Lesson Objective

Understand the difference between spam and scams, recognize the psychological techniques criminals use, and adopt a safe decision-making process before responding to unexpected messages, calls, pop-ups, or requests.

1. Spam Is Not Always a Scam

Spam is unsolicited or unwanted bulk communication. It may be annoying marketing, fraudulent advertising, phishing, malware delivery, or a legitimate business using poor marketing practices. A scam is an intentional attempt to deceive someone into giving up money, information, account access, property, or some other benefit.

The safest rule is not to judge an unexpected message only by how professional it looks. Modern scams often use copied logos, polished writing, realistic websites, familiar phone numbers, and information found in public records or data breaches.

2. The Common Manipulation Playbook

• Urgency: “Act now,” “Your account will be closed,” or “You have only 30 minutes.”
• Fear: arrest threats, account compromise, unpaid bills, malware warnings, or family emergencies.
• Authority: pretending to be a bank, police officer, government agency, employer, utility, or technology company.
• Scarcity: limited-time investment, prize, ticket, job, or product opportunity.
• Greed or reward: prizes, refunds, investment returns, free products, or unexpected payments.
• Compassion: emergencies, romance, charity, disaster relief, or requests to help a friend.
• Secrecy: “Do not tell the bank,” “Do not call your family,” or “Keep this confidential.”
• Confusion: complicated payment instructions, unfamiliar terminology, or rapid changes in the story.
• Social proof: fake reviews, testimonials, follower counts, screenshots, or group-chat participants.

3. The Pause-Verify-Act Method

1. Pause. Do not click, call the supplied number, send money, approve a login, or provide information.
2. Verify independently. Use a known-good website, official app, statement, card, or contact number you already trust.
3. Act only after verification. If the issue is real, handle it through the trusted channel rather than through the unexpected message.

4. Payment Methods That Deserve Extra Caution

Scammers favor payment methods that are fast, difficult to reverse, or hard to trace. Be especially cautious with demands for gift cards, cryptocurrency, wire transfers, cash deposits, payment-app transfers to unfamiliar people, or unusual instructions to move money to a “safe” account.

5. Information Can Be Valuable Even Without Money

A scammer may seek passwords, one-time verification codes, Social Security numbers, tax information, bank details, medical identifiers, security-question answers, photos of identity documents, or remote access to a computer. Treat these as valuable assets.

6. Verify the Story, Not the Caller ID

Caller ID, email display names, text-message sender names, web search results, and social-media profiles can all be spoofed or imitated. The question is not “Does this look familiar?” but “Can I independently confirm this request through a trusted channel?”

7. A Universal Stop List

Stop and verify whenever an unexpected contact asks you to:

• Send money or buy gift cards.
• Move funds to protect them.
• Read back a one-time security code.
• Install remote-control software.
• Disable security software.
• Open an unexpected attachment or sign in through an emailed link.
• Keep the request secret.
• Provide sensitive personal or financial information.

Lesson Summary

Scams change constantly, but the manipulation patterns are remarkably consistent. Slow the interaction down, verify through a separate trusted channel, and never let urgency replace verification.

Lesson Objective

Recognize common email-based scams and safely verify suspicious messages without giving attackers credentials, money, or device access.

1. Common Email Scam Types

• Account security alerts and password-reset messages.
• Fake invoices, receipts, purchase confirmations, and subscription renewals.
• Package-delivery and missed-delivery notices.
• Tax, benefits, government, or law-enforcement impersonation.
• Fake document-sharing notices from services such as cloud storage or electronic-signature platforms.
• Job offers, payroll changes, direct-deposit requests, and executive impersonation.
• Charity, prize, lottery, inheritance, refund, and investment offers.
• Malicious attachments disguised as documents, archives, images, or invoices.

2. Display Names Are Not Sender Verification

An email may show a familiar name while being sent from an unrelated address. Expand the sender details and inspect the actual address, but remember that even a familiar address may be compromised.

