A no-nonsense guide to spotting scams before they spot you. Built on real conversations. Zero fluff. Completely free.
Let's get one thing out of the way right now. Getting scammed doesn't mean you're stupid. It means someone worked very hard to manipulate you. These are professionals who have spent years studying human psychology, testing scripts, and refining their approach on thousands of targets. They're basically doing a very evil version of market research.
Whether it's a romance scam, a crypto pitch, a fake CRA call, or a Nigerian prince with surprisingly good news — every single scam is built on the same foundation.
They don't attack your wallet first. They attack your emotions first. The money comes later, after they've found the unlocked door.
Learn these and you'll start seeing them everywhere.
The romance scam's best friend. They make you feel seen and understood. Spoiler: they say that to everyone.
"You owe back taxes." "There's a warrant for your arrest." Fear shuts down rational thinking. That's the whole point.
Crypto returns that seem too good to be true always are. The promise of easy money is engineered to be tempting.
"I just need help getting a gift card for my sick friend." Your kindness is a feature they're exploiting, not a flaw.
Urgency is designed to stop you from thinking. When someone says there's no time to verify — that's exactly when you verify.
"You see things differently than most people." When a stranger tells you you're special within minutes, they want something.
These scammers aren't winging it. They have tested, refined, battle-hardened scripts that have worked on thousands of people. When they ask "are you married?" they already know what to do with every possible answer. It's a choose-your-own-adventure book where every path leads to the same place.
Reading about scams is one thing. Seeing them in action is another. The following are real scam attempts — annotated so you can see exactly what's happening at each step.
This one is sneaky because it comes from someone you actually know. Or at least — someone pretending to be them.
Sweet, right? A sick kid. A thoughtful friend. A small favour between people who trust each other. Except the friend didn't write this. Someone hacked his email. Let's break it down.
Pancreatitis. Inflamed gallbladder. Surgery tomorrow. Specific medical details make it feel real — vague stories feel fake, specific ones feel true. It also creates urgency without being obvious about it.
This explains why they need YOU specifically. It sounds plausible — we've all had a website glitch. But it's really explaining away: why doesn't he just buy it himself?
"I'll reimburse you." Four words that have cost real people thousands of dollars. The reimbursement never comes. Gift cards are untraceable and irreversible the moment they're sent. That's the entire reason they use them.
Once there was a reply, the next message dropped the warm storytelling and got transactional fast: "Kindly get back to me with confirmation once you have it done." The emotional story was the hook. This is the close. That tonal whiplash is a tell.
Before you ever buy a gift card for someone who emailed you asking for one — send them a text. Not a reply email. A text to the number you already have. "Hey did you just email me about a gift card?" If it's really them, they'll say yes. If not, you just saved $300 and warned a friend their email was hacked.
Romance scams are the longest con in the book. The goal isn't to ask for money on day one. The goal is to make you fall in love first. The money ask comes weeks later, after your guard is completely down.
"Thank you for following" frames the message as polite and reciprocal. "How was your day?" is engineered to get you talking about yourself. This is the warmup phase. Their only job right now is to get you responding.
"My name is Lisa, I'm from the UK and currently live in New York." The UK but lives in New York explains any accent inconsistencies if the conversation moves to voice or video. Real people introducing themselves to strangers lead with a shared interest, not just a biography.
When the game was called out, the response was "What old tricks? I don't understand what you mean." A real person who just got accused of running a scam would react with something human. Instead they got confused — because the response didn't match any expected input in their script.
"Do you want to send messages via WhatsApp or Telegram?" Every romance scammer eventually tries to move you off the original platform. WhatsApp and Telegram have almost no fraud monitoring. The move is about getting somewhere they can operate freely.
1. The immediate DM after a follow. Real people don't do this.
2. The move to WhatsApp or Telegram. Every single time. No exceptions.
3. No specific references to anything you actually said or posted. Because they haven't read it. You're a name on a list.
This one arrived as a DM on X. And it connects to something bigger.
"Thank you for your attention." Not "hey" or "hello." Like a corporate newsletter sign-off used as a greeting. Before a single red flag is raised, something feels wrong. That feeling is data. Don't talk yourself out of it.
