Loading…
Loading…
Page 9 of 17.
Fake login pages copy the look of real websites but sit on different domains — always check the full URL in your browser bar before entering any password.
Fake QR codes redirect you to phishing sites or prompt app installs — always preview the URL before opening it and be suspicious of QR codes stuck over the top of official ones.
Fake apps mimic popular ones with near-identical icons and names to steal credentials or charge hidden subscriptions — check the developer name, review count, and publish date before installing.
Fake online stores lure you with prices far below market value and either never ship, send counterfeits, or steal your card details — check domain age, returns policy, and contact details before buying.
Fake charity appeals spring up after disasters and use emotional images and vague names to divert donations — verify the charity's registration number before giving.
Fake recruiters offer jobs with unusually high pay for minimal qualifications and eventually ask for fees or personal documents — legitimate employers never charge candidates to apply or onboard.
Fake romance profiles use stolen photos, claim to be abroad, quickly move to private messaging, and eventually ask for money — no legitimate partner needs funds before meeting you.
Fake crypto exchange emails mimic real platforms to steal your login or trick you into sending funds to a 'verification wallet' — legitimate exchanges never ask you to send crypto to prove ownership.
Fake PayPal emails mimic payment notifications or security alerts to steal your login — check that the sender is @paypal.com and log in directly rather than through any link.
Fake Microsoft contacts claim your computer is infected or your account is blocked and push you to install remote-access software or buy gift cards — Microsoft never contacts you unsolicited about device problems.
Fake Amazon emails claim your account is suspended or an order was placed in your name — always check your actual Amazon account rather than clicking any link in the email.
The SSA never suspends your Social Security number by phone or email — any contact claiming your number has been deactivated is a scam.
Phishing emails create false urgency, impersonate trusted brands, and contain links or attachments designed to steal your credentials or install malware — slowing down and checking the sender address protects you.
Fake energy and utility emails threaten supply disconnection unless you pay immediately through a link — real suppliers send paper bills and never cut supply without proper written notice.
Fake job offer emails promise remote roles with high pay and ask for personal data or fees before employment — a real job offer comes after an interview and never requires an upfront payment.
Fake tech support pop-ups display alarming security warnings with a phone number — legitimate security software never asks you to call a number to resolve a threat.
You cannot win a lottery you never entered — any email claiming you have won a prize and asking for fees or bank details to release it is a scam.
Fake investments promise guaranteed above-market returns with no risk — no legitimate investment can guarantee profits, and any platform demanding secrecy or speed is a scam.
Fake airdrops and NFT giveaways ask you to connect your wallet and sign a transaction that drains your funds — no legitimate airdrop asks you to pay gas fees or approve outgoing transfers.
Fake rental listings use photos from real properties, offer below-market rents, and ask for a deposit before you have viewed the property in person — never pay before an in-person viewing.
Fake immigration agents promise guaranteed visas, charge high fees, and either disappear or file applications that were never valid — use only lawyers or advisers registered with the relevant authority.
Fake health supplement sites sell counterfeit or unregulated products with exaggerated medical claims — verify that supplements are properly registered and sold by a licensed retailer before buying.
Fake insurance policies accept your premium but issue worthless documents — verify that your insurer is authorised by the FCA (UK) or state regulator (US) before paying.
Fake pet listings show adorable photos and low prices but require upfront deposits before you have seen the animal in person — never pay for a pet you have not met.
Fake loan relief companies charge upfront fees to access forgiveness programmes that are free to apply for directly — never pay a third party to lower or discharge your federal student loans.
Fake giveaways impersonate celebrities or brands, ask you to share, follow, and enter personal details, then harvest data or charge a 'shipping fee' for the prize — real brand giveaways never require payment.
Fake subscription emails claim a large auto-renewal is about to charge and ask you to call or click to cancel — they are phishing for your card details or bank login.
Fake gaming item stores steal your account credentials or take payment for items that never arrive — only buy in-game items through official in-game stores or verified marketplace platforms.
Fake travel sites offer extremely cheap flights or hotels, charge your card, and issue worthless or non-existent booking confirmations — use ATOL-protected agencies or book directly with carriers.
Fake ticket sellers offer sold-out or premium tickets that turn out to be counterfeit, duplicated, or non-existent — only buy from official box offices or verified secondary market platforms.
Pyramid and MLM scams promise income primarily through recruiting others rather than selling products — if the money flows from recruitment not sales, it is not a legitimate business.
Governments do not issue tax refunds by asking you to click an email link and enter your bank details — real refunds are credited automatically or by cheque to your registered details.
Fake coupon sites harvest your email and personal data, install browser extensions that track your shopping, or charge for 'membership' to access codes that do not work.
Fake government grant emails promise free money you must claim by entering your bank details — governments do not distribute grants or benefits through unsolicited emails requiring a link to claim.
Fake recovery services ask for your seed phrase to 'recover' lost crypto — sharing your seed phrase gives complete control of your wallet to the fraudster immediately.
Fake auction listings use stock photos, push buyers to pay outside the platform, and then vanish — never pay for an auction item through bank transfer or gift card outside the auction site.
