US scam safety handbook

What scam did your family receive?

Start with the situation in front of you: USPS delivery texts, Zelle bank alerts, IRS refund messages, Social Security calls, PayPal invoices, Marketplace buyers, AI voice calls and family emergency scams.

If it already happened

What to do if you already clicked a link

Stop communication, do not send more money and contact the bank immediately.

This is not a block of links. Follow the steps in this order.

1. Stop the damage

  1. stop communication
  2. do not send more money
  3. contact the bank immediately
  4. block the card if needed

2. Secure accounts

  1. change passwords
  2. enable 2FA
  3. revoke sessions

3. Save and report

  1. save screenshots
  2. report the incident
  3. warn family if impersonation was involved

What happened?

US scam guides

Searchable guides for urgent questions

View all guides

Most common US situations

Marketplace

USPS / FedEx: parcel delayed, pay a small fee

Situation: You receive a delivery SMS saying the address is incomplete and a small 30 cent or 1.99 dollar fee is required.

Example message: USPS Notice: delivery failed. Confirm address and pay $0.30: usps-redelivery.example

Banking

Bank alert: suspicious Zelle transfer

Situation: An SMS or call says someone is trying to send money through Zelle and asks you to urgently confirm cancellation.

Example message: Bank Fraud Dept: Zelle transfer pending. Reply YES to stop or verify at bank-zelle-alert.example

Banking

IRS tax refund promised through a link

Situation: An email or SMS promises a tax refund if you enter bank details today.

Example message: IRS Refund: you are eligible for $642. Submit bank details: irs-refund-status.example

Banking

Social Security / Medicare: account or benefits at risk

Situation: A call says your Social Security number is suspended or your Medicare card must be updated urgently.

Example message: Social Security Office: your SSN is suspended. Stay on the line to avoid legal action.

Marketplace

PayPal / Venmo: fake invoice or refund

Situation: You receive an invoice, fake refund notice or message saying an accidental payment must be returned.

Example message: PayPal Invoice: $499.99 Norton renewal. Call support now if this was not you.

Marketplace

Facebook Marketplace: buyer sent a shipping or payment link

Situation: A buyer says delivery is already paid and asks you to enter a card to receive the money.

Example message: I paid for courier delivery. Enter your card here to receive the money: marketplace-pay.example

AI scams are now a family safety issue

A message, voice or recruiter can sound real without being real. Treat urgency, secrecy and money movement as verification triggers.

Could this be AI-assisted pressure? Verify through a known channel before acting.

AI scams

AI voice scam: a familiar voice asks for urgent money

Situation: The voice sounds like a relative, friend or manager, but the call comes from an unusual number.

Example message: It is me, my phone is almost dead. Please send the money now, I will explain later.

Why this is dangerous: A voice can be imitated. Urgency and blocking a callback make identity verification harder.

Signs

urgent transfercannot call backsecrecyunusual number

How to check: Hang up and call the saved number yourself. Use a family code word or a second channel.

Safe action: Do not send money based only on a voice.

If it already happened
  • contact the bank
  • warn the family
  • save the number and call details

AI scams

Can you spot an AI scam: perfectly written email

Situation: A professional error-free email asks you to update access.

Example message: From: security@company-access.example. Update access before 17:00 or the account will be restricted.

Why this is dangerous: AI helps write convincing emails without typical mistakes.

Signs

unexpected requestdeadline by the end of the dayexternal domainaccess change

How to check: Check the request in the work system or with the sender through a known channel.

Safe action: Do not update access through the email. Use the official portal.

If it already happened
  • change password
  • notify IT
  • revoke sessions

AI scams

AI voice call: a familiar voice asks for an urgent transfer

Situation: The voice sounds like a relative or manager, but asks you to transfer money urgently.

Example message: It's me, my phone is almost dead. Transfer it now, I will explain later.

Why this is dangerous: A voice can be imitated, and urgency prevents verification.

Signs

urgent transferdoes not allow callbacksecrecyunusual number

How to check: Hang up and call back using the saved number.

Safe action: Do not send money based on a voice request without independent verification.

If it already happened
  • contact the bank
  • warn family
  • save the number

AI scams

AI recruiter: the job offer looks too polished

Situation: A recruiter writes personally, but asks you to pay for a check or send documents.

Example message: HR Baltic Talent: pay 29 euros for profile verification before the interview.

