Picture this. Your phone buzzes while you're making tea. It's a text saying a parcel couldn't be delivered, and you need to pay a small redelivery fee. As it happens, you are expecting something, so your thumb hovers over the link.
That moment of hesitation is what scammers are counting on. They don't need to be clever. They need you busy, a bit distracted and ready to act before you've thought. So here's how to slow things down and spot the tricks.
The four warning signs
Whatever the story, almost every scam pulls on the same few levers. Know them and you'll spot most scams.
First, urgency. "Act within 24 hours." "Your account will be closed." Real companies do send deadlines, but scammers lean on them heavily, because panic switches off good judgement.
Second, unexpected contact. You didn't ask for this call, text or email, yet it already knows your name, and perhaps a bit more. Knowing your name proves nothing. Personal details are easy to buy or guess.
Third, a request to do something unusual. Move your money to a "safe account". Buy gift cards. Install an app so someone can "help" with your computer. Read out a code that's just arrived by text. No genuine bank or council asks for any of these.
Fourth, a link or number you didn't choose. If the message itself hands you the way to respond, be suspicious.
What to do instead: go round the back
The most useful habit is a simple one. Never use the contact details in the message. Find them yourself and start again.
Say a text claims to be from your bank. Close it. Open your banking app, or ring the number on the back of your card. In the UK you can also dial 159, which connects you to many major banks. Check with your own bank that it supports the service before you rely on it, but it's worth saving in your phone.
If it's a delivery message, go to the courier's official app, or type their website address in yourself. If you really are expecting a parcel, the genuine firm will show it there. If it doesn't, you've just dodged a fake.
And if someone rings saying they're from your bank, the police or HMRC, you're allowed to say, "I'll call you back." Use a different phone if you can, or wait a few minutes and ring a number you trust. Fraudsters can sometimes keep a landline open after you hang up, which is why the pause matters.
The calls that catch out sensible people
Plenty of intelligent, careful people get caught, and it's rarely because they're foolish. The trickiest scams are the ones that sound like help.
A caller tells you there's been suspicious activity on your account and you need to move your pounds into a new "safe" one. It feels like protection. It's the opposite. Your real bank will never ask you to transfer money to keep it safe.
Another favourite is the "your computer has a virus" call, or the pop-up with a loud warning and a phone number. Genuine tech firms don't cold-call you about faults. Close the browser, restart the device if it's stuck, and don't ring the number on screen.
Then there's the message from a "family member" on a new number. "Hi Mum, I've lost my phone." It's an emotional hook, and it works because it targets love rather than greed. Before you send anything, ring your relative on the number you already have. If they don't answer, ask a question only they could answer, or check with another family member.
Small settings that help
You can't stop every message, but a few minutes in your settings will make life harder for the crooks.
Turn on two-step verification for your email, your banking and your main shopping accounts. Your email matters most, because it's the key to resetting everything else.
Use a different password for each important account. A password manager built into your phone or browser will do the remembering for you.
Keep your phone's software up to date. Those boring update prompts often fix security holes.
Check which apps can read your messages or control your device. If you don't recognise one, remove it.
Be wary of QR codes in public places, such as on car park machines. Stick-on fakes exist. If in doubt, use the operator's official app.
Reporting it, even if you didn't fall for it
It can feel like a waste of time to report a message you ignored. It isn't. Reports help get fake sites and numbers shut down.
Forward dodgy texts to 7726. It's free, and it spells "SPAM" on a keypad. Forward suspicious emails to report@phishing.gov.uk, which is run by the National Cyber Security Centre. If you've lost money or shared details, tell your bank straight away, using the trusted route I've described, then report the fraud to Action Fraud. In Scotland, report it to Police Scotland on 101.
If you've clicked or paid, don't spend days feeling embarrassed. Speed is what counts. The sooner your bank knows, the better the chance of stopping a payment or securing your account. Change your passwords from a device you trust, starting with your email.
Help the people around you
Talk about this at home. Older relatives are often painted as the main targets, but teenagers get caught by fake ticket sales and "easy money" offers, and busy parents get caught by fake delivery notices.
Agree a family rule. If anyone gets a message asking for money or codes, they check with someone else before acting. Sharing a suspicious-looking text should feel normal, not like admitting a mistake.
Photo: Unsplash
