Common Financial Scams: How to Spot and Avoid Them

Last updated August 2026. Statistics are drawn from federal agency reports and cited by source and year; scam tactics evolve, so treat this as a living reference rather than a final word.

What Is a Financial Scam?

A financial scam is a deliberate deception designed to trick a person into handing over money, financial account access, or personal identifying information. The defining feature is intentional deception by another party — not a bad investment, a market downturn, or a late fee. Those are ordinary financial risks. A scam involves someone lying to you on purpose to take something from you.

A few things are true about scams no matter what form they take:

• They constantly evolve. No list of scam types or warning signs is ever complete or final.

• Falling for one isn't a sign of poor judgment. Scam scripts are built by people who do this for a living, often borrowing the same persuasion techniques used in legitimate sales and marketing.

• No single red flag proves a scam — and no absence of one proves legitimacy. Scammers adapt as the public learns their tricks.

• Reporting quickly improves the odds of stopping further harm, but it never guarantees recovery.

• Anyone can be targeted. Some groups — older adults, recent widows and widowers, people facing financial hardship, newer investors, non-native English speakers, and people who are socially isolated — are documented as more frequently targeted or more severely affected. That reflects targeting patterns, not blame.

• Polish isn't proof. A professional-looking website doesn't guarantee legitimacy, and an unfamiliar or aggressive approach doesn't automatically mean fraud. Independent verification is the reliable method — gut feeling alone isn't.

In 2024, U.S. consumers reported losing more than $12.5 billion to fraud, a 25% jump from 2023, according to the Federal Trade Commission's Consumer Sentinel Network Data Book. That figure only reflects what people chose to report, so the true scale is almost certainly higher.

Scams at a Glance

Scams vs. Identity Theft: What's the Difference?

A scam is a deceptive interaction that tricks someone into acting — sending money, clicking a link, or sharing information. Identity theft is the unauthorized use of someone's personal or financial identity. The two overlap but aren't identical: a phishing scam that harvests a Social Security number can lead to identity theft, but identity theft can also happen independently, such as through a company data breach that never involved tricking the victim directly. Some incidents involve both.

If your primary concern is identity theft — a fraudulent account opened in your name, a hijacked tax refund, or misused Social Security number — the authoritative federal recovery resource is IdentityTheft.gov, run by the FTC. It received more than 1.1 million identity theft reports in 2024. This article's focus is scams; IdentityTheft.gov offers a step-by-step recovery plan for identity theft specifically.

Major Types of Financial Scams

Investment and Cryptocurrency Scams

What it is: A pitch — often unsolicited — for an investment that promises unusually high, guaranteed, or risk-free returns. It may involve a fake trading app, an unregistered "advisor," or a Ponzi scheme that pays early investors with later investors' money rather than real profits.

Investment scams caused the largest reported losses of any fraud category in 2024: $5.7 billion reported to the FTC, up 24% from 2023, and the FBI's Internet Crime Complaint Center (IC3) separately logged $6.57 billion in investment-fraud losses, with cryptocurrency-linked schemes accounting for the bulk of it.

Red flags: pressure to act before you can research it; promises of guaranteed or "risk-free" returns; requests to move money into a platform you control less and less over time; an "advisor" who can't be verified.

Verify: Check SEC/FINRA registration through Investor.gov and BrokerCheck before sending any money. Registered investment professionals and firms are searchable by name.

Romance Scams and "Pig Butchering"

What it is: A scammer builds a fake romantic or close personal relationship online — often over weeks or months — before introducing a financial request. "Pig butchering" describes a specific, more elaborate version where the relationship gradually shifts toward a fraudulent cryptocurrency "investment platform" that shows fabricated gains to keep the victim investing more.

The FTC reported $1.14 billion in romance-scam losses in 2023 from 64,003 reports (median loss $2,000), and romance scams have ranked among the costliest fraud categories reported to the agency for several years running. Newer FTC data show romance scams increasingly start on social media: in 2025, nearly 60% of people who reported losing money to a romance scam said it began there. Losses tied to crypto "investment" scams that follow the pig-butchering pattern are typically counted separately, under investment fraud, where losses reached billions more.

