How to Spot a Scam: 7 Warning Signs and What to Do

Scam stories change constantly. The warning signs change much less.

An unexpected contact that creates urgency, demands secrecy, controls how you verify the story, or insists on a hard-to-reverse payment deserves a pause. One sign does not prove fraud, but it is enough reason to stop and check through a separate channel.

The most useful response is simple: pause, end the contact, and verify independently. Call the person, bank, business, or agency through a phone number or app you already trust—not the number, link, or caller ID supplied by the stranger.

Seven common scam warning signs

1. The contact was unexpected

The call, text, email, social message, pop-up, letter, or visitor appeared without a request from you. Unexpected contact is not automatically fraudulent, but it means the sender has not earned trust simply by knowing your name or a few personal details.

2. You are pushed to act immediately

The story says an account will close, a family member is in danger, a prize will disappear, police are on the way, or an investment window ends today. The pressure is designed to keep you from checking.

3. You are told to keep it secret

The person says not to call the bank, branch, police, family, lawyer, or another trusted person. Secrecy removes the independent voice most likely to challenge the story.

4. The sender controls the verification

They tell you which number to call, which website to open, or which “supervisor” can confirm the request. A real verification uses contact information you found independently.

5. The payment method is difficult to reverse

Unexpected requests for gift cards, cryptocurrency, cash to a courier, wire transfers, or payment-app transfers deserve special caution. Scammers choose methods that move quickly and may be difficult to recover.

6. You are asked for a code, password, or sensitive number

Someone who contacted you asks for a one-time security code, PIN, password, Social Security number, Medicare number, remote computer access, or full bank login. A security code is often the key to completing a transaction or taking over an account.

7. The promise or threat resists ordinary questions

A guaranteed return, surprise prize, secret government payment, urgent family emergency, “safe account,” or romantic relationship falls apart when you ask to verify it another way. The sender may become angry, repeat the deadline, or change the subject.

Use the pause-and-verify test

When a request feels suspicious, use this five-step test before sending money or information.

1. Pause. Do not pay or share a code during the incoming contact.
2. End the contact. Hang up, close the message, or step away from the visitor.
3. Find the official channel yourself. Use the number on a card or statement, the official app, or a website address you type directly.
4. Verify the underlying story. Call the family member, agency, bank, or business through that separate channel.
5. Ask another trusted person. A second opinion breaks the secrecy and urgency the request depends on.

Caller ID, a familiar logo, a convincing voice, or personal details do not replace this process. Names and numbers can be spoofed, leaked, or copied.

Different stories, the same pressure pattern

The story	What the scammer may ask for	The separate check
“Your bank account is under attack”	A one-time code or transfer to a “safe account”	End the call and contact the bank through the card or official app
“Your grandchild is in trouble”	Wire, gift cards, cash, or secrecy	Call the family member on a known number and contact another relative
“You owe a government fine”	Immediate payment or personal information	Find the agency’s official website and contact it directly
“Your computer is infected”	Remote access, software, or payment	Close the pop-up and contact a trusted technician independently
“This investment cannot miss”	Cryptocurrency, wire, or rapid account access	Pause and verify the person and firm through official regulators
“You won a prize”	A fee, tax, or banking information	Do not pay to receive an unexpected prize; verify the organization separately
“I love you, but I need help”	Repeated transfers and secrecy	Slow down, speak with someone trusted, and verify the person’s identity and story

For current scale and reporting data, see KinKeeper’s sourced elder fraud statistics. Statistics show the size of reported harm; they do not tell whether one message is fraudulent.

What to do with a suspicious message in front of you

• Do not click its link, call its number, or reply with personal information.
• Take a screenshot or save the message if it can be done safely.
• Contact the person or organization through an independent channel.
• If it is an email or text, ScamScan can provide a plain-language review of common warning signs.
• Report confirmed or attempted fraud to the appropriate institution and ReportFraud.ftc.gov.

ScamScan is a second opinion, not proof. A low-risk result cannot guarantee a message is safe, and a flagged pattern does not establish that a crime occurred.

How to help an older parent without blame

Scams targeting seniors may use bank, government, family-emergency, romance, investment, tech-support, health, prize, or home-repair stories. Age does not make someone gullible. These scripts are built to pressure thoughtful people before they can compare notes.

Build a family rule before the next request:

• No unexpected payment happens during the first call or message.
• The older adult chooses one or two people they can call without embarrassment.
• Family members verify the story rather than arguing about whether the caller sounded real.
• Account alerts or statement reviews are added only with the account holder’s permission.
• A mistake triggers practical recovery steps, not ridicule or loss of control by default.

For a fuller consent-led plan, use how to protect an aging parent’s money from scams. If someone the older adult knows may be taking or controlling money, follow the separate elder financial abuse signs and reporting guide.

If money or information already moved

Act quickly and use the company involved in the payment. The FTC recommends asking the card issuer, bank, wire company, payment app, gift-card issuer, cryptocurrency company, or delivery service whether the payment can be stopped or reversed. Secure exposed passwords or accounts and use IdentityTheft.gov if personal information was shared.

Then report the incident:

• ReportFraud.ftc.gov for consumer scams;
• IC3.gov for internet-enabled fraud; and
• local Adult Protective Services or law enforcement when an older adult may be exploited by someone they know.

People who already paid are often targeted again by refund or recovery scams. Do not pay an unexpected caller who promises to recover the money for an upfront fee.

Where KinKeeper Money fits

KinKeeper Money provides read-only Transaction Monitoring for supported accounts and can bring unusual activity forward for human review. It cannot move money, block a transaction, prove fraud, or guarantee that a loss will be prevented.

If the account holder wants an added review layer, join the Money waitlist for launch updates. Keep the financial institution’s own alerts and the family’s pause-and-verify rule in place.

Sources and review note

This guide was updated July 24, 2026 and should be reviewed by July 2027, or sooner if reporting routes or KinKeeper availability changes.

• What Are the Signs of a Scam?, Federal Trade Commission.
• What To Do if You Were Scammed, Federal Trade Commission.
• Refund and Recovery Scams, Federal Trade Commission.
• Elder Fraud, FBI Internet Crime Complaint Center.
• Common Types of Scams, Consumer Financial Protection Bureau.