Common Scams Explained, One by One

This is the longest lesson in the course, because it is the one that earns its keep. Updates, passwords and Wi-Fi settings stop a lot of harm. But most of the money people lose is not stolen by a program breaking into a computer. It is handed over by a person who was talked into it. In 2025 the FBI's Internet Crime Complaint Center (IC3) received 1,008,597 complaints and logged $20.877 billion in reported losses. People age 60 and older filed 201,266 of those complaints and reported $7.748 billion lost, an average of about $38,500 each (IC3 2025 report, as of October 2026). The Federal Trade Commission (FTC) counted about 3 million fraud reports and $15.9 billion in reported losses for 2025 (FTC, March 2026). Those numbers count only people who reported.

The good news is that scams come in a small number of costumes. The story changes. The tell, the thing that gives the game away, stays the same. We go through sixteen of them, one at a time. Each has three parts: how it works, the tell, and what to do. Read them in one sitting if you can, or one a day. Either way, finish with the master table near the end and the checklist.

The one rule that beats most of these scams

Before the list, here is the rule. Scammers need you to stay on their line, inside their message, doing what they say, fast. Anything that breaks that spell breaks the scam. So:

1. Stop. Do nothing for one minute. Take a breath. Urgency is the tool they use on you.
2. Hang up or close the message. Do not press buttons on a robocall, do not click the link, do not reply.
3. Call back on a number you know. That means the number on the back of your card, on your latest statement, on a bill, or one you looked up yourself on the company's real website. Never use a number the caller or the message gave you. Caller ID can be faked, so it proves nothing.
4. Tell one person. A spouse, a neighbor, a grown child, a friend. Scammers also tell you to keep it secret. That request is itself a tell.

The FTC's general advice says the same things in other words: treat urgency as a red flag, do not click links in unexpected messages, contact the company through a website you trust or a number you look up yourself, and talk to someone you trust before you act (FTC, as of October 2026).

Scam 1: Tech-support pop-ups and calls

How it works. A loud pop-up appears on your screen. It may flash red, play a siren or say your computer is locked. It gives a phone number. Sometimes the contact starts as a call or text claiming to be a technician from a well-known company. Scammers can also buy search ads so their number shows up when you search for "tech support." On the call, they ask to take remote control of your computer, claim to find a virus, and offer to remove it for a fee. They push payment by gift card, wire, crypto or payment app. The FTC says a version of this can end with a "government official" who tells you your money is at risk and asks you to withdraw it or turn it into gold or cash (FTC).

The tell. The FTC puts it plainly: real security pop-up warnings and messages will never ask you to call a phone number. Legitimate tech companies do not contact you by phone, email or text to report a problem with your computer.

What to do. Do not call the number. Close the window. If it will not close, restart the computer by holding the power button, and if it comes back, do not click inside the browser. On Windows 11, open Settings, then Windows Update, then run a scan from Settings, Privacy and security, Windows Security, Virus and threat protection. On a Mac, use the Apple menu, System Settings, General, Software Update. On an iPhone or Android phone, a "virus" pop-up on a web page is a scam; close the tab or the browser. If you already let someone in or paid, lesson 09 has the steps.

The numbers show why this one matters. IC3 logged 47,794 tech and customer support complaints and $2.13 billion in losses in 2025. People 60 and older filed 21,333 of those complaints and reported about $1.04 billion lost, roughly half the total (IC3 2025 report; the report's own pages differ by about $150,000, so treat these as about right).

Scam 2: The bank or "fraud department" impostor

How it works. A caller says they spotted fraud or criminal activity on your bank, investment or retirement account. They may use your bank's name, your real phone number on their screen and personal details they bought. They offer to "protect" your money by having you move it, and they may ask for your online banking username or a verification code (FTC).

The tell. The FTC says: never move or transfer your money to protect it, because moving it means you will lose it, not protect it. And no caller, including someone claiming to be from your bank's fraud department, will ever ask for a verification code. A code is the key to your account. Sharing it lets the scammer sign in as you.