Red flags: the person can never video call or meet; the relationship escalates quickly; they eventually mention an investment opportunity, especially in cryptocurrency; they ask you to keep the relationship or the money request private.

Verify: Reverse-image-search profile photos, and talk to a friend or family member about the relationship before sending any money.

Government and Authority Imposter Scams

What it is: Someone contacts you claiming to be from the IRS, Social Security Administration, a court, or local police, typically threatening arrest, benefit suspension, or legal action unless you pay immediately.

Imposter scams were the most commonly reported fraud category to the FTC in 2024, with government imposter scam losses specifically reaching $789 million, up $171 million from 2023.

Red flag that can be stated plainly: legitimate U.S. government agencies do not demand immediate payment by gift card, wire transfer, or cryptocurrency, and they do not threaten immediate arrest over the phone for unpaid taxes or benefits issues.

Verify: Hang up. Call the agency back using the number on its official .gov website — never a number the caller gives you.

Tech Support Scams

What it is: An unsolicited pop-up, email, or phone call claims your computer has a virus or your account has been compromised, and urges you to call a number, install remote-access software, or pay for "protection."

Red flags: unsolicited contact about a problem you didn't report; pressure to act immediately; a request for remote access to your device or payment via gift card.

Verify: Close the pop-up without clicking anything, and contact the software or device maker directly using contact information from their official website — never a number provided in the alert itself. Never grant remote access to an unsolicited caller.

Family Emergency / Grandparent Scams

What it is: A caller impersonates a grandchild or other relative claiming to be in urgent trouble — a car accident, arrest, or medical emergency — and asks for money to be wired or paid via gift card immediately, often insisting the request stay secret. Consumer protection agencies, including the FTC and FBI, have noted growing concern about AI-based voice-cloning tools being used to make these calls sound more convincing, though the core tactic — urgency plus secrecy — predates the technology.

Red flags: urgent request for money combined with a demand for secrecy; pressure to act before verifying; unusual payment methods like gift cards or wire transfers.

Verify: Hang up and call the relative directly at a number you already have, or check with another family member, before sending anything.

Phishing, Smishing, and Vishing

What they are: Phishing is a fraudulent email designed to impersonate a trusted sender and get you to click a malicious link or share information. Smishing is the same tactic by text message; vishing is the same tactic by phone call, often using a spoofed caller ID so the number looks legitimate.

Email was the most common way consumers reported being contacted by scammers in 2024, for the second year running, followed by phone calls and then text messages, according to the FTC. Separately, phishing was the single most-reported cybercrime type to the FBI's IC3 in 2024, with 193,407 complaints.

Red flags: urgent language ("your account will be suspended"); a link that doesn't match the organization's real web address when you hover over it; requests to "verify" a password or account number.

Verify: Don't click the link. Go to the organization's website directly by typing the address yourself, or call using a number from your card, statement, or the company's official site.

Online Shopping, Marketplace, and Rental Scams

What they are: Fake online storefronts or listings that take payment and never deliver, fraudulent buyers or sellers on peer-to-peer marketplaces, and fake rental listings (sometimes for real properties the "landlord" doesn't actually own) that collect a deposit before a viewing that never happens.

Online shopping was the second most commonly reported fraud category to the FTC in 2024.

Red flags: a seller or landlord who insists on payment outside the platform's protected system; prices dramatically below market; refusal to meet or do a video walkthrough for a rental.

Verify: Use a marketplace's built-in payment and messaging system, check seller history and reviews, and never wire a deposit for a rental you haven't toured in person or by live video with the actual listing agent.

Employment, Lottery, and Prize Scams

Employment scams offer a job — often remote, with vague duties and high pay — then ask for an upfront payment for training or equipment, or send a fraudulent check and ask the "new hire" to deposit it and wire back a portion. Losses tied to job and employment-agency scams grew from $90 million in 2020 to $501 million in 2024, according to the FTC, and overall business/job-opportunity scam losses reached $750.6 million in 2024.

Lottery and sweepstakes scams notify you of a prize you never entered to win, then ask for a fee or "taxes" to release it. Legitimate sweepstakes never require payment to collect a prize.

