asked to enter full card details including the CVV for a small fee"],"whatToDoNow":["If you entered card details, call your bank's fraud line immediately to report and cancel the card","If you paid a fee, initiate a chargeback with your card provider","Forward the message to 7726 (SPAM) on your mobile","Report to the Report Fraud service with the link and message content","Report to the genuine courier company being impersonated","Monitor your accounts for any subsequent unauthorised transactions"],"faq":[{"question":"Do real couriers ever ask for payment by text message?","answer":"Legitimate couriers very rarely request additional payments by text message. Any unexpected text claiming a fee is needed to release a parcel should be treated with extreme suspicion. Check your delivery status directly on the genuine courier's official website using a bookmark or search, never a link in the message."},{"question":"I only gave my name and address — am I at risk?","answer":"Name and address alone are a lower risk than financial details, but can still be used in data aggregation or for further targeted phishing. Monitor for follow-up communications and be alert to any subsequent requests using your name that appear very personalised."}],"lastReviewed":"2026-06-10"},{"slug":"compensation-for-emotional-distress-fraud","url":"https://scamencyclopedia.org/questions/compensation-for-emotional-distress-fraud","question":"Can I claim compensation for emotional distress caused by being scammed?","shortAnswer":"Compensation for emotional distress arising from fraud is possible in civil litigation if the distress is a recognisable psychiatric condition caused by the defendant's wrongful act — general upset without diagnosed impact is harder to pursue as a standalone claim.","explanation":"In civil law, compensation for 'psychiatric injury' (a recognised clinical condition) is a head of damage that can be included in a claim for fraud. If being scammed caused you a diagnosable condition such as major depression, anxiety disorder, or PTSD, this is a separate compensable head of damage in addition to the financial loss itself.\n\nUncomplicated distress and upset — while entirely real and valid — are harder to pursue as civil claims in their own right without evidence of a diagnosable condition. Courts distinguish between general 'grief, distress and upset' (which does not attract compensation as a standalone category under English law) and recognised psychiatric injury.\n\nFor claims to include distress compensation, you would typically need: medical records documenting the condition; a psychiatric or psychological expert report linking the condition to the scam; and a viable defendant with assets to enforce against. Many scam victims' cases against identifiable domestic defendants do include this element where the psychiatric impact is documented.\n\nThis is general information only. Whether emotional distress claims are viable in your specific case depends on the medical evidence, the nature of the claim, and the defendant. A personal injury or civil litigation solicitor can assess your situation.","redFlags":["You are experiencing symptoms consistent with a clinical condition but have not sought medical assessment","You are being told your distress does not matter because it is 'just' a financial loss"],"whatToDoNow":["See your GP and describe the psychological impact of the fraud fully and honestly","Keep records of any treatment, referrals, or prescriptions related to post-fraud distress","Consult a civil litigation solicitor about whether distress compensation is viable in your case","Do not minimise your symptoms when speaking to medical professionals"],"faq":[{"question":"Do I need a psychiatric diagnosis to include distress in a civil claim?","answer":"A formal diagnosis significantly strengthens a distress claim in civil litigation. General distress without medical evidence is difficult to quantify and recover in court. Expert psychiatric assessment translates your experience into evidence that a court can assess and award compensation for."},{"question":"Can the financial ombudsman award compensation for distress?","answer":"Yes — the Financial Ombudsman Service can award distress and inconvenience compensation in addition to financial redress. This is typically a more modest sum than court damages but is available without the need for litigation. The FOS regularly makes such awards when banks have treated customers poorly."}],"lastReviewed":"2026-06-10"},{"slug":"bank-warned-me-of-scam-but-i-proceeded","url":"https://scamencyclopedia.org/questions/bank-warned-me-of-scam-but-i-proceeded","question":"My bank warned me about a potential scam before I transferred money but I ignored it — can I still get a refund?","shortAnswer":"Ignoring a bank fraud warning is a factor that affects your claim but does not automatically disqualify you from reimbursement — the quality of the warning and the sophistication of the fraud are both relevant to whether you acted reasonably.","explanation":"Many banks now display fraud warnings during the payment process, particularly for large or first-time payments. If you received and proceeded past such a warning, your bank may cite this as evidence of 'gross negligence' or as a reason to reduce or deny reimbursement under APP fraud rules.\n\nHowever, not all warnings are equally clear or effective. A generic warning that 'this could be a scam' shown during every payment is very different from a specific warning targeted at your exact transaction type. The Financial Ombudsman Service looks at the specificity, prominence, and reasonableness of the warning in context.\n\nThe sophistication of the fraud is also relevant. If you had been given a convincing reason by the scammer to explain away the warning (for example, being told by a fake bank employee that the warning appears routinely and can be ignored), this is a relevant factor in assessing whether you acted reasonably.\n\nThis is general information. Whether you are entitled to reimbursement despite ignoring a warning depends on the specific circumstances, the quality of the warning, and your reasons for proceeding. The FOS is the appropriate route if your bank refuses your claim.","redFlags":["You received a highly specific fraud warning naming the type of scam you were about to fall for","The bank explicitly told you they were pausing the payment due to fraud concerns and you instructed them to proceed","You were warned by multiple parties (bank, friends, family) and proceeded anyway"],"whatToDoNow":["Request details from your bank of exactly what warning was shown and when","Provide context for why you proceeded: what the scammer told you about the warning","Submit a formal complaint to your bank arguing the warning was insufficient or generic","Escalate to the Financial Ombudsman Service if the bank refuses reimbursement","Include evidence of the fraud approach in your FOS complaint to demonstrate sophistication"],"faq":[{"question":"Does clicking 'I understand this could be a scam' remove all my rights?","answer":"Not necessarily. Banks cannot simply show a generic disclaimer and use it to deny all claims. The FOS looks at whether the warning was genuinely adequate to protect you given the specific circumstances. An overly generic disclaimer does not automatically amount to gross negligence."},{"question":"What if the scammer told me the bank warning was routine and to ignore it?","answer":"This is a common tactic in authorised push payment fraud, where scammers instruct victims to explain away bank warnings. Telling the FOS that you were specifically coached to dismiss the warning by the fraudster is directly relevant to whether you acted reasonably in ignoring it."}],"lastReviewed":"2026-06-10"},{"slug":"what-is-a-fraud-alert-on-credit-file","url":"https://scamencyclopedia.org/questions/what-is-a-fraud-alert-on-credit-file","question":"What is a fraud alert on my credit file and how do I add one?","shortAnswer":"A fraud alert flags to lenders that your identity may have been compromised, prompting them to take extra steps to verify identity before extending credit in your name — in the UK, Cifas Protective Registration provides this function.","explanation":"A fraud alert on your credit file is a protective measure that signals to prospective lenders that additional identity verification is required before opening any new account or extending credit. This helps prevent a fraudster who has obtained some of your personal information from opening accounts in your name while you are dealing with the aftermath of a scam or breach.\n\nIn the UK, Cifas Protective Registration is the main mechanism. It costs a small one-time fee (currently £25 for two years) and flags your file with all Cifas member organisations, which include the major banks and lenders. Future applications in your name will trigger additional verification checks.\n\nIn the US, you can place a free fraud alert (initially 90 days, or extendable to 7 years for identity theft victims) with any of the three credit bureaus — Equifax, Experian, TransUnion — and they are required to notify the other two. A credit freeze is a stronger option in the US, preventing any new credit check entirely until you lift it.\n\nThis is general information. The specific mechanisms and their effects vary by country. Contact your credit reference agencies directly to understand what is available in your jurisdiction.","redFlags":["You have been the victim of identity theft or a data breach affecting your personal information","Your personal documents (passport, driving licence) have been lost or stolen","You have noticed unexpected credit applications on your file"],"whatToDoNow":["Apply for Cifas Protective Registration at cifas.org.uk (UK) or place a fraud alert with credit bureaus (US)","Add a Notice of Correction to your credit file explaining any fraudulent entries","Check your credit file with Experian, Equifax, and TransUnion for unknown entries","Continue to monitor your credit file periodically after adding the alert"],"faq":[{"question":"Will a fraud alert on my credit file affect legitimate credit applications I make?","answer":"A fraud alert or Protective Registration will prompt lenders to apply additional verification steps when you apply for credit. This may slow down applications slightly but should not prevent legitimate credit being granted if you can verify your identity satisfactorily."},{"question":"How long does a Cifas Protective Registration last?","answer":"Currently two years, after which it can be renewed. A US fraud alert lasts 90 days initially for a general alert; extended alerts for identity theft victims last up to 7 years. Credit freezes in the US remain in place until you lift them."}],"lastReviewed":"2026-06-10"},{"slug":"scam-victim-feel-stupid","url":"https://scamencyclopedia.org/questions/scam-victim-feel-stupid","question":"I feel stupid for falling for a scam — is something wrong with me?","shortAnswer":"Nothing is wrong with you. Scammers are highly skilled psychological manipulators whose full-time profession is deception — research consistently shows that education and intelligence do not protect against sophisticated fraud.","explanation":"The belief that only 'stupid' or 'gullible' people fall for scams is a harmful myth that benefits fraudsters by preventing victims from reporting, seeking help, or warning others. Research into fraud victimisation consistently finds that susceptibility to scams correlates with contextual factors — stress, distraction, emotional state, the moment of contact — rather than baseline intelligence or education.\n\nCognitive science explains why sophisticated scams work on intelligent people. Scammers exploit well-documented features of human decision-making: authority bias (we defer to apparent experts), social proof (we follow cues from others), scarcity and urgency (we make poorer decisions under time pressure), and the consistency principle (once we have started down a path we feel compelled to continue). These are universal features of human cognition, not personal failings.\n\nProfessional fraud investigators and psychologists who work with victims routinely note that high-achieving, confident individuals are often specifically targeted for investment and authority-based scams — precisely because their confidence in their own judgement makes them less likely to seek a second opinion.\n\nYou were targeted by someone whose expertise was exploiting human psychology. That expertise is not a reflection of your inadequacy.","redFlags":["Self-blame is preventing you from reporting or seeking help","You are comparing yourself negatively to others who you assume 'would never fall for this'","Shame is causing you to isolate or withdraw"],"whatToDoNow":["Challenge the internal narrative that the fraud reflects your intelligence or character","Speak to one trusted person about what happened — sharing often reduces shame significantly","Contact a fraud victim support service for non-judgemental professional support","Report the scam — your report protects others and is an act of courage, not shame","Read accounts of other fraud victims from all backgrounds to understand how universal this is"],"faq":[{"question":"Why do I keep replaying the scam in my head?","answer":"Replaying a traumatic event and asking 'what if' is a normal response to having been harmed. The mind looks for the point where a different decision would have changed the outcome. This is a natural process but it can become unhelpful rumination. If it is persistent and distressing, a counsellor experienced in trauma can help you process it."},{"question":"My friends say I should have known better. How do I respond?","answer":"Friends who have not experienced sophisticated fraud often don't realise how convincing it is. A calm explanation of exactly what the scam involved — the professional materials, the trust-building, the specific technique used — often changes their perspective. If they remain dismissive, support organisations and fellow survivors can provide the understanding your friends currently cannot."}],"lastReviewed":"2026-06-10"},{"slug":"is-this-betting-tipster-a-scam","url":"https://scamencyclopedia.org/questions/is-this-betting-tipster-a-scam","question":"Is this sports betting tipster service a scam?","shortAnswer":"Most paid 'guaranteed winning tips' tipster services are scams. Genuine long-term profitable tipsters are extremely rare, and none can honestly guarantee results on every pick.","explanation":"Paid tipster services typically sell subscriptions promising a named 'expert' with insider knowledge, a secret algorithm, or a long winning streak. In reality, most operate on volume: they send wildly different tips to different subscriber groups so that whatever happens, some group will have received a 'winning' pick they can screenshot as proof. That screenshot is then used to recruit the next round of paying subscribers.\n\nA smaller number of tipster scams are outright fabrication — the site posts a fake 'verified profit' chart that has no connection to any real betting history, then sells access to a Telegram or Discord channel. Once you have paid, tips are often vague, arrive too late to place a bet at the quoted odds, or are simply generic advice copied from public previews.\n\nEven where a tipster is a real, honest person, sports betting has a built-in bookmaker margin (the 'vig' or 'juice'), so beating it consistently over the long run is genuinely rare and requires serious statistical edge. Anyone selling a subscription implying effortless, guaranteed profit is very likely more interested in your subscription fee than in your betting results.","redFlags":["Guaranteed win rates or 'guaranteed profit' language","Screenshots of winnings with no verifiable, independently tracked history","Pressure to join before a 'today only' price increase","Refusal to show a full, dated, verifiable track record","Tips that arrive right before kickoff, leaving no time to shop for odds","Requests to use a specific bookmaker account they 'recommend'"],"whatToDoNow":["Ask for a verifiable, timestamped track record from an independent tipster-tracking site rather than screenshots","Never pay a subscription based on a single winning streak or testimonial","Treat any 'guaranteed' language as an automatic red flag","If you already paid, request a refund via your card issuer citing false advertising","Report the service to the advertising platform (Meta, Google) if you saw it as an ad","Set a firm rule never to increase your own bet size because a tipster told you to"],"faq":[{"question":"Can a tipster ever be legitimate?","answer":"Yes, but genuinely profitable long-term tipsters are rare and typically publish verifiable records on independent tracking sites rather than relying on screenshots and testimonials alone."},{"question":"What if the tipster refuses a refund?","answer":"Dispute the charge with your card issuer or payment provider as a service not as described, and keep records of all promises made in ads or messages."}],"lastReviewed":"2026-07-05"},{"slug":"fake-casino-refuses-to-pay-out-winnings","url":"https://scamencyclopedia.org/questions/fake-casino-refuses-to-pay-out-winnings","question":"An online casino won't pay out my winnings — what can I do?","shortAnswer":"Withheld winnings are one of the most common online casino complaints; check the casino's licence, review its wagering terms, and escalate to the licensing regulator or your bank if the casino won't cooperate.","explanation":"Unlicensed or offshore-licensed online casinos sometimes design their terms and conditions to make legitimate withdrawals almost impossible. Common tactics include suddenly citing a wagering requirement you supposedly missed, claiming a 'bonus abuse' violation after you have already won, demanding excessive identity verification documents and then rejecting them repeatedly, or simply going silent once a withdrawal request is submitted.\n\nBefore assuming the worst, check exactly which regulator licensed the casino and whether that regulator is a real, respected body (such as a national gambling commission) rather than a small offshore authority with little enforcement power. Read the wagering and bonus terms carefully, since some casinos are legally within their rights to withhold funds if a genuine term was breached, even if it feels unfair.\n\nIf the casino is properly licensed by a real regulator, that regulator's dispute resolution process is usually your fastest route to a resolution, and licensed casinos generally do not want to risk their licence over one dispute. If the casino is unlicensed, or licensed by a body with no real oversight, your recourse is much more limited, and a chargeback through your bank or card provider may be the only practical option.","redFlags":["Licence displayed is from an obscure jurisdiction with no real complaint process","Sudden new 'terms violation' cited only after a big win","Repeated requests for more identity documents with no explanation of what's missing","Withdrawal support only reachable through slow, unmonitored email","Casino promotes itself heavily on social media but has no verifiable licence number","Account restricted or 'under review' indefinitely with no timeline given"],"whatToDoNow":["Verify the casino's licence number directly on the regulator's official website, not just on the casino's own page","Save every message, term, and screenshot related to your account and the dispute","File a formal complaint with the licensing regulator if one exists","Contact your bank or card provider about a chargeback if the casino is unlicensed or unresponsive","Stop depositing further funds while the dispute is unresolved","Report the casino to consumer protection and problem-gambling support bodies in your country"],"faq":[{"question":"Will a chargeback definitely get my money back?","answer":"Not always — success depends on your bank's policies and how the original deposit was processed, but it's often the most realistic option against an unlicensed operator."},{"question":"How do I check if a casino licence is real?","answer":"Go directly to the regulator's official website and search their licence register using the number shown on the casino's site, rather than trusting a badge or logo image."}],"lastReviewed":"2026-07-05"},{"slug":"matched-betting-scheme-safe","url":"https://scamencyclopedia.org/questions/matched-betting-scheme-safe","question":"Is matched betting actually safe, or is it a scam?","shortAnswer":"Legitimate matched betting is a real, low-risk technique that exploits bookmaker free bets, but many paid 'matched betting academy' courses and software oversell it and hide the real risks and effort involved.","explanation":"Matched betting itself is a genuine technique: you back an outcome at one bookmaker and lay the opposite outcome at a betting exchange, using free bet promotions to lock in a small profit regardless of the result. Done carefully, it can generate modest income and is legal in jurisdictions where betting itself is legal. The core method is not a scam.\n\nWhere scams and exaggeration creep in is around paid courses, 'mentor' programs, and software subscriptions that promise large, easy, risk-free monthly income for a low up-front fee. In reality, profits from free bookmaker offers are finite and diminish quickly once you've worked through the initial welcome offers, ongoing reload offers are much smaller and more time-consuming, bookmakers frequently restrict or 'gub' (limit) accounts that show consistent matched-betting patterns, and mistakes in laying bets can cause real losses.\n\nSome paid programs also encourage signing up to as many bookmakers as possible using referral links that earn the course seller a commission, meaning their financial incentive is to get you signing up everywhere, not necessarily to maximize your own profit. If you're considering matched betting, free, well-regarded community guides cover the same fundamentals as most paid courses.","redFlags":["Promises of large 'passive income' with no real time investment","Course fee required before any explanation of the actual method","Heavy pressure to sign up to a long list of bookmakers via referral links","Claims that accounts will 'never' be restricted or limited","No mention of the real risk of mistakes causing losses on lay bets","Testimonials with no verifiable, dated betting exchange statements"],"whatToDoNow":["Learn the basics from free, well-established community forums before paying for any course","Start with very small stakes to understand the mechanics before scaling up","Track every bet and confirm profit/loss with actual account statements","Be wary of any 'academy' that only earns money from referral commissions rather than the method itself","Understand that bookmaker account restrictions are a normal, expected part of matched betting, not a rare failure","Never treat matched betting as guaranteed or risk-free income"],"faq":[{"question":"Is matched betting illegal?","answer":"In most places where gambling itself is legal, matched betting is not illegal, but you should check bookmaker terms since it can lead to account restrictions rather than legal trouble."},{"question":"Do I need to pay for a course to do matched betting?","answer":"No — the core technique is widely explained for free in community guides; paid courses mainly sell convenience and referral sign-ups, not secret knowledge."}],"lastReviewed":"2026-07-05"},{"slug":"recover-losses-fixed-match-scam","url":"https://scamencyclopedia.org/questions/recover-losses-fixed-match-scam","question":"I paid for 'fixed match' predictions and lost money — can I get it back?","shortAnswer":"So-called 'fixed match' sellers are almost always running a pure scam with no real inside access; you're unlikely to recover money paid directly to them, but you can try a chargeback and should report the fraud.","explanation":"Sellers of 'fixed matches' claim to have inside knowledge that a specific sporting result has been arranged in advance, and charge a large fee — often hundreds or thousands of dollars — for a single tip. In practice, genuinely fixed matches at a level accessible to random online sellers are extremely rare, heavily monitored by sports integrity units, and not something real fixers would sell to strangers online for a few hundred dollars. The 'tip' you receive is typically just a guess, sold to many buyers at once, so somebody was always going to have received a correct-looking pick.\n\nThis scam specifically preys on buyers' own willingness to break the rules: because you believe you're paying for something illegal, you're much less likely to report it to authorities or dispute the charge, which is exactly what the scammer is counting on. Many of these operations also demand payment via cryptocurrency or wire transfer specifically because those methods are hard to reverse.\n\nIf the tip loses, the seller usually offers a 'free' replacement tip to keep you paying rather than admit failure, or simply stops responding entirely. Because the underlying transaction was for something you believed was illegal or against platform rules, some victims wrongly assume they have no recourse at all — but you can still report the fraud and, if you paid by card, still attempt a chargeback for services not rendered.","redFlags":["Claims of guaranteed fixed match results for a large upfront fee","Payment demanded only in cryptocurrency or irreversible wire transfer","Seller becomes unreachable immediately after the match is lost","Offers of a 'free replacement pick' after a loss instead of a refund","Pressure and secrecy, discouraging you from telling anyone about the purchase","Claims of connections to real teams, referees, or leagues with no evidence"],"whatToDoNow":["Stop all further payments to the seller immediately","If paid by card, file a chargeback dispute with your bank citing non-delivery of a paid service","Report the transaction to your national fraud reporting body","Do not attempt to recruit others into the scheme to recoup losses","Preserve all chat logs and payment records as evidence","Consider that sports match-fixing at this scale is genuinely rare and most sellers have no real information at all"],"faq":[{"question":"Is it illegal to buy fixed match tips?","answer":"Laws vary by jurisdiction, but in most places the buyer isn't typically prosecuted the way the seller could be; regardless, the tips are almost always fake, so you're paying for nothing."},{"question":"Can I still report it if I paid in crypto?","answer":"Yes — you can still report the fraud to authorities, though recovering crypto payments is much harder than recovering card payments."}],"lastReviewed":"2026-07-05"},{"slug":"sportsbook-account-limited-after-winning","url":"https://scamencyclopedia.org/questions/sportsbook-account-limited-after-winning","question":"My betting account got limited or closed right after I started winning — is that legal?","shortAnswer":"Yes, in most jurisdictions bookmakers are legally allowed to limit stakes or restrict winning customers under their terms of service, even though it feels unfair; this is different from a scam but worth understanding.","explanation":"Unlike casinos, sports betting operators generally act as the counterparty to your bet rather than merely taking a cut, so a bookmaker profits when you lose and loses when you win. Most bookmakers' terms of service explicitly reserve the right to limit maximum stakes or restrict an account at their discretion, and courts in many jurisdictions have upheld this as a normal part of the commercial relationship rather than fraud.\n\nThis practice, sometimes called 'gubbing,' is common industry-wide and is not itself evidence of a scam — it is a legitimate, if frustrating, business practice used by many licensed operators. However, it becomes a genuine problem when a bookmaker restricts your account and then also refuses to pay out bets that were already placed and won before the restriction, delays withdrawal of your existing balance indefinitely, or closes the account and confiscates existing funds without clear justification.\n\nIt's important to separate 'I don't like this policy' from 'this is fraud.' A licensed bookmaker limiting your future stakes is generally lawful. A licensed or unlicensed bookmaker refusing to release money you already legitimately won and withdrew before any restriction is a much stronger basis for a regulatory complaint or chargeback.","redFlags":["Account restricted with no explanation shortly after a big win or run of wins","Existing withdrawable balance frozen along with future stake limits","New excuses appearing only after restriction to avoid paying out past bets","Vague 'terms and conditions' cited without specifying which term was breached","Repeated identity verification demands that never seem to be satisfied","No access to a formal complaints or appeals process"],"whatToDoNow":["Read the bookmaker's terms of service section on stake limits and account restrictions","Distinguish between future stake limits (usually lawful) and confiscation of already-won funds (a real dispute)","Request a clear, written explanation of any restriction and cite specific terms","Escalate unresolved fund disputes to the licensing regulator's complaints process","Keep records of all bets, balances, and communications before and after the restriction","Consider using betting exchanges, which are structurally less likely to restrict winning customers"],"faq":[{"question":"Can a bookmaker legally take back money I already won?","answer":"Generally no, if the bet was valid and the win was already credited or paid — that is a different situation from limiting future stakes, and it's grounds for a formal complaint."},{"question":"Why do bookmakers do this?","answer":"Because in fixed-odds sports betting, the bookmaker is the counterparty to your bet, so a consistently winning customer directly reduces their profit; many operators respond by limiting stake sizes for such accounts."}],"lastReviewed":"2026-07-05"},{"slug":"unlicensed-offshore-casino-warning-signs","url":"https://scamencyclopedia.org/questions/unlicensed-offshore-casino-warning-signs","question":"How do I know if an online casino is unlicensed or offshore and risky?","shortAnswer":"Check for a licence number you can verify on a real regulator's official register; if the casino only shows a badge, logo, or vague claim with no verifiable number, treat it as unlicensed and high risk.","explanation":"Legitimate online casinos display a specific licence number issued by a recognized gambling regulator, and that number can be looked up directly on the regulator's own official website to confirm it belongs to that operator. Scam or high-risk operators often display a generic 'licensed and regulated' badge, a vague reference to an offshore jurisdiction, or a licence number that either doesn't exist or belongs to a completely different company.\n\nSome offshore jurisdictions issue licences with very light oversight and almost no consumer protection or dispute resolution process, meaning that even a 'real' licence from one of these bodies offers little practical help if something goes wrong. Other warning signs include a casino with no clear registered company name or address, payment processing routed through unrelated shell companies, website content copied from other established casinos, and customer support that is slow, evasive, or only available through unmonitored email or generic chat forms.\n\nBefore depositing any money, it's worth spending ten minutes checking the licence, reading independent player reviews on gambling-focused forums (not just testimonials on the casino's own site), and searching the casino's name alongside terms like 'withdrawal complaint' or 'won't pay' to see what existing players report.","redFlags":["Licence badge shown with no verifiable, clickable licence number","Regulator, if named, has no real complaints or enforcement process","No clear registered company name, address, or ownership information","Independent player forums show repeated withdrawal complaints","Website design or promotions closely copy an established, well-known casino","Payment goes through a company name unrelated to the casino brand"],"whatToDoNow":["Look up any stated licence number directly on the regulator's own official website","Search independent gambling forums for the casino's name plus 'complaint' or 'withdrawal'","Avoid depositing more than you could accept losing entirely while testing a new casino","Read the full terms and conditions, especially withdrawal and bonus wagering sections, before depositing","Prefer casinos licensed by well-established regulators with real enforcement records","Use a dedicated card or e-wallet for gambling deposits, never your main bank account"],"faq":[{"question":"Are all offshore-licensed casinos scams?","answer":"No, but licences from jurisdictions with weak oversight offer much less protection if a dispute arises, so extra caution and independent research are warranted."},{"question":"What's the fastest way to check if a casino is trustworthy?","answer":"Verify the licence number on the regulator's own site and search independent player forums for recent withdrawal complaints before depositing any money."}],"lastReviewed":"2026-07-05"},{"slug":"crypto-casino-provably-fair-really-fair","url":"https://scamencyclopedia.org/questions/crypto-casino-provably-fair-really-fair","question":"Is a crypto casino's 'provably fair' system actually fair?","shortAnswer":"Provably fair systems can be genuinely verifiable using cryptographic hashes, but many crypto casinos either implement it incorrectly, don't let you actually verify results, or run other games that aren't provably fair at all.","explanation":"A genuine provably fair system works by having the casino commit to a hashed 'server seed' before a game starts, then combining it with a 'client seed' you can set yourself and a nonce, so that after the game you can independently recompute the result using published formulas and confirm the outcome wasn't manipulated. Where this is properly implemented and independently verifiable, it can offer real transparency that traditional casinos don't.\n\nThe scam risk comes from casinos that use the phrase 'provably fair' as pure marketing without offering a genuine, independently checkable verification tool, that only apply it to a handful of simple games (like dice) while running unrelated slots or live-dealer games with no fairness verification at all, or that rig the client-seed mechanism so your seed input doesn't actually affect the outcome the way it should. Some sites also make the verification process so technically confusing that in practice almost no ordinary user actually checks it, defeating the purpose.\n\nIf a casino advertises 'provably fair,' look for a dedicated verification page where you can input the seeds and nonce from a specific bet and get a matching result using an open-source, published algorithm. If no such tool exists, or it only works for a couple of the least popular games on the site, treat the claim as marketing rather than substance.","redFlags":["The term 'provably fair' used with no working, independent verification tool","Verification only available for minor games, not the site's main slots or live games","No published, open-source algorithm describing exactly how fairness is calculated","Client seed input has no visible effect on actual game outcomes when tested","Casino is unlicensed with no regulator overseeing the platform at all","Support cannot clearly explain how the verification process works"],"whatToDoNow":["Look for an actual seed-verification tool on the casino's site and try using it on a past bet","Research whether the specific game's fairness algorithm has been independently reviewed","Treat 'provably fair' marketing language with the same skepticism as any other unverified claim","Check whether the casino also holds a real gambling licence, since provably fair does not replace regulation","Withdraw winnings promptly rather than leaving large balances on any crypto casino","Avoid casinos where the fairness claim applies to only a small subset of games"],"faq":[{"question":"Does provably fair mean the casino can't cheat at all?","answer":"It means specific game outcomes can be mathematically verified after the fact for games that properly implement it, but it doesn't cover every game on a site or guarantee the casino will pay out withdrawals."},{"question":"How do I actually verify a provably fair bet?","answer":"Use the casino's published verification tool (or an independent third-party one) with the revealed server seed, your client seed, and the nonce to recompute the result yourself."}],"lastReviewed":"2026-07-05"},{"slug":"casino-bonus-abuse-flagged-account","url":"https://scamencyclopedia.org/questions/casino-bonus-abuse-flagged-account","question":"My casino account got flagged for 'bonus abuse' — what does that mean?","shortAnswer":"Bonus abuse flags usually mean the casino believes you violated wagering terms (like using multiple accounts, betting patterns designed to guarantee profit, or excluded games); some flags are legitimate, but some casinos abuse the term to avoid paying out.","explanation":"Casino welcome bonuses and free spins come with wagering requirements — rules about how many times you must bet the bonus amount, which games count toward wagering, and maximum bet sizes while a bonus is active. 'Bonus abuse' is the casino's term for breaking these rules, whether through opening multiple accounts to claim the same bonus repeatedly, using betting patterns across games specifically designed to lock in profit with minimal risk (sometimes called bonus hunting or advantage play), or placing bets larger than the maximum allowed while a bonus is active.\n\nSome of these flags are entirely legitimate — casinos are within their rights to void winnings from genuine multi-accounting or scripted bonus exploitation, and this isn't a scam on the casino's part. However, some operators — particularly less reputable ones — apply the 'bonus abuse' label loosely or retroactively to any account that wins a meaningful amount, using it as an excuse to withhold funds that were won fairly under the stated terms.\n\nThe key question is whether you can point to the specific term you supposedly violated and whether that term was clearly stated before you started playing. If the casino cannot specify which rule was broken, or invents a new rule after the fact, that's a strong sign the 'bonus abuse' flag is being used as a pretext rather than a genuine finding.","redFlags":["Casino cites 'bonus abuse' without naming the specific term violated","The cited rule wasn't clearly stated in the bonus terms before you played","Flag only appears after a win, never during normal play","No appeals process or independent review of the decision offered","Casino keeps your deposited principal, not just bonus-related winnings","Similar complaints appear from other players in independent forums"],"whatToDoNow":["Ask the casino in writing which exact term was violated and request the relevant clause","Compare their answer against the bonus terms you agreed to at the time","Keep a copy of the bonus terms and conditions from when you opted in, since these are sometimes edited later","Escalate to the licensing regulator if the casino won't specify the violation or return your original deposit","Avoid claiming stacked bonuses across multiple accounts, which is genuine abuse and rarely defensible","Read wagering requirements fully before opting into any bonus in future"],"faq":[{"question":"Can a casino keep my original deposit, not just bonus winnings, over bonus abuse?","answer":"Legitimate terms usually only allow forfeiting the bonus and related winnings, not your own deposited funds — a casino confiscating your original deposit too is a stronger sign of a bad-faith dispute."},{"question":"Is bonus hunting itself illegal?","answer":"It's generally not illegal, but it typically breaches casino terms of service, giving the casino contractual grounds to void winnings even though no law was broken."}],"lastReviewed":"2026-07-05"},{"slug":"esports-skin-gambling-site-safe","url":"https://scamencyclopedia.org/questions/esports-skin-gambling-site-safe","question":"Are esports skin gambling and betting sites safe to use?","shortAnswer":"Many skin gambling sites operate without gambling licences, are frequently unregulated in the jurisdictions their young user base is in, and have a long history of rigged odds and sudden shutdowns with user balances lost.","explanation":"Skin gambling sites let users wager virtual in-game items (commonly cosmetic 'skins' from games) on outcomes ranging from coin flips and roulette-style games to real esports match betting. Because these sites trade in virtual items rather than direct currency, many have historically operated in a regulatory gray area, avoiding the gambling licences and consumer protections that apply to money-based betting sites, even though the items involved have clear real-world cash value through third-party trading markets.\n\nThis regulatory gap has produced a long track record of problems: sites with secretly rigged odds favoring the house far beyond what's disclosed, operators quietly running influencer-promoted sites where the same people secretly own the platform and stage fake wins in promotional videos, and abrupt shutdowns where user skin balances simply vanish with no recourse. The user base for many of these sites skews young, including users below the legal gambling age in many jurisdictions, since skin trading platforms often have weaker age verification than licensed money-based casinos.\n\nIf you use any skin gambling site, treat it with the same caution as an unlicensed cash casino: research independent complaints, never deposit items you can't afford to lose entirely, and be especially skeptical of any site promoted by a content creator without clear, independent disclosure of whether they have a financial stake in it.","redFlags":["No visible gambling licence or age verification at sign-up","Promoted heavily by streamers or content creators with undisclosed ownership ties","Odds or payout percentages not independently disclosed or verifiable","Sudden 'maintenance' periods that coincide with user withdrawal requests","No clear terms explaining how skin values are calculated versus real cash markets","Site history includes past shutdowns or rebrands under a new name"],"whatToDoNow":["Check whether the site holds any real gambling licence at all before depositing items","Research whether any promoting streamer or influencer has disclosed a financial stake in the site","Never deposit items whose loss you couldn't accept entirely","Withdraw winnings promptly rather than holding a large balance on the platform","Be aware that minors are frequently exposed to these sites due to weak age checks","Report suspected rigged or undisclosed-ownership sites to relevant platform and gaming company abuse teams"],"faq":[{"question":"Is skin gambling legal?","answer":"This varies by jurisdiction and is often contested; some regulators have taken action against skin gambling sites and against game publishers who allow item trading to fuel them, so legality is genuinely unsettled in many places."},{"question":"Why do influencer-promoted skin gambling sites raise extra concern?","answer":"Several past cases have involved creators secretly owning or being paid by the same sites they promoted as if playing independently, misleading viewers about the odds of winning."}],"lastReviewed":"2026-07-05"},{"slug":"lottery-prediction-software-scam","url":"https://scamencyclopedia.org/questions/lottery-prediction-software-scam","question":"Can lottery prediction software actually improve my odds?","shortAnswer":"No legitimate software can predict truly random lottery draws; any product claiming to improve your odds through pattern analysis, 'hot and cold numbers,' or an algorithm is selling a false promise.","explanation":"Standard lottery draws are designed to be statistically independent random events — the outcome of a past draw has no bearing on the probability of any specific number appearing in a future draw. Software that claims to identify 'hot,' 'cold,' or 'overdue' numbers, or that applies an 'algorithm' to historical results to predict future draws, is applying pattern-recognition to fundamentally random data. Any apparent pattern found is coincidental and does not change the true odds of any future draw.\n\nSellers of this kind of software typically charge a one-time fee or ongoing subscription and support their claims with cherry-picked anecdotes of past 'wins' by users, without disclosing the far larger number of subscribers who bought the software and did not win anything unusual. Some versions of this scam also include a multi-level marketing structure, where the real money is made not by winning the lottery but by recruiting other people to buy the same software.\n\nA closely related scam involves 'lottery syndicate' or 'wheel system' sellers who claim that buying tickets in specific mathematically clever combinations improves your odds of a jackpot beyond simple probability. While wheeling systems can guarantee certain smaller-prize outcomes across a set of tickets, they don't change your fundamental odds of winning the jackpot itself — they simply redistribute the same overall probability across more tickets, which you could achieve by buying more tickets any way you like.","redFlags":["Software or system claims to 'predict' or improve odds on a genuinely random draw","Marketing built around isolated user testimonials rather than statistical evidence","Recruitment or referral incentives layered on top of the software sale","Refusal to explain, in plain terms, why the method would work mathematically","Claims of a secret formula 'lottery operators don't want you to know'","High-pressure limited-time discount pricing on the software itself"],"whatToDoNow":["Understand that standard lottery draws are random and no software can predict them","Treat 'hot and cold number' claims as statistically meaningless for future draws","Do not pay for any product promising improved lottery odds through pattern analysis","If you already paid, dispute the charge with your card issuer citing a false claim","Report the product to consumer protection authorities if it makes explicit probability claims","Remember that wheeling systems change how prizes are distributed across tickets, not your true jackpot odds"],"faq":[{"question":"Do any numbers really come up more often over time?","answer":"Over a large enough number of draws, all numbers tend toward roughly equal frequency; short-term streaks are normal statistical variation, not a signal to bet on."},{"question":"Are lottery wheeling systems a scam?","answer":"The math behind wheeling itself is real but only guarantees certain smaller-prize outcomes across a set of tickets — it does not improve your odds of winning the jackpot beyond what buying the same number of tickets any other way would give you."}],"lastReviewed":"2026-07-05"},{"slug":"fake-poker-site-rigged-bots","url":"https://scamencyclopedia.org/questions/fake-poker-site-rigged-bots","question":"How do I know if an online poker site is rigged or full of bots?","shortAnswer":"Look for a licensed, well-known poker platform with independent random number generator certification; unlicensed sites with unusually aggressive, fast, or statistically improbable play patterns are common signs of bots or collusion.","explanation":"Legitimate, licensed online poker platforms use certified random number generators that are independently tested and audited by recognized testing labs, and they run active security teams that monitor for bots and colluding players. Smaller, unlicensed, or offshore poker sites often skip this independent certification entirely, meaning there is no outside verification that the shuffling and dealing are genuinely random or free of house interference.\n\nBot and collusion problems can occur even on some larger platforms, but a well-run, licensed site typically has detection systems and a track record of banning offending accounts and refunding affected players. Warning signs of a poorly monitored or rigged site include unusually large numbers of hands where you're dealt very strong or very weak starting hands in a short window, opponents who bet with inhuman speed and consistency (possible bot indicators), obvious coordinated play between two 'different' accounts sharing information, and a site with no clear licensing, no published fairness or security policy, and no visible anti-bot enforcement history.\n\nIf you suspect a specific site is rigged, look for independent player forums discussing that platform, check whether it holds a real gambling licence, and consider tracking a sample of your own hand histories for statistically unusual patterns rather than relying on gut feeling from a single bad session, which is more often normal variance than manipulation.","redFlags":["No licence or independent random number generator certification disclosed","Opponents playing with inhumanly fast, consistent timing across many hands","Repeated suspicious coordination between two accounts at the same table","No visible policy or enforcement history around bots and collusion","Site is very new, poorly reviewed, or has rebranded from a previously banned platform","Withdrawal problems reported alongside suspected unfair play in player forums"],"whatToDoNow":["Verify the site's gambling licence and any independent RNG certification before depositing","Track your own hand history data over a large enough sample before concluding a site is rigged","Report suspected bots or collusion to the platform's security or support team with specific hand numbers","Search independent poker forums for existing complaints about the specific site","Withdraw funds and stop playing on any site with unresolved fairness complaints","Prefer well-established, licensed platforms with a long, verifiable operating history"],"faq":[{"question":"Is a bad run of cards proof a site is rigged?","answer":"No — normal variance in poker can produce long unlucky streaks even on perfectly fair sites; only a large, statistically unusual sample over many hands is meaningful evidence."},{"question":"How can I tell if I'm playing against a bot?","answer":"Signs include inhumanly consistent timing on every decision, playing every session at unusual hours nonstop, and decision patterns that don't vary with table dynamics — though none of these alone is conclusive proof."}],"lastReviewed":"2026-07-05"},{"slug":"arbitrage-betting-service-legit","url":"https://scamencyclopedia.org/questions/arbitrage-betting-service-legit","question":"Is a paid arbitrage betting (arbing) service worth the money?","shortAnswer":"Arbitrage betting is a real technique that exploits odds differences between bookmakers, but paid 'arb finder' subscriptions often oversell the profits, and the practice leads to fast account restrictions that limit how long it stays viable.","explanation":"Arbitrage betting involves placing bets on all possible outcomes of an event across different bookmakers, taking advantage of small differences in their odds so that you lock in a guaranteed profit regardless of the result. This is a mathematically real strategy, not a scam in itself, and paid software that scans many bookmakers for arbitrage opportunities in real time can genuinely save time compared to manual searching.\n\nHowever, the marketing around many arbing subscriptions significantly overstates realistic returns. Profit margins on genuine arbitrage opportunities are typically very small per bet, opportunities close quickly once enough people act on them, and — most importantly — bookmakers actively detect arbitrage betting patterns and restrict or close accounts that show them, often within a small number of bets. This means the effective 'shelf life' of any given bookmaker account for arbing is often short, undermining the larger income claims some services make.\n\nAs with matched betting, some 'arb finder' sellers earn most of their revenue through bookmaker referral commissions, giving them an incentive to push you toward opening many accounts regardless of whether it's genuinely profitable for you long-term. If considering a paid service, look for transparent, verifiable data on typical margins and realistic account longevity rather than headline income claims.","redFlags":["Marketing emphasizes large guaranteed monthly income rather than realistic small margins","No mention of bookmaker account restrictions as a normal, expected limiting factor","Heavy push toward opening accounts via referral links","Claims that the software finds opportunities 'no one else knows about'","Refund policy is vague or nonexistent","No free trial or way to verify real-time opportunity data before paying"],"whatToDoNow":["Research realistic typical arbitrage margins from independent sources before subscribing","Understand that bookmaker account restrictions will likely limit how long any account stays useful","Be skeptical of large guaranteed income claims tied to a subscription","Check whether the seller earns primarily from bookmaker referral commissions","Start with a small trial period if offered before committing to a longer subscription","Track actual results independently rather than relying on the service's own reported figures"],"faq":[{"question":"Is arbitrage betting illegal?","answer":"It's generally not illegal where the underlying betting is legal, but it typically breaches individual bookmaker terms of service, which is why accounts get restricted rather than any legal action being taken."},{"question":"Why do arbitrage opportunities disappear quickly?","answer":"Once enough bettors exploit a mispricing between bookmakers, one or both bookmakers typically adjust their odds, closing the gap."}],"lastReviewed":"2026-07-05"},{"slug":"romance-scammer-asking-to-gamble-together","url":"https://scamencyclopedia.org/questions/romance-scammer-asking-to-gamble-together","question":"An online partner I've never met wants me to gamble on a site they recommend — is this a scam?","shortAnswer":"Yes, this is a well-documented pattern often called 'pig butchering' or romance-investment fraud, where a scammer builds a relationship then directs you to a fake gambling or trading platform they control, which shows fake wins to get you to deposit more.","explanation":"In this scam, someone you met online — often through a dating app or social media — invests weeks or months building what feels like a genuine romantic or close friendship before introducing a 'lucky' gambling, trading, or investment platform, often one they claim to use themselves with great success. Early on you may be encouraged to deposit a small amount and are shown real, fast withdrawals to build trust.\n\nOnce trust is established, the platform's interface — which is entirely controlled by the scammer, often not a real gambling or trading site at all — starts showing large fabricated 'winnings.' You're encouraged to deposit larger and larger amounts to 'capitalize' on the winning streak. When you eventually try to withdraw the larger balance, you'll be told you owe additional 'taxes,' 'fees,' or need to reach a minimum balance before withdrawal is allowed — none of which is true, and none of the money is recoverable once sent.\n\nThis pattern is now widespread enough to have a name, 'pig butchering,' reflecting the slow, patient fattening of the victim's trust before the final loss. A key sign is that the romantic relationship and the gambling or trading 'tip' are intertwined from someone you have never met in person, especially if the relationship escalated quickly and the platform is one you can't find independent, verifiable reviews of outside of what the person shows you.","redFlags":["Online romantic partner you've never met in person introduces a gambling or investment platform","Early small withdrawals work fine, encouraging larger deposits later","Platform interface shows large gains that don't match any verifiable independent reviews","Eventual demand for a 'tax,' 'fee,' or minimum balance before you can withdraw","Pressure to keep the relationship and the financial activity secret from friends or family","Relationship escalated to talk of marriage, meeting up, or shared finances remarkably quickly"],"whatToDoNow":["Stop depositing any further funds immediately","Do not pay any 'tax' or 'fee' requested to unlock a withdrawal — this is never legitimate","Independently verify the platform's licensing and reputation outside of anything the partner has shown you","Talk to a trusted friend or family member about the relationship and the financial requests","Report the scam to your national fraud reporting body and the platform hosting the profile","Preserve all chat logs, transaction records, and platform screenshots as evidence"],"faq":[{"question":"Can I get my money back after a scam like this?","answer":"Recovery rates are generally low, especially with cryptocurrency payments, but reporting quickly to your bank and fraud authorities gives the best chance and helps investigators track the wider network."},{"question":"Why do these scams involve romance at all?","answer":"Building emotional trust makes victims far less likely to question the platform's legitimacy or seek outside advice before depositing larger sums."}],"lastReviewed":"2026-07-05"},{"slug":"casino-affiliate-review-sites-trustworthy","url":"https://scamencyclopedia.org/questions/casino-affiliate-review-sites-trustworthy","question":"Can I trust casino 'top 10' review and ranking websites?","shortAnswer":"Many casino ranking sites are paid affiliates who earn commission for every player they refer, so their rankings often favor whichever casino pays the most rather than the safest or fairest option for players.","explanation":"Most online casino comparison and 'best casinos' ranking sites operate on an affiliate marketing model: they earn a commission from casinos for every new depositing customer they refer, and sometimes an ongoing share of that customer's losses over time. This financial structure creates an inherent conflict of interest, since a site's revenue often depends on ranking whichever casinos pay the highest commission rather than whichever are genuinely the safest, best regulated, or fairest to players.\n\nThis doesn't mean every affiliate review site is dishonest — some maintain genuinely useful, detailed information about licensing, game fairness, and withdrawal speed, and disclose their affiliate relationships clearly. But many others present themselves as independent, neutral consumer resources while quietly steering readers toward whichever operators pay the best commissions, sometimes even ranking casinos with known unresolved player complaints highly if the commission rate is attractive.\n\nWhen using a casino review site, look for clear disclosure of affiliate relationships, check whether negative reviews and complaints are ever mentioned or if every listed casino gets a suspiciously uniform, glowing review, and cross-reference any casino you're considering against independent player forums and the actual regulator's licence register rather than relying on the ranking site's star rating alone.","redFlags":["No visible disclosure that the site earns affiliate commissions","Every listed casino receives a near-identical glowing rating with no real criticism","Rankings change suspiciously in favor of casinos running the biggest current promotions","No mention of licensing details, withdrawal speed, or verifiable complaint history","Site pushes urgency ('sign up now for bonus') more than balanced comparison","Same review text appears copy-pasted across multiple 'independent' sites"],"whatToDoNow":["Check for a clear affiliate disclosure statement on the review site","Cross-reference any recommended casino against independent player forums, not just the ranking site","Verify licensing claims directly on the regulator's own official website","Be skeptical of rankings where every listed option receives an almost identical top rating","Search for the casino name plus 'complaint' or 'withdrawal problem' separately from the review site","Treat 'best casino' rankings as advertising, not independent consumer research"],"faq":[{"question":"Does an affiliate relationship automatically mean the review is dishonest?","answer":"Not necessarily — some sites disclose affiliate ties honestly and still provide genuinely useful, balanced information, but the financial incentive means their rankings deserve independent verification."},{"question":"Where can I find more neutral casino information?","answer":"Government or regulator licence registers, dedicated gambling complaint forums, and consumer protection bodies tend to be more neutral than affiliate ranking sites."}],"lastReviewed":"2026-07-05"},{"slug":"social-casino-app-real-money-trap","url":"https://scamencyclopedia.org/questions/social-casino-app-real-money-trap","question":"Are 'social casino' apps that use fake coins a scam?","shortAnswer":"Social casino apps using virtual coins aren't traditional gambling scams since you can't cash out winnings for real money, but they're built to mimic gambling psychology closely and can encourage real spending and problem gambling behaviors, especially when paired with 'sweepstakes' cash-out models.","explanation":"Standard social casino apps let players spend real money to buy virtual coins or chips used to play slot- or casino-style games, but any 'winnings' are just more virtual coins with no cash value and no way to withdraw actual money. Because no real money is won or paid out, most of these apps operate outside gambling regulation entirely, even though the game mechanics — spinning reels, near-misses, escalating stakes — are deliberately designed using the same psychological techniques as real-money gambling to keep players spending on more virtual coins.\n\nA related but distinct category is the 'sweepstakes casino' model, common in some jurisdictions, where players buy virtual currency for game play but also receive separate free sweepstakes entries that can, in some cases, be redeemed for real prizes or cash under sweepstakes law rather than gambling law. These operate in a genuine legal gray area that varies significantly by jurisdiction, and some have faced regulatory challenges over whether they are functionally unlicensed real-money gambling dressed up as a sweepstakes.\n\nThe core risk for most users isn't a classic scam where money simply disappears, but rather the app successfully encouraging compulsive spending on virtual coins that have zero cash value, which can be just as financially damaging as real-money gambling losses over time, especially for users who already struggle with gambling urges.","redFlags":["In-app purchases escalate quickly after early cheap 'starter' coin packages","Marketing blurs the line between the free social game and a real-money gambling feel","Sweepstakes-style app claims real cash prizes but has unclear or absent licensing","Aggressive push notifications encouraging return play after any break","Near-miss and escalating-stake mechanics closely mimicking real slot machine design","No spending limit tools or self-exclusion options offered within the app"],"whatToDoNow":["Understand that virtual coins in most social casino apps have no cash value and cannot be withdrawn","Check whether a 'sweepstakes casino' app is operating legally in your specific jurisdiction","Set a personal spending limit before making any in-app purchase, and stick to it","Use device-level spending controls or parental controls if compulsive spending is a concern","Treat persistent urges to keep buying coins as a sign to step back, regardless of no real winnings being at stake","Seek problem gambling support resources if virtual coin spending feels compulsive"],"faq":[{"question":"Can I ever win real money on a social casino app?","answer":"Standard social casino apps never pay real cash; only specific sweepstakes-model apps in certain jurisdictions may allow limited real-prize redemption, and their legal status varies and is sometimes disputed."},{"question":"Why do these apps feel so much like real gambling?","answer":"They're deliberately designed using the same near-miss animations, escalating stake presentation, and reward timing used in real-money slot machines, because those mechanics are effective at encouraging continued play and spending."}],"lastReviewed":"2026-07-05"},{"slug":"betting-syndicate-investment-scam","url":"https://scamencyclopedia.org/questions/betting-syndicate-investment-scam","question":"Someone wants me to invest in their 'betting syndicate' for guaranteed returns — is this a scam?","shortAnswer":"Yes, in nearly all cases 'invest in my betting syndicate' offers to strangers online are Ponzi-style scams; genuine professional betting syndicates don't recruit random outside investors with guaranteed return promises.","explanation":"This scam presents itself as an investment opportunity rather than direct gambling: you're told a skilled team of professional bettors or a proprietary algorithm consistently beats the bookmakers, and by 'investing' your money with the syndicate, you'll receive a share of guaranteed profits, often quoted as a fixed monthly percentage return with no explanation of how the underlying betting actually generates that return.\n\nReal professional betting operations that do achieve consistent long-term profit are rare, operate at scale with sophisticated risk management, and have little practical need or desire to recruit random online investors, since doing so exposes their edge to more people and dilutes their own returns. When early 'investors' do receive payouts, it's frequently funded by newer investors' deposits in a classic Ponzi structure rather than genuine betting profits, which is why the scheme can appear legitimate for a period before collapsing once new deposits slow down.