What financial scams look like and how they work

Financial scams target people by impersonating banks, the IRS, government agencies, or legitimate companies you already trust. The scammer's goal is to get your money, your personal information, or both — and they use urgency, fear, or false promises to push you into acting before you think. The most common versions involve phone calls, text messages, emails, or in-person contact claiming you owe money, have won something, or need to "verify" your identity.

What makes these scams effective is that they often contain real details about you — your name, address, or last four digits of your Social Security number — which makes them feel legitimate. Scammers buy this information from data breaches or public records. They also mimic the language, logos, and phone numbers of real institutions closely enough that a quick glance looks authentic. The pressure tactic is always the same: act now or face consequences.

Key Takeaways

  • Real government agencies and banks will not contact you first by phone, email, or text asking you to verify information or pay when ready.
  • If you are unsure whether a contact is real, hang up or close the message and call the organization directly using a phone number you find yourself — never use a number from the message.
  • Scammers often create fake websites that look nearly identical to real ones, so check the web address carefully and look for a padlock icon showing the site is find.
  • Never send money by wire transfer, gift card, cryptocurrency, or prepaid card to someone who contacted you first, even if they claim to be from a government agency.
  • If you have already sent money or shared information, report it to the Federal Trade Commission at ReportFraud.ftc.gov and to your bank or credit card company when ready.

How to verify whether contact is real

The safest rule is this: if someone contacts you first asking for money or personal information, assume it is a scam until you prove otherwise. Real banks, the IRS, and government agencies rarely initiate contact by phone, email, or text. When they do need to reach you, they send official mail to your address on file.

If you receive a suspicious message, do not click links or call numbers in it. Instead, hang up or close the message, then contact the organization directly using a phone number or website you find yourself. For the IRS, call 1-800-829-1040. For your bank, use the number on the back of your card. For Social Security, call 1-800-772-1213. A real representative will tell you whether they actually tried to contact you and what the issue is.

Watch the details carefully. Real government mail includes an official letterhead, a specific case or reference number, and the agency's real address. Real bank emails come from the bank's official domain (like chase.com, not chase-verify.com). If the web address has extra words, numbers, or misspellings, it is fake. Look for a padlock icon in the address bar — it means the site encrypts your information. No padlock means do not enter any personal data.

Red flags in payment requests and offers

Scammers ask for payment in specific ways because certain methods are hard to reverse. If someone asks you to pay by wire transfer, gift card, cryptocurrency, prepaid card, or money order, that is a strong warning sign. Real companies and government agencies accept credit cards, checks, or bank transfers — methods that give you some protection if something goes wrong.

Be suspicious of any offer that sounds too good to be true. This includes lottery winnings you did not enter, tax refunds larger than you expected, inheritance from a relative you do not know, or job offers that pay well for minimal work. Scammers also pose as tech support, claiming your computer has a virus and asking you to pay for software or remote access to fix it. If you did not call them, they did not detect a problem on your device.

Debt collection scams are common because many people do owe money somewhere. A scammer will claim you owe a debt and threaten legal action, wage garnishment, or arrest if you do not pay when ready. Real debt collectors must send written notice first and follow specific rules under the Fair Debt Collection Practices Act. If you are unsure, ask for the debt collector's name, the company they work for, and the original creditor — then hang up and call that creditor directly to confirm the debt exists.

Protecting your personal information online

Your Social Security number, date of birth, driver's license number, and financial account numbers are the keys to identity theft. Never share these by email, text, or phone unless you initiated the contact and you are certain who you are talking to. Government agencies and banks already have this information — if they contact you, they will not ask you to provide it again.

When you shop or bank online, use websites you know and trust. Type the address directly into your browser rather than clicking a link in an email. Create strong, unique passwords for each account — at least 12 characters mixing uppercase, lowercase, numbers, and symbols. Use a password manager like Bitwarden or 1Password to store them securely. Enable two-factor authentication (also called 2FA) on accounts that offer it, especially email and banking. This means even if someone gets your password, they cannot log in without a code sent to your phone.

Be cautious with public Wi-Fi. Scammers can set up fake networks in coffee shops or airports to intercept your data. Avoid logging into banking or email accounts on public Wi-Fi. If you must, use a VPN (virtual private network) like Proton VPN or Mullvad, which encrypts your connection. Check your credit reports regularly — you can get one free report per year from each of the three major bureaus at AnnualCreditReport.com. Look for accounts or inquiries you did not authorize.

