In this article:
A scam is a deceptive tactic used to trick people into giving up money, personal information, or access to their accounts—most commonly online through emails, texts, social media, or fake websites. Scammers often impersonate trusted individuals or organizations, using urgency, fear, or emotional manipulation to pressure victims into acting quickly without verifying the situation. With the rise of AI, scams have become more realistic and convincing, making it harder to detect them.
Scams come in many forms—phishing, smishing (SMS scams), crypto fraud, romance scams, “pig butchering,” accident scams using AI-generated voices, fake online shopping sites, and even funeral donation hoaxes. They typically share red flags: emotional pressure, unrealistic offers, urgent demands, or requests for unusual payments like crypto or gift cards. Protect yourself by staying skeptical of unsolicited messages, never clicking on suspicious links, securing your accounts with strong passwords and 2FA, and always verifying requests through official channels. If you suspect or fall victim to a scam, act fast—cut contact, secure your accounts, report the incident, and gather evidence.
What is a scam?
A scam is a form of deception where someone tricks you into giving up something valuable, such as money, personal information, or access to your accounts.
Scams happen online through emails, messages, fake websites, or social media. The person behind the scam may pretend to be someone trustworthy, but their true intention is always to benefit at your expense.
Why are online scams so common?
Online scams have become more frequent because the internet allows criminals to reach people easily, quickly, and with little risk. It’s easier than ever to build a fake profile, send mass messages, or launch fake websites. The advancement of AI has led to the creation of highly-realistic scams, which are a long way from the typo-laden, broken-english scammy messages of old. For victims, it’s harder to know who to trust in a digital environment and when you’re not physically present with a person.
In many cases, scammers don’t need to break into your accounts—they just need to convince you to trust them. That’s what makes scams uniquely dangerous: they rely on your cooperation.
That’s why it’s important to have tools that back up your instincts, when something feels off. Scam Guard, acts as a digital safety companion that helps you assess suspicious messages, links, or emails in real time—all without sharing your personal data.
How to identify a scammer
Scammers rarely begin with obvious threats. Instead, they start conversations that seem ordinary—friendly, helpful, or even romantic. The scammer then slowly builds trust while steering the conversation toward a goal: getting your money or your information.
What is the first thing you should do if you’re not sure if a message is a scam?
If you’re unsure whether a message or request is real, take these steps before responding:
- Stop and take a moment – don’t rush to reply
- Do not click on any links or download files
- Check the source by contacting the company, person, or agency directly using their official website or phone number
- Look for inconsistencies, like strange grammar or mismatched email addresses
Most importantly: trust your instincts. If something feels off, don’t engage.
What do online scammers usually say to trick you?
Scammers often follow familiar scripts – especially in emails, dating apps, and text messages. Here are a few real examples:
- “I really want to meet you, but I can’t afford the flight. If you pay for my ticket, I’ll pay you back.”
- “Your account has been locked. Please confirm your identity by entering your password here.”
- “Hi Grandma, my phone is broken. I’m using a friend’s number. Can you send me $200 through PayPal?”
- “Congratulations! You’ve won an iPhone. Just pay a $3 shipping fee to claim it.”
- “This is the IRS. You owe back taxes and must pay today or face arrest.”
The content may vary, but the goal is always the same: get you to act quickly without verifying the story.
12 warning signs of a scam
While online scams can take many forms, most share certain behavioral patterns. These warning signs can help you recognize when something isn’t right – even if the message or person seems convincing at first.
Use the following list as a mental checklist whenever you’re unsure whether to trust someone online.
- Unrealistic offers: You’re promised money, prizes, investment returns, or exclusive deals that seem too good to be true.
- Pressure to act immediately: Scammers want you to make decisions quickly. They may say an account will be closed, a prize will expire, or a loved one is in danger.
- Requests for personal information or account access: You’re asked to share login credentials, banking info, or other personal details, or told to install remote access software.
- Unusual payment methods: You’re asked to pay using cryptocurrency, wire transfers, or gift cards – methods that are hard to trace or reverse.
- Avoidance of identity verification: The person refuses a video call, won’t speak on the phone, or gives excuses for why they can’t verify who they are.
