Financial scams do not look like scams. That is the whole point of them. They look like your bank, your delivery company, a tax office, a friend in trouble, an investment opportunity that a colleague swears by, or a person you have come to trust over weeks of messages. The people who fall for them are not stupid; they are busy, or frightened, or hopeful, at the moment the message arrives.

This guide is about recognising the shapes, because the shapes barely change, only the costumes.

The seven shapes

1. The “safe account” call. Someone calls claiming to be your bank’s fraud team, or the police. Your account is under attack, they say, and you need to move your money to a “safe account” right now. The safe account is theirs. Real banks never ask you to move money to another account to protect it. Never.

2. The impersonated authority. An email, text or call from “the tax office”, “customs”, “the police”, “the court”, telling you that you owe money, that a parcel is held, or that a warrant exists, and that you must pay now, usually by an unusual method. Real authorities do not demand immediate payment by gift card, crypto, or transfer to a personal account, and they do not threaten arrest on the phone.

3. The investment that cannot lose. Guaranteed returns, a limited window, a platform with a slick dashboard showing your money growing. It is very often crypto, because payments in crypto cannot be recalled. The dashboard is fake; the “profits” are numbers on a screen; the moment you try to withdraw, there is a fee, then a tax, then silence. Anyone promising returns without risk is describing something that does not exist.

4. The relationship. Weeks or months of genuine-seeming conversation, on a dating app or social media, before money is ever mentioned. Then a crisis, or an investment tip from someone who “cares about you”. This one causes the largest individual losses of any scam, and its victims are the least likely to report it, because of shame that belongs entirely to the criminal.

5. The recovery. If you have lost money to a scam, expect a second one: someone claiming to be a lawyer, an agency, or a specialist who can recover it, for an upfront fee. They are often the same criminals, working from the same list.

6. The phished login. A link in a text or email that leads to a perfect copy of your bank’s or a service’s login page. You type your details; they now have them. The link is the tell: hover over it, or check the address, and it is never quite the real one.

7. The friend or family in trouble. A message from a new number: “Mum, I’ve lost my phone, this is my new number, I need to pay a bill urgently.” Sometimes now with a cloned voice. Call the old number. Ask something only they would know.

The tells

Across all seven, the same signals appear, and any one of them should stop you:

  • Urgency. You must act now, today, before the end of the call. Real institutions can wait until tomorrow.
  • Secrecy. Do not tell your bank, your family, your partner. Anyone telling you to keep a financial decision secret is not on your side.
  • An unusual payment method. Gift cards, crypto, a transfer to a personal account, a courier collecting cash or a card. No legitimate organisation is paid this way.
  • Being told what to say. “If the bank asks, tell them it’s for a car.” Coaching you to lie to your bank is the scam admitting what it is.
  • Contact you did not start. They called you. They messaged you. The safest response to any unexpected financial contact is to end it and go to the organisation directly, through the number on your card or the website you type yourself.

What no real organisation will ever do

Keep this list. It is short, and it ends most scams on the spot.

  • Ask you to move money to a “safe account”
  • Ask for your full password, PIN, or the code a bank sends to your phone
  • Ask you to download software so they can “help” with your computer or phone
  • Ask for payment in gift cards or crypto
  • Tell you not to discuss it with anyone
  • Threaten arrest or legal action for a debt you did not know about, by phone

The first hour, if one lands

Speed matters more than anything, because banks can sometimes stop or recall a payment in the first hours and rarely after.

  1. Stop all contact. Hang up, do not reply, do not click anything further.
  2. Call your bank, on the number on the back of your card, not any number you were given. Tell them exactly what happened and which payments. Ask them to stop or recall what they can, and to watch the account.
  3. Change the passwords for anything the scammer may have seen, starting with email, because email resets everything else.
  4. Report it. In the UK, to Action Fraud; in Cyprus, to the police cybercrime unit; elsewhere, to the national fraud reporting body. Reporting does not usually recover money, but it is what lets banks and police see patterns, and it is needed for any later claim.
  5. Tell someone. Shame is the scammer’s best tool. Telling a family member or friend removes it, and protects them from the same list.

Reducing the odds in advance

Two-factor authentication on email and banking, using an app rather than text where possible. A password manager, so that every account has a different password and a phished one does not open the rest. A conversation with older relatives about the seven shapes above; they are targeted most, and forewarned is most of the defence. And a record of what exists: which accounts, which providers, where. If something is compromised, knowing the full picture in minutes rather than days is the difference. Our Digital Estate Organiser was built for that purpose.

Where this fits

This is Module 17 of our Financial Literacy Course: the scams that target each generation, and exactly what to do. It closes the digital finance guides that begin with how blockchain and crypto actually work and the four risks nobody mentions, because the third of those risks, irreversibility, is the reason most of these scams now ask for crypto.

Educational guidance, not regulated financial advice. If you have been the victim of fraud, contact your bank immediately and then the national fraud reporting body. Nothing here replaces advice from a regulated adviser who knows your full circumstances.