Almost every scam pulls one of these emotional levers. Learn them once and you'll start spotting them everywhere.
Irreversible payment demand
Money you can never get backWhat: A request to pay with gift cards, crypto, wire transfer, or a money app.
Why it works: These payment types are fast and almost impossible to reverse, so once you pay, the money is gone for good. Legitimate companies and governments never ask to be paid this way.
What to do: Treat any gift-card, crypto, or wire request as a stop sign. No real bill is ever paid in Apple or Google Play cards.
“Pay the fee in Apple gift cards within the hour.”
Asking for a code
Handing over the keysWhat: Anyone asking you to read out or forward a verification code, OTP, or password.
Why it works: A one-time code is the last lock on your account. Real companies send codes TO you, they never ask you to share one back. If you read it out, the scammer is in.
What to do: Never share a code, OTP, or password with anyone who contacts you, not even someone claiming to be your bank.
“Read me the 6-digit code we just sent to confirm it's really you.”
Manufactured urgency
No time to thinkWhat: A countdown or threat that pushes you to act immediately.
Why it works: Urgency is designed to stop you from pausing, checking, or asking someone you trust. Panic is the scammer's best friend.
What to do: Real organisations give you time. If a message rushes you, that alone is a reason to slow down and verify.
“Act now or your account will be closed in 24 hours.”
Account threat
Fear of lossWhat: A claim that your account is locked, suspended, or compromised.
Why it works: Fear of losing access makes people click and 'log in' fast, onto a fake page that steals the real password.
What to do: Don't use the link. Open the app or type the official website address yourself, and check from there.
“Your account has been suspended due to unusual activity.”
Impersonating authority
We obey official voicesWhat: Pretending to be a bank, government body, big brand, or the police.
Why it works: We're trained to trust official institutions, so a familiar name lowers our guard before we check whether it's really them.
What to do: Names are easy to fake. Contact the organisation using a number or website you already trust, never the one in the message.
“This is the IRS. You owe back taxes and must pay today.”
Sworn to secrecy
Isolation from helpWhat: Being told to keep the situation private and not tell anyone.
Why it works: Scams fall apart the moment a second person looks. Secrecy keeps you isolated from the people who'd spot it.
What to do: Any request for secrecy is itself a red flag. Tell a trusted person exactly what's happening.
“Don't tell anyone, this is a confidential investigation.”
Too-good reward
Hope and excitementWhat: A prize, refund, or windfall you didn't expect.
Why it works: Excitement and the feeling of being 'lucky' make people drop their guard and pay a small 'fee' to claim a big reward that never comes.
What to do: You can't win a lottery you never entered. Don't pay anything to receive a prize or refund.
“Congratulations! You've won. Pay a small fee to release your prize.”
Suspicious link
One tap to a fake pageWhat: A link, especially a shortened or odd-looking web address.
Why it works: The link often leads to a convincing fake login page, or installs something harmful. The text you see can hide where it really goes.
What to do: Don't tap links in unexpected messages. Navigate to the official site yourself instead.
“Confirm here: bit.ly/secure-update-now”
Guaranteed returns
Greed meets trustWhat: An offer promising big, safe, or guaranteed investment returns.
Why it works: No real investment is guaranteed. These build trust over weeks (sometimes via romance) before the money vanishes.
What to do: Check whether the seller is registered, never invest under pressure, and be wary of anyone you only met online.
“Guaranteed 30% monthly returns, risk-free, I'll show you how.”