Skip to content

Scams That Target Regular People

The one-sentence version: Nearly every scam works the same way — manufactured urgency plus a request to act now, before you can think or verify. Slow down, and the scam falls apart.

Every scam below follows the same three-part shape: the hook (what grabs you), the tell (what gives it away), and the one-line response (what to do). For the techniques behind these, see Phishing and Social Engineering.

Tech-support popups

  • The hook: A full-screen browser popup claims your computer is infected and gives a phone number for "Microsoft support."
  • The tell: Real companies never announce infections through browser popups. The popup often plays an alarm sound and won't let you close the tab normally.
  • The one-line response: Close the browser (use the task manager / force-quit if you must) and never call the number.

"Your account is locked" texts

  • The hook: A text says your bank, email, or package-delivery account is locked or suspended, with a link to fix it.
  • The tell: The link doesn't go to the real site (hover or long-press to see the address), and the message demands immediate action.
  • The one-line response: Delete the text; check your account by opening the app yourself or typing the address you know.

Fake invoice / CEO email

  • The hook: An email that looks like it's from your boss (or a vendor) asks you to pay an invoice or buy gift cards urgently.
  • The tell: The sender's actual address is slightly wrong, the request is unusual for that person, and it always needs to happen today.
  • The one-line response: Confirm through a separate channel you already trust — walk to their desk, call their known number.

QR code swaps

  • The hook: A sticker with a QR code is placed over the real one on a parking meter, restaurant table, or flyer, sending you to a fake payment or login page.
  • The tell: The code is a sticker over something printed, the site asks for login or card details for a simple task, and the address looks wrong.
  • The one-line response: Peel suspicious stickers aside and compare; type the address yourself instead of scanning.

Romance / crypto "pig-butchering"

  • The hook: A stranger befriends you online (dating app, social media, wrong-number text) and, after weeks of friendly chat, introduces a "can't-miss" crypto investment.
  • The tell: They steer you to an unfamiliar trading site or app, early small "profits" build trust, and withdrawals later require extra fees or are refused.
  • The one-line response: No real romance or friend needs you to invest — stop sending money and cut contact.

The grandparent scam

  • The hook: A caller claims to be your grandchild (or a police officer / lawyer calling about them), in trouble and needing money wired right now, and begs you not to tell anyone.
  • The tell: The secrecy, the urgency, and the payment method — wire transfers, gift cards, or crypto are scammer favorites because they can't be reversed.
  • The one-line response: Hang up and call the grandchild (or the parents) on a number you already have.

Verification habits that beat all of them

  1. Call back on a known number — never the one they gave you. The number on your bank card, the company's real site, or the contact already in your phone.
  2. Break the urgency. Any demand for right now is the scam's engine. Waiting an hour costs you nothing and costs the scammer everything.
  3. Never pay in gift cards, wire transfers, or crypto at a stranger's request. Legitimate organizations don't ask for those.
  4. Type addresses yourself. Links in messages and QR codes are how you end up on a lookalike site.

Next: I Think I've Been Hacked