Red flags: a job offer with no interview process; any request to pay to get hired; a prize that requires upfront payment.

Verify: Research the employer independently, and never deposit a check and wire money back before the bank confirms the check has actually cleared — that process can take weeks, even if funds appear available sooner.

Charity and Disaster-Relief Scams

What it is: Solicitations that impersonate real charities or invent fake ones, often surging after a natural disaster or during the holiday giving season.

Red flags: pressure to donate immediately; requests for gift cards, wire transfer, or cryptocurrency instead of a check or credit card; a name that sounds similar to, but isn't quite, a well-known charity.

Verify: Check the organization through the BBB Wise Giving Alliance or the IRS Tax Exempt Organization Search before giving, especially for a charity you haven't heard of before.

Fake Check / Overpayment Scams

What it is: A buyer, "employer," or contest sends a check for more than what's owed, then asks the victim to deposit it and wire back the difference. The check later turns out to be fraudulent, but banks are required to make deposited funds available before fully verifying a check — so the victim can wire real money based on a check that later bounces.

Red flag that can be stated plainly: anyone who overpays you and asks you to wire back the difference is following a well-documented scam pattern, regardless of how legitimate the paperwork looks.

Verify: Never wire money back based on funds from a check you just deposited. Wait for your bank to confirm the check has fully cleared, which can take days to weeks.

Business Email Compromise

What it is: A scammer spoofs or compromises an executive's or vendor's email account and directs an employee to redirect a payment or wire funds to a fraudulent account, often timed around a real transaction like a vendor invoice or property closing.

Business email compromise caused $2.77 billion in reported losses across 21,442 complaints to the FBI's IC3 in 2024 — nearly $8.5 billion combined over 2022–2024 — with an average reported loss per incident far higher than most other online scam types.

Red flags: a last-minute change to payment or wiring instructions; urgency combined with a request to bypass normal approval steps; an email address that's almost, but not exactly, correct.

Verify: Confirm any change to payment instructions by phone, using a known number — not one provided in the email — before sending funds.

Elder Financial Abuse and Vulnerable-Population Targeting

Older adults are documented as frequent targets of financial fraud, and research from the Department of Justice, CFPB, and National Council on Aging indicates they may report losses less often — sometimes due to embarrassment, unfamiliarity with reporting channels, or not realizing a scam occurred. This isn't because older adults are inherently more gullible; it reflects targeting patterns, not a personal deficiency. In 2024, adults 60 and older filed the most fraud complaints and reported the highest total losses of any age group to the FBI's IC3 — $4.885 billion, a 43% increase over 2023 — and the FBI itself notes the true figure is likely higher because older victims underreport.

It's important to separate two related but distinct problems:

• Scams by strangers, covered throughout this article, where an outside party deceives the victim directly.

• Financial exploitation by a trusted person — a family member, caregiver, or fiduciary who misuses access to an older adult's money or accounts. This is a form of elder abuse that doesn't always involve a classic "scam script," and it requires a different response, often involving Adult Protective Services.

Practical, respectful prevention steps:

• Add a trusted-contact designation to bank and brokerage accounts, so the institution has someone to notify if it suspects unusual activity.

• Keep an open, non-judgmental dialogue with family about scam tactics, without implying incapacity.

• Contact the bank's fraud department immediately if a transaction looks wrong — banks can sometimes stop a transfer before it completes.

• Know the DOJ National Elder Fraud Hotline: 1-833-372-8311 (Monday–Friday, 10 a.m.–6 p.m. ET), a free resource staffed by case managers experienced in elder fraud.

Common Tactics and Red Flags Across Scam Types

Regardless of category, most scams rely on a handful of recurring tactics documented by the FTC and CFPB:

• Manufactured urgency — "act now or lose the opportunity," or "pay immediately or face arrest."

• Requests for secrecy — "don't tell your bank or family why you're sending this."

• Unsolicited contact paired with a request for money or information.

• Requests for payment via gift card, wire transfer, cryptocurrency, or payment app — specifically because these are hard or impossible to reverse.