\n\nAs with other investment scams, look for the same core warning signs: guaranteed fixed returns regardless of market or event outcomes, pressure to recruit friends and family for referral bonuses, vague or evasive explanations of the actual betting strategy, and reluctance to let you withdraw your full principal on demand.","redFlags":["Guaranteed fixed monthly or weekly return regardless of underlying betting results","No transparent, verifiable explanation of the actual betting strategy or edge","Referral bonuses for recruiting new investors into the syndicate","Reluctance or delays when asked to withdraw the full original investment","Contact made unsolicited through social media or messaging apps","Pressure to reinvest 'profits' rather than withdraw them"],"whatToDoNow":["Treat any guaranteed betting investment return as a certain scam indicator","Never wire money or send cryptocurrency to a 'syndicate' you found through unsolicited contact","Ask for independently verifiable proof of the syndicate's trading or betting history","Refuse any request to recruit friends or family as new investors","Report the scheme to your national financial or fraud regulator","If you've already invested, request full withdrawal immediately and document any refusal or delay"],"faq":[{"question":"Do real betting syndicates exist?","answer":"Yes, but genuine professional syndicates operate with their own capital or a small closed circle of known partners, not by soliciting guaranteed-return investments from strangers online."},{"question":"How is this different from a normal investment scam?","answer":"It isn't fundamentally different — it uses sports betting as the claimed source of profit instead of stocks or crypto, but follows the same Ponzi-style structure of paying early investors with new deposits."}],"lastReviewed":"2026-07-05"},{"slug":"fake-live-dealer-casino-stream","url":"https://scamencyclopedia.org/questions/fake-live-dealer-casino-stream","question":"Can a live dealer casino game be faked or rigged?","shortAnswer":"Licensed live dealer games from established studios are generally genuine, but some unlicensed casinos use pre-recorded loops, delayed or edited footage, or fake 'live' interfaces that aren't connected to a real dealer at all.","explanation":"Reputable live dealer casino games are streamed from dedicated studios with real dealers, real cards or roulette wheels, and multiple camera angles, typically operated by established game studios that supply the same live tables to many different licensed casino brands. In this legitimate model, the casino you're playing on is simply a customer of the studio, and the studio's own licensing and fairness auditing apply regardless of which casino brand you access it through.\n\nScam or unlicensed operators have been known to present a 'live dealer' interface that is actually a looped pre-recorded video, a game controlled by a random number generator dressed up with cosmetic live-style graphics, or footage with a deliberate delay allowing outcomes to be manipulated before being shown to players. These are far more likely to appear on unlicensed sites with no connection to a recognized live studio provider.\n\nA simple check is to look at which live game studio actually supplies the table (often named in small print or in the game's loading screen) and confirm that studio holds its own licensing and fairness certification independent of the casino brand. If a 'live' game has no named studio provider, feels unusually low-resolution or glitchy in a way that suggests looped footage, or the same visual sequence appears to repeat, treat it with serious suspicion.","redFlags":["No named, recognizable live game studio provider shown in the game interface","Video quality or dealer movements appear looped or repeat in a noticeable pattern","Casino itself is unlicensed, even if the 'live' games look polished","No independent fairness certification for the live game studio","Noticeable delay between dealer actions and result displayed on screen","Support cannot name or explain which studio actually operates the live tables"],"whatToDoNow":["Check which live game studio actually supplies the table and verify their independent licensing","Be suspicious of any casino running its own unnamed, in-house 'live' games with no third-party studio","Watch for repeating footage patterns that would suggest a looped recording rather than a genuine live feed","Prefer licensed casinos using well-known, independently audited live studio providers","Report suspected fake live games to the casino's regulator if one exists","Avoid depositing on any casino where the live game provider can't be identified or verified"],"faq":[{"question":"How do I find out which studio supplies a live game?","answer":"Look for a small logo or name in the loading screen or interface of the specific table, then search that studio's name to confirm it holds independent licensing and fairness certification."},{"question":"Are all unlicensed live dealer games fake?","answer":"Not necessarily all, but without licensing or independent studio verification there is no outside assurance that the feed is genuine and unmanipulated."}],"lastReviewed":"2026-07-05"},{"slug":"advance-fee-fake-lottery-win-notification","url":"https://scamencyclopedia.org/questions/advance-fee-fake-lottery-win-notification","question":"I got a message saying I won a lottery I never entered — is this always a scam?","shortAnswer":"Yes. Genuine lotteries never contact winners out of the blue for a lottery you didn't enter, and any request to pay a fee, tax, or 'processing charge' before releasing your prize is a classic advance-fee scam.","explanation":"This scam typically arrives as an unsolicited email, text, or social media message announcing that you've won a large cash prize, often citing a well-known lottery name or a foreign national lottery you have no memory of entering. The message usually includes official-looking letterhead, fake reference numbers, and the name of a supposed 'claims agent' or lawyer handling your winnings.\n\nThe defining feature of this scam is the eventual request for money from you before your 'winnings' can be released — described as taxes, a processing fee, a currency conversion charge, or insurance for shipping a prize. In every legitimate lottery, taxes on winnings (where applicable) are either withheld automatically before payment or paid separately by the winner directly to the tax authority after receiving funds — a real lottery organization never asks winners to wire money upfront to unlock a prize.\n\nScammers running this operation often follow up any payment with a new, larger 'fee' required to complete the process, extracting as much money as possible before the victim realizes no prize will ever arrive. Because you cannot win a lottery you never entered, and legitimate lotteries do not contact winners this way, any message of this kind should be treated as fraudulent from the outset, regardless of how official it looks.","redFlags":["Notification of winning a lottery or prize draw you never entered","Request to pay any fee, tax, or charge before receiving the prize","Official-looking documents with reference numbers, logos, or 'agent' names","Contact made via unsolicited email, text, or social media message","Urgency to respond or pay quickly to avoid forfeiting the prize","Requests for personal identification details along with payment"],"whatToDoNow":["Do not respond to the message or click any links it contains","Never send money, gift cards, or personal identification in response to an unsolicited prize notice","Verify independently by contacting the real lottery organization through its official published contact details, not the ones in the message","Report the message to your email provider or phone carrier as spam or phishing","Report the scam to your national fraud reporting body","Warn friends or family members who may be targeted with similar messages"],"faq":[{"question":"Could this ever be real if I did buy a ticket once?","answer":"Even if you have bought tickets before, verify independently through the lottery's official website or customer service line rather than trusting contact details provided in the message itself."},{"question":"Why do scammers ask for money before releasing a 'prize'?","answer":"The entire scheme depends on collecting upfront fees, since there is no real prize; any payment made goes straight to the scammer with nothing ever delivered in return."}],"lastReviewed":"2026-07-05"},{"slug":"betting-exchange-vs-bookmaker-scam-risk","url":"https://scamencyclopedia.org/questions/betting-exchange-vs-bookmaker-scam-risk","question":"Are betting exchanges safer from scams than traditional bookmakers?","shortAnswer":"Betting exchanges carry structurally different risks than bookmakers — they're less likely to restrict winning accounts, but you take on counterparty risk with other bettors and should still verify the exchange itself is properly licensed.","explanation":"A betting exchange lets bettors wager directly against each other rather than against the operator, with the exchange simply taking a small commission on net winnings. Because the exchange doesn't lose money when you win (unlike a traditional bookmaker), exchanges have much less structural incentive to limit or restrict winning customers, which is a genuine practical advantage for skilled or high-volume bettors who might otherwise face account restrictions elsewhere.\n\nHowever, exchanges introduce their own considerations. You're relying on the exchange's matching system and liquidity, meaning bets in low-volume markets may not get matched at your desired odds. You should also verify that the exchange itself holds a genuine gambling licence, since some 'exchange' branded platforms marketed in less regulated markets are not meaningfully different from unlicensed bookmakers in terms of withdrawal reliability.\n\nIt's worth noting that a properly licensed, well-established exchange is generally considered lower scam-risk than a random unlicensed bookmaker, precisely because its business model doesn't depend on beating individual customers. But 'it's an exchange' alone is not a guarantee of legitimacy — the same licensing, withdrawal-history, and independent-review checks that apply to any gambling platform still apply here.","redFlags":["Exchange platform has no visible gambling licence despite branding itself as an exchange","Unusually wide spreads or thin liquidity on markets that should be well-traded","Withdrawal delays or complaints reported in independent forums","Commission structure not clearly disclosed before you place bets","Platform is new, unreviewed, and mimics the branding of a well-known established exchange","No clear dispute resolution process for matched-bet errors"],"whatToDoNow":["Confirm the exchange holds a genuine licence from a recognized regulator","Check independent player forums for withdrawal complaints before depositing significant funds","Understand the exchange's commission structure before placing bets","Be aware that low-liquidity markets may not match your bet at the odds you want","Prefer well-established, long-operating exchanges over new, unreviewed platforms","Treat 'exchange' branding as one factor, not a substitute for licensing verification"],"faq":[{"question":"Can a betting exchange still restrict my account?","answer":"It's less common than with traditional bookmakers since the exchange doesn't lose from your wins directly, but exchanges can still restrict accounts for suspected fraud, collusion, or breaching their terms."},{"question":"Do I still need to check licensing for an exchange?","answer":"Yes — the exchange model changes the incentive structure around limiting winners, but it doesn't guarantee the platform is properly regulated or reliable for withdrawals."}],"lastReviewed":"2026-07-05"},{"slug":"casino-app-store-clone-scam","url":"https://scamencyclopedia.org/questions/casino-app-store-clone-scam","question":"I downloaded a casino app from an app store — could it still be a scam?","shortAnswer":"Yes. App store review processes don't fully verify gambling licensing, and clone apps impersonating well-known casino brands, or real-money apps disguised as free 'social' games, have both appeared on official app stores.","explanation":"App store approval mostly checks technical compliance and store policy adherence, not whether an app's underlying gambling operator holds a genuine licence in your specific jurisdiction. This means an app can be published on an official store while still connecting to an unlicensed or improperly licensed backend casino, or while impersonating the branding of a well-known, legitimate casino without actually being affiliated with it.\n\nA related pattern involves apps that appear in the store as free-to-play 'social' casino games with no real-money gambling, but that quietly unlock real-money deposit and withdrawal features once installed, sometimes specifically to route around a store's stricter policies on real-money gambling apps. Fake clone apps using near-identical names, logos, and color schemes to well-known casino brands have also been found, tricking users who search for a specific known operator into installing an impostor instead.\n\nBefore depositing money in any casino app, verify that the developer name shown in the app store listing matches the real company operating the licensed casino, check the app's actual permissions and reviews for complaints about withdrawals or fake real-money features, and cross-reference the app against the casino operator's official website, which should clearly link to the correct, verified app rather than leaving you to search for it independently.","redFlags":["Developer name in the app store listing doesn't match the casino brand's real company name","App icon or name is a close but not exact match to a well-known casino brand","Free 'social' app unexpectedly offers real-money deposits after installation","Reviews mention withdrawal problems, account freezes, or fake 'social' branding hiding real gambling","No link to the app from the casino's own official verified website","App requests unusual permissions unrelated to gambling functionality"],"whatToDoNow":["Download casino apps only via a verified link from the casino's official website, not by searching the app store directly","Check the developer name in the store listing against the casino operator's real registered company name","Read recent app reviews specifically for withdrawal or fake-branding complaints","Report clone or impersonation apps to the app store's abuse reporting process","Verify the casino's gambling licence independently before depositing through any app","Uninstall and dispute any charges immediately if you suspect you installed a clone app"],"faq":[{"question":"Do app stores check gambling licences before approving an app?","answer":"Not thoroughly in every case — approval focuses more on technical and content policy compliance, so licensing verification is still something you need to do yourself."},{"question":"How do I find the real app for a casino I already trust?","answer":"Go to the casino's own official website and use the download link provided there rather than searching the app store directly, which can surface impostor apps first."}],"lastReviewed":"2026-07-05"},{"slug":"gambling-recovery-scam-targeting-losers","url":"https://scamencyclopedia.org/questions/gambling-recovery-scam-targeting-losers","question":"A company offered to help me 'recover' money I lost gambling — is that legitimate?","shortAnswer":"Be very cautious: while some legitimate consumer advocates and regulators help with genuine disputes, many 'gambling recovery' or 'fund recovery' services are themselves scams that charge upfront fees and never deliver any real recovery.","explanation":"After losing money to a scam casino, rigged platform, or even a legitimate but disputed gambling loss, victims are often targeted a second time by 'recovery agents' or 'fund recovery specialists' who claim to have special ability to get the money back, typically for an upfront fee or a percentage paid before any funds are recovered. These operations frequently contact victims found through leaked lists of people who have previously lost money to scams, since a known prior victim is considered an easier target for a follow-up scam.\n\nGenuine avenues for pursuing withheld gambling funds — filing a complaint with the licensing regulator, disputing a card charge through your bank, or working with recognized consumer protection bodies — generally do not require a large upfront fee paid to a private 'recovery' company, and regulators and banks do not charge victims for filing legitimate complaints. Legitimate lawyers pursuing a real legal claim typically operate on clearer fee structures and can be independently verified through a bar association or law society.\n\nIf you're contacted out of the blue by a company offering to recover gambling losses for an upfront payment, treat it with the same skepticism as the original scam. Verify any claimed legal credentials independently, never pay an upfront 'recovery fee' to an unsolicited contact, and pursue the free, official channels — regulator complaints and bank chargebacks — before considering any paid service.","redFlags":["Unsolicited contact offering to recover gambling losses for an upfront fee","Pressure to pay before any recovery work has actually been completed","Vague or unverifiable claims of legal or regulatory connections","Contact received shortly after a previous scam, suggesting your details were shared or sold","Refusal to work on a genuine no-recovery-no-fee basis with clear terms","Request for further sensitive financial details 'to process' the recovery"],"whatToDoNow":["Do not pay any upfront fee to an unsolicited 'fund recovery' contact","File complaints directly with the licensing regulator and your bank first, at no cost","Independently verify any lawyer's credentials through an official bar association or law society register","Treat any follow-up contact after a scam as a probable second scam attempt","Report the recovery scam attempt to your national fraud reporting body","Warn others in relevant scam-victim support communities about the specific company contacting you"],"faq":[{"question":"Are all fund recovery services scams?","answer":"Not necessarily all, but the unsolicited, upfront-fee model is extremely high risk; genuine paths like regulator complaints and bank chargebacks are free and should be tried first."},{"question":"Why would a scammer target someone who already lost money to a scam?","answer":"Prior victims are seen as easier targets because they're emotionally invested in recovering their loss and may be more willing to take a risk on a company promising to help."}],"lastReviewed":"2026-07-05"},{"slug":"casino-loyalty-program-points-worthless","url":"https://scamencyclopedia.org/questions/casino-loyalty-program-points-worthless","question":"My casino loyalty points or VIP status suddenly became worthless — is this legal?","shortAnswer":"Casinos generally can change loyalty program terms, but sudden, retroactive devaluation of points or VIP status you already earned — especially timed to avoid a payout — is a common complaint worth escalating to the regulator.","explanation":"Casino loyalty and VIP programs typically reserve the right in their terms and conditions to modify point values, tier requirements, or redemption options going forward. This kind of prospective change, while frustrating, is generally within a licensed casino's contractual rights and isn't automatically a scam.\n\nThe more serious problem arises when a casino retroactively devalues or cancels points and VIP benefits you had already earned under the previous terms, particularly if the change happens shortly after you accumulate a large redeemable balance or immediately before a scheduled reward payout. This pattern — building up player loyalty and then changing the rules just before a payout becomes due — is a recurring complaint in the online casino space and, while sometimes framed as an ordinary program update, can amount to bad-faith conduct depending on the casino's terms and your jurisdiction's consumer protection laws.\n\nAs with other casino disputes, the key distinction is between forward-looking program changes (usually permitted) and stripping away benefits you'd already earned under terms you accepted (a stronger basis for a complaint). Document the terms in effect when you earned your points or status, and don't assume a program change notice automatically makes a retroactive clawback legitimate.","redFlags":["Loyalty points or VIP status revoked retroactively rather than only affecting future earning","Change announced shortly before a large scheduled reward or cashback payout","No advance notice period given before the change took effect","Casino cannot point to a specific term allowing retroactive devaluation","Pattern of repeated program 'restructuring' whenever players approach a big reward tier","No compensation or grandfathering offered for points already earned"],"whatToDoNow":["Save a copy of the loyalty program terms as they existed when you earned your points or status","Ask the casino in writing to cite the specific term permitting retroactive devaluation","Distinguish between a forward-looking program change and a retroactive clawback of earned benefits","File a complaint with the licensing regulator if the casino can't justify a retroactive change","Track your points balance and program terms over time using dated screenshots","Consider moving future play to a casino with a more stable, transparent loyalty program history"],"faq":[{"question":"Can a casino change loyalty program rules at any time?","answer":"Generally yes for future earning and redemption, since most programs reserve that right in their terms, but retroactively stripping benefits already earned is a different, more disputable situation."},{"question":"What if the regulator won't help with a loyalty program dispute?","answer":"You can still pursue a formal written complaint, review consumer protection options in your jurisdiction, and share your documented experience on independent player forums to warn others."}],"lastReviewed":"2026-07-05"},{"slug":"sports-betting-influencer-paid-promotion-scam","url":"https://scamencyclopedia.org/questions/sports-betting-influencer-paid-promotion-scam","question":"A sports betting influencer promotes a site with amazing bonuses — should I trust it?","shortAnswer":"Treat betting influencer promotions with caution: many are paid sponsorships or affiliate deals that aren't always clearly disclosed, and the influencer's own results shown on screen are sometimes cherry-picked or entirely staged.","explanation":"Sports betting content creators frequently earn money through affiliate commissions or direct sponsorship deals with the betting sites and platforms they promote, meaning their income depends on viewers signing up and depositing, not on viewers actually winning. In jurisdictions with advertising standards regulation, clear disclosure of paid partnerships is often legally required, but enforcement varies, and many promotions blur the line between genuine personal recommendation and paid advertising.\n\nA further layer of concern involves influencers showing screen-recorded 'wins' that are selectively edited from many more losing sessions, or in some documented cases, using demo or play-money accounts dressed up to look like real-money wins to make a promoted platform appear more profitable than it is. Because viewers can't independently verify an influencer's actual full betting history, on-screen wins alone are not meaningful evidence that a bookmaker or casino is fair or that following the influencer's picks would be profitable.\n\nWhen evaluating any betting platform promoted by an influencer, apply the same independent checks you would to any other unfamiliar operator: verify licensing directly with the regulator, search independent forums for complaint patterns, and treat any bonus code or 'exclusive offer' as a standard affiliate marketing tool rather than a special endorsement of the platform's trustworthiness.","redFlags":["No clear, prominent disclosure that the content is sponsored or an affiliate partnership","On-screen 'wins' shown without any view of the influencer's overall losing sessions","Bonus code or referral link presented as an exclusive personal deal rather than standard affiliate marketing","Influencer discourages checking independent reviews or licensing before signing up","Platform being promoted has limited independent reputation outside the influencer's own content","Pressure to act quickly on a bonus code before it 'expires'"],"whatToDoNow":["Verify the promoted platform's licensing independently, regardless of the influencer's endorsement","Search independent forums for complaints about the specific site being promoted","Treat on-screen wins in promotional content as unverifiable, not evidence of real profitability","Check whether required sponsorship disclosures are actually present and clear","Avoid depositing based solely on urgency around a limited-time bonus code","Remember that influencer income from these deals typically doesn't depend on your results"],"faq":[{"question":"Is it illegal for influencers not to disclose paid gambling promotions?","answer":"In many jurisdictions, advertising regulations require clear disclosure of paid or affiliate gambling promotions, though enforcement and specific rules vary by country and platform."},{"question":"Are all betting influencer wins fake?","answer":"Not necessarily all, but on-screen wins alone are not verifiable evidence of a platform's overall fairness or profitability, since only a small, selectively shown sample is presented."}],"lastReviewed":"2026-07-05"},{"slug":"unauthorized-charges-gambling-site-signup","url":"https://scamencyclopedia.org/questions/unauthorized-charges-gambling-site-signup","question":"I signed up for a 'free' betting trial and now see unauthorized charges — what happened?","shortAnswer":"This is a common 'free trial' dark pattern: signing up requires card details, a small trial period ends silently, and recurring charges begin automatically unless you actively cancel, sometimes making cancellation deliberately difficult.","explanation":"Some gambling and prediction-tool sites advertise a 'free trial' of a premium tips service, prediction tool, or VIP membership that requires entering full card details at sign-up. After a short trial period — sometimes just a few days — the site begins charging a recurring subscription fee automatically, often without a clear reminder that the trial is ending or a simple way to cancel before being charged.\n\nIn more aggressive versions of this pattern, the cancellation process is deliberately obscured: there may be no visible cancel button in your account settings, cancellation may require contacting support through a slow or unresponsive channel, or the site may claim you must call a phone number during limited hours to cancel, discouraging follow-through. Some operators also continue charging even after a stated cancellation request has been submitted and acknowledged.\n\nWhile a poorly designed but ultimately legitimate cancellation flow is common industry practice, deliberately hidden cancellation options or continued billing after a confirmed cancellation cross into unfair or deceptive practice, and are grounds for both a chargeback and a consumer protection complaint.","redFlags":["Free trial sign-up requires full card details upfront with no separate trial-only option","No clear reminder before the trial period ends and billing begins","Cancellation option hidden, missing, or requiring a difficult support process","Continued charges after a cancellation request was submitted and acknowledged","Subscription fee significantly higher than what was advertised during sign-up","Refund requests met with delay, excuses, or silence"],"whatToDoNow":["Check your account settings thoroughly for a cancellation option before contacting support","Request cancellation in writing and keep a dated copy of the request and any confirmation","Dispute continued charges with your card issuer if billing continues after a confirmed cancellation","Report the site to consumer protection authorities for deceptive trial and billing practices","Use a virtual or single-use card number for any future 'free trial' sign-ups requiring card details","Review your bank statements regularly to catch recurring unwanted charges early"],"faq":[{"question":"Can I get a refund for charges after a trial I forgot to cancel?","answer":"It depends on your bank and the circumstances, but if the cancellation process was deliberately hidden or unclear, you have a stronger case for a chargeback and can also file a deceptive-practice complaint."},{"question":"How can I avoid this in future?","answer":"Use a virtual card number with a spending limit for free trials, set a calendar reminder before the trial ends, and confirm you can find the cancel option before entering any card details."}],"lastReviewed":"2026-07-05"},{"slug":"gambling-addiction-self-exclusion-scam-workaround","url":"https://scamencyclopedia.org/questions/gambling-addiction-self-exclusion-scam-workaround","question":"Someone offered to help me get around my gambling self-exclusion — is that a scam?","shortAnswer":"Yes — services or individuals offering to bypass self-exclusion programs are not only likely to be untrustworthy or fraudulent themselves, but using them defeats a protective tool you set up for your own safety.","explanation":"Self-exclusion programs let individuals voluntarily block themselves from gambling platforms for a set period or permanently, and are recognized as an important harm-reduction tool for people struggling with problem gambling. Because these programs exist specifically to protect vulnerable users, a market has unfortunately developed around services claiming to help self-excluded individuals bypass the block — through fake identity documents, offshore unlicensed casinos that don't check exclusion lists, or 'account manager' services that place bets on your behalf.\n\nBeyond the serious harm-reduction concerns, these bypass services are themselves high-risk from a straightforward scam perspective: they often require you to hand over sensitive identity documents or payment details to unverified third parties, operate with no accountability if your money or documents are misused, and connect you to unlicensed platforms carrying all the same withdrawal and fairness risks discussed elsewhere for unregulated operators.\n\nIf you're experiencing urges to bypass your own self-exclusion, that's a strong signal to reach out to a problem gambling support service rather than a workaround service, both because the underlying urge is worth addressing directly and because any company facilitating a bypass has strong incentive structures that don't align with your wellbeing or financial safety.","redFlags":["Service or individual offers to help bypass a self-exclusion or gambling ban","Requests for identity documents to register accounts in a way that evades verification checks","Connects you to unlicensed platforms with no self-exclusion list checking","Positions the workaround as a 'harmless' technicality rather than acknowledging the real risk","No accountability or recourse if documents or funds are misused","Approached you directly after you registered for self-exclusion, suggesting a data leak or targeting"],"whatToDoNow":["Do not share identity documents or payment details with any self-exclusion bypass service","Treat the urge to bypass self-exclusion as a signal to contact problem gambling support rather than a workaround","Report any service specifically marketing bypass methods to relevant gambling regulators","Tell a trusted friend, family member, or support service if you're being approached with bypass offers","Use additional blocking tools (bank-level gambling blocks, device-level site blockers) to reinforce self-exclusion","Remember that self-exclusion exists as a protective tool you chose for good reason"],"faq":[{"question":"Is it illegal to offer self-exclusion bypass services?","answer":"This varies by jurisdiction, but regulators in many places treat facilitating bypass of self-exclusion as a serious compliance and consumer protection violation for any licensed operator involved."},{"question":"What should I do if I feel tempted to bypass my own exclusion?","answer":"Reach out to a problem gambling support helpline or service in your country — the urge itself is common and support resources are specifically designed to help with exactly this situation."}],"lastReviewed":"2026-07-05"},{"slug":"fake-verification-document-request-casino","url":"https://scamencyclopedia.org/questions/fake-verification-document-request-casino","question":"A casino is asking for extra ID documents I've never had to give before — is this a phishing attempt?","shortAnswer":"Legitimate casinos do require identity verification, but requests should go through the casino's own secure account portal; unexpected email attachments or links asking you to upload documents outside your account may be phishing rather than a real verification request.","explanation":"Know-your-customer identity verification is a standard, legally required part of operating a licensed gambling platform, and being asked for a photo ID, proof of address, or a selfie holding your ID is normal, especially around your first withdrawal or when a payment method changes. This is not inherently suspicious when it happens through the casino's own official account dashboard.\n\nHowever, scammers sometimes impersonate a casino's verification team through email or text, sending a link to a fake look-alike portal designed to harvest your uploaded ID documents and card details for identity theft, rather than for genuine account verification. These messages often create urgency, claiming your account will be suspended or your withdrawal cancelled if you don't verify within a short window through the link provided.\n\nBefore uploading any document in response to an email or text, log into your account directly by typing the casino's known web address yourself (not by clicking the message's link) and check whether a verification request genuinely appears in your account dashboard. If it doesn't, the message was very likely a phishing attempt, and you should report it rather than engage with the link at all.","redFlags":["Verification request arrives by email or text with an urgent deadline and a clickable link","Link leads to a page that looks similar to but not exactly matching the casino's real domain","Request asks for documents or information beyond what the casino's own dashboard normally requires","Message threatens account suspension or withdrawal cancellation if you don't act immediately","Sender address doesn't match the casino's official domain","No matching verification request visible when you log in directly through the casino's known website"],"whatToDoNow":["Never click a verification link in an email or text; type the casino's known address into your browser directly","Check your account dashboard directly to see if a genuine verification request is pending","Compare the sender's email domain carefully against the casino's official domain","Report suspicious verification emails to the casino's real support team through official channels","Contact your bank if you already submitted card details through a suspicious link","Enable two-factor authentication on your casino account where available"],"faq":[{"question":"Is it normal for a casino to ask for ID at all?","answer":"Yes, identity verification is a standard, legally required practice at licensed casinos, particularly around your first withdrawal — the concern is specifically about verifying the request came through official channels, not that verification itself was requested."},{"question":"What should I do if I already uploaded documents to a fake portal?","answer":"Contact your bank about potential card compromise, monitor for identity theft, consider a credit freeze or fraud alert, and report the incident to your national fraud reporting body."}],"lastReviewed":"2026-07-05"},{"slug":"betting-bonus-wagering-requirement-trap","url":"https://scamencyclopedia.org/questions/betting-bonus-wagering-requirement-trap","question":"Why can't I withdraw my winnings even though the bonus terms seemed clear?","shortAnswer":"Wagering requirements are often written in complex, layered conditions — such as game weighting, maximum bet caps, and time limits — that can make a bonus far harder to clear than it first appears, even without any bad faith from the casino.","explanation":"A wagering requirement specifies how many times you must bet through a bonus (and sometimes your deposit too) before you can withdraw related winnings. What often catches players out isn't necessarily hidden or fraudulent, but the compounding effect of several separate conditions: different games may count toward the requirement at different weighted percentages (a slot might count 100% while table games count 10% or 0%), a maximum bet size while the bonus is active may be much lower than you'd expect, and the entire wagering requirement may need completing within a shorter time limit than users assume.\n\nBreaching any single condition, even unknowingly, commonly voids the bonus and any related winnings under the terms you agreed to when opting in. This is usually legitimate under the stated terms, even though it feels like a trap after the fact, which is why reading the full terms before opting into any bonus matters far more than most players expect.\n\nWhere this crosses from 'unfavorable but legitimate terms' into a real dispute is if the casino applies conditions that weren't actually stated in the terms you accepted, retroactively changes the terms after you've started wagering, or cannot show you the specific term you supposedly breached when you ask.","redFlags":["Wagering terms not clearly presented or easy to find before opting into the bonus","Game weighting percentages buried in a separate, hard-to-find terms page","Maximum bet limit while bonus is active set far lower than typical play size","Casino cites a term that wasn't part of the version you actually agreed to","Time limit to clear wagering shorter than reasonably practical for the bonus size","No clear breakdown of your wagering progress visible in your account"],"whatToDoNow":["Read the full bonus terms, including game weighting and maximum bet limits, before opting in","Track your own wagering progress rather than relying solely on the casino's dashboard","Screenshot the terms as they appear at the time you accept the bonus","Ask support to clarify any unclear wagering condition before you start playing","If a term is applied that wasn't in the version you agreed to, request the casino show the original terms and escalate to the regulator if they can't","Consider skipping bonuses altogether if the terms are difficult to fully understand"],"faq":[{"question":"Is it worth taking casino bonuses at all?","answer":"Some can be genuinely worthwhile if you fully understand and can realistically meet the wagering terms, but many players find the effective value much lower than the headline bonus amount suggests."},{"question":"What if the casino changes the terms after I've started wagering?","answer":"Terms that change retroactively after you've opted in and started meeting them are a stronger basis for a complaint than terms that were clearly stated from the outset."}],"lastReviewed":"2026-07-05"},{"slug":"chasing-losses-borrowed-money-warning","url":"https://scamencyclopedia.org/questions/chasing-losses-borrowed-money-warning","question":"I'm borrowing money to keep gambling and try to win back my losses — is this a sign of a bigger problem?","shortAnswer":"Yes — borrowing money specifically to gamble in an attempt to recover past losses ('chasing losses') is one of the clearest recognized warning signs of problem gambling, not a normal recovery strategy, and it's worth reaching out for support now.","explanation":"Chasing losses — increasing bets or borrowing money specifically to try to win back money already lost — is identified by problem gambling researchers and clinicians as one of the core diagnostic behaviors associated with gambling disorder, because it reflects a shift from gambling for entertainment toward gambling as an attempt to solve a financial problem it's actually making worse. The mathematics of gambling generally works against this strategy: increasing stakes to recover a loss increases the amount at risk without changing the underlying odds in your favor.\n\nThis pattern is also specifically targeted by predatory actors in the gambling ecosystem: some unlicensed platforms design VIP or loyalty programs to specifically identify and further incentivize players showing loss-chasing behavior, offering additional bonuses or credit precisely when a player is trying to recover losses, which can deepen financial harm rather than help.\n\nRecognizing loss-chasing in your own behavior, or a family member's, is a meaningful moment to reach out to a problem gambling support service, which can offer confidential guidance regardless of how much has already been lost. This is a health and financial safety issue first, separate from whether any individual platform involved has behaved fairly.","redFlags":["Borrowing money specifically to gamble and recover past losses","Increasing bet sizes specifically because of a recent losing streak, not a change in genuine strategy","Hiding gambling activity or borrowed money from family members","Receiving unusually generous bonus offers or credit specifically after a losing session","Feeling unable to stop despite recognizing the financial harm","Using multiple platforms or credit sources to fund continued play after losses"],"whatToDoNow":["Recognize loss-chasing as a well-documented warning sign, not a normal recovery approach","Reach out to a confidential problem gambling support helpline or service in your country","Use self-exclusion tools and bank-level gambling transaction blocks","Talk to a trusted family member or friend about what's happening financially","Avoid taking on new credit, loans, or advances specifically to keep gambling","Consider that platforms offering extra incentives right after a loss may be exploiting this pattern rather than helping"],"faq":[{"question":"Is chasing losses always a sign of addiction?","answer":"It's one of the clearest recognized warning signs used in problem gambling screening tools, and recurring loss-chasing behavior is worth discussing with a support service even before it meets a full clinical threshold."},{"question":"Where can I get confidential help?","answer":"Most countries have dedicated, confidential problem gambling helplines and support services that can help regardless of how much money has been lost or borrowed."}],"lastReviewed":"2026-07-05"},{"slug":"daily-fantasy-sports-rigged-lineups","url":"https://scamencyclopedia.org/questions/daily-fantasy-sports-rigged-lineups","question":"Is daily fantasy sports rigged against casual players?","shortAnswer":"Major daily fantasy sports platforms aren't typically 'rigged' in the sense of fixed outcomes, but the format is dominated by a small number of high-volume, data-driven players using automated lineup tools, making it structurally very difficult for casual players to profit consistently.","explanation":"Daily fantasy sports (DFS) contests pool entry fees from many players and pay out based on real athlete statistical performance, with the platform taking a percentage as its fee — similar in structure to poker rather than a bookmaker-style bet. The outcomes are based on real sporting events, so 'rigging' individual contest results in the way a fake casino game might be rigged isn't the typical concern with major, licensed platforms.\n\nThe more accurate concern, well documented by industry researchers, is that a small percentage of highly skilled, often technically sophisticated players using automated lineup-generation tools and entering huge numbers of lineups per contest win a disproportionate share of total prize money, while casual players entering one or two lineups compete against this group without realizing how uneven the skill and volume distribution actually is. This is a legitimate structural imbalance rather than fraud, but it means marketing that emphasizes casual, beginner-friendly big win potential can be quite misleading about realistic odds for a typical low-volume player.\n\nSeparately, always verify that any DFS platform is properly licensed in your jurisdiction, since daily fantasy sports' legal status has been treated differently from traditional sports betting in various places, and some smaller platforms operate with unclear or absent licensing.","redFlags":["Marketing emphasizes casual big-win potential without disclosing typical player win-rate concentration","No disclosure of what share of prize pools go to high-volume, automated-tool users","Platform's legal or licensing status in your jurisdiction is unclear","Withdrawal problems or unresponsive support reported in independent reviews","Contest structures that seem to favor high-entry, high-volume players almost exclusively","Aggressive promotional bonuses discouraging withdrawal of a starting deposit"],"whatToDoNow":["Understand that most prize money on major DFS platforms tends to concentrate among a small group of high-volume players","Verify the platform's licensing status in your specific jurisdiction","Treat single-entry or low-volume beginner marketing claims with realistic expectations","Consider contests specifically designed to limit high-volume entrants if you're a casual player","Withdraw winnings periodically rather than leaving a large balance on the platform","Research independent reviews of the specific platform's payout and support reliability"],"faq":[{"question":"Is daily fantasy sports gambling?","answer":"Its legal classification varies by jurisdiction — some treat it as a game of skill separate from traditional gambling, while others regulate it similarly to sports betting, so check your local rules."},{"question":"Can casual players ever win meaningfully?","answer":"Yes, but the realistic odds are less favorable than casual-focused marketing often suggests, given how much of total prize money tends to go to a small group of high-volume, tool-assisted players."}],"lastReviewed":"2026-07-05"},{"slug":"underage-gambling-site-weak-age-checks","url":"https://scamencyclopedia.org/questions/underage-gambling-site-weak-age-checks","question":"How do gambling sites let underage users sign up, and what should parents watch for?","shortAnswer":"Some unlicensed or poorly regulated gambling and skin-betting sites use weak or easily bypassed age verification, relying on a simple checkbox or self-declared birth date rather than real identity checks, making them accessible to minors despite legal age requirements.","explanation":"Licensed gambling operators in most jurisdictions are legally required to verify a user's age and identity before allowing real-money deposits, typically through document checks or third-party identity verification services. However, some unlicensed casinos, sports betting sites, and especially skin-gambling or crypto-based gambling platforms rely on nothing more than a self-declared birth date checkbox at sign-up, which a minor can simply falsify with no real barrier.\n\nParents and guardians should be aware that gambling-adjacent products marketed toward gaming audiences — loot boxes with resale value, skin betting platforms, and prediction-style apps tied to video games or esports — often have weaker or no meaningful age verification compared to traditional licensed casinos, precisely because many operate in the regulatory gaps discussed elsewhere around skin gambling and social casino apps. This creates real risk of underage exposure to gambling mechanics well before a young person reaches any legal gambling age.\n\nIf you're concerned about a minor's access to gambling-style content or platforms, look for parental control tools that block gambling-related domains at the device or router level, review app store age ratings critically since some gambling-adjacent apps understate their real-money elements, and have direct conversations about the specific risks of skin betting and loot-box style mechanics that mimic real gambling.","redFlags":["Age verification is a simple self-declared birth date with no document or identity check","Site or app markets heavily toward a young gaming audience while offering real-money features","App store age rating doesn't reflect real-money gambling elements present in the app","No parental control or blocking options offered by the platform itself","Skin betting or loot-box-adjacent products with resale value accessible with minimal checks","Marketing language downplays or hides the real-money nature of the platform"],"whatToDoNow":["Use device- or router-level parental controls to block known gambling and skin-betting domains","Review app store listings critically, checking for real-money features not reflected in the age rating","Talk directly with young people about how skin betting and loot boxes mimic real gambling mechanics","Report platforms with clearly inadequate age verification to relevant regulators or app stores","Monitor for unexpected in-app purchases or crypto wallet activity on a minor's devices","Support broader efforts pushing for stronger age verification requirements on gambling-adjacent products"],"faq":[{"question":"Are loot boxes considered gambling?","answer":"This is treated differently across jurisdictions and is an active area of regulatory debate; some countries have specifically regulated or restricted loot boxes due to their similarity to gambling mechanics."},{"question":"What's the most effective single step a parent can take?","answer":"Combining device-level blocking tools with open conversation about how these mechanics work tends to be more effective than relying on any single platform's age verification alone."}],"lastReviewed":"2026-07-05"},{"slug":"someone-called-claiming-i-owe-money-on-dead-relatives-debt","url":"https://scamencyclopedia.org/questions/someone-called-claiming-i-owe-money-on-dead-relatives-debt","question":"Someone called saying I owe money on my dead relative's debt. Is this real?","shortAnswer":"In most cases you are not personally responsible for a deceased relative's debts unless you co-signed the loan or held a joint account, so an urgent call demanding immediate payment is very likely a scam.","explanation":"Debt does not automatically pass to children or other relatives when someone dies. Instead, any genuine debts are normally settled from the deceased person's estate (their money and property) before anything is distributed to heirs. Scammers know that grieving families are emotionally vulnerable and less likely to question a confident-sounding caller, so they invent fake credit card balances, payday loans, or funeral bills and demand quick payment by phone.\n\nA classic version of this scam involves the caller already knowing basic details about the deceased, such as their name, date of death, or hometown, which they may have gathered from an obituary or public death notice. This makes the call feel legitimate even though the debt itself is fabricated. They often push for payment via gift cards, wire transfer, or a payment app, which are all signs of fraud rather than legitimate debt collection.\n\nIf you co-signed a loan, guaranteed a debt, or held a joint credit card with the deceased, you could have genuine liability, but that would come through formal written correspondence from a real, verifiable creditor, not a rushed phone call demanding instant payment.","redFlags":["Caller demands immediate payment before you can verify anything in writing","Payment requested via gift cards, wire transfer, or cryptocurrency","Caller pressures you not to consult a lawyer or other family members","Details about the deceased seem to come only from an obituary rather than genuine account records","Caller cannot provide a written account statement or company address on request"],"whatToDoNow":["Hang up and do not provide any personal or payment information","Ask for everything in writing and independently verify any company name by calling a number you find yourself, not one the caller gives you","Check with the estate's executor or probate attorney about any legitimate debts","Report the call to your consumer protection agency or equivalent regulator","Warn other family members, since scammers often call multiple relatives of the same deceased person"],"faq":[{"question":"Can debt collectors legally call me about a deceased relative's debt?","answer":"Legitimate collectors may contact an estate representative about genuine debts, but they must identify themselves clearly, provide written validation of the debt on request, and cannot demand payment via gift cards or wire transfer."},{"question":"What should I do if I'm not sure whether I'm the executor?","answer":"Check whether a will names an executor or ask a probate court/registry; only that person or a court-appointed administrator typically has authority to deal with the estate's debts."}],"lastReviewed":"2026-07-05"},{"slug":"fake-funeral-home-asking-for-upfront-payment-online","url":"https://scamencyclopedia.org/questions/fake-funeral-home-asking-for-upfront-payment-online","question":"A funeral home I found online is asking for full payment upfront before doing anything. Is that normal?","shortAnswer":"Some deposit is normal, but a business that demands full payment upfront, has no verifiable physical address, and pressures you to pay by wire or crypto before any contract is signed shows classic signs of a scam.","explanation":"Legitimate funeral homes typically provide a written itemized price list, sign a service contract, and require only a reasonable deposit before arranging services, with the balance often due at or after the funeral. Scammers set up fake funeral service websites, sometimes copying real funeral homes' names and logos, to intercept grieving families searching online under time pressure, especially when a death has occurred while traveling or in another country.\n\nThese fake operations often advertise unusually low prices to attract desperate families, then demand full payment by wire transfer or cryptocurrency before revealing that the 'service' does not exist, or before disappearing entirely once payment clears. Because funeral arrangements are often needed within days, families frequently skip the normal verification steps they would take for any other major purchase.\n\nA genuine funeral home will have a real, visitable premises, a license number you can verify with a state or national funeral board, and willingness to answer detailed questions about the process without rushing you into payment.","redFlags":["Demands full payment before signing any written contract","Only accepts wire transfer, cryptocurrency, or gift cards","No verifiable physical address or licensing information provided","Prices are significantly lower than every other local funeral home","Pressure to decide and pay within hours, citing urgency around the body or venue"],"whatToDoNow":["Verify the funeral home's license with your local funeral or cemetery regulatory board","Ask for a written itemized contract before sending any money","Call the funeral home's listed phone number independently, not just the one on the website","Pay by credit card where possible, since this offers dispute rights that wire transfers do not","If money has already been sent, contact your bank immediately and file a report with local police"],"faq":[{"question":"Is it normal to pay any deposit before the funeral?","answer":"Yes, a reasonable deposit is common, but it should be tied to a signed itemized contract and should not require the full balance before any service is confirmed."},{"question":"How can I verify a funeral home is real?","answer":"Check for a listing with your national or regional funeral directors association, look up the physical address on a map service, and read reviews from multiple independent sources rather than only testimonials on the company's own site."}],"lastReviewed":"2026-07-05"},{"slug":"lawyer-emailed-about-unexpected-inheritance-from-stranger","url":"https://scamencyclopedia.org/questions/lawyer-emailed-about-unexpected-inheritance-from-stranger","question":"A lawyer emailed saying I've inherited money from a distant relative I've never heard of. Real or scam?","shortAnswer":"Almost always a scam known as an inheritance or 'unclaimed estate' fraud, designed to extract upfront fees or personal banking details before any 'inheritance' is paid.","explanation":"This scam typically arrives as an unsolicited email or letter from someone claiming to be a lawyer, bank official, or estate administrator handling the affairs of a person who shares your surname and supposedly died without a will, leaving a large fortune. The email claims you have been identified as the only surviving relative and next in line to inherit, but processing the inheritance requires you to pay taxes, legal fees, or 'unfreezing' charges upfront.\n\nReal inheritances almost never work this way. If you were genuinely due an inheritance, a legitimate solicitor or probate professional would locate you through proper legal channels, would not ask for money upfront to release funds, and any fees would come out of the estate itself rather than from your own pocket in advance. Genuine unclaimed estate cases do exist, but they are handled through official government or court processes you can independently verify, not through cold emails.\n\nScammers may follow up with fake legal documents, doctored bank statements, or a fake government portal to make the scheme look convincing, and once you pay one 'fee' they typically invent another reason more money is needed, continuing the cycle indefinitely.","redFlags":["Contact is unsolicited, often from a free email address rather than a verified law firm domain","You are asked to pay any fee before receiving a cent of the inheritance","Pressure to keep the matter confidential or act quickly before someone else claims it","Requests for your bank account details, ID, or passport scans early in communication","Poor grammar, inconsistent names, or unverifiable law firm details"],"whatToDoNow":["Do not reply, click links, or send any personal information","Search the supposed law firm's name plus the word 'scam' and check it against an official bar association or law society register","If genuinely curious, contact a local, independently found solicitor to ask whether such unclaimed estate processes exist in that jurisdiction","Report the email to your national fraud reporting center or consumer protection agency","Delete or block the sender and warn family members who may receive similar emails"],"faq":[{"question":"Do genuine unclaimed inheritances exist?","answer":"Yes, but they are typically handled through official government unclaimed estates lists or court-appointed administrators, which you can search independently rather than being contacted out of the blue by email."},{"question":"What if the email includes what looks like an official government document?","answer":"Scammers frequently forge letterhead and seals; treat any attached 'legal document' as unverified until confirmed independently through the issuing body's own official contact channels."}],"lastReviewed":"2026-07-05"},{"slug":"obituary-scraper-scam-explained","url":"https://scamencyclopedia.org/questions/obituary-scraper-scam-explained","question":"How do scammers use obituaries to target grieving families?","shortAnswer":"Scammers monitor published obituaries and death notices to gather names, dates, and family relationships they then use to impersonate debt collectors, charities, or the deceased person's bank while the family is distracted by grief.","explanation":"Obituaries are public by design, meant to inform a community about a death and funeral arrangements, but they also hand scammers a ready-made profile: the deceased's full name, age, date of death, surviving relatives' names, and sometimes even the funeral home and burial location. Automated tools or manual searches let scammers harvest dozens of new obituaries a day from newspaper and funeral home websites.\n\nArmed with this information, scammers call listed family members claiming to represent the deceased's bank, a supposed outstanding loan, a charity the deceased 'pledged' to, or even a delivery company holding a package addressed to the departed. Because the caller already knows real details, family members often assume they must be legitimate, lowering their guard exactly when they are emotionally least equipped to scrutinize a stranger's claims.\n\nThis tactic, sometimes called 'obituary mining' or 'death mining,' also feeds identity theft: with a full name, date of birth, and date of death, criminals can attempt to open credit lines or file fraudulent tax refunds in the deceased's name before their death is reported to credit bureaus and government agencies.","redFlags":["Caller references specific details that were published in an obituary","Contact comes within days of the funeral or death notice being published","Claims relate to accounts, debts, or deliveries the family cannot verify exist","Caller asks family to 'confirm' the deceased's date of birth, address, or account numbers","Urgency about a 'time-limited' charity pledge or unpaid bill tied to the deceased"],"whatToDoNow":["Consider limiting obituary details to first name, last name, and date of death, omitting full birthdate, address, or detailed family list","Notify the deceased's banks, credit bureaus, and government agencies of the death promptly to close accounts and flag against fraud","Treat any unsolicited call referencing obituary details as unverified until confirmed through official channels","Place a fraud alert or credit freeze on the deceased's credit file where your country allows it","Report suspicious calls to family members and to consumer protection authorities"],"faq":[{"question":"Should I avoid publishing an obituary altogether?","answer":"Not necessarily; you can still honor your loved one publicly while omitting sensitive details like full birthdate, home address, and exact family relationships that scammers could exploit."},{"question":"How quickly should I notify agencies of a death to prevent this?","answer":"As soon as practical after the death, notify banks, credit bureaus, and relevant government departments, since identity thieves often act within days of a death being publicly reported."}],"lastReviewed":"2026-07-05"},{"slug":"text-message-claiming-package-for-deceased-needs-fee","url":"https://scamencyclopedia.org/questions/text-message-claiming-package-for-deceased-needs-fee","question":"I got a text saying a package for my deceased relative needs a customs fee to be released. Is this a scam?","shortAnswer":"Yes, this is a common variation of the package delivery scam, adapted to target grieving families by referencing a deceased relative to seem more personal and urgent.","explanation":"This scam follows the same pattern as generic 'unpaid customs fee' delivery scams, but scammers add the deceased person's name, likely pulled from an obituary, to make the message feel targeted and credible. The text usually contains a link to a fake courier tracking page that asks for a small card payment to 'release' a package, which is really designed to harvest your card details for later fraudulent charges.\n\nReal couriers do not typically request customs or delivery fees via text message links, and certainly would not know to address a message around a recently deceased customer unless the family had actually ordered something, which is worth checking with living family members first. The fee requested is usually small, deliberately so, to avoid triggering bank fraud alerts and to make victims think it is not worth disputing.\n\nOnce card details are entered on the fake site, scammers may attempt further charges, sell the details to other fraud rings, or use the same page to install malware if you're on certain device or browser combinations.","redFlags":["Unsolicited text with a link asking for a payment to release a package","Message references the deceased relative's name specifically","Sender number is a random mobile number rather than an official short code","URL in the link does not match the courier's real domain","No one in the family recalls ordering anything that would need customs clearance"],"whatToDoNow":["Do not click the link or enter any card details","Check directly with the courier's official app or website using the tracking number, if any, typed manually rather than through the link","Delete the text and block the sending number","If you already entered card details, contact your bank immediately to cancel the card and monitor for fraudulent charges","Report the text to your telecom provider's spam reporting service and national fraud reporting center"],"faq":[{"question":"Can these texts actually know my relative has died?","answer":"Yes, scammers commonly source names and dates from public obituaries and death notices, then send mass texts hoping some recipients will believe the message is genuinely tied to a real parcel."},{"question":"What if I did order something for the deceased before they passed?","answer":"Contact the retailer or courier directly using their official website or app rather than any link in the text, since genuine delivery issues are handled through verified channels, not unsolicited payment links."