Fake AI investment tools promise algorithmic profits with no risk — they display fabricated dashboard numbers and prevent withdrawals once you have deposited.
Fraudsters impersonate bank fraud teams and create urgency to move your money to a 'safe account' — your real bank will never ask you to transfer your own money for safety reasons.
Fake police calls demand immediate payment of a fine or threaten arrest — real police do not collect fines by phone and do not demand cryptocurrency or gift cards.
Fraudulent payslips and reference letters are used in mortgage and rental applications — verify employment directly with the listed employer using a number you find independently, not one provided by the applicant.
Fake escrow sites are created by scammers to simulate a neutral third party — they collect your payment and hand nothing to the seller or the buyer.
Fake prize sites tell you that you have won through a survey, scratch card, or loyalty programme and ask for a processing fee or card details — real prizes do not require payment to release.
Fake account verification emails create urgency about account suspension and link to credential-harvesting pages — verify your account status by typing the site address directly, never via a link.
Fake customs notices ask you to pay import duties via a link before a parcel is released — real customs authorities send official paper notices and process fees through official government portals.
Fraudsters posing as friends or WhatsApp support ask for your six-digit verification code to take over your account — never share a verification code sent to your phone with anyone.
Fake mortgage brokers collect upfront arrangement fees for loans that never materialise — legitimate FCA-authorised brokers take fees at completion, not before a decision in principle.
Fake car listings use genuine photos at below-market prices and push for deposit payments before viewing — never pay for a vehicle you have not physically inspected and test driven.
CEO fraud emails impersonate senior executives asking for urgent bank transfers or gift card purchases — verify any financial request by calling the requester directly on a known number.
AI-generated deepfake videos are used to impersonate celebrities, executives, and family members in investment and emergency scams — unnatural facial movement, audio sync issues, and requests verifiable by other channels are key tells.
Fake degree mills sell worthless diplomas from invented or unaccredited institutions — verify any qualification by checking the institution's accreditation with the relevant national body.
Fake cashback emails claim your points are about to expire and ask you to click a link to redeem them — real loyalty programmes show your balance in your account and do not expire points through email links.
Fake LinkedIn recruiters use sparse profiles with stock photos, offer vague well-paid roles, and eventually request personal data or fees — verify recruiter profiles and company listings before sharing any information.
Fake virus warning emails claim malware was detected on your device and offer a one-click removal link — real antivirus software never notifies you by email asking you to click an external link to clean your device.
Banking trojans display a fake login overlay on top of your real banking app to steal credentials — keep your device updated, only install apps from official stores, and use your bank's official app rather than browser login where possible.
Inheritance and windfall emails claim a distant relative or anonymous benefactor left you a large sum and ask for fees to release it — this is the classic advance-fee fraud and no such inheritance exists.
Bank transfers offer almost no fraud protection — once the money leaves your account, it is extremely difficult to recover. Use a payment method with buyer protection whenever possible.
Delivery text scams are among the most common phishing methods in use today. Unless you initiated a tracked delivery and the link matches the carrier's official domain, do not click it.
Using public Wi-Fi for banking carries real risk. An attacker on the same network can potentially intercept your session or redirect your traffic. Use mobile data or a VPN instead.
QR codes on parking meters and other public fixtures are frequently tampered with by fraudsters. Criminals place stickers over the genuine code, redirecting you to a fake payment page that steals your card details.
Legitimate platforms that require identity verification — such as financial services, regulated marketplaces, and age-gated services — do have lawful reasons to collect ID. However, many fake platforms request ID as a pretext for identity theft. Know the difference before uploading anything.
Sending a deposit before viewing a property in person is one of the clearest warning signs of rental fraud. Legitimate landlords and agents will always allow viewing before taking a financial commitment.
Social media ads receive minimal vetting on most platforms, making them a common vehicle for fake stores, counterfeit goods, and non-delivery scams. Treat any ad for an unknown retailer with the same caution you would apply to a cold email.
Clicking a phishing link does not automatically mean your accounts are compromised, but the risk depends on whether the site loaded, whether you entered any information, and whether malware was installed. Act quickly to assess the damage.
Replying to a scam text primarily signals that your number is active, which can lead to more contact attempts. It does not in itself cause financial loss, but further engagement increases your risk significantly.
Sharing your phone number with a scammer primarily enables follow-up contact and may result in your number being sold to other fraudsters. In some cases it can also be used in SIM-swapping attacks against your accounts.
Installing a remote-access app at a scammer's request gives them full visibility and control of your device. This is one of the most dangerous outcomes in tech support and banking scams — act immediately to stop access.
Gift cards are never a legitimate payment method for any bill, fine, tax, or service from a business or government agency. Any request to pay this way is a scam without exception.
No bank, regulator, or financial authority will ever ask for your full online banking password over the phone. Any caller requesting it is attempting fraud.
Overpayment scams are a well-established fraud. A buyer sends more than the asking price and asks you to refund the difference — but the original payment is fraudulent and will be reversed, leaving you out of pocket.
