The top three contact methods used by scammers are social media, text messages, and phone calls. Fraudsters use these channels to impersonate trusted entities like banks or government agencies and deploy pressure tactics or malicious links to steal personal information or money.
A scam email, or phishing email, is a fraudulent message designed to steal your personal information, passwords, or money. Scammers often impersonate legitimate organizations like banks or tech companies and use urgency or threats like account locked or immediate payment required to trick you into clicking malicious links or attachments.
If you receive a suspicious email, follow these immediate steps to protect yourself:
Do not click any links, open any attachments, or scan QR codes.
Do not reply to the sender or provide any personal/financial information.
Delete the message immediately.
Verify the claim by contacting the company directly using a trusted phone number or website (never use the contact info from the sketchy email.
If you believe you may have fallen victim to a scam and provided sensitive information or payment details, immediately contact your financial institution to secure your accounts. You should also report the scam to the appropriate authorities, such as the FBI's Internet Crime Complaint Center via the FBI IC3 or the Federal Trade Commission on the FTC Scam Reporting website.
Social Media: Platforms are the leading vector for scams, frequently resulting in the highest reported monetary losses. Scammers use fake profiles and targeted ads to pitch fraudulent investments, job offers, or romance schemes directly in the user's feed or direct messages.
Text Messages (SMS): A highly effective and common tool for mass-market phishing. Scammers often send urgent, deceptive texts pretending to be delivery services pending packages or banks fake security alerts urging you to click a malicious link.
Phone Calls: Calls feature prominently in both mass-market and relationship scams. Scammers spoof legitimate numbers or pose as authority figures like the IRS or local police to manufacture fear and trick individuals into sharing sensitive info or transferring funds.
To protect yourself, official guidelines suggest you stop, check, and protect:
Stop: Pause before reacting. Never click on links in unsolicited texts or direct messages.
Check: Verify the identity of the person contacting you by calling the organization directly using a trusted number, not the one provided in the message.
Protect: Never give remote access to your device or transfer money to unverified accounts. Report suspected fraud to resources like the Federal Trade Commission or Scamwatch.
