Immediate Red Flags
- Requests for remote computer access — No legitimate company will ask to remotely control your device to "fix" an issue or process a refund.
- Demands for gift card payment — No legitimate business accepts gift cards as payment for fees, deposits, or account charges.
- Requests for your full Social Security number — Companies may verify the last 4 digits, but never ask for your full SSN over the phone.
- Requests for one-time codes — If someone asks you to read back a code you received via text or email, they're trying to bypass two-factor authentication.
- Pressure and urgency — Scammers create artificial urgency ("Your account will be closed in 10 minutes") to prevent you from thinking clearly.
- Requests for wire transfers or cryptocurrency — These payment methods are irreversible and untraceable. Legitimate companies don't request them.
Verification Steps Before Sharing Any Information
- Hang up and verify independently. If you're unsure, end the call. Find the company's official number on their website or your statement and call back.
- Check the URL carefully. Scammers use look-alike domains. Look for slight misspellings or extra words in the web address.
- Search for scam reports. Search the phone number or website name plus "scam" or "reviews" to see if others have reported it.
- Trust your instincts. If something feels off — too pushy, too urgent, too good to be true — it probably is.