How to Spot a Scam: The Warning Signs to Watch For
Key takeaways
- Urgency is the number-one tell: if you're being rushed or frightened into acting immediately, treat it as a scam until proven otherwise.
- Unusual payment demands, gift cards, crypto, wire transfers, or moving money to a 'safe account', are almost never legitimate.
- A caller ID or email address can be faked, so it proves nothing; verify through a number or site you find yourself.
- Requests for secrecy, remote access to your device, or one-time security codes are major red flags.
If a message or call is rushing you, frightening you, or asking you to pay in an unusual way, treat it as a scam until you’ve proven otherwise. Scams are designed to bypass your judgement, so the warning signs are less about the story and more about the pressure. Here’s the checklist I wish I’d known.
The core warning signs
- Urgency or threats. Deadlines, account closures, arrest warrants, “act now.” Pressure is the single most reliable tell.
- Unusual payment methods. Gift cards, cryptocurrency, wire transfers, or moving money to a “safe account” are almost always scams.
- Requests for secrecy. “Don’t tell the bank”, “keep this between us.” Legitimate organisations never ask this.
- Out-of-the-blue contact about something you didn’t initiate, a prize, a refund, an investment, a problem with an account.
- Requests for codes or remote access. One-time passcodes and remote-control software hand over the keys.
Why caller ID and email addresses prove nothing
Scammers routinely spoof phone numbers and sender addresses, so a message that looks like it’s from your bank or the government can be completely fake. The display name is not proof of anything. The fix is simple: verify independently.
The one habit that defeats most scams
Stop and verify through a channel you find yourself. Hang up, then call the number on the back of your card or the organisation’s official website. Don’t use the number, link, or contact details the message gave you. A real organisation will never punish you for taking a few minutes to check.
For the bigger picture on how these scams operate, see online scams and fraud. If you think you’ve already been caught, go straight to what to do if you’ve been scammed.
This is general information, not advice for your situation.
References
- How To Recognize and Avoid Phishing Scams, US Federal Trade Commission.
- How To Avoid a Scam, FTC Consumer Advice.
- Internet Crime Complaint Center (IC3), Federal Bureau of Investigation.
Frequently asked questions
What is the biggest sign of a scam?
Manufactured urgency. Scammers push you to act right now, before a deadline, before your account is closed, before you can check with anyone, because pressure stops you thinking clearly and verifying. A genuine organisation will let you call back on a number you find yourself.
Are scam phone numbers and emails faked?
Yes. Caller ID and sender addresses are easily spoofed, so a message appearing to come from your bank or a government agency proves nothing. Always verify independently by contacting the organisation using a number from its official website, your card, or a statement, not the details in the message.
Should I ever share a one-time security code?
No. A one-time passcode or verification code is the key to your account. No legitimate bank, company, or agency will ask you to read one out or type it into a link they send. Anyone asking for your code is trying to take over your account.
What is the single biggest sign of a scam?
Manufactured urgency. If a message or call is rushing you to act immediately, before a deadline, before an account closes, or before you can check with anyone, treat it as a scam until proven otherwise. Pressure is designed to stop you thinking clearly and verifying, which a genuine organisation will always allow you to do.
How can I check if something is really from my bank?
Stop and contact the organisation yourself using a number from the back of your card, an official statement, or a website you typed in directly. Never use the phone number, link, or details the message gave you, because those can be faked. A real bank will never mind you calling back to verify.
Written by David Mercer. Reviewed by Dana Whitaker, CFE.
Our guides are written from personal experience and reviewed by a qualified fraud and security professional for accuracy. Read our editorial policy.