How to Spot Online ScamsPhishing, Fake Texts, and Cons to Watch For

A few years ago, the scam to watch for was the pop-up: a screen full of flashing warnings screaming that your computer was infected. That one still happens every single day. In fact, most people who call me about a “virus” are actually staring at one of these pop-ups, because the page is usually rigged with blaring alarms and loud noise engineered to overwhelm your senses and flood you with panic. Those are still out there, but the con has spread far past the browser. Today it lands in your email, sometimes dressed up as a party invite from someone you know, buzzes in as a text message, and rings your phone. The good news is that once you learn what every one of these has in common, you don’t have to memorize a hundred different tricks to stay safe.

The one thread that ties every scam together

Strip away the logos, the noises, and the scary language, and nearly every scam is built from the same three pieces: manufactured urgency, sensory overload, and a demand for money, access to your computer, or your personal information. Someone wants you frightened, rushed, and overwhelmed enough to act before you have time to think, and then they want you to send money, hand over a password, or let them into your computer. That’s the entire playbook. Learn to understand that pressure, take a deep breath, and pause, and you’ve already won most of the battle, no matter what the newest version of the scam looks like.

The usual suspects

1. Phishing emails

This is the classic. An email shows up looking like it’s from your bank, Amazon, Microsoft, or Apple: “There’s a problem with your account. Click here to verify.” The link goes to a fake page built to harvest your login the moment you type it. The tells: it pushes you to act right now, and the link, if you hover over it without clicking, points somewhere that isn’t the real company. Here’s the move that catches most of them: don’t trust the name on the “from” line. That name is just a label, and anyone can type whatever they want there. Click or tap on the sender’s name to reveal the actual email address hiding behind it. If the message claims to be Amazon but the real address is something like “billing@amaz0n-security-alert.info,” you’ve caught it. When in doubt, don’t use the link at all. Open a browser and go to the company’s site the way you normally would.

2. Fake delivery texts

You get a text: “DHL: your package is being held. Pay a small fee to reschedule delivery,” with a link. It feels plausible because you probably are expecting something, most of us are these days. But carriers never text you random links asking for a few dollars, and that link leads to a page built to grab your card number. If you’re genuinely unsure about a package, go straight to the carrier’s official site or app and track it there. Never from the link in the text.

3. The “money right now” cons

These skip your computer entirely and go straight for your heart or your wallet. A caller says your grandchild has been in an accident or is sitting in jail and needs bail money this minute, and they may even put a crying, panicked young voice on the line to make it land. A “vendor” emails you an invoice for a pricey subscription you never bought, an antivirus renewal or some tech service, betting that you’ll panic and call the number printed on it to “cancel,” which drops you straight into the scammer’s lap. Or someone claiming to be the IRS or your power company insists you owe money and threatens you with arrest or with shutting off your heat before the day is done.

Here’s the thing, and I mean this sincerely: if one of these lands on you and your stomach drops, that reaction is completely normal and your feelings are valid. Any loving person would feel a jolt of fear hearing their grandchild is hurt, or a wave of dread being told they’re about to be arrested. That’s not you being gullible. That’s you being human. And that is precisely the emotion these people are counting on, because a frightened brain stops asking the obvious questions. So flip it around and use it: the moment you feel that surge of panic, treat the panic itself as the warning sign.

Every one of these cons funnels to the same demand: pay us, quickly, in a way that can’t be undone. And here is the rule that defeats all of them at once: no real business, bank, utility, or government agency will ever demand payment in gift cards, and none of them will pressure you into a rushed wire transfer over the phone. The instant someone demands gift cards, you are talking to a scammer. Hang up.

4. Fake shopping sites and too-good-to-be-true deals

An ad or a link promises a name-brand item at a price that seems completely unreal. Sometimes the price is the whole scam: you pay and nothing ships, or a knockoff shows up, or your card details get quietly sold off. Before you buy from a store you’ve never heard of, slow down and do two quick checks. First, look for real reviews from outside the site itself, search the store’s name along with the word “scam” or “reviews” and see what other shoppers ran into. Second, make sure the checkout is secure: look up in your browser’s address bar for a little padlock icon and a web address that begins with “https,” not just “http.” Fair warning, a padlock on its own isn’t proof the company is honest (scammers can add one too), so treat it as the bare minimum and lean on those reviews and your gut. And be suspicious of any deal that’s dramatically cheaper than everywhere else. If it seems too good to be true, it almost always is.

5. And yes, the pop-up is still around

The “your computer is infected, call this number” pop-up hasn’t gone anywhere, and it deserves its own walkthrough. If that’s the one you’re facing, read how to avoid tech support scams for exactly how it works and what to do.

Your shield: the rules that stop nearly all of them

• Slow down and take a deep breath. Urgency is the tell. Any message built to make you panic and act immediately is the one to be most suspicious of. You are allowed to give it ten extra minutes to check the facts, and anyone who won’t let you have those ten minutes is telling you exactly who they are.
• Never click links in messages you didn’t expect. Type the company’s web address yourself, or use the app you already trust. And don’t act on a surprise party or event invite without talking to the sender first, even a wedding. A genuine invitation from people who know you usually comes by mail or an actual conversation, not an out-of-the-blue link.
• Treat gift cards, wires, and crypto with real caution. Gift cards are the dead giveaway: no legitimate company, bank, or agency will ever ask you to pay a bill with them, period. Wire transfers and cryptocurrency do have honest, everyday uses (we even accept crypto for invoices here when a customer prefers it), but a stranger who contacted you and is rushing you to pay that way, fast and untraceable, is waving the biggest red flag there is.
• No company watches your computer in real time. Legitimate companies do not monitor your machine and cannot “detect a virus” on it from across the internet. Anyone who claims they’ve spotted an infection on your computer is either spying on you or scamming you, and either way, you don’t want them near it.
• Verify through a channel you trust. Call the number on the back of your card or on your paper statement, not the number in the suspicious message.
• When in doubt, ask. A quick question to someone you trust, or to us, costs you nothing. Cleaning up after a scam costs a great deal more.

If you already got scammed

First step, once again: take a breath. It happens to sharp, careful people every single day, and being embarrassed only slows you down. Then here’s your fast-action plan:

• Call me at The Computer Solution. You won’t be charged a cent for the phone call, or for setting up a plan of action to protect yourself. If it makes sense, we’ll schedule a security checkup for your computer, and as always, there’s no charge without results. Ever. I promise you that.
• Change your passwords, starting with your email and your bank. Your email is the master key that can reset everything else, so it comes first.
• Call your bank and card companies so they can watch for fraud and freeze anything that looks wrong.
• If you gave someone remote access or entered anything on your computer, disconnect it from the internet and have it professionally cleaned before you use it again. Remote-access tools and hidden malware need to come off completely.

The bottom line

Scammers count on speed and fear, so your very best defense is simply slowing down. You don’t need to recognize every scam ever invented. You need to recognize the pattern: pressure to act now, and a demand for money, access, or information. Feel that, and pause. And if you ever get a message or a call and just aren’t sure, bring it to us or give us a shout before you click, call, or pay. We would much rather answer a quick question than help you recover after the fact.