The scams landing most often at the moment — what each one sounds like, and the single thing that gives it away.
The biggest one, and the costliest. Bank impersonation now accounts for the heaviest losses of any impersonation scam the Federal Trade Commission tracks.
How it opens: a call or text about a suspicious charge — often for something plausible, in a city you've never visited. The caller is calm and helpful and is protecting you. They know your name and the last four digits of your card.
The tell: at some point they need a code, a PIN, a security code, or for you to move money to a "safe account." A real fraud department never needs any of those.
What to do: hang up, call the number on the back of your card.
Rarely a scam on its own — it's the final step of most of the others, and worth knowing as its own thing.
How it opens: anywhere. A "verification" call, a marketplace buyer confirming you're real, a support agent proving your identity, a website asking you to re-enter a code.
The tell: the request itself. The text carrying that code nearly always says, in small print, that no one from the company will ever ask for it.
What to do: never share it, never type it anywhere except the app or site you opened yourself. If someone asked, an attempt to break into your account is happening at that exact moment.
How it opens: a call, often late at night or very early. A grandchild in an accident, arrested, stranded abroad, phone broken. Sometimes a "lawyer" or "officer" takes over. Money is needed now, and please don't tell mom and dad.
The tell: emergency + secrecy + an unusual payment. The voice sounding exactly right is no longer evidence of anything — a few seconds of audio is enough to copy anyone's voice.
What to do: hang up and call that person's own number. Ask for the family safe word. Call another relative. A real emergency survives a two-minute check.
The Federal Trade Commission has reported a more than four-fold rise since 2020 in older adults losing $10,000 or more to people impersonating trusted agencies and businesses.
How it opens: your Social Security number has been "suspended" over suspicious activity. Unpaid tax with a warrant attached. A new Medicare card that needs your number to release. An unpaid toll or traffic fine by text.
The tell: agencies don't work this way. They don't call to threaten arrest, they don't demand payment by gift card, wire, or cryptocurrency, and Social Security numbers are not "suspended" — that isn't a thing that exists.
What to do: hang up. If you're unsure, look the agency up yourself and call their published number.
How it opens: a delivery couldn't be completed, a small customs fee is due, or an unpaid road toll needs settling before a penalty. Always a link, always a small believable amount.
The tell: the web address isn't the real one. And the amount is small on purpose — it's not really about the $6.99, it's about capturing your card details.
What to do: don't tap. Check in the carrier's own app or the toll authority's real site. Forward to 7726, then delete.
How it opens: a full-screen virus warning with an alarm and a support number, sometimes after a mistyped web address.
The tell: the phone number. No technology company puts one on your screen. Ever.
What to do: close the browser, or hold the power button to shut down. Never call, never allow remote access.
How it opens: a tidy email receipt — antivirus, a tech support plan, a subscription — for $399, auto-renewing today. "If you didn't authorize this, call us to cancel."
The tell: there's no link to click, just a number to call, because the whole email exists to make you phone them. Then they need remote access to "process your refund," and steer you into your banking.
What to do: don't call. Check your actual card statement and the real account with that company. If there's no charge, delete the email.
The slowest of them all, and financially the most devastating. It's also the one most people have never heard of — which is exactly why it works.
How it opens: a stray text. Warm, ordinary, and completely harmless-looking. No link. No request. Nothing to be suspicious of. Here is a real one, received locally in August 2026:
That's the entire opening move. The goal isn't to trick you — it's just to get a reply. Answer it in any way, even politely to say they have the wrong number, and a conversation has started.
What happens next: they're gracious and apologetic, then chatty, and they stay in touch. Weeks of genuine-feeling friendship follow, sometimes romance. Eventually there's an investment they're doing well from — usually crypto, on a real-looking platform where your balance climbs beautifully. Small withdrawals even work at first.
Two tells, from the person who actually received that text:
And the shape underneath: the relationship arrived uninvited, has never appeared in person, and eventually involves money. Withdrawals stalling behind a surprise "tax" or "release fee" is the end of the story, every single time.
How it opens: you list a sofa. A buyer, keen and pleasant, wants to check you're a real seller and sends a code to your phone to confirm.
The tell: there is no such verification. The code is for an account they're opening in your name, using your number.
What to do: never share it. Keep the whole conversation inside the platform's own messaging.
How it opens: a text or social media message offering simple remote work — rating products, liking videos, "optimizing" listings. Small payments really do arrive at first.
The tell: at some point you must deposit your own money to unlock the next set of tasks or release your earnings.
What to do: a job that requires you to pay is not a job. Real employers don't recruit by text.
How it opens: weeks after you've been scammed. A recovery firm, a lawyer, an investigator — someone who knows real details of what happened to you, because victim lists get sold.
The tell: an upfront fee. Nobody legitimate charges one to recover scam losses.
What to do: see If it already happened. Real recovery runs through your bank and the official reporting sites, and nowhere else.
Every single one dies the moment you stop and check through a channel you chose.
You don't have to keep up with the list. Next year's stories will be different and this defense will be identical.