• Requests for remote access to a computer or device.

• Pressure to skip normal verification steps.

• Promises of guaranteed, unusually high, or risk-free returns.

No single tactic on its own proves a scam. But when two or more show up together in an unsolicited contact, that's a strong signal to pause and verify independently before doing anything else.

Why Scammers Request Gift Cards, Wire Transfers, and Crypto

This is about reversibility and consumer protection, not that these payment methods are illegitimate in general use — gift cards, wire transfers, and cryptocurrency all have plenty of legitimate everyday uses. The point scam-prevention experts emphasize is narrower: no legitimate business or government agency demands payment exclusively through one of these hard-to-reverse methods. A request limited to gift cards, wire transfer, or crypto — with no other option offered — is one of the most consistent red flags across scam types.

How to Verify Legitimacy Before Acting

1. Pause. Don't act while you're feeling pressured or rushed.

2. Look up the organization's official phone number or website yourself — never use contact information provided by the person who reached out to you.

3. Hang up and call back using that independently verified number.

4. For investment offers, check SEC/FINRA registration through Investor.gov or BrokerCheck.

5. For charities, check the BBB Wise Giving Alliance or the IRS Tax Exempt Organization Search.

6. For a "relative in trouble," verify independently through another family member or a phone number you already had.

7. Never grant remote access to your computer or device to an unsolicited caller.

8. Confirm through a second, independent channel before sending money or sharing personal or financial information.

The Psychology Behind Why Scams Work

Behavioral-economics and criminology research points to a consistent set of persuasion principles that scams exploit — many of them the same techniques used in legitimate marketing, just aimed at deception instead of a genuine sale:

• Authority bias — people are more likely to comply with a request that appears to come from a government agency, bank, or company they trust.

• Manufactured urgency and scarcity — a limited-time threat or opportunity short-circuits careful thinking.

• Social proof — testimonials, fake reviews, or claims that "everyone else is doing it" build false confidence.

• Reciprocity — a small favor or gift creates a felt obligation to reciprocate, which scammers exploit before making a bigger ask.

• Sunk-cost escalation — once someone has already sent money, scammers use the promise of "recovering" that loss to extract more.

• Isolation — many scams explicitly discourage checking in with a bank, friend, or family member, because outside perspective is the thing most likely to break the spell.

Before acting on an unexpected request for money or information, it helps to ask: Am I being told to keep this secret? Am I being rushed? Would I make the same decision after sleeping on it and talking to someone I trust?

What to Do If You Suspect a Scam

If you think you're being targeted but haven't sent anything yet:

• Stop responding. Don't click links or call numbers provided in the message.

• Verify independently using contact information you look up yourself.

• Report the attempt even if you didn't lose money — see the reporting section below.

What to Do If You've Already Been Scammed

• Contact your bank or card issuer immediately. Speed matters, especially for wire transfers and card payments.

• Contact the platform used — the payment app, wiring service, or gift card issuer — to report the fraud; some can flag or freeze funds if reported quickly.

• File a report with the FTC at ReportFraud.ftc.gov.

• File a report with the FBI's IC3 at ic3.gov if the scam involved the internet.

• File a local police report, especially if you need documentation for your bank or insurer.

• Place a fraud alert or credit freeze with the three major credit bureaus if personal information was exposed.

• Visit IdentityTheft.gov if identity information — like a Social Security number — was compromised.

Be aware: recovery is not guaranteed, and outcomes vary significantly by payment method and how quickly the loss is reported. Cryptocurrency and gift card losses are especially difficult to recover; card and some bank transfers have more avenues for reversal if caught quickly.

How to Report a Scam

Reporting — even without a recovery — helps regulators track emerging patterns and warn others. It's also one of the only ways law enforcement can connect individual cases into larger investigations.

Protecting Yourself and Your Family Going Forward

• Verify unsolicited contact independently before acting on it — every time, not just when something feels off.

• Use unique passwords and multi-factor authentication on financial and email accounts.

• Be cautious about how much personal information you share publicly on social media; scammers use it to personalize their approach.

• Set up account alerts for logins, transfers, and purchases.