}],"lastReviewed":"2026-07-05"},{"slug":"impersonator-claims-to-be-executor-asking-for-fees","url":"https://scamencyclopedia.org/questions/impersonator-claims-to-be-executor-asking-for-fees","question":"Someone contacted me claiming to be the executor of a relative's will and is asking for fees before releasing my share. Is this legitimate?","shortAnswer":"Genuine executors do not typically ask beneficiaries to pay fees upfront to receive an inheritance; any legitimate fees come out of the estate itself, so this pattern strongly suggests a scam.","explanation":"In real estate administration, the executor or administrator manages the deceased's assets, pays any outstanding debts and taxes from the estate, and then distributes what remains to beneficiaries according to the will or inheritance law. Executor fees, probate costs, and taxes are all settled from the estate's own funds before distribution, not charged separately to beneficiaries as a condition of receiving their share.\n\nScammers impersonating executors, sometimes using a real deceased person's name found through an obituary or even impersonating a real, uninvolved solicitor, contact supposed beneficiaries claiming there is a 'processing fee,' 'inheritance tax,' or 'unlocking fee' required before funds can be released. Because the story involves a real recently deceased person, victims may not immediately question it, especially if they were not close to the family and don't know the real legal process.\n\nIf you genuinely believe you may be a beneficiary of an estate, the appropriate step is to contact the actual named executor or the probate court/registry directly using independently verified contact details, not through whatever number or email the contacting party provides.","redFlags":["Request for payment before any inheritance is distributed","Contact person cannot be verified through the actual probate court or registry","Pressure to wire money quickly to avoid 'losing' the inheritance","Inconsistent details about the deceased or the estate's value","Refusal to provide a copy of the will or letters of administration"],"whatToDoNow":["Contact the relevant probate court or registry directly to verify who the actual appointed executor is","Ask for a copy of the grant of probate or letters of administration and verify it independently","Never send money or personal financial details to release an inheritance","Consult an independent solicitor if you believe you may genuinely be a beneficiary","Report the contact to consumer protection or fraud authorities if it appears fraudulent"],"faq":[{"question":"Do executors ever legitimately ask beneficiaries for money?","answer":"Rarely, and only in specific circumstances like reimbursing a shared expense; standard executor and probate costs are paid from the estate itself, not charged to beneficiaries upfront."},{"question":"How can I check who the real executor of an estate is?","answer":"Most jurisdictions maintain public probate records or a registry where you can search for a grant of probate tied to the deceased's name to confirm the appointed executor."}],"lastReviewed":"2026-07-05"},{"slug":"grief-vulture-scammer-targets-recent-widow","url":"https://scamencyclopedia.org/questions/grief-vulture-scammer-targets-recent-widow","question":"My recently widowed mother is getting a lot of unsolicited calls and letters about 'financial help.' What's going on?","shortAnswer":"This is a known pattern sometimes called 'grief vulturing,' where scammers specifically target the recently bereaved, especially widows and widowers, because public death records and obituaries reveal exactly who has just lost a spouse and may be managing finances alone for the first time.","explanation":"Death notices and public records create a visible signal that a household now has a single surviving spouse, often someone who may be older, emotionally overwhelmed, and newly responsible for finances that a partner previously handled. Predatory sales operations and outright scammers alike buy or scrape these lists to specifically target recent widows and widowers with unsolicited pitches, ranging from dubious investment schemes to fake charity requests to insurance products that are misrepresented or overpriced.\n\nThe tactics vary: some callers pose as financial advisors offering to 'help manage' the deceased's life insurance payout, others claim to represent a charity the deceased supported, and some simply run classic romance or lottery scams timed to coincide with a period of loneliness and vulnerability. What they share is deliberate targeting based on bereavement status and a sales or fraud pitch calibrated to exploit grief and unfamiliarity with financial decisions.\n\nFamily members can help by being alert to a sudden increase in unsolicited contact after a death is publicly known, and by gently but firmly helping the surviving spouse screen calls and verify any offer independently before committing money or personal information.","redFlags":["Sudden increase in unsolicited calls, mail, or emails shortly after a spouse's death becomes public","Offers to 'help manage' a life insurance payout or estate funds from an unverified source","Pressure to make quick financial decisions without consulting family or an independent advisor","Charities the family does not recognize as ones the deceased actually supported","Callers who reference the deceased by name, suggesting they were sourced from an obituary"],"whatToDoNow":["Register the surviving spouse's phone number with a do-not-call list where available","Encourage screening unknown calls and never committing to financial decisions on the spot","Verify any charity by checking its registration with the relevant charity regulator before donating","Involve a trusted family member or independent financial advisor before any major post-bereavement financial decision","Report persistent predatory sales calls or suspected scams to consumer protection authorities"],"faq":[{"question":"Is 'grief vulturing' a specific legal category of fraud?","answer":"It's more of a descriptive term for a targeting pattern than a distinct legal offense, but the underlying conduct, like fraudulent misrepresentation or unregistered investment solicitation, is often prosecutable under existing fraud and consumer protection laws."},{"question":"How long does this targeting typically continue?","answer":"It can persist for months after a death is publicly recorded, since scam lists compiled from obituaries and public records can circulate and be resold long after the initial notice was published."}],"lastReviewed":"2026-07-05"},{"slug":"caller-claims-to-be-from-life-insurance-needs-fee-to-release-payout","url":"https://scamencyclopedia.org/questions/caller-claims-to-be-from-life-insurance-needs-fee-to-release-payout","question":"The life insurance company called saying I need to pay a fee before they release my late spouse's payout. Is that normal?","shortAnswer":"No, legitimate life insurance payouts do not require the beneficiary to pay a fee upfront; any taxes or administrative costs, where applicable, are typically deducted from the payout itself, not charged separately in advance.","explanation":"When a life insurance claim is approved, the insurer pays the death benefit to the named beneficiary, sometimes after deducting outstanding policy loans or verifying documentation, but a beneficiary is never legitimately asked to send money first in order to 'unlock,' 'process,' or 'insure' the release of funds. Scammers impersonating insurers or claims processors invent these fees, sometimes labeling them as 'transfer tax,' 'anti-money laundering clearance,' or 'processing bond,' to extract payment from someone expecting a real payout.\n\nA common giveaway is that the fee is always requested via an unusual method: wire transfer, cryptocurrency, or gift cards, none of which a real insurer would ever request. Genuine insurers communicate through the policy's on-file contact channels and their claims department has an official phone number and claim reference system you can verify independently, separate from whoever called you.\n\nIf you're unsure whether a call is genuine, the safest step is to hang up and call the insurer directly using the number printed on your policy documents or their official website, not any number given to you during the suspicious call.","redFlags":["Request to pay a fee before the payout is released","Payment demanded via wire transfer, cryptocurrency, or gift cards","Caller cannot provide a claim number that matches your own paperwork","Pressure to act immediately or risk losing the payout","Contact details differ from the insurer's official customer service number"],"whatToDoNow":["Hang up and call the insurer using the number on your policy documents or their verified official website","Do not send money via wire transfer, crypto, or gift cards under any circumstances tied to a claim","Ask your actual claims representative to confirm in writing any fees, if genuinely applicable, and question anything unusual","Report the suspicious call to the insurer's fraud department and to your national insurance regulator","Warn other beneficiaries or family members who might also receive similar calls"],"faq":[{"question":"Are there ever legitimate fees on a life insurance payout?","answer":"Some jurisdictions apply inheritance or estate taxes, but these are typically handled through the deceased's estate or deducted from the payout directly by the insurer, not collected as a separate upfront payment demanded by phone."},{"question":"What if the caller has real details about the policy?","answer":"Scammers sometimes obtain partial policy details through data breaches or social engineering; having some correct information does not confirm legitimacy, so always verify independently through the insurer's official channels."}],"lastReviewed":"2026-07-05"},{"slug":"fake-cemetery-plot-or-headstone-company-scam","url":"https://scamencyclopedia.org/questions/fake-cemetery-plot-or-headstone-company-scam","question":"A company is pressuring me to buy an expensive headstone or cemetery plot right now. Should I be worried?","shortAnswer":"High-pressure sales tactics around headstones, cemetery plots, or memorial products are a red flag, even if the company is technically real, since legitimate memorial providers understand grieving families need time and should never rush a major purchase decision.","explanation":"The 'death care' industry includes many legitimate businesses, but it also attracts aggressive and sometimes outright fraudulent operators who specifically target grieving families because they know decisions are often made quickly, emotionally, and without the comparison shopping typical of other large purchases. Common tactics include claiming a 'limited time discount' that disappears if you don't sign today, quoting vague prices that balloon once a contract is signed, or accepting payment for a headstone or plot that is never actually delivered or installed.\n\nSome scam operations set up temporary offices or booths near cemeteries and funeral homes, take payment for memorial products, and then disappear before installation, leaving families out thousands with no headstone to show for it. Others oversell cemetery plots that don't actually exist or double-sell the same plot to multiple families.\n\nA legitimate memorial or monument company will provide a written contract with a specific product description, installation timeline, and warranty, will accept a reasonable time for you to consider the purchase, and can be verified through cemetery management or a consumer protection body's business registry.","redFlags":["High-pressure 'today only' pricing on headstones or plots","No written contract detailing exact product, installation date, and warranty","Requests for full payment in cash or wire transfer with no receipt","Company has no verifiable physical address or business registration","Cemetery management has no record of the company being authorized to install monuments there"],"whatToDoNow":["Ask the cemetery directly which monument companies are authorized to work on-site","Get any quote in writing with a specific product description and installation date before paying anything","Compare prices with at least one other provider before committing","Pay by credit card or check where possible to retain dispute options","Report high-pressure tactics or non-delivery to consumer protection authorities and the cemetery's management"],"faq":[{"question":"Is it normal for cemeteries to only allow certain monument companies?","answer":"Yes, many cemeteries have rules about who can install monuments on their grounds, so checking directly with cemetery management is a reliable way to confirm a company's legitimacy."},{"question":"What if I already paid and the headstone never arrived?","answer":"Contact your payment provider to dispute the charge if possible, file a complaint with consumer protection authorities, and report the company to the cemetery management to warn other families."}],"lastReviewed":"2026-07-05"},{"slug":"fake-grief-counseling-service-asking-for-payment-details","url":"https://scamencyclopedia.org/questions/fake-grief-counseling-service-asking-for-payment-details","question":"A 'free grief counseling' service contacted me but now wants my card details to 'confirm my identity.' Is this a scam?","shortAnswer":"Yes, legitimate free or low-cost grief counseling services do not need your card details to confirm your identity, and this request is a strong sign of a data-harvesting or billing scam.","explanation":"Genuine grief support services, whether provided by a hospice, community organization, religious institution, or nonprofit, generally verify identity through simple means like your name and contact information, not payment card details. When a supposedly 'free' service suddenly asks for card information under the guise of 'identity confirmation,' it is often a setup either to charge hidden fees later or to harvest card data outright for fraud.\n\nSome scam operations specifically advertise free grief support to grieving people searching online, collect card details under a false pretext, and either immediately attempt small unauthorized charges or store the information for later fraudulent use. Others may be legitimate-seeming counseling directories that are actually lead-generation operations selling your contact and financial details to unrelated third parties, including future scam targeting lists.\n\nReal counseling and support services, including many nonprofit and hospice-affiliated grief programs, typically operate without requiring payment information at all for basic services, and if there is a genuine paid component, it will be clearly explained in a written agreement rather than through a rushed 'verification' request.","redFlags":["Free service suddenly asks for card details to 'verify identity'","No clear written explanation of what, if anything, will actually be charged","Found through an unsolicited ad or message rather than a referral from a trusted source","Pressure to provide information quickly during an emotional conversation","No verifiable licensing or affiliation with a recognized health or counseling body"],"whatToDoNow":["Refuse to provide card details for a service advertised as free","Ask for the organization's registration or licensing details and verify independently","Seek grief support through recommended channels like your doctor, a local hospice, or a recognized national bereavement charity","Report any suspicious 'free service' requesting payment information to consumer protection authorities","Monitor your card statements if you already provided details, and contact your bank if anything looks wrong"],"faq":[{"question":"How can I find legitimate free grief counseling?","answer":"Ask your doctor, local hospice, or a recognized national bereavement charity for referrals, since these sources typically vet counseling providers before recommending them."},{"question":"Is it ever normal for a counseling service to ask for payment details?","answer":"Only if the service is explicitly paid and this is disclosed clearly in advance with a written fee schedule, not disguised as an 'identity verification' step for something advertised as free."}],"lastReviewed":"2026-07-05"},{"slug":"social-media-account-of-deceased-hacked-after-death","url":"https://scamencyclopedia.org/questions/social-media-account-of-deceased-hacked-after-death","question":"My deceased father's social media account started posting strange links. What's happening?","shortAnswer":"This usually means the account has been hacked, either through a reused password exposed in a data breach or by someone exploiting the fact the account is now unmonitored, and it is being used to spread scam or malware links to his contacts.","explanation":"Accounts belonging to deceased people are attractive targets for hackers precisely because no one is actively monitoring or securing them anymore. If the account had a weak or reused password, or if login credentials were exposed in a previous data breach, criminals can access the account and use the deceased's established network of friends and followers to spread phishing links, fake investment schemes, or malware, since people are more likely to click something posted by someone they know and trust.\n\nFamily members often don't realize the account has been compromised until friends of the deceased start messaging to ask about a strange link or unusual post, which by then may have already reached dozens of contacts. Because the account 'belongs' to someone who has passed away, there's also a risk that friends assume any strange activity is simply a glitch or a mistake rather than recognizing it as a hack.\n\nMost major platforms offer a memorialization option that freezes the account in a tribute state and prevents new logins, or a deactivation/removal process for family members with proper documentation, both of which are far safer than leaving an account active and unattended indefinitely.","redFlags":["Posts, messages, or links appear on the account that don't match anything the deceased would have shared","Friends report receiving unusual direct messages from the account","Login notifications or password reset emails arrive despite no family member accessing the account","Links posted lead to suspicious sites asking for personal information or payment","Profile details, like profile picture or bio, have been changed unexpectedly"],"whatToDoNow":["Report the account as belonging to a deceased person through the platform's official memorialization or deceased-user process","Warn friends and contacts not to click any links posted from the account","If you have login access, change the password immediately and enable two-factor authentication, or request the platform disable login access","Document the compromised posts with screenshots before reporting, in case needed for a fraud report","Consider requesting account deactivation if ongoing monitoring isn't feasible for the family"],"faq":[{"question":"Can family members get full access to a deceased person's social media account?","answer":"Policies vary by platform; some allow a legacy contact or memorialization request, others require formal documentation like a death certificate before granting any access or making changes."},{"question":"Should we just delete the account to prevent this?","answer":"Deletion or memorialization are both reasonable options; memorialization preserves the account as a tribute while preventing new logins, which many families prefer over full deletion."}],"lastReviewed":"2026-07-05"},{"slug":"fake-charity-donation-request-in-lieu-of-flowers","url":"https://scamencyclopedia.org/questions/fake-charity-donation-request-in-lieu-of-flowers","question":"How do I know if a charity listed 'in lieu of flowers' in an obituary is legitimate?","shortAnswer":"Most charities named in genuine obituaries are legitimate, but scammers sometimes set up copycat donation pages using a real charity's name and logo, so always donate through the charity's own official website rather than a link shared in a social media post or email about the obituary.","explanation":"Families often ask mourners to donate to a cause the deceased cared about instead of sending flowers, and this is a genuine and common practice. However, scammers monitor obituaries and sometimes create fake donation pages using a similar or identical name to the real charity mentioned, then promote these fake pages through social media shares, forwarded emails, or comments on the funeral home's online guest book, hoping to intercept well-meaning donors.\n\nThe fake pages may look convincing, using real photos of the deceased pulled from the obituary or social media, and may even reference genuine details about the funeral to seem authentic. Donors who click through and give often have no idea their money never reached the actual charity or family.\n\nThe safest approach is to navigate directly to the named charity's official website by typing the address yourself or searching for it independently, verify the charity's registration status with a national charity regulator, and avoid donating through any third-party link shared in a social post, comment, or forwarded message, no matter how sincere it appears.","redFlags":["Donation link appears in a shared social media post or comment rather than the charity's own website","Charity name is slightly misspelled or uses a different web domain than the official one","Page uses urgent language pressuring immediate donation","No option to verify the charity's registration number or official status","Donation platform is unfamiliar or has no verifiable track record"],"whatToDoNow":["Navigate directly to the charity's official website rather than clicking shared links","Verify the charity's registration with your national or regional charity regulator","Ask the family directly, if possible, for the correct official donation link","Report suspicious donation pages to the platform hosting them and to the real charity","Consider donating by check or through a verified official payment page rather than an unfamiliar third-party platform"],"faq":[{"question":"How can I verify a charity's registration?","answer":"Most countries maintain a public charity regulator database where you can search by name to confirm registration status and see basic financial information."},{"question":"What if the fake page is using the deceased's real photo?","answer":"This doesn't confirm legitimacy; scammers can copy publicly available photos from an obituary or social media profile to make a fake donation page appear genuine."}],"lastReviewed":"2026-07-05"},{"slug":"asked-to-pay-repatriation-fee-for-body-abroad","url":"https://scamencyclopedia.org/questions/asked-to-pay-repatriation-fee-for-body-abroad","question":"I'm being told I have to pay a 'repatriation fee' to bring my relative's body home from abroad. Is this legitimate?","shortAnswer":"Genuine repatriation of remains does involve real costs and documentation, but scammers exploit this process by inventing extra fake fees, so always verify charges through your embassy or consulate and a recognized international funeral repatriation service before paying anyone directly.","explanation":"When someone dies abroad, bringing their remains home is a real, often complex process involving local authorities, an international funeral director, and sometimes the deceased's home country embassy or consulate, and it does carry legitimate costs like documentation, embalming, transport, and customs clearance. Scammers exploit the complexity and unfamiliarity of this process by posing as funeral directors, government officials, or airline representatives and inventing additional fake fees, such as a 'body release bond,' 'quarantine deposit,' or 'diplomatic clearance fee,' that don't actually exist.\n\nFamilies dealing with a death abroad are often overwhelmed, unfamiliar with foreign bureaucracy, and eager to bring their loved one home quickly, making them susceptible to a confident-sounding caller who claims payment is the only obstacle. These scams often specifically request payment via wire transfer to an individual's personal account rather than a registered funeral business account, which is a major warning sign.\n\nA legitimate international repatriation process should be verifiable through your home country's embassy or consulate in the country where the death occurred, and any funeral director or transport company involved should be a real, licensed business you can independently confirm, not just a name given over the phone.","redFlags":["Fees requested don't match anything your embassy or consulate describes as standard","Payment requested to a personal bank account rather than a registered business account","Pressure to pay quickly to avoid delays in bringing the body home","Caller cannot provide verifiable documentation or a licensed funeral business name","Multiple unexpected 'additional fees' arise after each payment is made"],"whatToDoNow":["Contact your embassy or consulate in the country where the death occurred for guidance on the real repatriation process and costs","Verify any funeral director or transport company's license with local authorities before paying","Insist on payment to a verified registered business account, never a personal account","Get an itemized, written breakdown of all costs before sending money","Report suspected fraud to your embassy, local police, and your home country's fraud reporting service"],"faq":[{"question":"Can my embassy help with repatriation costs directly?","answer":"Embassies typically don't pay repatriation costs but can provide guidance on the legitimate process, verified local funeral directors, and required documentation."},{"question":"Is international travel or repatriation insurance worth having?","answer":"Yes, travel insurance with repatriation coverage can significantly reduce both the cost and the risk of being targeted by scammers during an already difficult situation."}],"lastReviewed":"2026-07-05"},{"slug":"pretend-relative-shows-up-claiming-share-of-estate","url":"https://scamencyclopedia.org/questions/pretend-relative-shows-up-claiming-share-of-estate","question":"Someone claiming to be a long-lost relative has shown up asking for a share of the estate. How do I know if they're genuine?","shortAnswer":"Legitimate claims to an estate require documented proof of relationship and legal standing verified through DNA testing, birth records, or court process, so anyone demanding money or access based only on their word should be treated with serious skepticism.","explanation":"Estate fraud involving a fake claimed relative typically appears after a death becomes publicly known, especially if the obituary or public records suggest a sizable estate, complex family history, or an unmarried or childless deceased person. A person may appear claiming to be an illegitimate child, estranged sibling, or distant cousin, asserting entitlement to a share of the inheritance, sometimes with fabricated documents or a story designed to create doubt and pressure the family into a quick settlement to avoid legal costs.\n\nGenuine claims of this nature do occur in real life, but they go through proper legal channels: the claimant would need to provide documentary evidence such as birth certificates, and often DNA testing, then have their claim assessed by the executor, other beneficiaries, or ultimately a probate court if disputed. A scammer, by contrast, usually pushes for a private cash settlement specifically to avoid this scrutiny, since fabricated claims are unlikely to survive formal legal verification.\n\nIf you're an executor or beneficiary approached this way, the correct response is to direct any claim through the estate's solicitor and require proper documentation rather than negotiating privately or paying anything to make the person go away.","redFlags":["Claimant wants a private cash settlement rather than going through the formal estate process","No willingness to provide documentary proof or undergo DNA testing","Sudden appearance shortly after an obituary or public estate notice","Threats of legal action or public embarrassment if not paid quickly","Story about the relationship changes or has inconsistencies when questioned"],"whatToDoNow":["Refer any claim to the estate's solicitor or the appointed executor rather than negotiating personally","Request documentary evidence, such as birth certificates or DNA testing, before considering any claim","Do not make private payments to a claimant outside the formal probate process","Consult a probate solicitor about how disputed claims are handled in your jurisdiction","Report attempted fraud or intimidation to local police if threats are involved"],"faq":[{"question":"Can DNA testing settle a disputed inheritance claim?","answer":"It can be strong evidence in establishing biological relationship, but legal entitlement to an estate also depends on the applicable inheritance laws and the terms of any will, so DNA results are usually just one part of a formal legal process."},{"question":"What should I do if the claimant threatens legal action?","answer":"Take the threat seriously enough to consult a probate solicitor, but do not pay simply to make the threat go away; a genuine legal claim will be pursued through proper court channels regardless."}],"lastReviewed":"2026-07-05"},{"slug":"notary-or-probate-official-asks-for-payment-by-crypto","url":"https://scamencyclopedia.org/questions/notary-or-probate-official-asks-for-payment-by-crypto","question":"A probate official is asking me to pay estate-related fees using cryptocurrency. Is this ever legitimate?","shortAnswer":"No legitimate court, probate registry, or government tax authority accepts cryptocurrency for official estate fees, taxes, or court costs, so this request is a clear sign of fraud.","explanation":"Probate courts and government tax authorities operate through standard, traceable payment methods such as checks, bank transfers to official government accounts, or card payments through official portals. They do not request payment via cryptocurrency, gift cards, or informal wire transfers to personal accounts, because these methods are specifically favored by scammers for being difficult to trace or reverse.\n\nScammers impersonating probate officials, court clerks, or tax officials rely on the genuine complexity and unfamiliarity most people have with estate administration to make invented fees, like an 'estate release tax' or 'probate registration bond,' sound plausible. Because cryptocurrency payments cannot be reversed once sent, this payment method is specifically chosen to prevent victims from recovering their money once they realize the mistake.\n\nIf you receive this kind of request, the appropriate response is to contact the actual probate court or tax authority directly using their official published contact details, not any number or portal provided by the person contacting you, to verify whether any genuine fee exists and how it should properly be paid.","redFlags":["Request for payment specifically in cryptocurrency for a court or government fee","Contact came via unsolicited phone call, email, or text rather than official mail","Urgency and threats of legal consequence if payment isn't made immediately","Inability to provide a verifiable case or reference number matching your actual estate file","Refusal to let you call back through the court or agency's official public phone number"],"whatToDoNow":["Do not send any cryptocurrency payment for a claimed government or court fee","Contact the probate court or tax authority directly using their official published phone number or website","Ask your estate's actual solicitor whether any fee described is genuine","Report the contact to the impersonated court or agency's fraud reporting channel","Warn other family members or co-beneficiaries who may also be contacted"],"faq":[{"question":"Are there any legitimate government fees related to probate?","answer":"Yes, court filing fees and estate or inheritance taxes are real in many jurisdictions, but they are paid through official, traceable methods like checks or bank transfers to verified government accounts, never cryptocurrency."},{"question":"What if the caller has real case details about the estate?","answer":"Some information about estates can become accessible through public probate filings or breaches, so having accurate details doesn't confirm legitimacy; always verify independently through official channels."}],"lastReviewed":"2026-07-05"},{"slug":"will-reading-scam-asks-to-attend-online-for-fee","url":"https://scamencyclopedia.org/questions/will-reading-scam-asks-to-attend-online-for-fee","question":"I was invited to an online 'will reading' but have to pay a fee to attend. Is that a real thing?","shortAnswer":"Legitimate will readings, where they happen at all, are typically arranged and communicated by the actual executor or family solicitor at no cost to attendees, so a paid invitation from an unfamiliar source is very likely a scam.","explanation":"Contrary to popular depiction, formal 'will readings' as a single dramatic event are actually uncommon in most real legal systems; more often, beneficiaries are simply notified individually by the executor or solicitor once the will has been probated. Scammers exploit the public's familiarity with the dramatic 'will reading' trope from film and television to invent a fake online event, claiming you've been named as a beneficiary and must pay a small 'attendance fee' or 'verification fee' to join.\n\nThese invitations often arrive by email or social media message from an unfamiliar sender, sometimes referencing a deceased person's name found through an obituary or social media death announcement, and typically request payment through a payment app, gift card, or an unfamiliar online payment portal before providing a meeting link. Once payment is made, either no real meeting occurs, or attendees are funneled into a broader scam pitch, such as a fake investment opportunity or further fee requests.\n\nIf you genuinely believe you might be a named beneficiary in someone's will, the appropriate step is to wait for or seek out contact from the actual named executor or the family's solicitor, verified independently, rather than responding to an unsolicited paid invitation.","redFlags":["Payment required just to attend or 'verify eligibility' for a will reading","Invitation comes from an unfamiliar sender rather than a known executor or solicitor","Meeting link only provided after payment is made","Pressure to pay quickly to avoid losing your place at the reading","No independent way to confirm the sender's identity or authority over the estate"],"whatToDoNow":["Do not pay any fee to attend a claimed will reading","Contact the deceased's actual known executor or solicitor directly to verify any genuine notification about the estate","Search the sender's name and any organization mentioned for scam reports","Report the invitation to the platform it arrived through, such as email provider or social media site","Delete the message and avoid clicking any embedded links"],"faq":[{"question":"Do formal will readings really happen in real life?","answer":"They're much less common than fiction suggests; most jurisdictions notify beneficiaries individually through the executor or solicitor rather than holding a single group reading event."},{"question":"What if I recognize the deceased's name from the invitation?","answer":"Recognizing the name doesn't confirm the invitation is genuine, since scammers commonly source real deceased people's names from obituaries; verify through the actual known executor or solicitor instead."}],"lastReviewed":"2026-07-05"},{"slug":"someone-impersonating-deceased-online-continues-chatting","url":"https://scamencyclopedia.org/questions/someone-impersonating-deceased-online-continues-chatting","question":"Someone is messaging me pretending to be my deceased loved one on a dating or messaging app. What is this?","shortAnswer":"This is a disturbing but real scam pattern where a fraudster takes over or recreates a deceased person's online profile and continues conversations to exploit the emotional confusion and grief of contacts, often leading toward a request for money.","explanation":"In some cases, scammers gain access to a deceased person's existing dating or messaging account, either through a hacked password or by convincing a platform's support team they are the account owner, and then continue conversations with the deceased's existing contacts, sometimes not disclosing the death at all to keep the relationship going for financial gain. In other cases, scammers create an entirely new fake profile using photos and details scraped from the deceased's real social media, essentially impersonating them freshly to targets who may not yet know about the death.\n\nThis is particularly cruel because it can create genuine emotional confusion: family members or romantic partners may initially believe they're actually hearing from their loved one, or may believe a hacking explanation is more comforting than accepting the account has simply gone dormant. Scammers exploit this confusion, sometimes claiming the 'account was hacked but I'm safe now' or spinning an elaborate story to explain why they can't video call or meet in person, all while working toward an eventual request for money, often framed as an emergency.\n\nIf you receive messages that seem to be from someone who has died, the appropriate response is to stop engaging immediately, verify with family whether the account has been secured, and report the account to the platform as either compromised or impersonating a deceased person.","redFlags":["Messages continue from an account belonging to someone you know has died","Sender avoids video calls or phone calls and gives excuses for why they can't verify identity","Story eventually shifts toward needing money urgently","Writing style, spelling, or tone doesn't match how the deceased person actually communicated","Sender pressures you to keep the conversation secret from other family members"],"whatToDoNow":["Stop responding and do not send any money regardless of how convincing the story seems","Verify with close family whether the deceased's account has been secured or memorialized","Report the account to the platform as compromised or as impersonating a deceased person","Screenshot the conversation before reporting, in case it's needed for a fraud report","Warn other mutual contacts who might also receive messages from the same account"],"faq":[{"question":"Could this actually be a mistake rather than a scam?","answer":"It's extremely unlikely; once a death is confirmed, continued messaging from that account, especially one that avoids verification and eventually asks for money, should be treated as fraud rather than a misunderstanding."},{"question":"How do I get a deceased person's account properly secured?","answer":"Most major platforms have a specific process for family members to report a death and either memorialize or deactivate the account, usually requiring some form of documentation like a death certificate."}],"lastReviewed":"2026-07-05"},{"slug":"unclaimed-life-insurance-policy-finder-scam","url":"https://scamencyclopedia.org/questions/unclaimed-life-insurance-policy-finder-scam","question":"A website claims it can find unclaimed life insurance money owed to my deceased relative for a fee. Is it worth using?","shortAnswer":"Be cautious: legitimate unclaimed life insurance searches can often be done for free through official state or national unclaimed property registries, so paying a private company a large upfront fee for the same search is usually unnecessary and sometimes outright fraudulent.","explanation":"Many countries and regions maintain free, official databases where you can search for unclaimed life insurance benefits, forgotten bank accounts, or other unclaimed property tied to a deceased person's name. These government or industry-run registries exist specifically because insurers are required to make reasonable efforts to locate beneficiaries, and unclaimed funds often end up reported to a state or national unclaimed property office after a period of inactivity.\n\nSome private 'finder' services are legitimate and charge a percentage-based finder's fee only if they successfully locate money, which is a reasonable business model, but many others demand a large upfront fee regardless of whether they find anything, or simply run the same free public search you could do yourself and charge you for the result. In the worst cases, these sites are pure scams that take payment and either provide fabricated results or a fake 'unclaimed insurance policy' number that leads nowhere.\n\nBefore paying anyone, always check your own country or region's official unclaimed property or insurance registry directly, since in many cases you can complete the exact same search for free in a few minutes.","redFlags":["Upfront fee required regardless of whether unclaimed funds are actually found","Website is not affiliated with any recognized government or industry unclaimed property registry","High-pressure marketing suggesting money will be 'lost forever' if you don't act now","No verifiable business registration or physical address","Refuses to explain how their search differs from free public registries"],"whatToDoNow":["Search your country or region's official free unclaimed property or unclaimed life insurance registry first","If using a private finder service, confirm they only charge a percentage fee after successfully locating funds","Verify the company's business registration and read independent reviews before paying anything","Never pay a large upfront fee for a search you could likely do yourself for free","Report suspected fake finder services to consumer protection authorities"],"faq":[{"question":"Are free unclaimed property searches accurate?","answer":"Official government-run registries are generally reliable and are the same source legitimate paid finder services use, so trying the free option first is almost always worthwhile."},{"question":"Is it ever reasonable to use a paid finder service?","answer":"Yes, if the fee is a modest percentage of funds actually recovered and only charged upon success, this can be reasonable, particularly for complex cross-border searches, but always confirm the terms in writing first."}],"lastReviewed":"2026-07-05"},{"slug":"asked-for-social-security-number-to-process-death-benefit","url":"https://scamencyclopedia.org/questions/asked-for-social-security-number-to-process-death-benefit","question":"A caller is asking for my deceased relative's full details to 'process a death benefit.' How much should I share?","shortAnswer":"Be cautious about sharing sensitive identifiers over an unsolicited phone call; genuine government agencies and pension providers typically already have the deceased's records on file and communicate death benefit processes through written correspondence or verified official channels, not cold calls demanding full personal details.","explanation":"When someone dies, various institutions, including government pension or social security agencies, employer pension schemes, and insurers, may owe a death benefit or final payment to a spouse, dependent, or estate. These institutions typically already hold the deceased's records and initiate contact through official letters or by requiring the family to submit a claim through an established, verifiable process, often requiring documents like a death certificate rather than asking you to recite sensitive numbers over the phone.\n\nScammers impersonate these institutions specifically because a real death benefit process does exist, making the pretext believable, but they use it to extract identifying details like a full national insurance or social security number, bank account information, and personal identifiers that can then be used for identity theft or to redirect a genuine benefit payment to themselves. This scam is particularly damaging because it can result in both financial loss and long-term identity theft affecting the surviving family members.\n\nIf you receive an unsolicited call about a death benefit, the safest approach is to hang up and initiate contact yourself using the agency or provider's officially published phone number, and to only submit sensitive details through their verified, secure claim process, typically involving written forms and certified documents like a death certificate.","redFlags":["Unsolicited call asking you to state sensitive identifying numbers out loud","Caller claims urgency, suggesting the benefit will be lost if you don't act immediately","Request for banking details to 'redirect' or 'expedite' a payment","Caller cannot be verified through the agency or provider's official phone number","Pressure to avoid consulting family members or a solicitor before responding"],"whatToDoNow":["Hang up and contact the relevant agency or pension provider directly using their official published number","Never state a full social security, national insurance, or bank account number to an unsolicited caller","Ask what documents are genuinely required, such as a death certificate, and submit them only through verified official channels","Monitor the deceased's and your own credit reports for suspicious activity after the call","Report the suspicious call to the impersonated agency's fraud department and to consumer protection authorities"],"faq":[{"question":"What documents do I actually need to claim a real death benefit?","answer":"This varies by country and provider, but commonly includes a certified death certificate, proof of your relationship to the deceased, and identification, submitted through the provider's official claim process rather than recited over the phone."},{"question":"Can identity theft happen even if I don't send money?","answer":"Yes, providing sensitive identifying numbers alone, without any money changing hands, can be enough for criminals to attempt identity theft or fraudulent claims using the deceased's or your own identity."}],"lastReviewed":"2026-07-05"},{"slug":"estate-sale-buyer-scam-underpaying-or-not-paying","url":"https://scamencyclopedia.org/questions/estate-sale-buyer-scam-underpaying-or-not-paying","question":"An estate sale buyer paid with a check that bounced after taking valuable items. What can I do?","shortAnswer":"This is a form of estate sale fraud where a buyer deliberately pays with a bad check, an overpayment scam, or a fraudulent payment method to walk away with valuable items before the payment fails, and recovery options depend on acting quickly and involving law enforcement.","explanation":"Estate sales, where a family sells off a deceased person's belongings, sometimes including valuable antiques, jewelry, or collectibles, attract both genuine buyers and opportunistic scammers who specifically target grieving families who may be less experienced running a sale and more eager to simply clear the property quickly. Common tactics include paying with a check that later bounces, claiming to have 'accidentally' overpaid and asking for a cash refund of the difference before the original payment even clears, or using a stolen or cloned card that gets reversed after the buyer has left with the goods.\n\nBecause estate sales often happen over a short window and involve unfamiliar buyers, families may not think to verify payment methods the way they would for a more considered high-value transaction, and the emotional context of clearing out a loved one's belongings can make it harder to apply normal business skepticism. Once a scammer has left with valuable items, recovering them can be difficult, especially if identifying information about the buyer wasn't collected.\n\nRunning an estate sale with basic safeguards, insisting on verified payment methods like cash, verified bank transfer, or card payment through a proper point-of-sale system for high-value items, and not releasing goods until payment is fully confirmed and cleared, can prevent most of these losses.","redFlags":["Buyer offers to pay by personal check for high-value items","Buyer claims to have overpaid and asks for cash back before the original payment clears","Buyer is unusually eager to remove items immediately before payment is verified","Refusal to provide any identifying information for a high-value purchase","Payment method that can't be confirmed as cleared on the spot"],"whatToDoNow":["For high-value items, require cash, verified bank transfer, or a proper processed card payment before releasing goods","Never give cash back for an 'overpayment' until the original payment method has fully cleared, which can take days","Record identifying information, like a name and phone number, for buyers of high-value items","If a check bounces or payment fails after goods are taken, file a police report immediately and provide any collected buyer information","Consider using a professional estate sale company with established payment safeguards for high-value sales"],"faq":[{"question":"Is it worth hiring a professional estate sale company?","answer":"For sales involving valuable items, a professional company often has established buyer vetting and payment processes that reduce the risk of these scams compared to running a sale independently."},{"question":"Can I get my money back if a check bounces after the sale?","answer":"It depends on whether you can identify and locate the buyer; filing a police report promptly and pursuing the matter through small claims court are options, but recovery isn't guaranteed once goods have left with a fraudulent buyer."}],"lastReviewed":"2026-07-05"},{"slug":"asked-to-forward-inheritance-payment-to-third-party","url":"https://scamencyclopedia.org/questions/asked-to-forward-inheritance-payment-to-third-party","question":"I received unexpected inheritance funds but was asked to forward part of it to someone else first. Why?","shortAnswer":"This is almost certainly a money mule or overpayment scam: the 'inheritance' funds are typically stolen or fraudulent, and once you forward part of the money elsewhere, you may be left responsible for repaying the original amount when the fraud is discovered.","explanation":"In this scheme, a scammer sends you money, often via check, wire transfer, or bank deposit, framed as part of a genuine or partial inheritance, then asks you to forward a portion to a third party, perhaps described as another beneficiary, a tax authority, or a legal fee recipient. The initial deposit is usually fraudulent, either a bounced check, a reversed wire transfer, or stolen funds, meaning that by the time your bank detects the problem and reverses the original deposit, you have already sent your own real money to the third party, and that money is gone.\n\nThis pattern deliberately exploits the fact that bank deposits can appear to clear within a few days but can still be reversed weeks later if fraud is discovered, creating a false sense of security that the funds are genuinely yours to use. Victims sometimes also unknowingly become 'money mules,' potentially facing legal consequences for helping move fraudulently obtained funds, even if they didn't realize the original source was illegitimate.\n\nGenuine inheritance distributions do not require the recipient to forward money to a third party as a condition of receiving their own share; any legitimate deductions, like taxes or fees, are handled by the executor or estate directly, not routed through an individual beneficiary's personal account.","redFlags":["You're asked to forward part of a received payment to someone else before keeping the rest","The original deposit came through an unfamiliar or informal channel rather than a verified solicitor or estate account","Urgency to forward the money quickly, before the deposit has fully and finally cleared","Vague or shifting explanations for why the third party needs the forwarded funds","No formal estate paperwork or executor confirming the arrangement"],"whatToDoNow":["Do not forward any portion of unexpected inheritance funds to a third party","Contact your bank to verify whether the original deposit has genuinely and finally cleared, not just appeared as available","Verify the legitimacy of the inheritance through an independent solicitor or the actual named executor","Report the scheme to your bank's fraud department and to consumer protection or fraud authorities","If you've already forwarded money, report it immediately, since some recovery may be possible if caught quickly"],"faq":[{"question":"Can my bank really reverse a deposit weeks after it appeared to clear?","answer":"Yes, funds availability and final clearance are different; banks can still reverse a fraudulent deposit even after the money has appeared available to spend, sometimes weeks later."},{"question":"Could I face legal trouble for forwarding the money if I didn't know it was a scam?","answer":"It's possible to face civil liability for repaying reversed funds, and in some cases legal scrutiny as a money mule, even without criminal intent, which is why refusing to forward unexpected inheritance money is the safest course."}],"lastReviewed":"2026-07-05"},{"slug":"fake-death-certificate-requested-for-verification","url":"https://scamencyclopedia.org/questions/fake-death-certificate-requested-for-verification","question":"A company is asking me to upload the death certificate to an unfamiliar website to 'verify' a claim. Is this safe?","shortAnswer":"Be very cautious: a death certificate contains sensitive personal information that can enable identity theft, so only upload it to verified, official portals belonging to institutions you've independently confirmed are handling a genuine claim.","explanation":"A death certificate typically includes the deceased's full name, date of birth, date and cause of death, and sometimes parents' names and social security or national insurance numbers, all of which are valuable to identity thieves. Legitimate institutions, such as banks, insurers, and pension providers, do require a death certificate copy to process claims, but they typically have secure, verifiable upload portals or accept certified copies by mail, and you would have initiated contact with them as part of a claim you know is genuine.\n\nScammers sometimes pose as one of these legitimate institution types, or invent a plausible-sounding claim process, specifically to collect a death certificate copy through an unfamiliar or insecure website. Once obtained, the document can be used to attempt identity theft against the deceased, apply for fraudulent credit, or even be resold to other criminals as verified 'proof of death' data, which is valuable for the obituary-based scams targeting surviving family members.\n\nBefore uploading a death certificate anywhere, verify independently that the requesting organization is genuinely handling a claim connected to the deceased, ideally by contacting them yourself through officially published contact details rather than a link or portal provided in an unsolicited message.","redFlags":["Request comes through an unsolicited message rather than a claim process you initiated","Website URL doesn't match the institution's official domain","No secure upload indicator (such as a valid padlock/HTTPS) on the page requesting the document","Vague explanation of what the certificate will actually be used for","Pressure to upload quickly without time to verify the request"],"whatToDoNow":["Verify the requesting organization independently before uploading any document","Check that the website URL matches the institution's official domain exactly","Consider sending certified copies by mail or through a confirmed secure portal instead of an unfamiliar website","Ask what specifically the death certificate will be used for and whether a redacted version might suffice","Report any suspicious request to consumer protection authorities and monitor for identity theft afterward"],"faq":[{"question":"Can I redact parts of a death certificate before sharing it?","answer":"Some institutions accept certified copies with certain fields redacted for privacy, though this depends on their specific requirements; it's worth asking if full disclosure of sensitive fields like social security numbers is genuinely necessary."},{"question":"How many copies of a death certificate should I order?","answer":"It's common to need multiple certified copies for different institutions like banks, insurers, and government agencies, so ordering several from the start can avoid repeatedly requesting new copies later."}],"lastReviewed":"2026-07-05"},{"slug":"hospice-or-nursing-home-billing-scam-after-death","url":"https://scamencyclopedia.org/questions/hospice-or-nursing-home-billing-scam-after-death","question":"I received a bill from a hospice or care facility for services after my relative already passed away. Is this fraud?","shortAnswer":"It could be a billing error, but it could also be deliberate fraud; either way, request an itemized statement and verify each charge's date against the actual date of death before paying anything.","explanation":"Billing errors do happen in complex healthcare systems, especially around the transition when a patient passes away, with insurance claims, facility charges, and final invoices sometimes processed with delays or clerical mistakes. However, this same complexity is also exploited by dishonest billing practices, whether by an actual facility inflating charges for services not rendered after death, or by a scammer impersonating a facility's billing department to collect a fraudulent payment from a grieving family who may not scrutinize a bill closely during such a difficult time.\n\nA legitimate final bill from a genuine care facility should include an itemized breakdown with specific dates of service, and any charges dated after the confirmed date of death should be immediately questionable and worth challenging directly with the facility's billing department. If the bill comes from an unfamiliar entity, doesn't match the facility's actual name, or requests unusual payment methods, this suggests outright impersonation fraud rather than a billing error.\n\nFamilies should feel entitled to request a detailed, itemized statement for any final bill and to compare dates carefully, since even genuine facilities can make billing mistakes that families are not obligated to simply pay without question.","redFlags":["Charges dated after the confirmed date of death","Bill comes from an entity name that doesn't match the actual facility","Request for payment via unusual methods like gift cards or wire transfer","No itemized breakdown provided despite requests","Pressure to pay quickly without time to review the charges"],"whatToDoNow":["Request a fully itemized statement with specific service dates before paying anything","Compare all charge dates against the confirmed date of death","Contact the facility directly using their official verified phone number to confirm the bill is genuine","Dispute any charges for services dated after death directly with the facility's billing department","Report suspected fraudulent billing to consumer protection authorities or relevant healthcare regulator"],"faq":[{"question":"Is it normal to receive a bill after someone has passed away?","answer":"Yes, final bills for services rendered before death are common and can arrive weeks later due to insurance processing delays, but every charge should still be for a date before the death occurred."},{"question":"Who is responsible for paying a deceased person's final medical bills?","answer":"Generally, these are debts of the estate rather than personal debts of family members, so genuine final bills should typically be handled through the estate's executor rather than paid directly by relatives out of personal funds."}],"lastReviewed":"2026-07-05"},{"slug":"funeral-livestream-scam-fake-link","url":"https://scamencyclopedia.org/questions/funeral-livestream-scam-fake-link","question":"I got a link to watch a funeral livestream but it's asking for payment or personal details first. Is this legitimate?","shortAnswer":"Be cautious: while some funeral homes do charge a modest fee for livestream access through their own verified platform, scammers also create fake livestream links shared on social media to harvest payment details or personal information from grieving friends and family.","explanation":"Livestreaming funerals became widely adopted to allow distant friends and family to attend remotely, and many funeral homes offer this as a legitimate paid or free service through their own website or a recognized funeral livestreaming platform. However, scammers have adapted by creating fake social media posts or messages claiming to share a link to a loved one's funeral livestream, when in reality the link leads to a phishing page designed to harvest card details or login credentials, or spread malware.\n\nThese fake links often circulate rapidly through shared social media posts, since people are likely to forward a funeral link to other mourners without scrutinizing it closely, especially under time pressure to catch the stream live. The scam is particularly effective because it exploits both grief and a fear of missing the ability to say goodbye, making people less likely to pause and verify.\n\nBefore clicking any funeral livestream link, especially one shared through social media rather than sent directly by the family or funeral home, it's worth verifying with the family or checking the actual funeral home's official website directly for the correct livestream link.","redFlags":["Link shared through social media reposts rather than directly from the family or funeral home","Page asks for card details or login credentials before showing any video content","URL doesn't match the funeral home's official website or a recognized livestreaming platform","Urgent messaging pressuring you to click immediately before the stream 'ends'","Request for unrelated personal information unrelated to simply watching a stream"],"whatToDoNow":["Verify the livestream link directly with the family or the funeral home's official website before clicking","Avoid entering card or login details on an unfamiliar livestream page","Check the URL carefully for misspellings or unusual domains before clicking any shared link","Report suspicious livestream links to the platform where they were shared","If you entered payment details on a fake page, contact your bank immediately to monitor for fraud"],"faq":[{"question":"Is it normal for a funeral livestream to require payment?","answer":"Some funeral homes do charge a modest fee through their own verified platform for remote streaming access, but this should be paid directly through the funeral home's official site, not a link from an unverified social media post."},{"question":"How can I quickly verify a livestream link is genuine?","answer":"Contact the family directly or check the funeral home's own official website, which usually lists the correct streaming link or platform for the specific service."}],"lastReviewed":"2026-07-05"},{"slug":"sympathy-card-scam-with-hidden-payment-request","url":"https://scamencyclopedia.org/questions/sympathy-card-scam-with-hidden-payment-request","question":"I received a sympathy card in the mail that includes a request for money or a suspicious link. What is this?","shortAnswer":"This is an unusual but real scam variant where a physical sympathy card is used to build emotional trust before pivoting to a request for money, a suspicious QR code, or a link, and it should be treated with the same skepticism as any other unsolicited financial request.","explanation":"Most sympathy cards are genuine, heartfelt gestures from real friends, family, or acquaintances, but scammers have adapted physical mail scams to exploit the trust and emotional weight a sympathy card carries. A card might include a printed QR code claiming to lead to a memorial donation page, a note claiming the sender wants to help cover funeral costs but needs your bank details to send money, or a request to call a number to 'claim' a small gift, which then leads to a high-pressure sales or scam pitch.\n\nBecause a physical card feels more personal and trustworthy than an email or text, recipients may be more inclined to follow through on an embedded request without the skepticism they'd normally apply to digital communication. Scammers may target addresses gathered from public obituaries, sometimes sending cards that appear to be from a real but unaffiliated charity or organization hoping to intercept sympathy-driven donations.\n\nAs with digital scams, the safest approach is to independently verify any organization or claimed sender mentioned in the card before scanning a QR code, calling an included number, or providing any personal or banking information.","redFlags":["Card includes a QR code or link directing to an unfamiliar donation or claim page","Note asks for your bank details in order to 'send' condolence money","Sender is unfamiliar or the organization mentioned can't be verified","Card includes a phone number that leads to a high-pressure sales pitch rather than genuine condolences","Return address doesn't match any verifiable organization"],"whatToDoNow":["Do not scan QR codes or provide personal or banking details based solely on a mailed card","Verify any charity or organization mentioned through official channels before donating","If a genuine friend wants to send condolence money, arrange this through a method you both verify directly, like a known payment app","Report suspicious cards to postal fraud reporting services where available","Discard or keep the card as evidence if you plan to report it, but do not act on embedded requests"],"faq":[{"question":"Are QR codes on sympathy or memorial materials always risky?","answer":"Not always, but any QR code from an unfamiliar or unverified sender should be treated with the same caution as an unfamiliar link, since it can direct to a phishing page just as easily as a link can."