Digital Life · Verify
The anatomy of a scam.
A fake IRS agent, a broken laptop, a new online romance, a can't-miss investment. Four different stories, one underlying design. Learn the design once.
What this page covers
One design, dressed up four different ways.
Imposter scams topped $3.5 billion in reported losses in 2025 alone, and they have been the most-reported scam category for nine years running.[1] Tech support, romance, and investment scams add billions more.[2] The costumes differ. The mechanism underneath does not.
This page is recognition only. It teaches the pattern and the four common typologies so you can name a scam while it is still happening. If money has already moved or your identity is at risk, the fraud and identity theft guide covers the response, step by step.
The three levers
Every version pulls the same three strings.
Once you can name these three, the surface story stops mattering. A fake grandchild, a fake IRS agent, and a fake sweetheart all pull the same levers.
01
Urgency
The story removes your time to think. Money is needed in minutes because an hour is enough to check the story and see it fall apart.
02
Secrecy
You are told to keep it quiet, from a spouse, a bank teller, or a grown child. Secrecy exists to stop the one phone call that ends the scam.
03
Untraceable payment
Gift cards, wire transfers, and cryptocurrency are demanded because they are nearly impossible to reverse once sent.
A real emergency, a real refund, and a real relationship all survive you taking ten minutes to check. If a request cannot survive that pause, the request is the problem, not your caution.
The payment-method risk hierarchy
The payment method determines whether you can get the money back. Scammers insist on irreversible methods for exactly this reason. Understanding which methods have protections and which do not is a core consumer skill.
Credit card (strongest protection)
Federal law limits liability for unauthorized charges. The Fair Credit Billing Act provides a dispute process for billing errors and charges for goods not delivered. Chargebacks create a dispute process the seller must respond to. This is why scammers never ask for credit card payment.
Debit card (moderate protection)
Some fraud protection exists, but the money leaves your bank account immediately. Recovery takes longer than credit card disputes, and the money is gone from your account during the investigation. Liability limits depend on how quickly the loss is reported.
Payment apps (limited protection)
Person-to-person payment apps are designed for sending money to people you know. Once sent, recovery depends on the app's policies and the recipient's cooperation. The CFPB has addressed certain unauthorized-transfer protections, but "authorized" transfers where you were tricked into sending money are much harder to reverse.
Wire transfer, gift cards, cryptocurrency (no practical protection)
Once sent, the money is gone. Wire transfers clear within hours. Gift card numbers can be drained within minutes. Cryptocurrency transactions are recorded on a blockchain but are not reversible. If someone you do not know insists on any of these three, the transaction is a scam until proven otherwise. No legitimate business or government agency demands payment by gift card.
Four common costumes
Same design, different disguise.
Imposter scams
A caller or message claims to be the FTC, the IRS, Social Security, your bank's fraud department, or a family member in trouble. Real government agencies do not call to demand immediate payment or threaten arrest over the phone, and they will never tell you to move money to "protect it."[3] Reported losses to imposter scams reached $3.5 billion in 2025.[1]
Tech support scams
A pop-up, a fake virus alert, or an unsolicited call claims your device is compromised and offers to fix it for a fee, often asking for remote access or payment by gift card. A legitimate company does not contact you first about a problem on your own device.[4] The FTC has returned more than $25 million to consumers harmed by one such scheme alone.[5]
Romance scams
An online relationship, often built over weeks on a dating app or social media, moves toward talk of love and then toward a request for money, framed as an emergency, a stuck shipment, or a shared investment. The relationship never survives a video call or an in-person meeting. Reported losses reached $1.16 billion in the first nine months of 2025, and nearly six in ten of those cases started on social media.[2]
Investment scams
An offer promises high returns with little or no risk, often through cryptocurrency, and pushes you to decide quickly before you can research the company. Every legitimate investment carries risk, and anyone who says otherwise is not legitimate.[6] Reported losses hit $7.9 billion in 2025, the highest of any scam category, with a median loss over $10,000.[7]
Subscription traps and negative-option billing
A "free trial" that quietly converts to a paid subscription, a service that is easy to sign up for but requires a phone call, a letter, or a multi-step process to cancel, or a recurring charge buried in terms most people do not read. The FTC has taken enforcement actions against companies using negative-option billing, where consumers are charged automatically unless they take specific cancellation steps. Before any free trial: identify the post-trial price, the cancellation deadline, the cancellation method, and set a calendar reminder. Keep a screenshot of the terms and confirmation of cancellation.