What to do. Hang up. Call the number on the back of your card or on your statement. If you already moved money or shared a code, tell your bank right away and then report at ReportFraud.ftc.gov. The FTC's advice is that your money is safest where it is, and anyone who says otherwise is a scammer. Money you send out yourself by transfer is hard to get back (FTC).

Scam 3: Government impostors (IRS, Social Security, Medicare)

How it works. Someone says they are from the IRS, the Social Security Administration (SSA), Medicare, the FTC or a police agency. They say you owe taxes, your Social Security number has been "suspended," your benefits are at risk, or a new Medicare card is waiting. They want money or personal information right now. The fear of arrest or losing a benefit is the engine.

The tell. The FTC lists what government agencies never do. They never threaten you, arrest you or suspend your Social Security number or benefits. They never call, email, text or message you on social media to ask for money or personal information. They never tell you to transfer money to protect it, withdraw cash or buy gold. The IRS does not call about taxes unless you have an appointment, because it contacts you by mail first. Medicare mails cards automatically and free of charge, so a call about a "new" card is a scam (FTC).

What to do. Hang up, ignore it or delete it. Do not press numbers on a robocall. If you want to check, look up the agency yourself. For Medicare, call 1-800-MEDICARE. For the IRS, the FTC lists 800-829-1040. Report government impostors to the FTC at ReportFraud.ftc.gov. The FTC also points Social Security impostors to the SSA Office of the Inspector General (oig.ssa.gov/report) and IRS impostors to the Treasury Inspector General for Tax Administration (tigta.gov). For Medicare billing questions or suspected Medicare fraud, the Senior Medicare Patrol fraud line is 1-877-808-2468 (SMP). If you gave out your Social Security number, go to IdentityTheft.gov.

Scam 4: Grandparent and family-emergency calls, including AI voice cloning

How it works. The phone rings, often late. A voice that sounds like a grandchild, child or friend says they are in trouble: a car crash, an arrest, a hospital. Then a second person, a "lawyer," "officer" or "bail bondsman," takes over and says money must be sent right now, usually secretly. Scammers can now copy a real voice from a short clip, such as a social media video, and use it to say new words. The FTC warned about this in a 2023 alert, and IC3's 2025 report says voice cloning is in use in "distress" scams, which it files under confidence and romance fraud. It lists over $5 million in reported losses to distress scams that year (FTC; IC3 2025 report, as of October 2026).

The tell. The voice is upset, the story is urgent and secret, and the payment is odd: wire, crypto or gift cards. The FTC says to be suspicious of any caller who asks you to wire money, send cryptocurrency or buy gift cards and read out the numbers and PINs.

What to do. Hang up and call that person on a number you know is theirs. If you cannot reach them, try another family member or their friends. The FBI also tells families to agree on a secret word or phrase with each other ahead of time so a real emergency can be told from a fake one (FBI IC3 PSA I-051525). The FTC's article does not use the phrase "code word," but the FBI does, and it costs nothing.

Here is how to set one up this week. Pick a word that is easy to say and hard to guess: not a pet's name or a street. Tell your children and grandchildren in person or by phone, not by text. Say the rule out loud: "If anyone calls saying they are me and in trouble, ask for the word. No word, no money." Teach everyone to hang up and call back even if the caller has the word, if anything feels off.

Scam 5: Romance and friendship scams

How it works. Someone you met on a dating site, a social app or through a "wrong number" text starts talking to you every day. They are warm, attentive and always a little far away: working overseas, on an oil rig, in the military, a widowed engineer. They cannot meet in person. After weeks of trust, a crisis appears: a medical bill, a plane ticket, a visa fee, a customs fee. Or they offer to teach you to invest. The FTC says these scammers also ask you to move the chat off the dating site (FTC).

The tell. Never send money or gifts to a sweetheart you have not met in person. That is the FTC's key rule. Add: they will not video chat, or the video is "broken"; they pressure you to hurry; they ask for wire, gift cards or crypto. IC3 logged 23,159 confidence and romance complaints and $929 million in losses in 2025.