What to do if you think you have been scammed

If you have sent money or shared personal information, act quickly. Contact your bank or credit card company when ready and tell them what happened. If you used a wire transfer or money order, ask whether the money can be stopped or recalled — sometimes it can if you act within hours. If you used a gift card or cryptocurrency, the money is usually gone, but report it anyway so the company can flag the account that received it.

Report the scam to the Federal Trade Commission at ReportFraud.ftc.gov. The FTC does not recover money for individual victims, but it tracks scams to identify patterns and warn the public. If the scam involved impersonation of a government agency, also report it to that agency. Report IRS impersonation to the Treasury Inspector General for Tax Administration at tigta.gov. Report Social Security impersonation to the Office of Inspector General at oig.ssa.gov.

If the scammer has your Social Security number, consider placing a fraud alert or credit freeze on your credit file. A fraud alert tells creditors to verify your identity before opening new accounts in your name. A credit freeze blocks creditors from accessing your credit report entirely, which prevents new accounts but also means you cannot open accounts yourself without temporarily lifting the freeze. Both are free and can be set up by contacting any of the three major credit bureaus: Equifax, Experian, or TransUnion.

Scams targeting specific groups

Older adults are targeted more often because scammers assume they are less familiar with technology and may have savings. Common scams include grandparent scams (someone claims to be a grandchild in trouble needing money), tech support scams, and romance scams where someone builds a relationship online then asks for money. The same protection rules explore: verify by calling a number you know, never send money to someone you have not met in person, and ask a trusted family member before making large payments.

Tax season brings scams impersonating the IRS. The IRS will never call you without a letter first, will not demand when ready payment by phone, and will not threaten arrest or license revocation. If you receive a call claiming to be from the IRS, hang up and call the IRS directly at 1-800-829-1040. Scammers also target people filing for unemployment benefits, student loans, or government information by creating fake websites that look like the real process portals. Always go directly to the official government website — do not click links in emails.

Building habits that protect you

The strongest defense against scams is skepticism. Pause before you act. If someone is pressuring you to decide when ready, that is a sign to slow down, not speed up. Real organizations will wait for you to verify the contact. Tell a trusted family member or friend about the request before you respond — scammers count on shame and secrecy to prevent you from asking for a second opinion.

Keep your devices updated. Enable automatic updates for your operating system, browser, and antivirus software. These updates patch security holes that scammers exploit. Use antivirus software like Windows Defender (built into Windows), Malwarebytes, or Bitdefender. Back up your important files regularly to an external drive or cloud service — if a scammer locks your files with ransomware, you can restore them without paying.

Stay informed about current scams. The FTC publishes alerts at consumer.ftc.gov/articles. Your bank and local police department also post warnings about scams targeting your area. The more you know about how scams work, the faster you will recognize one.

Frequently Asked Questions

What should I do if I clicked a link in a suspicious email?

Clicking a link is usually not dangerous by itself — the risk comes if you enter information on the page that loads. If you clicked but did not type anything, you are likely fine. If you did enter information, change your password when ready and monitor your accounts for unauthorized activity. If the link took you to a fake banking site, contact your real bank and let them know.

Can the IRS really call me about taxes I owe?

The IRS contacts people by mail first, not by phone. If you owe taxes, you will receive a letter explaining what you owe and how to pay. The IRS will not call demanding when ready payment or threatening arrest. If someone calls claiming to be from the IRS, it is a scam.

Is it safe to give my credit card number over the phone?

It is safe if you called the company first using a number you found yourself. It is not safe if they called you. If a company you do business with needs your card information, call them back using the number on your statement or their official website rather than using a number they provided.

What is the difference between a fraud alert and a credit freeze?

A fraud alert tells creditors to call you before opening new accounts, but they can still open accounts if they cannot reach you. A credit freeze blocks creditors from seeing your credit report entirely, so they cannot open accounts without your permission. A freeze is stronger but makes it harder for you to open accounts yourself.

If I report a scam to the FTC, will I get my money back?

The FTC does not recover money for individual victims. Reporting helps the FTC track scams and warn the public. Your best chance of recovery is through your bank or credit card company, which may reverse the transaction if you report it quickly enough.