Online scams field guide
Fake shops, romance and investment scams, tech-support pop-ups, marketplace tricks and overpayment schemes. How each one works and the single question that exposes it.
The shape of every scam
Almost every online scam follows the same pattern: contact, trust, pressure, payment. The method of payment is often the giveaway. Legitimate businesses and government agencies do not ask for gift cards, cryptocurrency, wire transfers to individuals or payment apps for urgent fees.
The one question that exposes most scams: "Why does this have to be paid this way, right now?" If the answer involves gift cards, crypto, secrecy or a deadline measured in hours, stop.
Fake online shops
Ads on social media lead to professional-looking stores selling popular items at deep discounts. The goods never arrive, arrive as cheap copies, or the site exists only to collect card details.
- Check the domain age and reviews on independent sites, not on the shop itself.
- Be wary of shops with no physical address, no phone number and only bank-transfer or crypto payment.
- Pay by credit card or a payment service with buyer protection. See online shopping and payments.
Investment and "pig butchering" scams
These often start with a wrong-number text or a dating-app match. Over weeks the scammer builds a friendship, then introduces a "can't-lose" crypto or trading platform. The platform shows big fake profits, encouraging larger deposits. When the victim tries to withdraw, there are "taxes" or "fees" to pay first, and eventually the contact disappears. The FBI has reported crypto investment fraud as one of the costliest crime types in recent years.
Romance scams
The scammer creates a caring online relationship but is always unable to meet in person or video chat, often claiming to work offshore, abroad or in a remote location. Eventually there is an emergency that needs money. Reverse image search their profile photos and never send money to someone you have not met in person.
Tech-support scams
A pop-up or a phone call claims your computer is infected and shows a number to call. The "technician" asks for remote access, "finds" problems and charges for fake repairs, or uses the access to steal from bank accounts. Real companies like Microsoft and Apple do not display phone numbers in browser warnings. Close the browser (use Task Manager if needed) and run your normal antivirus.
Marketplace scams
- Overpayment: a buyer sends more than the price and asks for a refund of the difference. The original payment later bounces.
- Fake payment notification: an email "from" a payment service confirms money that never arrived.
- Verification code trick: a buyer asks you to read them a code "to prove you are real". The code actually sets up an account in your name or takes over yours.
- Fake escrow or shipping service for expensive items like cars.
Meet in public, accept payment only through the platform's official system, and confirm money is in your account before handing anything over.
Government and prize scams
"You owe back taxes", "your Social Security number is suspended", "you won a lottery, pay the fees". Government agencies contact you by mail first and never demand gift cards or crypto. Real prizes never require you to pay to collect.
Recovery scams
After a scam, victims are often contacted by people offering to recover the lost money for an upfront fee. This is almost always a second scam by the same network.
Where to report
In the US: ReportFraud.ftc.gov and the FBI's IC3 (ic3.gov). In the UK: Action Fraud. Tell your bank immediately if you sent money; speed improves the chances of recovering it.