3. Links Can Hide Their Destination

On a desktop, hovering over a link may reveal the destination. On a phone or tablet, use the device’s safe preview behavior when available. Do not open a suspicious link merely to see where it goes.

Attackers commonly use misspelled domains, added words, unrelated subdomains, URL shorteners, or lookalike characters.

4. Attachments Require Context

An unexpected attachment should be treated cautiously even if the sender appears familiar. If the file was not expected, verify with the sender through a separate channel before opening it.

5. Fake Login Pages

Phishing pages often imitate Microsoft, Google, banks, shipping companies, social networks, or employers. A realistic logo does not make the page legitimate. Prefer opening the official website or app yourself instead of signing in through an unexpected email link.

6. Invoice and Subscription Scams

A common pattern is a fake receipt for an expensive purchase with a phone number to “cancel” the charge. The real objective may be to get the victim on the phone and transition into a refund or tech-support scam. Do not call numbers in suspicious invoices. Check the merchant account or bank independently.

7. Business Email Compromise Warning

Requests involving wire instructions, payroll changes, gift cards, vendor bank-account changes, or urgent executive requests require a second verification channel. Email alone is not enough for high-risk financial changes.

8. Safe Handling Workflow

1. Do not click links or open attachments.
2. Inspect the sender and context.
3. Ask whether the message was expected.
4. Verify using a known-good contact method.
5. Open the service directly through its official website or app.
6. Report phishing using your email provider or organization’s reporting process.
7. Delete the message after any required evidence is preserved.

9. If You Already Entered a Password

Use a trusted device to change the password immediately, sign out other sessions when the service supports it, enable multi-factor authentication, review recovery information and forwarding rules, and monitor the account for unauthorized changes. If the same password was reused elsewhere, change those accounts as well.

Lesson Summary

Email phishing succeeds by creating a believable reason to click, open, sign in, pay, or call. Independent verification and direct navigation to the legitimate service break the scammer’s path.

Lesson Objective

Recognize smishing, messaging-app fraud, QR-code scams, fake delivery notices, wrong-number scams, and mobile payment requests.

1. Smishing

Smishing is phishing delivered through SMS or text messaging. Common themes include unpaid tolls, package problems, account lockouts, fraud alerts, tax refunds, prize notices, and urgent payment requests.

2. Messaging-App Scams

Scams also arrive through WhatsApp, Messenger, Telegram, Signal, iMessage, and other platforms. The attacker may impersonate a friend, family member, employer, bank, support agent, or romantic interest.

3. Wrong-Number and Conversation-Starter Scams

Some scams begin with a harmless-looking wrong-number message. The sender tries to build familiarity over days or weeks before introducing an investment, romance, business, or cryptocurrency opportunity. You are not required to continue a conversation with an unknown sender.

4. QR-Code Scams

A QR code can send a phone to a website just like a typed link. Fraudulent QR codes may appear in email, text messages, parking meters, restaurant signs, flyers, invoices, or stickers placed over legitimate codes.

5. Mobile Payment Requests

Be cautious when a stranger asks for payment through a person-to-person payment app. Verify the recipient and purpose before sending. A screenshot claiming that money was sent is not proof that funds are available in your actual account.

6. Verification Codes

A one-time security code is normally intended for the person who initiated the login or transaction. A caller or texter who asks you to read a code back may be trying to take over your account.

7. Safe Response

• Do not tap the link in an unexpected text.
• Open the official app or website independently.
• Do not share login or verification codes.
• Block and report fraudulent senders using your phone or messaging platform.
• Delete suspicious messages after any evidence you need has been preserved.

Lesson Summary

Phones make scams feel immediate and personal. Slow down, treat QR codes as links, and verify through official apps and known-good contact information.

Lesson Objective

Recognize vishing, robocalls, caller-ID spoofing, government impersonation, bank fraud calls, and voice-cloning scams.

1. Vishing

Vishing is phishing by voice. The caller may claim to be from a bank, technology company, government agency, utility, delivery company, employer, or family member.