You should never enter payment details or personal information on a website without HTTPS (indicated by a padlock and 'https://' in the address bar). Your data travels unencrypted and can be intercepted.
Sending money to someone you have only met online — regardless of how close you feel — is extremely high risk. This is the defining action in romance scams and pig-butchering investment fraud.
VPNs advertised through pop-ups or aggressive ads are frequently fraudulent, privacy-invading, or outright malware. Only use VPNs from reputable providers with independently audited privacy policies.
Paying via Zelle or Venmo Friends and Family on Facebook Marketplace provides virtually no buyer protection. If you do not receive the goods, recovering your money is very difficult. Use cash in person or a buyer-protected payment method.
Legitimate employers do not ask for full bank account details during initial application stages, and never before you have signed a contract and completed ID verification. Early requests for banking information are a hallmark of employment scams and money mule recruitment.
Once your credit card details reach a fraudulent site, criminals will typically attempt to use them within hours — for purchases, cash advances, or selling the data to other fraudsters. Immediate card blocking is essential.
You should never install an app from a link sent by someone you do not know. Legitimate apps are distributed through official app stores, and direct installation links almost always lead to malware.
Genuine competitions do not require a credit card to enter. Any prize draw requesting payment or card details is almost certainly a subscription trap, a fake lottery, or a data-harvesting operation.
Landlords have limited legitimate reasons to request your full National Insurance or Social Security number before a tenancy is agreed. Fraudulent rental listings often use this request as a pretext for identity theft.
Cryptocurrency exchanges found through unsolicited ads — particularly on social media — are a major source of investment fraud. Always verify registration with the relevant financial regulator before depositing anything.
Using another person's card is technically a breach of most card issuers' terms and conditions, even with permission. It also creates legal exposure if the transaction is later disputed. Always use your own card or request a transfer instead.
Cryptocurrency payments are irreversible and carry no buyer or seller protection. As a seller, once you ship an item, the crypto cannot be charged back — but you also cannot easily verify a payment is genuinely confirmed without blockchain knowledge.
Using your primary email for all sign-ups increases your exposure to data breaches, phishing, and spam significantly. Using a separate or masked email for low-trust services materially reduces your risk.
Search ads can be purchased by fraudsters to impersonate legitimate businesses. Always verify the URL in the address bar before entering any payment information, even if the ad appeared at the top of search results.
Many social media giveaways are data-harvesting exercises or outright scams. Genuine brand giveaways rarely require more than a follow and a comment. Any request for personal information, card details, or payment is a red flag.
Sharing your screen with a verified, trusted IT professional is normal practice. Sharing it with someone who contacted you unsolicited — especially claiming your computer has a problem — is extremely dangerous.
Ticket fraud via social media is widespread, particularly for sold-out events. There is no guarantee that tickets sold by social media strangers are genuine, transferable, or even real. Always prefer official channels.
Military romance scams are one of the most common and emotionally damaging fraud types. People claiming to be military personnel deployed overseas and requesting money are almost never who they claim to be.
Reusing passwords is one of the highest-risk security habits online. When any one service suffers a data breach, criminals test the stolen credentials on hundreds of other services — a technique called credential stuffing.
Calling a fake tech-support number typically leads to a remote-access request, payment demand, or data theft. The harm depends on what happened during the call — act quickly to assess and limit damage.
Sharing precise real-time location with anyone you have not met in person and do not fully trust carries safety risks beyond financial fraud. Start with general area only and meet in a public place first.
Full upfront payment to a contractor you have not worked with before is strongly inadvisable. A small deposit to cover materials is common practice, but full payment before completion creates significant risk of non-performance or disappearance.
An unexpected password-reset email you did not request may indicate someone is trying to access your account. Do not click the link — instead, log in directly through the official site and change your password from there.
Billing update requests sent via email are a common phishing technique. Never follow links in such emails — go directly to the service's official website and update payment information from there.
Unsolicited investment calls — also known as boiler room fraud — are a significant source of financial loss. Legitimate regulated advisers do not cold-call members of the public with investment opportunities.
Email attachments from unknown senders are one of the primary methods for delivering malware. You should not open them unless you are certain of the sender's identity and were expecting the file.
Suspicious links on WhatsApp — even from contacts whose accounts may be compromised — can lead to phishing sites, malware, or account-takeover attempts. Do not click without verifying the sender through another channel.
Immigration service scams target vulnerable people with fake visa applications, fraudulent legal advice, and fabricated government fees. Only use services from registered immigration lawyers or authorised advisers.
Inheritance scams are a classic advance-fee fraud pattern. No legitimate inheritance process requires a fee paid to a stranger before the inheritance is released — this is always a fraud.
Unregulated online pharmacies may supply counterfeit, substandard, or incorrectly labelled medicines. Only buy from pharmacies verified by the relevant national regulatory authority.
Money transfer services like Western Union and MoneyGram are nearly impossible to reverse once collected. Sending to online contacts you have not met in person is very high risk and is the payment method of choice for many scam operations.