Phone Scams: How to Spot Them and Protect Your Money

A real bank will never phone you and ask for your full password, your PIN, or a code they just texted you. That single fact stops most phone scams cold. Scammers rely on hitting you with urgency and fear so you act before you think, and the people they target most are over 50, because that age group tends to answer the phone, stay polite, and have savings worth stealing.

Phone scams are a huge business. Criminals run them from call centres, send millions of automated texts, and follow scripts designed to rattle you. None of that means you are an easy target. Once you know the handful of tricks they use again and again, you can spot a scam in the first ten seconds and hang up with confidence.

This is everything worth knowing: the warning signs that apply to every scam, the specific scams aimed at older adults, the exact words to use to end a suspicious call, and what to do if you think you already gave something away.

The five warning signs that appear in almost every scam

Scams differ in their cover story, but the machinery underneath is nearly identical. If a call or text sets off two or more of these signals, treat it as a scam until you have proven otherwise through a number you looked up yourself.

The first sign is urgency. You are told you must act now: your account will be frozen, the police are on their way, the offer expires in an hour. Real organisations give you time. Pressure exists to stop you pausing to think or to call someone you trust.

The second sign is a request for secrecy. "Don't tell the bank staff why you're withdrawing the money." "This is a confidential investigation." No legitimate caller ever needs you to keep a transaction secret from your own bank or family. Secrecy exists only to keep you from being talked out of it.

The third sign is an unusual payment method. You are asked to pay with gift cards, a wire transfer, cryptocurrency, or by moving money to a "safe account." Banks, government offices, and utility companies do not take gift cards. The moment someone mentions buying iTunes, Amazon, or Google Play cards to settle a bill or a fine, you are talking to a thief.

The fourth sign is a request for codes or passwords. A scammer may trigger a real verification text to your phone, then ask you to read the code back to them. That code is the key to your account. Never read out a code, a password, or a PIN to anyone who phoned you, no matter who they claim to be.

The fifth sign is that they called you. Scams almost always start with an incoming contact you did not arrange. The caller ID can be faked to show your bank's name or a local number, so you cannot trust what the screen says. If in doubt, hang up and call the organisation back on the number printed on your card or your last paper statement.

Use this table as a quick reference. These are the most common phone scam types, how each one is run, the single detail that gives it away, and your safest response.

The scams aimed specifically at older adults

Several scams are tuned for an older audience because they play on family bonds, trust in authority, or fear of technology. Knowing the cover story makes the pattern obvious the moment it starts.

The grandchild or family emergency scam is one of the cruellest. You get a panicked call: "Grandma, it's me, I'm in trouble, I've been in an accident" or "I've been arrested and I need bail money." The voice may be muffled or crying, which conveniently hides that it is a stranger. They beg you not to tell their parents. Then someone takes over claiming to be a lawyer or officer and asks for money by gift card or transfer. The fix is simple: hang up and call your actual grandchild or their parent on the number you already have.

The bank or fraud-department scam opens with "We've detected fraud on your account." Ironically, the caller is the fraud. They build trust by reading out the last four digits of a card, which they often already have, then steer you toward moving your savings into a "safe account" they control. Your real bank will never ask you to move money to keep it safe.

The tech-support scam can arrive by phone or as a frightening pop-up on your computer screen saying "Your computer is infected, call this number." The "technician" asks to connect to your computer remotely, then either installs real malware or claims to have found problems and charges to fix them. No real company, including Microsoft or Apple, will ever phone you out of the blue about your computer, and a genuine virus warning never includes a phone number to call.

The government and prize scams round out the list. The first threatens you: you owe back taxes, your benefits are suspended, there is a warrant for your arrest unless you pay immediately. Tax offices send letters and do not demand gift cards. The second tempts you: you have won a lottery or a prize, but you must pay a fee or taxes upfront to release it. You never have to pay money to receive money you have actually won.

What scammers want and why the cover story keeps changing

Every script funnels toward the same three things: your money, your account access, or your personal details. The story is just the wrapper. Once you understand that the grandchild emergency and the tax threat are after the identical prize, you stop being surprised by new variations and start recognising the shape underneath.

Money is the direct target, usually pushed through channels that are hard to reverse: gift cards, wire transfers, crypto, or cash withdrawals. These are chosen precisely because once the money moves, it is gone and the bank often cannot claw it back.

Account access is the second target. With a verification code or a remote-control session, a scammer can drain accounts, change your passwords, and lock you out. Personal details are the third: your full name, date of birth, address, and card numbers let them impersonate you elsewhere or build a more convincing call next time. Treat all three as you would your house keys.