- Emotional manipulation: Scammers often appeal to fear, love, sympathy, or excitement to get you to act without thinking clearly.
- Use of impersonation: They claim to represent a company, government agency, friend, or relative—sometimes even using hacked accounts or official logos.
- Isolation tactics: You’re encouraged to move the conversation away from public platforms (like dating apps or marketplaces) and onto private messaging apps.
- Suspicious digital content: You’re sent QR codes, download links, or attachments you didn’t ask for—often disguised as invoices, support files, or urgent requests.
- Inconsistent or vague explanations: Their story keeps changing, or they can’t provide basic details like addresses, phone numbers, or documentation.
- Discouraging verification: They act offended or evasive when you try to confirm their identity or ask follow-up questions.
- Mirroring behavior: They quickly adopt your tone, values, or interests – not to connect, but to create a false sense of closeness and trust.
Spotting just one of these signs may not prove it’s a scam – but the more that apply, the more cautious you should be. H2: Common online scams
Scams come in different forms, and each one uses its own tactics to trick people. Some are short and direct. Others play out over days, weeks, or even months. What they all have in common is a clear goal: to take your money, your information, or your online accounts.
Below are the most widespread types of scams that happen online today—and what makes them easy to fall for.
What is a phishing scam?
Phishing is one of the most common online scams—and one of the easiest to fall for. It happens when a scammer pretends to be an organization you trust, like your bank, a company you use, or a government agency. They contact you by email, message, or even a fake website and try to trick you into revealing personal or financial information.
Phishing messages often look real. They may use official logos, familiar language, and even fake email addresses that closely resemble legitimate ones. But the goal is always the same: get you to click a link, open an attachment, or enter information they can steal.
What phishing might look like:
- An email saying your account has been suspended and that you’ll need to log in to “verify your identity”
- A message claiming there’s been suspicious activity on your bank account and asking you to confirm your PIN
- A fake shipping notice from a delivery company with a link to “track your package”
If you think you’ve received a phishing message:
- Don’t click on anything – not links, buttons, or attachments
- Don’t reply or enter any information
- If in doubt, visit the company’s website directly or call them using a verified phone number
Phishing often creates a sense of urgency or fear, like saying your account will be locked or that you’re owed money. But legitimate companies will never ask you to confirm sensitive details through email or text.
What is a smishing scam?
A smishing scam is a fake text message designed to trick you into clicking a malicious link or sharing private information, like passwords or banking details.
What it looks like:
- “Undelivered package. Please confirm your address.”
Why it works:
Smishing plays on urgency and trust. The message often looks like it’s from a real company, and receiving it on your phone makes it feel personal and immediate – which increases the chance you’ll react without double checking.
What is a cryptocurrency scam?
A cryptocurrency scam involves tricking someone into sending digital assets—like bitcoin or Ethereum – to a scammer, or into investing in a fake crypto platform. These scams often appear as investment tips, giveaways, or urgent recovery services.
What it looks like:
- “This new coin is about to explode—invest now and triple your money.”
Why it works:
Crypto scams rely on hype, fast-moving markets, and a lack of regulation. Scammers take advantage of people’s limited understanding of how cryptocurrency works, using impressive language and fake dashboards to make the scheme look real.
What is a pig butchering scam?
A pig butchering scam is a long-term scheme where scammers build a fake relationship—often romantic—to gain your trust and eventually convince you to invest in fake cryptocurrency platforms. The name comes from the idea of “fattening up” the victim emotionally before “slaughtering” them financially.
What it looks like:
- “Hey! Not sure if you remember me—we met on that trip to LA. Want to catch up?”
Why it works:
The scam creates a false sense of connection and emotional safety. Once trust is established, the scammer introduces a “life-changing” investment opportunity. Victims often lose money not all at once, but in growing amounts over timewhich makes it even harder to walk away.
What is a romance scam?
A romance scam happens when someone pretends to be romantically interested in you—usually through a dating app or social media—in order to build trust and eventually ask for money or [personally identifiable information](https://www.malwarebytes.com/cybersecurity/basics/pii).
