Scam Library

Search the scams behind most digital payment losses worldwide — how each one works, the warning signs, and the steps to take. No technical background needed.

Last reviewed 01 Aug 2026 · 21 case studies across 3 regions

21 of 21 case studies

Browse the library

Full case studies

AI & Deepfake Global High risk

AI Voice Cloning "Family Emergency"

A cloned voice of your child or parent calls in distress and begs you to send money now.

Who scammers target
Parents and grandparents of teenagers and young adults
Typical reported loss
$1,000 – $15,000 per case
Why people fall for this
The voice is genuinely familiar, the story is frightening, and the caller allows no time to think or verify.

How it works

  1. 1A few seconds of someone's voice from social media is enough to train a voice clone.
  2. 2You get a call that sounds exactly like your child, grandchild or spouse, crying or panicking.
  3. 3The story is always the same shape: an accident, an arrest, a hospital, and a need for money in minutes.
  4. 4A second "official" voice — a lawyer, officer or doctor — takes over and gives you payment instructions.

Real-world example

Linda answers a call at 11pm. Her grandson's voice says he crashed a rental car and needs $9,000 for bail. A "public defender" gets on the line and tells her to buy gift cards. Her grandson was asleep at home the whole time.

  • Extreme urgency plus a demand for secrecy: "don't tell mom".
  • Payment by gift cards, wire transfer, crypto or a courier collecting cash.
  • The caller avoids answering a personal question only the real person would know.

  • Hang up and call the person back on the number you already have saved.
  • Agree a family code word in advance and ask for it on any emergency call.
  • Never send gift cards, crypto or wire transfers on the strength of a phone call.
  • Report the call to your national fraud reporting service.

What it looks like

Incoming call
Unknown caller · "Mom, please don't hang up"
"Approve the request on your app to receive the refund."
Illustration of a fake message — recreated for teaching, not a real notice.
Impersonation Global Medium risk

"Hi Mom" WhatsApp Impersonation

A message from a new number claims to be your family member who lost their phone — and needs a payment.

Who scammers target
Parents, especially those whose children live away from home
Typical reported loss
$200 – $3,000 per case
Why people fall for this
A lost phone is a completely normal thing to happen, so the excuse never sounds suspicious.

How it works

  1. 1You receive a WhatsApp or SMS from an unknown number: "Hi Mom, this is my new number."
  2. 2The sender is warm and chatty, and mirrors how your family actually talks.
  3. 3Within a day they explain a locked bank app and ask you to pay a bill for them.
  4. 4The account details belong to a money mule and the funds move on within minutes.

Real-world example

Priya gets a message from an unknown number saying her son changed phones. Two messages later he asks her to pay an urgent invoice of $1,850 because his banking app is locked. She pays. Her son never messaged her.

  • The contact refuses a voice or video call, always with an excuse.
  • A new, unsaved number claims to be someone you know well.
  • The first real request is money, an app code, or a gift card.

  • Call the person on their old, saved number before doing anything.
  • Ask a question only they can answer — and don't accept a vague reply.
  • Never forward verification codes, even to family.
  • Report and block the number inside the messaging app.

What it looks like

Unknown contact
"Hi Mom, this is my new number 🙂"
Wait, why do I need to scan?
Illustration of a fake message — recreated for teaching, not a real notice.
AI & Deepfake Global High risk

Deepfake Celebrity Investment Pitch

A video of a famous investor or news anchor promotes a platform that does not exist.

Who scammers target
First-time investors and people following financial news on social media
Typical reported loss
$2,000 – $50,000 per case
Why people fall for this
A recognisable face plus polished video makes the pitch feel vetted by someone trustworthy.

How it works

  1. 1A short, well-produced video ad shows a public figure endorsing a trading platform.
  2. 2The face and voice are synthetic; the clip is stitched from real footage.
  3. 3You sign up with a small deposit and see a dashboard showing fast gains.
  4. 4An "account manager" pushes bigger deposits, then withdrawals stop working.

