The tells

Short enough to actually remember when it counts — which is the only kind of list that works.

You will not spot a scam by noticing bad spelling. Modern ones are well written, well designed, and often polite. What they cannot hide is their shape: something urgent, something secret, and something they need you to hand over. That shape is what you learn to feel.

The five

It came to you. You didn't start this. Any contact they initiated — call, text, email, pop-up, knock at the door — starts at zero trust, no matter who it appears to be from.
There's a clock. Act now. Today only. Your account closes in an hour. Your grandson is in a cell. Urgency isn't a detail of the story; urgency is the technique. It exists to stop you checking.
There's a secret. "Don't tell your family." "Don't mention this to the teller — it's an internal investigation." No legitimate organization on earth asks you to keep a transaction from the people close to you. This one tell, on its own, is enough.
They need something only you can give. A code, a PIN, a password, remote access to your computer, a payment. Real institutions have your records already. They don't need to be let in.
The payment is strange. Gift cards, wire transfer, cryptocurrency, a payment app to a stranger, cash in an envelope, a courier coming to collect. No refund, no reversal, no trace — which is precisely why they asked.

💡 You only need one These aren't points to add up. Any single one of the five is reason enough to stop and verify independently. Two of them together is a scam until proven otherwise.

What a real bank will never ask you for

Print this bit if you print nothing else. Not "rarely." Not "only in special cases." Never — not on the phone, not by text, not by email, not on a website they sent you to:

Your PIN. Not the digits, not "just the first and third," not "type it on your keypad."
The security code on the back of your card — the CVC or CVV.
Your full card number on a call they placed to you.
Your online banking password.
A one-time code they just texted you. This one matters most — read the next box.
Permission to connect to your computer or phone.
You to move your money to a "safe account" for protection. No such thing exists. That sentence is a scam, whole and complete.

⚠️ The one-time code is the crown jewels That six-digit number texted to you is the last lock on your account. It exists because everything else can be stolen. Anyone asking you to read one aloud, type it into a website, or "confirm it so we know it's you" is trying to get into your account right now, while you're on the phone with them. The message itself almost always says so in small print. There is no legitimate reason for another human being to ever learn that number.

Things that feel like proof — and aren't

The caller ID matched. Anyone can set it to anything. It costs nothing. Treat it as the caller's claim about themselves, which is all it has ever been.
They knew my last four digits. So do the dozens of companies that have been breached over the last decade, and anyone who buys those lists. Same for your address, your birthday, your employer, and sometimes a recent purchase.
They sent a confirmation email. Proves they have your email address. Nothing more.
The website looked perfect. It was copied. That takes minutes.
The padlock icon was there. It means the connection is encrypted, not that the company is honest. Scam sites have padlocks too.
It sounded exactly like my daughter. Voices can be copied from a few seconds of audio. See how they reach you.
They told me to watch out for scams. A favorite move. It buys enormous trust for one sentence of effort.

And the quiet one: how you're feeling

This is the tell that catches the ones the list misses.

Scams are engineered to produce a state of mind — fear, urgency, excitement, flattery, or the particular fog of being interrupted while you're busy with something else. If you notice your heart going, or that you're being hurried, or that you've been on the phone for twenty minutes doing what someone told you to do, that feeling is the alarm. Not proof of a scam. Reason to stop and check.

The gentleman whose story opens this guide didn't miss the warning signs because he didn't know them. He missed them because he was at work, distracted, and the call was aimed exactly at that moment.

Permission you may need to hear

You are allowed to hang up on anyone, for any reason, without explaining.

You don't owe a caller politeness, an excuse, or the end of a sentence. A real organization will never be offended that you called them back. This is the whole skill.

‹ Back to the guide