2. Caller ID Can Be Spoofed

A call can appear to come from a local number, your bank, a government office, or even your own organization. Caller ID is useful context, not proof of identity.

3. Common Phone Scam Themes

• Bank fraud departments asking you to move money to a “safe” account.
• Government or police threats involving taxes, warrants, immigration, jury duty, or benefits.
• Utility shutoff threats demanding immediate payment.
• Computer support calls claiming your device is infected.
• Grandchild or family emergency calls demanding secrecy and rapid payment.
• Prize, lottery, vacation, warranty, debt relief, or insurance offers.

4. Voice Cloning and Deepfake Audio

Short audio samples can be used to imitate a person’s voice. If a caller sounds like a relative or executive but asks for money, credentials, or secrecy, verify the request using a known phone number or another person.

5. Safe Call Handling

1. Do not provide sensitive information simply because the caller knows details about you.
2. Do not follow instructions to transfer money, buy gift cards, or install software.
3. Hang up if the call is suspicious.
4. Call the organization back using an official number you independently obtained.
5. For a family emergency, call the family member or another trusted relative directly.

6. Robocalls

Automated calls can be legitimate, unwanted marketing, or fraudulent. Do not press buttons merely to “remove yourself” when the caller is clearly suspicious; doing so may confirm that the number is active. Use your carrier’s blocking tools and official reporting mechanisms.

Lesson Summary

Voice creates trust quickly. Treat urgent financial or security requests as unverified until you independently contact the claimed organization or person.

Lesson Objective

Recognize fake technical-support warnings and prevent scammers from gaining remote access to a computer or financial account.

1. The Tech-Support Scam Pattern

A victim may see a full-screen browser warning, receive a phone call, find a fake support number in search results, or respond to a fraudulent invoice. The scammer claims that the computer, subscription, or account has a serious problem and offers to fix it.

2. Fake Browser Warnings

Web pages can display alarming messages, play sounds, enter full-screen mode, or repeatedly open dialogs. A browser page does not gain credibility merely because it says “Microsoft,” “Windows Defender,” “Apple,” or another familiar brand.

3. Remote Access

Legitimate support organizations sometimes use remote-support software, but the session should be one you intentionally initiated with a verified provider. A stranger who cold-calls and requests remote access should be treated as suspicious.

4. Common Manipulation During a Remote Session

Scammers may show normal Windows logs, command output, or harmless system messages and describe them as proof of infection. They may ask the victim to sign in to online banking, hide the screen, or transfer funds.

5. Fake Refund Scams

A caller may claim a refund was issued incorrectly and pressure the victim to “return” an overpayment. The displayed balance may be manipulated or misrepresented. Never send money because a remote caller says a refund went wrong.

6. If Remote Access Was Granted

1. Disconnect the computer from the network if the session is still active and you cannot safely close it.
2. End the remote-control software or session.
3. From a separate trusted device, change passwords for accounts that may have been exposed.
4. Contact financial institutions immediately if banking or payment information was exposed.
5. Review installed applications and startup items; remove unauthorized remote-access tools.
6. Run trusted security scans and consider professional inspection if the attacker had extensive access.
7. Preserve evidence and report the incident where appropriate.

7. Search-Result Support Scams

Fraudulent advertisements and lookalike sites can appear in web searches for customer-support numbers. Prefer the company’s official app, a known bookmark, documentation, account portal, or a verified official domain.

Lesson Summary

Never let an unexpected warning or caller create a remote-support session. Verify the provider independently and keep financial activity separate from technical-support sessions.

Lesson Objective

Recognize social-media impersonation, hacked-account messages, fake giveaways, marketplace fraud, fake verification requests, and account-recovery scams.

1. Impersonation

Attackers can copy profile photos, names, biographies, and recent posts. A new account that looks like a friend, celebrity, business, or executive may be an imitation.

2. Compromised Real Accounts

Some scams come from a genuine account that has been taken over. Messages from a known friend can still be fraudulent if the account is compromised.