• Talk openly with family — especially older relatives — about current scam tactics, without shame or condescension.

• Know where to report a scam before you need to, so you're not searching for the right number under pressure.

Illustrative Examples (Hypothetical)

These composite, fictional scenarios illustrate how verification breaks a scam. They're intentionally general — not scripts.

Phishing email impersonating a bank: An email claims your account is "locked" and links to a login page. The web address, when you hover over the link, doesn't match your bank's actual domain. Instead of clicking, you open a browser and type your bank's website directly, or call the number on the back of your card — and your bank confirms there's no lock on your account.

A "guaranteed return" investment pitch: An online contact offers access to a private trading platform promising steady, guaranteed monthly returns. Before sending money, you search the person's name and the firm on FINRA's BrokerCheck and find no registration at all — a significant warning sign, since offering securities without registration is itself a red flag.

A grandparent scam call: A caller claims to be a grandchild who's been in an accident and needs bail money wired immediately, and begs you not to tell anyone else in the family. Instead of acting, you call another family member, who confirms the grandchild is fine — the call was fabricated.

A fake check in online selling: A "buyer" sends a check for far more than your asking price and asks you to wire back the difference as a "shipping refund." Your bank explains that funds can appear available before a check fully clears, so you wait for full clearance — and the check bounces days later, confirming the fraud before any money left your account.

A romance scam escalating to crypto: After weeks of daily messages with someone met on a dating app who always has a reason not to video call, the conversation shifts to an "exclusive" cryptocurrency platform they say is making them money. You decline to send funds and mention the relationship to a friend, who recognizes the pattern immediately.

Common Misconceptions

Glossary

• Scam — an intentional deception designed to obtain money, access, or information through false pretenses.

• Fraud — the broader legal and financial term for intentional deception for gain; scams are a form of fraud.

• Phishing — fraudulent emails impersonating a trusted sender to steal information or install malware.

• Smishing — phishing conducted via text message.

• Vishing — phishing conducted via phone call, often using spoofed caller ID.

• Spoofing — disguising the origin of a call, email, or message to appear as if it comes from a trusted source.

• Pretexting — inventing a false scenario to persuade someone to share information or take an action.

• Social engineering — the broader category of psychological manipulation tactics used to bypass normal skepticism.

• Imposter scam — a scam where the perpetrator poses as a government agency, business, or authority figure.

• Advance-fee fraud — a scam requiring an upfront payment in exchange for a promised larger sum that never arrives.

• Ponzi scheme — a fraud that pays earlier investors using money from newer investors rather than real profits.

• Pyramid scheme — a fraud that depends on recruiting new participants, with payouts tied to recruitment rather than a real product or service.

• Pig butchering — a long-con scam that combines relationship-building with a fraudulent investment platform, usually cryptocurrency.

• Romance scam — a scam built around a fake romantic relationship, used to solicit money.

• Money mule — a person who, knowingly or unknowingly, transfers illegally acquired funds on behalf of another party.

• Identity theft — the unauthorized use of someone's personal identifying information.

• Chargeback — a reversal of a credit or debit card charge, typically initiated through a dispute with the card issuer.

• Fraud alert — a notice on a credit file that requires lenders to take extra steps to verify identity before extending credit.

• Credit freeze — a restriction that prevents new credit accounts from being opened in your name without your authorization.

• BrokerCheck — a free FINRA tool for checking the background and registration of investment brokers and firms.

• IdentityTheft.gov — the FTC's federal resource for reporting and recovering from identity theft.

• Business email compromise (BEC) — a scam using a spoofed or compromised email account to redirect a payment or wire transfer.

• Account takeover — unauthorized access to and control of someone's existing financial or online account.

• Two-factor authentication (2FA) — a login security step requiring a second form of verification beyond a password.

• Data breach — an incident where personal or financial information is accessed without authorization.

Frequently Asked Questions

What are the most common financial scams? Investment and cryptocurrency scams, imposter scams (government and business), romance scams, phishing/smishing/vishing, online shopping scams, and employment scams rank among the most commonly reported to the FTC and FBI each year. Investment scams caused the highest reported dollar losses in 2024, while imposter scams were the most frequently reported category by number of complaints.

