How to Spot and Report Common Scams

Last updated 12 hours ago. Our resources are updated regularly but please keep in mind that links, programs, policies, and contact information do change.

A mother in the Bay Area picked up the phone and heard her daughter sobbing. The voice said she was in danger and needed money fast. So the mother sent $5,400, and only later learned her daughter had never called. Scammers had cloned the young woman’s voice from audio collected from the internet, and the sound of her own child was the bait.

That case, reported alongside FBI warnings, captures where fraud is in 2024 and 2025. Scams no longer arrive with a clumsy script and a foreign accent. They arrive sounding like someone you trust.

Here is the reassuring part. Underneath the theatrics, almost every scam runs the same play: an unexpected contact, an urgent story, a demand to pay in a way you can’t undo. Learn that shape, learn how to verify before you act, and learn who to call afterward, and you have most of what you need.

The Numbers Are Big, and the Money Lost Per Person Is Climbing

Consumers reported losing more than $12.5 billion to fraud in 2024, a 25 percent jump over the prior year, according to the Federal Trade Commission.

Investment scams, many of them built around cryptocurrency, took the largest share at $5.7 billion, up 24 percent over 2023. Impostor scams, where the caller pretends to be a bank or an agency or your grandson, accounted for a substantial sum in reported losses, the FTC reported.

The FBI’s Internet Crime Complaint Center (IC3), marking its twenty-fifth year, said losses reported to it surpassed $20 billion in 2025, with investment fraud, business email compromise, and tech support scams as the biggest pieces.

Who loses the most per incident depends on the scam. The Better Business Bureau’s 2024 Scam Tracker Risk Report, a 54-page study released around February 2025, ranked the riskiest categories by how often targets lost money and how much.

According to the BBB, financial grooming scams involve a scammer patiently building a relationship before ever asking for money.

Source: BBB 2024 Scam Tracker Risk Report. Investment and crypto scams were the riskiest, with more than 80 percent of targets losing money.

Older adults tend to lose more in dollars when they are caught. Analysis of FTC Consumer Sentinel Network data found that adults in their seventies reported a median loss around $1,000 in 2024, more than double the roughly $417 median for people in their twenties. But the same analysis pushes back on the myth that only seniors fall for scams. Younger adults get hit hardest by online shopping and job scams.

The Warning Signs That Show Up in Almost Every Scam

You do not need to memorize a script for each scam. You need to recognize the machinery, because it repeats.

A scam usually opens with contact you didn’t ask for. Email was the most common first touch in 2024, the FTC found.

Then comes the claim of authority. The caller is the IRS, the Social Security Administration, your bank, Amazon, PayPal, or a relative in trouble, fraud data shows. The BBB’s most-impersonated list reads like a roster of household names: Publishers Clearing House, the U.S. Postal Service, PayPal, Amazon, and Spectrum.

Next, urgency. Act now, or you’ll be arrested, or the account will close, or the deal will vanish. Paired with urgency is isolation: don’t tell anyone, they won’t understand.

BBB Marketplace Trust’s prevention guidance advises against acting under pressure, and recommends taking time to research or consult a third party before responding.

The tell that ties it all together is the payment method.

Scammers favor channels that are fast and hard to reverse. Consumers reported losing more money through bank transfers and cryptocurrency than through all other payment methods combined, per the FTC. And about one in four people who reported losing money to fraud said they paid with a gift card, according to the FTC’s Data Spotlight analysis of Consumer Sentinel Network reports. No legitimate agency asks you to settle a debt with an Apple gift card.

One more piece of the machinery deserves a warning, because people still trust it: caller ID. Spoofing technology lets scammers disguise where their calls are actually coming from. The name and number on your screen are a suggestion, not proof.

Verify Before You Act: Hang Up, Look Up, Call Back

If there is a single habit that defeats most scams, this is it. The scammer’s whole advantage depends on keeping you inside one channel they control. Break the channel and the spell breaks with it.

The FBI’s own government-impersonation guidance puts it plainly: hang up, then independently find the real number and call it back, rather than dialing anything the caller gave you. Its phishing advice adds a rule worth taping to your monitor: “companies generally don’t contact you to ask for your username or password.”

The practical steps are short. Get the basic claim, then end the call. Find the organization’s number yourself: the back of your card, a recent statement, the official website you type in by hand. Then call and ask if anyone actually needs you.

The FTC’s guidance for those alarming “your money is at risk” calls is the same: hang up and contact your bank using the number on your card. In one of its business-imposter alerts, the FTC describes scammers posing as Amazon who hand you a fake “Amazon Support” number that rings straight back to them. The number they give you is part of the trap.