3. Common Social Scams

• “I need a favor” requests for gift cards or money.
• Fake giveaways requiring a fee or account login.
• Investment and cryptocurrency promotions.
• Fake account-verification or copyright-warning links.
• Marketplace overpayment, fake shipping, or fake payment notices.
• Romance or friendship grooming.
• Fake support accounts responding to public complaints.

4. Marketplace Safety

Use the platform’s payment and messaging tools when practical. Be cautious when a buyer or seller tries to move the conversation off-platform, sends a fake payment email, asks for a verification code, or claims you must pay a fee to receive money.

5. Account Takeover Protection

• Use a unique password.
• Enable strong multi-factor authentication.
• Review active sessions and authorized apps.
• Do not share verification codes.
• Be cautious with “appeal” or “verification” links sent by direct message.

6. Fake Recovery Helpers

After someone publicly posts that an account was hacked, fake recovery specialists may offer help for a fee. Use the platform’s official recovery process rather than unknown individuals.

Lesson Summary

On social media, identity can be copied and real accounts can be compromised. Verify unusual requests outside the platform and keep payments and account recovery within official channels.

Lesson Objective

Recognize relationship-based manipulation and respond safely to emergency impersonation, romance grooming, and sextortion attempts.

1. Relationship Scams Build Trust Over Time

Not every scam begins with urgency. Romance and friendship scams may develop slowly. The scammer creates emotional trust, then introduces an emergency, investment, travel problem, medical expense, business opportunity, or request for money.

2. Common Warning Signs

• Repeated excuses for not meeting in person or by live video.
• Stories that become more dramatic when money is questioned.
• Requests for gift cards, cryptocurrency, wires, or repeated small payments.
• Pressure to keep the relationship or payments secret.
• Moving rapidly from a dating platform to private messaging.
• Requests to receive or move money for someone else.

3. Grandparent and Family Emergency Scams

The caller or texter may claim a relative is injured, arrested, stranded, kidnapped, or in another urgent situation. Voice cloning can make the story more convincing.

Verify by calling the person directly at a known number or contacting another trusted family member. A real emergency does not become less real because you took a minute to verify.

4. Sextortion

Sextortion involves threats to distribute private or intimate material unless the victim pays, provides more material, or complies with demands. The threat may involve real material, manipulated material, or a bluff.

5. Money Mule Risk

A romantic or online contact may ask you to receive, deposit, transfer, or forward money. This can expose you to stolen funds, fraud claims, frozen accounts, or legal consequences. Do not move money for people you only know online.

6. Helping a Potential Victim

People caught in long-term scams may be emotionally invested. Use evidence, independent verification, and supportive language rather than ridicule. Shame can make a victim less likely to seek help.

Lesson Summary

Relationship scams exploit trust, isolation, secrecy, and emotion. Independent verification and a firm boundary around money and account access are essential.

Lesson Objective

Recognize fraud involving online purchases, fake stores, delivery notices, subscription renewals, refunds, overpayments, checks, and payment apps.

1. Fake Online Stores

Fraudulent stores may copy product images, reviews, and brand names. Warning signs include prices far below normal market value, recently created or unrelated domains, missing contact information, unusual payment methods, and inconsistent policies.

2. Delivery Scams

Messages may claim a package cannot be delivered until a small fee or address update is completed. Use the carrier’s official app or website and enter the tracking number independently.

3. Subscription and Renewal Scams

Fake renewal notices often claim that antivirus, streaming, cloud storage, or another subscription was charged. The scam may try to get the victim to call a fake support number and then transition into remote access or refund fraud.

4. Refund and Overpayment Scams

A scammer may claim to have accidentally overpaid and ask you to send money back before the original payment is confirmed or final. Do not rely on screenshots, emails, or temporary account displays. Verify the actual transaction with the payment provider or bank.

5. Fake Check Scams

A deposited check may appear available before the bank determines that it is counterfeit or fraudulent. If you send part of the money elsewhere and the check later fails, you may be responsible for the loss.