What it looks like:
- “I wish I could visit you, but I need help covering travel costs. I’ll pay you back as soon as I can.”
Why it works:
Romance scams are effective because they create an emotional bond. Once trust is established, victims are more likely to overlook red flags and send money out of love, guilt, or a desire to help someone they believe is genuine.
What is an online shopping scam?
An online shopping scam involves fake websites, listings, or sellers that trick people into paying for items that never arrive – or aren’t what was promised. These scams often appear on social media, unknown online stores, or marketplace platforms.
What it looks like:
- “Get the latest smartphone for just $99 – only a few left!”
Why it works:
These scams use urgency and deep discounts to push people into quick purchases. Because the sites often look legitimate—with product images, reviews, and fake order confirmations—many victims don’t realize it’s a scam until it’s too late.
What is an imposter scam?
An imposter scam occurs when someone pretends to be a trusted person or organization—like a relative, coworker, bank, or government agency—to convince you to send money or share sensitive information.
What it looks like:
- “This is the IRS. You owe back taxes. Pay now to avoid legal action.”
Why it works:
Imposter scams rely on authority and fear. The scammer uses familiar names and urgent threats to pressure victims into complying quickly, often without taking time to verify whether the request is real.
What is a money mule scam?
A money mule scam tricks someone into transferring or receiving stolen money on behalf of a scammer. Victims are often told they’re helping with a legitimate business, job, or favor—when in reality, they’re being used to move illegal funds.
What it looks like:
- “Can I send you some money and have you forward it to my supplier? I’ll pay you for the help.”
Why it works:
These scams often appear harmless at first and may even feel like a job opportunity or a way to help someone in need. But acting as a money mule—even unknowingly—can lead to frozen accounts, legal trouble, or criminal charges.
Even with precautions, scams can still happen. If you’ve already been targeted, acting quickly can make a big difference.
What is an accident scam?
In these scams, scammers are using AI-generated voices to impersonate loved ones and trick people into believing there’s been an emergency—such as a car accident. Victims receive a call where they hear what sounds like their child, sibling, or partner claiming they’ve been in an accident and need urgent help—often involving emotional details, like having injured a pregnant woman.
The goal is to create panic, causing victims to act quickly—usually by sending money or personal information—before verifying the situation. Thanks to AI, scammers can now mimic voices using only a short voice clip found online, making the scam far more convincing than traditional phone hoaxes.
What it looks like:
- “Caller (in a distressed, realistic voice):
“Mom… it’s me… I’ve been in a car accident… I didn’t know what to do… I hit a woman, and she’s pregnant. Please, I need help. They’re saying I’ll be arrested unless we pay for her medical bills right away. Can you send money? I’ll send you the details…”
Then a second person—pretending to be a police officer or lawyer—might come on the line:
“Ma’am, this is Officer Reynolds with [fake department]. Your son is here with us. The situation is very serious. If you want to avoid criminal charges, we’ll need a transfer of $4,000 today for the injured party’s medical expenses. We’ll send instructions.”
Why it works:
The accident scam works because it triggers panic by using a loved one’s AI-faked voice, making the threat feel immediate and real. Victims are pressured to act quickly before they have time to think or verify the situation.
Read more on these accident scams in our recent blog post.
What is a funeral scam?
We recently wrote how scammers on Facebook are targeting grieving individuals by posting fake funeral live stream links and asking for donations. They use stolen images and impersonate funeral homes or families of the deceased. Victims are tricked into clicking malicious links—either to “watch” a fake service or to donate money—ultimately leading to theft of personal or financial information. The scam often begins with a comment on legitimate funeral home posts and is spreading as more cybercriminals adopt the tactic.
What it looks like:
- We are heartbroken to share the passing of our beloved [Name]. Please join us for the live-streamed funeral service and donate to xxxx if you can: 🔗 [malicious-link.com/funeralstream] Your thoughts, prayers, donation and presence mean the world to us. Kindly share this with friends and family.
Why it works:
These scams use emotional manipulation to get sympathy. Phrases like “Please join us live,” or “Support the family now” pressure people to act quickly. Because death often brings communities together, people want to help and be part of the support system.
