How to Spot a Scam: The Four Signs, the Six Shapes Every Financial Scam Takes, and What to Do If You Already Paid (Money School, Lesson 10)

Every financial scam, however new it looks, has the same four parts: someone pretends to be a person or organization you trust, tells you about a problem or a prize, pressures you to act now, and asks you to pay in a specific way, usually a gift card, a wire, a payment app, a bank transfer or cryptocurrency. If a message has all four, it is a scam, no matter whose name is on it. The fix fits on a sticky note: hang up, look the number up yourself, and call back. Here is the number that should change how you think about this: Americans reported losing $15.9 billion to fraud in 2025, up from about $12.5 billion the year before, and the largest single category was not the clumsy email from a stranger; it was investment scams, often run by someone the victim had been chatting with for weeks. The scams that cost the most are the patient ones. This is Lesson 10 of Money School.

Jake's mother called the shop on a Friday afternoon, in a voice he had not heard her use before. Someone from her bank's fraud department had phoned to say her account had been compromised, that her money had to be moved to a "safe account" today, and that she must not tell anyone at the branch because an employee there was involved. The caller knew her name, her address and the last four digits of her card. The number on her phone screen was the bank's real number. She had already bought $2,000 in gift cards "to verify her identity" and was on her way to buy more when she called Jake to ask whether she should take a taxi or the bus.

If something like this has happened to you or to someone you love, I want to say one thing before anything else: it does not mean you were foolish. These calls are made by professionals who do nothing else all day, with scripts tested on thousands of people, and they are built to work on careful, intelligent people at the exact moment they are frightened. I nearly paid a fake parcel fee on my phone two years ago, in a queue, distracted, because the message arrived the day I was expecting a delivery. I stopped only because the payment page asked for my card's PIN. Nobody is immune. What protects people is not intelligence; it is a habit, and this lesson gives you the habit.

How to spot a scam: the four signs that are always there

Scams change their costumes every year: new apps, new payment methods, new headlines to borrow. Underneath, they have not changed in a century, because they are built on the same four steps. Learn the four and you can recognize a scam you have not met yet.

1. They pretend to be someone you trust. Your bank, the tax office, a delivery company, Microsoft, the police, your grandchild, a dating match. The caller ID, the email address and the logo can all be faked, and often are.
2. They tell you about a problem or a prize. Your account is compromised, you owe a fine, a relative is in trouble, your computer has a virus, you have won something, or an investment is about to double.
3. They pressure you to act right now. Today, before the branch closes, before the price goes up, before you are arrested. Stay on the line. Don't tell anyone. Pressure is the point, because it stops you from doing the one thing that would end the scam: checking.
4. They tell you to pay in a specific way. Gift cards, a wire transfer, a payment app, a bank transfer to a "safe account," cryptocurrency, cash in a courier envelope, or a check you deposit and then send part of back. Each of these is hard or impossible to reverse, which is why scammers insist on them.

Any one of the four can appear in honest life. Banks do call about fraud, and prizes do exist. All four together, in one message, is the signature. And the fourth sign alone is almost conclusive: no real bank, government agency or company asks you to pay with gift cards, to move your savings to a "safe account," or to buy cryptocurrency to fix a problem.

The numbers: how much people lose, and to what

Scams are not a rare misfortune; they are a large, organized industry. In 2025, Americans reported losing $15.9 billion to fraud to the Federal Trade Commission, up from about $12.5 billion in 2024, and the FBI's internet crime center logged just over a million complaints with $20.9 billion in reported losses, up 26% in a year. Those are only the losses people reported; many victims stay silent out of embarrassment, which is one more reason this lesson starts with no shame.

Two lessons sit inside that table. First, the biggest losses come from the slow scams, investment and relationship schemes that build trust over weeks, not from the quick ones. Second, cryptocurrency appears across almost every category, not because crypto is a scam in itself but because it is the payment method that is hardest to trace and impossible to reverse. When a stranger asks you to buy it, the request is the warning.

The six shapes every financial scam takes

The hub promised you six shapes. Every scam you will ever meet is one of these, or two of them combined. Here they are, with the tell that gives each one away.

1. The impersonator: "This is your bank, your account is at risk"

The caller, texter or emailer claims to be your bank's fraud team, the tax office, a utility, the police, Amazon, Microsoft or a relative in trouble. They often know real details about you, because data from old breaches is cheap. The tell: they want you to act on a number, link or account they give you, and they tell you not to hang up or not to tell anyone. Jake's mother's call was this shape, combined with the "safe account" and gift cards. Real fraud teams will tell you to hang up and call the number on the back of your card.

2. The sure thing: "This investment can't lose"

Often it begins with a wrong-number text or a friendly stranger on social media or a dating app, who becomes a friend over weeks and eventually mentions the trading platform that made them rich. The platform shows your balance growing; small early withdrawals may even work, to build trust. Then come the "taxes" or "fees" you must pay to withdraw, and the money is gone. The tell: guaranteed or unusually high returns, an investment you can only reach through one person, and pressure to add more. In Stage 3 you will learn what real investment returns look like, and this scam falls apart when you know the honest numbers.