},{"question":"How would a scammer get my mailing address for this?","answer":"Obituaries and public death notices sometimes include enough information for scammers to infer or find a mailing address, particularly if the family's address is publicly listed or easily searchable."}],"lastReviewed":"2026-07-05"},{"slug":"asked-to-pay-outstanding-utility-bill-of-deceased","url":"https://scamencyclopedia.org/questions/asked-to-pay-outstanding-utility-bill-of-deceased","question":"A utility company says my deceased parent has an outstanding bill I need to pay immediately or service will be cut off. Is this real?","shortAnswer":"Genuine utility providers do have legitimate final bill processes, but scammers frequently impersonate them using threats of immediate disconnection to pressure grieving family members, so always verify independently before paying.","explanation":"When someone dies, their utility accounts, such as electricity, gas, water, or phone service, do need to be formally closed or transferred, and a genuine final bill may be owed for services used before the account is closed. Real utility companies typically send this final bill through standard mail or account notices, and if a service is still active at the deceased's former residence, will work with whoever now occupies or manages the property on next steps.\n\nScammers exploit the underlying truth that utility accounts need closing after a death by calling and threatening immediate service disconnection unless a specific 'past due' amount is paid right away, often through an unusual payment method like a prepaid card or a payment app. Because the family may not know exactly what utility accounts existed or what's genuinely owed, this uncertainty makes the fabricated threat more believable.\n\nThe safest response to any such call is to contact the utility provider directly using the number on a previous genuine bill or their official website, rather than any number given by the caller, to confirm whether an account exists and what, if anything, is genuinely owed.","redFlags":["Threat of immediate disconnection unless payment is made right away","Payment demanded via prepaid card, payment app, or cryptocurrency","Caller cannot provide an account number matching the deceased's actual utility account","Pressure to pay before you can verify anything with the utility company directly","Caller discourages you from calling the utility company's official customer service line"],"whatToDoNow":["Contact the utility provider directly using the number from a previous bill or their official website","Ask for written confirmation of any amount genuinely owed before paying","Never pay via prepaid card, gift card, or cryptocurrency for a utility bill","Inform the utility company of the death so the account can be properly closed or transferred","Report suspicious disconnection threat calls to the real utility company's fraud department"],"faq":[{"question":"Who is responsible for a deceased person's genuine unpaid utility bill?","answer":"This is typically a debt of the estate, handled through the estate's assets, rather than a personal obligation of surviving family members, unless they are joint account holders."},{"question":"How quickly should utility accounts be closed after a death?","answer":"It's worth notifying providers relatively promptly to avoid unnecessary charges accumulating, but there's no need to rush into a payment over the phone under pressure to do so."}],"lastReviewed":"2026-07-05"},{"slug":"fake-trust-fund-administrator-contacts-beneficiary","url":"https://scamencyclopedia.org/questions/fake-trust-fund-administrator-contacts-beneficiary","question":"Someone claiming to administer a trust fund set up by my late relative wants my bank details to release funds. Should I comply?","shortAnswer":"No, do not provide bank details based solely on an unsolicited contact; verify the trust's existence and the administrator's identity independently through a solicitor or the actual named trustee before sharing any financial information.","explanation":"Legitimate trusts are managed by a named trustee, often working with a solicitor or professional trust company, who distributes funds to beneficiaries according to the trust's terms, usually after formal verification of identity through documentation rather than a simple request for bank details over the phone or email. If a genuine trust exists and you are a genuine beneficiary, there will typically be a paper trail, such as being informed by the trust's solicitor or through prior knowledge from the deceased while they were alive.\n\nScammers invent fictional trust funds supposedly set up by a deceased relative, often a distant one whose life details are vague enough to avoid immediate scrutiny, and claim you are a named beneficiary who simply needs to provide banking details to receive the funds. This scam sometimes escalates to also requesting a small 'release fee' or 'verification deposit' before funds are supposedly transferred, none of which a legitimate trust distribution would require.\n\nBefore providing any financial information, verify independently whether the trust actually exists by asking family members familiar with the deceased's estate planning, or by contacting a solicitor to check if any trust documentation can be located and confirmed through proper legal channels.","redFlags":["Unsolicited contact about a trust fund you had no prior knowledge of","Request for bank details before any documentation is provided","Request for a 'release fee' or 'verification deposit' before funds are transferred","No verifiable named trustee or solicitor overseeing the trust","Pressure to act quickly to avoid losing the funds"],"whatToDoNow":["Do not provide bank details or pay any fee based on an unsolicited trust fund claim","Ask family members if they have any knowledge of the deceased setting up such a trust","Contact a solicitor to check for genuine trust documentation through proper channels","Verify the identity and credentials of anyone claiming to be a trustee or trust administrator","Report suspected fraud to consumer protection or fraud reporting authorities"],"faq":[{"question":"How would I know if my deceased relative genuinely set up a trust?","answer":"Check with the deceased's solicitor, financial advisor, or close family members who may have knowledge of any estate planning documents, rather than relying solely on an unsolicited claim from a stranger."},{"question":"Is it ever normal to pay a fee to receive trust funds?","answer":"Legitimate trust administration costs are typically paid from the trust's own assets by the trustee, not charged separately to beneficiaries as a condition of receiving their distribution."}],"lastReviewed":"2026-07-05"},{"slug":"romance-scammer-pretends-to-be-widowed-to-gain-sympathy","url":"https://scamencyclopedia.org/questions/romance-scammer-pretends-to-be-widowed-to-gain-sympathy","question":"Someone I met online claims to be recently widowed and needs help with funeral or estate costs. Could this be a romance scam?","shortAnswer":"Yes, claiming recent widowhood is a very common tactic in romance scams specifically designed to generate sympathy and justify urgent requests for money, especially if the relationship developed quickly online and you've never met in person.","explanation":"Romance scammers frequently construct an elaborate backstory involving being recently widowed, since it explains loneliness and emotional vulnerability in a way that makes a target more sympathetic and invested in the relationship, while also providing a ready-made justification for financial requests, such as needing help with funeral costs, unpaid medical bills from the 'late spouse,' or complications around inheriting shared assets.\n\nThe pattern usually escalates gradually: initial conversations focus on building emotional intimacy and trust, often moving quickly to expressions of love within days or weeks despite never meeting in person, followed eventually by a crisis requiring money, framed around the fictional widowhood story or related complications like being unable to access frozen bank accounts. Because the target has developed genuine emotional investment by this point, they may override normal skepticism to help someone they believe cares about them.\n\nGenuine grief and financial hardship do exist, but a request for money from someone you've only interacted with online, especially one who avoids video calls or in-person meetings and has a story that conveniently requires funds transferred quickly, should be treated as a serious warning sign of romance fraud rather than assumed to be genuine.","redFlags":["Relationship developed quickly online with declarations of love within a short time","Story of recent widowhood conveniently explains both loneliness and financial need","Avoids video calls, phone calls, or meeting in person","Eventually requests money for funeral costs, medical bills, or frozen assets","Inconsistent details about the supposed late spouse or estate when questioned"],"whatToDoNow":["Do not send money to anyone you have only interacted with online, regardless of their story","Request a live video call and be wary of excuses for why this isn't possible","Search the person's photos using a reverse image search to check for reuse on other profiles","Discuss the relationship with a trusted friend or family member for an outside perspective","Report the profile to the platform and to relevant fraud or romance scam reporting services"],"faq":[{"question":"Is it possible the person is genuinely widowed and just needs help?","answer":"It's possible, but the combination of a quickly escalating online relationship, avoidance of verification, and a request for money is a well-documented scam pattern, so treat it with serious skepticism regardless of how genuine the story seems."},{"question":"What if I've already sent money and now suspect a scam?","answer":"Stop sending any further money immediately, contact your bank to see if any transaction can be reversed or flagged, and report the situation to romance scam reporting services and local fraud authorities."}],"lastReviewed":"2026-07-05"},{"slug":"asked-to-pay-inheritance-tax-before-receiving-funds","url":"https://scamencyclopedia.org/questions/asked-to-pay-inheritance-tax-before-receiving-funds","question":"I'm told I must pay 'inheritance tax' myself before the funds can be released to me. Is this how inheritance tax actually works?","shortAnswer":"In most jurisdictions, inheritance or estate tax is calculated and paid from the estate's own assets by the executor before distribution, not collected as a separate upfront payment demanded from individual beneficiaries before they receive their share.","explanation":"Inheritance and estate taxes are real in many countries, but the mechanics typically involve the executor or estate administrator calculating the tax owed, paying it from the estate's total assets, and then distributing the remaining balance to beneficiaries, meaning beneficiaries generally receive their share already net of any applicable tax rather than being asked to pay tax separately out of pocket before receiving anything.\n\nScammers invert this real process, claiming you personally owe an 'inheritance tax,' 'transfer tax,' or 'release tax' that must be paid before your share can be sent, often demanding payment via wire transfer, cryptocurrency, or gift cards specifically because these methods are hard to reverse. This scam is effective because most people don't know the precise mechanics of how estate tax is actually handled in their jurisdiction, making a confidently stated but false process sound plausible.\n\nIf you're told you owe tax before receiving an inheritance, the appropriate step is to verify with an independent tax advisor or solicitor how inheritance tax genuinely works in the relevant jurisdiction, and to confirm any request for payment through the actual named executor or the estate's official solicitor, not through whoever contacted you directly.","redFlags":["Request to personally pay tax before receiving any inheritance funds","Payment demanded via wire transfer, cryptocurrency, or gift cards","Contact came unsolicited rather than through the actual named executor or solicitor","Pressure to pay quickly to avoid losing the inheritance","Inability to explain clearly why tax is being collected this way instead of from the estate directly"],"whatToDoNow":["Consult an independent tax advisor or solicitor about how inheritance tax genuinely works in the relevant jurisdiction","Verify any inheritance claim through the actual named executor or the estate's solicitor","Never pay a personal 'inheritance tax' via wire transfer, cryptocurrency, or gift cards to an unverified party","Ask for written documentation of any genuine tax liability before paying anything","Report suspected scams to consumer protection or tax authority fraud reporting channels"],"faq":[{"question":"Do any countries actually require beneficiaries to pay tax directly?","answer":"Some jurisdictions do impose tax obligations directly on beneficiaries rather than the estate, but even in these cases, the tax is paid through official government channels and forms, not to an individual claiming to represent an estate or law firm by phone or email."},{"question":"How can I find out the real tax rules where I live?","answer":"Consult an independent tax advisor, solicitor, or your national tax authority's official published guidance rather than relying on information provided by someone contacting you about a specific inheritance claim."}],"lastReviewed":"2026-07-05"},{"slug":"how-to-safely-close-deceased-relatives-financial-accounts","url":"https://scamencyclopedia.org/questions/how-to-safely-close-deceased-relatives-financial-accounts","question":"What's the safest way to close my deceased relative's bank and financial accounts without falling for a scam?","shortAnswer":"Contact each institution directly using their official verified phone number or website, provide a certified death certificate through their official process, and never rely on a third party contacting you claiming to help 'close accounts' for a fee.","explanation":"Closing a deceased person's financial accounts is a legitimate and necessary task, typically requiring the executor or a legally authorized representative to contact each bank, investment firm, or financial institution directly, provide a certified copy of the death certificate along with proof of their authority (such as letters of administration or probate), and follow that institution's specific closure process. This process, while sometimes tedious, does not usually require paying a fee to the institution itself simply to close an account.\n\nScammers exploit this genuine but sometimes confusing process by offering to 'help' close accounts for a fee, or by impersonating a bank's account closure department and asking for login credentials, card numbers, or other sensitive details under the guise of completing the closure. Genuine banks will never need your online banking password to close an account, since the executor's legal authority and identity verification are what matters, not knowledge of active login credentials.\n\nThe safest approach is to compile a list of the deceased's known financial institutions, contact each one directly using their official customer service number, ask specifically what documentation they require, and complete the process only through their verified official channels rather than through a third party or an unsolicited caller offering to help.","redFlags":["Third party offers to close accounts on your behalf for a fee","Caller claiming to be from the bank asks for online banking login details or passwords","Pressure to act through an unfamiliar 'estate services' company rather than the bank directly","Request for payment to 'process' an account closure","Unsolicited contact rather than closure initiated by the executor themselves"],"whatToDoNow":["Compile a list of all known financial institutions the deceased used","Contact each institution directly using their official customer service number to ask about their closure process","Provide required documentation, such as a certified death certificate and proof of executor authority, only through verified official channels","Never share online banking passwords or login credentials with anyone claiming to help close an account","Be wary of unsolicited 'estate closure service' offers and verify any such company's legitimacy independently before paying"],"faq":[{"question":"Do I need to be the executor to close a deceased person's bank account?","answer":"Generally, yes, only the legally appointed executor or administrator, or in some cases a joint account holder, has the authority to close accounts, so banks will typically require proof of this legal standing."},{"question":"Is it ever worth paying for a professional estate account closure service?","answer":"It can be helpful for very complex estates with many accounts across multiple institutions, but verify any such company's legitimacy and fee structure carefully before engaging them, since this area does attract some predatory operators."}],"lastReviewed":"2026-07-05"},{"slug":"asked-for-donation-to-fake-memorial-fund-on-social-media","url":"https://scamencyclopedia.org/questions/asked-for-donation-to-fake-memorial-fund-on-social-media","question":"A memorial fundraiser for someone who died is circulating on social media, but I can't verify it's genuine. What should I check?","shortAnswer":"Verify that the fundraiser is genuinely organized or endorsed by the deceased's immediate family before donating, since scammers commonly create fake memorial fundraisers using real photos and details scraped from social media or news coverage of a death.","explanation":"Genuine memorial fundraisers, often used to help cover funeral costs or support a bereaved family financially, are a real and common practice, particularly for unexpected deaths that leave families with sudden, significant expenses. However, because these fundraisers rely on emotional appeal and often spread rapidly through shares and reposts, they are also frequently imitated by scammers who create duplicate or entirely fake fundraising pages using the same photos, name, and story, hoping to intercept donations intended for the real family.\n\nThis is especially common after a death that receives some public attention, such as a local news story, a workplace accident, or a death that goes viral on social media, since the wider the story spreads, the more opportunity a scammer has to create a convincing copy before most people become aware of which fundraiser is the authentic one. Multiple competing fundraisers for the same person, some genuine and some fake, is a common resulting pattern.\n\nBefore donating, check whether the fundraiser is directly linked from a source you trust, such as the family's own social media post, a mutual close friend's endorsement, or a local news report that names the specific verified fundraiser, rather than donating to any version that simply appears in your feed or a shared post from someone you don't know well.","redFlags":["Multiple different fundraisers exist for the same deceased person","Fundraiser wasn't shared or linked directly by the immediate family","Organizer has no clear, verifiable connection to the deceased or their family","Fundraiser platform lacks basic verification or reporting features","Urgent language pressuring immediate donation without time to verify"],"whatToDoNow":["Check whether the fundraiser is linked directly by the family's own social media account or a trusted mutual contact","Look for a local news report or obituary that names the specific verified fundraiser, if one exists","Contact a mutual friend or the family directly, if appropriate, to confirm which fundraiser is genuine","Report suspected duplicate or fake fundraisers to the hosting platform","When in doubt, hold off donating until you can independently confirm legitimacy"],"faq":[{"question":"Can fundraising platforms guarantee a campaign is genuine?","answer":"Most platforms have some verification and reporting features, but they cannot fully guarantee every campaign's legitimacy, so independent verification through the family or trusted mutual contacts remains important."},{"question":"What if I already donated to a fake fundraiser?","answer":"Contact the fundraising platform to report the fake campaign and request a refund where possible, and consider disputing the charge with your payment provider if the platform doesn't resolve it."}],"lastReviewed":"2026-07-05"},{"slug":"solicitor-cold-calls-claiming-to-handle-your-relatives-will","url":"https://scamencyclopedia.org/questions/solicitor-cold-calls-claiming-to-handle-your-relatives-will","question":"A solicitor I've never dealt with called claiming they hold my late relative's will and need payment to release it. Is this normal?","shortAnswer":"This is unusual and worth verifying carefully: if your relative genuinely used a solicitor, the family typically already knows or can find out through the deceased's paperwork, and a legitimate firm would not demand payment simply to disclose the existence or contents of a will.","explanation":"Wills are typically stored either with the solicitor who drafted them, in a safe deposit box, with a will registration service, or at home among personal papers, and families usually have some idea of where to look based on the deceased's own records or prior conversations. If a solicitor genuinely holds a will, they will typically confirm this to a rightful executor or family member without demanding payment simply to acknowledge the will exists or share its basic contents, since releasing this information is a standard part of estate administration, not a separately billable service requiring upfront payment.\n\nScammers impersonating solicitors sometimes cold-call families shortly after a death becomes public, claiming to hold a will and demanding a 'release fee' or 'storage fee' before disclosing anything, banking on the family's uncertainty about where the actual will might be. This scam can be particularly convincing if the caller has picked up genuine surface details about the deceased from an obituary, making the claim feel plausible even though the underlying claim of holding a will is fabricated.\n\nIf you receive such a call, verify independently by checking any paperwork the deceased left behind for their actual solicitor's details, contacting your local law society or bar association to confirm the firm is real and registered, and calling that firm through an independently found number rather than the one provided by the caller.","redFlags":["Solicitor firm is unfamiliar and not one the family has any prior connection to","Payment demanded before disclosing the will's existence or basic contents","Firm cannot be verified through your local law society or bar association register","Pressure to pay quickly to avoid delays in accessing the will","Caller relies heavily on details that appear to be sourced from an obituary"],"whatToDoNow":["Check the deceased's own paperwork for any indication of a solicitor they actually used","Verify the calling firm's registration with your local law society or bar association","Call the firm back using an independently found number, not one provided by the caller","Never pay a fee simply to learn whether a will exists or to hear its basic contents","Report suspicious calls to consumer protection authorities or your local law society's complaints process"],"faq":[{"question":"How can I find out if my relative actually had a will with a solicitor?","answer":"Check personal paperwork, ask close family or friends who might know, and consider checking a national will registry or asking local solicitors in the area where the deceased lived if such services are recognized in your jurisdiction."},{"question":"Is it normal for solicitors to charge any fee related to a will?","answer":"Legitimate solicitors may charge for estate administration services, but this is typically explained clearly in a written engagement letter as part of ongoing probate work, not as an upfront fee just to disclose a will's existence over an unsolicited call."}],"lastReviewed":"2026-07-05"},{"slug":"how-scammers-find-out-someone-has-died-so-quickly","url":"https://scamencyclopedia.org/questions/how-scammers-find-out-someone-has-died-so-quickly","question":"How do scammers find out about a death so quickly, sometimes within days?","shortAnswer":"Scammers monitor public sources like published obituaries, funeral home websites, newspaper death notices, and sometimes social media tribute posts, often using automated tools that scan these sources continuously, allowing them to identify and target newly bereaved families within days of a death being publicly reported.","explanation":"Death notices and obituaries are, by their nature, meant to be public so that a community can pay respects and attend services, but this same openness means they function as an easily accessible, regularly updated public database of exactly who has recently died, who their surviving family members are, and sometimes even details about the family's location and financial circumstances. Some scam operations use automated web-scraping tools that continuously monitor newspaper websites, funeral home obituary pages, and public death registries, compiling new entries into lists almost as fast as they're published.\n\nSocial media adds another layer, since tribute posts, memorial pages, and condolence comments often reveal family relationships, emotional details, and sometimes even financial information like mentions of shared property or a business the deceased ran, all of which can be mined by scammers building a more detailed profile to make a scam pitch more convincing. In some regions, publicly accessible probate filings, once a will is submitted for probate, also become a source scammers monitor for estates that might be worth targeting.\n\nWhile you generally cannot prevent scammers from monitoring public sources entirely, being aware of how quickly and thoroughly this information can be gathered helps explain why unsolicited contact referencing accurate details about a recent death should still be treated as unverified rather than assumed genuine simply because the caller 'knows things.'","redFlags":["Unsolicited contact arrives within days of an obituary or death notice being published","Caller or emailer references specific accurate details that were only published in the obituary","Multiple different scam attempts target the same family shortly after a death","Contact references details seemingly pulled from social media tribute posts or comments","Scam pitch seems tailored specifically to the deceased's apparent financial situation as implied by the obituary"],"whatToDoNow":["Consider limiting sensitive details in obituaries, such as full birthdate, home address, or detailed family relationships","Set social media tribute and memorial posts to a more private or limited audience where possible","Treat any unsolicited contact referencing obituary or social media details as unverified regardless of apparent accuracy","Notify banks, credit bureaus, and relevant agencies of the death promptly to reduce identity theft risk","Warn family members that they may be targeted with scams referencing accurate details about the deceased"],"faq":[{"question":"Can I ask a newspaper or funeral home to remove an obituary?","answer":"Many outlets will consider removal or redaction requests from family members, particularly if there's a demonstrated fraud or harassment concern, so it's worth contacting them directly if this becomes an issue."},{"question":"Does this mean I shouldn't publish an obituary at all?","answer":"Not necessarily; you can still honor a loved one publicly while being more selective about which sensitive details, like full birthdate or home address, you choose to include."}],"lastReviewed":"2026-07-05"},{"slug":"asked-to-pay-legal-fees-before-inheritance-lawsuit-settlement","url":"https://scamencyclopedia.org/questions/asked-to-pay-legal-fees-before-inheritance-lawsuit-settlement","question":"I'm told a lawsuit over my relative's estate has settled in my favor but I must pay legal fees first to get my share. Is this legitimate?","shortAnswer":"Genuine legal settlements typically deduct attorney fees directly from the settlement amount before disbursing the remainder to you, so being asked to pay fees separately and upfront before receiving your share is a strong sign of fraud.","explanation":"In most legitimate legal fee arrangements, particularly contingency-based estate litigation, the attorney's fees and costs are deducted directly from the settlement or judgment amount before the remaining balance is disbursed to the client, meaning you would typically receive a net amount rather than being asked to pay fees separately out of pocket first. This structure exists precisely so that clients aren't required to have cash available upfront to pursue or benefit from a legal claim.\n\nScammers impersonating an attorney or referencing a fabricated lawsuit related to a deceased relative's estate exploit unfamiliarity with how legal settlements actually work, claiming that you must pay a fee, bond, or tax before your share of a 'settlement' can be released. Since many people have limited direct experience with contingency fee arrangements, this false framing can seem plausible, especially when combined with a confident, detailed-sounding explanation and some accurate background information about the deceased.\n\nIf you're contacted about a lawsuit or settlement connected to a relative's estate that you had no prior knowledge of, verify independently by contacting the actual court where the case is supposedly filed, or asking a separate, independently chosen solicitor to review the situation before paying anything.","redFlags":["Request to personally pay legal fees before receiving a settlement share","No prior knowledge of any lawsuit connected to the estate","Caller cannot provide a verifiable case number matching an actual court filing","Payment requested via wire transfer, cryptocurrency, or gift cards","Pressure to pay quickly to avoid losing the settlement"],"whatToDoNow":["Contact the court where the lawsuit is supposedly filed to verify the case actually exists","Consult an independently chosen solicitor before paying any fee related to an unfamiliar settlement claim","Never pay legal fees via wire transfer, cryptocurrency, or gift cards","Ask for all settlement documentation in writing and verify it independently","Report suspected fraud to consumer protection or fraud authorities"],"faq":[{"question":"How do legitimate contingency fee settlements typically work?","answer":"The attorney's fee, often a percentage agreed in advance, is usually deducted directly from the settlement amount, with the client receiving the net balance, rather than being asked to pay fees separately before receiving anything."},{"question":"What if the caller has real court case details?","answer":"Verify independently by contacting the court directly using their official public contact information, since scammers can sometimes reference real but unrelated case numbers or details to add false credibility."}],"lastReviewed":"2026-07-05"},{"slug":"text-saying-my-benefits-are-suspended","url":"https://scamencyclopedia.org/questions/text-saying-my-benefits-are-suspended","question":"I got a text saying my benefits are suspended until I confirm my details - is this real?","shortAnswer":"Almost certainly a scam. Government benefits agencies do not suspend payments via text message with a link to 'confirm' your bank details or ID.","explanation":"This is one of the most common benefits scam formats. A text arrives claiming your welfare, unemployment, disability, or pension payment has been paused or flagged, and that you must click a link within a short window (often '24 hours' or '48 hours') to avoid losing your payment. The link leads to a fake login page that looks like the real agency's portal, designed to steal your account credentials, National Insurance or Social Security number, and banking details.\n\nReal government agencies overwhelmingly correspond by post for anything involving a change in payment status, and any digital notification will direct you to log in independently through the official site or app rather than clicking a link. They also do not create fake urgency with countdown-style deadlines - that pressure tactic is a hallmark of the scam, not the government.\n\nIf you're ever unsure, the safest move is to ignore the text entirely and log into your benefits account directly by typing the official web address into your browser, or by calling the number printed on a previous genuine letter or on the agency's official website.","redFlags":["Urgent deadline to 'confirm details' or lose payment","Link in a text message rather than a request to log in independently","Asks for full bank details, card number, or ID documents","Sender number is a regular mobile number, not a short code","Message contains spelling or grammar errors uncommon in official communications","Threatens suspension, arrest, or legal action for non-response"],"whatToDoNow":["Do not click any link in the text","Delete the text or report it by forwarding to your country's spam-reporting short code","Log into your benefits account directly via the official website typed manually into the browser","Call the agency using the number on a genuine past letter or their official site, not any number in the text","If you already clicked the link and entered details, change your password immediately and contact the agency's fraud team","Set up a fraud alert with your bank if you shared any financial information"],"faq":[{"question":"Do benefits agencies ever text me at all?","answer":"Some agencies send appointment reminders or general notices by text, but none will ask you to click a link and enter banking or ID details to avoid suspension."},{"question":"What if the text has my real name and partial address?","answer":"Scammers often have this information from data breaches or public records - it does not prove the message is genuine."}],"lastReviewed":"2026-07-05"},{"slug":"caller-claims-to-be-social-security-administration","url":"https://scamencyclopedia.org/questions/caller-claims-to-be-social-security-administration","question":"Someone called claiming to be from the Social Security Administration threatening to suspend my number - what should I do?","shortAnswer":"Hang up. Government agencies never suspend Social Security or National Insurance numbers, and they never threaten arrest over the phone.","explanation":"This scam preys on fear by claiming your Social Security number (or equivalent national ID number) has been linked to a crime, is being 'suspended,' or will be frozen unless you act immediately. The caller may claim to be transferring you to 'law enforcement' or a supposed government investigator, and will pressure you to withdraw cash, buy gift cards, or move money to a 'safe account' to protect it.\n\nThere is no such thing as a suspended Social Security or National Insurance number - the concept does not exist in how these systems work, and agencies do not call out of the blue demanding immediate payment or fund transfers to resolve a supposed problem. Caller ID can also be spoofed to display the agency's real phone number, so seeing a familiar number on your screen proves nothing.\n\nIf you receive a call like this, hang up without engaging further. Callbacks to any number the caller provides will simply reconnect you to the scammer or an accomplice, not a real government office.","redFlags":["Claims your Social Security or National Insurance number is 'suspended' or linked to a crime","Threatens immediate arrest or legal action","Instructs you to withdraw cash or buy gift cards to 'protect' your funds","Asks you to stay on the line and not tell family members","Caller ID shows a government agency name or number that seems official","Pressures you to act within minutes or hours"],"whatToDoNow":["Hang up immediately without providing any information","Do not call back any number the caller gave you","Look up the agency's official number independently and call to verify if you're worried","Never withdraw cash, buy gift cards, or wire money based on a phone call like this","Report the call to your national fraud reporting center","Warn family members, especially older relatives, that this scam exists"],"faq":[{"question":"Can my Social Security number really be suspended?","answer":"No - this is not a real function of the system. Any call claiming this is a scam."},{"question":"Why did the caller ID show the real agency name?","answer":"Scammers use caller ID spoofing technology to display any name or number they choose, including genuine government agency numbers."}],"lastReviewed":"2026-07-05"},{"slug":"email-says-i-qualify-for-extra-government-grant","url":"https://scamencyclopedia.org/questions/email-says-i-qualify-for-extra-government-grant","question":"I got an email saying I qualify for a government grant I never applied for - is it legitimate?","shortAnswer":"Unsolicited emails announcing you've been awarded a government grant you never applied for are almost always scams designed to collect an upfront fee or personal data.","explanation":"Genuine government grants require an application process - you do not receive surprise notifications that you have been awarded money you never applied for. These emails typically claim you qualify for a stimulus payment, energy rebate, education grant, or COVID-era style relief fund, and ask you to pay a small 'processing fee,' 'tax,' or 'delivery charge' before the funds can be released, or to provide your bank account and ID details to 'verify eligibility.'\n\nThe fee request is the giveaway: real grants are never paid out this way, and no legitimate agency asks you to pay money to receive money. Some versions of this scam impersonate real grant programs closely, using official-looking logos and language copied from government websites, so visual similarity alone should not be treated as proof of legitimacy.\n\nIf a grant program genuinely exists, you can verify it by searching the official government website directly rather than clicking any link in the email, and by checking whether you actually submitted an application for it in the first place.","redFlags":["You never applied for any grant but are told you've been awarded one","Requests an upfront 'processing fee' or 'release fee' before payment","Asks for bank login details or ID scans to 'verify' eligibility","Uses generic greetings like 'Dear Beneficiary' rather than your name","Sender's email domain doesn't match the official government domain","Creates urgency with a deadline to claim the grant"],"whatToDoNow":["Do not click links or reply with any personal information","Search the official government website independently to check if the grant program is real","Confirm whether you actually applied for anything - if not, it's not real","Never pay a fee to receive a grant or government payment","Report the email as phishing to your email provider","Delete the email once reported"],"faq":[{"question":"Do real grants ever ask for a small fee?","answer":"No legitimate government grant requires you to pay money upfront to receive an award you qualify for."},{"question":"What if the email looks exactly like the real government website?","answer":"Scammers frequently copy official branding and logos exactly - visual appearance is not a reliable way to judge authenticity."}],"lastReviewed":"2026-07-05"},{"slug":"asked-to-pay-fee-to-release-unemployment-benefits","url":"https://scamencyclopedia.org/questions/asked-to-pay-fee-to-release-unemployment-benefits","question":"I applied for unemployment benefits and now someone is asking for a fee to 'release' my payment - is this normal?","shortAnswer":"No. Unemployment or jobseeker benefit agencies never charge a fee to release a payment you're entitled to - this is a scam layered onto a real application process.","explanation":"This scam often targets people who have genuinely applied for unemployment or jobseeker benefits, which makes it especially convincing. After submitting a real application, the person receives a call, email, or text claiming there is an 'administrative fee,' 'verification charge,' or 'processing tax' that must be paid before the approved payment can be released. Because the victim is actually expecting a payment, the request feels plausible.\n\nGenuine unemployment and welfare systems fund themselves through taxation and government budgets - they do not charge individual claimants fees to access money they are legally entitled to. Any request for payment in connection with releasing benefits, regardless of how official it sounds, is a scam. These scams sometimes use real claim reference numbers or personal details, obtained either from data breaches or by intercepting information about your genuine application, to add credibility.\n\nIf you receive such a request, contact the benefits agency directly using contact details from your official claim correspondence, not any number or link provided by the person asking for the fee.","redFlags":["Any request for payment to 'release' or 'unlock' a benefit payment","Contact comes shortly after you submitted a genuine application","Uses your real claim number or personal details to seem credible","Requests payment via gift card, wire transfer, or cryptocurrency","Threatens that your claim will be denied or delayed if you don't pay","Contact channel (email/phone) differs from the one used in your original application"],"whatToDoNow":["Do not send any payment under any circumstances","Contact the benefits agency directly using the number or portal from your original application confirmation","Ask the agency to confirm whether any fee request is legitimate - it won't be","Report the fee request as a scam to the agency's fraud line","Keep records of the scam contact (texts, emails, caller ID) for reporting","Monitor your claim status directly through the official portal rather than relying on the caller's updates"],"faq":[{"question":"Could this be a real government processing fee?","answer":"No unemployment or welfare system charges claimants a fee to release benefits they qualify for."},{"question":"What if they already have my real claim number?","answer":"Scammers can obtain real claim numbers through data breaches, phishing, or insider leaks - it does not make the fee request legitimate."}],"lastReviewed":"2026-07-05"},{"slug":"friend-offered-to-help-me-get-more-benefits-for-cut","url":"https://scamencyclopedia.org/questions/friend-offered-to-help-me-get-more-benefits-for-cut","question":"Someone offered to help me get more benefits or backdated payments in exchange for a cut - is this a scam?","shortAnswer":"Yes, this is typically a benefits fraud scheme that can leave you facing repayment demands, fraud investigations, or prosecution, even though someone else devised it.","explanation":"In this scheme, someone - sometimes presented as a friend, community contact, or self-styled 'benefits consultant' - offers to help you claim additional benefits, backdated payments, or a larger award than you're entitled to, often by encouraging you to exaggerate a disability, misreport your household situation, hide income, or falsify supporting documents. In exchange, they ask for a percentage of whatever extra money comes through, sometimes a very large cut.\n\nThe critical danger is that you, not the person who suggested it, are the one who signed the claim form and is legally responsible for the information on it. If the claim is later investigated and found to be fraudulent, you can face repayment demands for the full amount, financial penalties, and in serious cases criminal prosecution for benefit fraud - while the person who set it up and took a cut faces the same risk plus additional charges for facilitating fraud.\n\nGenuine entitlement to backdated payments or higher benefit rates exists in some circumstances, but it should always be established through the official agency's own assessment process or a registered welfare rights advisor, never through someone offering to 'get you more money' for a fee based on inflating or falsifying your claim.","redFlags":["Suggests exaggerating a disability or health condition on your claim","Asks you to hide income, savings, or a partner living with you","Wants a percentage or fee taken from any extra benefits obtained","Offers to fill in or 'coach' your answers on official forms","Claims to have insider knowledge of how to 'game' the assessment","Discourages you from contacting the agency directly to check entitlement"],"whatToDoNow":["Decline the offer and do not sign or submit any falsified claim","If you've already submitted one, contact the agency to correct it before an investigation starts","Seek advice from a free, accredited welfare rights or citizens advice service instead","Keep any messages or agreements as evidence if you need to report the person","Understand that legal responsibility for a claim rests with the person who signs it","Report the individual to the benefits agency's fraud reporting line if they are actively soliciting others"],"faq":[{"question":"What if I didn't know the extra amount was fraudulent?","answer":"You are still generally responsible for the accuracy of information on a claim you signed, so ignorance does not automatically protect you from repayment demands."},{"question":"Is there a legitimate way to get help with a claim?","answer":"Yes - free, accredited welfare rights advisors and citizens advice services can help you claim everything you're legitimately entitled to, at no cost and without fraud risk."}],"lastReviewed":"2026-07-05"},{"slug":"letter-demands-repayment-of-overpaid-benefits-i-never-got","url":"https://scamencyclopedia.org/questions/letter-demands-repayment-of-overpaid-benefits-i-never-got","question":"I received a letter demanding repayment of overpaid benefits, but I don't remember getting extra money - is this fake?","shortAnswer":"It could be a genuine overpayment notice or a scam impersonating one - never pay or provide bank details from the letter alone; verify through your official benefits account first.","explanation":"Genuine overpayment notices do exist - benefits agencies sometimes overpay due to administrative errors, delayed reporting of a change in circumstances, or miscalculation, and they do have the legal right to recover this money. However, scammers have learned to imitate these letters closely, using similar formatting, agency logos, and official-sounding reference numbers, then directing repayment to a bank account or payment method that is not the agency's genuine channel.\n\nThe way to tell them apart is not the letter's appearance but the payment instructions and contact details. A genuine notice will direct you to pay through the agency's standard, published payment channels (their official website, a cheque payable to the department, or a phone number you can independently verify), and will explain your right to appeal or request a breakdown of the alleged overpayment. A scam version often includes a direct bank transfer detail, a QR code, or a link to a fake payment portal, and discourages you from calling to check.\n\nIf you get a letter like this, log into your official benefits account to see if any overpayment is recorded there, or call the agency using a number from their official website rather than the letter, before paying anything.","redFlags":["Payment instructions direct you to an unfamiliar bank account or a link/QR code rather than official payment channels","No option shown to dispute, appeal, or request a breakdown of the overpayment","Unusually aggressive threats of legal action for a first notice","Contact number in the letter doesn't match the agency's published number","You have no record of any overpayment appearing in your official online account","Requests payment via gift cards, cryptocurrency, or wire transfer"],"whatToDoNow":["Log into your official benefits account to check for any recorded overpayment","Call the agency using a number from their official website, not the letter itself","Do not pay via any link, QR code, or bank details printed only in the letter","Ask for a written breakdown of how the overpayment was calculated","Request information on your right to appeal or set up a repayment plan if the debt is genuine","Report the letter as a suspected scam if the agency confirms no overpayment exists"],"faq":[{"question":"Are overpayment notices ever real?","answer":"Yes, genuine overpayments happen due to administrative errors or delayed reporting - the key is to verify through official channels before paying anything."},{"question":"What if the letter has my correct address and National Insurance number?","answer":"Scammers can source this information through data breaches or by intercepting mail - accurate personal details don't confirm the letter is genuine."}],"lastReviewed":"2026-07-05"},{"slug":"facebook-ad-promises-guaranteed-disability-approval","url":"https://scamencyclopedia.org/questions/facebook-ad-promises-guaranteed-disability-approval","question":"A Facebook ad promises guaranteed approval for disability benefits if I use their service - is this trustworthy?","shortAnswer":"Be very skeptical - no one can 'guarantee' approval for a disability or health-related benefit, since eligibility is decided by the agency's own medical and financial assessment.","explanation":"These ads typically appear on social media promising to get you approved for disability, incapacity, or health-related benefits quickly and with a 'guarantee,' often for an upfront fee or a percentage of your backdated award. Some are run by unaccredited 'consultants' who submit exaggerated or template-based claims on your behalf, which can trigger a fraud investigation later even if you didn't personally write the false statements.\n\nNo third party can guarantee an outcome for a disability benefit claim, because eligibility is assessed by the government agency based on medical evidence, functional assessments, and your specific circumstances - not by how the application is worded or who submits it. Legitimate, accredited disability advocates and welfare rights services do exist and can genuinely help you present your case clearly and gather the right medical evidence, but they do not promise guaranteed outcomes, and reputable non-profit services are often free or low-cost.\n\nBefore engaging any paid disability claims service, check whether they are accredited by a recognized professional body in your country, read independent reviews outside of the company's own advertising, and be wary of any fee structure tied to a percentage of your award, which can create an incentive to inflate your claim.","redFlags":["Uses the word 'guaranteed' for a disability or health benefit outcome","Charges a percentage of your backdated award as a fee","Not listed with any recognized accreditation or professional regulatory body","Encourages exaggerating symptoms or providing incomplete medical history","Pressures you to sign up quickly with limited-time offers","Reviews only exist on the company's own website or ads, not independent platforms"],"whatToDoNow":["Research the company's accreditation and independent reviews before paying anything","Contact a free, accredited welfare rights or disability advocacy service as a first option","Avoid any service that charges based on a percentage of your award","Never let anyone else submit exaggerated or false medical information on your behalf","Ask the agency directly what evidence is needed for your specific claim type","Report ads that make false guarantee claims to the social media platform"],"faq":[{"question":"Can a paid consultant improve my chances of approval?","answer":"Accredited advocates can help you present accurate evidence more clearly, but no one can guarantee a specific outcome from the agency's own assessment."},{"question":"Are free disability advocacy services any good?","answer":"Many free, accredited services have experienced caseworkers and are often more reliable than paid 'guarantee' services, without the fraud risk."}],"lastReviewed":"2026-07-05"},{"slug":"asked-for-remote-access-to-fix-benefits-account-error","url":"https://scamencyclopedia.org/questions/asked-for-remote-access-to-fix-benefits-account-error","question":"Someone claiming to be from the benefits office asked me to install remote access software to fix an account error - should I do it?","shortAnswer":"No. Never install remote access software at the request of an unsolicited caller claiming to be from a government benefits agency - this is a well-known scam to take control of your device and drain your bank accounts.","explanation":"In this scam, a caller claims there is an error, duplicate payment, or security issue with your benefits account that needs to be fixed remotely, and talks you through installing a remote access tool such as a screen-sharing or remote desktop app. Once installed, the scammer can see everything on your screen, including online banking logins, and can take control of your mouse and keyboard to move money out of your accounts directly, often disguising the transfer as 'reversing an error payment.'\n\nGovernment benefits agencies do not fix account issues by remotely accessing your personal computer or phone - any account correction is handled internally on their systems, not on your device. The remote access request is really a way to bypass your bank's fraud protections by having you, the account holder, appear to authorize the transaction yourself while the scammer operates your device in real time.\n\nIf anyone claiming to be from a government agency, bank, or tech support asks you to install remote access software, end the call and do not install anything. If you have already installed such software, disconnect from the internet, uninstall it, and contact your bank immediately to check for unauthorized transactions.","redFlags":["Asks you to download and install a remote access or screen-sharing app","Claims an account error can only be fixed by them accessing your device","Instructs you to log into your bank account while they are watching your screen","Creates urgency around a supposed duplicate or erroneous payment","Discourages you from hanging up and calling the agency back independently","Asks you to move money to a 'safe' or 'holding' account during the call"],"whatToDoNow":["Do not install any remote access software at the request of an unsolicited caller","Hang up immediately if asked to do this","If you already installed it, disconnect your device from the internet and uninstall the software","Contact your bank immediately using the number on your card to check for unauthorized transactions","Change passwords for your banking and benefits accounts from a different, clean device","Report the incident to your bank's fraud team and national fraud reporting center"],"faq":[{"question":"Do any legitimate services ever use remote access?","answer":"Some legitimate tech support interactions use remote access, but a government benefits agency has no reason to remotely access your personal device to fix an account issue."},{"question":"What should I do right after realizing I was scammed this way?","answer":"Disconnect from the internet, uninstall the software, and call your bank immediately - speed matters because funds can be moved quickly."}],"lastReviewed":"2026-07-05"},{"slug":"online-form-asks-for-ssn-to-check-stimulus-eligibility","url":"https://scamencyclopedia.org/questions/online-form-asks-for-ssn-to-check-stimulus-eligibility","question":"A website asks for my Social Security number just to 'check my eligibility' for a stimulus payment - is that safe?","shortAnswer":"No - legitimate eligibility checks for government stimulus or relief payments do not require you to submit your full Social Security number on an unofficial third-party website.","explanation":"These scam sites typically appear after news coverage of a real or rumored stimulus program, relief payment, or one-off government support scheme. They present a simple-looking 'eligibility checker' form that asks for your full Social Security number, date of birth, and sometimes bank details, supposedly just to confirm whether you qualify. In reality, the site has no connection to the government and exists purely to harvest this data for identity theft or to sell it to other criminals.\n\nGenuine eligibility checks, when they exist at all, are conducted directly through the official government website, and generally do not require you to submit your full Social Security number to a third-party site just to see if you 'qualify' - actual payment, if due, is typically calculated automatically from your existing tax or benefits records rather than requiring you to self-report your SSN to a checker tool.\n\nBefore entering sensitive information into any eligibility checker, verify the website's domain matches the official government domain exactly, and be suspicious of any site that appeared via a social media ad or unsolicited link rather than being found by navigating the government's own official site.","redFlags":["Requests your full Social Security number just to 'check eligibility'","Website domain doesn't match the official government domain","Found via a social media ad or unsolicited link rather than the government's own site","Asks for bank account details before confirming any actual payment is due","Uses urgency about limited-time stimulus programs","Poor website design or spelling errors inconsistent with official government sites"],"whatToDoNow":["Do not enter your Social Security number on any third-party eligibility checker","Navigate directly to the official government website by typing the address yourself","Verify any stimulus or relief program is real by checking official government news sources","Close the tab and do not submit any information if the domain looks unfamiliar","Report the website to your national fraud or consumer protection agency","Monitor your credit report if you already submitted your SSN on such a site"],"faq":[{"question":"How can I verify a stimulus program is genuine?","answer":"Check official government news releases and the government's own website directly, rather than relying on ads or third-party sites."},{"question":"What if I already entered my SSN on a suspicious site?","answer":"Monitor your credit report for unusual activity, consider a credit freeze, and report the incident to your national fraud reporting center."}],"lastReviewed":"2026-07-05"},{"slug":"recruiter-wants-my-benefits-account-for-third-party-job","url":"https://scamencyclopedia.org/questions/recruiter-wants-my-benefits-account-for-third-party-job","question":"A 'job agency' wants me to let them manage my benefits account log-in while I look for work - is that okay?","shortAnswer":"No - never hand over your benefits account username and password to any third party, including a job agency, even one working alongside a genuine welfare-to-work program.","explanation":"Some scams target people navigating employment support or welfare-to-work programs, where a third party posing as a job coach, recruiter, or 'employment partner' asks for direct access to your online benefits account, claiming it will let them 'update your job search log' or 'apply for extra support' on your behalf. Once they have your login, they can change your bank details to redirect payments, alter your claim information, or make fraudulent declarations in your name that you become responsible for.\n\nGenuine employment support programs work alongside your claim using their own case management systems and do not need your personal login credentials to the government's benefits portal - any legitimate coordination between a job program and a benefits agency happens through official data-sharing agreements between the organizations, not by an individual coach logging into your personal account.\n\nIf a job agency, career coach, or anyone else asks for your benefits account password, decline and instead ask them what specific information they need, then provide only printouts or screenshots of the relevant page rather than live account access.","redFlags":["Asks for your benefits account username and password directly","Claims they need to 'update your account' or 'log your job search' on your behalf","Not a recognized, contracted partner of the official benefits agency","Pressures you to share credentials quickly to avoid losing support","Wants ongoing access rather than a one-time verification","Discourages you from asking the benefits agency to confirm the arrangement"],"whatToDoNow":["Never share your benefits account username or password with any third party","Ask exactly what information is needed and provide only screenshots or printouts instead","Verify with the benefits agency directly whether the job program is an official contracted partner","Check your benefits account regularly for unauthorized changes to your bank details or claim information","Change your password immediately if you already shared it","Report the request to the benefits agency's fraud line if it seems suspicious"],"faq":[{"question":"Do legitimate welfare-to-work programs ever need my login?","answer":"No - legitimate programs coordinate with the benefits agency through official channels and do not need your personal account credentials."},{"question":"What should I do if I already shared my password?","answer":"Change it immediately, review your account for any unauthorized changes to bank details, and report the incident to the agency."}],"lastReviewed":"2026-07-05"},{"slug":"voicemail-claims-i-owe-money-for-fraud-investigation","url":"https://scamencyclopedia.org/questions/voicemail-claims-i-owe-money-for-fraud-investigation","question":"I got a voicemail saying I'm under investigation for benefits fraud and must call back immediately - is this real?","shortAnswer":"Treat it as a likely scam - genuine fraud investigations are conducted through formal written correspondence and scheduled interviews, not urgent voicemail threats demanding an immediate callback.","explanation":"This scam uses fear of a fraud accusation to panic people into calling back a number controlled by the scammer, where they are then pressured to 'clear their name' by making an immediate payment, providing banking details, or purchasing gift cards. The voicemail is often deliberately vague about the specifics of the alleged fraud, relying on the shock of the accusation to override the recipient's usual caution.\n\nReal benefits fraud investigations are formal processes. They typically begin with a written letter inviting you to a scheduled interview (sometimes called an interview under caution), explain your rights including the right to bring a representative, and never resolve through an on-the-spot payment over the phone. No genuine investigator asks you to pay money to avoid prosecution - that would itself be a form of corruption, not standard legal process.\n\nIf you receive a voicemail like this, do not call the number left in the message. Instead, if you have a genuine ongoing claim, check your online account and any official written correspondence, or call the agency's official number directly to ask if any investigation exists.","redFlags":["Voicemail alone with no prior written correspondence about a formal investigation","Demands an immediate callback to a number not found on official agency literature","Any suggestion that payment can resolve or stop a fraud investigation","Vague description of the alleged fraud without specific claim details","Threatens immediate arrest if you don't call back right away","Caller pressures you not to seek advice or a second opinion before responding"],"whatToDoNow":["Do not call the number left in the voicemail","Check your official benefits account and postal correspondence for any genuine notice","Call the agency's official number directly to ask if any investigation is on file","Never make a payment over the phone to 'resolve' an investigation","Seek advice from a welfare rights service or solicitor if a genuine investigation is confirmed","Report the voicemail to your national fraud reporting center"],"faq":[{"question":"Do real fraud investigations start with a voicemail?","answer":"No - genuine investigations typically begin with formal written correspondence, not an urgent voicemail demanding a callback."},{"question":"Can I pay money to make a fraud investigation go away?","answer":"No legitimate process allows this - any such offer is itself part of the scam."}],"lastReviewed":"2026-07-05"},{"slug":"app-promises-to-maximize-my-benefits-for-subscription-fee","url":"https://scamencyclopedia.org/questions/app-promises-to-maximize-my-benefits-for-subscription-fee","question":"An app charges a monthly subscription and promises to 'maximize' my government benefits automatically - worth it?","shortAnswer":"Be cautious - legitimate benefits calculators and entitlement checks are typically free through government or accredited charity services; a paid subscription app claiming automatic maximization adds risk with little proven benefit.","explanation":"These apps market themselves as a convenient way to ensure you're claiming 'everything you're entitled to,' charging an ongoing subscription fee for access to an automated calculator or claims assistant. Some are simply repackaged versions of free government entitlement calculators behind a paywall, adding no real value beyond what's already available for free. Others go further and request access to your bank accounts, benefits login, or personal documents to 'automate' claims on your behalf, which introduces the same risks as any third party holding your credentials.