Online fraud keeps growing because it works at scale. Consumers reported losing more than 10 billion dollars to fraud in a single recent year according to the Federal Trade Commission, and imposter scams and online shopping complaints sit at the top of the list year after year. The tactics evolve, but the underlying playbook rarely changes. Once you can recognise the pattern, most scams fall apart on contact. Here are the ones you are most likely to meet, and how to shut each of them down.
The scams you are most likely to see
| Scam | How it reaches you | The tell |
|---|---|---|
| Phishing | Email or text with a link | Urgent “verify now” from a spoofed sender |
| Fake shop | Ads and search results | Unreal prices, brand-new domain, odd payment |
| Delivery text | SMS about a parcel | Small “fee” needed to release a package |
| Investment or crypto | Social media, messaging apps | Guaranteed returns, pressure to deposit fast |
| Tech support | Pop-up or phone call | “Your device is infected, call this number” |
| Romance | Dating apps, social media | Fast affection, then a money emergency |
| Marketplace | Buy-and-sell platforms | Overpayment, off-platform payment requests |
Phishing: the master scam
Phishing is the entry point for a huge share of online fraud. A message that looks like it comes from your bank, a delivery company, a streaming service, or your employer asks you to click a link and confirm your details. The link leads to a convincing copy of the real login page, and whatever you type goes straight to the attacker. The defence is a habit: never act on the link in an unexpected message. Open a new tab, type the address you already know, and check there. Legitimate organisations do not ask you to verify your password through a link sent out of the blue.
Fake online shops
Fake shops advertise sought-after products at prices that undercut everyone, take your payment, and either send nothing or ship a counterfeit. They lean on brand-new domains, stock photos, urgency banners, and payment methods that cannot be reversed. Before buying from an unfamiliar store, run the quick trust checks in our guide on how to tell if a website is trustworthy, and look the brand up in an independent website directory such as Webwiki to see whether other people have encountered it.
Delivery and parcel texts
A text says a package could not be delivered and asks for a small fee or a re-scheduling confirmation. The amount is tiny on purpose, because the goal is your card details, not the couple of euros. Real carriers do not collect random fees by SMS link. If you are expecting a parcel, check its status through the carrier’s own site or app using the tracking number you were given at purchase.
Investment and crypto schemes
These promise unusually high, “guaranteed” returns and push you to deposit quickly, often through a slick app or a helpful stranger in a group chat. Early on you might even see fake gains and be allowed a small withdrawal to build confidence, right before a larger deposit disappears. The rule is old but reliable: guaranteed high returns do not exist, and pressure to act now is a warning, not an opportunity.
Tech-support scams
A pop-up warns that your device is infected and displays a number to call, or someone phones claiming to be from a well-known software company. They want remote access to your computer or a payment to “fix” a problem that does not exist. No legitimate company monitors your personal device and cold-calls you about a virus. Close the page, and never grant remote access to an unsolicited caller.
Romance scams
A romance scam builds a relationship over weeks or months, then engineers a crisis that only money can solve: a medical bill, a stranded trip, a customs charge on a gift. The emotional investment is the trap. Warning signs include quick declarations of love, a refusal to meet or video call, and a first request for money that grows over time. Never send money or share financial details with someone you have only met online.
Marketplace and payment fraud
On buy-and-sell platforms, fraud shows up as buyers who “overpay” and ask for a refund of the difference, sellers who want to move the deal off-platform, and requests to pay by methods with no protection. Keep the whole transaction inside the platform, use its protected payment options, and be suspicious of any pressure to move to bank transfer, crypto, or a gift card.
The habits that beat almost every scam
The specific stories change, but a short set of habits defends against nearly all of them. Slow down when a message creates urgency, because urgency is the tool, not the emergency. Verify independently by contacting the company or person through a channel you already trust, not the one in the message. Protect your accounts with unique passwords and two-factor authentication so a single leaked password does not open everything. And guard the irreversible payment methods, since any request for gift cards, cryptocurrency, or bank transfer from someone you cannot verify is the clearest signal of a scam there is. If you are caught out, act fast: contact your bank, change affected passwords, and report it to your national fraud or consumer-protection body.
Frequently asked questions
What is the most common online scam right now?
Phishing and imposter scams remain the most reported, because they are cheap to send at scale and feed into other fraud like account takeover and fake-shop payments. Fake online shops and delivery texts are close behind.
How do I know if a message is a scam?
Look for urgency, an unexpected link or attachment, a request for passwords, payments, or personal details, and a sender address that does not quite match the real organisation. When in doubt, do not use the link. Contact the company directly through a channel you already know.
Which payment methods are safest against scams?
Credit cards and buyer-protected wallets give you a path to dispute a charge. Gift cards, cryptocurrency, and bank transfers offer almost no recovery, which is exactly why scammers prefer them.
What should I do if I have been scammed?
Contact your bank or card provider immediately to try to stop or reverse the payment, change any passwords you reused, enable two-factor authentication, and report the incident to your national fraud or consumer-protection agency. Reporting quickly improves your chances of recovery and helps warn others.
Sources and further reading
Federal Trade Commission, Consumer Sentinel Network annual fraud data and reported-loss figures. National cybersecurity and consumer-protection agency guidance on phishing, fake shops, and imposter scams.
Read next: How to Check If a Website Is Safe Before You Click. A closer look at check if a website is safe.