How to Spot Any Scam in 2026: The Pattern Behind All 5
Americans reported losing $20.9 billion to internet crime in 2025, according to the FBI's Internet Crime Complaint Center, from more than a million complaints.
Reading about every individual scam is hopeless. There are hundreds, and new ones appear monthly.
The useful thing is that they all share a structure. Learn the structure and you can recognise scams that have not been invented yet, which is the only defence that keeps working.
The four steps behind every scam
Whatever story arrives, the mechanics run in this order.
Read next: Who calls from (916) 860-3163? Reported 11 times from California
- Borrowed trust. The contact appears to come from something you already trust: your bank, a courier, a government agency, a relative, an employer.
- A problem or a prize. Either something has gone wrong that you did not know about, or something good has happened that you did not expect.
- Urgency. A deadline appears. Today, this hour, before your account is frozen. This exists purely to stop you checking.
- An irreversible payment or an access request. Money in a form that cannot be recalled, or access to a device or account.
The FTC uses almost the same framework, calling it Pretend, Problem or Prize, Pressure, and Payment.
Step three is where you can always intervene. Steps one and two can be faked convincingly. Urgency cannot survive a pause, because a pause is exactly what it is designed to prevent.
The payment method tells you more than the story
Ignore how plausible the reason sounds. Look at what is being asked for.
These are chosen because the money cannot come back:
Read next: Rental Scams in 2026: $275 Million Lost and How to Spot One
- Gift cards. Read out over the phone while you stay on the line. No organisation on earth accepts these as payment for a debt, a fine, or a fee.
- Wire transfers. Occasionally recallable within hours, almost never after.
- Cryptocurrency, often through an ATM the caller directs you to.
- Payment apps such as Zelle or Cash App, which work like cash between strangers.
- Cash by courier or mail. Someone collecting money from your door is never legitimate.
- Gold bars. Increasingly common, and covered in our guide to courier scams.
A real company takes a card, sends a receipt, and can be called back tomorrow. If none of those three are true, stop.
Five sentences that mean it is a scam
These appear across completely unrelated scams, which is what makes them useful.
"Do not tell anyone." Real emergencies involve more family, not fewer. Secrecy exists to keep out the person who would spot it. In one prosecuted grandparent scam, victims were told a court gag order prevented them speaking to relatives.
"We need to move your money to a safe account." There is no such thing. No bank has one. This sentence alone identifies the scam.
Read next: Is ShopVSB.com Legit? Vitamin Sea Boutique Review 2026
"Stay on the line while you do this." Whether it is going to the bank, a shop, or a crypto ATM, staying on the phone is containment. It stops anyone else reaching you.
"Install this so I can help you." Remote access software hands over your screen and your banking. The tools named are usually real, which is why it sounds reasonable.
"You have been pre-approved" or "you have won." Followed, always, by a fee to release it. Legitimate prizes and approvals never require payment first.
Why caller ID and email addresses prove nothing
Two things people still treat as evidence:
The number on your screen. Calls travel over the internet now, and the displayed number is a field the caller fills in. They can show your bank's real number, or a number that matches your own area code, which is called neighbour spoofing. See our guide to neighbour spoofing.
The sender name on an email. Also a field, also editable. Check the actual address, and even then a lookalike domain is easy to register.
Neither is a lie detector. Both are decorations.
The one pause that works
You do not need to identify which scam you are facing. You need one habit.
End the contact and reconnect using a route you already had.
Hang up and dial the number on your card. Close the message and open the app. Call your grandchild on the number in your contacts. The FBI's own campaign phrases it as "Take a Beat".
This works because every scam depends on the channel it opened. Leave that channel and the whole thing collapses, regardless of how convincing it was.
And if the caller objects to you hanging up and calling back, you have your answer without needing any other test.
Three settings that protect you when you slip
Everyone stops being careful sometimes. These work anyway.
- Two step login on your email, first of all. CISA says multifactor authentication can lower account breach risk by around 99 percent. Your email is the reset route for every other account you own, so it comes before your bank.
- Bank alerts with no minimum amount. Many banks only alert above $500, and scammers test cards below that. A fraudulent transfer caught in ten minutes can sometimes be stopped.
- Automatic updates everywhere. Updates are mostly repairs to holes criminals already know about.
All three are covered step by step in our device settings guide.
Who gets targeted, and why it is not about being careless
Adults over 60 reported $7.7 billion in losses in 2025, the highest of any age group, with an average loss above $38,000.
The FBI gives practical reasons rather than judgemental ones: older adults have accumulated savings, may be driven by loneliness to talk to strangers, and are more likely to engage with unsolicited calls and messages.
That last point is the mechanism. Answering the phone is the entire first step. Everything else follows from it.
It is also worth saying plainly that these are organised operations running scripts tested on thousands of people. Being caught by one is not evidence of anything about you.
If it already happened
- Call your bank now on the number on your card. Speed matters more than anything else.
- File at ic3.gov. This activates the IC3 Recovery Asset Team, which can request a freeze on the receiving account while funds are still there.
- Report to the FTC at reportfraud.ftc.gov.
- If personal data was shared, begin a recovery plan at IdentityTheft.gov.
- Expect a follow up. Victims are often contacted again by someone offering to recover the money for a fee. That is the same operation returning.
Anyone aged 60 or over can call the National Elder Fraud Hotline free on 1-833-372-8311. Our page on the first 48 hours covers the bank conversation in detail.
Check anything before you act on it
Look up a phone number, website, or email here. Free, no sign up, about ten seconds.
What Do You Think?
No one has commented yet. If this happened to you as well, say so below. Knowing that other people had the same call makes it far easier for the next person to trust their instincts.
Add Your Comment
Every comment is read by a person before it appears, so it will not show up straight away. Never post your phone number, address, or bank details here.