6. Payment-App Impersonation

Scammers may send fake notices claiming an account must be “upgraded” or a fee must be paid to receive money. Open the payment app directly to verify the transaction.

7. Safer Shopping Practices

• Use reputable merchants and payment methods that offer dispute protections.
• Research unfamiliar sellers independently.
• Do not pay a stranger by gift card or cryptocurrency for ordinary retail purchases.
• Check the order inside the retailer or carrier account rather than through an unexpected message.

Lesson Summary

Payment scams rely on fake confirmations, reversibility misunderstandings, and urgency. Verify money in the actual financial account and understand whether a payment can later be reversed or rejected.

Lesson Objective

Recognize high-impact impersonation scams involving financial institutions, government agencies, identity information, healthcare, taxes, benefits, utilities, and legal threats.

1. Bank and Card Impersonation

A scammer may know your name, bank, partial card information, or recent transaction details. They may claim your account is compromised and instruct you to transfer money, reveal a verification code, or approve a transaction.

2. Identity Theft

Identity theft can involve misuse of Social Security numbers, tax records, credit information, medical identifiers, driver’s license data, or account credentials. Warning signs include unfamiliar accounts, collection notices, tax filings, benefit claims, or account changes.

3. Government and Law-Enforcement Impersonation

Scammers may claim to be tax authorities, police, courts, immigration officials, Social Security agencies, benefits offices, or other government entities. Threats of immediate arrest combined with gift card, cryptocurrency, wire, or cash demands are highly suspicious.

4. Tax and Benefits Scams

Common schemes include fake tax refunds, tax-debt threats, unemployment or benefit claims using stolen identities, and messages requesting personal information to “verify” eligibility.

5. Healthcare and Medicare Scams

Scammers may offer free medical equipment, genetic tests, benefits, insurance changes, or services in exchange for Medicare, insurance, Social Security, or banking information. Verify with the insurer, healthcare provider, or official program.

6. Utility Scams

Utility impersonators often threaten immediate shutoff unless payment is made through an unusual method. Contact the utility using the number on a bill or its official website.

7. Debt, Student Loan, and Financial Relief Scams

Be wary of guaranteed debt elimination, advance fees, pressure to stop communicating with legitimate lenders, or requests to grant account access. Verify assistance programs directly with the lender or official program.

8. Protective Actions After Identity Exposure

• Contact affected financial institutions.
• Change exposed passwords and secure recovery methods.
• Review credit reports and consider fraud alerts or credit freezes where appropriate.
• Report identity theft through appropriate official channels.
• Keep records of dates, case numbers, communications, and disputed transactions.

Lesson Summary

Authority and fear are powerful tools. Independent verification through official channels is essential whenever money, identity information, taxes, benefits, healthcare, or legal threats are involved.

Lesson Objective

Recognize employment and business scams that target job seekers, employees, executives, accounting staff, payroll teams, and small businesses.

1. Job and Work-From-Home Scams

Common warning signs include interviews conducted only through text, unusually high pay for simple work, requests to buy equipment with a check, upfront fees, demands for sensitive data before a legitimate hiring process, or tasks involving transferring money or cryptocurrency.

2. Fake Check Equipment Scam

A fake employer may send a check to buy equipment, then instruct the applicant to pay a designated vendor. The check can later be returned while the applicant’s payment is gone.

3. Task and “Optimization” Scams

Some schemes promise commissions for completing online tasks, rating products, or “optimizing” apps. The victim may see fake earnings but be required to deposit increasing amounts to unlock withdrawals.

4. Business Email Compromise

Business email compromise can involve a compromised mailbox or convincing impersonation. Typical requests include:

• Change a vendor bank account.
• Send an urgent wire.
• Buy gift cards for an executive.
• Change employee payroll deposit information.
• Send tax forms or employee records.

5. Dual-Channel Verification

High-risk financial or payroll changes should be verified using a previously established phone number or another trusted method. Do not use contact information supplied only in the change request.