What to do. Stop sending money and stop answering. Talk to a friend or family member you trust, especially one who is worried about the relationship. Search the person's job plus the word "scammer." Run a reverse image search on the profile photo (Google Lens and TinEye are two free tools; a family member can help you use one). If you paid, tell your bank or the payment company at once and report at ReportFraud.ftc.gov and to the site where you met them. Be kind to yourself: these people work in teams and write the script for months.

Scam 6: Investment, "pig butchering" and crypto scams

How it works. This is the costliest scam in America. IC3 recorded 72,984 investment complaints with $8.65 billion in losses in 2025, more than any other type, and put crypto investment fraud at about $7.2 billion. People 60 and older filed 13,685 crypto investment complaints and reported $2.76 billion lost (IC3 2025 report). The FTC's own 2025 totals say the same thing: investment scams topped the list for dollars lost at $7.9 billion.

The FBI describes the usual path, which the press calls "pig butchering": a stranger reaches you on social media, a dating app, a group chat or a wrong-number text. They build a friendship, often with staged photos or video calls. Then they mention an investment: crypto trading, AI trading bots, gold futures. You open an account on a site or app they recommend. It shows large gains. Small early withdrawals work, which builds trust. You deposit more. When you try to take out the big balance, the account is "frozen" and you must pay "taxes" or "fees" first. Paying does not free it. The money is gone (FBI).

The tell. Someone you met online pitches a crypto investment. They move the chat to WhatsApp or Telegram. They coach you on what to tell your bank. They guarantee returns. The FTC says there are no guaranteed returns, and only scammers demand payment in cryptocurrency: no legitimate business or government agency will. Some scammers send you to a crypto ATM and stay on the phone telling you each step. Once sent, the money is typically gone (FTC).

What to do. Stop sending money. Do not pay "fees" or "taxes" to withdraw. Before investing in anything, check that the person or firm is registered. The FTC's investment-scams page points to Investor.gov, the SEC's EDGAR database and your state securities regulator (FTC). Report to ic3.gov with wallet addresses, amounts, dates and screenshots. Also report to ReportFraud.ftc.gov and sec.gov/tcr. The FBI says not to tell the scammers that law enforcement is involved.

Scam 7: Package-delivery and toll or traffic-fine texts

How it works. A text appears that looks like it came from USPS, FedEx, DHL or a toll road: a package is held, postage is unpaid, a delivery missed, or you owe a small toll or traffic fine. It has a link. The link leads to a page that copies the real one and asks for your card number or login. The FTC says anything you type goes to the scammer (FTC). A newer version, reported by the FTC in 2026, looks like an official traffic notice with a state seal, a fake case number, a hearing date and a QR code, and threatens default penalties unless you scan and pay now (FTC).

The tell. You did not expect it, it is from a number or an email address you do not know, and it wants you to click or scan right away. Official agencies do not send fines by text with a link to pay.

What to do. Do not click or scan. To check a real package, sign in to the store's website or app where you ordered, or use the tracking number from the order email. For a toll, go to the toll road's real website by typing it yourself. Report the text with the "Report junk" option in your messages app. If that does not exist, forward it to 7726 (SPAM), then delete it. On an iPhone, you can tap "Report Junk" under the message. On Android, press and hold the message and use the report-spam option. Menu names move between versions.

Scam 8: Fake charities

How it works. After a flood, a fire or a hurricane, or at any holiday, you get a call, text, social media post or mailer from a group with a moving name. Many copy the names of well-known groups. The request may come through a friend's shared post, which makes it feel safe. They ask for cash, gift cards, wire transfers or crypto.

The tell. The FTC says legitimate charities accept donations in many different ways. A "charity" that takes only gift cards, wires or crypto is not one. Be wary of anyone who says you can only pay one way (FTC). Pressure to give right now is another common sign.

What to do. Look up the group yourself on CharityWatch or Give.org. Give through the charity's own website, which you reach by typing the address, or with a credit card. If a text asks you to donate to a number, check the charity's own site to see if the number is real. Report impostors at ReportFraud.ftc.gov. Your own church, fire department or local food bank is also a good test: call them on a number you have.

