Common types of scams
1. Imposter scamsThe setup:
- Bait: A cybercriminal sends an email that appears to come from a trusted source—such as a bank, government agency, or well-known company.
- Hook: The message creates urgency, warning of suspicious account activity or requesting immediate action to "secure" the account.
- Lure: The recipient is prompted to click a link or download an attachment to resolve the issue.
- The catch:
- The link leads to a fake website that closely mimics the legitimate one, where the victim is asked to enter sensitive information (e.g., login credentials, Social Security number).
- Alternatively, the attachment may install malware that captures personal data or gives remote access to the device.
Imposter scams rely on trust and urgency. Always verify the sender, avoid clicking suspicious links, and contact the organization directly using known contact information.
2. Phone scams
Scammers may pose as representatives from financial institutions or government agencies, pressuring you to provide personal information or make payments. If you receive a call that feels off, hang up and call the organization directly using a verified number.
3. Text message scams (smishing)
These scams use text messages to trick you into clicking malicious links or sharing sensitive data. Messages may claim your account is locked or that you’ve won a prize. Always be skeptical of unexpected texts, especially those urging immediate action.
4. Social media scams
Fraudsters use fake profiles or hijacked accounts to promote bogus giveaways, investment opportunities, or urgent pleas for help. Be cautious when engaging with unfamiliar accounts or offers that seem too good to be true.
How to protect yourself
- Verify before you trust. Contact companies directly using official channels.
- Don’t click suspicious links. Hover over links to preview URLs and avoid downloading unexpected attachments.
- Monitor your accounts. Regularly check your bank and credit card statements for unauthorized transactions.
- Report suspicious activity. If you think you’ve been targeted, notify your financial institution immediately.
For more security tips, visit our Security Center.