"I'm Elon Musk's personal assistant. We've noticed your engagement on Mr. Musk's page. Would you like to join his private fan base? Do you have WhatsApp or Telegram?" Elon Musk does not have a PA DMing random people. "Something truly extraordinary" is vague. WhatsApp is requested on the very first real message — no warmup at all.
Here's where it gets sophisticated. There was another account — let's call her Emily — that had been posting heavy Elon and Tesla content to attract a specific audience. She DM'd new followers with a refined opener to gauge responsiveness. Then this more aggressive "Elon's assistant" account targeted people who engaged with that content. Two different accounts. One operation. Emily was the fishing line. This was the hook.
Ask yourself: Why me specifically? Elon Musk's personal assistant is not DMing you. A celebrity is not privately reaching out. There is always a reason you were contacted. Finding that reason tells you everything about what they actually want.
Your phone rings. Unknown number. You answer. A recorded voice tells you that your Social Security number has been compromised. Or that you owe back taxes. Or that there's a warrant out for your arrest.
The Canada Revenue Agency contacts taxpayers by mail first. Always. A phone call announcing an arrest warrant is not how the Canadian legal system works under any circumstances.
$3,847 feels real because it's oddly specific. Round numbers feel fake. Weird specific numbers feel official. This is completely intentional.
This is where the whole thing collapses. No government agency on earth accepts gift cards as payment for tax debts. Not Google Play. Not iTunes. Not Amazon. Not any cards. Ever. This single detail exposes the entire scam regardless of how convincing everything else sounded.
A pressure technique. It assumes you're complying and moves you into action mode before you've agreed to anything.
Hang up. If you're genuinely worried about your taxes, call the CRA directly at 1-800-959-8281 — the number from their official website, not from anyone who calls you.
This one is different from everything above. Emily isn't going for your wallet. She's going for something more valuable. This is what a sophisticated managed persona looks like in real life.
No specific reference to anything. No mention of a post, an opinion, a topic. Just warm flattery that could apply to literally anyone. "You see things from a deeper angle" makes you feel seen without actually seeing you at all. The follow-up question is an open-ended hook to get you talking.
"I've had moments like that too." Reflecting your experience back at you to create a sense of shared understanding. They haven't actually shared anything — they've only implied that they have. It's completely vague. It costs them nothing.
Two responses within nine minutes validating everything said, with no pushback. Real intellectually curious people disagree sometimes. They add something. They complicate your thinking. Pure validation with no friction is a manipulation technique. It feels wonderful. That's the problem.
Emily probably doesn't want your money. She wants your attention, your trust, and eventually your beliefs. Influence operations need you to follow the account, engage with the content, gradually absorb a worldview being carefully fed to you through a persona you've come to trust. That's worth more to certain operations than any gift card ever could be.
The most dangerous scam isn't the one that takes your money. It's the one that takes your trust so gradually you never notice it happening. The only thing that stopped this one was a gut feeling. Something smelled off. Cultivate that feeling. Trust it. Act on it.
Everything so far has been theory and real examples. Now it's your turn. Read each scenario carefully, think about what's wrong, then hit the button to see the full breakdown. Take a second with each one before revealing the answer — you might surprise yourself.
What's wrong here? Take a moment before revealing.
Hang up or ignore the text. Call the number on the back of your actual bank card. Not the number in the text. Ever.
What's wrong? Or is anything wrong?
Maybe nothing. Maybe everything. This is the uncomfortable truth about impersonation scams — they're designed to be plausible. Jennifer might genuinely be traveling. Wallets do get stolen.
Don't reply to the message at all. Call Jennifer directly on the number you have for her. If she answers and confirms she's stranded, help her. If her account was hacked, she needs to know immediately. Thirty seconds. One call. Solves it either way.
How many problems can you spot?
Never click links in security emails. Open a new browser tab and go directly to amazon.com yourself. If there's actually a problem with your account you'll see it there.
You already know this one. But how many specific red flags can you name?
This is practically a greatest hits compilation of phone scam red flags.
