Online Scams: Common Types, How to Spot Them, and What to Do Next

The message looked convincing when you first read it. Now you are wondering whether you clicked the wrong link, trusted the wrong person or sent money you will never see again.

That uncertainty can be frightening. It can also make you rush into another mistake: replying to the sender, paying a new fee or following instructions from someone who claims they can fix everything.

Pause for a moment. You do not need to know the exact name of an online scam to take the right first step. You need to work out what the person wanted, what you did and which account, payment or piece of information may now be at risk.

This guide will help you do that. First, find the situation that matches yours. Then learn how common internet scams work, how to check a suspicious claim and what to do next.

Online Scam? Start With What Happened

If you think you have encountered a scam online, use the first step that fits your situation. You can investigate the full story afterward.

Act quickly where money or account access is involved. You can gather screenshots and investigate the person once the immediate risk is contained.

What Are Online Scams?

Online scams are deceptive schemes that use the internet to obtain money, personal information or access to accounts and devices. They can arrive through email, a website, a search advert, social media, a dating app, an online store or a messaging platform.

The conversation may even move between them. A person sees an advert, chats with a supposed seller on WhatsApp and pays through a banking app. Another receives a phone call directing them to a fake login page.

The channel tells you where you met the scammer. To understand the danger, ask what they want you to do:

• Send money or change payment details
• Enter a password, card number or security code
• Share an identity document
• Install software or grant remote access
• Receive or transfer money for someone else
• Keep the request secret and act before checking it

The scam may have a convincing story behind it. Your safest decision comes from verifying the request outside the story.

Common Types of Online Scams

The following examples show how online fraud reaches people in everyday situations. A single incident can fit more than one type: a fake job offer might contain a phishing link, and an online relationship might lead to an investment scheme.

Phishing Emails, Texts and Fake Login Pages

A message appears to come from a bank, delivery company, retailer or service you use. It claims there is a problem: a payment failed, a parcel cannot be delivered or your account will be locked.

The link leads to a page asking you to sign in, pay a small fee or enter a one-time code. The page may copy the real organisation’s colours and logo. Its purpose is to collect what you type.

How to check it: Leave the message. Open the organisation’s app or type its known website address yourself. Look for the claimed problem there. Do not assume a message is genuine because it uses your name or arrives in the same thread as earlier messages.

A delivery fee may be small. The card information collected on the payment page is the larger risk.

Fake Online Stores and Marketplace Deals

You find an item at an unusually attractive price. The product photos look professional, reviews appear positive and the seller says stock is almost gone.

After payment, nothing arrives. In another version, the seller asks you to complete the purchase outside the marketplace, removing the usual record or protections. Sellers can be targeted too: a supposed buyer sends a payment screenshot and pressures them to ship before the money appears in their account.

How to check it: Look beyond the advert. Examine the seller’s history and return terms, search for independent information about the business, and confirm that the payment goes to the expected recipient. If you are selling, check your own account for cleared payment; a screenshot supplied by the buyer is not confirmation.

An attractive price alone does not prove fraud. Pressure to bypass checks makes the deal more concerning.

Fake Jobs and Online Task Scams

A recruiter offers flexible work with excellent pay. The interview is unusually short. Soon you are asked to buy equipment, provide sensitive documents or deposit money to begin earning.

Task scams take a different route. You complete simple activities on a website and see earnings accumulate. Then a “premium task” or negative balance appears. You must add your own money to continue or withdraw the displayed amount.

How to check it: Find the vacancy on the employer’s official site and contact the company through details you located yourself. Ask whether the recruiter and hiring process are genuine. Treat any instruction to deposit your own money to release supposed wages as a reason to stop.

The full hiring checks are in Job Scams: Fake Offers and How to Avoid Them.

Romance and Friendship Scams

An online relationship develops quickly. The person is attentive, remembers personal details and talks about a future together. Meeting in person remains impossible, however, and eventually an emergency requires money.

The request might be for travel, medical treatment, a work problem or access to funds supposedly trapped in another country. A photograph, voice note or video call can deepen trust, but none proves that the person making the request is who they claim to be.

How to check it: Look at the pattern across the relationship. What happens when you decline to pay or suggest an independent way to verify a claim? Does each solution lead to another reason you must send money?

Emotional closeness deserves respect. It should not remove your ability to ask questions.

Investment and Cryptocurrency Scams

A contact, advert or online group introduces an investment that seems to be working. A dashboard displays rising profits. Other group members share stories of successful withdrawals.

Then you try to take money out. You are told to pay a tax, verification charge or account-unlocking fee first. The balance on a website controlled by the person asking for payment is not proof that withdrawable funds exist.

