Online scams often look ordinary at first: a delivery notice, a job opportunity, a payment problem, or a message from someone who seems familiar. The goal is usually to make you act before you have time to verify the story. A few habits can help protect your money and personal information. For a focused walkthrough of suspicious SMS messages, see our guide to stopping spam texts on iPhone and Android.

Common warning signs

Scams often create pressure before you have time to think. A message may claim your account will close, a package is stuck, a payment failed, or a job is waiting if you act immediately. Other warning signs include unexpected links, requests for one-time verification codes, unusual payment methods, guaranteed profits, prizes you never entered to win, or someone pretending to represent a bank, government agency, employer, or technology company.

Red flag	Safer response
Unexpected urgent message	Contact the organization independently
Request for a verification code	Do not share it; secure the account
Gift card, crypto, or wire payment demand	Pause and verify before sending
Guaranteed profit or prize	Treat the promise as a warning sign
Unexpected job fee	Check the employer’s official careers site

Understand the most common scam patterns

Phishing messages imitate trusted organizations and try to steal passwords or payment details. Impersonation scams use a familiar name, fake caller ID, or copied profile to create trust. Job scams may promise easy remote income but ask for fees, deposits, or purchases through a suspicious channel. Investment scams promise unusually high or guaranteed returns and may use fake testimonials. Romance and friendship scams can build emotional trust before asking for money or sensitive information. Different stories, same pressure tactic: act before verifying.

How to verify a message or offer

Do not use the contact details or links in a suspicious message. Open the company’s official app or type its known website address yourself. Contact the organization using a number from an official statement or verified website. For job offers, check the employer’s real careers page and be cautious if you are asked to pay for equipment or training through an unusual method. Search the company or offer name with words such as “complaint” or “scam,” but remember that a polished website and positive reviews do not prove legitimacy.

Protect your accounts before something happens

Use unique passwords for important accounts and a reputable password manager if it helps you manage them. Enable multifactor authentication where available, especially for email, banking, and social accounts. Keep your phone, computer, browser, and apps updated. Never share one-time verification codes with someone who contacts you unexpectedly. Review bank and payment-app activity regularly so unfamiliar transactions are easier to spot.

What to do if you clicked a link or shared information

If you entered a password, change it immediately from a trusted device and change it anywhere else you reused it. If you shared a banking or card number, contact the financial institution using its official number. If you sent money, contact the payment service or bank quickly and ask whether the transaction can be stopped or disputed. If you installed an app or file at a stranger’s direction, disconnect from suspicious remote-access sessions and get help from a trusted technical professional. Save messages, receipts, usernames, and transaction details; they may help with reports.

Report the incident and make a recovery plan

In the United States, report fraud to the Federal Trade Commission at ReportFraud.ftc.gov. If identity information was exposed or misused, IdentityTheft.gov provides a recovery process. You can also report the account or message to the platform where it appeared. Reporting does not guarantee that money will be recovered, but it can create a record and help authorities identify patterns. If a bank account or card may be compromised, ask the provider whether you need a replacement account or card and what monitoring is available.

A quick pause checklist

Before sending money or sharing information, stop and ask: Did I expect this message? Can I verify the sender through a separate official channel? Is someone rushing or threatening me? Are they asking for a code, password, gift card, crypto transfer, or wire transfer? Does the offer make unrealistic promises? If any answer raises concern, pause and verify independently.

The takeaway

You do not need to memorize every scam. Learn the pattern: unexpected contact, pressure, a request for money or information, and a reason you supposedly cannot verify. Slow the interaction down, use official channels, and ask someone you trust before making an irreversible payment. A few minutes of checking can prevent a much larger problem.

Sources and further reading

• FTC: How to protect your phone from hackers
• FTC: Report fraud
• FTC: Identity theft recovery
• FTC: Online shopping and consumer protection

Explore more on The Immortal Content

• How to Spot Fake Online Reviews Before You Buy
• 15 Everyday Habits That Quietly Waste Your Money
• 12 Free Websites That Make Everyday Life Easier

The bottom line

Online scams often rely on urgency, impersonation and promises that sound unusually good. Pause before sending money or personal information, verify the person or company through an independent channel, and use secure payment methods. If you already shared account details, contact the bank or service directly and change affected passwords immediately.