Why this is dangerous: AI makes the message personal, but the scheme is still an upfront payment.

Signs

upfront paymentdocuments before interviewsalary too highdeadline pressure

How to check: Check the job on the company's official website and the recruiter's LinkedIn.

Safe action: Do not pay for employment and do not send documents before verification.

If it already happened
  • protect the document if there is risk
  • change passwords
  • report to the platform

AI scams

AI CEO request: manager asks for urgent payment

Situation: The message imitates a manager's style and asks to pay an invoice today.

Example message: I am in a meeting. Pay invoice_2041.pdf urgently, details later.

Why this is dangerous: AI can imitate writing style, while urgency bypasses payment processes.

Signs

process bypassurgent paymentcannot callnew bank details

How to check: Confirm the request through the established finance process or a call to a known number.

Safe action: Do not pay outside the process, even if the message looks like it came from a manager.

If it already happened
  • stop the payment
  • notify finance
  • save the conversation

AI scams

AI support chat: support asks for a code

Situation: A support chatbot sounds convincing and asks for a one-time code.

Example message: For identity verification, send the SMS code. We will never ask for your password.

Why this is dangerous: Even if no password is requested, a one-time code can give access to the account.

Signs

asks for one-time codechat opened through an external linkpromises a quick fixdoes not let you check in the app

How to check: Open support manually from the official app or website.

Safe action: Do not share one-time codes in chat.

If it already happened
  • change password
  • sign out of all sessions
  • enable 2FA

Marketplace

USPS / FedEx: parcel delayed, pay a small fee

Situation: You receive a delivery SMS saying the address is incomplete and a small 30 cent or 1.99 dollar fee is required.

Example message: USPS Notice: delivery failed. Confirm address and pay $0.30: usps-redelivery.example

Why this is dangerous: The small amount feels harmless, but the form may steal card details and your address.

Signs

small urgent paymentunofficial domainfull card detailsmessage without a tracking number

How to check: Open USPS, FedEx or UPS manually and check the tracking number in the official account.

Safe action: Do not pay delivery fees through an SMS link. Check status only through the official site or app.

If it already happened
  • block the card
  • contact the bank
  • save the SMS and domain

Banking

Bank alert: suspicious Zelle transfer

Situation: An SMS or call says someone is trying to send money through Zelle and asks you to urgently confirm cancellation.

Example message: Bank Fraud Dept: Zelle transfer pending. Reply YES to stop or verify at bank-zelle-alert.example

Why this is dangerous: A scammer may trick you into approving a real transfer or sharing a one-time code.

Signs

urgency pressureone-time codelink outside the bank appunexpected incoming call

How to check: Close the message and open the bank app manually, or call the number printed on your card.

Safe action: Do not confirm codes or open the link. Check transactions only in the official app.

If it already happened
  • call the bank immediately
  • revoke sessions
  • change password
  • save the number

Banking

IRS tax refund promised through a link

Situation: An email or SMS promises a tax refund if you enter bank details today.

Example message: IRS Refund: you are eligible for $642. Submit bank details: irs-refund-status.example

Why this is dangerous: The expectation of money back lowers caution, while the form may steal banking data.

Signs

promise of quick moneyunofficial domainbanking dataurgent deadline

How to check: Check refunds through your official IRS account or tax professional, not through a message link.

Safe action: Do not enter details through the link. Open IRS.gov manually.

If it already happened
  • contact the bank
  • check your credit report
  • change passwords
  • save the message

Banking

Social Security / Medicare: account or benefits at risk

Situation: A call says your Social Security number is suspended or your Medicare card must be updated urgently.

Example message: Social Security Office: your SSN is suspended. Stay on the line to avoid legal action.

Why this is dangerous: The scam uses fear of losing benefits or legal trouble to get money or personal data.

Signs

legal threattold not to hang uppersonal data requestgift card payment

How to check: Hang up and call SSA or Medicare yourself using an official number.

Safe action: Do not share SSN, Medicare number, bank details or codes on an incoming call.

If it already happened
  • contact the bank
  • place a fraud alert
  • save the number
  • warn relatives

Marketplace

PayPal / Venmo: fake invoice or refund

Situation: You receive an invoice, fake refund notice or message saying an accidental payment must be returned.

Example message: PayPal Invoice: $499.99 Norton renewal. Call support now if this was not you.