6. Invoice Fraud

Fraudsters may alter invoice payment details, create fake vendors, or send realistic renewal invoices. Compare vendor details with established records and use approval controls.

7. Payroll and HR Impersonation

Attackers may impersonate employees requesting direct-deposit changes or HR asking for tax documents. Organizations should require authentication and out-of-band verification for sensitive changes.

8. Small-Business Protections

• Use multi-factor authentication for email and financial systems.
• Train staff to verify payment changes.
• Separate payment initiation from approval where practical.
• Use known vendor contact records.
• Review mailbox forwarding rules and suspicious logins.
• Have an incident-response contact list before fraud occurs.

Lesson Summary

Business scams exploit routine processes. Strong verification procedures are more reliable than trying to judge whether an email “looks right.”

Lesson Objective

Recognize financial-opportunity scams involving investments, cryptocurrency, fake trading platforms, long-term grooming, prizes, lotteries, charities, and guaranteed income claims.

1. Investment Scam Warning Signs

• Guaranteed returns or claims of little or no risk.
• Pressure to act quickly.
• Secret strategies or exclusive opportunities.
• Unlicensed or unverifiable promoters.
• Instructions to move funds to unfamiliar platforms or wallets.
• Difficulty withdrawing money unless additional fees or taxes are paid.

2. Cryptocurrency Scams

Cryptocurrency is used in legitimate activity, but scammers favor it because transfers can be difficult to reverse. A request to buy cryptocurrency to satisfy a government agency, bank, romantic partner, tech-support caller, or prize administrator is highly suspicious.

3. Long-Term Investment Grooming

Some scams combine friendship or romance with a fake investment platform. The victim may initially be allowed to withdraw a small amount to build confidence. Later, larger deposits are encouraged and withdrawals are blocked.

4. Fake Trading Platforms

A professional-looking website or app can display invented account balances and profits. Do not assume a displayed balance represents actual assets. Verify the company, regulatory status where applicable, domain, and withdrawal process independently before investing.

5. Prize and Lottery Scams

A common rule: a legitimate prize should not require you to pay taxes, shipping, insurance, processing fees, or gift cards to receive it. Be skeptical of prizes for contests you did not enter.

6. Charity and Disaster Scams

Fraud increases after disasters and major news events. Donate through a charity’s official site or a known giving platform. Do not rely on an unsolicited caller, direct message, or QR code.

7. Pyramid, MLM, and Easy-Money Claims

Not every multilevel marketing organization is illegal, but income claims, recruitment pressure, required inventory purchases, or earnings that depend primarily on recruiting deserve careful scrutiny. Verify disclosures and understand the actual business model.

Lesson Summary

Financial-opportunity scams rely on greed, trust, secrecy, and the illusion of profits. Never let a screen showing gains replace independent verification of where the money actually is.

Lesson Objective

Understand how artificial intelligence can make existing scams more convincing and learn verification habits that still work when audio, images, video, and writing appear authentic.

1. AI Changes Presentation More Than the Core Scam

AI can help attackers produce polished writing, cloned voices, synthetic images, fake video, translated messages, and personalized scripts. The underlying goal is usually familiar: money, credentials, identity information, or access.

2. Voice Cloning

A voice that sounds like a family member, executive, or coworker is not proof of identity. Use a known number, a family code word, or a second person to verify unusual high-risk requests.

3. Deepfake Video

Video can be manipulated or synthesized. If a video call or clip is used to justify a money transfer, password reset, confidential disclosure, or emergency payment, verify through another channel.

4. Fake Images and Documents

Receipts, IDs, bank statements, invoices, shipping labels, screenshots, and official-looking letters can be fabricated. Verify the underlying transaction or record directly with the relevant institution.

5. Synthetic Identities

Scammers may combine real and invented personal information to create believable personas. A long online history does not automatically prove that a person is who they claim to be.

6. AI-Written Messages

Older advice such as “look for bad grammar” is no longer sufficient. Modern phishing can be grammatically perfect and tailored to the recipient.