Advance-fee loan scams
An offer guarantees loan approval regardless of credit history, but requires an upfront fee for "processing," "insurance," or "verification" before the loan is disbursed. The FTC states that legitimate lenders do not guarantee approval before reviewing a credit application, and they do not collect fees before providing the loan. The fee is the product. The loan never arrives. If approval is guaranteed before anyone looks at your credit, the guarantee is the scam.
Adjustments
Fitting this to your household.
Older adults in the household
Older adults report the highest median losses of any age group.[8] Share the three levers as a conversation, not a warning. Falling for a professional script is not a character flaw.
Anyone active on social media
Romance and investment scams increasingly start with a stray message or comment. Tightening privacy settings reduces how much a stranger can learn before the first contact.
Anyone managing money for someone else
If you help a parent or relative with finances, agree in advance that no transfer happens without a second person's sign-off. That single rule closes most of these scams by itself.
Common mistakes
Where good judgment gets talked out of the room.
Trusting caller ID or a familiar name. Phone numbers and profile photos are both easy to fake. Neither one proves who is actually on the other end.
Assuming it could not happen to you. These scripts are written and rehearsed by professionals, and they are tested against people who consider themselves careful. Confidence is not a defense. A pause is.
Staying quiet out of embarrassment. Secrecy is the scam working as designed. Telling one other person, even mid-call, is often what breaks it.
Treating a partial win as proof it is real. Some investment scams let an early "profit" show up on a dashboard to build trust before the real request for money arrives. A number on a screen is not money in your hand.
Your defense
The five-minute scam pause.
Every scam needs you to act before you think. This framework gives you five questions that take less than five minutes. If the request is legitimate, it survives all five. If it does not survive even one, stop.
Am I being told to act right now?
Urgency is manufactured. Real deadlines come with written notices and days or weeks of lead time, not minutes.
Am I being told to keep this quiet?
If the caller says not to tell your bank, your family, or anyone else, that instruction exists to prevent the one phone call that ends the scam.
Am I being asked to pay with gift cards, wire transfer, or crypto?
No government agency, no bank, and no legitimate business accepts these as standard payment. Any request for them is a stop sign.
Did I initiate this contact, or did they find me?
Scams arrive. You did not call the IRS; they called you. You did not search for tech support; a pop-up appeared. If you did not start it, verify independently before responding.
Can I verify this through a channel I control?
Hang up and call the organization directly using a number from their official website or from a statement you already have. Do not call the number the caller gave you. Do not click the link in the message. Use your own path.
Print these five questions and keep them near the phone. Share them with anyone in the household who answers calls or manages money. The pause is the defense. Everything else is detail.
Next steps
Where to go from here.
The family code word
A five-minute plan that defeats the urgency lever even when a voice sounds exactly right.
Make your plan →
Digital Life
The full section: protect, verify, and respond, at household pace.
Open the section →
If money already moved
The step-by-step response guide, written shame-free.
Get the response guide →
Sources
- FTC. "Data show people reported losing $3.5 billion to imposter scams in 2025." 2026. ftc.gov
- FTC. "New FTC Data Show People Have Lost Billions to Social Media Scams." 2026. ftc.gov
- FTC. "How To Avoid Imposter Scams." consumer.ftc.gov
- FTC. "How To Spot, Avoid, and Report Tech Support Scams." consumer.ftc.gov
- FTC. "FTC Sends More than $25.5 Million to Consumers Impacted by Tech Support Firms' Scam." 2025. ftc.gov
- FTC. "Investment Scams." consumer.ftc.gov
- FTC. "With people losing big to investment scams, learn how to spot and avoid them." 2026. consumer.ftc.gov
- FTC. "FTC Issues Annual Report to Congress on Agency's Actions to Protect Older Adults." 2025. ftc.gov
This page was last reviewed in July 2026. Digital guidance changes faster than most preparedness topics. If that date is more than a year old, confirm key steps against the sources above before acting on them. Scam loss figures carry the report year they were published in and should be treated as illustrative of scale, not as this year's exact number.
Enough for now
You are prepared enough when...
- You can name the three levers, urgency, secrecy, and untraceable payment, without looking them up.
- You know that any request to pay by gift card, wire, or cryptocurrency is a stop sign, no matter who is asking.
- You have agreed with anyone whose finances you help manage that no transfer happens without a second person's sign-off.
- You know where to report a scam, before you ever need to report one.
Look at this again if a new scam story starts making the rounds, or once a year to keep the pattern fresh.
This guide is part of When Something Looks Off - all the guides for this concern in one place.