Real-world example

Tom sees a video of a well-known TV anchor announcing a national AI-trading programme. He deposits $250, watches it 'grow' to $3,100, deposits $20,000 more, and is then told he must pay a 15% release fee before he can withdraw.

  • A celebrity endorsement that appears only in an advert, never on their own verified channels.
  • Lip movement, blinking or audio timing that feels slightly off.
  • An assigned personal 'account manager' who calls you repeatedly.

  • Check whether the public figure has ever mentioned the platform on their verified accounts.
  • Look up the company on your national financial regulator's register before depositing.
  • Treat any request to pay a fee to unlock your own money as proof of fraud.
  • Screenshot the advert and report it to the platform hosting it.

What it looks like

Remote access app
"Guaranteed AI trading · 340% in 90 days"
DenyAllow
Illustration of a fake message — recreated for teaching, not a real notice.
Marketplace Global Medium risk

Marketplace Buyer Reversal

A "buyer" sends you a payment request instead of paying, and you end up paying them.

Who scammers target
Private sellers on classifieds and social marketplaces
Typical reported loss
$100 – $2,000 per case
Why people fall for this
The screenshot of a payment looks like proof, and sellers feel rude asking a buyer to wait.

How it works

  1. 1You list an item on a classifieds site, Facebook Marketplace or a social app.
  2. 2A keen buyer says they've paid and shares a screenshot of a fake success message.
  3. 3They then send you a payment request or QR code to "confirm you received it".
  4. 4Approving it sends the sale amount from you to them.

Real-world example

Faiz sells a phone for the equivalent of $150. The buyer sends a QR code and says "scan this to receive payment". Faiz scans, approves, and the money leaves his account. The buyer disappears.

  • The buyer refuses to pay first and pushes a QR code or request at you.
  • A payment-success screenshot arrives before any money reaches your account.
  • The buyer insists on overpaying and asks for the difference back.

  • Never scan a QR code or approve a request in order to receive money.
  • Check your own bank statement or app balance, never the buyer's screenshot.
  • Meet in a public place and prefer cash or a confirmed credit before handing over goods.
  • Keep the conversation on the platform so there is a record.

What it looks like

Unknown contact
"Scan this QR to receive your payment"
Wait, why do I need to scan?
Illustration of a fake message — recreated for teaching, not a real notice.
Investment & Crypto Global High risk

Fake Investment & Task Platforms

An app or site promises guaranteed daily returns, pays small amounts first, then vanishes.

Who scammers target
Students, gig workers and anyone seeking extra income
Typical reported loss
$500 – $30,000 per case
Why people fall for this
Small early withdrawals really do arrive, which turns scepticism into confidence.

How it works

  1. 1A Telegram, WhatsApp or Discord group promotes an app with "guaranteed daily returns".
  2. 2The app is installed from a link, not from an official app store.
  3. 3Small early payouts build your trust so you invest more.
  4. 4When you try to withdraw, you're asked for a "tax" or "clearance fee" — then the operator disappears.

Real-world example

Karan invests a small amount and receives a payout the next day. He adds his savings. When he requests a withdrawal, the platform demands a clearance fee, he pays it, and the group is deleted that night.

  • The app is sideloaded from a link instead of an official app store.
  • Withdrawals require an upfront fee or tax payment.
  • No licence or registration number from a real financial regulator.

  • Treat any "guaranteed daily return" as fraud — no legitimate investment works that way.
  • Verify the operator on your national regulator's register before paying anything.
  • Never pay a fee to release your own money.
  • Report the group and the app to the platform and to your fraud reporting service.

What it looks like

Investment app (sideloaded)
Your balance
₹1,24,800
Guaranteed 8% daily · Withdrawal fee required
Illustration of a fake message — recreated for teaching, not a real notice.
Investment & Crypto Global High risk

Long-Con Crypto "Pig Butchering"

A friendly stranger builds a relationship for weeks, then introduces a crypto platform they control.

Who scammers target
Adults aged 25–55 contacted through dating apps and social media
Typical reported loss
$10,000 – $200,000 per case
Why people fall for this
Weeks of genuine-feeling friendship come before any money is mentioned, so it never feels like a cold pitch.