Scam 9: Lottery and sweepstakes scams

How it works. You are told you won a prize: a car, a cash award, an iPad, a foreign lottery you never entered. First you must pay "taxes," shipping, processing or customs fees, or you must give your bank or Social Security number "to claim it." Sometimes a check arrives, and you are told to send back part of it. The caller may use the name of a well-known sweepstakes company.

The tell. The FTC gives three signs: you must pay a fee to get a prize, you are told to pay to improve your odds, or you are asked for bank, card or Social Security numbers. Real prizes are free. Real sweepstakes are free and based on chance (FTC).

What to do. Do not respond, click or download. Search the company's name with the words "complaint" or "scam," and find the contact information yourself. Report at ReportFraud.ftc.gov and to the Idaho Attorney General's Consumer Protection Division. Mailed offers can be reported to the U.S. Postal Inspection Service.

Scam 10: Home-repair and contractor scams

How it works. A person knocks on your door and says they are "in the area" with leftover materials from a job down the road. They see damage on your roof, driveway or tree and quote a low price. They want the whole payment up front or only in cash. They may suggest a lender who "will take care of everything." After a hail storm or windstorm, you may see many of them in one week. Sometimes the work is poor, half done or never started.

The tell. The FTC lists the signs: door-to-door pitches, pressure to decide today, demands to pay everything up front or only in cash, a request that you pull the building permit yourself, and a suggestion that you borrow from a lender the contractor knows (FTC).

What to do.

• Get several written estimates. Do not automatically pick the cheapest.
• Check the contractor. In Idaho, most construction contractors doing work worth more than $2,000 in materials and labor must register with the state's Division of Occupational and Professional Licenses (DOPL). Registration is not a license. Electricians, plumbers and heating and cooling installers hold separate licenses. DOPL's phone number is 208-334-3233, and a registered contractor must show the registration number on contracts and ads (DOPL).
• Get a written contract with the name, address, phone and license or registration number, start and end dates, and a full description of the work. Do not sign anything with blank spaces.
• If you sign at your home, the FTC says the contract should include a written notice of your right to cancel within three business days.
• Avoid paying the full amount up front. Do not make the last payment until the job is done and you are satisfied.
• Complaints go to the Idaho Attorney General's Consumer Protection Division at 208-334-2424 or 1-800-432-3545, or through the online form at ag.idaho.gov.

Scam 11: Utility shutoff threats

How it works. A call, text, email or even a person at your door says your power, gas or water will be shut off within the hour unless you pay now. They want a wire, crypto, a payment app or gift cards. Some even send a barcode and tell you to pay at a store.

The tell. Real utilities do not demand same-day payment by an unusual method, and they do not push their way into your home. The FTC says never pay a utility bill by wire, cryptocurrency, payment app or gift card (FTC).

What to do. Hang up. Do not click. Call the utility on the number printed on your bill or on its official website, and be careful with the top search results, since paid ads can copy a utility's name. Do not let anyone in who pressures you. If someone claims to be a meter reader or repair worker, ask for photo ID and call the utility first, with a number from your bill.

Scam 12: Fake invoices and subscription renewals

How it works. An email or text says you were charged hundreds of dollars to renew "tech support" or antivirus, often using names like Geek Squad, McAfee or Norton. A phone number is listed "to cancel." The deadline is 24 hours. When you call, the person walks you through a "refund" that appears to overpay you, then demands you send the difference back. The FTC describes this exactly (FTC).

The tell. No matching charge shows up on your bank or card statement. If the charge is not on your statement, the invoice is fake. Also, you never signed up with that company.

What to do. Do not call the number. Check your statement. If you really have a subscription, cancel through the company's own website or the number on your account page. Other fake invoices arrive for things you never ordered: domain names, directory listings, supplies. Pay nothing until you match it to something you actually bought. If you gave out your card number, call your card company and ask for a new card.

