Protect Yourself From Online Scams and Fraud
Protect yourself from online scams by slowing down before you click, share information, send money, or approve a sign-in request. Verify unexpected messages through a separate, trusted channel, use unique passwords with multifactor authentication, and report suspected fraud quickly.
Why online scams work
Scams are attempts to trick people into handing over money, personal information, account access, or control of a device. They can arrive by email, text, phone call, social media, search results, or a website that imitates a real organization. A message may claim that a delivery is delayed, an account will be closed, a payment is overdue, or a relative needs urgent help.
Many scams rely on ordinary human reactions rather than sophisticated technology: urgency, fear, curiosity, trust, or the possibility of a reward. A convincing logo or caller ID is not proof of legitimacy; display names and numbers can be copied or spoofed. Scammers may also use details found publicly or exposed in earlier data breaches to make a message feel personal.
Warning signs to notice
No single clue proves that a message is fraudulent, and legitimate organizations can send imperfect communications. Treat a request as suspicious when several warning signs appear together, especially if it asks you to act immediately or keep the conversation secret.
- Unexpected urgency: threats of arrest, account closure, lost access, or missed delivery unless you act at once.
- Requests for secrets: passwords, one-time verification codes, recovery codes, payment-card details, or remote access to your device.
- Unusual payment methods: demands for gift cards, cryptocurrency, wire transfers, or payment to an individual when you expected to pay an organization.
- Links or attachments you did not expect: particularly when the message pressures you to open them or sign in.
- Inconsistent details: a sender address, website spelling, payment destination, or explanation that does not match what you know.
Typos are not a reliable test. Some fraudulent messages are carefully written, while genuine messages may contain mistakes. Judge the request and verify it independently rather than relying on appearance alone.
Verify before you respond
If a message says to contact a bank, delivery service, employer, government office, or family member, do not use the phone number, link, or reply option supplied in that message. Find the organization’s contact details through an official app, a document you already trust, or a website address you enter yourself. For a personal request, call the person using a number you already have.
Ask a specific question that only the real contact is likely to answer, but do not reveal a code or password as proof of identity. A legitimate support agent should not need your password or a one-time sign-in code. If someone says they sent you a code, that may mean they are trying to sign in as you; never read the code back to them.
When an email or text contains a link, inspect the destination cautiously, but remember that a familiar-looking address can still be misleading. The safer approach is to open the service independently and check for the same alert in your account.
Secure accounts and devices
Good security makes it harder for one exposed password or deceptive message to become a wider account takeover. Start with your primary email account, since it is often used to reset passwords for other services.
- Use a different, long password for each important account. A reputable password manager can help generate and store unique passwords.
- Turn on multifactor authentication (MFA), preferably using an authenticator app, passkey, or security key where available. Text-message codes are generally better than no second factor, but can be vulnerable to number-transfer scams.
- Keep your operating system, browser, and apps updated. Updates often fix security weaknesses; install them through the device’s normal settings or official app store.
- Set a screen lock and secure account recovery options. Store backup or recovery codes somewhere private and separate from the device they protect.
- Review account sessions and sign-in alerts. Sign out unfamiliar sessions and change credentials if you see activity you cannot explain.
Do not install software or allow remote access because an unsolicited caller says your device is infected. If you need technical help, contact the service through a channel you locate independently.
Protect payments and personal information
Before paying an invoice or changing bank details, confirm the request with the person or business using a previously known contact method. This is especially important for large transfers and last-minute changes to payment instructions: an email account may have been compromised. If a payment service offers a way to review the recipient before confirming, check the name and destination carefully.
Share only the information needed for a legitimate purpose. Do not post identity documents, travel details, or account recovery answers publicly. Shred or securely dispose of paper records that contain sensitive information, and use privacy settings to limit what strangers can see. Be cautious with public Wi-Fi when accessing sensitive accounts; use a trusted network or your mobile connection when practical.
These habits reduce risk but cannot eliminate it. A data breach may expose information without any mistake on your part, and a convincing scam can reach careful people. The goal is to limit what an attacker can obtain and make suspicious requests easier to verify.
If you clicked, shared information, or paid
Act promptly, but use trusted channels. If you entered a password, change it from a device you believe is safe, and change it anywhere else you reused it. If you gave away a verification code, secure the affected account, review recovery settings and active sessions, and contact the service’s official support. If you installed software or granted remote access, disconnect the device from the network if appropriate and seek help through a trusted repair or support channel.
For a payment, contact your bank, card issuer, or payment provider immediately using the number on your card or its official app. Explain what happened and ask whether the transaction can be stopped or disputed; recovery is not guaranteed. Save messages, receipts, account names, phone numbers, and transaction records. Report the incident to the relevant platform and your country’s official consumer-protection or cybercrime reporting service. If identity documents or personal details were exposed, follow the guidance of the issuing agency and monitor relevant accounts.
Frequently Asked Questions
How can I tell if a message is a scam?
Look for pressure, unexpected requests for money or credentials, suspicious links, and details that do not match. Verify the claim using contact information found independently; appearance alone cannot prove a message is genuine.
Should I click an unsubscribe link in a suspicious email?
No. If you do not trust the sender, avoid clicking links or opening attachments. Mark the message as spam or phishing in your email service and delete it. For a mailing list you recognize, unsubscribe using a route you can verify.
Can a scammer use my phone number to steal an account?
Possibly. A criminal may try to persuade a mobile provider to transfer a number or may exploit text-message verification. Protect your carrier account with available account-security options, use stronger MFA methods where practical, and never share sign-in codes.
What should I do if I gave a scammer a password?
Change it immediately on the real service, using its official app or website, and update any other account that used the same password. Enable MFA, sign out unfamiliar sessions, and check recovery details for unauthorized changes.
Can I get money back after a scam?
Sometimes, but there is no guarantee. Contact the bank, card issuer, or payment provider as soon as possible and provide accurate details. Be wary of anyone who promises recovery for an upfront fee; that may be another scam.
Related
Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.