How to check it: Verify the business and any claim of authorisation through the relevant official register in your country. Examine the terms for withdrawing funds before investing. If a stranger guarantees returns, creates a short deadline or requires a fresh payment to release your money, stop sending funds and contact your payment provider.

For a broader look at money-related schemes, read Financial Scams: Costly Schemes and How to Avoid Them.

Impersonation and Account Takeover Scams

Someone claims to be your bank, employer, a government official, a customer or a family member in trouble. They may know your name and refer to real events. The message might even come from an account you recognise.

Those details make the contact believable, but they do not establish who controls the account now. A scammer may copy a profile or gain access to a genuine account.

How to check it: Contact the person through a number or channel you already had. If the message claims to come from an organisation, use its official app or independently found contact details. Do not use the callback number supplied in the suspicious message.

Be especially cautious when the supposed solution involves moving money, sharing a login code or keeping the request secret.

AI Voice, Video and Image Scams

A voice sounds like your relative. A video appears to show a well-known person endorsing an investment. An online contact sends photographs that seem to support their identity.

Audio, images and video can be created or altered. Even genuine media can be paired with a false claim. Hunting for distorted hands or unnatural speech may provide a clue, but a convincing recording is not independent proof.

How to check it: Verify the request. Call your relative on a number you already know. Check the endorsement through the person’s established channels. Contact the organisation independently before acting on instructions supposedly given by its employee.

See What Are AI Scams? for a closer look at how these deceptions work.

Refund and Recovery Scams

This scam often arrives when someone is already distressed. A stranger says your lost money has been found and can be returned if you pay a fee or provide account details.

They may know the amount you lost or the name used by the original scammer. That knowledge is unsettling, but it does not prove they can recover anything.

How to check it: Contact the payment provider yourself through its official channel. Ask what options exist for the original transaction. Do not pay an unexpected caller to “unlock” recovered money, and do not give them access to your accounts.

How to Spot an Online Scam When the Details Look Real

Some online scams are obvious in hindsight. Others contain true names, familiar branding and plausible explanations. Rather than searching for one perfect warning sign, test the claim from outside the conversation.

Ask Who Initiated Contact

Did you request support, apply for the job or expect this payment instruction? Unexpected contact is a reason to check. It is not, by itself, a verdict.

For example, a legitimate recruiter may approach you. You can still verify that the person works for the company before sending documents.

Watch What Happens When You Slow Down

A scammer benefits when you act before thinking. They may say your account closes today, the product will sell in minutes or a loved one will suffer if you make a call.

The key question is whether you are allowed enough time to confirm the request. A real deadline does not make independent verification unreasonable.

Look for a Request That Changes the Normal Process

A buyer wants you to pay to receive money. A bank “fraud officer” wants you to transfer your savings. A recruiter wants a deposit before you can earn wages. An investor must pay a new fee to withdraw supposed profits.

Each request may come with an elaborate explanation. Step back and ask why the process has changed—and who receives the money or access if you agree.

Check Whether the Evidence Is Independent

A seller’s testimonials, a recruiter’s contract and an investment dashboard might all look persuasive. Yet the person seeking your trust may control every one of them.

Find a way to check that they do not control. Confirm a payment in your account. Call a company using a number you found separately. Check an investment authorisation with the relevant regulator. Ask a family member a question through a known contact method.

If every reassuring answer leads back to the person making the request, you have not finished checking.

Do Not Rely on Spelling or Appearance

A poorly written message can raise suspicion. A polished one can still be fraudulent. Likewise, a secure website connection protects the data travelling between your browser and that site; it does not prove the business is honest.

Judge the identity, the claim and the requested action together.

How to Check a Suspicious Website, Seller or Message

When you have time to investigate, follow a short sequence instead of opening more links from the same sender.

First, record the exact claim. Is the message about a missed delivery, a job, a payment problem or an account warning? Knowing precisely what you are checking stops the conversation from pulling you in several directions.

Next, find the real organisation yourself. Open an app already installed on your device or enter a website address you know. If you must search, inspect the result carefully before using it. A search result or advert can also point to a misleading site.

Then, compare details. Check the full website address, sender address, recipient name and payment instructions. Small differences matter, but an address that looks correct is only one piece of evidence.

Finally, make direct contact. Ask the company whether it sent the message, has the vacancy or changed its payment details. If you are checking a person, reach them through a number or account you already trusted before the suspicious request arrived.

You do not have to prove that someone intended to deceive you before deciding to pause a payment. If an important claim cannot be checked, waiting is a reasonable choice.

What to Do Next If You Fell for an Online Scam

Embarrassment can delay action. Set it aside. Tell the relevant provider what happened as clearly and quickly as you can. The steps below depend on what the scammer received.

If You Sent Money

Contact the bank, card issuer, payment app or transfer provider through its official channel. Give the transaction reference, recipient details and time of payment. Ask whether the payment can be stopped, recalled, disputed or investigated.