How it works

  1. 1A wrong-number text or dating-app match turns into daily friendly conversation.
  2. 2After weeks, they mention a trading platform their "uncle" runs.
  3. 3You deposit a little, see profits on a dashboard that is entirely fake, and deposit more.
  4. 4Withdrawal attempts trigger fees, taxes and eventually silence.

Real-world example

A stranger texts "Is this Dr. Chen's office?", apologises, and keeps chatting. Six weeks later Mark has moved $80,000 into a platform showing $210,000 in gains. He cannot withdraw a cent.

  • A stranger who contacted you first eventually steers the conversation to investing.
  • The platform is only reachable through a link they sent you.
  • Profits look large, smooth and unrealistically consistent.

  • Never invest through a platform introduced by someone you have not met in person.
  • Verify any exchange on your regulator's register and search its name plus the word "scam".
  • Withdraw a small amount early — if that fails, stop immediately.
  • Report it; recovery is rare, but reporting helps freeze mule accounts.

What it looks like

Unknown contact
"My uncle's platform pays 2% daily, I can guide you"
Wait, why do I need to scan?
Illustration of a fake message — recreated for teaching, not a real notice.
Romance & Social Global High risk

Romance Scam

An online partner you have never met in person eventually needs money for a crisis.

Who scammers target
Lonely, widowed or recently separated adults of any age
Typical reported loss
$2,000 – $100,000 per case
Why people fall for this
The emotional relationship is real to the victim, and the first request for money is always small and reasonable.

How it works

  1. 1A profile with attractive photos matches with you and moves fast emotionally.
  2. 2They always have a reason not to video call: offshore work, deployment, bad signal.
  3. 3After trust is built, a crisis appears — customs fees, medical bills, a blocked account.
  4. 4Each payment leads to another, larger request.

Real-world example

After four months of daily messages, Susan's partner — an "engineer on an oil rig" — needs $4,500 to release equipment from customs. Six payments later he stops replying.

  • They declare strong feelings very quickly and never video call.
  • Photos look professional; a reverse image search shows another person.
  • Money requests arrive as a one-time emergency, then repeat.

  • Do a reverse image search on their photos early.
  • Never send money, crypto or gift cards to someone you have not met in person.
  • Talk to a friend or family member before sending anything — isolation is the scammer's tool.
  • Report the profile to the platform and to your national fraud service.

What it looks like

Unknown contact
"I just need this once, then I fly to you"
Wait, why do I need to scan?
Illustration of a fake message — recreated for teaching, not a real notice.
Tech Support Global Medium risk

Tech Support Pop-Up

A scary full-screen warning tells you your computer is infected and gives a support number.

Who scammers target
Older and less confident computer users
Typical reported loss
$200 – $5,000 per case
Why people fall for this
The alarm looks like it came from the computer itself, and the caller sounds patient and professional.

How it works

  1. 1A web page hijacks your screen with alarms and a "Microsoft / Apple security alert".
  2. 2The number on screen belongs to a call centre, not the software vendor.
  3. 3The "technician" asks you to install remote access software to "clean" the machine.
  4. 4They then show fake evidence of hacking and charge for a fake service — or open your banking app.

Real-world example

A loud alert fills Robert's screen. He calls the number, lets a technician connect, and is told his bank account has been breached and a "refund" was overpaid. He is talked into wiring back $6,000.

  • Real security software never shows a phone number to call.
  • You are asked to install AnyDesk, TeamViewer or similar to fix a virus.
  • The technician asks you to log into your bank while they watch.

  • Close the browser (force quit if needed) — the alert is just a web page.
  • Never call a number shown in a pop-up; use the vendor's official website.
  • Refuse all remote-access requests from inbound contacts.
  • If you gave access, disconnect from the internet, uninstall the tool and call your bank.