The exact words to end a suspicious call

You do not owe a cold caller an explanation, a debate, or your continued politeness. The most powerful move is to hang up, and you are allowed to do it mid-sentence. Here is a script you can keep by the phone.

1. State your boundary, once: "I don't take account or payment requests over the phone. I'll call the organisation back myself." Then stop explaining.
2. Do not answer their questions. A scammer's job is to keep you talking. If they ask "Don't you want to protect your account?" you simply repeat your line or say nothing.
3. Hang up. Press the red button. You never have to wait for a pause or say goodbye to a stranger who phoned you.
4. Call back on a number you control. Use the number on your card, your statement, or the official website you typed in yourself. Never the number the caller gave you, and never the one in a text.
5. Wait a few seconds before dialling. Scammers can stay on the line after you hang up and play a fake dial tone. Hang up, wait ten seconds, or use a different phone, then dial.

How to make yourself a harder target before they call

A few settings and habits cut down the number of scam calls and texts you receive, and they soften the blow if one slips through. None of this requires technical skill.

Register your number on the national Do Not Call list (in the US, that is donotcall.gov). It will not stop criminals, who ignore the law anyway, but it cuts legitimate telemarketing so a real scam call stands out more clearly. Your phone and your carrier may also offer free spam-call filtering, which labels suspected scams or sends them to voicemail. On most modern smartphones you can turn on a "Silence Unknown Callers" option so numbers not in your contacts go straight to voicemail.

Let unknown numbers go to voicemail as a default habit. A real person with real business will leave a message you can return on your own terms. A scammer usually will not. Keep your bank's number saved in your contacts so you are never tempted to use a number a caller supplies.

Text-message and email scams use the same playbook

Scam texts (often called "smishing") and scam emails ("phishing") work on identical principles, swapping the phone call for a link. A text claims a parcel could not be delivered, your account is locked, or you owe a small toll, and it pushes you to tap a link and enter your details on a fake page that looks convincing.

The defence is the same as on the phone: do not act on the message itself. Never tap a link in an unexpected text or email about money, deliveries, or accounts. If you think there might be a real issue, open your browser and go to the company's website by typing the address yourself, or use the app you already have installed. The fake login page is the whole point of the scam, so never reach it by following their link.

Spelling mistakes, odd web addresses, and greetings like "Dear Customer" are clues, but scams are getting cleaner, so do not rely on spotting a typo. Rely on the rule instead: unexpected message about money or access equals do not click, go direct.

What to do if you think you have been scammed

Acting fast limits the damage, and there is no shame in it, so do not let embarrassment slow you down. The faster you move, the more you can often recover or protect.

If you gave card or bank details, or moved money, call your bank immediately on the number on your card and tell them you may have been scammed. They can freeze the card, watch for fraud, and sometimes stop or recover a transfer if you are quick. If you gave a password or a code, change that password right away, and change it anywhere else you used the same one. Turn on two-step verification so a stolen password alone is not enough to get in.

If you let someone connect to your computer, disconnect it from the internet, and have a trusted person or a reputable local shop check it and remove any remote-access software. Then report the scam. In the US you can report to the Federal Trade Commission at reportfraud.ftc.gov, and reporting helps authorities track these criminals and warn others.

Frequently asked questions

How do scammers make a real company name show up on my caller ID? They use a trick called caller-ID spoofing, software that lets them display any name or number they choose, including your bank's. Because of this, you can never trust the name on the screen. The only safe number is one you looked up yourself and dialled.

My bank really did call me once. How do I tell a real call from a fake one? Treat them all the same way. Whether the call is real or not, tell the caller you will phone the bank back on the number on your card, then hang up and do exactly that. A real bank is completely fine with this. A scammer will try to talk you out of it, which tells you everything.

Is it safe to just answer the phone, or can a scammer hack me when I say hello? Answering and saying hello cannot hack your phone or your accounts. The risk comes only if you then share information, read out a code, pay money, or let someone control your computer. That said, letting unknown numbers go to voicemail is a sensible habit that cuts your exposure.

What is a verification code and why must I never share it? A verification code is a short number a service texts you to confirm it is really you logging in. It is a temporary key to your account. Anyone who phones and asks you to read out a code is trying to log in as you. Real companies send you that code so you can type it in yourself, never so you can tell it to a caller.

I feel silly that I almost fell for one. Does that mean I am vulnerable? It means you are human. These scams are engineered by professionals to bypass careful judgement using fear and urgency. Nearly being fooled and then catching it is a success, not a failure. Keeping the warning signs in mind and slowing down is exactly the right response.

Should I engage with a scammer to waste their time? No. Staying on the line confirms your number is active and gives them more chances to manipulate you, and a few are skilled enough to extract information you did not realise you gave. Hang up, report it, and move on with your day.