Data Removal Upsell Call Scam Examples
A caller claims your personal information has been found exposed on the dark web or data-broker sites, and offers an urgent paid removal or 'credit monitoring' service to fix a problem they've just described. The scammer's real goal is your payment for a service that may do nothing, duplicate free protections you already have, or simply harvest more of your payment and personal details. The lever is fear about identity theft, amplified by presenting themselves as the solution to a crisis they invented. Verify independently through your bank or official data-broker opt-out tools before paying anyone who cold-calls with this offer.
Last reviewed: 1 June 2026
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
Hello, this is [company] privacy protection. Our scan found your full name, address, and Social Security number listed on [number] data-broker websites. For [amount] we can have it removed within 48 hours.
We detected your personal information on the dark web, including your email and passwords. Our removal and monitoring package is [amount] per year. Can I take a card payment today to protect you?
This is a courtesy call: your data has been exposed in a breach at [major retailer]. We offer an emergency suppression service for [amount]. Without it, your identity could be stolen within days.
What the scammer wants
To charge you for a service that either does nothing, is freely available, or uses your payment details for further fraud.
Red flags in the message
- Unsolicited call claiming urgent data exposure you cannot independently verify
- Request for immediate payment by card over the phone
- Claims of guaranteed removal from sites they have not named specifically
- High-pressure urgency — 'your identity could be stolen within days'
- Offering a package that bundles monitoring with removal without prior relationship
A safe response
Hang up. Legitimate data-broker removal services exist but are never initiated via cold call. Check haveibeenpwned.com and consult your credit reporting agency directly for free alerts.
What not to send
- Card details over the phone to an inbound caller
- Social Security or National Insurance number
- Any payment before independently verifying the company
What to do if you already replied
- Check your bank or card statement for the charge and dispute it if the service was not as described
- Place a fraud alert on your credit file with the major credit bureaus
- Report to your national consumer protection authority
Evidence to preserve
- Screenshot the full message or call details
- Note the sender number, email, or profile
- Save any links (without clicking) and payment details
- Record dates and times
Frequently asked questions
I already paid for the removal service — was it legitimate?
Contact your bank or card issuer to check whether the company is a recognized, registered business, and consider disputing the charge if the service can't be verified or hasn't been fulfilled as promised. Data removal from broker sites can often be done yourself for free directly through each broker's official opt-out page.
How do I check if my data is actually exposed, without paying anyone?
Use free, reputable breach-checking tools offered by established cybersecurity organizations to check if your email or phone number appears in known data breaches. Many data broker sites also offer free self-service opt-out forms directly on their own websites.
Is it safe to give them my Social Security or ID number to 'verify' my identity for the removal?
No — providing a government ID number to an unverified caller adds another risk on top of the original one, since it can be used for identity theft rather than to protect you from it. Never share this information with an inbound caller you haven't independently verified.
Do I actually need a paid service, or can I remove my data myself?
In most cases, you can remove yourself from data broker sites for free using each site's own opt-out process, though it can be time-consuming since there are many such sites. Paid services exist legitimately too, but should be researched and chosen by you, not purchased under pressure from an unsolicited call.