What it looks like

Remote access app
⚠ Security alert: call 1-8XX-XXX-0192 now
DenyAllow
Illustration of a fake message — recreated for teaching, not a real notice.
Phishing Global Medium risk

Parcel Delivery Fee Phishing

A text says your parcel is held and asks for a tiny fee — which harvests your card details.

Who scammers target
Anyone who shops online — a large share of people are expecting a parcel
Typical reported loss
$50 – $1,500 per case
Why people fall for this
The tiny fee feels too small to be worth a scam, so people pay without checking the sender.

How it works

  1. 1You receive an SMS or email from a courier: "Your package is on hold, unpaid customs fee."
  2. 2The link opens a convincing copy of the courier's site.
  3. 3A small fee is charged to capture the full card number, expiry, CVV and a one-time code.
  4. 4Your card is then used for large purchases or added to a mobile wallet.

Real-world example

Ana pays a $1.99 "redelivery fee" on a page that looks exactly like the courier's. Two days later a $1,400 electronics purchase appears on her card.

  • You are not expecting a delivery, or the message has no real tracking number.
  • The web address is a lookalike domain with extra words or hyphens.
  • A trivial fee page asks for CVV plus a code sent by your bank.

  • Track parcels only in the courier's official app or by typing their address yourself.
  • Never enter card details on a page reached from an unexpected message.
  • If you entered details, freeze the card in your banking app immediately.
  • Report the message as phishing and forward it to your national reporting service.

What it looks like

Messages · +91 90XXX 41288
USPS: parcel on hold. Pay $1.99: usps-redelivery.help
Today · 11:42
Illustration of a fake message — recreated for teaching, not a real notice.
Government & Tax United States High risk

Fake IRS Tax Demand Call

A caller claiming to be the IRS threatens arrest unless you pay back taxes immediately.

Who scammers target
Older adults, recent immigrants and first-time taxpayers
Typical reported loss
$500 – $10,000 per case
Why people fall for this
Fear of arrest overrides caution, and spoofed caller ID makes the number look official.

How it works

  1. 1A spoofed number shows as "IRS" or a Washington DC area code.
  2. 2The caller reads a fake badge number and claims a lawsuit has been filed against you.
  3. 3They demand payment today by gift cards, wire transfer, crypto ATM or a prepaid debit card.
  4. 4They stay on the line so you cannot verify anything, and threaten police at your door.

Real-world example

Carlos is told he owes $4,300 in back taxes and that a warrant will be issued in one hour. He is instructed to buy Target gift cards and read the numbers out. The IRS never called him.

  • The IRS never initiates contact by phone demanding immediate payment — it writes letters.
  • Any government agency asking for gift cards, crypto or wire transfers is fake.
  • Threats of immediate arrest, deportation or licence suspension.

  • Hang up. Check your real balance at irs.gov or call the IRS on their published number.
  • Never pay a tax bill with gift cards, crypto or a wire transfer.
  • Report the call at reportfraud.ftc.gov and to TIGTA.
  • Tell older relatives about this script — it is one of the most repeated in the US.

What it looks like

Incoming call
IRS ENFORCEMENT · "Badge #4471, warrant pending"
"Approve the request on your app to receive the refund."
Illustration of a fake message — recreated for teaching, not a real notice.
Government & Tax United States High risk

Social Security Number "Suspension"

A recorded call says your SSN has been suspended for criminal activity and asks you to confirm it.

Who scammers target
Retirees and benefit recipients in the United States
Typical reported loss
$500 – $15,000 per case
Why people fall for this
Losing benefits or an identity number feels catastrophic, so people cooperate to 'fix' it.

How it works

  1. 1A robocall claims your Social Security number was linked to drug trafficking or money laundering.
  2. 2Pressing 1 connects you to a "federal officer" who confirms your name and SSN.
  3. 3You are told to move your money to a "safe federal account" while the case is investigated.
  4. 4The account belongs to the fraudsters, and your SSN is now available for identity theft.

Real-world example

Dorothy is told her SSN was found on a car rented at the border. To protect her savings she wires $22,000 to a "secure Treasury account" and buys gift cards for the rest.

