Learn the common red flags

If you notice two or more of these, pause and verify independently. Don’t click, call, or pay until you’re sure.

Browse real examples

Educational guidance only. We don’t track your searches.

1

Pause — don’t click links or call numbers in the message.

2

Verify on the company’s official site or app, not the link you got.

3

Compare with our examples. If it matches a pattern, report it.

Top red flags to watch for

Short, plain explanations you can share with family.

Artificial urgency or threats

“Act now or your account will be closed.” Pressure is the point — to stop you from checking.

Links don’t match the company

Hover or long-press: if a link looks odd or misspelled, don’t tap it. Go to the site yourself.

Lookalike website or domain

Extra letters, swapped characters, or different endings (e.g., “.co” instead of “.com”).

Suspicious “from” address

Display name looks right, but the actual email isn’t from the company.

Caller ID can be faked

Don’t trust the number that called you. Hang up and dial the official one.

QR codes in “urgent” notices

Scammers use QR codes to dodge link filters and send you to fake sites.

Gift cards or crypto payments

No real company asks for gift cards or crypto to fix a problem or pay a bill.

Odd payment instructions

Wires, “refund processing fees,” or moving money between apps = red flag.

“Update your card” via a link

Never update payment info from a link in a message. Go to the site/app directly.

Requests for codes or 2FA

No legitimate support agent needs your verification codes. Ever.

Asking for passwords or SSN

Treat any request for sensitive info as a scam until proven otherwise.

Too good to be true

Unexpected prizes, guaranteed returns, or surprise refunds are classic bait.

What to do when you spot a red flag

Verify safely

  • Use the official website/app or a saved bookmark.
  • Call the number on the company’s site, not the message.
  • Ask a trusted friend to sanity-check before you act.

Protect your device

  • Don’t install remote-access software on request.
  • Don’t open unexpected attachments or enable macros.
  • Update your device and browser regularly.

Report it

  • Report to the Scam Archive with screenshots.
  • Block and delete the message after saving evidence.
  • If you paid, contact your bank or card issuer immediately.

Turn one report into protection for many

Share a scam you’ve seen, or explore examples to learn the warning signs.