3. The overpayment: "I sent too much, please send the difference back"

You sell something online, rent out a room, or take a small job, and the buyer sends a check or transfer for more than the price, then asks you to refund the difference. The check bounces days later, after you have sent real money. The tell: anyone who overpays and asks for a refund. Banks make deposited funds available quickly, before a fake check has failed, so "it cleared" does not mean it was real.

4. The relationship: "I love you, and I need help"

Someone online, often charming, attentive and somewhere far away, builds a relationship over weeks or months, then has an emergency: a medical bill, a frozen account, customs fees, a ticket to finally visit. The tell: you have never met in person or on a live video call they could not fake or dodge, and the conversation turns to money. It is the most painful shape, because the victim loses love and money at once; if someone you know is in one, lead with care, not with "how could you."

5. The job that costs money: "Earn from home, just pay for training"

A recruiter offers easy remote work, liking videos, rating products, "task" work with a dashboard that shows you earning, or a job that requires you to buy equipment from a supplier they choose. Then you must pay to unlock your earnings, or the equipment check bounces. Bogus job offers were among the most common text scams the FTC tracked. The tell: a job that asks you to pay before you are paid, or one you were "hired" for without an interview.

6. The fee before the prize: "You've won, just pay the processing fee"

A prize, a lottery, a grant, a refund, a loan approval or a debt forgiveness, all waiting behind a small fee. The tell is in the shape itself: real prizes, refunds and government benefits are free to receive. Debt relief offers that demand money before they do anything for you belong here too, and Lesson 9 explained why the honest version of that help is usually free or nearly free.

Jake: "So the call to Mum was shape one with a bit of shape six."

Ethan: "An impersonator with a fee. The 'verify your identity with gift cards' part is the fee. Banks don't take gift cards for anything."

The one habit that stops almost every scam: hang up, look it up, call back

You won't remember six shapes in a frightening moment, and you don't have to. You need one habit that breaks all of them: act only on phone numbers, links, email addresses and bank accounts you found yourself, never on ones the message gave you. Hang up, close the text, and contact the organization through a number or website you find yourself: the back of your card, a statement, the official app, or a search you start.

It works because every one of the six shapes depends on keeping you inside the scammer's channel. The fake bank needs you to stay on their line. The fake investment needs you to use their platform. The fake supplier needs you to use their new bank details. The moment you step outside, through a door you opened yourself, the scam has nowhere to stand. If the call was real, your bank will still be there when you call back, and it will thank you for checking.

Four rules that make the habit easier:

• Caller ID is not proof. Numbers are easily spoofed, which is why Jake's mother saw her bank's real number.
• Urgency is a reason to slow down, not to speed up. Any real problem will still be a problem in ten minutes.
• Secrecy is a red flag. Anyone who tells you not to tell your family, your bank branch or the police is protecting themselves, not you.
• Talk to one person before you pay. A friend, a family member, a neighbor. Saying the story out loud to someone who is not frightened is often enough to hear what is wrong with it.

Fake virus warnings and tech support scams: where our security guides come in

The fake-virus page and the fake-investment page are the same con wearing different clothes, which is why this lesson sits next to our security posts. A pop-up that fills your screen, plays an alarm, says your computer is infected and gives you a "Microsoft support" number to call is shape one, the impersonator, delivered through a browser. Microsoft and other tech companies keep phone numbers out of error messages and don't call you about viruses. Close the browser tab (if it won't close, restart the computer), and give remote control of your machine only to someone you contacted yourself.

Our guide to the Windows + R "support" scam shows exactly how one of these calls tries to make a normal screen look alarming, and our piece on whether cloudfront.net is a virus shows how to read a scary-looking web address calmly instead of panicking. The money lesson is the same as the security lesson: a frightening message asking you to act quickly is a reason to stop.

What to do if you already paid a scammer, by payment method

If you have already sent money, first: it is not your fault, and acting quickly matters far more than feeling bad. Call today, not tomorrow; some payments can be stopped or reversed only in the first hours or days. Here is who to call for each way of paying.

Then, in this order:

1. Report it at ReportFraud.ftc.gov, and at the FBI's internet crime center if it happened online. Reports help investigators connect cases, and some recoveries start there.
2. If you gave out your Social Security number or bank login, go to IdentityTheft.gov for a recovery plan, change your passwords and turn on two-step sign-in for your bank and email.
3. Freeze your credit at all three bureaus, free, as described in Lesson 7, so nobody can open new accounts in your name.
4. Watch for the second scam. Victims are often contacted by "recovery services" that promise to get the money back for a fee. That is shape six, aimed at someone who has just been hurt. Real recovery help from banks and law enforcement does not charge you.

Protect the people you love: the family plan

The people most often targeted for the largest amounts are the people we love most: parents and grandparents with savings, and young adults new to money and the internet. Reported losses for people aged 60 and over reached about $7.75 billion in 2025. A short family conversation does more than any software.