Scam 13: QR codes

How it works. A QR code is a square pattern your phone camera reads to open a web page. Scammers stick their own QR codes over real ones on parking meters, restaurant tables, flyers and in the mail, or put them on fake packages and texts. The FTC says scanning a fake code can lead to a counterfeit site that steals your money, your personal information, or both (FTC).

The tell. A sticker that looks pasted on top of another code. A code that came in an unexpected text or package. A web address that is spelled slightly wrong or has swapped letters.

What to do. Most phone cameras show the web address before they open it. Read it. Check for misspellings or switched letters. For a parking meter, restaurant or bill, use the company's real app or type its website by hand. If you scanned a bad code, do not engage with the site, change passwords you used on it (and anywhere you reused them), review your bank and card statements, and report to ReportFraud.ftc.gov.

Scam 14: Check overpayment and fake-check scams

How it works. A stranger sends you a check for more than they owe you. The stories vary: you sold something online, you got a "mystery shopper" or "personal assistant" job, you won a prize, or you were paid for letting a company wrap your car in ads. You are told to deposit the check and send some of the money elsewhere, usually by wire, gift cards or crypto. A few days later the check bounces.

The tell. Any check that is larger than the amount owed, followed by a request to send some back. The FTC says banks are required to make deposited funds available quickly, but this does not mean the check is good. "Even if you see the funds in your account, that doesn't mean it's a good check." It can take weeks for a fake check to be found, and then you are "stuck paying the money back to the bank" (FTC).

What to do. Do not accept a check for more than the selling price. Never use check money to buy gift cards or money orders or to wire money to anyone. If you already sent, contact the gift card issuer, wire service or crypto company and your bank at once. Then report to the FTC, the U.S. Postal Inspection Service and the Idaho Attorney General.

Scam 15: Gift-card and wire demands

This one is the payment half of almost every story above, so it has no plot of its own. The FTC says plainly: only scammers will tell you to buy a gift card. Impostors of government agencies, tech support, utility companies, a relative in trouble, prize organizers and online sweethearts all ask for it. The same goes for wire transfers, crypto and payment apps (FTC).

The tell. You are told to buy a card at a store, scratch off the back and read the number and PIN to the person on the phone, or send a photo of it. If you are asked to load a card while staying on the phone, hang up. Gift cards are for gifts, not for payments.

What to do if you paid. Contact the gift card company right away, no matter how much time has passed. Ask for a refund and ask whether any money is still on the card. Apple and Google can freeze funds that are left. Keep the card and the receipt. Some companies may return your money. The FTC page lists issuer phone numbers, including Amazon at 888-280-4331, Apple at 800-275-2273, Target at 800-544-2943, Walmart at 888-537-5503 and Visa at 800-847-2911, and says that if the issuer is not listed you can check the card or search for the company's contact page. Then report at ReportFraud.ftc.gov.

Clerks can help. If a cashier asks what a pile of gift cards is for, take the question as a gift. If someone you love buys cards on the phone, quietly offer to hang up for them.

Scam 16: "Recovery" scams

How it works. After you lose money, your name goes on a list. Within days or weeks a call, text or email arrives from a "recovery company," a "government agent," a "consumer group," a law firm or even the company that scammed you. They say they found your money and need a fee, a "retainer," a tax payment, your Social Security number or your bank login to release it. The FTC says scammers buy lists of people who have paid other scammers. Some send a refund check for more than you lost and ask you to send back the difference (FTC). The FBI lists recovery offers as the last step in the crypto investment script.

The tell. Someone you did not contact asks for an upfront payment to get your money back.

What to do. Never pay upfront for help getting a refund. Do not share account information. Check the group by searching its name with the word "scam" or "complaint." Contact any government agency using a number you look up yourself. Real help is free: the FTC, IC3, your bank, the National Elder Fraud Hotline and the AARP helpline do not charge.

The master table: warning signs at a glance

Print this table and keep it near the phone, or take a photo of it. Every row follows the same pattern: the story changes, the tell does not.