For emails and texts, don’t act from inside the message. Rest your cursor over a link to reveal its true destination before you click, and watch for look-alike domains with a swapped letter or an extra word.

On a phone, press and hold. Better still, ignore the link and type the address yourself.

This works because the criminal cannot control every way you might check. Even the FTC gets impersonated: estimates relayed by www.ftc.gov describe scammers posing as its Chief Privacy Officer in unexpected calls, which is exactly why it tells people to verify through channels they source themselves.

How the Major Scams Unfold

The pattern is universal, but the stories differ. Knowing the common openings helps you catch a scam a few sentences in, before you get emotionally pulled in.

The FTC describes the arc: someone charming appears on a dating app or through Instagram or Facebook, moves the chat to a private channel, and explains why they can never meet in person (deployed overseas, working an oil rig). Then they need money for a plane ticket, surgery, or a can’t-miss crypto opportunity. The agency’s bottom line is worth quoting exactly: “Never send money or gifts to a sweetheart you haven’t met in person.”

Tech support scams start with fear rather than affection. A pop-up or call claims your computer is infected, borrowing logos from Microsoft, Apple, or Geek Squad, the FTC explains.

The dangerous evolution is the “protect your money” twist, where the fake technician says they’ve spotted fraud on your accounts and offers to help you move the money somewhere safe.

The agency’s warning is blunt: moving your money to protect it is itself the scam. The safe place they describe is their account.

Impostor scams are the most commonly reported category overall. Government agencies, police, banks, a grandchild in a cell, a prize you supposedly won. Lottery and sweepstakes versions ask you to pay taxes or fees upfront to collect winnings you never won.

Job scams are the fastest-growing money pit in the FTC’s data. The “business and job opportunities” category hit $750.6 million in reported losses in 2024, nearly $250 million more than the year before. Reports of job and employment-agency scams tripled from 2020 to 2024, and losses to them jumped from $90 million to $501 million.

Investment and crypto fraud sits at the center of it all. The Commodity Futures Trading Commission warns that fraudsters use dating apps, fake social profiles, and even wrong-number texts to lure people into bogus forex, metals, and digital-asset trading. That innocent sorry, wrong number text that turns friendly is often the first move.

Two Newer Threats: Voice Clones and QR Codes

The oldest scam premise, if it sounds like my loved one it must be them, has quietly stopped being true.

IC3 laid out the mechanics in a December 3, 2024 public service announcement titled Criminals Use Generative Artificial Intelligence to Facilitate Financial Fraud and Extortion Schemes. Criminals clone a voice, then type whatever they want it to say in a live call. Money.it’s reporting on FBI warnings notes that 3 to 10 seconds of audio can be enough to build a convincing clone, and a birthday video or TikTok supplies plenty.

Bryan Drake, a Supervisory Special Agent with the FBI’s Detroit Field Office, has cautioned the public not to trust their own eyes and ears, urging families to agree on a verbal security code. The IC3 advisory says the same in its own words: “Create a secret word or phrase with your family to verify their identity.” It also recommends you limit online content of your image or voice, make social media accounts private, and limit followers to people you know. The clone needs raw material; give it less.

QR codes are the other frontier. The tactic is known as “quishing,” per Postal Inspection Service brushing-scam guidance. The danger is built into how QR codes work: a QR code is a link you cannot read, printed in a place that feels official, like a parking meter or a mailed package.

Check Point Research reported a sharp surge in quishing incidents, cited in coverage of FTC warnings. And the reach runs from petty theft to espionage.

Treat every QR code as a link you can’t see. Don’t scan one from an unexpected package, and pay for parking with the app or the card slot, not a sticker.

Where to Report, Depending on What Happened

Here is the part that trips people up. There is no single national scam hotline. The routing depends on how you were contacted and who was impersonated.

USA.gov’s “Where to report a scam” tool exists precisely because of this fragmentation. It asks what happened, how you were contacted, and whether you lost money, then points you to the right agency. It also draws a distinction that saves people time: a dispute with a legitimate business that wronged you may not be a scam at all, in which case its complaints guidance is the better path.

Platforms are often your fastest first responder, because they can delete a listing or freeze an account in minutes when a government portal cannot. According to a guide produced by DIGI, on Facebook Marketplace you can report a seller, buyer, or listing as “Scam” from the three-dot menu. Instagram routes impersonation through the profile’s menu to Report Account, then selecting the option indicating they are pretending to be someone else. On eBay, the Report item and Report buyer tools feed into the Resolution Center and its Money Back Guarantee.

That platform speed is real. Consider a Facebook user named Bev, featured in a consumer-report segment about a recurring phishing scam. She got an official-looking message warning that her page would be shut down for a copyright violation within 48 hours unless she confirmed her details.