  • A Social Security number can never be suspended — that is not a real thing.
  • You are asked to confirm or read out your SSN to an inbound caller.
  • Instructions to move money to a "safe" government account.

  • Hang up and call the SSA yourself at their published number.
  • Never confirm your SSN, date of birth or bank details to an inbound caller.
  • Freeze your credit with all three bureaus if you shared your SSN.
  • Report it at ssa.gov/fraud and reportfraud.ftc.gov.

What it looks like

Incoming call
Automated: "Your SSN has been suspended. Press 1."
"Approve the request on your app to receive the refund."
Illustration of a fake message — recreated for teaching, not a real notice.
Healthcare United States Medium risk

Medicare Card & Equipment Scam

A caller offers a new Medicare card, brace or genetic test and only needs your Medicare number.

Who scammers target
Adults over 65 and their carers
Typical reported loss
$100 – $2,000 plus identity misuse
Why people fall for this
Health cover feels administrative and confusing, so a routine-sounding request for card details seems normal.

How it works

  1. 1A caller claims new plastic Medicare cards are being issued and asks to verify your number.
  2. 2Or they offer a "free" back brace, DNA cancer screening or COVID test kit.
  3. 3Your Medicare number is then used to bill for equipment and services you never received.
  4. 4You may only find out when a legitimate claim is denied as already used.

Real-world example

Frank accepts a free knee brace over the phone and gives his Medicare number. Two braces arrive; Medicare is billed $1,900. When he later needs a real brace, the claim is refused.

  • Unsolicited offers of free medical equipment or genetic testing.
  • A request for your Medicare number over the phone or at a health fair.
  • Pressure to accept something "at no cost to you".

  • Treat your Medicare number like a credit card number — never give it to an inbound caller.
  • Check your Medicare Summary Notices for services you did not receive.
  • Only accept equipment ordered by your own doctor.
  • Report suspected fraud to 1-800-MEDICARE and reportfraud.ftc.gov.

What it looks like

Incoming call
"Medicare Benefits Dept — confirm your number"
"Approve the request on your app to receive the refund."
Illustration of a fake message — recreated for teaching, not a real notice.
Phishing United States High risk

Bank Fraud Alert Text (Smishing)

A text asks you to confirm a suspicious charge — then a "fraud agent" calls to walk you through it.

Who scammers target
Everyone with a bank account — sent in bulk to millions of numbers
Typical reported loss
$300 – $8,000 per case
Why people fall for this
The message warns of fraud, so acting fast feels like the safe choice rather than the risky one.

How it works

  1. 1You get a text: "Did you authorize a $612 purchase? Reply Y or N."
  2. 2Replying N triggers a call from a spoofed bank number.
  3. 3The "fraud agent" already knows your name and last four digits, which builds trust.
  4. 4They ask for the one-time code, or tell you to transfer money to a "secure account" — often via Zelle to yourself.

Real-world example

Jordan replies N to a Chase fraud alert. The agent who calls sounds professional and asks him to read a code to cancel the charge. That code authorises a $3,000 transfer out of his account.

  • The bank asks you for a one-time code — real banks never do.
  • Instructions to send money to yourself to "reverse" fraud.
  • The caller creates a countdown: act now or lose the money.

  • Do not reply to the text. Open your banking app or call the number on your card.
  • Never read out a verification code, even to a caller claiming to be your bank.
  • Sending money to yourself is never how fraud gets reversed.
  • Forward the text to 7726 (SPAM) and report at reportfraud.ftc.gov.

What it looks like

Messages · +91 90XXX 41288
FreeMsg: Did you authorize $612.00 at BESTBUY? Reply N
Today · 11:42
Illustration of a fake message — recreated for teaching, not a real notice.
Payment App Fraud United States High risk

Zelle Instant Transfer Scam

Zelle payments settle instantly and are treated as authorised, so a tricked transfer is rarely refunded.

Who scammers target
Bank customers using instant transfers, particularly under 45
Typical reported loss
$500 – $5,000 per case
Why people fall for this
The 'send it to yourself to cancel the fraud' instruction sounds protective and comes from a spoofed bank number.