How do I know if something is a scam? No single sign proves it, but a combination of red flags is a strong signal: unsolicited contact, pressure to act immediately, a request for secrecy, and a demand for payment by gift card, wire, or crypto. When in doubt, pause and verify independently before acting.

What is a phishing scam? Phishing is a fraudulent email that impersonates a trusted sender — like a bank or well-known company — to trick you into clicking a malicious link or revealing personal information. It's one of the most common ways scammers make initial contact.

What is a smishing scam? Smishing is phishing conducted by text message instead of email. It typically includes an urgent message and a link, often claiming to be from a delivery service, bank, or government agency.

What is a vishing scam? Vishing is phishing conducted over the phone, frequently using a spoofed caller ID so the call appears to come from a legitimate bank, agency, or business.

What is a romance scam? A romance scam is a fraud built around a fake romantic relationship, usually formed online, that eventually leads to a request for money, gift cards, or a cryptocurrency "investment."

What is a pig butchering scam? Pig butchering is a specific type of romance/investment scam where a scammer builds a relationship over time, then gradually persuades the victim to invest in a fraudulent cryptocurrency platform that shows fake gains to encourage larger deposits.

What is a Ponzi scheme? A Ponzi scheme pays returns to earlier investors using money from newer investors, rather than legitimate profit. It collapses when new investment slows and there isn't enough money to pay existing investors.

What is a pyramid scheme? A pyramid scheme generates payouts primarily through recruiting new participants rather than selling an actual product or service, and it collapses once recruitment can't keep pace.

What is an investment scam and how do I spot one? An investment scam is a fraudulent pitch — often promising guaranteed or unusually high returns — for a fake or misrepresented investment opportunity. Spot one by checking SEC/FINRA registration through Investor.gov or BrokerCheck and being skeptical of any "guaranteed" return.

Are cryptocurrency investments a common scam target? Yes. Cryptocurrency-linked investment fraud caused billions in reported losses in 2024, according to the FBI's IC3, in part because crypto transactions are largely irreversible once sent.

What is a tech support scam? A tech support scam involves an unsolicited pop-up, email, or call claiming your device has a virus or your account is compromised, pressuring you to grant remote access or pay for fake "protection."

What is a government imposter scam? A government imposter scam involves someone posing as the IRS, Social Security Administration, or police, typically threatening arrest or benefit loss to pressure immediate payment. Legitimate agencies don't demand immediate payment by gift card or threaten arrest over the phone.

What is the grandparent scam? The grandparent scam involves a caller impersonating a grandchild or relative in urgent trouble, asking for money — often by wire or gift card — and insisting the request stay secret from other family members.

What are common online shopping and marketplace scams? These include fake storefronts that take payment without shipping goods, and sellers or buyers on peer-to-peer platforms who push payment outside the platform's protected system, making the transaction harder to dispute.

What are rental and real estate scams? These typically involve a fake listing — sometimes for a real property the "landlord" doesn't own — that collects a deposit before a viewing that never actually happens.

What is a fake check scam? A fake check scam involves being sent a check for more than what's owed, then being asked to deposit it and wire back the difference before the check is discovered to be fraudulent.

What are common employment and job-offer scams? These involve fake job offers — often for remote work — that ask for an upfront payment for training or equipment, or that send a fraudulent check the "new hire" is asked to deposit and partially wire back.

What are lottery, sweepstakes, and prize scams? These involve notification of a prize you never entered to win, followed by a request to pay a fee or "taxes" before the prize can be released. Legitimate sweepstakes never require payment to collect winnings.

What are charity scams and how do I verify a charity? Charity scams involve fraudulent solicitations, often surging after disasters or during the holidays. Verify a charity through the BBB Wise Giving Alliance or the IRS Tax Exempt Organization Search before donating.

What is elder financial abuse and how common is it? Elder financial abuse includes both scams targeting older adults and exploitation by a trusted person, like a caregiver or family member. Adults 60 and older reported the highest total fraud losses of any age group to the FBI's IC3 in 2024, and researchers believe underreporting means the true scale is higher.