Scam	How it usually starts	The tell	What they want	Do this
Tech-support pop-up	Loud screen warning or "technician" call	Real warnings never give a number to call	Remote access, then gift cards, wire or crypto	Close it, restart, scan. Never call the number
Bank or fraud-department impostor	Call showing your bank's name	Asks you to move money or read a code	Your savings, your login or your code	Hang up. Call the number on your card
Government impostor	Call, text or email about taxes, benefits or Medicare	Agencies never threaten or ask for money by call or text	Cash, gift cards, gold, crypto, your SSN	Hang up. Look up the agency yourself
Grandparent or family emergency	Late call from a tearful voice	Urgent, secret, odd payment	Wire, gift cards, cash by courier	Hang up. Call the person. Ask for the code word
Romance or friendship	Dating site, social app or wrong-number text	Never meets, always has a crisis or investment	Wire, gift cards, crypto	Stop. Tell someone. Never pay a person you have not met
Investment and "pig butchering"	Friendly stranger, then a trading site	Guaranteed returns, frozen account, new fees	Crypto deposits, then "taxes"	Stop. Check registration. Report to ic3.gov
Package, toll or traffic-fine text	Text with a link or QR code	You did not expect it, and it wants you to act now	Card number, login	Do not click. Check the store or toll site yourself. Forward to 7726
Fake charity	Call, text or shared post after a disaster	Takes only gift cards, wires or crypto	Cash, cards, crypto	Look it up on Give.org or CharityWatch. Give on its real site
Lottery or sweepstakes	Call, text, letter	You must pay to collect a prize	Fees, taxes, bank details	Do not respond. Report
Home repair	Knock at the door	Pay all up front, cash only, pressure	Deposit, full payment, a loan	Get written estimates. Check registration
Utility shutoff	Call or text, shutoff in an hour	Unusual payment, same-day deadline	Gift cards, wire, crypto, apps	Hang up. Call the number on your bill
Fake invoice or renewal	Email or text for a charge you did not make	No matching charge on your statement	Your call, your card, your "refund" back	Check your statement. Do not call
QR code	Sticker, flyer, text or package	Pasted-on code, odd web address	Card number, login	Read the address first. Use the real app
Check overpayment	Buyer, job or prize sends a check	Check is too big, you send some back	Wire or cards from "your" money	Return nothing. Do not deposit
Gift-card or wire demand	Inside any story above	Only scammers demand them	Card numbers and PINs	Hang up. Call the card issuer if you paid
Recovery scam	Call or email after you lost money	Fee up front to get money back	A "retainer" or your bank login	Hang up. Report free to FTC and IC3

The numbers behind the scams

These are the verified figures used in this lesson, all as of October 2026. Keep in mind that reported numbers are only part of the true total, since many people never report.

Measure	Figure	Source
All complaints to the FBI's IC3, 2025	1,008,597 complaints, $20.877 billion in losses	IC3 2025 report
Age 60 and older, 2025	201,266 complaints, $7.748 billion, about $38,500 average loss	IC3 2025 report
Investment fraud, all ages	72,984 complaints, $8.65 billion	IC3 2025 report
Crypto investment fraud, age 60 and older	13,685 complaints, $2.76 billion	IC3 2025 report
Tech and customer support, all ages	47,794 complaints, $2.13 billion	IC3 2025 report
Government impersonation, all ages	32,424 complaints, $798 million	IC3 2025 report
Confidence and romance, all ages	23,159 complaints, $929 million	IC3 2025 report
FTC fraud reports, 2025	about 3 million reports, $15.9 billion	FTC, March 2026
FTC impostor scams, 2025	more than 1 million reports, more than $3.5 billion	FTC, March 2026
FTC investment scams, 2025	$7.9 billion, the most dollars of any category	FTC, March 2026

Questions and answers

How can I tell a real call from my bank from a fake one?

You cannot tell by the voice, the name on caller ID, or how much they know about you. Treat any unexpected call about money as unverified. Hang up and call the number on your card or statement. If it was real, the bank will know about it.

Why do scammers always want gift cards or crypto?