Different payment methods have different processes, and recovery is not guaranteed. Acting promptly gives the provider the best opportunity to explain what is available.

Keep copies of messages, receipts, account names and web addresses. Report the account or listing on the platform where you encountered it. Then watch for anyone who claims they can guarantee your money back for another fee.

If You Entered a Password or One-Time Code

Open the genuine service yourself and change the affected password. Change it anywhere else you reused it. Review recent activity and sign out of sessions you do not recognise, if that option is available.

Contact the service’s official support team if you gave away a one-time code, approved a login you did not request or can no longer access your account. Secure your email account too if it could be used to reset other passwords.

If You Shared Card or Identity Details

Contact your card issuer or the organisation responsible for the account or document. Tell them exactly which details you provided and where. Ask whether the card should be replaced, an account secured or further monitoring put in place.

The right response depends on the information and your country. A leaked email address, card number and identity document create different risks. Specific details help the organisation give you specific advice.

If Someone Accessed Your Device

End the connection. If remote access may still be active, disconnect the device from the internet. From a different device you trust, change passwords for important accounts and alert your bank if you opened a financial service during the session.

Get help identifying and removing any software the person installed. Do not assume closing the call removed their access.

If You Cannot Tell Whether It Was a Scam

Write a simple timeline. Who contacted you? What did they claim? Which link did you open? What did you enter, approve, download or pay?

That timeline gives you a clearer starting point and makes it easier to speak to a bank or support team. How to Know If You Are Scammed can help you assess the full sequence rather than one alarming detail.

How to Protect Yourself From Future Online Scams

You cannot keep a mental list of every fake shop, message and investment scheme. You can make the next unexpected request easier to handle.

Use different passwords for important accounts and turn on an extra sign-in check where available. Keep your device and apps updated. Before paying, confirm the recipient and the purpose of the payment in a channel you chose yourself.

Most of all, allow yourself to stop a conversation. You can say, “I’ll check this and get back to you.” A person with a genuine request may be disappointed by a delay. Someone trying to prevent verification is telling you something useful.

Talk to a person you trust if a request leaves you frightened, excited or ashamed. Explaining it aloud can reveal a missing detail and give you support while you take the next step.

Frequently Asked Questions About Online Scams

These answers cover common questions that may come up while you are checking a suspicious message or deciding what to do next.

Can An Online Scam Start With A Real Company Or Account?

Yes. A scammer may impersonate a company, copy its website or gain access to someone’s genuine account. Check an unusual request through contact details you obtained separately.

Is A Website Safe Because It Has A Padlock?

No. The padlock indicates a secure connection to the website you opened. You still need to establish that the website and the business behind it are genuine.

Should I Trust A Payment Screenshot From A Buyer?

Check your own payment account. A screenshot can be fabricated or show a transaction that does not mean you have received cleared funds.

I Only Clicked A Suspicious Link. What Should I Do?

Close the page and do not enter information or install anything it offers. If you downloaded software, entered a password or gave access to your device, follow the matching steps above. A click alone does not tell you whether an account was compromised.

Can Money Lost To An Online Scam Be Recovered?

It depends on the payment method and circumstances. Contact the payment provider immediately to learn which options apply. Anyone promising guaranteed recovery for an upfront fee deserves serious caution.

How Can I Report An Online Scam?

Report the account, listing or message to the platform where it appeared. If you paid, contact the payment provider. You can also report the incident to the appropriate fraud-reporting authority in your country. Keep the evidence and transaction details for those reports.

Which Online Scams Are People Encountering Most Often?

People frequently encounter fake delivery and bank messages, shops that take payment without sending the promised item, bogus job offers, romance scams and fraudulent investments. The details differ, but the request usually comes before you have had a fair chance to check whether it is genuine.

How Can You Check Whether Someone Online Is A Scammer?

Find a way to verify their claim that they do not control. For example, call a person on a number you already had, or visit a company’s website by entering its address yourself. Do not treat a profile, photograph or document sent by the person as proof of identity.

What Stories Do Scammers Use To Make People Act Quickly?

A scammer may say your money is at risk, someone you care about needs help or an offer is about to expire. The story creates a reason to act immediately and postpone your questions. Pause and check the claim independently before sending money or information.

One Independent Check Can Change What Happens Next

An online scam does not need a clumsy message to work. It may arrive through a familiar account, a beautiful website or a voice you recognise. The critical moment comes when that apparent proof is used to ask for money, information or access.

If you are deciding whether to act, step outside the conversation and check the claim through a route you control. If you have already acted, focus on what was exposed and contact the relevant provider now.

You may not be able to undo every step. You can still stop the next payment, secure an account, preserve the evidence and make a clearer decision from here.