\n\nMost countries provide free, official benefits calculators, and free accredited charities and welfare rights organizations offer entitlement checks and application help at no cost. A paid app charging a recurring fee for functionally similar service should be compared carefully against these free alternatives, and any app requesting direct access to your bank or benefits account credentials should be treated with the same caution as any other third party asking for your login details.\n\nBefore subscribing, check whether the app is affiliated with or endorsed by any recognized government or charity body, read independent app store reviews rather than the app's own marketing, and calculate whether the subscription cost outweighs any benefit compared to free official tools.","redFlags":["Charges an ongoing subscription for a service available free from government or charity sources","Requests direct access to your bank account or benefits login credentials","No verifiable affiliation with a recognized government or charity body","Marketing emphasizes urgency or 'don't miss out on money you're owed'","Reviews are mostly on the app's own site rather than independent app stores","Unclear how to cancel the subscription once started"],"whatToDoNow":["Check for free official government benefits calculators before paying for an app","Contact a free, accredited charity or welfare rights service for entitlement checks","Avoid apps that request your bank or benefits account login credentials","Read independent app store reviews, not just the app's own testimonials","Check the cancellation process before subscribing","Cancel and dispute charges if the app turns out to provide no real added value"],"faq":[{"question":"Are all paid benefits apps scams?","answer":"Not necessarily, but many duplicate free government or charity services at a cost, so it's worth comparing before subscribing."},{"question":"What should I check before giving an app my details?","answer":"Verify any claimed affiliation with government or recognized charities directly with those organizations, rather than trusting the app's own claims."}],"lastReviewed":"2026-07-05"},{"slug":"notice-my-food-assistance-card-was-suspended-click-link","url":"https://scamencyclopedia.org/questions/notice-my-food-assistance-card-was-suspended-click-link","question":"I got a text that my food assistance card (SNAP/EBT-style) was suspended and I need to click a link to reactivate it - is this a scam?","shortAnswer":"Yes, this is a very common phishing scam targeting food assistance recipients - the agency will not text you a link to 'reactivate' your card.","explanation":"This scam specifically targets recipients of food assistance or similar support cards, sending a text that claims the card has been suspended, locked, or flagged for suspicious activity, with a link to 'reactivate' it. The link leads to a fake page mimicking the official portal, designed to capture your card number, PIN, and personal identifying information, which is then used to drain the actual benefit balance or commit further identity fraud.\n\nFood assistance and similar benefit card issues are handled through the official agency's own customer service line or app, not through links sent via unsolicited text. If your card were genuinely locked due to suspected fraud, you would typically find this out when trying to use it at a retailer, or by checking your balance through the official app or phone line, not from an unprompted text with a reactivation link.\n\nIf you receive a text like this, do not click the link. Instead, check your card balance and status directly through the official app or by calling the number on the back of your card or your program's official phone line.","redFlags":["Unsolicited text claiming your food assistance card is suspended","Link asks for your full card number and PIN to 'reactivate'","Urgent language about losing access to food benefits","Sender number is an ordinary mobile number rather than the program's official short code","Link domain doesn't match the official program or state agency website","Message arrives close to your usual benefit deposit date, exploiting anxiety about timing"],"whatToDoNow":["Do not click the link or enter your card number and PIN anywhere","Check your card balance and status through the official app or by calling the number on the back of the card","Report the text as spam/phishing through your phone's reporting feature","If you already entered your PIN, call the official card issuer immediately to freeze and reissue the card","Monitor your balance closely over the following days for unauthorized withdrawals","Report the incident to the benefits agency's fraud line"],"faq":[{"question":"How would I really know if my card is locked?","answer":"You would typically discover this when trying to use the card at a store, or by checking your balance and status through the official app or phone line, not via an unsolicited text link."},{"question":"What if I already gave out my PIN?","answer":"Call the official card issuer immediately to report it and request the card be frozen and reissued."}],"lastReviewed":"2026-07-05"},{"slug":"email-asks-me-to-verify-child-benefit-payment-details","url":"https://scamencyclopedia.org/questions/email-asks-me-to-verify-child-benefit-payment-details","question":"An email asks me to 'verify' my child benefit payment details or my payments will stop - what should I check?","shortAnswer":"Check the sender's actual email address and the link destination before doing anything - this is a common phishing template used against parents receiving child-related benefits.","explanation":"This scam targets parents and caregivers receiving child benefit or similar family support payments, claiming that a routine 'verification' is required to keep payments flowing. The email usually contains a link to a fake login page that mimics the real benefits portal, aiming to capture your account credentials, banking details, and sometimes your children's personal information, which can be used for identity theft affecting the child later in life.\n\nGenuine agencies occasionally do require periodic reviews of family circumstances for benefits tied to children, such as confirming a child still lives with you or is still in education, but these are typically initiated through your online account directly or through a formal letter, not exclusively through an emailed link with an urgent deadline. Always check the sender's actual email address (not just the display name, which can be faked) and hover over links to see the true destination before clicking.\n\nIf in doubt, log into your benefits account directly by typing the address into your browser rather than clicking the email link, and complete any genuine verification requirement there.","redFlags":["Urgent deadline to 'verify' details or payments stop","Display name looks official but the actual email address doesn't match the agency's domain","Link destination (visible by hovering) doesn't match the official government domain","Requests children's full names, dates of birth, and National Insurance/SSN-equivalent numbers","Poor grammar or formatting inconsistent with official communications","No option to verify through your existing online account instead of the email link"],"whatToDoNow":["Check the sender's actual email address, not just the display name","Hover over any link to check its real destination before clicking","Log into your benefits account directly via the official website instead of using the email link","Do not provide your children's personal information via email links","Report the email as phishing to your email provider","Contact the agency directly if you're unsure whether a genuine review is due"],"faq":[{"question":"Do agencies ever ask for verification of child benefit details?","answer":"Periodic reviews do happen, but they're normally handled via your online account or formal letter, and you should always verify independently rather than trusting an email link alone."},{"question":"Why would scammers want my child's information?","answer":"Children's personal details, including their SSN or National Insurance number, can be used for identity theft that may go undetected for years since children don't typically check their own credit."}],"lastReviewed":"2026-07-05"},{"slug":"person-claims-they-can-backdate-my-pension-for-fee","url":"https://scamencyclopedia.org/questions/person-claims-they-can-backdate-my-pension-for-fee","question":"Someone offered to get my state pension backdated for a large lump sum, for an upfront fee - is this legitimate?","shortAnswer":"Be very cautious - genuine pension backdating and underpayment corrections are handled directly by the pension agency at no cost, and anyone charging an upfront fee to 'unlock' a lump sum should be independently verified before you pay anything.","explanation":"This scam often targets retirees, particularly around periods when governments announce reviews of historic pension underpayments (which do happen due to administrative errors affecting certain groups). Scammers use awareness of these genuine review programs to approach people claiming they can secure a backdated lump sum faster or in a larger amount, for an upfront fee, or by requesting your pension account login and bank details to 'process the claim' on your behalf.\n\nWhen governments run genuine pension correction programs, the checks and back payments are usually processed automatically or through a straightforward free application directly with the pension agency, not through a third party charging a fee to expedite or unlock the money. Anyone asking for payment upfront to secure a backdated pension amount, or asking for your online pension account credentials, should be treated as a serious red flag.\n\nBefore engaging with anyone offering this kind of help, contact the official pension agency directly to ask whether a correction program applies to your situation and how to apply for free.","redFlags":["Requests an upfront fee to 'unlock' or expedite a backdated pension payment","Asks for your pension account login credentials or bank details","Claims special access or insider knowledge not available by contacting the agency directly","Uses news coverage of genuine pension correction programs to add false credibility","Pressures you to act quickly before a supposed deadline","Not a recognized or accredited financial or welfare rights advisor"],"whatToDoNow":["Contact the official pension agency directly to check if any correction program applies to you","Never pay an upfront fee to access a pension correction or backdated payment","Do not share your pension account login or bank details with a third party","Verify any advisor's accreditation with the relevant professional regulatory body","Ask for everything in writing and take time to review before agreeing to anything","Report suspicious offers to your national fraud reporting center"],"faq":[{"question":"Do pension underpayment corrections really happen?","answer":"Yes, administrative errors affecting certain groups have led to genuine correction programs in various countries, but these are handled directly and freely by the pension agency."},{"question":"Should I ever pay someone to claim a backdated pension for me?","answer":"You should verify directly with the pension agency first - legitimate corrections don't require an upfront fee to a third party."}],"lastReviewed":"2026-07-05"},{"slug":"housing-benefit-landlord-asks-me-to-overstate-rent","url":"https://scamencyclopedia.org/questions/housing-benefit-landlord-asks-me-to-overstate-rent","question":"My landlord wants me to sign a tenancy agreement showing higher rent than I actually pay so I get more housing benefit - is that risky?","shortAnswer":"Yes, this is benefits fraud - you are legally responsible for the accuracy of your claim, and both you and the landlord could face repayment demands, penalties, or prosecution if discovered.","explanation":"In this scheme, a landlord suggests inflating the rent figure on a tenancy agreement above what you actually pay, so that your housing benefit or housing element of a benefit claim is calculated on the higher, false amount. Sometimes the landlord proposes splitting the extra benefit received with you, or simply pockets all of it while you take on the legal risk of having submitted false information.\n\nHousing benefit and rent support calculations rely on the actual rent charged being accurately reported. Submitting a tenancy agreement that misstates the real rent, even if the landlord drafted it, constitutes fraud on the part of the claimant who signs and submits the form, since you are certifying the information is true. If discovered - which can happen through landlord-side records, bank statement cross-checks, or tenant reporting - you can be required to repay the full overpaid amount and may face fraud charges, while the landlord who orchestrated it faces separate liability.\n\nIf your rent situation makes you eligible for a genuine increase in support, such as a real rent increase or additional housing costs, that should be reported accurately, and any confusion about your entitlement should be checked with the benefits agency or a free welfare rights advisor rather than resolved by falsifying paperwork.","redFlags":["Landlord suggests a tenancy agreement showing rent higher than actually charged","Offer to split the extra benefit received between landlord and tenant","Pressure to sign quickly without an accurate written record of true rent paid","Verbal assurances that 'everyone does this' or it's low-risk","No legitimate paper trail matching the real amount paid each month","Reluctance from the landlord to report a genuine rent increase through proper channels"],"whatToDoNow":["Decline to sign any tenancy agreement misstating your actual rent","Report your true rent amount accurately on any benefits claim","If you've already signed a false agreement, contact the agency to correct the record before an investigation starts","Seek advice from a free welfare rights or tenancy advice service if you're unsure about your entitlement","Keep your own accurate records of rent payments (bank statements, receipts)","Report a landlord pressuring you into this scheme to the relevant housing or benefits authority"],"faq":[{"question":"What if the landlord takes all the extra money and I get none?","answer":"You are still legally responsible for the false claim you signed, even if you received no financial benefit from the arrangement."},{"question":"Is there a legitimate way to get more housing support?","answer":"Yes - report your actual rent and circumstances accurately and consult a free welfare rights advisor about what support you're genuinely entitled to."}],"lastReviewed":"2026-07-05"},{"slug":"cold-caller-offers-to-review-my-benefits-entitlement-free","url":"https://scamencyclopedia.org/questions/cold-caller-offers-to-review-my-benefits-entitlement-free","question":"A cold caller offered a 'free benefits entitlement review' and now wants my bank details to set up a direct debit - what's going on?","shortAnswer":"This is likely a fee-charging scheme disguised as a free service - the 'free review' is often a hook to sign you up for an ongoing paid subscription or to harvest your banking details.","explanation":"Cold callers offering a 'free' benefits check sometimes operate a legitimate but expensive paid subscription service behind the free offer, where after the initial 'free' review they sign you up, often verbally with minimal clarity, to a recurring monthly charge for ongoing 'benefits maximization' services. Others are outright scams that use the free review as a pretext to obtain your bank account details directly under the guise of setting up a refund or benefit payment, then use those details to set up unauthorized direct debits or make fraudulent transactions.\n\nGenuine, free benefits entitlement checks are widely available from accredited charities, welfare rights services, and official government calculators, and none of these require your bank details to perform a check - a bank account is only relevant once an actual benefit payment is being set up, and only through the official agency itself, not a cold-calling third party.\n\nIf you receive a call like this, do not provide bank details over the phone. If you want an entitlement check, contact a recognized, accredited charity or use an official government calculator directly rather than proceeding with an unsolicited caller.","redFlags":["Unsolicited cold call offering a 'free' benefits review","Asks for bank account or card details during the 'free' review","Vague or fast-talked explanation of any fees involved","Pressure to agree verbally to a direct debit during the call","No clear, recognized accreditation for the calling organization","Reluctance to send written terms before you agree to anything"],"whatToDoNow":["Do not give bank details to an unsolicited caller offering a 'free' review","Ask for everything in writing before agreeing to anything","Hang up and use a recognized, accredited charity or official government calculator instead","Check your bank statements for unexpected direct debits if you've already shared details","Contact your bank to cancel any unauthorized direct debit and report it as fraud","Report the caller to your national fraud reporting center or consumer protection agency"],"faq":[{"question":"Are free benefits checks always a scam?","answer":"No, genuinely free checks exist through accredited charities and government tools - the scam risk is specifically in unsolicited cold calls that ask for bank details."},{"question":"What if I already gave my bank details?","answer":"Contact your bank immediately to check for and cancel any unauthorized direct debits, and monitor your account closely."}],"lastReviewed":"2026-07-05"},{"slug":"scammer-posing-as-caseworker-wants-video-call-with-id","url":"https://scamencyclopedia.org/questions/scammer-posing-as-caseworker-wants-video-call-with-id","question":"Someone posing as my benefits caseworker wants a video call where I show my ID and bank card - is this normal procedure?","shortAnswer":"This is not standard procedure and is very likely an identity theft attempt - legitimate caseworkers do not need you to hold up your bank card on camera.","explanation":"This scam has emerged as video calling has become more common for remote appointments. A caller claiming to be your assigned caseworker, sometimes after contacting you out of the blue rather than through a scheduled appointment you initiated, asks to verify your identity via video call by having you hold up your ID document and bank card to the camera. This gives the scammer everything needed to commit identity theft and access your bank account: your face matched to your ID, your card number, and often the security code visible on the back.\n\nLegitimate identity verification for benefits claims is done through secure official channels, such as uploading documents to a verified government portal, visiting an office in person, or through identity verification services integrated into the official application process. A genuine caseworker would never need to see your bank card details on camera during a video call, since your bank details are provided separately through secure, direct account-linking with the agency, not by displaying the physical card.\n\nIf you receive a request like this, decline to show your bank card, and verify the caseworker's identity by calling the agency's official number and asking to confirm the appointment and the staff member's name before proceeding with any identity verification.","redFlags":["Unscheduled or unexpected video call claiming to be from a caseworker","Requests you hold up your bank card, including the security code, on camera","Asks for a photo or video of your ID document during an informal-feeling call","No prior appointment confirmation through your official account or by post","Caller pressures you to complete the verification immediately","Unable or unwilling to confirm their identity when you call the agency's official number to check"],"whatToDoNow":["Decline to show your bank card or its security code on any video call","Hang up and call the agency's official number to confirm whether the appointment and caseworker are genuine","Only use the agency's official, secure document upload system for identity verification","Ask for the caseworker's name and employee reference and verify it independently","Report the call to the agency's fraud or security team if it turns out to be unauthorized","Monitor your bank account closely if you already showed your card details"],"faq":[{"question":"Do genuine caseworkers ever use video calls?","answer":"Some agencies do use video appointments, but these are typically scheduled in advance and confirmed through your official account, and never require showing your bank card on camera."},{"question":"What if they already knew my case details?","answer":"Scammers can obtain case details from data breaches, so accurate information alone doesn't confirm they're a genuine caseworker."}],"lastReviewed":"2026-07-05"},{"slug":"post-says-ive-won-a-cost-of-living-payment-claim-now","url":"https://scamencyclopedia.org/questions/post-says-ive-won-a-cost-of-living-payment-claim-now","question":"A social media post says I've 'won' a cost-of-living support payment and just need to click to claim it - what's the catch?","shortAnswer":"There's no catch to find because there's no prize - genuine cost-of-living or energy support payments are not distributed through social media 'claim now' posts or competitions.","explanation":"These posts, often shared widely and designed to look like they're spreading organically, claim you've been selected or have 'won' a cost-of-living, energy, or fuel support payment, and direct you to click a link to claim it. The link usually leads to a data-harvesting form asking for personal and banking details, or to a page pushing an unrelated product, subscription trap, or further phishing attempt.\n\nGenuine cost-of-living and energy support payments, where they exist, are usually paid automatically to eligible recipients based on existing benefit or tax records, or require an application directly through the official government website - they are never distributed as a 'win' via a social media post that anyone can click to claim regardless of eligibility. The framing as something you've 'won,' rather than something you may be automatically eligible for, is itself a strong sign of a scam, since genuine support isn't a prize or lottery.\n\nIf you see a post like this, check the official government website directly for information about any real cost-of-living support scheme rather than clicking the link, and consider reporting or ignoring the post rather than sharing it further.","redFlags":["Frames a government support payment as something you've 'won'","Shared widely on social media rather than announced through official government channels","Link leads to a form asking for banking or personal details unrelated to any real application process","No verifiable connection to an actual named, official government program","Encourages you to share or tag others to 'spread the good news'","Uses countdown timers or claims of limited availability"],"whatToDoNow":["Do not click the link or enter any personal or banking information","Check the official government website directly for real cost-of-living support programs","Do not share the post further, even if you're unsure","Report the post to the social media platform as a scam","Warn friends or family who may have seen or shared it","If you clicked and entered details, monitor your accounts and consider a credit freeze"],"faq":[{"question":"Do real government support payments ever work like a 'win'?","answer":"No - genuine payments are either automatic based on existing records or require a direct application through official government channels, never a social media claim process."},{"question":"Is it safe to just look at the post without clicking?","answer":"Viewing the post itself is generally safe; the risk comes from clicking the link and entering personal information on the destination page."}],"lastReviewed":"2026-07-05"},{"slug":"elderly-parent-getting-repeated-calls-about-pension-credit","url":"https://scamencyclopedia.org/questions/elderly-parent-getting-repeated-calls-about-pension-credit","question":"My elderly parent keeps getting calls about 'unclaimed pension credit' - how do I help them tell if it's real?","shortAnswer":"Help them avoid discussing or confirming personal details on unsolicited calls, and instead check pension credit or similar top-up entitlement directly through the official government website or a trusted advisor together.","explanation":"Older people are frequently targeted with calls about 'unclaimed' pension credit, low-income top-ups, or similar means-tested support, because these programs genuinely exist and are known to be under-claimed, which makes the pretext believable. Scammers exploit this by calling to say they can help 'process' a claim, often asking for bank details, a one-off fee, or remote access to a device to 'submit the application' for the person.\n\nGenuine pension credit or similar low-income support applications are made directly with the government agency, by phone, post, or online, entirely free of charge, and do not require a third-party caller's help or payment. If your parent is potentially eligible, the safest approach is to sit down with them and check eligibility directly on the official government website or by calling the agency's own published number, rather than proceeding with any unsolicited caller.\n\nIt's also worth talking to older relatives generally about this specific pattern - a caller referencing a real, well-known benefit to sound credible - so they feel comfortable hanging up on unsolicited calls about entitlements without feeling rude or worried about missing out on money they're owed.","redFlags":["Unsolicited call about 'unclaimed' pension credit or similar entitlement","Asks for bank details or a fee to 'process' the application","Requests remote access to the person's computer or phone","Creates urgency about a limited window to claim","Caller discourages checking with family or calling the agency back independently","Repeated calls if the first one didn't succeed"],"whatToDoNow":["Encourage your parent to hang up on unsolicited calls about benefits and check independently","Sit down together and check eligibility on the official government website or by calling the agency directly","Never share bank details or pay a fee to an unsolicited caller for this purpose","Set up call-blocking or nuisance-call screening on their phone if calls are frequent","Report repeated scam calls to your national fraud or nuisance-call reporting service","Check in periodically about any new calls they've received"],"faq":[{"question":"Is pension credit or similar low-income top-up support real?","answer":"Yes, these programs genuinely exist in many countries and are often under-claimed, which is exactly why scammers use them as a believable pretext."},{"question":"How can my parent apply if they really are eligible?","answer":"Directly through the official government website or by calling the agency's published number - there's no cost and no need for a third-party caller's help."}],"lastReviewed":"2026-07-05"},{"slug":"text-from-tax-refund-linked-to-benefits-overpayment","url":"https://scamencyclopedia.org/questions/text-from-tax-refund-linked-to-benefits-overpayment","question":"I got a text about a tax refund connected to a benefits overpayment correction - is this linked scam real?","shortAnswer":"Treat any unsolicited text linking a tax refund to a benefits correction as a scam - these are typically combined phishing attempts designed to seem extra credible by referencing two systems at once.","explanation":"This scam combines two common phishing themes - tax refunds and benefits overpayments - into one message, claiming that a correction to your benefits has resulted in a tax refund being due, and that you need to click a link to claim it. The added complexity is meant to make the message seem more sophisticated and believable than a simple 'you have a refund' text, since it references an interaction between two different government systems that sounds plausible to someone unfamiliar with how they actually work.\n\nIn reality, tax and benefits agencies do not send unsolicited text messages linking refunds to benefit corrections with a click-through claim link. If any adjustment between your tax and benefits situation genuinely occurred, it would appear in your official online accounts with both agencies, or arrive via formal written correspondence, not a text message requiring you to click a link and enter card details to 'receive' the refund.\n\nAs with other refund and benefits phishing texts, the safest approach is to ignore the link entirely and check your official tax and benefits accounts directly, or call the relevant agencies using numbers from their official websites.","redFlags":["Unsolicited text combining tax refund and benefits overpayment language","Link requests card details to 'receive' the refund","Urgent deadline to claim before the refund is 'forfeited'","No corresponding record of any adjustment in your official online tax or benefits accounts","Sender number is a regular mobile number, not an official short code","Message includes a tracking-style link shortener rather than an official domain"],"whatToDoNow":["Do not click the link or provide card details to 'receive' a refund","Check your official tax and benefits accounts directly for any real adjustment","Call the relevant agencies using numbers from their official websites if unsure","Report the text as spam/phishing through your phone's reporting feature","Delete the message once reported","Warn others if you notice this specific combined-scam wording circulating"],"faq":[{"question":"Can a benefits correction really affect my taxes?","answer":"In some cases benefit changes can have tax implications, but any genuine adjustment would show in your official accounts or arrive by formal letter, not an unsolicited text with a claim link."},{"question":"Why do scammers combine two different government systems in one message?","answer":"Referencing an interaction between two real systems makes the story feel more sophisticated and less like an obvious generic scam text."}],"lastReviewed":"2026-07-05"},{"slug":"asked-to-use-my-benefits-card-to-help-someone-cash-out","url":"https://scamencyclopedia.org/questions/asked-to-use-my-benefits-card-to-help-someone-cash-out","question":"Someone offered me money to let them use my benefits card or account to move funds through - is this dangerous?","shortAnswer":"Yes, this is a form of money muling using a benefits account, and it can expose you to fraud charges, loss of your own benefits, and account closure, even though someone else is directing the scheme.","explanation":"In this scheme, someone offers you a payment in exchange for letting them use your benefits card, bank account linked to your benefits, or your account login to move money through it, often framed as a simple favor or a way to earn quick cash. In reality, this is frequently used to launder proceeds from other scams or fraud, with your account acting as a pass-through point that distances the money from the original criminal source.\n\nBecause the account is in your name, you bear the legal and financial risk: your bank can freeze or close the account for suspicious activity, the benefits agency can suspend your payments pending investigation, and you can face fraud or money laundering charges for knowingly allowing your account to be used this way, regardless of the small payment you received in exchange. Claiming you didn't know the money's origin does not reliably protect you once a pattern of unusual transactions linked to your account is investigated.\n\nIf you're approached with an offer like this, decline it. If you're already involved, stop immediately, do not process any further transactions, and consider seeking advice about how to report your involvement, since coming forward proactively is generally viewed far more favorably than being identified through an investigation.","redFlags":["Offered payment for allowing someone to use your account or benefits card","Asked to move money through your account for a supposed employer, 'client,' or online contact","Instructed to withdraw cash and hand it over or forward it elsewhere","Vague or evasive explanation of where the money actually comes from","Pressure to act quickly or keep the arrangement secret from family","Involves receiving unexplained deposits you didn't expect"],"whatToDoNow":["Decline any offer to use your account or benefits card for someone else's money","Stop immediately if you've already started and do not process further transactions","Contact your bank to explain the situation and ask about next steps","Consider reporting your involvement proactively to fraud authorities, as this is generally viewed more favorably than being discovered","Do not withdraw or forward any further unexplained funds","Seek legal advice if you're concerned about potential liability"],"faq":[{"question":"What if I genuinely didn't know the money was from a scam?","answer":"Not knowing the specific source doesn't always protect you once a pattern of suspicious transactions is investigated - it's safest to avoid any such arrangement entirely."},{"question":"Can my benefits really be affected by this?","answer":"Yes, unusual financial activity connected to your benefits account can trigger a suspension or full fraud investigation into your claim."}],"lastReviewed":"2026-07-05"},{"slug":"message-claims-i-need-to-update-benefits-details-on-whatsapp","url":"https://scamencyclopedia.org/questions/message-claims-i-need-to-update-benefits-details-on-whatsapp","question":"I got a WhatsApp message claiming to be from the benefits office asking me to update my details there - is this legitimate?","shortAnswer":"No - government benefits agencies do not conduct official account verification or updates through WhatsApp or other consumer messaging apps.","explanation":"This scam has grown alongside the popularity of messaging apps, with scammers sending a message via WhatsApp or a similar platform, sometimes using a profile picture and name designed to look official, claiming you need to 'update your details' or 'verify your account' to continue receiving benefits. Because WhatsApp uses ordinary phone numbers rather than official short codes, and profile names and photos can be set to anything, this channel is easy for scammers to impersonate convincingly with minimal effort.\n\nGovernment agencies do not use WhatsApp, or similar personal messaging apps, as an official channel for identity verification, account updates, or payment-related communication. Any message on such a platform claiming to represent a benefits agency should be treated as illegitimate by default, regardless of how official the profile picture or name appears, since these are trivial to fake.\n\nIf you receive a message like this, do not reply or click any links, and instead verify any account updates by logging into your official benefits account directly or contacting the agency through its published contact channels.","redFlags":["Contact via WhatsApp or similar messaging app claiming to be an official benefits agency","Profile picture uses official-looking logos or uniforms","Asks you to send photos of ID documents or bank cards via chat","Includes a link to a login page outside the messaging app","Uses urgent language about payments stopping if you don't respond","Phone number format looks like an ordinary personal mobile number"],"whatToDoNow":["Do not reply to or engage with the message","Do not click any links or send photos of documents via the chat","Block and report the contact within the messaging app","Log into your official benefits account directly to check for any real update requirement","Contact the agency through its published official channels if you're unsure","Warn friends or family who may receive similar messages"],"faq":[{"question":"Do any government services legitimately use WhatsApp?","answer":"It is highly uncommon for benefits agencies to use consumer messaging apps for identity verification or account updates - treat any such contact as suspicious by default."},{"question":"What if the number matches one I've seen before?","answer":"Phone numbers can be spoofed or simply coincidentally similar; verify through your official account rather than trusting the number alone."}],"lastReviewed":"2026-07-05"},{"slug":"asked-to-pay-in-gift-cards-to-avoid-benefits-fraud-charge","url":"https://scamencyclopedia.org/questions/asked-to-pay-in-gift-cards-to-avoid-benefits-fraud-charge","question":"Someone told me I could avoid a benefits fraud charge by paying a settlement in gift cards - should I do this?","shortAnswer":"Never pay any government fine, settlement, or fraud charge using gift cards - no legitimate government agency accepts gift cards as payment, and this request alone confirms it's a scam.","explanation":"Gift cards are one of the clearest signals of a scam across every category of fraud, including fake benefits fraud accusations, because they function like cash but are nearly impossible to trace or reverse once the codes are shared. A scammer claiming you can 'settle' a fraud allegation, avoid prosecution, or pay a fine by purchasing gift cards and reading out the codes over the phone is running a well-established playbook, regardless of how convincing the surrounding threat sounds.\n\nNo legitimate government agency anywhere accepts gift cards, cryptocurrency, or wire transfers to a personal account as payment for fines, settlements, taxes, or fraud-related penalties. Genuine penalties, if a real fraud finding is ever made against you, are handled through formal legal processes with official payment methods such as checks, bank transfers to verified government accounts, or online payment portals on the agency's own website - never a phone call demanding immediate gift card payment.\n\nIf you're ever asked to pay anything in gift cards to resolve a government-related matter, treat it as confirmation of a scam, hang up, and do not purchase or share any gift card codes.","redFlags":["Any request to pay a fine, settlement, or fraud charge using gift cards","Demands you read out the gift card codes over the phone","Claims this will make a fraud investigation or charge 'go away'","High-pressure insistence on immediate payment","Threatens arrest if you don't comply right away","Discourages you from hanging up to verify with the agency independently"],"whatToDoNow":["Do not purchase gift cards or share any codes with the caller","Hang up immediately - gift card payment requests are a guaranteed scam sign","If you already shared codes, contact the gift card issuer immediately, as some can freeze unused balances quickly","Report the incident to your national fraud reporting center","Verify any genuine fraud concern by contacting the agency directly using its official number","Warn family members, especially those less familiar with common scam tactics"],"faq":[{"question":"Do any legitimate fines ever get paid with gift cards?","answer":"No - this payment method is never used by any legitimate government agency and is a definitive sign of a scam."},{"question":"Is there any way to get gift card money back after sharing codes?","answer":"Contact the gift card issuer immediately - if the balance hasn't been spent yet, there's a small chance of freezing it, but recovery is not guaranteed."}],"lastReviewed":"2026-07-05"},{"slug":"disability-charity-fundraiser-asks-for-my-benefits-details","url":"https://scamencyclopedia.org/questions/disability-charity-fundraiser-asks-for-my-benefits-details","question":"A caller claiming to fundraise for a disability charity is asking about my benefits and asking me to donate part of my payment - normal?","shortAnswer":"No - legitimate charity fundraisers do not need details of your personal benefits claim, and a request to donate directly from your benefit payment is a major red flag.","explanation":"This scam blends a fake charity solicitation with a benefits scam, where a caller claims to represent a disability or welfare-related charity and, during the call, starts asking detailed questions about your specific benefits, payment amounts, and dates, sometimes framed as needed for 'matching donations' or 'means-testing' your eligibility to donate. In reality, none of this information is relevant to a genuine charitable donation, and the real goal is to gather personal and financial details or to talk you into setting up a direct debit or one-off payment from your benefit funds.\n\nLegitimate charities ask for a donation amount and payment method, not details of your government benefits claim, payment dates, or claim reference numbers. Genuine charity fundraising also does not involve pressuring people who are themselves benefit recipients to donate directly from limited support payments, and reputable charities are generally cautious about exactly this kind of solicitation.\n\nIf you want to support a charity, look up its official registration and contact details independently rather than trusting an unsolicited caller, and never provide details about your own benefits claim to a fundraiser regardless of the cause presented.","redFlags":["Fundraiser asks detailed questions about your specific benefits and payment amounts","Suggests donating directly from your benefit payment or setting up a direct debit during the call","Cannot provide clear charity registration details when asked","High-pressure tactics or emotional appeals to donate immediately","Caller cannot be verified through the charity's official website or registration body","Requests bank details rather than directing you to the charity's own secure donation page"],"whatToDoNow":["Do not share any details about your own benefits claim with a fundraiser","Verify the charity's registration independently before donating anything","Donate only through the charity's official website or verified payment channels, never over an unsolicited call","Decline to set up a direct debit or one-off payment during the call itself","Report the caller to the charity regulator in your country if the approach seems fraudulent","Hang up if pressured to decide immediately"],"faq":[{"question":"Why would a real charity ask about my benefits?","answer":"It generally wouldn't - genuine fundraising doesn't require details about your personal government benefits claim."},{"question":"How can I verify a charity is real before donating?","answer":"Check its registration with your country's official charity regulator and use the contact and donation details listed on the charity's own verified website."}],"lastReviewed":"2026-07-05"},{"slug":"letter-looks-like-benefits-agency-but-return-address-odd","url":"https://scamencyclopedia.org/questions/letter-looks-like-benefits-agency-but-return-address-odd","question":"A letter looks exactly like it's from the benefits agency but the return address is a PO box in a different city - should I worry?","shortAnswer":"Yes, check carefully - a mismatched return address, especially an unrelated PO box, is a common sign of a scam letter designed to imitate official government correspondence.","explanation":"Scam letters designed to imitate benefits or tax agency correspondence often reproduce official logos, fonts, and formatting very convincingly, since these are usually just copied from publicly available documents or previous genuine letters. However, the return address and payment instructions are harder for scammers to fake convincingly, because they need you to send money or information back to an address or account they actually control, which will not match the agency's real, published addresses.\n\nA genuine government letter's return address will match the agency's official published address for that specific department or region, and any payment details will point to verified official payment channels, not a personal PO box or different bank account than described on the agency's own website. If you notice any mismatch between the return address on the letter and the addresses published on the agency's official website, treat the letter as suspicious.\n\nBefore acting on any instructions in a letter with an unusual return address, call the agency's official number, found independently rather than on the letter itself, to confirm whether the letter is genuine.","redFlags":["Return address doesn't match the agency's officially published addresses","Payment instructions point to an account or address that seems unofficial","Contact phone number in the letter differs from the number on the agency's official website","Letter contains slightly different logo colors, fonts, or layout compared to previous genuine letters you've received","Unusual urgency or threats inconsistent with the agency's normal correspondence style","Asks you to reply with sensitive information via post to a different address than usual"],"whatToDoNow":["Compare the return address against the agency's officially published addresses","Call the agency using a number found independently, not the one printed on the letter","Do not send payment or personal information to the address in the suspicious letter","Keep the letter as evidence if you need to report it","Report the letter to the agency's fraud team once you've confirmed it's not genuine","Alert others locally if you believe a batch of similar scam letters may be circulating"],"faq":[{"question":"Can scammers really copy official letterhead accurately?","answer":"Yes, logos and formatting are often just copied from publicly available documents, so appearance alone isn't a reliable way to judge authenticity."},{"question":"What's the fastest way to check if a letter is genuine?","answer":"Call the agency using an independently found number, such as from their official website, rather than any number printed on the letter itself."}],"lastReviewed":"2026-07-05"},{"slug":"asked-for-upfront-payment-to-set-up-direct-deposit","url":"https://scamencyclopedia.org/questions/asked-for-upfront-payment-to-set-up-direct-deposit","question":"A caller says I need to pay a small fee to 'activate' direct deposit for my benefits payments - is this legitimate?","shortAnswer":"No - setting up direct deposit for government benefits is free, and any request for payment to 'activate' it is a scam.","explanation":"This scam targets people setting up or updating their direct deposit details for benefit payments, often timed around a genuine transition, such as a program moving from paper checks to direct deposit, or a person changing bank accounts. The caller claims a small activation, verification, or processing fee is required before direct deposit can be set up or updated, and requests payment via card, gift card, or wire transfer.\n\nSetting up or changing direct deposit details for any government benefit is a free administrative process, completed directly with the agency through their official portal, form, or phone line - there is no legitimate fee associated with it under any circumstances. This scam sometimes coincides with real transitions to direct deposit, which the scammer references to sound credible and current, but the fee itself is always fabricated.\n\nIf you need to set up or update direct deposit, do so directly through the agency's official website, app, or by calling their published number, and treat any request for payment to complete this process as an immediate red flag.","redFlags":["Any fee requested to 'activate' or 'set up' direct deposit for benefits","Call references a real ongoing transition to direct deposit to sound credible","Requests payment via card, gift card, or wire transfer over the phone","Pressure to act quickly to avoid a delay or interruption in payments","Caller cannot be verified when you try to call the agency back independently","Asks for your full bank account and routing numbers in a context outside the agency's official portal"],"whatToDoNow":["Do not pay any fee to set up or activate direct deposit","Set up or change direct deposit only through the agency's official website, app, or published phone number","Hang up on any caller requesting payment for this purpose","Verify your direct deposit status through your official online account","Report the call to the agency's fraud line","Warn others if the same scam call pattern is circulating locally"],"faq":[{"question":"Is there ever a real cost to switch to direct deposit?","answer":"No, switching between payment methods for government benefits is a free process handled directly by the agency."},{"question":"What if the caller already knew I was switching to direct deposit?","answer":"This information can sometimes be inferred from public transition announcements or obtained through data breaches; it doesn't confirm the caller is legitimate."}],"lastReviewed":"2026-07-05"},{"slug":"im-asked-to-forward-a-verification-code-to-benefits-support","url":"https://scamencyclopedia.org/questions/im-asked-to-forward-a-verification-code-to-benefits-support","question":"Someone claiming to be from benefits support asked me to read them a code that was just texted to my phone - is this safe?","shortAnswer":"No - never read out a verification code to anyone who calls you, since this is almost always an attempt to break into your account, not a legitimate verification step.","explanation":"This scam works by the caller first attempting to log into your real benefits account (or a related account like email or banking) using personal details they've already gathered, which triggers a genuine one-time verification code to be sent to your phone by the real system. The caller, posing as agency support staff, then calls you and asks you to read out the code you just received, claiming it's needed to 'verify your identity' or complete a support request you never actually initiated.\n\nIn reality, the code was generated because the scammer was actively trying to access your account at that moment, and reading it out to them hands over the exact piece of information needed to complete the takeover. A genuine agency support call would never need you to read out a one-time code that was sent to confirm a login or action you did not initiate, because the code exists specifically to prevent someone other than you from completing that action.\n\nIf you receive an unexpected verification code you didn't request, do not share it with anyone, including someone claiming to be support staff on a call. Instead, treat the unsolicited code itself as a sign that someone is trying to access your account, and change your password immediately from a device you trust.","redFlags":["You receive a verification code you did not request just before or during an unexpected call","Caller asks you to read the code back to them over the phone","Claims the code is needed to 'verify your identity' for a request you didn't initiate","Creates urgency to get the code from you quickly","Caller ID may show a plausible-looking number due to spoofing","Follows up quickly if you hesitate, increasing pressure"],"whatToDoNow":["Never share a one-time verification code with anyone who calls you","Treat an unrequested code as a sign someone is trying to access your account right now","Change your password immediately from a trusted device if you receive an unexpected code","Hang up on any caller asking you to read out a code","Enable additional security features like login alerts if your account supports them","Report the incident to the agency and your account provider"],"faq":[{"question":"Why would the code be real if the caller is a scammer?","answer":"The scammer triggers the real code by attempting to log into your genuine account; the code itself is legitimate, but sharing it lets them complete the login as if it were you."},{"question":"What should I do immediately if I already read out the code?","answer":"Change your password right away from a trusted device and check your account for any unauthorized changes, then contact the provider's fraud team."}],"lastReviewed":"2026-07-05"},{"slug":"job-ad-promises-to-train-me-then-put-me-on-benefits-scheme","url":"https://scamencyclopedia.org/questions/job-ad-promises-to-train-me-then-put-me-on-benefits-scheme","question":"A 'training program' ad says I'll get paid while claiming benefits at the same time - is that a genuine offer?","shortAnswer":"Approach with caution - some legitimate training-while-claiming schemes exist through official employment programs, but ads promising undisclosed extra income alongside benefits without informing the agency are usually fraud schemes that put your claim at risk.","explanation":"Some ads target people currently receiving unemployment or related benefits, offering a 'training program,' 'work trial,' or informal job that pays cash or an under-the-table wage, while implying or explicitly suggesting you don't need to report this income to the benefits agency. This is presented as a way to earn extra money without affecting your claim, but it is essentially benefit fraud if the income genuinely should be declared and isn't, and you, not the company running the ad, bear the legal responsibility for the undeclared income.\n\nLegitimate government-run or accredited employment support programs that combine training or work trials with benefits do exist in many countries, and they operate with full transparency and reporting integrated directly with the benefits agency, so your claim is adjusted correctly and legally from the start. Ads that instead suggest working 'off the books' or not declaring income to keep your full benefit payment are describing something illegal, regardless of how the opportunity is framed.\n\nIf you're interested in combining work or training with your benefits, check with the agency directly or an official employment support program about how earnings need to be reported, rather than relying on informal arrangements suggested by an ad or informal contact.","redFlags":["Suggests you don't need to report the income to your benefits agency","Pays in cash with no formal payslip or tax documentation","Not affiliated with any recognized, official employment support program","Vague about the actual nature of the 'training' or work involved","Pressure to start quickly without proper paperwork","Discourages you from asking the benefits agency about reporting requirements"],"whatToDoNow":["Check with your benefits agency directly about how any income needs to be reported before starting","Look for official, accredited employment support or training-while-claiming programs instead","Decline any arrangement that suggests hiding income from the agency","Keep records of any income you do receive so it can be accurately reported","Report suspicious 'off the books while claiming' job ads to the relevant authority","Seek advice from a welfare rights service if you're unsure how work would affect your specific claim"],"faq":[{"question":"Can I really work or train while claiming benefits?","answer":"In many cases yes, through officially recognized programs with proper income reporting, but always confirm the reporting requirements with the agency directly first."},{"question":"What happens if undeclared income is later discovered?","answer":"You can face repayment demands, penalties, or fraud charges for failing to report income, even if the employer suggested not declaring it."}],"lastReviewed":"2026-07-05"},{"slug":"text-says-click-to-confirm-bank-change-for-benefits","url":"https://scamencyclopedia.org/questions/text-says-click-to-confirm-bank-change-for-benefits","question":"I got a text saying to click a link to 'confirm' a bank account change on my benefits that I never made - what does this mean?","shortAnswer":"This could indicate either a phishing attempt using a fake alert to get you to click, or in rarer cases a genuine warning that someone actually tried to change your bank details fraudulently - verify directly through your official account either way.","explanation":"There are two overlapping possibilities behind this kind of text. In the more common scenario, it's simply a phishing message inventing a fake 'bank change' alert to create alarm and get you to click a malicious link, with no real change ever attempted. In a more concerning but less common scenario, a scammer may have already partially compromised your identity details and genuinely attempted to change your bank details with the real agency, triggering a real automated security alert - though even then, the text itself might not be the actual official alert, and could instead be a scammer's fake version sent to intercept your reaction.\n\nBecause of this overlap, the safest response in either case is the same: do not click any link in the text. Instead, log into your official benefits account directly by typing the agency's address into your browser, and check whether your bank details show any unexpected or unfamiliar change. If a change was genuinely attempted or made without your authorization, you'll be able to see and correct it directly through the official, secure channel, and can then report the identity compromise to the agency.\n\nThis situation is also a good moment to review your account security more broadly, since a genuine attempted bank detail change can indicate that your personal information has been compromised elsewhere, such as through a data breach or a previous successful phishing attempt.","redFlags":["Text includes a link rather than directing you to log in independently","Urgent language pressuring an immediate click to 'stop' or 'confirm' a change","You have no memory of requesting any bank detail change","Sender number looks like an ordinary mobile number, not an official short code","Asks for your login credentials or bank details directly within the text flow","No matching notification visible when you check your account through the official app or website"],"whatToDoNow":["Do not click the link in the text","Log into your official benefits account directly to check your actual bank details on file","If a change was genuinely made without your authorization, correct it immediately through the official channel and report it","Change your account password and enable extra security features if available","Check other accounts for signs your personal information may be compromised more broadly","Report the text itself as suspected phishing regardless of the outcome"],"faq":[{"question":"How do I know if a bank detail change was really attempted?","answer":"Log into your official benefits account directly and review your bank details and account activity - this is the only reliable way to check, not the text itself."},{"question":"What if my bank details really were changed without my knowledge?","answer":"Correct them immediately through the official account or by calling the agency directly, and treat it as a sign your personal information may be compromised elsewhere too."}],"lastReviewed":"2026-07-05"},{"slug":"asked-to-pay-customs-fee-for-benefits-card-delivery","url":"https://scamencyclopedia.org/questions/asked-to-pay-customs-fee-for-benefits-card-delivery","question":"I'm told my new benefits payment card is stuck in customs and I need to pay a fee to release it - is this real?","shortAnswer":"No - domestic government benefit payment cards do not go through customs, and any request to pay a fee to 'release' one is a scam.","explanation":"This scam claims that a replacement or new benefits payment card is being held at a customs checkpoint or delivery depot, and that a release, handling, or customs fee must be paid before it can be delivered. It borrows the format of well-known parcel delivery scams and applies it to a benefits context, exploiting the fact that people are genuinely waiting for a physical card to arrive and may not question the story closely if it seems to explain a delay they're already experiencing.\n\nDomestic government benefit cards are issued and mailed within the country by the agency or its card provider and never pass through international customs, since there is no international shipment involved in a routine domestic card replacement. Any message referencing customs fees for a benefits card, regardless of how it's delivered - text, email, or phone call - can be dismissed as fraudulent on this basis alone.\n\nIf you're waiting on a genuine replacement card and are concerned about a delay, contact the agency directly using their official number or online account to check the actual delivery status, rather than paying any fee referenced in an unsolicited message.","redFlags":["Claims a domestic benefits card is held in 'customs'","Requests a fee via card payment, gift card, or wire transfer to release the card","Message arrives while you are genuinely waiting for a replacement card, exploiting real timing","Link or number provided doesn't match the agency's official channels","Urgent deadline before the card is supposedly returned or destroyed","Poor grammar or generic wording copied from parcel delivery scam templates"],"whatToDoNow":["Do not pay any fee referenced in the message","Contact the benefits agency directly to check your card's real delivery status","Do not click links or provide card details in response to the message","Report the message as phishing through your email or phone's reporting feature","Check your official online account for the genuine dispatch status of any replacement card","Alert the agency if you're concerned your card details may already be compromised"],"faq":[{"question":"Do domestic benefit cards ever go through customs?","answer":"No - domestic mail and card issuance does not involve international customs, so any such claim is fabricated."},{"question":"How can I check on a genuinely delayed card?","answer":"Contact the benefits agency directly using their official number or online account rather than relying on any unsolicited message."}],"lastReviewed":"2026-07-05"},{"slug":"is-seed-faith-offering-a-scam","url":"https://scamencyclopedia.org/questions/is-seed-faith-offering-a-scam","question":"Is a 'seed faith' offering where a preacher promises money back multiplied a scam?","shortAnswer":"Any promise that donating a specific amount of money to a ministry will cause God to return it to you multiplied is a fundraising technique with no accountability, and versions of it are routinely used to extract money from people in financial distress.","explanation":"The 'seed faith' pitch works by reframing a donation as an investment: give a set amount now, described as 'sowing a seed,' and a specific multiplied return is promised back, often tied to an urgent personal need like debt, illness, or unemployment. The pitch is emotionally powerful precisely because it targets people who are already struggling and desperate for a breakthrough. Legitimate religious giving is not conditioned on a guaranteed financial return, and no reputable faith tradition ties salvation, blessing, or a specific dollar payback to a specific donation amount.\n\nWhat makes this different from an ordinary church offering is the explicit transactional promise and often the pressure to give an amount that is uncomfortable or borrowed. Some versions ask for the donor's 'last dollar' as proof of faith, or push people to use credit cards or payday loans to give more. Once the money is sent, there is no refund, no accounting of how it was used, and no recourse if the promised financial turnaround never happens.\n\nThese campaigns are often run by media ministries or online preachers with no independent financial oversight, no published financial statements, and no way for a donor to verify that funds go anywhere near the stated purpose. The multiplied-return promise is the tell: it converts an act of charity into a bet, and the ministry keeps the money regardless of the outcome.","redFlags":["A specific donation amount is tied to a specific promised financial return","Pressure to give an amount you cannot afford, including borrowing to donate","Urgency language claiming the offer or blessing window is closing","No published financial statements or independent audit of the ministry","Requests to give via wire transfer, gift card, or cash app instead of a traceable church account","Personal testimonials of sudden wealth used as proof instead of verifiable evidence"],"whatToDoNow":["Do not send money in response to a multiplied-return promise, no matter how urgent your situation feels","If you already gave, contact your bank or card issuer to ask about reversing the charge","Look up whether the ministry publishes audited financial statements or belongs to an accountability body","Talk to a trusted, local faith leader before giving to an online or television ministry you cannot verify","Report the solicitation to your country's charity regulator or consumer protection agency","If you are in financial distress, seek a nonprofit credit counselor instead of a giving-based 'solution'"],"faq":[{"question":"Is all religious giving a scam if it mentions blessings?","answer":"No. Ordinary tithing and offerings that are not conditioned on a specific promised payback, and that go to an accountable organization, are a normal part of many faith traditions. The scam pattern is specifically the guaranteed multiplied financial return tied to a set donation."