Why this is dangerous: A fake invoice pushes you to call the scammer or send money back based on a false story.

Signs

unexpected invoicesupport number inside the messagerefund outside the apppressure to cancel urgently

How to check: Open PayPal, Venmo or Cash App manually and check activity in the app.

Safe action: Do not call the number in the invoice and do not return money outside the official app.

If it already happened
  • open a dispute in the app
  • contact the bank
  • save the invoice and conversation

Marketplace

Facebook Marketplace: buyer sent a shipping or payment link

Situation: A buyer says delivery is already paid and asks you to enter a card to receive the money.

Example message: I paid for courier delivery. Enter your card here to receive the money: marketplace-pay.example

Why this is dangerous: You do not need a card to receive money. The form may steal card details while pretending to release payment.

Signs

link outside the platformcard to receive moneyscreenshot as proofpressure to leave the chat

How to check: Check payment only inside Facebook Marketplace or in your own bank account.

Safe action: Do not enter a card to receive money and do not move into third-party payment or shipping forms.

If it already happened
  • block the card
  • report the profile
  • save the chat

Social media

Family text: phone broke, this is my new number

Situation: A message supposedly from a child or grandchild asks you to use a new number and not call.

Example message: Mom, my phone broke. This is my new number. Message me on WhatsApp and please do not call.

Why this is dangerous: The scammer first builds trust in the new number, then asks for an urgent transfer, gift cards or personal data.

Signs

new numberdo not call requestsecrecyurgent money or gift cards

How to check: Call the old saved number or ask another family member through a known channel.

Safe action: Do not send money until the identity is verified outside this conversation.

If it already happened
  • stop the chat
  • warn the family
  • call the bank if money was sent
  • save screenshots

AI scams

AI voice scam: a familiar voice asks for urgent money

Situation: The voice sounds like a relative, friend or manager, but the call comes from an unusual number.

Example message: It is me, my phone is almost dead. Please send the money now, I will explain later.

Why this is dangerous: A voice can be imitated. Urgency and blocking a callback make identity verification harder.

Signs

urgent transfercannot call backsecrecyunusual number

How to check: Hang up and call the saved number yourself. Use a family code word or a second channel.

Safe action: Do not send money based only on a voice.

If it already happened
  • contact the bank
  • warn the family
  • save the number and call details

Children and games

Roblox: free Robux for logging in through a website

Situation: A child sees a site promising free Robux for logging in.

Example message: Get 10,000 Robux: roblox-free.example

Why this is dangerous: The site may steal the child's account and linked payment methods.

Signs

too generous giftlogin outside Robloxpressure to shareasks for password

How to check: Open Roblox only through the official app or website.

Safe action: Do not enter the login. If the child already logged in, a parent should change the password and enable 2FA.

If it already happened
  • change password
  • enable 2FA
  • check purchases
  • talk with the child without blame

Children and games

Discord: a friend sent a Nitro giveaway link

Situation: The link comes from a familiar account, but asks you to log in again.

Example message: Free Nitro for 24h: discord-nitro.example

Why this is dangerous: The friend's account may be hijacked, and the link may steal a token or password.

Signs

gift without a reasonshort deadlinerepeat loginstrange domain

How to check: Ask the friend through another channel and check the gift inside Discord.

Safe action: Do not log in through the link. Tell the friend their account may be hijacked.

If it already happened
  • change password
  • sign out of all sessions
  • revoke connected apps

Social media

TikTok: fake contest from an influencer

Situation: An account similar to an influencer says you won a prize.

Example message: You won an iPhone. Pay 4.99 euros for delivery.

Why this is dangerous: Fake contests use an influencer's name and a small delivery fee.

Signs

similar but wrong accountdelivery paymentpersonal dataurgent reply

How to check: Check the contest on the influencer's official profile and in the giveaway rules.

Safe action: Do not pay delivery and do not send documents.

If it already happened
  • block the card
  • report to the platform
  • warn the child or friends

Children and games

Steam: account will be locked, verify inventory

Situation: Someone says your account was reported and items must be moved for verification.

Example message: Steam Support: verify inventory now: steam-verify.example

Why this is dangerous: A scammer may steal items through a trade disguised as verification.

Signs

account lock threatitem tradesupport writes in chatexternal link

How to check: Check notifications only inside Steam and on the official support page.

