The shape underneath all of them
Almost every scam has to achieve three things: compress your time, keep you away from anyone who would question it, and get paid in a way that cannot be undone. Every signal below is one of those three showing through.
Which is why the useful question is not “does this seem legitimate” — a good scam does — but “is something removing my ability to check”. That question is much harder to defeat, because removing your ability to check is the one thing the scam cannot do without.
Pressure to act immediately
Deadlines, countdowns, a limited stock, an account about to be closed, a warrant about to be issued. Urgency is not a side effect of these stories; it is the point of them. Time is what checking requires, so time is what has to be taken away.
Genuine organisations impose deadlines, but they do not require that you act inside the same conversation, and they do not treat your wanting to verify as the problem. Slowing down deliberately costs almost nothing when a request is real and defeats most requests that are not.
Requests for unusual payment methods
Gift cards, crypto, bank transfer to an individual, a peer-to-peer payment marked as a gift. This is the most reliable single signal there is, because the scam cannot compromise on it — the money has to be unrecoverable.
No tax authority, court, utility, employer or legitimate retailer is paid in gift-card codes. If the method has been chosen for you, and the chosen method happens to be one you cannot dispute, that is the answer.
Suspicious or shortened links
A shortened link hides where it goes, which is occasionally convenience and often the reason it was used. The same applies to a link whose visible text is a familiar brand while the destination is not, and to a QR code, which is a link you cannot read at all.
The habit that helps: reach important destinations by typing the address yourself or using your own bookmark, and treat a link that arrives with a request for money or credentials as untrustworthy regardless of who appears to have sent it.
Impersonation of people or brands
Borrowing an identity you already trust is cheaper than building one. It appears as a spoofed caller ID, a lookalike domain, a cloned storefront, a copied social profile, or a message from a relative on a new number.
The counter is not detection but independent contact: reach the person or organisation through a channel you already had. Call the relative's existing number. Type the bank's address yourself. If the approach is genuine, nothing is lost by arriving from the other direction.
Unrealistic promises or guaranteed returns
Guaranteed returns, a fixed daily percentage, a risk-free opportunity, a price far below anyone else's. Return and risk are not separable, and a guarantee of the first with none of the second is not an unusually good offer but a different kind of thing.
Watch for the accompanying framing too: an opportunity that is closing, an insider or exclusive channel, and other people apparently already profiting. Those are there to make the impossible part feel like a detail.
Requests for sensitive personal information
One-time passcodes, full card numbers, passwords, a seed phrase, remote access to your device, a photo of your ID held next to your face. These are requests for control, whatever they are framed as.
A one-time code deserves particular care: it exists to authorise something happening right now, and reading it out authorises whatever the person asking is doing. Nobody legitimate — no bank, no platform, no support agent — ever needs it.
Unexpected payment or refund requests
A refund you did not ask for, an overpayment to return, a small fee to release a parcel or a prize, a duplicate invoice. Two things are happening: an unexpected request is being made to feel routine, and in the refund variants you are being asked to move money that is not yours.
Money arriving in your account does not make it yours, and fraudulent payments are reversed long after they appear. Any transaction where you receive money and are then asked to send some onward should stop there.
Inconsistent business information
A company number that does not resolve, an address that is a residential flat, a founding date that predates the domain, policy pages that appear verbatim on unrelated sites, a contact page with no way to reach a person.
These matter because they are expensive to fake consistently. Anyone can write “established 2011”; making the registration record, the company register and the review history agree with it is a different order of effort. Check the things that take time to build rather than the things that take an afternoon.
One sign is a reason to check, not a verdict
Legitimate businesses run genuine flash sales, real couriers send fee requests, and plenty of honest small traders would rather take a bank transfer. Treating any single item here as proof will have you wrong regularly.
It is the combination that is diagnostic, and especially the combination of urgency, isolation and an irreversible payment method. When those three arrive together, the request is being engineered — and the right response is not to decide, but to check somewhere the person asking does not control.
Frequently asked questions
What is the single most reliable warning sign?
How do I tell a genuine urgent message from a scam?
Is it a scam if only one of these signs is present?
Related guides
- How to Check if a Website Is a ScamSeven checks you can run on a suspicious website in minutes: the real domain, its age, contact details, payment methods, off-site reviews and community reports.
- Romance Scam Warning SignsHow romance scams are structured, the tells that appear before any money is mentioned, and how to check someone you have only met online.
- What to Do if You Have Been ScammedThe first steps after a scam, in the order that matters: stopping payments, contacting your provider, securing accounts, preserving evidence and reporting it.
The app
Check before you send money
Look up a website, phone number, payment account or crypto wallet against what the community has already reported.
Store links appear here as soon as the app is published in your region.
Scan to Download