Identifying a scam is no longer as simple as misspelled words, questionable email addresses, or ridiculous promises of riches from a far-flung prince. While those scams still exist, they are now largely being overshadowed by more sophisticated swindles that make even the most experienced and skeptical among us take a second, and sometimes third, look.

Scammers are now able to imitate legitimate businesses and government agencies, spoof phone numbers so it looks like calls are coming from a legitimate source, and create convincing emails, websites, and documents. Artificial intelligence adds another tool to the arsenal, making it easier to create realistic messages and even impersonate voices. In 2026, the IRS specifically added AI-enabled phone impersonation to its annual “Dirty Dozen” list of tax scams.

The good news is that new tools in the hands of bad actors still have weaknesses. Even sophisticated scams tend to rely on some surprisingly predictable tactics – but it’s up to you to be familiar with them so you can outsmart the crooks.

The Pressure Playbook

The Federal Trade Commission reports that texts have become an especially common way for scammers to make contact, including messages about unpaid tolls and package deliveries. You’ve likely received a few yourself. How about someone claiming to represent your bank “warning” you that your account has been compromised. Or perhaps an “IRS agent” is demanding payment to avoid garnishment (or worse), and a Social Security impersonator claims your benefits or Social Security number are in jeopardy.

And they’re not always phone calls or texts; as government agencies caution that they’ll never demand payment over the phone, scammers are paying attention too, and are using well-disguised – but fraudulent – letterhead to send demand letters by mail.

Other scams target emotions rather than finances directly. A caller posing as a relative may claim to be in jail, injured or stranded and desperately need money. They may even sound like that beloved niece or granddaughter. After a natural disaster or humanitarian crisis, fake charities may appear almost immediately, hoping generosity will override caution.

Instead of judging a message by how professional it looks, pay attention to what it asks you to do. Red flags include:

• Pressure to act immediately or keep the situation secret.
• Threats of arrest, account closure, or other dire consequences.
• Requests for passwords, verification codes, or sensitive financial information.
• Instructions to pay by gift card, cryptocurrency, wire transfer, or cash.
• An unexpected link or attachment you're told to open.
• Requests to move money to a supposedly “safe” or “protected” account.

The Social Security Administration summarizes the basic scam formula as Pretend, Prize or Problem, Pressure and Payment. Familiarize yourself with this pattern and when you see it, stop and think.

Your Best Defense? Slow Down

Urgency is one of a scammer’s most useful tools, so take it away; their urgency is not yours. Experts advise:

• Don’t send money or provide sensitive information based solely on a phone call, email or text.
• Don’t click an unexpected link, even if the message appears to come from a company you use. Instead, independently look up the organization’s official website or phone number and contact it directly.
• If someone calls claiming to be a family member in trouble, hang up and call that person, or another relative, using a number you already know.

Government agencies are another area where knowing the rules helps.

• The IRS normally makes initial contact by U.S. mail and won’t unexpectedly demand immediate payment by text or email.
• Social Security will not threaten arrest, suspend your Social Security number, or demand immediate payment by gift card, cryptocurrency, wire transfer, or cash.

If you do fall for a scam, know that anyone can be targeted and it isn’t a matter of intelligence; criminals deliberately exploit fear, trust, generosity, and urgency. If you have lost money in a scam:

• Change your passwords.
• Report it to your financial institution.
• Contact federal authorities.

If your social security number has been compromised, you can report it at IdentityTheft.gov. You should also freeze your credit at the three major credit bureaus to prevent accounts from being opened in your name.

Remember: When something feels alarming, exciting or simply “off,” stop before you respond. Sometimes the smartest financial move you can make is doing nothing until you verify – then verify again.