7. Search Manipulation and Fake Ads

Scammers may buy ads or create search-optimized pages that imitate support, financial, travel, or government services. Verify the domain and use bookmarks, official apps, statements, or known contact information for high-risk services.

Lesson Summary

AI makes deception look more credible, but it does not defeat independent verification. Treat the request and the transaction as the thing to verify, not the quality of the audio, image, or writing.

Lesson Objective

Recognize additional scam families that use fake listings, deposits, advance fees, legal threats, fake services, and impersonation.

1. Rental Scams

Fraudsters may copy real property listings and demand deposits before a legitimate viewing or lease process. Verify the property owner or licensed agent, compare listings, and be cautious about payment before seeing the property through a legitimate process.

2. Travel and Vacation Scams

Common schemes include fake vacation rentals, discounted flights, timeshare resale offers, fake travel support numbers, and “free” vacations requiring fees. Verify reservations directly with the airline, hotel, rental platform, or travel provider.

3. Ticket Scams

High-demand concert, sports, and event tickets attract fake sellers and counterfeit tickets. Prefer official ticketing platforms or established resale systems with buyer protections.

4. Home Improvement and Contractor Scams

Warning signs include unsolicited high-pressure offers, large cash deposits, no written contract, refusal to provide licensing or insurance information where required, and claims that repairs must start immediately.

5. Moving, Storage, and Service Scams

Research providers before handing over property. Understand written estimates, inventory, insurance, payment terms, and complaint history. Be cautious about dramatic price changes after belongings are loaded.

6. Pet, Adoption, and Breeder Scams

Fraudsters may use stolen animal photos and demand deposits, shipping fees, insurance, or special crates. Verify the seller, veterinarian or rescue organization, and animal independently before payment.

7. Immigration and Legal-Service Scams

Scammers may impersonate attorneys, courts, immigration officials, process servers, or legal aid. Threats of immediate arrest or deportation combined with unusual payment methods should be independently verified through official channels.

8. Jury Duty and Law-Enforcement Scams

A caller may claim that a warrant exists because you missed jury duty and demand immediate payment. End the call and contact the court or law-enforcement agency through its publicly listed official number.

9. Disaster, Repair, and Door-to-Door Scams

After storms and emergencies, fraudulent contractors and charities may appear quickly. Verify licenses where applicable, insurance, contracts, references, and payment terms. Avoid pressure to sign immediately.

10. Advance-Fee Pattern

Many unrelated scams share one structure: you are promised a benefit, loan, grant, inheritance, pet, job, prize, rental, or service, but must pay a fee first. The label changes; the advance-fee pattern remains.

Lesson Summary

When a scam does not fit a familiar category, look for the underlying pattern: impersonation, urgency, advance fees, unusual payments, secrecy, and lack of independent verification.

Lesson Objective

Respond safely after clicking a malicious link, installing suspicious software, sending money, sharing credentials, or exposing identity information.

1. First Determine What Was Exposed

Response depends on the exposure. Ask:

• Was a link clicked but no information entered?
• Was a password entered on a fake site?
• Was a one-time code shared?
• Was software installed or remote access granted?
• Was financial information disclosed?
• Was money sent?
• Were identity documents or Social Security information exposed?

2. Password or Account Exposure

1. Use a trusted device.
2. Change the affected password.
3. Change reused passwords on other services.
4. Enable or strengthen multi-factor authentication.
5. Review recovery email, phone numbers, active sessions, connected apps, and mailbox forwarding rules.
6. Monitor the account for unauthorized changes.

3. Financial Exposure

Contact the bank, card issuer, payment provider, or other financial institution immediately through an official channel. Ask about stopping transfers, replacing cards, securing accounts, disputing unauthorized activity, and preserving transaction information.

4. Remote Access or Malware Exposure

If an attacker still has remote control, disconnect the system from the network if needed to stop the session. Remove unauthorized remote-access tools, inspect startup and installed applications, run trusted security tools, and consider professional remediation if the attacker had broad access.

