SOCIAL ENGINEERING
How Not to Get Scammed
Scammers exploit emotions: fear, greed, love, urgency, and trust. The best defense is a 3-second pause + verification habit.
The Golden Rule
If someone you didn't contact first is pressuring you to send money, share credentials, or take urgent action — it's almost always a scam.
Common Scams & Red Flags
💕
Romance & "Pig Butchering" Scams
Fake profiles on dating apps or social media build trust over weeks/months, then ask for money for "emergencies", "travel", "investment opportunity", or crypto trading help.
Red Flags
- Profile photos reverse image search to stock / other people
- Quickly move conversation off the platform to WhatsApp/Telegram/email
- Stories about being abroad, military, doctor, engineer on oil rig
- Asks for money or "investment" after emotional bond formed
- Grammar that improves then suddenly regresses
Action: Reverse image search their photos. Never send money or crypto to someone you haven't met in person. Report the profile.
📞
Tech Support / "Microsoft" / Virus Pop-up Scams
Pop-up says your computer is infected. Or a cold call from "Microsoft Support" or "Amazon" claiming your account has issues. They want remote access or payment for "fix".
Red Flags
- Unsolicited call or scary full-screen pop-up
- They ask you to download TeamViewer, AnyDesk, or GoToAssist
- Request payment in gift cards, wire, or crypto
- Claim they are from a company you didn't contact
Action: Hang up. Close browser tab or force restart. Legit companies do not cold call about viruses or locked accounts.
📈
Investment & Crypto Scams
"Guaranteed" high returns, "copy trading" bots, fake celebrity endorsements on social, or "recovery" services after you lost money.
Red Flags
- Promises of 20-100% returns with "no risk"
- Pressure to act "before the opportunity closes"
- Only accept payment in crypto or gift cards
- Website looks professional but domain is new (use whois)
Action: If you didn't research it yourself and initiate contact, walk away. Real investments carry risk and are regulated.
👔
Impersonation (Boss, Bank, Government, Courier)
Email, text or call pretending to be your CEO asking for urgent wire, your bank with "fraud", HMRC with tax issues, or delivery service with a fee.
Red Flags
- Request for money, gift cards, or credentials
- "Don't tell anyone — it's confidential"
- Uses a name that is close but not exact (CEO name slightly misspelled)
- Threat of arrest, account closure, or job loss
Action: Always verify using a known good phone number or in-person. Call the real person on a number you already have.
Universal Defense Steps (Memorize These)
- Pause. Take 30 seconds. Breathe. Scams rely on panic.
- Verify independently. Go to the official website/app yourself or call a number you looked up (not the one they gave).
- Never pay with gift cards, crypto, wire, or unusual methods. Real companies use normal payment rails.
- Tell someone. A trusted friend or family member often spots what you missed when emotional.
- Report it. See the Resources page for Action Fraud / Report Fraud, NCSC, your bank, etc.