How it works

  1. 1A seller, landlord or "bank agent" pushes you to pay or move money by Zelle.
  2. 2Zelle transfers are irreversible and treated as payments you authorised.
  3. 3Common covers: a rental deposit, concert tickets, a puppy, or a fraud-department 'safety transfer'.
  4. 4Once sent, the money is withdrawn from the recipient account within minutes.

Real-world example

Aisha pays a $1,200 apartment deposit by Zelle after a video tour. The listing was copied from a real agency; the apartment was never available and her bank cannot recall the payment.

  • Anyone insisting on Zelle instead of a card or escrow for goods or deposits.
  • A "bank agent" telling you to Zelle money to yourself or a safe account.
  • A deal that requires payment before you can see the item or property in person.

  • Use Zelle only for people you personally know and trust.
  • Pay for goods with a credit card so you keep chargeback protection.
  • Verify any bank instruction by calling the number on your card.
  • Report unauthorised activity to your bank in writing the same day.

What it looks like

Investment app (sideloaded)
Your balance
₹1,24,800
Send $1,200 to +1 (415) 555-0142 · Instant, cannot cancel
Illustration of a fake message — recreated for teaching, not a real notice.
Payment App Fraud United States Medium risk

Venmo & PayPal Fake Invoice

A real-looking invoice or payment notice arrives, with a support number that belongs to the scammer.

Who scammers target
Frequent users of peer-to-peer payment apps
Typical reported loss
$100 – $2,500 per case
Why people fall for this
The invoice or alert arrives inside the real app or from real-looking email, so it inherits the platform's trust.

How it works

  1. 1You receive a genuine PayPal or Venmo notification for a purchase you did not make.
  2. 2The scammer created the invoice, so the email really is from the platform.
  3. 3The "dispute this charge" number in the note is the scammer's call centre.
  4. 4They then ask for remote access or a refund transfer to fix it.

Real-world example

Nina gets a PayPal invoice for $749 of crypto. She calls the number in the note, is told to install a support app, and watches $2,400 leave her checking account.

  • A support phone number written inside the invoice or note field.
  • A charge you don't recognise for an unusually large round amount.
  • Any instruction to install software to obtain a refund.

  • Never call a number printed inside an invoice — use the app's official help centre.
  • Check your real transaction list inside the app; unpaid invoices take no money.
  • Report and cancel the invoice from within the platform.
  • Enable two-factor authentication on all payment apps.

What it looks like

Investment app (sideloaded)
Your balance
₹1,24,800
Invoice #8842 · $749.00 · "Call 1-8XX-XXX-2210 to dispute"
Illustration of a fake message — recreated for teaching, not a real notice.
Impersonation United States Medium risk

Fake Amazon Support Call

"Amazon" calls about a suspicious order, then converts the call into a refund and remote-access scam.

Who scammers target
Regular online shoppers, especially older adults
Typical reported loss
$200 – $6,000 per case
Why people fall for this
An unexpected large order feels like an emergency, and the 'refund' path leads straight to remote access.

How it works

  1. 1An automated call or email reports a large order — an iPhone, a laptop — that you did not place.
  2. 2You are transferred to "account security", who asks to verify your identity.
  3. 3They connect remotely to "process the refund" and show a fake overpayment on screen.
  4. 4You are then pressured to return the difference in gift cards, crypto or wire transfer.

Real-world example

Helen is told a $1,299 laptop shipped to another state. During the "refund", the screen shows $9,000 credited instead of $900, and she is begged to return the difference before the agent "loses his job".

  • Amazon does not phone customers about orders or ask to access your device.
  • A refund that mysteriously overpays you.
  • Emotional pressure: the agent will be fired unless you help.

  • Hang up and check your order history in the Amazon app.
  • Never allow remote access to your computer for a refund.
  • Banks and retailers never ask for gift cards to correct a refund.
  • Report the call at reportfraud.ftc.gov.