Hang up. Call the CRA at 1-800-959-8281 if you're worried — the number from their official website, not from anyone who called you.
Identify every mechanism before reading on.
This is a pig butchering setup. Every single sentence is doing specific work.
Don't respond at all. Any response — even a skeptical one — confirms your account is active and responsive, which gets you added to a warmer leads list.
What do you do?
Three weeks of genuine connection. Real conversations. Remembered details. Video calls. Feelings involved. And now this.
Everything that came before this moment — every wonderful conversation, every remembered detail — was investment. Not in you. In this moment. The entire relationship was constructed to make you trust this person enough that when the pitch arrived your guard would be completely down.
Stop. Do not invest a single dollar. Then do something that will feel uncomfortable — tell someone in your real life about this person. A friend. A family member. Someone who hasn't been on this three-week journey and can see it with fresh eyes. The scammer's greatest weapon at this stage is isolation. Bringing someone else in breaks the spell. If the relationship is real, it will survive you being careful with your money.
Most scam advice ends at "don't fall for it." That's fine as far as it goes. But it leaves out the part where you actually do something useful. Every scam you identify and report is data that real people use to track operations, warn others, and shut networks down.
Once you've identified a scam, disengage completely. Any engagement confirms your number or account is active and monitored — which gets you added to more lists, not fewer.
Clicked a link? Run a malware scan immediately (Malwarebytes has a free version). Entered a password? Change it everywhere you use it and turn on two-factor authentication. Sent money? Contact your bank immediately — wire transfers can sometimes be recalled, gift cards rarely can but try anyway.
If someone impersonated a friend — tell that friend immediately. If you got a scam call — mention it to your parents, your grandparents, anyone who might be more vulnerable. A quick "hey I got this weird call today claiming to be the CRA, just so you know" costs you nothing and could save them everything.
Canada: Canadian Anti-Fraud Centre at antifraudcentre-centreantifraude.ca or 1-888-495-8501.
USA: Federal Trade Commission at reportfraud.ftc.gov or FBI at ic3.gov.
Everywhere: Report the account on the platform directly. Report phishing emails to your email provider. These reports do get reviewed. It takes 30 seconds.
Don't lead with "how did you not see that coming?" People who have been scammed — especially romance scam victims — often feel deep shame. Start with what we established at the beginning of this course: getting scammed doesn't mean you're stupid. Then help them report it. Sit with them and do it together if that helps.
These are the ones currently in heavy rotation. Share this list with anyone in your life who might be more vulnerable.
You owe back taxes and will be arrested if you don't pay immediately. The CRA contacts you by mail first. Always. If someone calls claiming to be the CRA demanding immediate payment, hang up. The real CRA number is 1-800-959-8281.
Your Social Security or Social Insurance Number has been "suspended" due to suspicious activity. SINs and SSNs cannot be suspended. This is not a thing that exists. Hang up.
Someone who sounds young and distressed calls. "Grandma? It's me." They wait for you to fill in which grandchild. "Oh my God, is that Michael?" "Yes — I'm in trouble." Now they know the name. The request for secrecy ("please don't tell Mom and Dad") is designed to isolate you from anyone who might talk you out of it. The fix: hang up and call the grandchild directly on the number you already have.
"Your computer has been infected. Press 1 to speak with a Microsoft technician." Microsoft does not monitor your computer and call you when something goes wrong. If you press 1, they'll ask for remote access to your machine. Hang up.
"Suspicious activity has been detected on your account. Call this number immediately." Hang up and call the number on the back of your actual bank card instead. Never the number they give you.
Everything you need in one place. Hit the print button to get a wallet-sized card you can keep — or share with anyone in your life who needs it.
Trust the feeling. That quiet sense that something is off is your brain pattern-matching faster than you can articulate. Real opportunities survive a night of thinking. Real relationships survive a moment of caution.
If this course helped you — pass it on. Somewhere in your life there is someone who needs exactly this information and doesn't have it yet. A parent. A grandparent. A friend who almost got caught by something that smelled off. That's how we actually make a dent in this. One person at a time.