Safe action: Do not send items for verification. Block the contact.

If it already happened
  • change password
  • revoke API key
  • check trade history
  • contact support

AI scams

Can you spot an AI scam: perfectly written email

Situation: A professional error-free email asks you to update access.

Example message: From: security@company-access.example. Update access before 17:00 or the account will be restricted.

Why this is dangerous: AI helps write convincing emails without typical mistakes.

Signs

unexpected requestdeadline by the end of the dayexternal domainaccess change

How to check: Check the request in the work system or with the sender through a known channel.

Safe action: Do not update access through the email. Use the official portal.

If it already happened
  • change password
  • notify IT
  • revoke sessions

AI scams

AI voice call: a familiar voice asks for an urgent transfer

Situation: The voice sounds like a relative or manager, but asks you to transfer money urgently.

Example message: It's me, my phone is almost dead. Transfer it now, I will explain later.

Why this is dangerous: A voice can be imitated, and urgency prevents verification.

Signs

urgent transferdoes not allow callbacksecrecyunusual number

How to check: Hang up and call back using the saved number.

Safe action: Do not send money based on a voice request without independent verification.

If it already happened
  • contact the bank
  • warn family
  • save the number

Social media

SMS from a child or relative: phone broken, message me on WhatsApp

Situation: An unknown number claims to be your child, parent or acquaintance and says the old phone was lost or broken.

Example message: Mum, my phone is broken. This is my new number, message me on WhatsApp: +372 58 000 914

Why this is dangerous: The scammer first builds trust in the new number, then asks for an urgent transfer, personal data or sends a harmful link.

Signs

new numberrequest to move to WhatsAppcannot verify by voicean urgent money request may follow

How to check: First call the person on their usual saved number or ask another family member through a known channel.

Safe action: Do not message the provided number, open links or send money until the identity is verified independently.

If it already happened
  • stop the chat
  • call the old number
  • warn the family
  • if money was sent, contact the bank immediately
  • save the SMS and number

AI scams

AI recruiter: the job offer looks too polished

Situation: A recruiter writes personally, but asks you to pay for a check or send documents.

Example message: HR Baltic Talent: pay 29 euros for profile verification before the interview.

Why this is dangerous: AI makes the message personal, but the scheme is still an upfront payment.

Signs

upfront paymentdocuments before interviewsalary too highdeadline pressure

How to check: Check the job on the company's official website and the recruiter's LinkedIn.

Safe action: Do not pay for employment and do not send documents before verification.

If it already happened
  • protect the document if there is risk
  • change passwords
  • report to the platform

AI scams

AI CEO request: manager asks for urgent payment

Situation: The message imitates a manager's style and asks to pay an invoice today.

Example message: I am in a meeting. Pay invoice_2041.pdf urgently, details later.

Why this is dangerous: AI can imitate writing style, while urgency bypasses payment processes.

Signs

process bypassurgent paymentcannot callnew bank details

How to check: Confirm the request through the established finance process or a call to a known number.

Safe action: Do not pay outside the process, even if the message looks like it came from a manager.

If it already happened
  • stop the payment
  • notify finance
  • save the conversation

AI scams

AI support chat: support asks for a code

Situation: A support chatbot sounds convincing and asks for a one-time code.

Example message: For identity verification, send the SMS code. We will never ask for your password.

Why this is dangerous: Even if no password is requested, a one-time code can give access to the account.

Signs

asks for one-time codechat opened through an external linkpromises a quick fixdoes not let you check in the app

How to check: Open support manually from the official app or website.

Safe action: Do not share one-time codes in chat.

If it already happened
  • change password
  • sign out of all sessions
  • enable 2FA

Emergency help

What to do if you already clicked a link

Situation: You opened a link, entered data or sent money.

Example message: I already entered my card / Smart-ID / password. What now?

Why this is dangerous: After data is entered, minutes matter: you may still stop the card, sessions and further damage.

Signs

data already enteredmoney sentcode confirmedthe contact keeps pressuring

How to check: Check bank operations and active sessions only in official apps.

Safe action: Stop communication, do not send more money and contact the bank immediately.

If it already happened
  • stop communication
  • do not send more money
  • contact the bank immediately
  • block the card if needed
  • change passwords
  • enable 2FA
  • revoke sessions
  • save screenshots
  • report the incident
  • warn family if impersonation was involved