What it looks like

Incoming call
"Amazon Security — order #114-3392 confirmed"
"Approve the request on your app to receive the refund."
Illustration of a fake message — recreated for teaching, not a real notice.
Employment United States Medium risk

Remote Job Offer & Check Scam

A well-paid remote job hires you instantly, sends a check for equipment, and the check later bounces.

Who scammers target
Students, new graduates and people looking for remote work
Typical reported loss
$500 – $4,000 per case
Why people fall for this
The cheque clears on screen for several days, which looks like proof the employer is real.

How it works

  1. 1You are recruited by text or on a job board for a remote role with unusually good pay.
  2. 2The "interview" happens entirely over chat, often on Telegram or Signal.
  3. 3You are sent a check or deposit to buy equipment from a specified vendor.
  4. 4The check bounces days later; the money you forwarded to the vendor is gone and you owe the bank.

Real-world example

Devon is hired as a "data QA associate" at $38/hour. A $4,200 check arrives for a home-office setup; he wires $3,600 to the recommended supplier. The check is returned as fraudulent and his account goes negative.

  • Hired without a video interview, or interviewed only in a chat app.
  • Any job that sends you money to spend on their behalf.
  • Requests for your bank login, SSN or a fee before you start.

  • Never buy equipment with funds an employer sent you — legitimate companies ship it.
  • Verify the company through its official website and call its published number.
  • Wait for a check to fully clear (weeks, not days) before spending it.
  • Report job scams to the FTC and to the job board.

What it looks like

Unknown contact
"Congrats! Deposit $4,200 sent for your equipment"
Wait, why do I need to scan?
Illustration of a fake message — recreated for teaching, not a real notice.
QR & Merchant Fraud India Medium risk

The QR Code Overlay

A fake QR sticker is pasted over the shop's real one, so your money goes to the scammer.

Who scammers target
Shoppers at street stalls, small shops and parking meters
Typical reported loss
$10 – $500 per payment
Why people fall for this
The code sits exactly where you expect it to, and almost nobody reads the payee name before paying.

How it works

  1. 1The fraudster prints a QR code linked to their own UPI ID.
  2. 2They paste it over the shop's genuine QR at a petrol pump, kirana store or parking lot.
  3. 3You scan and pay as usual — the money lands in the fraudster's account.
  4. 4The shopkeeper never receives a confirmation, and by then the fraudster has withdrawn the funds.

Real-world example

Rahul fills petrol worth ₹800 and scans the QR taped to the pump. His app shows the payee as "SK ENTERPRISES" instead of the pump's name, but he taps pay in a hurry. The attendant says no payment arrived, so Rahul pays again in cash — losing ₹800.

  • The payee name in your payment app doesn't match the shop's name or board.
  • The sticker looks freshly pasted, peels at the corners, or sits on top of another QR.
  • The shop has no POS machine or passbook to cross-check the credit.

  • Always read the payee name on the confirmation screen before entering your PIN.
  • Ask the shopkeeper to confirm the name shown on your screen is theirs.
  • Prefer paying by entering the shop's UPI number, or pay in cash if anything looks off.
  • If you already paid, report it in the app immediately and call 1930 (cyber-crime helpline).

What it looks like

UPI · Confirm payment
Payee name
Payee: SK ENTERPRISES
Illustration of a fake message — recreated for teaching, not a real notice.
Payment App Fraud India High risk

Fake Customer Support Collect Request

A fake helpline agent sends you a "refund" request that actually takes money out.

Who scammers target
Anyone searching for a helpline number online after a failed payment
Typical reported loss
$100 – $3,000 per case
Why people fall for this
The victim made the call themselves, which makes the 'agent' feel legitimate from the first second.

How it works

  1. 1You search for a bank or wallet helpline online and land on a fake listing or advert.
  2. 2The "agent" sounds professional, knows banking terms, and promises a quick refund.
  3. 3They send a UPI collect request framed as the refund.
  4. 4Approving it debits your account instead of crediting it.