• Agree a family code word. If anyone calls claiming to be a relative in trouble, ask for it. Voice-cloning tools mean a voice alone is no longer proof; the FBI counted more than 22,000 complaints involving AI in 2025.
• Agree the second-call rule. Nobody in the family sends money under pressure without first calling another family member. Make it a rule, so asking is not an insult.
• Put the sticky note on the fridge: the four signs and "hang up, look it up, call back," in large print.
• Freeze credit for everyone, including older relatives who rarely borrow and, where possible, children, whose clean files are a target.
• Offer to be the second set of eyes. For an older parent, offering to look at "anything urgent about money" before they act, without judgment, is a gift, not an intrusion.

And if someone you love has been scammed, lead with "I'm so sorry this happened to you," not "how could you." Shame is what keeps victims quiet, and quiet is what lets the scammer come back.

At work or in a small business: the fake invoice and the new bank details

Business email compromise cost $3.0 billion in reported losses in 2025, and small businesses are easy targets because one person often handles all the money. The shape is the impersonator: an email that looks like it comes from a supplier, a landlord or your own boss, saying their bank details have changed, or asking you to pay an urgent invoice or buy gift cards for a client.

Two rules stop most of it. Change payment details only after a phone call to the supplier on the number you already have. And pay an urgent request from a boss only after you confirm it by voice on a known number, however senior the person claims to be. Ethan made Jake write both rules on the shop's supplier folder after a fake "new bank details" email arrived the same week as his mother's call.

The United Kingdom and Australia: same scams, local names

The six shapes cross every border; only the names on them change. In the United Kingdom, the impersonator often claims to be HMRC, the bank or the police, and the "safe account" request is so common that it is worth repeating: no bank will ever ask you to move money to keep it safe. In Australia, the same calls borrow the ATO, Medicare, the bank or a delivery service. In both countries, as in the U.S., the advice is identical: hang up, find the number yourself, call back, and report the scam to your bank immediately if you have paid, then to the national fraud reporting service.

Wherever your paycheck lands: pretend, problem or prize, pressure, pay a specific way. When you see all four, you already know the ending.

This week's exercise: the scam-proofing evening, do this with me

Thirty minutes, and one conversation. I did this with my own parents last year, and the code word has already been used once.

1. Write the sticky note: the four signs, and "hang up, look it up, call back." Put one on your fridge and give one to anyone you look after.
2. Save your bank's real fraud number in your phone contacts, from the back of your card.
3. Turn on two-step sign-in for your email and your bank, if it is not already on.
4. Place a free credit freeze at all three bureaus, if you have not done it in Lesson 7.
5. Call one family member this week and agree a code word and the second-call rule.
6. Look at your last month of texts and emails and find one scam message. Name its shape. Then delete it.

That is the whole exercise. You cannot make yourself unscammable; you can make yourself much harder to scam than the next person, and that is usually enough.

Honest aside: why smart people fall for scams

The most dangerous belief about scams is "I would never fall for that." Scammers count on it, because people who believe it skip the preparation. Being scammed is not a failure of intelligence; it is what happens when a skilled professional catches a person at the wrong moment: tired, frightened, lonely, excited, distracted, or simply expecting a parcel. The scripts are designed to trigger fast, emotional thinking and to block the slow, careful kind, and they work on doctors, engineers, bankers and police officers too.

That is why this lesson gives you a habit rather than a list. A habit works in the moment when thinking does not. Hang up, look it up, call back, every time, even when it feels silly, and especially when it feels urgent.

Where this fits in Money School, and what comes next

Lesson 10 completes Stage 2, "Build the floor." You now have a buffer in a high-yield account (Lesson 2 and Lesson 6), a credit score that keeps borrowing cheap (Lesson 7), the four policies that matter (Lesson 8), a ranked debt list (Lesson 9), and now the habit that stops someone taking it all away in one phone call.

Stage 3, "Build the reservoir," starts next, with Lesson 11: compound interest, with the table you will remember, the reason why $300 a month for 40 years beats $1,000 a month for 20, and the first honest look at what investments really return, which is also the best defense against shape two. The course page shows every lesson and which ones are live.

Scams: your questions, answered straight

Jake told his mother to stay where she was, hung up, and called her bank's real number from the back of her card while she waited. The fraud team froze the gift cards that had not been used yet, $1,200 of the $2,000, and opened a case for the rest. She was angry with herself for a week. Jake bought her lunch and told her about the fake parcel text he had nearly paid himself. Now the family has a code word, the bank's fraud number is saved in every phone, and the sticky note is on her fridge, in large print, next to the grandchildren's drawings. Ethan wrote the line below on it.

Revision note. Written October 24, 2026, as Lesson 10 of Money School. The figures carry their dates in the text: the Federal Trade Commission's reported fraud losses for 2025 and its imposter scam figures, and the FBI's 2025 Internet Crime Report. "If it sounds too good to be true, it probably is," says the old proverb; in 2026, add "and if it sounds too urgent to check, it certainly is."