Phishing — Fake Emails That Steal Your Information
Phishing emails pretend to be from trusted organizations like your bank, the IRS, or a delivery service. They create a sense of urgency to trick you into clicking a link, downloading an attachment, or entering personal information on a fake website.
These emails have become increasingly sophisticated. Modern phishing attacks often copy a company's branding pixel-for-pixel and use domain names that look nearly identical to the real thing.
Red Flags to Watch For
- Urgent language like "Your account will be closed in 24 hours"
- Sender email address doesn't match the real company domain
- Generic greetings like "Dear Customer" instead of your actual name
- Links that go to a different URL than displayed (hover to check)
- Unexpected attachments, especially .zip, .exe, or .html files
How to Protect Yourself
- Never click links in unexpected emails; type the URL directly into your browser
- Check the sender's full email address, not just the display name
- When in doubt, contact the company directly through their official website
Smishing — Text Message Scams
Smishing uses text messages to lure victims. Common themes include fake package delivery notifications, bank alerts, toll payments, and messages claiming you've won a prize. The short links in texts are especially dangerous because it's harder to verify where they lead on a mobile device.
Red Flags to Watch For
- Text from an unknown number claiming to be a company you use
- Shortened URLs (bit.ly, tinyurl) that hide the real destination
- Messages asking you to "verify" or "confirm" personal information
- Requests for small payments (e.g., $3.50 redelivery fee) to collect payment info
How to Protect Yourself
- Don't click links in texts from unknown numbers
- Check delivery status directly on the carrier's official website or app
- Forward suspicious texts to 7726 (SPAM) to report them to your carrier
Tech Support — Fake Virus Warnings & Support Calls
These scams start with a pop-up alert, a phone call, or an email claiming your computer is infected or your account has been compromised. The scammer offers to "fix" the problem remotely, then charges hundreds of dollars for fake services or installs malware to steal your data.
Tech support scams disproportionately target older adults and resulted in over $900 million in losses among adults 60+ in 2024.
Red Flags to Watch For
- Pop-ups that lock your browser and show a phone number to call
- Unsolicited calls claiming to be from Microsoft, Apple, or your ISP
- Requests to install remote access software (TeamViewer, AnyDesk)
- Payment demanded via gift cards, wire transfer, or cryptocurrency
How to Protect Yourself
- Legitimate companies never call you unsolicited about computer problems
- Close browser pop-ups by using Ctrl+W or force-quitting the browser
- Never give anyone remote access to your computer unless you initiated the support request
Impersonation — Government & Authority Scams
Scammers impersonate the IRS, Social Security Administration, law enforcement, or other government agencies. They claim you owe money, your Social Security number has been compromised, or there's a warrant for your arrest. These scams rely on fear and authority to override your better judgment.
Red Flags to Watch For
- Threats of immediate arrest, deportation, or legal action
- Demand for payment via gift cards, wire transfers, or crypto
- Pressure to act immediately with no time to think or verify
- Caller ID showing a government agency number (these are easily spoofed)
How to Protect Yourself
- Government agencies communicate primarily by postal mail, not phone calls or texts
- The IRS will never demand immediate payment or threaten arrest over the phone
- Hang up and call the agency directly using the number on their official website
Emotional Manipulation — Romance & Grandchild Scams
These scams exploit love and family bonds. Romance scammers build fake relationships online then ask for money. Grandchild scams involve a caller pretending to be a grandchild in an emergency who needs money right away. Both types target emotions to override critical thinking.
Red Flags to Watch For
- An online relationship that moves fast but the person always avoids video calls
- A "grandchild" calling from an unfamiliar number in a crisis
- Requests for money via wire transfer, gift cards, or cryptocurrency
- "Please don't tell anyone" — secrecy is a hallmark of these scams
How to Protect Yourself
- Verify by calling your grandchild back on their known phone number
- Create a family code word that only real family members would know
- Never send money to someone you haven't met in person
Test Your Scam-Spotting Skills
See how well you can identify scam tactics. Select the best answer for each question.
Social Media — Scams Targeting Teens & Gen-Z
Social media scams target younger users through fake account suspension notices, fraudulent job offers, crypto giveaway scams, and phishing DMs. These scams exploit the platforms where younger people spend the most time and often impersonate influencers, brands, or the platforms themselves.
Red Flags to Watch For
How to Protect Yourself