Immediate Red Flags

  • Requests for remote computer access — No legitimate company will ask to remotely control your device to "fix" an issue or process a refund.
  • Demands for gift card payment — No legitimate business accepts gift cards as payment for fees, deposits, or account charges.
  • Requests for your full Social Security number — Companies may verify the last 4 digits, but never ask for your full SSN over the phone.
  • Requests for one-time codes — If someone asks you to read back a code you received via text or email, they're trying to bypass two-factor authentication.
  • Pressure and urgency — Scammers create artificial urgency ("Your account will be closed in 10 minutes") to prevent you from thinking clearly.
  • Requests for wire transfers or cryptocurrency — These payment methods are irreversible and untraceable. Legitimate companies don't request them.

Verification Steps Before Sharing Any Information

  1. Hang up and verify independently. If you're unsure, end the call. Find the company's official number on their website or your statement and call back.
  2. Check the URL carefully. Scammers use look-alike domains. Look for slight misspellings or extra words in the web address.
  3. Search for scam reports. Search the phone number or website name plus "scam" or "reviews" to see if others have reported it.
  4. Trust your instincts. If something feels off — too pushy, too urgent, too good to be true — it probably is.