Because the payment is nearly impossible to take back. The FTC calls these the payment methods scammers prefer: gift cards, wire transfers, payment apps, crypto, and checks you deposit and send part of back.

Do I need to answer unknown numbers?

No. Let unknown numbers go to voicemail. Real callers leave a message. Put your number on the Do Not Call Registry at donotcall.gov, and understand that scammers ignore it, so it will not stop them. Its use is that it helps you tell: a company that calls you after you registered, with no relationship, is already breaking the rules.

What should I do with a text from a number I do not know?

Do not reply, even "STOP" or "wrong number," since that tells them your number is live. Do not click links. Report the text with your messages app or forward it to 7726, and delete it. If the text claims to be about something real, such as a package or your bank, check on the real app or website instead.

Should I put a family code word in place?

Yes, and do it this week. It costs nothing and it works against voice cloning. The FBI recommends a secret word or phrase that your family agrees on ahead of time. Choose something no one could guess from your social media, and share it in person.

How do I check whether a charity or investment is real?

For charities, look them up on CharityWatch or Give.org. For investments, the FTC points to Investor.gov, the SEC's EDGAR database and your state securities regulator. Search the name with words like "scam" and "complaint." Anyone who promises guaranteed returns is not selling an investment.

My phone says "Scam Likely." Can I trust that?

It is a helpful hint, but it is not perfect. A call can be a scam without being flagged, and a real call is occasionally flagged. Treat the label as one more reason to let it go to voicemail, and treat the lack of a label as proof of nothing.

What do I do if someone is at my door pressuring me?

You do not have to open the door or decide on the spot. Say, "I do not buy at the door. Leave a card." Take the card, close the door and check the business. For a work crew claiming to be from a utility, call the utility with a number from your bill. If they stay or push, call your local non-emergency police line.

What if I think a friend or parent is being scammed?

Lead with care. Skip "how could you." Ask what they know about the person, offer to look it up with them, and sit with them while they call the bank. The AARP Fraud Watch Network Helpline, 1-877-908-3360, is open weekdays 8 a.m. to 8 p.m. Eastern. Its trained specialists give guidance and support. The helpline does not investigate scams or recover money (AARP).

Where do I report each one?

See the reporting box below. In short: ReportFraud.ftc.gov for almost anything, ic3.gov for online crimes and any dollar loss, IdentityTheft.gov if your identity was used, the Idaho Attorney General for local complaints and the Senior Medicare Patrol for Medicare problems.

Hard questions

Am I too old to protect myself from this?

No. Age does not decide who is protected. Habits do. Scammers go after people of every age. The IC3 2025 report shows people 60 and older reported the largest share of dollars lost in several categories, including about half of tech-support losses. A short list of rules and a person to call do more than being young or good with computers.

If I hang up on a real caller, will I miss something important?

Almost never. Your bank, doctor, utility and agencies all have a number you can call back. A real emergency, such as a hospital calling about a relative, will not vanish in five minutes. A call-back costs you five minutes. A scam costs you thousands. The tradeoff is not close.

The caller knew my name, my address and my last four digits. Doesn't that prove they are real?

No. That information is cheap. It is sold in bulk after data breaches, and it is also easy to find on people-search sites. Having your details does not prove the caller is who they say. Asking for a verification code or a move of money proves they are not.

I already lost money and I am ashamed. Is it worth reporting?

Yes. Your report helps investigators connect cases and, if the money is still moving, can help freeze it. The FBI's Recovery Asset Team froze about 58 cents of every dollar at stake in the incidents it worked in 2025 ($679 million of $1.16 billion) (IC3 2025 report). Speed matters, but a late report still counts. The National Elder Fraud Hotline, 1-833-372-8311, assigns a case manager to people age 60 and older, Monday through Friday, 10 a.m. to 6 p.m. Eastern (OVC).

Is it really true that a scam can come from a phone number I know?

Yes. Phone numbers can be spoofed, which means faked on the screen. Texts can be sent from accounts that look like your bank or a friend. That is why the rule is to call back on a number you dialed or looked up, never to trust the caller ID.