5. Identity Exposure

Consider appropriate credit-report monitoring, fraud alerts, credit freezes, identity-theft reporting, and account review. Keep copies of correspondence, case numbers, and disputed transactions.

6. Recovery Scams

Victims are often targeted again by people claiming they can recover lost money, cryptocurrency, or accounts for an upfront fee. Some claim to be investigators, hackers, government agents, or recovery specialists.

7. Evidence Preservation

Save relevant emails, text messages, phone numbers, usernames, URLs, transaction IDs, receipts, screenshots, dates, and a short timeline. Do not preserve evidence by repeatedly interacting with the scammer.

8. Emotional Recovery

Scams are designed to manipulate normal human reactions. Victims may feel embarrassment, anger, or fear. Rapid practical action is more useful than blame. Encourage victims to seek support from trusted people and appropriate professional resources.

Lesson Summary

After exposure, speed matters. Identify what was compromised, secure accounts from a trusted device, contact financial institutions when money is involved, preserve evidence, and watch for follow-up recovery scams.

Lesson Objective

Build a repeatable anti-scam protection plan for individuals, families, and small businesses, and prepare for the final assessment.

1. Personal Protection Baseline

• Use unique passwords for important accounts and a reputable password manager if appropriate.
• Enable multi-factor authentication, preferably phishing-resistant methods where supported.
• Keep Windows, browsers, phones, applications, and security software updated.
• Use screen locks and device encryption where appropriate.
• Back up important data.
• Limit unnecessary personal information posted publicly.
• Review financial and important account activity regularly.

2. Create a Family Verification Plan

Families can establish a simple method for verifying emergencies, such as calling back known numbers, contacting a second relative, or using a private family verification phrase. Do not rely on a familiar voice alone.

3. Protect Older Adults and Other High-Risk Targets

Scammers often target people who are isolated, less familiar with technology, recently bereaved, under financial stress, or simply trusting. Useful protections include trusted-contact arrangements, bank transaction alerts, call filtering, shared verification rules, and regular nonjudgmental conversations about new scams.

4. Small-Business Protection Plan

• Require independent verification for payment-detail changes.
• Use MFA for email, payroll, financial, and administrative systems.
• Restrict permissions to what staff need.
• Maintain backups and an incident-response plan.
• Train staff to report suspicious requests quickly.
• Use approved vendor and customer contact records.

5. Reporting

Report scams to the relevant financial institution, platform, email or phone provider, employer, local law enforcement when appropriate, and applicable government reporting agencies. Reporting can help stop payments, document identity theft, close fraudulent accounts, and improve broader fraud detection.

6. Do Not Engage for Revenge

Do not attempt to hack, threaten, trace, or retaliate against scammers. Preserve evidence and use legitimate reporting channels. Scammers may be operating from another jurisdiction, using stolen accounts, or trying to provoke further engagement.

7. Final Review: The Universal Scam Checklist

UNEXPECTED CONTACT?
        |
URGENCY, FEAR, REWARD, OR SECRECY?
        |
REQUEST FOR MONEY, CREDENTIALS, CODE, OR ACCESS?
        |
UNUSUAL PAYMENT METHOD?
        |
CAN I VERIFY THROUGH A SEPARATE TRUSTED CHANNEL?
        |
PAUSE -> VERIFY -> ACT

8. Key Rules to Remember

• Caller ID is not proof.
• A familiar voice is not proof.
• A professional-looking website is not proof.
• A screenshot of money is not proof.
• An urgent story is not proof.
• A known account can still be compromised.
• Independent verification is stronger than appearance.

9. Course Completion

The final assessment covers the major scam categories in this course. A score of 80% or higher is required to pass. Scam methods evolve, so continue to apply the principles in this course even when a new scam does not perfectly match an example.

Lesson Summary

You cannot memorize every scam. You can build habits that work across scam types: pause, verify independently, protect credentials and money, use strong account security, preserve evidence, report fraud, and ask for help early.