}],"lastReviewed":"2026-07-05"},{"slug":"online-pastor-asking-for-gift-cards","url":"https://scamencyclopedia.org/questions/online-pastor-asking-for-gift-cards","question":"Why is someone claiming to be my pastor texting me asking me to buy gift cards?","shortAnswer":"This is almost certainly an impersonation scam, not your actual pastor; real clergy do not ask congregants to buy gift cards by text and read out the codes.","explanation":"This scam starts when a fraudster finds a church directory, staff page, or social media post naming a pastor, priest, or church leader, then creates a look-alike email address or text number and messages members of the congregation individually. The message usually claims the leader is busy, in a meeting, or traveling, and needs a discreet favor: buying gift cards for a member in need, a hospital visit, or a surprise gift, with a request to send photos of the card codes right away.\n\nThe scam relies on the trust congregants place in their spiritual leaders and the social pressure to respond quickly and quietly to a request framed as an act of Christian or communal kindness. Because the request seems to come from a real, known person, victims often skip the verification step they would normally apply to a stranger's request.\n\nGift cards are used because the codes can be redeemed instantly and remotely, and once shared they cannot be reversed like a bank transfer might be. The same scam is run against members of mosques, synagogues, and temples using the name of an imam, rabbi, or other respected leader.","redFlags":["Contact comes from a new phone number or email address, not your leader's usual one","The request is for gift cards specifically, and asks you to send the codes by photo or text","The message asks you to keep the request confidential or act quickly","The writing tone or phrasing does not sound like how your leader normally communicates","The person cannot be reached by calling the phone number you already had for them"],"whatToDoNow":["Call your pastor, priest, imam, rabbi, or other leader directly using a number you already had, not one from the message","Do not buy gift cards or share any codes based on a text or email request alone","Warn other members of your congregation, ideally through an official church announcement","Report the impersonating account or number to the platform it came from","If you already sent gift card codes, contact the card issuer immediately, since some codes can sometimes be frozen if reported fast enough"],"faq":[{"question":"Why do scammers target churches and religious communities specifically?","answer":"Faith communities often have strong bonds of trust, a culture of helping each other quietly, and publicly available directories or social media listing leaders and members, all of which make it easier for a scammer to impersonate a trusted figure convincingly."}],"lastReviewed":"2026-07-05"},{"slug":"faith-healer-charging-for-miracle-cure","url":"https://scamencyclopedia.org/questions/faith-healer-charging-for-miracle-cure","question":"A faith healer wants payment upfront for a guaranteed miracle cure. Is this a scam?","shortAnswer":"Yes, charging a fixed fee in advance for a guaranteed supernatural cure is a red flag of exploitation, especially when the healer discourages ongoing medical treatment.","explanation":"Faith healing scams present a spiritual practice as a transaction with a fixed price and a guaranteed outcome, which is inconsistent with how genuine prayer or pastoral care is normally offered. The pitch often targets people with serious or chronic illnesses who feel they have exhausted conventional medical options, or who cannot afford ongoing treatment, and it plays on hope at an especially vulnerable moment.\n\nA common variation involves the healer claiming a specific object, anointed oil, or ritual is required and must be purchased at an inflated price, sometimes with follow-up sessions each requiring a new fee as the 'cure' is not yet complete. Another variant discourages the person from continuing prescribed medication or treatment, claiming it interferes with the healing, which can cause serious harm on top of the financial loss.\n\nGenuine pastoral or spiritual care offered by an accountable religious institution is typically not conditioned on payment, does not guarantee a medical outcome, and does not instruct people to abandon medical treatment. When a fee, a guarantee, and pressure to stop other treatment appear together, the arrangement is functioning as a scam regardless of the healer's own beliefs.","redFlags":["A guaranteed cure is promised in exchange for a specific payment","You are told to stop taking prescribed medication or seeing your doctor","Follow-up sessions each require additional fees as the 'process' continues","Special objects, oils, or water are sold as necessary for the cure to work","The healer discourages you from telling family members or your doctor about the arrangement"],"whatToDoNow":["Continue any medical treatment prescribed by a licensed doctor regardless of what a healer says","Do not pay for a guaranteed cure; genuine pastoral care does not work this way","Talk to a trusted family member or friend before committing money to any healing service","Report the individual to consumer protection authorities if payment was demanded under false pretenses","If a medical emergency has resulted from stopped treatment, seek emergency care immediately"],"faq":[{"question":"Is it wrong to seek prayer alongside medical treatment?","answer":"Seeking prayer or spiritual support alongside, not instead of, medical care is a personal choice many people find comforting. The scam concern is specifically paid guarantees of a cure that replace treatment or escalate in cost."}],"lastReviewed":"2026-07-05"},{"slug":"affinity-fraud-in-my-congregation","url":"https://scamencyclopedia.org/questions/affinity-fraud-in-my-congregation","question":"What is affinity fraud, and how does it happen inside a church or religious community?","shortAnswer":"Affinity fraud is an investment scam run by someone who shares your faith, ethnicity, or community identity to build trust quickly, then uses that trust to sell a fake or unregistered investment to members of the same group.","explanation":"Affinity fraud works because trust inside a tight-knit religious community spreads faster and deeper than trust between strangers. A member of the congregation, sometimes a respected elder, deacon, or well-known family, begins quietly promoting an investment opportunity, describing it as a way for the community to build wealth together or fund a shared cause. Because the promoter is a known, trusted figure who attends the same services and social events, other members skip the due diligence they would normally apply to a stranger's investment pitch.\n\nOnce a few respected members invest and are shown early 'returns,' word spreads through the congregation, prayer groups, and family networks, and more people join in reliance on the community's collective trust rather than any independent verification. In many cases the arrangement is a Ponzi structure, where early investors are paid from the money contributed by later investors, and it collapses once new money stops coming in fast enough.\n\nThe damage from affinity fraud extends beyond the financial loss: it fractures the trust within the community itself, since victims are often reluctant to report a fellow congregant to authorities, and the community can split into those who invested and lost money and those who tried to warn others and were not believed.","redFlags":["The investment is promoted primarily through word of mouth inside the congregation rather than any public offering","The promoter emphasizes shared faith or community identity as a reason to trust the opportunity","Early investors are held up as proof, but no independent, audited records are available","The investment is described as low-risk or guaranteed, which no legitimate investment can promise","Pressure exists not to discuss the investment outside the community or to question a respected member"],"whatToDoNow":["Treat any investment pitch from a fellow congregant with the same scrutiny you would apply to a stranger","Verify that the investment and the person offering it are registered with your country's securities regulator","Ask for independently audited financial statements, not just testimonials from other members","If you suspect a scheme is already underway, report it to securities regulators even if it involves someone respected in your community","Support other victims in reporting rather than staying silent to protect community harmony"],"faq":[{"question":"Why don't affinity fraud victims report the scam sooner?","answer":"Victims often feel shame, fear damaging relationships within their community, or hold onto hope that the promoter will make things right, which allows these schemes to run longer than fraud involving strangers."}],"lastReviewed":"2026-07-05"},{"slug":"fake-charity-persecuted-christians-abroad","url":"https://scamencyclopedia.org/questions/fake-charity-persecuted-christians-abroad","question":"How do I check if a charity claiming to help persecuted Christians overseas is legitimate?","shortAnswer":"Search for the charity's official registration number with your country's charity regulator and look for independently audited financial statements before donating, since fake versions of well-known persecuted-faith charities are common in online ads and social media appeals.","explanation":"Appeals to help persecuted religious minorities overseas are emotionally powerful and generate genuine giving, which is exactly why scammers copy the names, logos, and imagery of legitimate organizations working in this space. Fake versions often appear as social media ads, crowdfunding pages, or unsolicited emails featuring graphic photos and urgent language about believers facing imminent danger, paired with a donation link that goes to an unregistered account rather than the real charity.\n\nSome fraudulent appeals use a name deliberately similar to a well-known, legitimate organization, changing a word or adding a regional suffix so that a quick search appears to confirm the name is real. Others invent an entirely fictitious charity with a professional-looking website built specifically to look credible, complete with fabricated testimonials and stock photography.\n\nBecause these appeals often ask for one-time donations through payment methods that are hard to trace, and because the claimed beneficiaries are in regions where independent verification is difficult, donors have little way to confirm where the money actually goes unless the organization is properly registered and audited in the donor's own country.","redFlags":["The charity name is similar to, but not exactly, a well-known organization","No registration number is provided, or the number does not match official regulator records when checked","Donation requests use graphic urgency and ask for immediate action without giving time to research","Payment is requested via wire transfer, cryptocurrency, or a personal payment app rather than the charity's own donation platform","No audited financial statements or annual report is publicly available"],"whatToDoNow":["Search the charity's exact legal name in your country's official charity register before donating anything","Look for independently audited financial statements covering recent years","Contact the charity directly using contact details found through the official register, not the ones in the appeal itself","Donate through the charity's verified official website rather than clicking links in ads, emails, or social posts","Report suspected fake charity appeals to the platform hosting them and to your local charity regulator"],"faq":[{"question":"Are all crowdfunding appeals for persecuted religious groups fake?","answer":"No, many are genuine, but crowdfunding platforms generally do not vet how funds are used to the same standard as registered charities, so extra verification is worthwhile before giving to any individual campaign rather than an established, audited organization."}],"lastReviewed":"2026-07-05"},{"slug":"fake-hajj-umrah-travel-package-scam","url":"https://scamencyclopedia.org/questions/fake-hajj-umrah-travel-package-scam","question":"How can I avoid a fake Hajj or Umrah travel package scam?","shortAnswer":"Only book Hajj or Umrah packages through operators officially licensed by the relevant religious affairs authority, and be wary of deals priced well below the market rate advertised through social media or unsolicited messages.","explanation":"Hajj and Umrah travel scams exploit the deep religious significance of the pilgrimage and the fact that demand for slots often exceeds supply, creating pressure to book quickly with whoever seems to have availability. Fraudulent operators advertise heavily discounted packages on social media, in mosque bulletin groups, or through word of mouth, collect deposits or full payment, and then either disappear, fail to secure the promised visas and accommodation, or deliver drastically inferior arrangements than advertised.\n\nA common pattern involves the operator taking payment for a package that includes flights, hotels near the holy sites, and ground transport, then leaving pilgrims to discover close to departure, or even upon arrival, that no reservations were actually made in their name. Because pilgrims often travel in groups organized through their local mosque or community, a single fraudulent operator can affect dozens of families from the same community at once, and the financial and emotional damage is compounded by the loss of a once-in-a-lifetime religious opportunity.\n\nLegitimate operators are licensed by the relevant national religious affairs or hajj authority and can be verified against an official list, provide documented confirmations for flights and accommodation well in advance of travel, and do not require full payment in cash or via unverifiable transfer with no formal contract.","redFlags":["The package price is significantly below what other licensed operators are charging for the same dates","The operator cannot be found on the official government list of licensed Hajj or Umrah providers","Payment is requested in cash or to a personal bank account rather than a registered business account","No written contract or itemized itinerary is provided before payment","The operator pressures you to pay quickly to secure a 'limited slot'"],"whatToDoNow":["Verify the operator against your country's official list of licensed Hajj and Umrah travel providers before paying anything","Ask for and keep confirmation numbers for flights and hotel bookings directly, not just a promise from the operator","Pay through traceable methods and insist on a written contract detailing exactly what is included","Warn your mosque or community group if you discover an operator advertising there is unlicensed","Report suspected fraudulent operators to the relevant religious affairs authority and consumer protection agency"],"faq":[{"question":"Is it safer to book Hajj or Umrah through a group organized by my local mosque?","answer":"It can reduce risk if the mosque itself vets the operator, but the community connection alone is not a guarantee of legitimacy, since fraudulent operators specifically target mosque networks. Always verify the operator's license independently."}],"lastReviewed":"2026-07-05"},{"slug":"cult-love-bombing-then-money-demands","url":"https://scamencyclopedia.org/questions/cult-love-bombing-then-money-demands","question":"A new religious group showered me with attention and now wants money and my time. Is this a cult tactic?","shortAnswer":"Intense early affection followed by escalating demands for money, time, and cutting off outside relationships is a well-documented recruitment and control pattern used by high-control groups, commonly called love bombing.","explanation":"Love bombing describes a recruitment tactic where a new or prospective member is showered with excessive warmth, attention, compliments, and a sense of belonging in the earliest interactions with a group. This creates a powerful emotional bond very quickly, often filling a real need for community, purpose, or acceptance, especially in people going through a difficult life transition such as a breakup, bereavement, job loss, or move to a new city.\n\nOnce the emotional bond is established, the group typically begins introducing escalating requirements: attending more frequent meetings, donating increasing amounts of money, recruiting friends and family, and gradually distancing from relationships outside the group, sometimes framed as those relationships being 'negative' or 'unaligned' with the member's new spiritual path. Financial demands often start small and grow, sometimes culminating in requests to sign over savings, property, or income to the group or its leader.\n\nA key distinguishing feature from healthy religious community is the response to questioning or wanting distance: genuine communities tolerate members stepping back, disagreeing, or leaving, while high-control groups respond to any pulling away with guilt, fear-based warnings about spiritual consequences, or active efforts to isolate the person further from outside support.","redFlags":["Overwhelming, fast-moving attention and affection from the group in the first days or weeks","Escalating financial requests that grow larger over time","Pressure to cut ties with family, friends, or a previous faith community","Discouragement of independent questioning, outside reading, or seeking outside advice","Fear-based consequences described for leaving or even for slowing participation","Leadership that is not accountable to any outside body and controls access to information"],"whatToDoNow":["Maintain relationships and communication with family and friends outside the group, even if the group discourages it","Pause any further financial commitments until you have discussed them with someone outside the group","Research the group's history and reputation independently, including former-member accounts","Talk to a trusted friend, family member, or counselor about what you are experiencing","If you feel unable to leave safely, contact a cult-recovery support organization or helpline for guidance"],"faq":[{"question":"Does love bombing always mean a group is a cult?","answer":"Not necessarily by itself, but it is a well-documented early tactic used by high-control groups, so it should prompt caution and outside verification, particularly if it is followed by financial demands and pressure to isolate from other relationships."}],"lastReviewed":"2026-07-05"},{"slug":"blessed-oil-anointed-item-inflated-price","url":"https://scamencyclopedia.org/questions/blessed-oil-anointed-item-inflated-price","question":"A ministry is selling 'anointed' prayer oil, cloths, or water for a high price. Is this a scam?","shortAnswer":"Selling ordinary objects at a large markup by attaching a spiritual claim of special power is a manipulative sales tactic, not a legitimate religious practice, especially when the object is described as necessary for healing, protection, or financial breakthrough.","explanation":"This scam takes an object with a low actual cost, such as olive oil, water, cloth, or a small trinket, and attaches a claim that it has been specially blessed, anointed, or empowered, then sells it for many times its ordinary value. The pitch usually links the object to a specific desired outcome such as healing an illness, protecting a home, or reversing financial hardship, which creates urgency for anyone facing that exact problem.\n\nUnlike a normal religious item sold at a fair price to support a ministry's work, these offers typically emphasize that the specific item purchased is what makes the difference, sometimes claiming a limited supply or a special one-time blessing, which pushes buyers toward an immediate purchase rather than reflection. Follow-up offers for a 'stronger' or 'more anointed' version at a higher price are common once the first purchase is made, since the buyer is now on a list as someone willing to pay for spiritual products.\n\nNo religious tradition's core teaching holds that a physical object purchased for a fee is required for prayer, healing, or blessing to be effective, and reputable religious organizations that do sell devotional items typically price them reasonably and do not tie the price to a promised supernatural outcome.","redFlags":["An ordinary object is sold at a price far exceeding its normal cost","The item is described as necessary for a specific desired outcome like healing or wealth","Claims of limited supply or a one-time special blessing create urgency to buy immediately","Repeated follow-up offers for a 'stronger' version at a higher price","No return policy and no way to verify how the item was actually prepared or blessed"],"whatToDoNow":["Do not purchase items sold with promises of a specific supernatural outcome tied to the purchase","Ask your own trusted local faith community about typical, reasonable pricing for devotional items","If you already bought an item, treat it as a normal purchase and do not send further payments for 'stronger' versions","Report the seller to consumer protection authorities if the marketing made specific false claims","Discuss the experience with your faith leader if you are concerned about the theology being used to sell the product"],"faq":[{"question":"Is it wrong for a church to sell devotional items at all?","answer":"No, many religious organizations reasonably sell devotional items like candles, prayer beads, or books to support their work. The concern is specifically inflated pricing tied to a guaranteed supernatural outcome, which is a sales tactic rather than a devotional practice."}],"lastReviewed":"2026-07-05"},{"slug":"church-investment-club-blessed-returns","url":"https://scamencyclopedia.org/questions/church-investment-club-blessed-returns","question":"My church has an informal investment club promising 'blessed' high returns. What should I check first?","shortAnswer":"Check whether the investment and whoever is running it are registered with your country's securities regulator, since informal investment clubs run through churches are a common vehicle for Ponzi schemes regardless of how they are described spiritually.","explanation":"An informal investment club that forms within a congregation often starts innocently, perhaps as a savings circle or a genuine attempt to pool resources, but it can be taken over or created from the start by someone intending to run a Ponzi or other unregistered investment scheme. The religious framing, calling returns 'blessed' or describing the fund as guided by faith, is used to lower scrutiny and to suggest that ordinary financial due diligence would be a sign of distrust in God or in fellow believers.\n\nBecause these clubs typically operate outside any regulatory registration, there is no independent oversight of how money is actually invested, no requirement to disclose risk, and no protection if the fund collapses or the organizer disappears with the money. Early participants are sometimes paid returns that appear to validate the club, which are in reality funded by newer members' contributions, a structure that mathematically must eventually collapse.\n\nA legitimate investment vehicle, regardless of any religious motivation among its founders, is registered with the relevant regulator, discloses its actual holdings and risks in writing, and does not need spiritual language to justify unusually high or guaranteed returns, because no lawful investment can guarantee a high return without risk.","redFlags":["Returns are described as guaranteed or unusually high with no real explanation of the underlying investment","The fund or its organizer is not registered with your country's securities or financial regulator","Religious language is used to discourage normal financial due diligence","No written prospectus, disclosure document, or independent audit is available","New investment is actively recruited from within the congregation to keep the fund growing"],"whatToDoNow":["Check whether the fund and its organizer are registered with your country's securities regulator before investing anything","Ask for a written disclosure of exactly what the money is invested in and what the risks are","Be skeptical of any guaranteed or unusually high return, since this is the classic sign of a Ponzi structure","Encourage church leadership to formally distance the congregation from any unregistered investment activity","Report the scheme to securities regulators if you believe it is already defrauding members"],"faq":[{"question":"Can church leadership be held responsible if a member runs this scheme using the church's name?","answer":"This depends on the jurisdiction and the specific facts, including whether leadership knew about or endorsed the scheme, but congregations should formally and publicly distance themselves from any unregistered investment activity to protect other members."}],"lastReviewed":"2026-07-05"},{"slug":"online-prayer-request-collecting-personal-info","url":"https://scamencyclopedia.org/questions/online-prayer-request-collecting-personal-info","question":"A website asks for detailed personal and financial information along with my prayer request. Is that normal?","shortAnswer":"No, a legitimate prayer request only needs the concern itself; requests for detailed financial information, account numbers, or payment tied to having your prayer 'prioritized' are a data harvesting or payment scam.","explanation":"Prayer request scams exploit a moment when people are emotionally vulnerable and seeking comfort, often around illness, financial hardship, or family crisis, by disguising a data collection or payment form as a prayer submission. A legitimate prayer request typically asks only for a name and the concern itself, and possibly a way to contact the person with encouragement, whereas a fraudulent version asks for details like full address, date of birth, bank account information, or a payment to have the prayer 'prioritized' or read by a specific well-known figure.\n\nSome versions of this scam are primarily designed to harvest personal information that is later used for identity theft or sold to other scammers, since a prayer request naturally reveals a person's vulnerabilities, such as an illness, debt, or family conflict, which can then be used to craft a more convincing follow-up scam. Other versions are straightforward payment scams, charging a fee for the prayer to be 'sent' or claiming that a donation will increase the chance the prayer is answered.\n\nGenuine religious organizations that offer prayer support do not condition the sincerity or effectiveness of prayer on payment, and do not need financial account details to pray for someone. Any form combining a prayer request with sensitive personal or financial data fields should be treated with the same caution as any other unsolicited data request online.","redFlags":["The prayer request form asks for financial account details, a full date of birth, or government ID numbers","A payment or donation is presented as increasing the likelihood of the prayer being answered","The site promises a specific well-known figure will personally read the prayer for a fee","Follow-up contact after submission shifts quickly from spiritual support to financial solicitation","The website has no clear affiliation with an established, verifiable religious organization"],"whatToDoNow":["Only provide the minimum information needed for a prayer request, such as a first name and the concern itself","Never enter bank account, card, or government ID details on a prayer request form","Verify the website belongs to an established religious organization before submitting any request","If you receive a suspicious financial follow-up after submitting a prayer request, do not respond or pay","Report the site to the platform hosting it or to a consumer protection agency if it solicits payment deceptively"],"faq":[{"question":"Is it fine to share my prayer request publicly on social media?","answer":"That is a personal choice, but be aware that details shared publicly, such as an illness or financial hardship, can be used by scammers to craft a more convincing targeted follow-up scam, so consider limiting sensitive detail in public posts."}],"lastReviewed":"2026-07-05"},{"slug":"religious-dating-profile-too-perfect","url":"https://scamencyclopedia.org/questions/religious-dating-profile-too-perfect","question":"I matched with someone on a faith-based dating app who shares all my beliefs perfectly. Could this be a romance scam?","shortAnswer":"Yes, romance scammers frequently target faith-based dating apps precisely because shared religious identity builds trust quickly, so a profile that mirrors your beliefs unusually closely deserves the same scrutiny as any other online match.","explanation":"Faith-based dating platforms attract users specifically looking for a partner who shares their religious values, which also makes these platforms an efficient hunting ground for romance scammers who tailor a fake profile to say exactly what a target wants to hear about faith, family values, and future plans. The scammer often claims to share the same denomination or specific beliefs, quotes scripture or uses religious language early in conversation, and moves quickly to express deep emotional connection, sometimes describing the match as an answer to prayer.\n\nAs with other romance scams, the relationship typically moves off the dating platform to text or messaging apps quickly, and a financial request eventually follows, often framed in a way consistent with the shared faith, such as needing help to travel to meet in person for what is described as a divinely ordained relationship, needing money for a mission trip, or facing a sudden crisis that only a small loan from a trusted partner can solve.\n\nThe use of religious language does not make the emotional manipulation any less calculated, and it can make victims more reluctant to suspect fraud since they associate shared faith with trustworthiness. Reverse image searches on profile photos, refusal to video call, and inconsistencies in their claimed background remain reliable ways to detect these profiles regardless of the religious framing used.","redFlags":["The profile and conversation mirror your specific beliefs and values unusually closely and quickly","Religious language is used to accelerate emotional intimacy, such as calling the match an answer to prayer within days","The person avoids video calls or in-person meetings while professing deep commitment","A financial request eventually appears, often framed as consistent with the shared faith","Their photos return matches to other names or profiles in a reverse image search"],"whatToDoNow":["Insist on a video call early in the relationship before any emotional or financial commitment deepens","Run a reverse image search on their profile photos to check for reuse under other names","Never send money, gift cards, or financial account access to someone you have not met in person","Discuss the relationship with a trusted friend or family member who can offer an outside perspective","Report the profile to the dating platform if you suspect it is fraudulent"],"faq":[{"question":"Are faith-based dating apps less safe than general dating apps?","answer":"Not inherently, but the shared-belief framing can lower a user's guard faster than on a general platform, so the same verification steps used on any dating app, like video calls and reverse image searches, remain important."}],"lastReviewed":"2026-07-05"},{"slug":"fake-tithing-app-clone-site","url":"https://scamencyclopedia.org/questions/fake-tithing-app-clone-site","question":"How do I know if a church giving or tithing app is a real link to my church or a cloned scam site?","shortAnswer":"Only give through a link or app confirmed directly by your church's official staff or printed materials, since cloned giving pages that closely copy a real church's branding are increasingly used to redirect donations to a scammer's account.","explanation":"As churches increasingly use online giving platforms for tithes and offerings, scammers have started building cloned versions of these giving pages that copy the church's name, logo, and color scheme closely enough to look legitimate at a glance. These clone pages are typically distributed through fake social media posts, comment sections under a church's real posts, search engine ads that outrank the real site, or QR codes placed where they can be scanned by unsuspecting members, such as printed inserts left in a real church bulletin.\n\nBecause the visual branding matches, and because the request is consistent with something a member already intends to do, namely give to their church, the clone page often does not trigger the suspicion that a completely unrelated scam would. Donations made through the clone go to an account controlled by the scammer and are not received by the church at all, and the member typically only discovers the problem when the church has no record of the gift, sometimes months later at tax time.\n\nChurches can reduce this risk by consistently using one verified giving platform and communicating its exact web address clearly and repeatedly, while members can protect themselves by always navigating to giving pages directly from the church's own verified website or app rather than from search results, social media links, or unfamiliar QR codes.","redFlags":["The giving link was found via a search ad, social media comment, or an unfamiliar QR code rather than the church's own verified materials","The web address is slightly different from the church's known official domain","The page asks for unusual payment methods like gift cards or cryptocurrency for tithing","There is no confirmation email or receipt after giving, or the receipt looks unlike the church's normal format","Church staff have no record of your donation when you inquire"],"whatToDoNow":["Always access your church's giving page by typing its known web address directly or from the official church app","Confirm the exact giving link and domain with church staff if you received it from any other source","Check your bank or card statement to confirm the payment went to the church's actual name, not an unfamiliar entity","Report any suspicious giving links found in comments or ads to the church and to the platform hosting them","If you gave through a clone site, contact your bank immediately to dispute the charge"],"faq":[{"question":"Are QR codes for church giving generally unsafe?","answer":"QR codes distributed directly by the church, such as printed in an official bulletin handed out during a service, are generally fine, but a QR code encountered elsewhere, like a flyer of unknown origin, should be verified before use since it can silently redirect to a clone page."}],"lastReviewed":"2026-07-05"},{"slug":"stranded-missionary-wire-transfer-request","url":"https://scamencyclopedia.org/questions/stranded-missionary-wire-transfer-request","question":"Someone claiming to be a missionary I know is stranded abroad and needs a wire transfer urgently. What should I do?","shortAnswer":"Treat this as a likely account takeover or impersonation scam and verify independently by contacting the missionary or their sending organization through previously known contact details before sending any money.","explanation":"This scam typically begins when a scammer gains access to a missionary's email account or social media profile, or creates a convincing look-alike account, then messages the missionary's supporters and church network with an urgent story about being stranded, robbed, hospitalized, or detained while abroad, needing an immediate wire transfer to resolve the crisis. Because the missionary is a real, known, and trusted person, and because international travel genuinely does carry some risk, the story is often believable enough that supporters act quickly without verifying.\n\nThe scammer usually asks for the wire transfer to go to an account that is not the missionary's own known account, sometimes explained away as belonging to a local contact who is helping them, and pushes for speed by emphasizing the urgency of the situation and sometimes asking the recipient not to mention it to others to avoid worrying the missionary's family.\n\nMissionary sending organizations typically have established emergency protocols and do not rely on individual supporters wiring money to unfamiliar accounts on short notice, so any such request should be verified through the sending organization's own office and through a direct call or video call to the missionary using contact information obtained independently of the suspicious message.","redFlags":["The urgent message asks for a wire transfer to an account other than one you have used for this person before","You are asked to keep the request confidential or not to contact the person's family or organization","The account or profile contacting you is new or was recently compromised, based on unusual recent activity","The story includes high urgency and discourages verification by claiming there is no time","The writing style or details do not match how the missionary normally communicates"],"whatToDoNow":["Contact the missionary directly using a phone number or method you already had, not one provided in the suspicious message","Contact the missionary's sending organization to check whether they are aware of any emergency","Do not send a wire transfer to a new or unfamiliar account based on an urgent message alone","Alert others in the missionary's support network if you suspect their account has been compromised","Report the compromised account to the platform it was sent from so it can be secured"],"faq":[{"question":"What should the missionary do if their account was actually compromised?","answer":"They should change passwords immediately, enable multi-factor authentication, notify their sending organization and support network directly through a verified channel, and report the compromise to the platform involved."}],"lastReviewed":"2026-07-05"},{"slug":"mlm-pitched-inside-church-small-group","url":"https://scamencyclopedia.org/questions/mlm-pitched-inside-church-small-group","question":"A fellow member of my small group keeps pitching a business opportunity as a way to 'bless our family finances.' Is this an MLM scam?","shortAnswer":"Framing a multi-level marketing pitch as a faith-aligned way to bless your family's finances is a common recruitment tactic, and it deserves the same scrutiny as any other MLM opportunity regardless of the spiritual language used.","explanation":"Multi-level marketing recruiters have long understood that tight-knit communities, including churches, small groups, and Bible studies, provide an efficient recruiting pool because members already trust each other and meet regularly. A recruiter within the group often frames the opportunity not as a business risk but as a faith-aligned path to financial freedom, describing it as a way to bless their family, fund missions giving, or achieve the flexibility to homeschool or serve the church more, which makes the pitch feel aligned with the group's values rather than a sales pitch.\n\nThe underlying business model, however, remains the same as any MLM: income depends primarily on recruiting new participants who buy in and purchase inventory, rather than on selling products to genuine outside customers, and the mathematics of these structures mean the vast majority of participants lose money once they account for the cost of products purchased and events attended. The religious framing can make it harder for other members to push back, since questioning the opportunity can feel like questioning the recruiter's faith or judgment.\n\nA well-run small group or church should be a place where members feel free to decline a business pitch without social consequence, and members considering the opportunity should evaluate it on its actual business fundamentals, such as whether income is realistically possible from retail sales alone, independent of the spiritual framing used to present it.","redFlags":["The opportunity is described using faith language, such as blessing your family or funding ministry, rather than plain business terms","Income depends heavily on recruiting new participants rather than selling to outside customers","You are asked to buy a starter kit or ongoing inventory to participate","Success stories shown are a small number of top earners, with no data on typical or median participant income","Declining the pitch creates social friction within the small group or church community"],"whatToDoNow":["Ask for the company's official income disclosure statement, which shows what a typical, not top, participant earns","Evaluate whether the product could realistically be sold to people outside the recruiting network at the stated price","Feel free to decline without guilt, and note that a healthy small group does not pressure members over business decisions","If you already invested in inventory, check the company's return policy for unsold product","Report high-pressure or misleading recruitment claims to consumer protection authorities if applicable"],"faq":[{"question":"Are all multi-level marketing businesses scams?","answer":"Not all are illegal, but the vast majority of participants in most MLM structures lose money once costs are accounted for, and the practice of using a trusted community like a church small group to recruit deserves particular caution regardless of the specific company involved."}],"lastReviewed":"2026-07-05"},{"slug":"mission-trip-crowdfunding-fake-campaign","url":"https://scamencyclopedia.org/questions/mission-trip-crowdfunding-fake-campaign","question":"How do I verify a mission trip crowdfunding campaign is real before I donate?","shortAnswer":"Confirm the campaign is linked to an established sending organization or church that you can independently verify, since fake mission trip crowdfunding pages copying real photos and stories are used to collect donations that never fund any actual trip.","explanation":"Mission trip fundraising has moved largely online, with individuals sharing crowdfunding links through social media and church networks to cover travel costs, which creates an opportunity for scammers to create convincing fake campaigns using stolen photos and stories copied from genuine missionaries or past trips. A fraudulent campaign may claim affiliation with a real, well-known sending organization without any actual connection, or invent a plausible-sounding but nonexistent one.\n\nBecause crowdfunding platforms generally do not verify that a fundraiser will actually travel or that funds will be used as described, a fake campaign can run for weeks collecting small donations from well-meaning family, friends, and church contacts before anyone notices the trip never happens or the organization does not exist. Some versions are opportunistic, created by someone who genuinely knows the person they are impersonating well enough to make the details convincing, including using a stolen or copied photo of that person to make the appeal look authentic.\n\nDonors can protect themselves and the person being impersonated by verifying directly with the claimed sending organization that the trip and the individual are registered participants, and by giving through the organization's own official platform rather than an individually created crowdfunding page whenever that option exists.","redFlags":["The campaign cannot be verified with the sending organization it claims to be affiliated with","Photos used in the campaign appear elsewhere online under a different name or context when reverse searched","The campaign was shared by an account you do not recognize as belonging to someone you know well","There is no way to confirm the trip's actual dates, itinerary, or organizing body","The fundraiser pushes for donations through a personal payment app rather than the sending organization's platform"],"whatToDoNow":["Contact the claimed sending organization directly to confirm the trip and participant are registered","Reverse image search key photos from the campaign to check for reuse from unrelated sources","Give through the sending organization's official donation platform when one exists, rather than a personal crowdfunding link","Ask the person directly, through a channel you know is really them, before donating to a shared campaign","Report suspected fake campaigns to the crowdfunding platform"],"faq":[{"question":"Is it safe to donate to a mission trip campaign shared by someone I know on social media?","answer":"It is safer than an anonymous appeal, but accounts can be compromised or impersonated, so a quick direct confirmation with the person or their sending organization before donating is still worthwhile, especially for larger amounts."}],"lastReviewed":"2026-07-05"},{"slug":"tv-evangelist-urgent-sowing-appeal","url":"https://scamencyclopedia.org/questions/tv-evangelist-urgent-sowing-appeal","question":"A television evangelist is running an urgent appeal to 'sow' money before a deadline. What should I know before responding?","shortAnswer":"Urgent, deadline-driven appeals to send money for a spiritual benefit are a fundraising pressure tactic designed to bypass careful consideration, and the appearance of a deadline for a spiritual blessing has no basis in most religious teaching.","explanation":"Television and online media ministries often rely heavily on direct viewer donations to fund their operations, and some use urgent, deadline-framed appeals as a fundraising technique that mirrors tactics used in ordinary direct-response marketing more than traditional religious giving. The appeal typically claims that giving before a specific date, often within days, will unlock a special blessing, breakthrough, or window of favor, creating pressure to act immediately rather than take time to consider the request.\n\nThis urgency undermines careful decision-making, which is precisely the point: viewers who might otherwise research the ministry's finances or discuss the decision with family are pushed to act before that reflection happens. Repeated deadlines are also a warning sign in themselves, since a ministry that runs a new urgent deadline appeal every few weeks is using the tactic as a routine fundraising tool rather than responding to a genuinely singular event.\n\nBefore responding to any urgent giving appeal, it is reasonable to slow down, verify the ministry's registration and financial transparency, and recognize that a genuine spiritual practice of giving is not diminished by taking a day or two to make a thoughtful decision rather than reacting to a countdown clock.","redFlags":["A specific short deadline is attached to a spiritual benefit from giving","The same ministry runs frequent, repeated urgent deadline appeals","No independently audited financial statements are available for the ministry","The appeal discourages taking time to think it over or discuss with family","Giving amounts suggested escalate with each appeal"],"whatToDoNow":["Take at least a day before responding to any deadline-based giving appeal","Look up whether the ministry publishes audited financial statements or is a member of a financial accountability body","Discuss significant giving decisions with a trusted family member or your local faith community","Set a personal giving budget in advance so appeals cannot pressure you into amounts you cannot afford","Report deceptive fundraising claims to consumer protection authorities if they involve specific false promises"],"faq":[{"question":"Is it wrong to give generously to a media ministry I trust?","answer":"Generous giving to a ministry you have researched and trust is a personal decision many people make thoughtfully. The concern here is specifically the manufactured urgency and deadline pressure used to bypass that consideration."}],"lastReviewed":"2026-07-05"},{"slug":"fake-religious-relic-artifact-sale","url":"https://scamencyclopedia.org/questions/fake-religious-relic-artifact-sale","question":"I found a rare religious relic or artifact for sale online with a story about its origin. How do I avoid a fake?","shortAnswer":"Treat online sales of supposed religious relics or ancient artifacts with strong skepticism, since the market is heavily populated with fabricated items and fabricated provenance stories, and legitimate antiquities require documented, verifiable provenance and often export licensing.","explanation":"The trade in supposed religious relics, ancient manuscripts, and artifacts attracts scammers because buyers are often motivated by devotion or historical fascination rather than pure investment logic, making them more susceptible to a compelling story than to hard documentation. A seller typically presents an item, such as a claimed fragment of an ancient text, a relic associated with a saint or holy site, or an artifact from a biblical-era excavation, along with a narrative explaining how it came into their possession, often involving a family inheritance or a discovery abroad.\n\nIn reality, many such items are modern reproductions, and even when an object is genuinely old, the specific claimed religious significance or origin is frequently fabricated to increase its price. Genuine, legally sold antiquities require documented provenance showing a clear chain of ownership, often back to before international treaties restricting antiquities export took effect, along with any required export licenses from the country of origin, none of which a fabricated sale can produce credibly.\n\nBuyers should also be aware that purchasing looted or illegally exported antiquities, even unknowingly, can carry legal risk in many countries, in addition to the financial risk of buying a fake, making independent verification through a qualified appraiser or academic expert essential before any significant purchase.","redFlags":["No documented chain of ownership or provenance is provided beyond a verbal story","The seller cannot produce any export license or import documentation for an artifact claimed to be from another country","The price seems unusually low for an item of the claimed historical or religious significance","The seller pressures a quick sale and discourages independent expert appraisal","Photos or descriptions closely resemble known museum pieces or previously sold items"],"whatToDoNow":["Have any significant purchase independently appraised by a qualified expert before paying","Request full documented provenance and any required export or import licensing","Research whether similar 'relics' or artifacts have been previously flagged as fakes by museums or academic sources","Be cautious of high-pressure sales tactics discouraging independent verification","Report suspected fraudulent sales to the platform hosting them and, for suspected looted antiquities, to relevant authorities"],"faq":[{"question":"Can buying a fake relic ever be illegal, not just a financial loss?","answer":"Buying a known fake sold as genuine can be fraud on the seller's part, and separately, purchasing looted or illegally exported genuine antiquities can carry legal consequences for the buyer in some jurisdictions, so documentation matters for both authenticity and legality."}],"lastReviewed":"2026-07-05"},{"slug":"deathbed-inheritance-charity-scam-email","url":"https://scamencyclopedia.org/questions/deathbed-inheritance-charity-scam-email","question":"I received an email claiming a dying stranger wants to leave their fortune to charity through me because of my faith. Is this a scam?","shortAnswer":"Yes, this is a well-known variation of the advance-fee inheritance scam, adapted with religious framing to make the story feel more credible and to appeal to the recipient's charitable instincts.","explanation":"This scam adapts the classic advance-fee inheritance fraud by adding a religious motive: the email claims to be from someone terminally ill, often described as a wealthy widow or widower with no living relatives, who wants to donate their fortune to charitable or religious causes and has chosen the recipient, a stranger, based on an internet search or claimed spiritual guidance. The story is designed to feel meaningful and providential rather than random, which lowers the recipient's guard compared to an obviously random financial windfall claim.\n\nAs the correspondence continues, the sender eventually introduces a lawyer, bank official, or clergy member who explains that a fee is required to release the funds, process paperwork, or cover taxes before the inheritance or donation can be transferred. Each payment made unlocks a new, larger obstacle requiring another payment, and the promised transfer never actually occurs because no real inheritance exists.\n\nThe religious framing serves the same function as the charitable-cause framing common in other versions of this scam: it gives the recipient a positive, altruistic reason to participate, and it can make people who would be suspicious of a personal windfall feel comfortable helping with what appears to be a good cause, when in fact the entire premise is fabricated.","redFlags":["An unsolicited message from a stranger claims to want to leave a large fortune to you or a cause you support","The story includes terminal illness, no living relatives, and a stated religious or charitable motive","A fee is eventually requested to release funds, cover taxes, or process legal paperwork","Communication relies heavily on email with poor verification of the claimed lawyer, bank, or official's identity","Each payment leads to a new obstacle requiring further payment"],"whatToDoNow":["Do not respond to unsolicited messages claiming a stranger wants to leave you or a charity a fortune","Never pay any fee to release an inheritance or donation you did not expect and cannot independently verify","Report the email to your email provider and to relevant fraud reporting bodies","If a real charity is named, contact the charity directly to check whether they have any knowledge of the claimed gift","Warn others, especially older relatives, who may be more likely to receive and trust this type of message"],"faq":[{"question":"Could a genuine stranger actually leave money to me or a charity through email contact?","answer":"Legitimate bequests are handled through a probate court and licensed attorneys who do not require upfront fees from a beneficiary or a charity to release funds, so any request for payment to access an inheritance is a reliable sign of fraud."}],"lastReviewed":"2026-07-05"},{"slug":"fake-papal-blessing-certificate-scam","url":"https://scamencyclopedia.org/questions/fake-papal-blessing-certificate-scam","question":"I was offered a paid 'papal blessing' certificate for a special occasion. Is that legitimate or a scam?","shortAnswer":"Genuine papal blessing certificates can be requested through official Vatican channels, usually at a modest or no cost, so a third-party seller charging a large fee, especially with urgency or vague sourcing, should be verified carefully before paying.","explanation":"Papal blessing certificates, commemorating occasions such as weddings, anniversaries, or ordinations, are a genuine practice available through official Vatican offices, typically requested through a diocese or parish and processed for a modest fee covering administrative costs. Because the certificates are a real, sought-after item for Catholic families marking significant occasions, they have also become a target for resale scams, where a third party charges a significantly inflated price, claims special access or a personal connection to expedite the process, and either delivers a low-quality unofficial copy or nothing at all.\n\nSome versions of this scam operate through websites unaffiliated with any diocese, offering to 'arrange' a blessing certificate for a fee well above what the official process costs, sometimes adding fabricated claims about the certificate being personally blessed or signed in a way beyond the standard commemorative document. Buyers who are not familiar with the normal parish-based request process can be misled into thinking a substantial fee to a third party is required, when it is not.\n\nThe safest path for a genuine papal blessing certificate is to request it through a local Catholic parish or diocese, which can guide the process through official channels, rather than through a third-party website found through a general search or social media ad.","redFlags":["The certificate is offered by a website with no clear affiliation to a diocese or parish","The price charged is far higher than the modest administrative fee typically associated with the official process","Claims of special access, personal connections, or expedited processing not available through normal channels","Pressure to pay quickly to secure the certificate for an upcoming occasion","No way to verify the certificate's authenticity once received"],"whatToDoNow":["Request a papal blessing certificate through your local Catholic parish or diocese rather than a third-party website","Ask your parish office what the current normal process and fee for this request actually is","Be skeptical of any site charging a large premium or claiming special expedited access","If you already paid a suspicious third party, contact your bank or card issuer about disputing the charge","Report misleading sellers to consumer protection authorities"],"faq":[{"question":"Is a papal blessing certificate a real thing at all?","answer":"Yes, it is a genuine commemorative document available through official Catholic Church channels for significant occasions, which is exactly why fraudulent resellers use its real existence to make an inflated, unofficial offer seem credible."}],"lastReviewed":"2026-07-05"},{"slug":"halal-kosher-labeled-investment-fraud","url":"https://scamencyclopedia.org/questions/halal-kosher-labeled-investment-fraud","question":"An investment is marketed as fully halal or kosher with guaranteed returns. Is that a red flag?","shortAnswer":"Yes, a guaranteed return is inconsistent with genuine profit-and-loss-sharing principles used in real faith-compliant finance, so an investment labeled halal or kosher while promising a fixed guaranteed return should be treated as a likely fraud regardless of its religious certification claims.","explanation":"Faith-compliant investment products, such as those structured to comply with Islamic finance principles or kosher financial guidelines, are a real and growing part of the financial industry, built around specific religious rules about interest, risk-sharing, and permissible business activities. Scammers exploit the credibility of these labels by marketing an investment as fully compliant with religious financial law while attaching a guaranteed fixed return, which is actually inconsistent with core principles like profit-and-loss sharing that underlie genuine faith-compliant structures.\n\nA fraudulent version of this pitch typically claims certification from a religious scholar or board without providing verifiable documentation, and it targets community members specifically because compliance with their faith's financial principles is a genuine concern that a legitimate label would address, making the fraudulent guarantee claim feel reassuring rather than suspicious. As with other affinity-based investment fraud, the scheme often relies on word of mouth within a specific religious or cultural community, and it may be structured as a Ponzi arrangement paying early investors from later contributions.\n\nVerifying a claimed religious compliance certification independently, checking that the investment itself is registered with the relevant financial regulator, and treating any guaranteed fixed return as a red flag regardless of the religious framing are the key steps to evaluate these offers honestly.","redFlags":["A guaranteed fixed return is promised alongside a claim of religious financial compliance","The claimed religious certification or scholar endorsement cannot be independently verified","The investment or its promoter is not registered with the relevant financial regulator","Marketing relies heavily on the specific faith or cultural community rather than public, transparent offering documents","Pressure to invest quickly to join a supposedly limited faith-compliant opportunity"],"whatToDoNow":["Verify any claimed religious certification directly with the named scholar, board, or certifying body","Confirm the investment and its promoter are registered with your country's financial regulator","Treat any guaranteed fixed return as inconsistent with genuine profit-and-loss-sharing principles and a warning sign","Consult an independent, qualified financial advisor familiar with faith-compliant finance before investing","Report suspected fraudulent schemes to securities regulators"],"faq":[{"question":"Is faith-compliant investing itself legitimate?","answer":"Yes, faith-compliant investment products are a real and established part of the financial industry, offered by regulated institutions. The scam concern is specifically fraudulent products that misuse the label alongside guaranteed returns that are inconsistent with genuine compliant structures."}],"lastReviewed":"2026-07-05"},{"slug":"cult-requires-handing-over-wages","url":"https://scamencyclopedia.org/questions/cult-requires-handing-over-wages","question":"A group I joined now requires members to hand over their wages or paychecks to the leadership. Is this normal or a warning sign?","shortAnswer":"Requiring members to surrender their income or paychecks to group leadership is a strong indicator of a high-control group exerting financial control over members, and it is not a normal practice in mainstream religious communities.","explanation":"Mainstream religious communities generally ask for voluntary giving, such as tithes or offerings representing a portion of income, decided by the individual member without external enforcement or surrender of their entire paycheck. A group that requires members to hand over their full wages, transfer control of bank accounts, or sign over other assets to leadership has moved well beyond typical religious giving into a pattern of financial control that is a hallmark of high-control groups, sometimes described as cults.\n\nThis financial control typically develops gradually, often after a period of love bombing and increasing time commitment, and it is usually framed as an expression of total devotion, communal living, or trust in leadership's stewardship of resources. Once a member's income and assets are controlled by the group, leaving becomes significantly harder, since the person may have no independent financial resources, housing, or support network outside the group to fall back on.\n\nThis financial dependency is often intentional, functioning as a powerful mechanism to prevent members from leaving even if they become unhappy or begin to doubt the group's teachings, because the practical cost of leaving, starting over financially with no savings and no external support, feels overwhelming.","redFlags":["Members are required to hand over wages, paychecks, or control of bank accounts to leadership","The requirement developed gradually after an initial period of intense welcome and belonging","Leaving the group would mean having no independent financial resources or housing","Questioning the financial arrangement is met with guilt, spiritual warnings, or accusations of insufficient devotion","Members are discouraged from maintaining independent bank accounts or financial knowledge"],"whatToDoNow":["Maintain an independent bank account and some financial resources outside the group's control if at all possible","Reach out to family, friends, or a cult-recovery support organization for confidential guidance","Document your financial contributions and any assets transferred to the group","Seek advice from an independent lawyer if significant assets have already been signed over","Contact a helpline specializing in high-control group exit support if you are considering leaving and are worried about your finances"],"faq":[{"question":"Is communal living or shared finances always a sign of a cult?","answer":"Not necessarily; some intentional communities practice voluntary shared finances with clear exit rights and transparency. The concern is specifically mandatory surrender of income with restricted ability to leave or reclaim independent financial standing."}],"lastReviewed":"2026-07-05"},{"slug":"paid-exorcism-deliverance-ministry-fees","url":"https://scamencyclopedia.org/questions/paid-exorcism-deliverance-ministry-fees","question":"A deliverance or exorcism ministry is charging escalating fees for multiple sessions. Is this legitimate?","shortAnswer":"Charging significant, escalating fees for repeated deliverance or exorcism sessions, especially without a clear endpoint, is a common pattern used to extract ongoing payments from vulnerable people and is not how established religious institutions typically handle these requests.","explanation":"Deliverance and exorcism ministries exist within various religious traditions, but established institutions that offer these services typically do so through a formal, accountable process, often free or at a nominal cost, following specific protocols with oversight from religious authorities. A scam version of this practice presents deliverance as an ongoing paid service, charging a fee for an initial session and then claiming additional sessions, each with a new fee, are needed because the process is not yet complete.\n\nThis pattern specifically targets people experiencing genuine psychological distress, unexplained physical symptoms, or personal crisis, who are especially vulnerable to a compelling explanation and a promised solution. Because the underlying distress often has causes, such as mental health conditions, that are not resolved by the ministry's services, the person may return for repeated paid sessions without improvement, sometimes escalating in cost as the ministry claims progressively more serious spiritual issues are being uncovered.