One Checklist for Every Scam
You don't need to be a cybersecurity expert to spot a scam. Almost every scam — whether it's an email, a phone call, a text message, or a social media post — will show at least two of these five warning signs. If you see even one, slow down and investigate before doing anything.
Sign 1: It's Unexpected
You didn't apply for a refund, but you got a "refund notification." You didn't order a package, but you got a "delivery fee" text. You didn't enter a competition, but you "won" a prize.
Legitimate organisations send messages about things you actually did. If a message arrives about something you don't remember doing, be very suspicious.
- Ask yourself: "Did I actually do the thing this message is about?"
- If no, it's almost certainly a scam.
- If yes, verify by going directly to the company's website (don't click the link in the message).
Sign 2: It Creates Urgency
"Act within 24 hours." "Your account will be suspended." "Limited time offer — today only." Scammers want you to act fast so you don't have time to think or check with someone you trust.
Real companies almost never give you a deadline of hours or even a single day for important actions. If you truly owe money or need to update your account, you'll get multiple reminders over weeks.
Sign 3: It Asks for Sensitive Information
Your bank already knows your account number. The tax office already has your details. No legitimate organisation will email or text you asking for your password, PIN, full card number, or social security number.
If a message asks you to "verify" or "confirm" sensitive details by clicking a link, it's a scam — even if it looks perfectly official.
Your bank will never ask for your full PIN or password. Not by email, not by text, not by phone. If anyone asks for these, end the conversation immediately.
Sign 4: The Details Don't Add Up
Look closely at the sender's email address — not just the display name. "Netflix Support" might actually be sending from "billing@netflix-support-verify.com" instead of a real Netflix address. Check for misspellings, odd domain names, and generic greetings like "Dear Customer" instead of your actual name.
On phone calls, listen for background noise, scripted responses, and reluctance to let you call back on an official number.
Always check the actual email address, not just the name shown. On a phone, tap or hover on the sender name to see the full address. On a computer, look at the "From" field carefully.
Sign 5: It Asks You to Pay in an Unusual Way
Gift cards, cryptocurrency, wire transfers, or money transfer apps — these are a scammer's favourite payment methods because they're hard to trace and almost impossible to reverse.
No legitimate company or government agency will ever ask you to pay a debt, fee, or fine using gift cards or cryptocurrency. If someone asks for payment this way, it is always a scam.
Real case: Gift card scam in the US
Gift card payment scams are widespread. The FTC reported that consumers lost over $228 million to gift card scams in 2022, with callers pretending to be from the Social Security Administration, IRS, or other agencies and demanding victims buy Target, Google Play, or Apple gift cards. No government agency ever accepts gift cards as payment.
Your Quick-Check Routine
Every time you get a message that asks you to do something — click a link, call a number, make a payment — run through these five signs. If even one applies, stop and verify through an official channel before doing anything.
- Is this unexpected? Did I actually do what this message is about?
- Is it creating urgency? Am I being rushed to act right now?
- Is it asking for sensitive information? Passwords, PINs, card numbers?
- Do the details add up? Check the sender address, spelling, and links.
- Is it asking for unusual payment? Gift cards, crypto, wire transfers?