What to do if you’ve been scammed
If you realize you’ve fallen for a scam, don’t panic—but do act quickly. Taking the right steps can help limit the damage and protect your accounts, your identity, and others from being affected by the same scam.
Here’s what to do:
- Stop all contact with the scammer. Don’t reply to messages, click any further links, or try to get your money back by continuing the conversation. Scammers may try to draw you in deeper.
- Secure your accounts and devices. Change the passwords to any accounts that may be at risk, especially email, banking, and social media. Make each password unique and complicated—you can use a password manager to remember them. If you clicked on a suspicious link or downloaded something, run a security scan with a trusted antivirus software.
- Contact your bank or payment provider. Let them know what happened. In some cases, they may be able to reverse a transaction or flag fraudulent activity. The faster you report it, the better your chances.
- Save any evidence. Take screenshots of messages, transaction records, emails, or profiles involved in the scam. You may need them when reporting the incident or disputing charges.
Scams are designed to trick people – and they can happen to anyone. Acting quickly is the most important thing you can do.
How to avoid online scams
The best way to protect yourself from online scams is to build strong digital habits. Most scams don’t rely on advanced technology—they rely on people reacting quickly without verifying what they’re seeing. The more cautious and prepared you are, the less likely you are to become a target.
Here are a few simple ways to reduce your risk:
- Be cautious with unexpected messages. If you get a text, email, phone call, or social media message you weren’t expecting—even if it looks legitimate—take a moment before clicking. When in doubt, go directly to the company’s website or app.
- Use strong passwords and improved authentication methods. Create unique passwords for every account and turn on [two-factor authentication 2FA where available. A password manager can help you stay secure without having to memorize everything.
- Limit how much personal information you share online. Scammers often use social media to gather details about your life. Avoid posting sensitive data like your full date of birth, address, travel plans, or job information.
- Keep your devices and software updated. Many scams rely on outdated apps or operating systems to work. Set your phone and computer to update automatically so you’re always protected by the latest security patches.
- Agree on a family password. Do this in person and never mention it online. If you receive a call or message from someone you suspect is pretending to be a family member in trouble, ask them for the password.
- Trust your instincts. If something feels off —even if you can’t explain why—pause and investigate. Scammers depend on emotional reactions. Giving yourself time to think is one of the best defenses you have.
Use smart tools to spot scams faster
Even when you know the warning signs, scams can still catch you off guard – especially when messages seem urgent or look official. That’s why tools like Scam Guard, built into the Malwarebytes Mobile Security app, are designed to help.
Scam Guard uses AI to review suspicious texts, emails, links, and images, giving clear, private advice in seconds. It works offline, never stores your personal data, and is always available when you need a second opinion.
Whether it’s a strange shipping notice or a too-good-to-be-true offer, Scam Guard can help you think twice before clicking. How to report a scam
Reporting a scam helps protect others – and in some cases, it may also help you recover lost money or prevent further damage. Even if you’re embarrassed or unsure whether it “counts,” it’s always worth filing a report.
Here’s where to report a scam in the United States:
- Federal Trade Commission (FTC): Visit ReportFraud.ftc.gov at: https://reportfraud.ftc.gov/ to report most types of scams, including identity theft, shopping fraud, impersonation, and phishing.
- Internet Crime Complaint Center (IC3): If the scam happened online (especially with financial loss), you can report it to the FBI’s IC3: https://www.ic3.gov/.
- Your bank or payment app: Let your financial institution know immediately. They may be able to freeze a transaction, flag your account, or advise you on further steps.
- Your mobile carrier: If you received a scam via SMS (smishing), forward the message to 7726 (SPAM) to report it (in the US).
- The platform where it happened: Report fake accounts, messages, or ads directly to the platform (e.g., Facebook, Instagram, PayPal, or a dating app).
When you report a scam, include as much detail as possible: dates, amounts, email addresses, screenshots, and descriptions. The more information you provide, the more helpful your report will be.
Related articles:
Social Engineering | How to protect yourself
Phishing: recognize and avoid phishing scams