\n\nA legitimate religious authority approached about deliverance or similar concerns typically does not charge escalating fees, works within established institutional oversight, and, when appropriate, will also encourage the person to seek qualified medical or mental health care alongside any spiritual support offered.","redFlags":["Fees are charged for deliverance or exorcism sessions and increase with each additional session","The ministry claims progressively more serious spiritual issues to justify continued paid sessions","No affiliation with, or oversight from, an established, accountable religious institution","The ministry discourages seeking medical or mental health evaluation for symptoms","Pressure to return for further paid sessions before the 'process' is complete"],"whatToDoNow":["Seek evaluation from a licensed medical or mental health professional for any unexplained symptoms or distress","Contact an established, accountable religious institution rather than an independent ministry charging fees for this specific service","Be wary of any deliverance service that charges escalating fees across multiple sessions","Discuss the situation with a trusted family member or your regular faith community before continuing","Report the ministry to consumer protection authorities if it made specific false or exploitative claims tied to payment"],"faq":[{"question":"Do established religious institutions ever charge for these services?","answer":"Practices vary by tradition, but established institutions typically do not treat this as an ongoing paid service with escalating fees, and many offer it as part of normal pastoral care at no direct cost, so an escalating fee structure is the key warning sign rather than any fee at all."}],"lastReviewed":"2026-07-05"},{"slug":"church-elder-informal-loan-network","url":"https://scamencyclopedia.org/questions/church-elder-informal-loan-network","question":"A respected church elder is asking members to lend him money personally, promising to repay with interest. Is this risky?","shortAnswer":"Personal loans from individual members to a respected leader, especially informal ones promising interest with no written agreement, carry real risk and should be treated with the same caution as lending to any acquaintance, regardless of their standing in the community.","explanation":"Trust extended to a respected church elder, deacon, or leader can make an informal personal loan request feel like a safe, almost automatic yes, especially when framed as a short-term need or a way to help a fellow believer through a temporary difficulty. The promised interest can make it feel like a reasonable financial arrangement rather than a risk, but an informal loan with no written agreement, no collateral, and no independent verification of the borrower's actual financial situation is fundamentally the same risk as lending money to any other individual.\n\nIn some cases, a respected figure genuinely intends to repay but is themselves in financial difficulty and takes on debt from multiple congregants simultaneously, creating an unsustainable situation where later loans are effectively used to repay earlier ones, resembling a small-scale Ponzi structure even without deliberate fraudulent intent from the start. In other cases, the borrowing is a deliberate pattern of moving through a congregation collecting individual loans with no real intention or ability to repay.\n\nEither way, members considering such a request should apply the same standards they would to any personal loan: a clear written agreement, a realistic understanding of the borrower's ability to repay, and comfort with the possibility that the money may not come back, since informal social pressure within a religious community can make it especially difficult to pursue repayment or report a problem if the arrangement goes wrong.","redFlags":["The loan request relies primarily on the elder or leader's respected standing rather than a documented financial plan","No written loan agreement, repayment schedule, or collateral is offered","Multiple members are being approached individually rather than through one transparent process","The stated purpose for the loan is vague or changes when asked for detail","Social pressure exists to keep the arrangement private or discourage discussing it with others in the congregation"],"whatToDoNow":["Insist on a written loan agreement with clear terms if you decide to lend any money at all","Ask other members whether they have also been approached, since multiple simultaneous loans from one borrower is a warning sign","Only lend an amount you can genuinely afford to lose entirely","Encourage church leadership to establish a transparent, formal process for any legitimate community lending or assistance needs","Report a pattern of unpaid loans across multiple congregants to relevant authorities if it appears to be a deliberate scheme"],"faq":[{"question":"Should churches have a formal process for helping members in financial need instead of individual loans?","answer":"Many churches do run benevolence funds or formal assistance programs specifically to avoid the risks of informal individual lending, and directing genuine needs through such a transparent, accountable process is generally safer for everyone involved."}],"lastReviewed":"2026-07-05"},{"slug":"fake-disaster-relief-collection-using-church-name","url":"https://scamencyclopedia.org/questions/fake-disaster-relief-collection-using-church-name","question":"Someone is collecting cash donations door-to-door claiming it's for disaster relief through our church. How do I verify this?","shortAnswer":"Confirm directly with church leadership, through a number you already have, whether an official relief collection is actually underway before giving any cash to a door-to-door or unsolicited collector claiming to represent the church.","explanation":"After a natural disaster or humanitarian crisis makes the news, opportunistic scammers frequently invoke the name of a well-known local church or a general appeal to Christian, Muslim, Jewish, or other charitable duty to collect cash donations, sometimes going door-to-door, standing outside stores, or contacting people directly by phone or text. Because the underlying cause, disaster relief, is real and urgent, and because invoking a specific church's name lends borrowed credibility, people are often willing to give quickly without asking for identification or a receipt.\n\nCash collections are especially vulnerable to this kind of fraud because there is no transaction record, no way to trace where the money actually went, and often no real accountability to the church whose name was invoked, whether or not the collector had any actual affiliation with it. Even when a collector does have some loose connection to the church, informal cash collections outside the church's normal financial process create a real risk of funds being misused or simply lost track of.\n\nChurches running legitimate relief collections typically do so through their normal giving channels, with receipts issued and funds tracked through the church's financial system, and church leadership can confirm quickly whether a specific door-to-door or public collection has actually been authorized.","redFlags":["The collector asks specifically for cash rather than a traceable donation through the church's normal giving system","No identification, receipt, or documentation is offered for the donation","Church leadership has no record of authorizing this specific collection when asked directly","The appeal uses generic disaster relief language without specifics about which organization will receive the funds","The collection appeared very quickly after a disaster was in the news, before any formal church response was organized"],"whatToDoNow":["Call your church office directly, using a number you already have, to confirm whether the collection is authorized","Give through the church's normal, traceable giving channel rather than to a cash collector","Ask any collector for identification and documentation, and decline to give if they cannot provide it","Report unauthorized collections using the church's name to church leadership so they can warn the congregation","Consider giving directly to an established, verified disaster relief organization instead"],"faq":[{"question":"Is it ever safe to give cash to a door-to-door collector for disaster relief?","answer":"It is safer to give through a verified, traceable channel, such as the church's own donation system or a directly verified established relief organization, since cash given to an unverified collector cannot be tracked or refunded if the collection turns out to be fraudulent."}],"lastReviewed":"2026-07-05"},{"slug":"zakat-collector-verification-scam","url":"https://scamencyclopedia.org/questions/zakat-collector-verification-scam","question":"How do I verify that someone collecting zakat on behalf of a mosque or charity is legitimate?","shortAnswer":"Confirm zakat collection is authorized directly with the mosque or charity's official office before giving, since fraudulent collectors impersonating authorized representatives around Ramadan and other high-giving periods are a recurring problem.","explanation":"Zakat collection increases significantly during Ramadan and other periods of heightened religious giving, and this predictable surge in charitable activity is exploited by scammers who present themselves as authorized collectors for a mosque, an established Islamic charity, or a specific relief campaign. These fraudulent collectors may appear in person outside mosques or in community gatherings, or increasingly they operate through social media posts and messaging apps, sometimes using a mosque or charity's real name and logo without any actual authorization.\n\nBecause zakat has a specific religious obligation attached to it, and because many donors want to fulfill this obligation promptly during specific periods, the urgency around timing can lead people to give without pausing to verify the collector's actual authorization. A fraudulent collector may also claim the funds are going to a specific urgent cause, such as a current humanitarian crisis, to add further emotional pressure to give immediately.\n\nEstablished mosques and Islamic charities typically have a clear, verifiable process for authorized zakat collection, including named representatives, official receipts, and a way to confirm authorization by phone or in person at the organization's office, and donors can and should use these verification steps even during the busiest giving periods.","redFlags":["The collector cannot be verified as authorized when you contact the mosque or charity's official office directly","No official receipt is provided for the zakat given","The collection appears primarily through social media or messaging apps rather than an established, verifiable channel","Urgency around a specific current crisis is used to discourage verification before giving","The collector requests payment via personal bank transfer or cash app rather than the organization's official account"],"whatToDoNow":["Contact the mosque or charity's official office directly to confirm the collector's authorization before giving","Ask for an official receipt for any zakat given","Give through the organization's verified official payment channel rather than a personal account","Warn your local mosque community if you encounter an unauthorized collector so others can be alerted","Report suspected fraudulent collectors to the mosque leadership and to local authorities"],"faq":[{"question":"Does zakat still count if I unknowingly give it to a fraudulent collector?","answer":"This is a religious question best directed to a knowledgeable scholar or imam, but from a practical standpoint, verifying the collector's legitimacy beforehand is the best way to ensure the obligation is actually fulfilled as intended and the funds reach genuine recipients."}],"lastReviewed":"2026-07-05"},{"slug":"whatsapp-bishop-imposter-money-request","url":"https://scamencyclopedia.org/questions/whatsapp-bishop-imposter-money-request","question":"I got a WhatsApp message that looks like it's from my bishop or church leader asking for urgent financial help. How do I check if it's real?","shortAnswer":"Call the leader directly using a phone number you already had, not the one that messaged you, since WhatsApp impersonation of clergy asking for urgent money is a widespread and low-cost scam that relies on the recipient not pausing to verify.","explanation":"This scam is a variant of executive or authority impersonation adapted for religious contexts, where a scammer creates a WhatsApp account using a leader's name and profile photo, often copied directly from a public social media page or church website, then messages congregants individually with an urgent request for financial help. The request may be framed as needing to help another member of the congregation quietly, covering an unexpected expense while traveling, or a similarly plausible scenario that discourages the recipient from checking with others.\n\nThe scam works at scale because a scammer can message dozens or hundreds of numbers scraped from a church directory or social media group with minimal effort, and only needs a small percentage of recipients to respond for the effort to pay off. Recipients who do not immediately recognize that the phone number is unfamiliar, and who trust the profile photo and name at face value, are the ones most likely to fall for the request.\n\nBecause WhatsApp numbers are easy to create and profile photos are easy to copy, the platform itself provides no inherent verification that the account belongs to the person it claims to represent, making independent verification through a previously known contact method the only reliable check.","redFlags":["The message comes from a phone number you do not recognize as your leader's usual number","The request involves urgent financial help, often framed to discourage checking with others first","The profile photo may be genuine but was easily copied from public sources","The message asks for payment via bank transfer, gift cards, or a payment app rather than any official church channel","Multiple congregants report receiving similar messages around the same time"],"whatToDoNow":["Call your leader directly using a phone number you already had before responding to any financial request","Check with other congregants to see if they have received similar suspicious messages","Do not send money based on a WhatsApp message alone, regardless of the name or photo displayed","Report the impersonating account to WhatsApp","Ask church leadership to send an official warning to the congregation if impersonation attempts are occurring"],"faq":[{"question":"Can WhatsApp accounts be verified to belong to a specific real person?","answer":"WhatsApp does not provide a general verification badge confirming an account belongs to a specific private individual like a local pastor, so the only reliable verification is contacting the person through a phone number or method you already had before the suspicious message arrived."}],"lastReviewed":"2026-07-05"},{"slug":"fake-nun-romance-scam-profile","url":"https://scamencyclopedia.org/questions/fake-nun-romance-scam-profile","question":"Someone claiming to be a nun or religious sister contacted me on social media asking for help. Is this likely a scam?","shortAnswer":"Yes, profiles claiming to be a nun, sister, or other consecrated religious figure and reaching out to strangers online asking for money or personal help are commonly used in romance and advance-fee scams because the identity suggests trustworthiness and discourages skepticism.","explanation":"Scammers sometimes adopt the identity of a nun, religious sister, or similar consecrated figure specifically because this framing suggests innocence, trustworthiness, and a lack of ulterior motive, which lowers a target's guard compared to an ordinary stranger's request. The approach may occur on social media, dating apps, or messaging platforms, and the story typically involves a claimed need, such as funds for an orphanage, medical treatment, travel to visit the target, or a crisis affecting the convent or mission the person claims to be part of.\n\nBecause most consecrated religious figures do not typically use social media to solicit personal financial help from strangers, and because legitimate religious orders operate through established institutional channels for fundraising, an individual account making a personal, direct financial appeal should be treated with the same scrutiny as any other unsolicited online request. Some versions of this scam blend into romance scam patterns, with the fake nun account expressing personal affection or a desire to leave religious life to be with the target, which is used to justify escalating financial requests over time.\n\nVerifying such claims through the actual religious order or diocese the person claims to belong to, and being cautious of any unsolicited financial request from an online-only relationship regardless of the claimed identity, are the most reliable ways to avoid this scam.","redFlags":["An unsolicited online contact claims to be a nun or religious sister and asks for financial help","The story includes a specific crisis, such as an orphanage, mission, or medical need, requiring money quickly","The relationship develops romantic or deeply personal undertones inconsistent with the claimed religious vocation","The claimed order, convent, or diocese cannot be verified when contacted independently","Requests to communicate off the original platform and to send money via wire transfer or gift cards"],"whatToDoNow":["Contact the claimed religious order or diocese directly to verify the person's identity and any stated need","Do not send money to anyone you have only interacted with online, regardless of their claimed religious identity","Reverse image search profile photos to check for reuse under other names","Report the suspicious profile to the platform it was found on","Discuss the situation with a trusted friend or family member before taking any financial action"],"faq":[{"question":"Do legitimate nuns or religious sisters ever use social media?","answer":"Many do, often to share about their community's work, but legitimate fundraising for their order or mission is typically conducted through the order's official channels rather than personal direct financial appeals to individual strangers online."}],"lastReviewed":"2026-07-05"},{"slug":"fake-synagogue-charity-collector-scam","url":"https://scamencyclopedia.org/questions/fake-synagogue-charity-collector-scam","question":"Someone claiming to collect tzedakah for a synagogue or Jewish charity approached me unexpectedly. How do I check if it's legitimate?","shortAnswer":"Verify directly with the synagogue or charity's own office before giving, especially if the collector approached you unexpectedly in public or online, since impersonation of tzedakah collectors is a known scam pattern that exploits the strong cultural value placed on charitable giving.","explanation":"Tzedakah collection is a meaningful and common practice, and its cultural importance is exactly what scammers exploit when they impersonate collectors representing a synagogue, yeshiva, or Jewish charitable organization. A fraudulent collector may approach people in person near a synagogue or Jewish community center, or increasingly reach out through social media or messaging apps, presenting a plausible cause such as supporting a struggling family, a religious school, or a specific community emergency, often with a sense of urgency that discourages the recipient from asking detailed questions.\n\nBecause genuine tzedakah collection does happen through informal, in-person channels in many communities, a fraudulent collector can blend in more easily than a fraudulent charity in contexts where formal receipts are less commonly expected for smaller cash gifts. This makes verification through the synagogue or organization's own office particularly important before giving any significant amount, and it is reasonable to ask any collector, even one who seems familiar, for confirmation of which organization they represent and how the funds will be used.\n\nEstablished Jewish charitable organizations can typically confirm quickly whether a specific collection effort or individual collector is actually authorized, and donors who want to be certain their tzedakah reaches its intended purpose can also choose to give directly through the organization's own established channels rather than to an individual collector encountered unexpectedly.","redFlags":["The collector approached you unexpectedly, in person or online, without a clear connection to an organization you can verify","No documentation or receipt is offered, and the collector discourages questions about how funds will be used","The stated cause is vague or shifts when you ask for more specific detail","Payment is requested via an unusual method such as a personal payment app or cryptocurrency","Pressure to give immediately rather than time to verify the collection independently"],"whatToDoNow":["Contact the synagogue or charity's office directly to confirm the collector and the specific collection effort are authorized","Ask for documentation or a receipt for any significant donation","Give through the organization's own established giving channel when in doubt about an individual collector","Discuss unfamiliar collectors with your rabbi or community leadership so others can be alerted if needed","Report suspected fraudulent collectors to community leadership and local authorities"],"faq":[{"question":"Is it unusual for tzedakah to be collected informally in person?","answer":"It is a normal and long-standing practice in many communities, which is exactly why verification matters more here than in contexts where formal receipts are always expected. Confirming the specific collector and cause with the organization directly is a reasonable step even within a familiar community."}],"lastReviewed":"2026-07-05"},{"slug":"fake-online-ordination-ministry-license-scam","url":"https://scamencyclopedia.org/questions/fake-online-ordination-ministry-license-scam","question":"A website offers instant online ordination or a ministry license for a fee, with claims it unlocks tax benefits. Is this a scam?","shortAnswer":"Instant online ordination services are generally legitimate as a novelty or personal credential, but claims that ordination alone unlocks significant tax benefits or the ability to run a tax-exempt organization without following proper legal steps are misleading and can expose you to legal and tax risk.","explanation":"Online ordination services that grant a certificate for a fee, sometimes marketed to allow the recipient to legally perform weddings, are a real product in some jurisdictions and are not inherently fraudulent as a basic credential. The scam risk arises specifically when these services, or people building on top of them, market the ordination as a path to significant personal tax benefits, the ability to operate a tax-exempt religious organization from your home, or protection from routine legal obligations, none of which follow automatically from an online ordination certificate.\n\nSome versions of this scheme go further, selling a package that claims to establish a personal 'ministry' or 'church' entitling the buyer to reclassify personal income, property, or business activity as religious and therefore tax-exempt, which is a serious misrepresentation of tax law that can expose the buyer to audits, penalties, and even fraud charges, while the seller of the package faces no consequences for the buyer's resulting legal exposure.\n\nBefore relying on any such claim, it is important to consult a qualified tax professional or attorney about what a religious organization is actually required to do to obtain and maintain tax-exempt status in your jurisdiction, since these requirements are substantially more involved than purchasing an ordination certificate and typically include formal incorporation, governance structures, and ongoing compliance filings.","redFlags":["The service claims ordination alone grants significant personal tax benefits","A package is sold claiming to let you reclassify personal income or property as tax-exempt religious activity","No mention is made of the actual legal steps required to form and maintain a tax-exempt organization","The marketing emphasizes avoiding taxes or legal obligations rather than genuine religious purpose","Refund policies are unclear if the promised legal or tax benefits do not materialize"],"whatToDoNow":["Consult a qualified tax professional or attorney before relying on any claim that ordination grants tax benefits","Research your jurisdiction's actual legal requirements for forming a tax-exempt religious organization","Treat online ordination as a basic personal credential only, not a tax or legal strategy","Be skeptical of any package promising to reclassify personal income or assets as tax-exempt","Report deceptive marketing claims to consumer protection or tax authorities if you were misled into a costly package"],"faq":[{"question":"Can online ordination legally let me perform a wedding?","answer":"In some jurisdictions, yes, subject to local rules, but this is a separate question from tax exemption, and marketing that conflates a simple wedding-officiant credential with broad personal tax benefits should be treated with skepticism."}],"lastReviewed":"2026-07-05"},{"slug":"fake-monk-buddhist-alms-collector-scam","url":"https://scamencyclopedia.org/questions/fake-monk-buddhist-alms-collector-scam","question":"A person dressed as a monk asked me for money or alms in a tourist area. Is this a genuine request or a scam?","shortAnswer":"In many tourist areas, people dressed as monks soliciting cash directly from tourists, especially with a scripted pitch or a donation book, are impersonators rather than genuine monastics, since authentic alms practices in most Buddhist traditions do not involve direct cash solicitation of strangers on the street.","explanation":"In several countries with significant Buddhist populations, genuine monastic alms practice typically involves monks walking a set route at a set time to receive food offerings, not cash, from lay supporters who know and expect their visit, following specific rules about what may be accepted and how. Scammers exploit tourists' unfamiliarity with these actual practices by dressing in robes, sometimes purchased or imitation, and approaching foreign visitors directly in tourist areas asking for cash donations, sometimes offering a blessing, a bracelet, or a small trinket in exchange, or presenting a donation book with impressive-looking prior entries to encourage a larger contribution.\n\nThis scam is effective specifically because tourists want to be respectful of local religious customs and do not want to risk being disrespectful by questioning someone in religious dress, which is exactly the hesitation the impersonator relies on. Local monastic authorities in several affected countries have issued public warnings about this practice precisely because it also harms the genuine monastic community's reputation and blurs the line for visitors between authentic practice and street-level fraud.\n\nTourists who want to genuinely support monastic communities are generally better served by donating through a temple directly, participating in an organized and properly explained alms-giving experience, or supporting a recognized Buddhist charitable organization, rather than giving cash to an individual approaching them unprompted in a tourist area.","redFlags":["The person directly approaches tourists in a commercial or tourist area asking for cash","A donation book is shown with large prior entries to encourage a bigger contribution","A trinket, bracelet, or blessing is offered in exchange for a cash donation","The individual is not affiliated with any specific temple that can be checked or visited","Local tourism authorities or temples in the area have issued public warnings about this specific practice"],"whatToDoNow":["Politely decline if approached directly for cash by someone in religious dress in a tourist area","Support genuine monastic communities by donating directly at an established temple instead","Ask hotel staff or a local guide whether this specific practice is a known scam in the area you are visiting","Report the individual to local tourist police if you believe you were misled","Share your experience with other travelers to help them avoid the same approach"],"faq":[{"question":"Is it disrespectful to decline if someone in monk's robes asks me for money?","answer":"No, declining a direct cash request from a stranger in a tourist area is not disrespectful to genuine Buddhist practice, since authentic alms customs do not typically involve directly soliciting cash from unfamiliar foreign visitors on the street."}],"lastReviewed":"2026-07-05"},{"slug":"concert-resale-fake-tickets","url":"https://scamencyclopedia.org/questions/concert-resale-fake-tickets","question":"I bought concert tickets from a resale site or a stranger online — how do I know they're not fake?","shortAnswer":"Fake tickets are common on unofficial resale sites, social media marketplaces, and classified ads, especially for sold-out shows. Only trust tickets bought through the venue, the official ticketing partner, or a resale platform that guarantees replacement or a refund if a ticket doesn't scan.","explanation":"Ticket fraud spikes whenever a show sells out fast. Scammers list tickets they don't own, sell the same barcode to multiple buyers, or forge PDFs that look convincing but fail at the door. Sellers often push buyers off the platform and into direct bank transfer or a payment app's 'friends and family' option, because that removes any buyer protection the marketplace would otherwise offer.\n\nThe safest purchase path is always the venue, the artist's official site, or a large resale marketplace that guarantees the ticket will work or you get your money back. These platforms verify tickets against the original barcode and will refund you automatically if entry is refused. A private seller offering a 'deal' below face value, or a seller who suddenly has extra tickets to a sold-out show, should raise suspicion.\n\nMobile tickets are safer than PDFs because the barcode refreshes and can't easily be duplicated, but only if the transfer happens through the official app. If a seller sends a screenshot of a mobile ticket instead of transferring it properly, that screenshot can't be used to enter and may already have been sold to someone else.","redFlags":["Seller insists on bank transfer or 'friends and family' payment instead of a protected marketplace","Ticket is a screenshot or forwarded PDF rather than an official app transfer","Price is well below face value for a sold-out or high-demand event","Seller found via a social media comment or classified ad rather than a verified resale platform","Seller pressures you to decide fast because 'someone else is interested'","Seller can't or won't use the platform's official ticket-transfer feature"],"whatToDoNow":["Only buy from the venue, the artist's official ticketing partner, or a resale marketplace with a buyer guarantee","If you already paid a private seller, ask them to transfer the ticket through the official app rather than sending a file","Pay by credit card where possible so you can dispute the charge if the ticket fails","Check the barcode or QR code isn't a duplicate by asking the seller to show it live on a video call","Report suspicious listings to the platform they were posted on","If the ticket turns out fake, file a chargeback with your card issuer and report the seller to the marketplace and local consumer protection body"],"faq":[{"question":"Is it safer to buy from a resale app than a stranger on social media?","answer":"Yes, if the resale app guarantees entry or a refund. Private sales through social media or classifieds have no such protection, and there's no recourse if the ticket doesn't work."},{"question":"Can a mobile ticket be duplicated and sold twice?","answer":"A properly transferred mobile ticket through the official app usually can't, because the barcode is unique and updates. A screenshot of one can be reused or sold multiple times, so a screenshot should never be treated as a valid ticket."}],"lastReviewed":"2026-07-05"},{"slug":"festival-payment-app-friends-family","url":"https://scamencyclopedia.org/questions/festival-payment-app-friends-family","question":"A ticket seller asked me to pay via a payment app's 'friends and family' option — is that a red flag?","shortAnswer":"Yes. 'Friends and family' payments have no buyer protection, so if the ticket never arrives or turns out to be fake, you have almost no way to get your money back.","explanation":"Payment apps offer a 'friends and family' or 'personal' transfer option meant for splitting bills or sending money to people you know, and it deliberately carries lower fees and no dispute process. Scammers selling fake or non-existent tickets ask for exactly this option because it means the payment can't be reversed once sent, unlike a 'goods and services' payment which comes with buyer protection and a formal dispute process.\n\nA legitimate private seller usually has no objection to using the goods-and-services option, even though it costs them a small fee, because they actually intend to deliver the ticket. A seller who refuses, or who claims the fee is 'not worth it' for a ticket sale, is often signaling that they don't plan to deliver anything and want a payment that can't be clawed back.\n\nThis pattern isn't limited to tickets — it shows up in online marketplace sales generally — but it's especially common around high-demand events where buyers are anxious and willing to skip normal caution to secure a seat.","redFlags":["Seller insists on 'friends and family' or 'personal' payment rather than a protected option","Seller claims the goods-and-services fee is 'too much' for the transaction","Seller wants payment before showing proof of the ticket or its barcode","No willingness to use an escrow-style resale platform instead","Communication moves quickly from a public listing to a private chat app","Seller has no reviews, history, or verifiable profile on the platform where you found them"],"whatToDoNow":["Insist on a payment method that includes buyer protection before sending any money","If you've already paid via friends and family and the ticket never arrived, report it to the payment app's fraud team immediately","Screenshot all communication with the seller as evidence","Report the seller's profile to the platform where the listing appeared","File a police report if the amount is significant, since some payment apps require this for fraud claims","Warn others by reporting the listing if it's still live"],"faq":[{"question":"Can I get my money back after a friends-and-family payment to a scammer?","answer":"It's difficult but not always impossible. Contact the payment app's support immediately, and separately ask your bank about a chargeback if the payment app is linked to a debit or credit card, since the card network may offer protection the app itself doesn't."},{"question":"Why do legitimate sellers usually agree to goods-and-services payment?","answer":"Because they intend to actually deliver the item and have nothing to hide, the small fee is an acceptable cost of a safe transaction. Refusal is one of the clearest signs a seller doesn't plan to follow through."}],"lastReviewed":"2026-07-05"},{"slug":"sold-out-show-social-media-ticket-scam","url":"https://scamencyclopedia.org/questions/sold-out-show-social-media-ticket-scam","question":"Someone in a fan group is offering tickets to a sold-out show — is this likely a scam?","shortAnswer":"It's a common setup for fraud. Scammers watch fan groups and comment sections for sold-out events and pose as generous sellers with 'extra' tickets, often disappearing after payment.","explanation":"When a show sells out, fan communities become flooded with genuine fans looking for tickets and scammers looking for targets. A common tactic is posting a convincing story — a friend can't make it, plans changed, a family emergency — paired with a screenshot of a ticket confirmation, sometimes lifted from someone else's genuine post. The urgency of a sold-out show makes buyers less careful than they'd normally be.\n\nThese scammers often create accounts that look established, sometimes by joining the group weeks earlier and posting normal comments to build a thin layer of credibility before making the offer. They'll frequently ask for payment upfront with a promise to transfer the ticket 'right after,' and once paid, either stop responding or claim a transfer error to string the buyer along.\n\nGenuine sellers in fan communities are usually willing to meet in person for a local show, transfer through the official ticketing app in front of you, or use a payment method with buyer protection. Anyone who resists all of these should be treated as a likely scam.","redFlags":["Seller has a new or thin account history in the fan group","Screenshot of the ticket looks reused or has inconsistent event details","Seller wants payment before demonstrating they can actually transfer the ticket","Story for why they're selling changes or has odd inconsistencies","Seller avoids video calls or in-person verification","Multiple people report being asked to pay the same seller for the same 'last' ticket"],"whatToDoNow":["Ask the seller to do the official app transfer while you're on a video call together","Never pay before the transfer completes or before you've verified the ticket in your own account","Search the fan group for other posts mentioning the same seller's name or account","Report suspicious sellers to the group moderators so others are warned","Use a payment method with dispute protection if any payment is required upfront","If scammed, report to the platform, the payment provider, and local consumer protection or police"],"faq":[{"question":"Should I ever pay before receiving a ticket transfer?","answer":"It's safest not to. If a deposit is unavoidable, use a payment method with buyer protection and keep the amount as low as possible until the transfer is confirmed."},{"question":"Are fan group ticket scams different from resale site scams?","answer":"The mechanics are similar, but fan groups add a false sense of trust because members share a common interest. Scammers exploit that trust deliberately, so the same caution applies as with any stranger online."}],"lastReviewed":"2026-07-05"},{"slug":"qr-code-ticket-scan-scam","url":"https://scamencyclopedia.org/questions/qr-code-ticket-scan-scam","question":"I got a text or email asking me to scan a QR code to 'verify' my event ticket — is this safe?","shortAnswer":"Treat it with suspicion. Legitimate ticketing platforms don't ask you to scan a QR code from an unsolicited message to 'verify' a ticket you already hold — this pattern is commonly used to steal login credentials or payment details.","explanation":"This is a form of quishing, or QR-code phishing, applied to event tickets. A message arrives claiming there's an issue with your ticket, a need to 'reconfirm' your seat, or a chance to 'upgrade' for free, and asks you to scan a QR code. The code leads to a fake login page that mimics the ticketing platform, capturing your username and password, or a fake payment page that captures card details under the guise of a small 'verification fee.'\n\nQR codes are especially effective for scammers because phones often can't preview the destination URL the way a computer browser can, and many people have learned to distrust suspicious links in text but not yet learned the same caution around QR codes. Scammers also favor them because email spam filters that catch obvious phishing links sometimes don't scan the text hidden inside an image-based QR code.\n\nReal ticketing platforms handle ticket verification within their own app or website, using your existing login — they don't send unsolicited QR codes by text or email that require you to 'reconfirm' or pay again for something you've already bought.","redFlags":["Unsolicited text or email asking you to scan a QR code for a ticket you already purchased","Message claims urgency, such as a ticket about to be cancelled unless you act","QR code leads to a login page requesting your username and password again","A 'small fee' is requested to 'reactivate' or 'confirm' a ticket","Sender address or phone number doesn't match the platform's known official contacts","Message contains generic greetings rather than your name and specific order details"],"whatToDoNow":["Don't scan QR codes from unsolicited ticket messages — log into the official ticketing app or site directly instead","Check your ticket status through the app you originally purchased from","If you already scanned the code and entered credentials, change that password immediately and enable two-factor authentication","If you entered payment details, contact your card issuer to flag possible fraud","Report the message as phishing to the platform it claims to be from","Delete the message and don't forward the QR code to others"],"faq":[{"question":"What is 'quishing'?","answer":"Quishing is phishing conducted through QR codes rather than clickable links. The QR code hides the destination URL, making it harder to spot a fake site before you land on it."},{"question":"How do I check my ticket is genuine without scanning a suspicious code?","answer":"Log directly into the official ticketing app or website using a bookmark or a manually typed address, and view your order there. Never use a link or code sent in an unsolicited message."}],"lastReviewed":"2026-07-05"},{"slug":"season-ticket-renewal-phishing","url":"https://scamencyclopedia.org/questions/season-ticket-renewal-phishing","question":"I got an email about renewing my season tickets that asks me to update my card details — is this legitimate?","shortAnswer":"Be cautious. Season-ticket renewal emails are a known phishing target because they arrive at a predictable time each year and fans expect to enter payment details, making it easy for a fake version to blend in.","explanation":"Scammers time these emails to coincide with the real renewal window, sometimes using leaked or scraped fan databases to make the message look personalized with your name and seat details. The email links to a cloned renewal page that looks identical to the club or venue's real site, capturing card numbers, security codes, and billing addresses when you 'complete' the renewal.\n\nBecause the scam relies on timing, checking directly with the official source rather than clicking the email link is the most reliable defense. Genuine ticketing organizations will always let you log into your account directly through their known website or app to renew, rather than relying solely on an email link, and reputable organizations don't typically ask you to re-enter full card details including the security code for a renewal that's processed on file.\n\nIf the email address doesn't exactly match the organization's known domain, or if the renewal deadline in the email seems artificially urgent compared to previous years, that's a strong signal to verify independently before clicking anything.","redFlags":["Renewal link goes to a domain that doesn't exactly match the organization's official website","Email requests full card number and security code re-entry for an existing account","Unusual urgency, such as a 24-hour deadline not seen in previous renewal cycles","Spelling or formatting inconsistent with the organization's normal communications","Request to pay by an unusual method such as gift cards or a payment app transfer","Email arrives earlier or later than the organization's typical renewal schedule with no prior announcement"],"whatToDoNow":["Log into your account directly through the organization's known website rather than clicking the email link","Compare the sender's email domain carefully against previous, verified renewal emails","Call the venue or club's official customer service line if anything seems off","Never re-enter a full card security code for a renewal unless you initiated the process yourself","Report the phishing email to the organization and to your email provider","If you already entered card details on a suspicious page, contact your bank immediately"],"faq":[{"question":"Why do scammers target season ticket holders specifically?","answer":"Renewal periods are predictable and fans are conditioned to expect a payment request at that time each year, which lowers their guard compared to an unexpected request."},{"question":"Is it safe to click a renewal link if the email looks otherwise normal?","answer":"It's safer to navigate to the official site directly rather than clicking, since a well-copied phishing email can be visually indistinguishable from a genuine one."}],"lastReviewed":"2026-07-05"},{"slug":"event-cancellation-refund-scam","url":"https://scamencyclopedia.org/questions/event-cancellation-refund-scam","question":"An event I bought tickets for was cancelled and I got a message about claiming my refund — could this be fake?","shortAnswer":"Yes, cancellation refund scams are common. Scammers watch for cancelled events and send fake refund forms asking for bank details or card numbers, when the real refund would be processed automatically to your original payment method.","explanation":"When a widely attended event is cancelled, whether due to weather, a performer issue, or venue problems, scammers move quickly to send messages that mimic official refund notices. These messages typically ask you to 'confirm your bank details' or click a link to a form requesting a full card number, expiry date, and security code — details a legitimate refund process never needs, since refunds are issued to the same payment method used for the original purchase.\n\nThe scam works because a genuine cancellation creates real anxiety about lost money, and people are primed to expect some kind of communication about a refund, making a fake one easy to slip past normal skepticism. Scammers often source cancelled-event news from public announcements and blast messages to email lists or social media, without needing any inside information about who actually bought tickets.\n\nThe safest approach is to check the refund status directly through the account you used to buy the ticket, rather than clicking any link in an unsolicited message. If a refund is genuinely owed, it will typically appear automatically or be claimable through your existing account without needing to hand over payment details again.","redFlags":["Message asks for a full card number or security code to 'process' a refund","Refund link doesn't match the ticketing platform's known domain","Message arrives from a personal email address rather than the platform's official one","Urgency to 'claim within 24 hours or forfeit the refund'","Request to pay a 'processing fee' before the refund is released","Grammar or formatting inconsistent with the platform's normal communications"],"whatToDoNow":["Log into your ticketing account directly to check refund status rather than clicking any link","Never provide a full card number or security code to receive a refund","Contact the platform's official customer service to confirm the cancellation and refund process","Report any suspicious refund message to the platform and to your email provider","If you've already entered payment details on a suspicious page, contact your bank immediately","Warn others in relevant fan or community groups if the scam is targeting a specific cancelled event"],"faq":[{"question":"Do legitimate refunds ever require a processing fee?","answer":"No. A genuine refund for a cancelled event is issued back to your original payment method without requiring any upfront fee from you."},{"question":"How do I check if my refund is real without risking a scam?","answer":"Log into the ticketing platform's app or website directly using a bookmark or manually typed address, and check your order history there rather than trusting an email or text link."}],"lastReviewed":"2026-07-05"},{"slug":"fake-box-office-callback-scam","url":"https://scamencyclopedia.org/questions/fake-box-office-callback-scam","question":"I got a phone call claiming to be the box office saying there's a problem with my ticket order — is this a scam?","shortAnswer":"It can be. Scammers sometimes call claiming to represent the venue or ticketing company, saying there's a payment issue, to extract card details or push you toward a fraudulent 'corrected' payment.","explanation":"This scam relies on caller ID spoofing or simply guessing that a person recently bought tickets to a popular event, then calling with a plausible-sounding story: a declined payment, a duplicate charge, or a system error that needs 'reprocessing.' The caller asks for your card number, expiry date, and security code to 'fix' the issue, or directs you to a fake payment link sent by text during the call.\n\nGenuine box offices and ticketing companies rarely call customers proactively about payment issues; if there's a real problem with an order, it's usually flagged through the account itself, an official email, or by the payment simply failing at the point of purchase. A caller who already has some of your details, such as the event name or a partial card number, may seem more credible, but that information can come from data breaches unrelated to the ticket purchase itself.\n\nThe safest response to any unsolicited call about a ticket order is to hang up and call back using a phone number found independently, such as from the venue's official website, rather than a number the caller provides or that shows on caller ID.","redFlags":["Unsolicited call claiming a problem with a ticket payment that needs immediate correction","Caller asks for full card number, expiry date, or security code over the phone","Caller pressures you to act immediately or lose the tickets","Caller ID shows a number that seems to match the venue but can't be verified independently","Caller sends a payment link by text during the call","Request to pay via an unusual method such as a gift card or wire transfer"],"whatToDoNow":["Hang up and call the venue or ticketing company back using a number from their official website, not one given by the caller","Never give full card details, including the security code, over an unsolicited call","Check your ticket order status by logging into your account directly","Report the call to the venue or ticketing company's fraud or customer service team","If you've already given card details, contact your bank immediately to flag potential fraud","Report the number to your phone carrier or a call-blocking service if spam calls persist"],"faq":[{"question":"Can caller ID be trusted to confirm who's calling?","answer":"No. Caller ID can be spoofed to show a legitimate-looking name or number, so it shouldn't be used alone to verify a caller's identity."},{"question":"What should I do if I already gave my card details on a suspicious call?","answer":"Contact your bank or card issuer immediately, explain what happened, and ask them to monitor or block the card for suspicious activity."}],"lastReviewed":"2026-07-05"},{"slug":"bundled-travel-ticket-package-scam","url":"https://scamencyclopedia.org/questions/bundled-travel-ticket-package-scam","question":"I found a 'VIP package' bundling event tickets with hotel and travel — how do I know it's a real deal?","shortAnswer":"Bundled travel-and-ticket packages are a common scam vector because they combine multiple industries, making it easier to hide a fake element among real-looking components. Verify each part — tickets, hotel, and travel — independently before paying.","explanation":"Fake VIP or hospitality packages often list a real hotel and real event, giving the offer surface credibility, while the actual tickets included don't exist or are never delivered. Scammers set up professional-looking websites, sometimes using a name similar to a genuine official hospitality provider, and take payment for a bundle that's cheaper than buying components separately, which is itself a red flag since official packages are rarely discounted below their individual parts.\n\nBecause these packages often involve a large upfront payment, they're an attractive target for scammers, and the bundled nature makes it harder for a buyer to know which specific part to double-check. A hotel booking confirmation, for example, might be genuine while the ticket component is entirely fabricated, or the whole package might vanish once payment clears.\n\nBefore paying for any bundled package, check whether the seller is listed as an official hospitality or package partner on the event or venue's own website, since legitimate operators are almost always named there. Independently verify the hotel booking by contacting the hotel directly with the confirmation number, and be wary of any package priced significantly below what buying tickets and travel separately would cost.","redFlags":["Package price is notably cheaper than buying tickets, hotel, and travel separately","Seller isn't listed as an official partner on the event or venue's website","Website has a name similar to but not exactly matching a known official provider","Payment requested via bank transfer rather than a protected payment method","Vague or missing details about exact seating, ticket delivery method, or hotel booking reference","High-pressure sales tactics emphasizing limited availability"],"whatToDoNow":["Check the event or venue's official website for a list of authorized hospitality or package partners","Contact any included hotel directly using the confirmation number to verify the booking independently","Pay by credit card so you have dispute options if the package turns out fraudulent","Be skeptical of prices significantly below the combined cost of buying each part separately","Search the seller's name along with terms like 'complaint' or 'scam' before committing","If defrauded, report to your card issuer, the platform where you found the listing, and consumer protection authorities"],"faq":[{"question":"Why are bundled packages riskier than buying tickets alone?","answer":"Bundling multiple components makes it harder to verify each part, and a real hotel booking can mask a fake ticket component, giving the whole package false credibility."},{"question":"How can I confirm a hospitality package seller is official?","answer":"Check the event or venue's own website for a list of authorized partners, and don't rely solely on the seller's own claims of official status."}],"lastReviewed":"2026-07-05"},{"slug":"last-minute-ticket-drop-scam","url":"https://scamencyclopedia.org/questions/last-minute-ticket-drop-scam","question":"A website claims to have a surprise 'last-minute ticket drop' for a sold-out event — is this a scam tactic?","shortAnswer":"Often, yes. Fake 'surprise ticket drop' announcements are used to drive urgency and traffic to fraudulent sites that either take payment for tickets that don't exist or harvest card details through a fake checkout.","explanation":"This scam mimics a real phenomenon — some ticketing platforms do occasionally release additional inventory close to an event — but scammers exploit the excitement this creates by spreading fake drop announcements through social media ads, spam emails, or cloned websites. The fake site is often a near-identical copy of the real ticketing platform, differing only in the web address, and is built specifically to process one-time payments before disappearing.\n\nThe urgency built into these scams — countdown timers, claims that only a handful of tickets remain, or a rush of fake 'X people viewing this page' notices — is designed to short-circuit the buyer's normal caution. Because real ticket drops do happen, some people assume this one is real without checking the source carefully.\n\nThe reliable way to check for a genuine ticket drop is to go directly to the official ticketing platform or the event's official social media account, rather than trusting a third-party site or an ad promising a drop. If a 'drop' is only announced through an unfamiliar site or a paid social ad with no confirmation from the artist or venue's verified accounts, treat it as fake.","redFlags":["Ticket drop announcement comes only from an unfamiliar website or social media ad","Countdown timers and fake viewer counts designed to create urgency","Web address is similar to, but not exactly, the official ticketing platform's domain","No matching announcement on the artist's or venue's official verified social accounts","Checkout process feels rushed with limited payment verification steps","Site has no clear customer service contact or refund policy"],"whatToDoNow":["Verify any ticket drop claim through the event's or artist's official verified accounts before buying","Only purchase through the venue's or event's known official ticketing platform","Check the web address carefully for subtle misspellings or extra characters","Avoid sites with aggressive countdown timers and fake urgency indicators","Pay by credit card so you can dispute the charge if the tickets never materialize","Report fraudulent drop sites to the platform they're impersonating and to ad platforms if found via a paid ad"],"faq":[{"question":"Do real last-minute ticket drops actually happen?","answer":"Yes, some ticketing platforms release held-back inventory close to an event, but genuine drops are always announced through the platform's own official channels, not third-party sites."},{"question":"How can I tell a cloned ticketing site from the real one?","answer":"Check the web address character by character for subtle differences, and navigate directly by typing the known official address rather than clicking a link from an ad or message."}],"lastReviewed":"2026-07-05"},{"slug":"fake-ticket-exchange-app-scam","url":"https://scamencyclopedia.org/questions/fake-ticket-exchange-app-scam","question":"I downloaded a ticket exchange app to buy tickets peer-to-peer — how do I know it's legitimate?","shortAnswer":"Check that the app is officially listed by a known ticketing company and has a long, credible review history — scammers publish lookalike apps with similar names and icons designed to catch buyers searching for a genuine exchange platform.","explanation":"As peer-to-peer ticket exchanges have grown more popular, scammers have followed by publishing imitation apps to official app stores using names, icons, and descriptions closely mimicking legitimate platforms. These fake apps may function as a convincing shell — allowing you to browse fake listings and even 'purchase' a ticket — while simply collecting payment information with no actual ticket ever delivered.\n\nApp store review sections can be manipulated with fake positive reviews at launch, so a high initial star rating isn't a reliable signal on its own, especially for a newly published app. A genuine ticket exchange platform will typically have a long track record, is usually mentioned on the official website of major venues or ticketing partners, and its developer name in the app store listing will match a recognizable company rather than an unfamiliar or generic-sounding entity.\n\nBeyond checking the developer name, look at how long the app has existed, whether recent reviews mention undelivered tickets or billing problems, and whether the app requests unusual permissions unrelated to its stated purpose, such as broad access to your contacts or messages.","redFlags":["App developer name doesn't match any recognizable, established ticketing company","App was only recently published despite claiming to be a long-running exchange","Recent reviews mention undelivered tickets, billing issues, or unresponsive support","App requests permissions unrelated to buying or storing tickets","No mention of the app on any official venue or ticketing partner website","Payment processed within the app rather than through a recognized, secure payment gateway"],"whatToDoNow":["Check the app developer's name against the official ticketing company's known corporate name","Read recent reviews specifically, not just the overall star rating","Search independently for the app's name plus 'scam' or 'complaint' before downloading","Avoid granting the app permissions beyond what's needed for ticket purchases","Use a payment method with buyer protection when purchasing through any exchange app","Report a suspected fake app to the app store it was downloaded from"],"faq":[{"question":"Are high app store ratings a reliable way to judge a ticket exchange app?","answer":"Not on their own. Initial reviews can be manipulated, so it's more reliable to check recent reviews, the developer's verified name, and independent mentions from known ticketing partners."},{"question":"What permissions should a legitimate ticket app not need?","answer":"A ticket exchange app generally doesn't need access to your contacts, messages, or broad device storage beyond what's required to display and store your tickets — excessive permission requests are a warning sign."}],"lastReviewed":"2026-07-05"},{"slug":"fake-brand-sponsorship-email-scam","url":"https://scamencyclopedia.org/questions/fake-brand-sponsorship-email-scam","question":"I got an email offering a paid brand sponsorship deal out of nowhere — could this be a scam targeting creators?","shortAnswer":"It could be. A common creator-targeted scam poses as a brand offering a lucrative sponsorship, then asks the creator to pay an upfront 'processing' or 'shipping' fee, or sends a fraudulent check that later bounces after the creator has already spent the funds.","explanation":"This scam preys on creators eager for sponsorship income, especially smaller creators who don't yet have established relationships with brand marketing teams and are less familiar with how legitimate deals are typically structured. The email usually praises the creator's content in generic terms, offers a payment amount that seems generous for the effort involved, and asks for personal or banking details early in the conversation, sometimes before any contract is discussed.\n\nA common variant involves sending an official-looking check or bank transfer that covers both the sponsorship fee and a 'product cost' or 'shipping fee' the creator is asked to forward to a third party, such as a courier or supplier. The original check or transfer later reverses as fraudulent, leaving the creator liable for the amount they already forwarded, which is real money out of their own account.\n\nLegitimate brand sponsorships almost always come through a recognizable marketing or influencer agency contact, involve a written contract before any money changes hands, and never require the creator to forward funds to a third party as a condition of payment. If any part of a sponsorship offer asks you to pay something first or pass money along, that's a strong signal of fraud regardless of how professional the email looks.","redFlags":["Email praises your content in vague, generic terms rather than specific details","Sponsorship payment seems unusually high for the deliverable requested","Request to forward part of the payment to a third party such as a courier or supplier","No formal contract offered before discussing payment details","Sender's email domain doesn't match the brand's official website","Urgency to respond and finalize payment details quickly"],"whatToDoNow":["Verify the sender by contacting the brand directly through its official website, not the email's reply address","Never forward or wire any portion of a payment you've received to a third party","Wait for funds to fully clear in your bank account before spending or forwarding any of it","Ask for a written contract before providing any banking or personal information","Search the brand and offer details online along with terms like 'scam' before proceeding","Report suspected fraudulent sponsorship offers to your bank if a fraudulent check or transfer was involved"],"faq":[{"question":"How can I verify a sponsorship email is really from the brand it claims to be?","answer":"Contact the brand through its official website or verified social media account directly, rather than replying to the email, and ask if they have a marketing or influencer campaign matching the offer."},{"question":"Why do fraudulent checks or transfers appear to clear before bouncing?","answer":"Banks often make funds provisionally available before a check or transfer fully clears, which can take days or weeks. If it's later found to be fraudulent, the funds are reversed and the account holder is responsible for any money already spent."}],"lastReviewed":"2026-07-05"},{"slug":"youtube-copyright-strike-phishing","url":"https://scamencyclopedia.org/questions/youtube-copyright-strike-phishing","question":"I got an email claiming my video received a copyright strike and I need to log in to appeal — is this a phishing attempt?","shortAnswer":"It's very likely phishing. Copyright strike emails are one of the most common creator-targeted phishing themes because the threat of a channel being taken down creates panic that leads people to click without checking the sender carefully.","explanation":"Scammers send emails formatted to closely resemble genuine copyright notices, complete with matching logos and similar wording to real strike notifications, and include a link to 'view the claim' or 'submit an appeal.' The link leads to a fake login page designed to steal the creator's account credentials, which are then used to hijack the channel, often to rebrand it for a cryptocurrency scam livestream or to sell it on to other bad actors.