Online shopping, banking and messaging are convenient, but scammers often imitate trusted companies to persuade people to share personal information or send money. Knowing how to spot online scams can help you pause before clicking a link, approving a payment or revealing a security code.
Recognise common warning signs
Unexpected urgency
Messages claiming that an account will be closed immediately, a parcel cannot be delivered or a payment must be made within minutes are designed to create pressure. Stop and verify the claim using a separate, trusted route.
Links that do not match the real organisation
Check the full domain carefully. A familiar brand name in a longer or misspelled web address does not prove that the page is genuine. Rather than using a link in an unexpected message, open the official app or type the known website address yourself.
Requests for passwords or one-time codes
Never share your password, PIN or one-time passcode with someone who contacts you unexpectedly. A caller may claim to be from a bank, delivery firm or support team, but caller ID and logos can be faked.
Prices that seem implausibly low
Fraudulent shops may use copied product photos, newly created websites, vague contact details or pressure to pay by an unusual method. Search for independent reviews, check the returns policy and use a payment method with appropriate buyer protection.
How to check a suspicious message safely
- Do not click the link or open unexpected attachments.
- Contact the organisation through its official app, website or a number printed on a genuine statement or card.
- Check the message for unusual spelling, mismatched domains and requests for secrecy.
- Ask someone you trust to review it if you feel rushed or uncertain.
- Report suspected fraud through the appropriate official channel in your country.
Strengthen your accounts
Use a unique password for each important account and consider a reputable password manager. Turn on multi-factor authentication where available, preferably using an authenticator app or security key when supported. Keep your phone, browser and apps updated, and enable transaction notifications so unexpected activity is easier to notice.
What to do if you have already clicked or paid
If you shared banking details or sent money, contact your bank immediately using its official number or app. Ask whether the payment can be stopped and follow its instructions to secure the account. Change any exposed passwords from a trusted device, sign out of other sessions where possible and enable additional security. If you installed software at a stranger’s request, disconnect the device from the internet and seek trusted technical help.
In the UK, people can find current reporting guidance through official government and fraud-reporting services. Keep screenshots, emails, phone numbers, transaction references and other evidence, but do not forward malicious links to others.
Online shopping safety checklist
- Check the seller’s identity, returns terms and contact details.
- Be cautious of pressure to pay by bank transfer, gift card or cryptocurrency.
- Use secure, familiar payment methods and review transaction alerts.
- Do not let a stranger remotely control your device to “fix” a payment issue.
- Be wary of follow-up messages promising to recover money for an upfront fee.
Frequently asked questions
Can a message be a scam even if it uses my name?
Yes. Names and other basic details can be obtained from many sources and do not prove that a message is genuine.
Should I reply to a suspicious text to ask if it is real?
No. Avoid replying or using its contact details. Verify independently with the organisation.
What is the first step after a fraudulent payment?
Contact your bank or payment provider immediately through an official channel and follow its fraud-response guidance.
Final thoughts
The safest response to an unexpected request is to pause, verify independently and protect your credentials. Scammers rely on urgency; taking a moment to check can prevent a costly mistake.
