The Pattern Behind Almost Every Scam
Scams look endlessly different and are built from the same four parts. Learn the shape and you stop needing to recognise each new version.
The Four Parts
Whatever the story, a scam has to do four things. It has to reach you, give you a reason to act, create pressure so you act quickly, and move your money somewhere it cannot be recovered. The story is the part that changes. The structure almost never does.
- Contact you out of the blue. A call, a text, an email, a message on a dating app, a pop-up on your screen. You did not start the conversation.
- Claim authority or a relationship. Your credit union's fraud department, the IRS, Microsoft support, a grandchild in trouble, a recruiter, a romantic interest, a friend whose account was cloned.
- Apply urgency. Something terrible happens if you do not act now, or something wonderful disappears if you hesitate.
- Ask for an irreversible payment. Gift cards, a wire, a payment app, cryptocurrency, cash in an envelope. Occasionally they ask for information rather than money, which is the same thing one step earlier.
Urgency and irreversibility travel together, and legitimate organisations rarely need either. If something is genuinely wrong with your account, it will still be wrong in an hour after you have hung up and called back on a number you looked up yourself.
Why Urgency Is the Tell
Urgency is not decoration. It is the mechanism. Under time pressure people stop evaluating and start complying, which is precisely the state a scam needs you in. That is why the story is always something that cannot wait: a warrant being issued, an account being drained, a package held at customs, a deal closing tonight.
Real institutions work on their own timescale and are comfortable with you calling them back. A caller who resists you hanging up and calling the number on your card has told you what they are, whatever else they say.
Why the Payment Method Is the Other Tell
Follow the money and the intent is obvious. Scammers ask for methods that cannot be clawed back once sent:
- Gift cards. There is no legitimate reason for any agency, utility, employer or financial institution to be paid in gift cards. None. This one rule alone stops a large share of scams.
- Wire transfers. Fast and effectively final once collected.
- Payment apps used to send money to someone you do not know personally. Person-to-person transfers are designed to work like handing over cash.
- Cryptocurrency. Irreversible by design, which is exactly why it appears in so many scams.
- Cash by courier or mail. If someone wants to send a driver to your home for an envelope, you are being robbed politely.
The pattern is worth stating as a rule: the harder a payment is to reverse, the more suspicious an unexpected request for it should make you.
The Sentence That Does Not Exist
No real fraud department has ever needed you to move your money to keep it safe.
Your credit union can freeze a card, block a transaction and open a dispute from their side. They do not need you to transfer your balance to a "secure account", buy gift cards, or withdraw cash for a courier. Any version of this is a scam, every time, with no exceptions worth remembering.
Did I start this contact? Is someone rushing me? Am I being asked to pay in a way I cannot undo? Two yeses out of three is a scam often enough that treating it as one costs you almost nothing.
Why It Is Not About Being Gullible
People who fall for scams are not unusually foolish. The messages are tested at scale, refined on thousands of targets, and aimed at moments when anyone is distracted: moving house, a new job, a death in the family, a hard week.
Believing it cannot happen to you is itself a risk factor, because it means you have never decided in advance what you would do. The people who handle it best are not the most sceptical. They are the ones who already had a rule.
The Rule Worth Having
Stop. Hang up. Call back on a number you find yourself.
Not the number that called you, not the number in the email, not the number the pop-up displays. The one on your card, your statement, or the institution's own website that you navigated to yourself.
That single habit defeats every imposter scam, because impersonating an organisation only works while you stay on the line the scammer controls. It costs you two minutes on the rare occasion the call was real, and those two minutes are the cheapest insurance available.
Tell Someone Before You Act, Not After
Scams almost always include a reason to keep it quiet: the investigation is confidential, your family will not understand, do not tell the bank what it is for. Secrecy is a component, not a coincidence, because saying it out loud to one other person is what usually breaks it.
Agree now, while nothing is happening, that anything urgent and money-related gets mentioned to one person before it goes anywhere. That is the whole defence, and it works better than any amount of vigilance.