She entered her name, email, and Facebook password on the linked site. Her account was promptly taken over and began blasting her friends with posts about bogus government grants, the classic sign that login details have been stolen.

The lesson: a message demanding your password through an outside link is a scam, no matter whose name is on it.

The table below sorts the main destinations.

Sources: USA.gov, NAAG Center for Consumer Protection, eBay Safety, and Meta.

For the impersonated-agency scenarios specifically, we have deeper walkthroughs on our site: reporting mail fraud to USPS, handling Social Security fraud through the OIG, the mechanics of reporting to the FTC and IdentityTheft.gov, and HHS benefit scams involving Medicare and Medicaid.

The First Hour Is Where Money Is Saved

If you realize you’ve been scammed, speed is not merely a good idea. For electronic transfers, it is written into the law.

The FTC’s guidance is clear: if you paid a scammer by gift card, wire, card, or crypto, contact the company or your bank right away. Not everything reverses, but transfers still in flight sometimes can be clawed back.

Whether the bank owes you a refund turns on a definition. Under the Consumer Financial Protection Bureau’s Regulation E, an “unauthorized” electronic fund transfer covers money moved by someone who got your card or login through fraud or robbery. In plain terms: if a scammer stole your login or card and moved the money, protections kick in. If a scammer talked you into sending it yourself, banks often argue the transfer was authorized, and the outcome gets murkier.

Either way, the timing rules reward fast reporting.

Source: CFPB Regulation E, section 1005.6. The tiers apply to unauthorized transfers; reporting speed, not how careful you were, decides the limit.

If the scam exposed personal data, place a fraud alert or credit freeze with Equifax, Experian, and TransUnion. Both are free and activate quickly, and freezes are available even for children. A freeze blocks new accounts from being opened in your name, which is the harm you’re racing to prevent.

IdentityTheft.gov, run by the FTC, collected more than 1.1 million identity theft reports in its 2024 data, and it builds you a recovery plan. For the step-by-step on protecting a compromised Social Security number, our guide to Social Security fraud walks through it.

The Arms Race Nobody Has Won Yet

Every defense here assumes the scammer’s fakes are imperfect. The odd phrasing, the wrong logo, the number that doesn’t quite match. But detection is a moving target, and these scams are engineered to hit you under exactly the emotional pressure that makes judgment worse.

Which is why the guidance is quietly shifting away from “spot the fake.” You cannot out-listen a good voice clone. What you can control is the protocol: a family safe word, a hang-up-and-call-back rule, a refusal to pay in gift cards or crypto on an unsolicited demand. Those work whether the voice is a machine, a human impersonator, or genuinely your daughter.

Regulators are pushing on the infrastructure too. Louisiana and 48 other states urged the Federal Communications Commission to tighten rules that let scammers borrow legitimate phone numbers, per a multistate request. As of the FTC’s Do Not Call enforcement page, the agency reports having resolved 147 enforcement actions on Do Not Call violations and spoofed calls, recovering about $178 million in civil penalties, according to the agency.

Those efforts matter. But they lag behind the scammers’ technology, and that technology keeps getting cheaper. The open question for the next few years is whether authentication catches up to cloning, or whether the burden stays where it sits now. That burden falls on you, in the ten seconds after the phone rings, deciding whether the voice you trust is real.

Frequently Asked Questions

What is the single fastest thing to do if I just paid a scammer?

Call your bank or card issuer immediately, using the number printed on your card, and ask them to block further transfers and open a dispute. For debit and electronic transfers, reporting within two business days caps your liability at $50 under Regulation E. Gift card and crypto payments rarely reverse, but contact the issuer or platform anyway; some can freeze funds not yet redeemed.

How do I set up a family safe word, and why does it help?

Agree on a word or phrase known only to your family and never posted online. If anyone calls claiming an emergency and asking for money, ask for the code. The FBI recommends this because it neutralizes even a perfect voice clone: the scammer can copy a voice from a few seconds of audio, but cannot know a secret you never shared.

Should I report a scam if I didn’t lose any money?

Yes. Reports to ReportFraud.ftc.gov and the FBI’s IC3 help agencies map patterns and warn others, and the AI-fraud statistics depend on victims flagging that AI was involved. Reporting also creates a record if the same scheme resurfaces. For a business dispute rather than a scam, USA.gov suggests its complaints section instead.

Is caller ID ever reliable?

Not as proof. The Ohio Attorney General describes spoofing technology as cheap and readily available, so a call can display your bank’s real name or a local number while coming from a scammer. Treat caller ID as a hint, never verification. If a call claims to be your bank or a government agency, hang up and call back using a number you sourced yourself.

Our articles make government information more accessible. Please consult a qualified professional for financial, legal, or health advice specific to your circumstances.