\n\nThe panic induced by a threatened channel suspension is central to why this scam works so well — creators who've built an audience over years understandably want to resolve any strike quickly, and the fear of losing everything overrides normal caution about checking a login page's web address. Once credentials are entered on the fake page, the attacker can often bypass two-factor authentication too if the phishing page is sophisticated enough to relay the session in real time.\n\nGenuine copyright strike notifications appear directly within the platform's own dashboard when you log in normally, not solely through an email link. Checking your account status by navigating to the platform directly, rather than clicking the email's link, is the safest way to confirm whether a strike is real.","redFlags":["Email link leads to a login page with a web address that doesn't exactly match the platform's official domain","Urgent language warning of channel termination within a short timeframe","Sender's email address doesn't match the platform's known official domains","Request to 'verify' your account by entering your password on an external page","Formatting looks close to genuine notices but has small inconsistencies in wording or logos","Strike doesn't appear when you log into the platform's dashboard directly"],"whatToDoNow":["Don't click the email link — log into the platform directly through its official app or website","Check your dashboard for any real copyright strikes or notices","If you already entered your password on a suspicious page, change it immediately and enable two-factor authentication","Review your account's recent login activity and connected devices for anything unfamiliar","Report the phishing email to the platform's official support or trust and safety team","Warn other creators in relevant communities if you spot a new phishing wave"],"faq":[{"question":"Can two-factor authentication fully protect me from this scam?","answer":"It significantly reduces risk, but sophisticated phishing pages can sometimes relay a real-time login session and capture a one-time code too, so avoiding the fake page entirely is still the best defense."},{"question":"What should I do if my channel was already taken over through this scam?","answer":"Use the platform's official account recovery process immediately, report the hijacking through their support channels, and warn your audience through any other communication channel you still control."}],"lastReviewed":"2026-07-05"},{"slug":"creator-payout-bank-verification-scam","url":"https://scamencyclopedia.org/questions/creator-payout-bank-verification-scam","question":"I got a message saying my creator payout is on hold until I 'verify' my bank details — is this legitimate?","shortAnswer":"Treat it as suspicious. Payout verification scams send fake messages claiming a hold on earnings, directing creators to a fake page that captures full bank account or card details.","explanation":"This scam specifically targets creators who rely on platform payouts as income, since the idea of a held or delayed payment is both plausible and financially concerning enough to prompt quick action. The message often mimics the platform's real payout notification style and links to a page requesting full bank account numbers, routing details, or card information under the pretense of 'reverifying' payment information.\n\nLegitimate platforms typically handle payout details entirely within their own dashboard, where you log in using your normal credentials rather than through an email link, and they rarely require you to reverify bank details you've already provided unless you initiated a change yourself. A message demanding reverification out of the blue, especially one with an urgent deadline, should be checked directly through the platform rather than via the message's link.\n\nBecause payout details are sensitive financial information, entering them on a fake page can lead to unauthorized withdrawals in addition to the platform account itself being compromised, making this a higher-stakes version of general phishing.","redFlags":["Message claims a payout is held pending 'verification' with an unfamiliar link","Link leads to a page requesting full bank account or routing details outside the normal platform dashboard","Urgent deadline threatening loss of payout if you don't act quickly","Sender's email or message doesn't match the platform's known official contact channels","Formatting or logo slightly different from the platform's genuine communications","Request for information the platform already has on file, such as your account number"],"whatToDoNow":["Log into your creator dashboard directly to check payout status rather than clicking the message's link","Never enter full bank details on a page reached through an unsolicited email or message link","Contact the platform's official support to confirm whether any verification is genuinely needed","If you've already entered bank details on a suspicious page, contact your bank immediately","Enable two-factor authentication on your creator account if not already active","Report the phishing message to the platform's trust and safety team"],"faq":[{"question":"Do legitimate platforms ever ask creators to reverify bank details by email?","answer":"Most handle this within the account dashboard itself rather than through unsolicited email links, so any such request should be independently confirmed by logging in directly."},{"question":"What's the risk if I enter bank details on a fake verification page?","answer":"Beyond compromising the platform account, full bank details can potentially be used for unauthorized withdrawals, so contacting your bank immediately is important if this happens."}],"lastReviewed":"2026-07-05"},{"slug":"fake-follower-growth-service-scam","url":"https://scamencyclopedia.org/questions/fake-follower-growth-service-scam","question":"A service is offering to quickly grow my followers or subscribers — is this actually a scam?","shortAnswer":"Most 'guaranteed fast growth' services are either fraudulent, delivering fake or bot accounts that get purged and hurt your reach, or a front to steal your account login and password.","explanation":"Growth services marketed to creators typically promise a large number of new followers, subscribers, or engagement within a short period for a fee. In many cases, what's delivered is a batch of bot or inactive accounts that inflate the follower count temporarily but provide no real engagement, and platforms regularly purge these accounts during periodic bot sweeps, causing a visible follower count drop later that can also trigger algorithm penalties for suspicious activity.\n\nA more damaging variant asks the creator to provide their account login credentials directly, framed as necessary for the service to 'post on your behalf' or 'engage with your audience.' Handing over credentials this way effectively gives the scammer full control of the account, which can then be used to post spam, promote other scams to your existing audience, or be locked out entirely and held for ransom.\n\nPlatforms' own terms of service typically prohibit purchased engagement, meaning legitimate use of these services can also risk account suspension entirely separate from the scam risk. Sustainable audience growth on any creator platform comes from consistent content and genuine engagement, and no legitimate service can bypass that process safely.","redFlags":["Service requests your account login and password rather than working through the platform's own official ad or promotion tools","Guarantees an unrealistically large follower or subscriber increase in a very short time","Reviews or testimonials seem generic or can't be independently verified","Price seems too low for the scale of growth promised","No clear explanation of how the growth is actually generated","Service is not listed as an official advertising or promotion partner by the platform itself"],"whatToDoNow":["Never share your account login credentials with a third-party growth service","Report any service asking for your password as a likely credential theft attempt","Check the platform's official advertising or promotion tools instead of third-party growth services","If you already used such a service, monitor your account for a follower count drop and check for unauthorized posts","Change your account password and enable two-factor authentication if you shared credentials","Report the growth service to the platform and to consumer protection resources if you paid and received nothing of value"],"faq":[{"question":"What happens to accounts that use fake follower growth services?","answer":"Beyond the risk of credential theft, platforms often detect and purge bot followers during periodic sweeps, and repeated use of such services can result in reduced reach or account suspension for violating platform terms."},{"question":"Is there a safe way to grow followers quickly?","answer":"The only reliable, low-risk options are the platform's own official advertising or promotion tools, since third-party growth services almost universally violate platform terms and carry credential theft risk."}],"lastReviewed":"2026-07-05"},{"slug":"deepfake-livestream-crypto-scam","url":"https://scamencyclopedia.org/questions/deepfake-livestream-crypto-scam","question":"I saw a livestream that looked like a well-known creator promoting a crypto giveaway — could it be fake?","shortAnswer":"Very likely fake. Scammers use deepfake video and voice cloning, or hijacked genuine channels, to run fake livestreams where a familiar face appears to endorse a crypto 'giveaway' that actually steals whatever funds viewers send in.","explanation":"This scam has grown alongside advances in AI video and voice synthesis, which now allow scammers to convincingly reanimate a creator's face and voice onto looped or fabricated footage, sometimes using old clips as source material. The stream typically displays a QR code or wallet address and promises to 'double' or 'match' any cryptocurrency sent to it, a claim that's never legitimate regardless of who appears to be making it.\n\nA related version hijacks a real, previously legitimate channel with a large existing subscriber base — often obtained through a phishing attack like a fake copyright strike email — and reuses that channel's built-in trust and audience size to run the same fake giveaway livestream, sometimes rebranding the channel entirely to look like a cryptocurrency exchange or well-known tech figure.\n\nNo legitimate creator, company, or public figure runs a livestream giveaway that requires you to send cryptocurrency first in order to receive more back. Any stream making that offer, regardless of how convincing the visuals and audio are, should be treated as fraudulent, and viewers should verify unusual creator behavior through the creator's other verified official channels before trusting anything unusual seen only in a single livestream.","redFlags":["Livestream asks viewers to send cryptocurrency first with a promise of a larger amount returned","Channel branding or history has recently and drastically changed","Video or audio has subtle artifacts, unnatural pacing, or mismatched lip movement","No mention of the giveaway on the creator's other verified official accounts","Comments are disabled or filled with bot-like messages claiming the giveaway worked for them","QR code or wallet address is the primary call to action of the stream"],"whatToDoNow":["Never send cryptocurrency to any address shown in a livestream giveaway, regardless of who appears to be hosting it","Check the creator's other official, verified accounts for any mention of the giveaway before trusting it","Report the livestream and channel to the platform as impersonation or fraud","Warn others in the comments or community if you recognize the scam pattern","If you already sent funds, report it to the cryptocurrency platform or wallet provider and to relevant fraud reporting authorities, though recovery is often unlikely","Follow the genuine creator's official statement if they address the hijacking or impersonation publicly"],"faq":[{"question":"How can deepfake livestreams look so convincing?","answer":"AI tools can now synthesize realistic video and voice from existing footage of a real person, and scammers often loop pre-recorded segments rather than generating live responses, which limits interaction but still looks convincing to a passive viewer."},{"question":"Can a hijacked channel with millions of subscribers really be used this way?","answer":"Yes, and it's a significant reason these scams spread quickly, since the stolen channel's existing subscriber base and algorithmic trust make the fake stream appear far more credible than a brand-new account would."}],"lastReviewed":"2026-07-05"},{"slug":"platform-account-deletion-impersonation","url":"https://scamencyclopedia.org/questions/platform-account-deletion-impersonation","question":"I got a message saying my creator account will be deleted unless I confirm my details — is this a scam?","shortAnswer":"Almost certainly. Fake account deletion warnings are a widely used phishing tactic designed to create panic so you click a link and enter your login credentials on a fraudulent page.","explanation":"These messages typically claim a policy violation, a failed verification, or an upcoming account purge, paired with a countdown or urgent deadline to 'confirm' your details or 'appeal' the decision. The link leads to a page built to closely resemble the platform's real login screen, capturing your username and password once entered, sometimes along with a one-time verification code if the fake page is sophisticated enough to relay it in real time.\n\nThe panic created by threatening the loss of an account a creator has spent years building is precisely what makes this scam effective — it exploits the same urgency response as copyright strike phishing but is often broader, sometimes not even naming a specific violation and instead relying on vague language about 'unusual activity' or 'policy review.'\n\nGenuine account status issues, including suspensions or violations, are almost always visible directly within the platform's own dashboard when you log in normally, and platforms typically don't require you to 're-enter' your password through an external email link to resolve them. Checking your account status by navigating to the platform directly, rather than through the message's link, is the reliable way to confirm whether anything is actually wrong.","redFlags":["Message threatens account deletion with an urgent deadline and vague reasoning","Link leads to a login page with a web address that doesn't exactly match the platform's domain","Request to 're-verify' your password or two-factor code through an external link","Sender's email address doesn't match the platform's known official domains","No corresponding notice visible when logging into the platform directly","Message uses generic greetings rather than your actual account or channel name"],"whatToDoNow":["Log into the platform directly through its official app or website rather than clicking the message's link","Check your account status and notifications within the platform's own dashboard","If you already entered credentials on a suspicious page, change your password immediately and enable two-factor authentication","Review recent account activity for any unfamiliar logins or changes","Report the phishing message to the platform's official support or trust and safety team","Consider setting up account recovery options in advance so you can act quickly if a real compromise occurs"],"faq":[{"question":"How can I tell a fake deletion warning from a genuine account issue?","answer":"Genuine issues are almost always visible directly in your account dashboard when you log in normally. If a message threatens deletion but nothing appears when you check the platform directly, it's very likely a phishing attempt."},{"question":"What should I do first if I think my account has already been compromised?","answer":"Use the platform's official account recovery process immediately, change your password from a device you trust, and enable two-factor authentication as soon as you regain access."}],"lastReviewed":"2026-07-05"},{"slug":"fake-talent-manager-scam-new-creators","url":"https://scamencyclopedia.org/questions/fake-talent-manager-scam-new-creators","question":"Someone reached out offering to be my manager or agent and grow my career — how do I know they're legitimate?","shortAnswer":"Be cautious with anyone who approaches you unsolicited, especially if they ask for an upfront fee before securing any work. Legitimate agents and managers typically earn commission from deals they land for you, not a fee just to sign you.","explanation":"This scam targets creators who are growing but not yet established enough to have industry connections, making an unsolicited offer of professional management seem like a lucky break. The scammer often claims industry experience or name-drops well-known brands or creators they supposedly work with, then asks for an upfront 'onboarding,' 'portfolio,' or 'contract processing' fee before doing any actual work on the creator's behalf.\n\nIn some versions, the scam extends further, with the fake manager arranging a fabricated brand deal that requires the creator to pay a 'sample fee' or forward funds for products, mirroring general brand sponsorship scams but adding a layer of trust because the offer appears to come through a manager rather than a stranger. Some fake managers also request access to the creator's account or financial details under the guise of 'handling payouts' on their behalf.\n\nLegitimate talent managers and agents in most markets earn a percentage of the deals they secure for a client rather than charging fees upfront, and reputable ones can be verified through professional associations, existing client testimonials that can be independently contacted, or a track record visible outside of what the manager themselves claims.","redFlags":["Request for an upfront fee before any work has been done or deal secured","Vague or unverifiable claims about which brands or creators they've worked with","Request to forward funds or handle a payout on your behalf","No written contract, or a contract that's vague about compensation structure","Pressure to sign quickly without time to review terms or consult anyone else","Contact came entirely unsolicited with no independent way to verify their identity"],"whatToDoNow":["Verify any claimed client relationships by contacting those creators or brands independently","Never pay an upfront fee to be represented — legitimate managers earn commission on secured deals","Ask for a written contract and have it reviewed before signing anything","Don't hand over account access or payout handling to a manager you haven't thoroughly vetted","Search the manager's name and agency along with terms like 'scam' or 'complaint' before proceeding","Report the offer to relevant creator community resources if it turns out fraudulent"],"faq":[{"question":"Do legitimate managers ever charge any upfront fee?","answer":"Most reputable talent managers work on commission from deals they secure, without upfront fees. Any request for payment before delivering results should be treated with significant skepticism."},{"question":"How can I verify a manager's claimed client list?","answer":"Contact the creators or brands they claim to represent directly through their own official channels, rather than trusting screenshots or claims provided by the manager themselves."}],"lastReviewed":"2026-07-05"},{"slug":"creator-merch-store-clone-scam","url":"https://scamencyclopedia.org/questions/creator-merch-store-clone-scam","question":"I found a merch store claiming to sell official products from a creator I follow — how do I know it's real?","shortAnswer":"Check that the store is linked directly from the creator's own official channels. Clone merch stores use a creator's name and likeness without permission, taking payment for products that are low quality, counterfeit, or never shipped at all.","explanation":"Clone merch scams typically appear as ads or search results using a creator's name, image, or catchphrases, sometimes ranking well in search engines through paid advertising that outpaces the creator's own official store. Buyers who don't check the link source carefully can end up paying a legitimate-seeming site that has no actual connection to the creator, receiving nothing, receiving a poor-quality counterfeit, or having their card details harvested through a fake checkout.\n\nThese fake stores are often set up quickly around a creator's viral moment or trending merchandise drop, capitalizing on a short window of high search interest before being taken down and relaunched under a different name once complaints accumulate. Because they can look highly polished, using real photos of the creator lifted from their public content, visual quality alone isn't a reliable way to judge legitimacy.\n\nThe most reliable way to verify a merch store is to find the link directly through the creator's own verified social media profile, official website, or video descriptions, rather than through a search engine ad or a link shared by someone else claiming to represent the creator.","redFlags":["Store isn't linked directly from the creator's own verified official channels","Found the store through a search ad or an unfamiliar link rather than the creator's own promotion","Prices seem unusually low compared to the creator's known official merch pricing","No clear return policy, contact information, or business address on the site","Domain name is similar to but not exactly matching the creator's official brand","Reviews elsewhere mention non-delivery or counterfeit quality"],"whatToDoNow":["Only purchase merch through links found directly on the creator's own verified channels","Check the store's domain name carefully against the creator's known official branding","Search the store name along with terms like 'scam' or 'complaint' before ordering","Pay by credit card so you have dispute options if the order is fraudulent","Report clone merch sites to the creator directly so they can warn their audience","If defrauded, file a chargeback with your card issuer and report the site to relevant consumer protection authorities"],"faq":[{"question":"Can a fake merch store really look identical to an official one?","answer":"Yes, since scammers often use real images and branding taken directly from the creator's public content, visual polish alone doesn't confirm legitimacy — the link source matters more."},{"question":"Why do these fake stores appear so quickly after a viral moment?","answer":"Scammers monitor trending content and can launch a convincing storefront within hours to capture search traffic during a short window of high interest, before the creator's own official store gains full visibility."}],"lastReviewed":"2026-07-05"},{"slug":"fake-collab-duet-phishing-link","url":"https://scamencyclopedia.org/questions/fake-collab-duet-phishing-link","question":"Another creator messaged me asking to collaborate and sent a link to 'discuss details' — could this be a phishing attempt?","shortAnswer":"It can be. Scammers impersonate other creators or claim to represent them, sending collaboration proposals with a link that leads to a credential-stealing page or malware download disguised as a shared document or media kit.","explanation":"This scam exploits the genuine and common practice of creators collaborating with each other, making an unsolicited proposal feel plausible, especially when it appears to come from an account that looks similar to a real creator's profile, sometimes copying their name and profile picture almost exactly with only a subtle difference. The message typically asks the target to click a link to view a 'collab proposal,' 'media kit,' or 'shared script,' which leads to a fake login page or triggers a malware download.\n\nA more advanced version compromises a real creator's actual account first, through an earlier phishing attack, and then uses that genuine, trusted account to send collaboration links to the creator's contacts or other creators in their network, which significantly increases the credibility of the approach since it comes from a real, familiar profile rather than an obvious impersonator.\n\nBefore clicking any collaboration link, especially one requesting a login or file download, it's worth verifying the request through a separate communication channel with the creator, such as a direct message on a different platform or a quick voice or video call, particularly if the account approached you rather than being someone you already had an established relationship with.","redFlags":["Collaboration proposal comes from an account with a name or handle only slightly different from a known creator","Link requests a login on an unfamiliar page rather than opening directly in a recognized document or file service","Message pressures you to respond or click quickly to 'secure' the collaboration slot","No prior relationship or mutual connection with the creator making the request","Shared file or link prompts a download rather than opening as expected","Account making the request has an unusual posting history inconsistent with an established creator"],"whatToDoNow":["Verify the collaboration request through a separate channel or direct contact with the creator before clicking any link","Avoid entering login credentials on any page reached through an unsolicited collaboration message","Check the sender's account details carefully for subtle impersonation signs","Scan any downloaded file with security software before opening it","If you clicked a suspicious link and entered credentials, change your password immediately and enable two-factor authentication","Report the impersonating account to the platform's trust and safety team"],"faq":[{"question":"How can I verify a collaboration request is genuinely from the creator?","answer":"Reach out to them through a different platform, a known contact method, or a quick call to confirm, rather than relying solely on the account that sent the initial message."},{"question":"What if the account looks completely genuine and has a large following?","answer":"A large following doesn't rule out account compromise — genuine accounts can be hijacked through earlier phishing attacks and used to send convincing scam links to the account's existing network."}],"lastReviewed":"2026-07-05"},{"slug":"monetization-verification-scam-email","url":"https://scamencyclopedia.org/questions/monetization-verification-scam-email","question":"I got an email saying I need to 'verify' my account to keep or unlock monetization — is this a scam?","shortAnswer":"Likely a phishing attempt. Monetization verification scams mimic official platform emails, directing creators to a fake page that captures login credentials or tax and payment information under the guise of maintaining eligibility.","explanation":"This scam typically targets creators at a stage where monetization eligibility genuinely matters to them, such as newly meeting a platform's threshold or during a period when platforms are known to be rolling out real policy changes, since the framing feels plausible against that backdrop. The email claims monetization will be paused or revoked unless the creator 're-verifies' their identity, tax information, or payment details through a provided link.\n\nThe fake verification page often requests far more sensitive information than a routine check would need, including full tax identification numbers, bank account details, or a re-entry of the account password, giving the scammer both platform account access and separate financial information that can be used or sold independently.\n\nGenuine monetization status and any required verification steps are visible directly within the platform's own creator dashboard, and legitimate requests for tax or payment information updates are typically initiated by the creator themselves through official settings, not demanded reactively through an unsolicited urgent email.","redFlags":["Email demands re-verification of tax ID, bank details, or password through an external link","Urgent threat that monetization will be paused or revoked within a short deadline","Sender's email domain doesn't match the platform's known official communications","Verification page requests more information than a routine check would need","No corresponding notice visible in the platform's own creator dashboard","Link leads to a page with subtle URL differences from the platform's real domain"],"whatToDoNow":["Check your monetization and account status directly in the platform's creator dashboard","Don't click the email's link — navigate to the platform's official site independently","Never enter tax identification numbers or bank details on a page reached through an unsolicited email link","If you already entered sensitive information, contact your bank and consider a fraud alert with relevant tax authorities","Change your account password and enable two-factor authentication if credentials were entered","Report the phishing email to the platform's official support or trust and safety team"],"faq":[{"question":"Do platforms ever legitimately ask creators to update tax or payment information?","answer":"Yes, but this is normally something the creator initiates within their own account settings, rather than something demanded reactively through an urgent, unsolicited email with a countdown deadline."},{"question":"What's the biggest risk if I enter tax details on a fake verification page?","answer":"Beyond platform account compromise, stolen tax identification information can potentially be used for identity theft or fraudulent filings, making this a higher-stakes scam than simple login phishing alone."}],"lastReviewed":"2026-07-05"},{"slug":"esim-swap-scam","url":"https://scamencyclopedia.org/questions/esim-swap-scam","question":"My phone suddenly lost signal and I can't call or text — could someone have taken over my number with an eSIM swap?","shortAnswer":"Yes, this is a known attack. A scammer who gathers enough of your personal information can convince your mobile carrier to transfer your number onto an eSIM they control, cutting off your service and letting them intercept calls and texts, including one-time login codes.","explanation":"An eSIM swap works similarly to a traditional SIM swap but exploits how many carriers now let customers activate a new digital eSIM profile remotely, sometimes with less friction than the older process of ordering a physical SIM card. Scammers gather personal details through phishing, data breaches, or social engineering, then contact the carrier or use a compromised online account portal to request the phone number be moved to a new eSIM, sometimes completing the process entirely online without ever needing to visit a store or speak to staff.\n\nOnce the swap succeeds, the victim's phone loses all signal and messaging suddenly, while the scammer's device begins receiving the victim's calls and texts, including one-time passcodes used for banking, email, and other account logins. This makes the eSIM swap a gateway attack, often deployed specifically to then take over financial accounts that rely on text-message codes for verification.\n\nThe sudden, complete loss of signal — rather than a gradual weakening — is the key early warning sign, since it usually means the number itself has been moved rather than there being a normal network or device issue. Carriers can usually reverse an eSIM swap once notified, but speed matters because the window before financial accounts are drained can be short.","redFlags":["Phone suddenly shows no service, no signal bars, or 'SOS only' with no clear cause","You receive a carrier notification about an eSIM activation or SIM change you didn't request","Unable to make calls or send texts despite being in an area with normally good coverage","Login attempt notifications or password reset emails you didn't initiate","Recent phishing messages or data exposure that could have supplied your personal details to an attacker","Bank or account activity you don't recognize shortly after losing phone service"],"whatToDoNow":["Contact your mobile carrier immediately through another phone or in person if your service suddenly drops for no clear reason","Ask the carrier to reverse the eSIM swap and add a port-out or SIM-change PIN or passphrase to your account","Log into your bank and major accounts from a trusted device to check for unauthorized access or changes","Switch critical accounts to an authenticator app rather than text-message codes where possible","Change passwords on financial and email accounts as a precaution once you regain phone access","File a report with your carrier's fraud department and local authorities if funds were taken"],"faq":[{"question":"How is an eSIM swap different from a traditional SIM swap scam?","answer":"The underlying attack goal is the same — taking control of your phone number — but eSIM technology can allow the transfer to happen entirely online or remotely, sometimes making it faster and requiring less direct interaction with carrier staff than swapping a physical SIM card."},{"question":"Can I prevent an eSIM swap before it happens?","answer":"Adding a port-out or account PIN with your carrier, avoiding text-message codes as your only two-factor method, and being cautious about where you share personal identifying information all reduce the risk significantly."}],"lastReviewed":"2026-07-05"},{"slug":"esim-porting-otp-theft-scam","url":"https://scamencyclopedia.org/questions/esim-porting-otp-theft-scam","question":"I got a text with a verification code I didn't request, then lost phone service shortly after — what happened?","shortAnswer":"This sequence often indicates an eSIM or number-porting attack in progress. A scammer requested the code as part of transferring your number, and once they succeed, your service drops while they gain control of calls and texts, including future one-time passcodes.","explanation":"This scam typically begins with a scammer who has already gathered pieces of your personal information — sometimes from a data breach, phishing message, or social media oversharing — and uses it to initiate a number port or eSIM transfer with your carrier or a receiving carrier. Some porting processes send a verification code to the original number as a safeguard, meaning a code you didn't request arriving unexpectedly can be an early sign someone is actively trying to complete a takeover before it fully happens.\n\nIf the scammer already has enough details to bypass or trick the safeguard, such as by directly contacting customer service with convincing personal information, the port completes and your phone loses service entirely. From that point, the attacker's device receives your calls and texts, allowing them to request password resets and one-time passcodes for banking, email, and other accounts tied to your number.\n\nBecause this attack chain moves quickly once the port completes, an unexpected verification code followed shortly by loss of signal should be treated as an active emergency rather than a minor inconvenience, warranting an immediate call to your carrier from another phone.","redFlags":["Verification code text arrives that you didn't request, especially one mentioning a number port or SIM change","Phone signal drops completely shortly after receiving an unexpected verification code","Notification from your carrier about a port-out or eSIM activation you didn't initiate","Password reset emails or login alerts for accounts you didn't try to access","Recent phishing attempts or data exposure that could have given an attacker your personal details","Unable to reach your carrier's normal customer service number using your own phone"],"whatToDoNow":["Never share a verification code with anyone, even if they claim to be from your carrier","If you receive an unrequested port or eSIM code, contact your carrier immediately using another device","Ask your carrier to place a port-out freeze or PIN requirement on your account","Check email and financial accounts for unauthorized password reset attempts","Move two-factor authentication to an authenticator app instead of text messages where the option exists","Report the incident to your carrier's fraud team and to local authorities if any accounts were compromised"],"faq":[{"question":"Why would I receive a verification code before the scammer even succeeds?","answer":"Many porting or eSIM activation processes send a confirmation code to the original number as a safety check. Receiving one unexpectedly can mean an attack is in progress and hasn't yet completed, giving you a narrow window to act."},{"question":"Should I ever give a verification code to someone who calls claiming to be my carrier?","answer":"No. Legitimate carrier staff don't need you to read out a code sent to your own phone to verify your identity for something you didn't initiate — treat any such request as a scam attempt."}],"lastReviewed":"2026-07-05"},{"slug":"digital-arrest-video-call-scam","url":"https://scamencyclopedia.org/questions/digital-arrest-video-call-scam","question":"Someone claiming to be police contacted me by video call saying I'm under 'digital arrest' and must pay a fine — is this real?","shortAnswer":"No, 'digital arrest' is not a real legal process anywhere. This is a scam that uses a video call with people posing as police or government officials to frighten victims into transferring money to avoid a fabricated arrest.","explanation":"In this scam, the victim receives a call, often starting with a recorded message claiming a parcel, phone number, or bank account is linked to a crime, before being transferred to someone posing as a police officer or investigator. The caller sets up a video call, sometimes from a room staged to look like a police station or government office, complete with uniforms, badges, and official-looking backdrops, and tells the victim they are now under 'digital arrest' and must remain on camera, isolated from contacting anyone else, until the matter is 'resolved.'\n\nThe scammer then demands the victim transfer money, supposedly for 'verification,' a 'clearance fee,' or bail, sometimes instructing them to move funds from savings or investments and stay on the call the entire time to prevent the victim from checking with family, a bank, or actual authorities. The isolation and constant video surveillance are deliberate tactics to prevent the victim from getting a second opinion that would reveal the scam.\n\nNo real law enforcement agency conducts an 'arrest' over a video call or requires a suspect to transfer money to avoid detention — arrests, investigations, and legal proceedings happen through formal, in-person or documented court processes, never through a demand for immediate payment while being watched on camera. Ending the call and independently contacting real local authorities using a verified number is the only appropriate response.","redFlags":["Caller claims you're under 'digital arrest' and must stay on a video call continuously","Demand for immediate money transfer to avoid arrest, prosecution, or a supposed warrant","Instructions to isolate yourself and not contact family, your bank, or actual police while on the call","Staged backdrop with uniforms or badges that can't be independently verified","Claims your identity, bank account, or phone number is linked to a serious crime like money laundering or trafficking","Pressure to move money from savings, investments, or retirement accounts specifically"],"whatToDoNow":["End the call immediately — no real arrest or legal process happens this way","Do not transfer any money regardless of what threats or documents are shown on screen","Contact your real local police using a number you look up independently, not one the caller provides","Tell a trusted family member or friend what happened, since isolation is a key part of the scam's design","Report the incident to your country's fraud reporting or cybercrime authority","If you already transferred money, contact your bank immediately to attempt to halt or trace the transfer"],"faq":[{"question":"Is 'digital arrest' a real legal concept anywhere?","answer":"No. There is no legitimate legal process anywhere that detains someone through a video call or requires payment to avoid arrest. This term is used exclusively by scammers to describe their fabricated scenario."},{"question":"Why do scammers insist on keeping the video call running the whole time?","answer":"Keeping the victim isolated and watched prevents them from pausing to think, checking with someone they trust, or contacting real authorities, all of which would quickly expose the scam."}],"lastReviewed":"2026-07-05"},{"slug":"fake-courier-customs-digital-arrest-scam","url":"https://scamencyclopedia.org/questions/fake-courier-customs-digital-arrest-scam","question":"I got a call about a package held by customs containing illegal items, then it turned into threats of arrest — what's going on?","shortAnswer":"This is a combined courier and 'digital arrest' scam. It typically starts with a fake customs or courier call claiming your identity is linked to a suspicious package, then escalates to threats of arrest to pressure you into paying a fee or transferring money.","explanation":"This variant begins with a call or automated message claiming a package addressed to you, or one using your identity documents, was intercepted by customs and found to contain contraband, cash, or drugs. Once the victim engages, the caller is transferred to someone posing as a police officer, sometimes escalating into a full video 'digital arrest' scenario, where the victim is told they're implicated in trafficking and must pay a fee, fine, or 'investigation clearance' amount to avoid prosecution.\n\nThe courier detail adds a layer of specific, seemingly verifiable plausibility that a generic arrest threat lacks, since it references a tangible object — a package — rather than an abstract accusation. Scammers may even provide a fake tracking number or courier company name that looks legitimate on the surface but can't be verified through the courier's actual official tracking system.\n\nReal customs authorities and courier companies don't resolve suspected illegal shipments by calling the named recipient and demanding a personal payment to clear their name — such matters go through formal investigation and legal channels, not a phone call ending in a request for a bank transfer or gift cards. Independently verifying any claimed tracking number through the courier's own official website, without using any link or number provided by the caller, quickly exposes the fabrication.","redFlags":["Call claims a package linked to you contains illegal items and demands personal payment to resolve it","Provided tracking number can't be verified on the courier's own official website","Call escalates from a courier issue into threats of arrest or prosecution","Request to pay via gift cards, cryptocurrency, or wire transfer to avoid legal action","Pressure to stay on the phone or video call continuously without contacting anyone else","Caller ID or company name doesn't match any courier you're actually expecting a delivery from"],"whatToDoNow":["Hang up and independently check any claimed tracking number through the courier's real official website","Never pay money or provide financial details to resolve a supposed customs or courier issue over the phone","Contact real local police using an independently found number if you're concerned about a genuine legal matter","Tell a trusted person about the call, since isolation tactics are central to how this scam escalates","Report the call to your local fraud reporting or cybercrime authority","If you've already paid, contact your bank or payment provider immediately to attempt a reversal or trace"],"faq":[{"question":"Can a real customs issue ever be resolved by paying money over the phone?","answer":"No. Legitimate customs holds are handled through formal, documented processes with the courier or postal service, not through a phone call demanding immediate personal payment to a stranger."},{"question":"How can I check if a tracking number is genuine?","answer":"Go directly to the courier company's official website and enter the tracking number there yourself, rather than using any link or number provided by the caller, since a fake tracking number often won't resolve to a real shipment."}],"lastReviewed":"2026-07-05"},{"slug":"quishing-qr-code-phishing","url":"https://scamencyclopedia.org/questions/quishing-qr-code-phishing","question":"What is 'quishing' and why is it suddenly showing up everywhere from parking signs to restaurant tables?","shortAnswer":"Quishing is phishing carried out through QR codes instead of clickable links. Scammers place fake QR codes in public places or send them in messages because phones often can't preview the destination, making it easy to redirect people to fraudulent sites.","explanation":"QR codes became far more common after being widely adopted for menus, parking payments, and contactless check-ins, and scammers followed that adoption by producing their own fake codes designed to blend into the same everyday contexts. A quishing attack can involve a sticker placed over a genuine QR code in a public location, a fake code printed on a flyer or fake parking ticket, or a code embedded in an email or text message.\n\nWhat makes quishing particularly effective is that most people have learned some caution around suspicious text links but far less around QR codes, partly because scanning a code feels like a physical, real-world action rather than a digital one, and partly because many phone cameras open the resulting link automatically or show only an abbreviated preview that's easy to misread. The destination is often a fake payment page, a fake login page, or a page that silently installs malware.\n\nBefore scanning any QR code in public or from a message, it's worth checking whether it looks tampered with, such as a sticker slightly misaligned over a machine or sign, and after scanning, carefully reading the full destination web address before entering any information, rather than trusting the page simply because it loaded after a scan.","redFlags":["QR code sticker looks slightly misaligned or placed over what appears to be an original code","Code appears in an unsolicited text or email asking you to 'verify,' 'pay,' or 'claim' something","Destination web address doesn't match the organization the QR code claims to represent","Page asks for payment or login details immediately after scanning with little other content","QR code found in a location where it doesn't otherwise fit the surrounding official signage","Urgency or an unusually good offer displayed on the page the code leads to"],"whatToDoNow":["Check a QR code for signs of tampering, such as a sticker over an existing official code, before scanning","Read the full destination web address after scanning before entering any information","Avoid scanning QR codes from unsolicited texts or emails altogether","Use a manually typed, known web address instead of scanning when paying for something like parking","Report suspicious or tampered QR codes to the venue, business, or authority responsible for the location","If you entered details on a fake page, change any reused passwords and contact your bank if payment information was involved"],"faq":[{"question":"Are QR codes inherently unsafe to use?","answer":"No, most QR codes are legitimate and safe, but the format hides the destination until after scanning, which scammers exploit. Caution should be applied similarly to how you'd treat an unfamiliar text link."},{"question":"How can I check a QR code's destination before committing to anything on the page?","answer":"Most phones show the link preview briefly before opening it fully — read this carefully, and once on the page, check the full address bar rather than assuming the page is legitimate just because the code scanned successfully."}],"lastReviewed":"2026-07-05"},{"slug":"qr-code-parking-meter-scam","url":"https://scamencyclopedia.org/questions/qr-code-parking-meter-scam","question":"I scanned a QR code on a parking meter to pay and now I'm worried it was fake — what should I check?","shortAnswer":"Check your bank statement for an unfamiliar charge and compare the payment page you used against the parking authority's official app or website. Scammers place fake QR stickers directly over legitimate parking meter codes to redirect payments to themselves.","explanation":"This scam involves printing a sticker with a fraudulent QR code and physically placing it over the real code on a parking meter or signage, banking on the fact that most drivers scan quickly without closely inspecting the meter or the resulting web page. The fake page is often a convincing copy of the real parking payment system, sometimes even successfully displaying a fake 'payment confirmed' message, while the payment itself goes to the scammer and no legitimate parking session is actually registered.\n\nVictims of this scam often don't realize anything went wrong until they receive a parking fine for an unpaid session they believed they'd paid for, or until they notice an unfamiliar charge on their bank statement that doesn't match the parking authority's actual billing name. Because the sticker is placed directly on real infrastructure, in a context where paying by QR code is now completely normal, there's little about the experience itself that feels unusual to the victim in the moment.\n\nChecking that a parking QR code isn't a sticker placed over an original, verifying the destination web address matches the parking authority's known official domain, or simply using the parking authority's own official app instead of scanning an unfamiliar code are all ways to avoid this scam.","redFlags":["QR code sticker appears slightly raised, misaligned, or different in material from the rest of the meter's signage","Payment page's web address doesn't match the parking authority's known official domain","No option to pay through the parking authority's official app as an alternative","Payment confirmation looks generic or lacks specific details like your license plate or exact space number","Unfamiliar charge appears on your bank statement not matching the parking authority's billing name","You later receive a parking fine despite believing you'd paid"],"whatToDoNow":["Inspect the QR code sticker for signs it's been placed over an original code before scanning","Use the parking authority's official app or website directly instead of scanning an unfamiliar code where possible","Check the destination web address carefully before entering payment details","Review your bank statement after paying for parking via QR code and dispute any unrecognized charge","Report a suspected fake QR sticker to the parking authority or local council so it can be removed","Keep a screenshot of the payment confirmation in case you need to dispute a resulting fine"],"faq":[{"question":"How can I tell if a parking QR code sticker is fake without knowing what the original looked like?","answer":"Look for signs of a sticker layered on top of the meter's surface, such as a slightly different texture, adhesive edges, or a code that seems out of place compared to the rest of the meter's official signage."},{"question":"What should I do if I get a parking fine after paying through a fake QR code?","answer":"Keep your payment confirmation and bank statement as evidence, report the fraudulent code to the parking authority, and contest the fine by explaining that you paid through a fraudulent code placed on their equipment."}],"lastReviewed":"2026-07-05"},{"slug":"quishing-fake-delivery-notice","url":"https://scamencyclopedia.org/questions/quishing-fake-delivery-notice","question":"I got a text about a missed delivery with a QR code to reschedule — should I scan it?","shortAnswer":"Be cautious. Fake delivery notices using QR codes are a common quishing tactic, leading to phishing pages that ask for a small 'redelivery fee' along with your full card details, or to fake login pages.","explanation":"This scam mimics the now-familiar pattern of real courier delivery notifications, which increasingly do include a link or code to reschedule a missed delivery, giving the fake version a plausible cover. The message claims a delivery attempt failed and provides a QR code to 'reschedule' or 'confirm your address,' leading to a page requesting a small payment, ostensibly for redelivery or a customs fee, alongside full card details including the security code.\n\nBecause the amount requested is often small, victims may not think carefully before paying, reasoning that even if something feels slightly off, the financial exposure seems minor. In reality, entering full card details on a fraudulent payment page can expose the card to further unauthorized charges beyond the small amount initially shown, and the scam may also be used to harvest personal information like your address and phone number for further targeting.\n\nGenuine courier companies typically also allow you to check delivery status directly through their own official app or website using a tracking number, without requiring a QR code scan from an unsolicited text. Checking your delivery status independently, rather than scanning the code in the message, is the reliable way to confirm whether a rescheduling notice is real.","redFlags":["Unsolicited text about a missed delivery includes a QR code rather than a standard tracking link","Page reached after scanning asks for full card details including the security code for a small fee","Courier name in the message doesn't match any delivery you're actually expecting","Urgency to reschedule within a short window or the package will be 'returned'","Sender's number or short code doesn't match the courier's known official contact","Delivery status doesn't match anything visible when checked through the courier's actual official app"],"whatToDoNow":["Check delivery status directly through the courier's official app or website rather than scanning the code","Don't enter full card details, especially the security code, on a page reached through an unsolicited text","Verify you're actually expecting a delivery from the courier named in the message","Report the text as spam or phishing through your phone's reporting feature","If you already entered card details, contact your bank immediately to flag potential fraud","Delete the message and avoid forwarding the QR code to others"],"faq":[{"question":"Why do these scams ask for such a small payment amount?","answer":"A small amount lowers the victim's guard, since it seems like a minor risk even if something feels off, but entering full card details for any amount, however small, exposes the card to further unauthorized use."},{"question":"How can I check a delivery notice is genuine?","answer":"Go to the courier's official app or website directly and enter your tracking number there, rather than using a link or QR code sent in an unsolicited text message."}],"lastReviewed":"2026-07-05"},{"slug":"ai-voice-clone-family-emergency-scam","url":"https://scamencyclopedia.org/questions/ai-voice-clone-family-emergency-scam","question":"I got a call that sounded exactly like a family member in distress asking for emergency money — could it be AI generated?","shortAnswer":"Yes, this is possible with current voice cloning technology. Scammers can generate a convincing imitation of a loved one's voice from short audio clips found online, then use it in a panicked emergency call demanding urgent payment.","explanation":"This scam is an evolution of the traditional 'grandparent scam' or family emergency scam, updated with AI voice cloning technology that can recreate a specific person's voice from as little as a few seconds of audio, sometimes sourced from public social media videos, voicemail greetings, or other publicly available clips. The cloned voice is used in a call claiming to be the family member, often citing a car accident, arrest, or medical emergency, and requesting urgent money transfer, sometimes with a second caller posing as a lawyer, doctor, or police officer to add pressure and legitimacy.\n\nThe emotional shock of hearing what sounds exactly like a loved one in genuine distress is designed to override the skepticism a person might otherwise apply to an unusual request for money, and scammers frequently create background noise or crying to make the voice harder to scrutinize carefully and to discourage the victim from asking detailed follow-up questions.\n\nBecause voice alone is no longer a reliable way to confirm someone's identity, hanging up and calling the family member back directly on a number you already have, or contacting another relative to check on their whereabouts, is the most reliable way to verify whether an emergency call is genuine before sending any money.","redFlags":["Call demands urgent money transfer with pressure not to hang up or tell anyone else","Voice sounds right but the request or story has small inconsistencies when questioned","Caller resists answering specific verification questions only the real family member would know","Background noise, crying, or a chaotic scene designed to prevent careful questioning","Request to pay via wire transfer, cryptocurrency, or gift cards rather than a traceable method","A second caller joins claiming to be a lawyer, doctor, or official adding pressure to pay quickly"],"whatToDoNow":["Hang up and call the family member back directly using a number you already have saved","Contact another relative or friend to independently confirm the family member's whereabouts","Ask a question only the real person would know the answer to before considering any payment","Never send money via wire transfer, cryptocurrency, or gift cards based on a single unverified call","Set up a family code word in advance that can be used to verify identity during a real emergency call","Report the scam attempt to local police and your phone carrier"],"faq":[{"question":"How much audio does a scammer need to clone someone's voice convincingly?","answer":"Current voice cloning tools can produce a passable imitation from as little as a few seconds of clear audio, which is often available from public social media posts, videos, or voicemail greetings."},{"question":"What's a reliable way to prepare for this scam in advance?","answer":"Agree on a family code word or a specific personal question that only real family members would know, and treat any urgent money request over the phone as unverified until confirmed through a separate channel."}],"lastReviewed":"2026-07-05"},{"slug":"toll-road-text-smishing-scam","url":"https://scamencyclopedia.org/questions/toll-road-text-smishing-scam","question":"I received a text saying I have an unpaid toll and need to pay immediately to avoid a fine — is this a scam?","shortAnswer":"This is a widely reported smishing (text-message phishing) scam. Scammers send fake toll payment texts claiming an outstanding balance, linking to a fraudulent payment page that captures card details, regardless of whether you've actually driven on a toll road recently.","explanation":"Toll payment smishing texts are typically sent in mass batches to phone numbers with no actual connection to the toll road or vehicle mentioned, relying purely on the volume of messages sent and the plausibility of the claim for a percentage of recipients to have genuinely used a toll road recently. The text usually threatens an additional fine or late fee if payment isn't made within a short window, creating urgency, and links to a page that closely mimics the real toll authority's website, requesting card details for the supposedly overdue amount.\n\nThese scams often spread quickly after being reported in one region, then get adapted with different toll authority names to target other areas, since the underlying page and technique remain the same regardless of which toll road brand is used in the message. Because toll violations and fines are a genuinely normal part of driving in areas with toll roads, the claim doesn't need to be especially convincing to prompt a percentage of recipients into paying without checking further.\n\nGenuine toll authorities typically allow you to check your account or any outstanding balance directly through their own official website or app, without needing to click a link in an unsolicited text, and legitimate toll notices are usually sent through mail or an account you've already registered rather than out of the blue by text with an urgent short deadline.","redFlags":["Text claims an unpaid toll with a threat of an additional fine if not paid within hours","Link leads to a payment page with a web address that doesn't exactly match the toll authority's known domain","Message doesn't reference a specific toll road, vehicle, or account you actually use","Sender's number is an unfamiliar short code or foreign number rather than the toll authority's known contact","Urgency language pushing for immediate payment without normal notice periods","Request for full card details including the security code on the linked page"],"whatToDoNow":["Don't click the link — check any toll account balance directly through the toll authority's official app or website","Verify whether you've actually used a toll road recently before assuming the message could be accurate","Report the text as spam or phishing through your phone's built-in reporting feature","If you already entered card details on the linked page, contact your bank immediately","Check the sender's number and compare it against the toll authority's known official contact channels","Warn family members, especially those less familiar with these scams, that such texts are circulating"],"faq":[{"question":"Why do I get toll payment scam texts even if I don't drive or haven't used a toll road recently?","answer":"These texts are sent in bulk to large numbers of phone numbers with no actual connection to toll usage, relying on the fact that a percentage of recipients will have genuinely used a toll road recently and may pay without checking."},{"question":"How can I check if I actually owe a toll payment?","answer":"Log into your toll account or check your vehicle's toll history directly through the toll authority's official app or website, rather than through any link provided in an unsolicited text message."}],"lastReviewed":"2026-07-05"},{"slug":"qr-code-restaurant-menu-scam","url":"https://scamencyclopedia.org/questions/qr-code-restaurant-menu-scam","question":"I scanned a QR code menu at a restaurant table and it asked me to enter payment details before showing the menu — is that normal?","shortAnswer":"No, this is not standard practice and is a red flag. Legitimate QR code menus display the menu directly without requiring payment information first; a request for card details before showing food items suggests a fake code has replaced or been placed over the genuine one.","explanation":"QR code menus normally just link to a webpage displaying the restaurant's food and drink options, with payment, if handled digitally at all, occurring separately at the end of the meal through a legitimate point-of-sale system or a payment link sent by staff. A fake QR code sticker placed over a table's genuine code can redirect to a fraudulent page designed to look like a menu or ordering system but that requests card details upfront, supposedly to 'start your tab' or 'reserve your table session.'\n\nThis scam relies on the same principle as other quishing attacks — a QR code hides its destination, and diners often assume any code on a restaurant table must be legitimate since it's presented in an official-looking context by the business itself. Because ordering and paying through a phone has become normalized in many restaurants, a request for payment details before even seeing a menu may not immediately strike a distracted diner as unusual.\n\nIf a scanned restaurant QR code asks for payment details before displaying any actual menu items, it's best to stop, ask a staff member directly whether the code is legitimate, and avoid entering any card information on the page until confirmed.","redFlags":["QR code asks for card details before displaying any menu items or food options","Sticker on the table looks like it may be placed over another code underneath","Page has no restaurant branding, or branding that looks inconsistent with the venue","Staff are unaware of any digital payment step being required just to view the menu","Web address doesn't match the restaurant's known official website or ordering platform","No printed menu available as an alternative if the QR code seems to be the only option"],"whatToDoNow":["Ask restaurant staff directly whether the QR code is genuinely theirs before entering any information","Don't provide card details on a page that hasn't shown you an actual menu first","Check the QR sticker for signs it's been placed over the table's original code","Request a printed menu if the digital code seems suspicious","Report a suspected fake QR code to restaurant management or staff so it can be removed","If you already entered card details, contact your bank promptly to flag potential fraud"],"faq":[{"question":"Do legitimate restaurants ever require payment before showing a menu?","answer":"No, standard digital menu systems display the menu itself first, with payment handled separately at the end of the order or meal through the restaurant's own point-of-sale process."},{"question":"What should I do if I suspect a table's QR code has been tampered with?","answer":"Tell a staff member immediately so they can inspect and remove it, and avoid using that code yourself until it's confirmed safe."}],"lastReviewed":"2026-07-05"}]}