What is a business email compromise scam? Business email compromise involves a spoofed or hacked email account used to trick an employee into redirecting a payment or wire transfer, often timed around a real transaction like an invoice or closing.

What payment methods do scammers ask for, and why are gift cards and crypto red flags? Scammers favor gift cards, wire transfers, and cryptocurrency because these payments are difficult or impossible to reverse once sent. A request limited to one of these methods, with no other option, is a strong warning sign.

How do I verify if a caller or email is really from my bank, the IRS, or Social Security? Don't use contact information provided by the person who reached out. Look up the organization's official number or website yourself, and call back using that verified information.

What should I do if I think I've been scammed? Contact your bank or card issuer immediately, report it to the platform used, file reports with the FTC and FBI's IC3, and visit IdentityTheft.gov if personal information was exposed.

How do I report a scam? Report general scams to the FTC at ReportFraud.ftc.gov, internet-facilitated fraud to the FBI's IC3 at ic3.gov, and contact your state Attorney General or local police as appropriate for the situation.

Can I get my money back after being scammed? Sometimes, but recovery is never guaranteed. Speed matters, and outcomes vary significantly by payment method — card and some bank transfers have more recovery options than gift cards or cryptocurrency.

How do I protect an elderly parent from scams? Add a trusted-contact designation to their financial accounts, keep an open and respectful dialogue about current scam tactics, and know the DOJ National Elder Fraud Hotline (1-833-372-8311) as a resource if something happens.

What is the difference between a scam and identity theft? A scam is a deceptive interaction that tricks someone into acting. Identity theft is unauthorized use of someone's personal information, which can result from a scam or happen independently, such as through a data breach.

What is a money mule? A money mule is someone who transfers illegally obtained money on behalf of another party, sometimes unknowingly after being recruited through a fake job offer.

Is This a Scam? A Quick Decision Framework

Ask these four questions before sending money or sharing information:

1. Contact Question — Did I initiate this contact, or did it come to me unsolicited?

2. Pressure Question — Am I being rushed, told to keep it secret, or threatened?

3. Verification Question — Have I confirmed this independently, using contact information I looked up myself?

4. Payment Question — Am I being asked to pay by gift card, wire, crypto, or payment app, with no other option?

If any answer raises a concern, pause and verify before acting.

Sources

• Federal Trade Commission, Consumer Sentinel Network Data Book 2024 and related press release, "New FTC Data Show a Big Jump in Reported Losses to Fraud to $12.5 Billion in 2024" (March 2025)

• Federal Trade Commission, "New FTC Data Show People Have Lost Billions to Social Media Scams," Data Spotlight (April 2026)

• Federal Trade Commission, Data Spotlight, "Romance scammers' favorite lies exposed," and related romance-scam reporting (2023–2026)

• Federal Bureau of Investigation, Internet Crime Complaint Center (IC3), 2024 Internet Crime Report (April 2025)

• Federal Bureau of Investigation, "FBI Highlights Growing Number of Reported Elder Fraud Cases" (June 2025)

• FBI IC3 Public Service Announcement, "Business Email Compromise: The $55 Billion Scam" (September 2024)

• U.S. Department of Justice, Office for Victims of Crime, National Elder Fraud Hotline program information

• U.S. Securities and Exchange Commission, Investor.gov; Financial Industry Regulatory Authority, BrokerCheck

• Better Business Bureau, Wise Giving Alliance; Internal Revenue Service, Tax Exempt Organization Search

• Federal Trade Commission, IdentityTheft.gov

Conclusion

Scams rely on urgency, secrecy, and impersonation — not on the victim's intelligence. No single red flag is ever definitive on its own, but pausing to verify independently before sending money or sharing information is the most reliable defense available, across every category described here. Anyone can be targeted, and being targeted is never a reflection of how smart or careful someone is. Recovery after a scam is possible but never guaranteed, which is why prevention and fast reporting both matter. Because tactics keep evolving — from AI-cloned voices to new cryptocurrency platforms — staying informed, and talking openly with family about what scams look like right now, is an ongoing habit rather than a one-time checklist.