Real-world example

Meena's food order fails and ₹450 is stuck. She calls the number from a search result. The agent sends a request for ₹450 and says "approve to receive your refund". She enters her PIN and ₹450 leaves her account — then he asks her to try again for ₹4,500.

  • You are asked to APPROVE a request or enter your PIN to RECEIVE money — receiving money never needs a PIN.
  • Heavy urgency: "your card will be blocked in 5 minutes".
  • The request comes from a random personal UPI ID, not a verified merchant.

  • Never enter your UPI PIN to receive money. Money in never needs a PIN.
  • Find helpline numbers only on the official app or the bank's printed statement.
  • Hang up and call back on the number on the back of your card.
  • Reject and report unknown collect requests inside your payment app.

What it looks like

Incoming call
+91 90XXX 41288 · "Bank Refund Dept."
"Approve the request on your app to receive the refund."
Illustration of a fake message — recreated for teaching, not a real notice.
Phishing India High risk

KYC Phishing Link

An SMS says your account will be blocked unless you re-do KYC on a fake bank page.

Who scammers target
Bank and wallet customers, sent in bulk by SMS and email
Typical reported loss
$200 – $5,000 per case
Why people fall for this
Verification requests are a real part of banking, so a deadline to complete one feels ordinary.

How it works

  1. 1You receive an SMS or WhatsApp message warning your account will be suspended today.
  2. 2The link opens a page that looks exactly like your bank's website.
  3. 3It asks for your card number, CVV, PIN and the OTP — all on one screen.
  4. 4The fraudster uses those details to empty the account within minutes.

Real-world example

Arjun gets an SMS: "Dear customer, your KYC expires today. Update now: bit.ly/kyc-verify". The page carries his bank's logo. He fills in his card details and shares the OTP. ₹62,000 is transferred in three transactions before he realises.

  • The web address isn't the bank's official domain (extra words, hyphens, or a shortened link).
  • One form asks for PIN, CVV and OTP together — real banks never do this.
  • The sender is a 10-digit mobile number instead of the bank's registered SMS header.

  • Never open KYC links from SMS or WhatsApp. Type the bank's address yourself or use its app.
  • Never share OTP, CVV or PIN with anyone, including "bank staff".
  • If you clicked, change your net-banking password and block your card from the app.
  • Report the message as spam and forward it to your bank's official fraud channel.

What it looks like

Messages · +91 90XXX 41288
Your KYC expires TODAY. Update: bit.ly/kyc-verify
Today · 11:42
Illustration of a fake message — recreated for teaching, not a real notice.
Tech Support India High risk

Screen-Sharing Remote Drain

You are asked to install a "helper" app that lets the scammer watch and control your phone.

Who scammers target
Less technical users of any age, often after a genuine failed transaction
Typical reported loss
$500 – $20,000 per case
Why people fall for this
Installing a 'helper app' feels harmless because no password or PIN is ever requested out loud.

How it works

  1. 1A caller offers to fix a failed transaction or a slow refund.
  2. 2They ask you to install a remote-access app such as AnyDesk or TeamViewer.
  3. 3Once you share the code shown by the app, they can see your screen live.
  4. 4They read your OTPs and make transfers from your own banking app.

Real-world example

Sunita's ₹2,000 recharge fails. "Support" asks her to install an app and read out a 9-digit code. A ₹1 test debit appears, then ₹48,000 leaves her account while she watches, unable to stop it.

  • Any request to install a screen-sharing or remote-control app is a red flag, always.
  • You are asked to read out a code shown by that app.
  • A small "test" debit appears just before larger transfers.

  • Refuse all screen-sharing requests, no matter how official the caller sounds.
  • If you installed such an app, turn on airplane mode and uninstall it immediately.
  • Call your bank to freeze the account and then file a report at cybercrime.gov.in.

What it looks like

Remote access app
Allow remote control? Code: 843 219 776
DenyAllow
Illustration of a fake message — recreated for teaching, not a real notice.

Where to report, by country

Already lost money? Report it immediately — the first few hours give the best chance of freezing the funds.

Think you can spot these in the wild?

Take the quiz