How to protect yourself from online fraud and phone scams
Fake bank calls, phishing links and wrong-transaction scams cost people billions. The warning signs, golden rules and what to do if you are hit.
Online fraud and phone scams have become one of the most common ways people lose money. Fraudsters send fake messages pretending to be banks, mobile money providers, delivery companies, employers or even family members, hoping you will share a PIN, click a link or send money. The good news is that most scams follow a few predictable patterns, and a handful of habits can protect you. This guide explains how to protect yourself from online fraud: the common tricks, warning signs, practical steps to stay safe and what to do if you are scammed.
Common types of online and phone fraud
Phishing is a message by email, SMS or social media that pretends to come from a trusted organisation and asks you to click a link, log in or confirm your details. The link leads to a fake website that steals your password or card details.
Impersonation calls come from someone claiming to be from your bank, mobile money provider, tax authority or police, often saying your account is blocked or you owe money and must act immediately.
"Wrong transaction" scams start with a fake message saying money was sent to you by mistake, followed by a request to send it back, when no money was ever received.
Family emergency scams use a message from a new number claiming to be a relative who has lost their phone and urgently needs money.
Fake jobs, online shops and investment offers ask for an upfront fee or deposit, then disappear. Our guide on how to spot an investment scam covers investment fraud in detail.
Warning signs of a scam
Most scams share the same features. They create urgency, telling you to act now or lose your account. They ask for secret information such as a PIN, password or one-time code. They ask you to pay in unusual ways, such as gift cards, cryptocurrency or transfers to a personal number. And they offer something too good to be true, such as a prize you never entered or a job with high pay for little work. Spelling mistakes, unfamiliar sender addresses and links that look slightly wrong are further clues.
Golden rules to stay safe
Never share your PIN, password or one-time code with anyone. Genuine banks and mobile money providers will never ask for them, by phone, message or in person.
Do not click links in unexpected messages. Go to the official app or type the website address yourself instead.
Verify independently. If someone claims to be from your bank, hang up and call the number on the back of your card or the official website. If a relative asks for money from a new number, call their old number or another family member first.
Check your balance before "returning" money. Look at your actual account statement, not just a text message, before sending anything back.
Slow down. Scammers rely on pressure. Taking a few minutes to think and check is one of the best defences.
Protect your accounts
Use strong, different passwords for important accounts and turn on two-step verification wherever it is offered. Keep your phone and apps updated, lock your phone with a PIN or fingerprint, and only download apps from official app stores. Be careful what you share on social media, since details such as your date of birth, phone number and family names help fraudsters impersonate you or answer security questions. Check your bank and mobile money statements regularly so you spot unfamiliar transactions quickly; our guide to tracking your spending helps build the habit.
What to do if you are scammed
Act immediately. Contact your bank or mobile money provider through official channels to report the fraud and ask them to block or reverse the transaction if possible; speed improves the chance of recovery. Change your passwords and PINs, report the scam to the police and to your country's cybercrime or consumer protection authority, and warn friends and family if your account was used to contact them. Keep screenshots and records of all messages. Be wary of anyone who then offers to recover your money for a fee, as this is often a second scam.
Frequently asked questions
Will my bank ever ask for my PIN?
No. Genuine banks and mobile money providers never ask for your PIN, password or one-time code.
What is phishing?
Phishing is a fake message that pretends to be from a trusted organisation to trick you into sharing details or clicking a harmful link.
What should I do first if I have been scammed?
Contact your bank or mobile money provider immediately through official channels, then change your passwords and report the scam.
Sources
This article is general information, not financial advice.