STUDlearn · Money
Everyday fraud literacy
Also known as
scam · fraud · imposter · job scam · task scam · AI voice · family emergency scam · deepfake CEO · CEO fraud · business email compromise · BEC · romance scam · pig butchering · gift card scam · wire fraud · phishing
Named sources. May be wrong or incomplete. Not medical, legal, financial, or other professional advice.
Pause a money or identity request, check it on a channel you already trust, and report what you find.

What would help today?
Check a job or task offer before you pay or deposit
- Check the offer
- Search the company and recruiter with “scam,” and discuss it with someone you trust.
- Money request
- Do not pay to get hired or send money from a deposited check.
A text can name a well-known company, a remote title, and daily pay while the real request is your money or your identity. A task scam is fake work that starts with small ratings or errands and later asks you to deposit your own funds. The Federal Trade Commission’s April 2026 alert describes recruiters who ask you to reply YES, then use a fake check or a paid-task story. FBI IC3 counted 24,688 employment-scam complaints in 2025 with about $363 million in reported losses. Search the company and the recruiter with the word scam, talk with someone you trust, and do not pay to get hired or send money from a deposited check. This is a checking habit, not a claim that every listing is fake.
Sources 4
- Federal Trade Commission.Research or guidanceJob Scams (opens in a new tab) ↗
- FTC BCP Staff.Research or guidanceThat job offer text is probably a scam (opens in a new tab) ↗
- FTC BCP Staff.Research or guidanceHow to spot and avoid task scams (opens in a new tab) ↗
- FBI Internet Crime Complaint Center.Research or guidanceScammers Target Job Seekers (opens in a new tab) ↗
Verify a family-emergency call on a number you already trust
- Verify independently
- Hang up and call the family member on a number you already have.
- Bring in support
- Tell another trusted person even if the caller demanded secrecy; a familiar-sounding voice is not enough.
A panicked call can sound like a child or sibling in an accident, a jail, or a hospital. Voice cloning copies a short public audio clip and plays it back as if that person were speaking. The FTC’s fake-emergency guidance says not to trust the voice on the line, even when it sounds familiar, and to hang up or ask a question only the real person would know. Then call the family member on a number you already have, and tell another trusted person even if the caller asked for secrecy. Gift cards, wires, and cryptocurrency are not how bail or hospital bills work. Checking is how you help the real person; it is not a failure of care.
Sources 2
- Federal Trade Commission.Research or guidanceScammers Use Fake Emergencies To Steal Your Money (opens in a new tab) ↗
- Federal Communications Commission.Research or guidanceFCC Confirms that TCPA Applies to AI Technologies that Generate Human Voices (opens in a new tab) ↗
Confirm a payment request through a known work channel
- Before a changed payment
- Confirm the instructions using a phone number from your known contact list, not the incoming message.
- For email, voice, or video
- Use the same independent check even when the request appears to come from a familiar boss.
An email, text, or video can look like a boss asking for a quiet, urgent transfer to a new account. Business email compromise, often called CEO fraud, is a payment request that borrows an executive’s name, mailbox, or now a cloned voice or deepfake video. FBI IC3 recorded about $3.05 billion in reported BEC losses in 2025 and, for the first time, counted AI-related complaints that included voice clones and believable videos. CISA’s BEC guidance is to confirm a change in payment instructions on a phone number from a known contact list, not from the message itself. Perry Carpenter’s 2026 KnowBe4 teaching is to slow down and ask a critical question rather than rely on a detector. A familiar face on a call is a reason to verify, not a reason to skip the process.
Sources 5
- FBI Internet Crime Complaint Center.Research or guidanceCryptocurrency and AI Scams Bilk Americans of Billions (opens in a new tab) ↗2025 Internet Crime Report (opens in a new tab) ↗
- CISA (FBI-origin alert hosted by CISA).Research or guidanceBusiness Email Compromise Continues to Swindle and Defraud U.S. Businesses (opens in a new tab) ↗
- Bree Fowler interviewing Perry Carpenter.Research or guidancePerry Carpenter KB4-CON 2026 Q&A: Deepfakes & Deception (opens in a new tab) ↗
- Perry CarpenterProfessional backgroundKnowBe4 speaker page (opens in a new tab) ↗2026 interview (opens in a new tab) ↗
- Mark ButtonProfessional backgroundPortsmouth staff profile (opens in a new tab) ↗
Treat a money request from an online romance as fraud
- When money is requested
- Stop the payment, keep the messages, and talk with someone you trust.
- Report
- Use ReportFraud.ftc.gov. The person targeted is not to blame for the fraud.
Someone can spend weeks messaging warmth, then ask for a ticket, a medical bill, a crypto “investment,” or a gift-card PIN. A romance scam is fraud that uses a false intimate relationship to get money. This page is not a dating guide; dating remains a closed STUDlearn topic. The FTC’s romance-scam article treats the money request as the crime and tells people to talk with someone they trust. In 2025 people reported about $1.48 billion in romance-scam losses to the FTC, and nearly 60 percent of those who lost money said it started on social media. Cassandra Cross’s research names the request as a crime and warns against blaming the person who was targeted. Stop the payment, keep the messages, and report at ReportFraud.ftc.gov.
Sources 7
- Federal Trade Commission.Research or guidanceWhat To Know About Romance Scams (opens in a new tab) ↗
- Federal Trade Commission.Research or guidanceNew FTC Data Show People Have Lost Billions to Social Media Scams (opens in a new tab) ↗Reported losses to scams on social media eight times higher than in 2020 (opens in a new tab) ↗
- Deirdre van Dyk, reviewed by Kathy Stokes.Research or guidanceLooking for Love? Here’s How to Avoid Romance Scams Online (opens in a new tab) ↗
- Cross C, Dragiewicz M, Richards K. Understanding romance fraud: insights from domestic violence research. British Journal of Criminology. 2018;58(6):1303–1322.Research or guidanceDOI (opens in a new tab) ↗
- Cross C. Using artificial intelligence (AI) and deepfakes to deceive victims: the need to rethink current romance fraud prevention messaging. Crime Prevention and Community Safety. 2022;24(1):30–41.Research or guidanceDOI (opens in a new tab) ↗
- Whitty MT. The scammers persuasive techniques model: development of a stage model to explain the online dating romance scam. British Journal of Criminology. 2013;53(4):665–684.Research or guidanceDOI (opens in a new tab) ↗
- Cassandra CrossProfessional backgroundQUT ADM+S profile (opens in a new tab) ↗The Conversation profile (opens in a new tab) ↗
Good to know. This is a reading companion, not legal, financial, tax, or law-enforcement advice, and not a promise that you will never be scammed. Named agencies and complaint routes are U.S.-centered; use the regulator and police in your country. If someone is in immediate physical danger, call local emergency services first. Money withheld or controlled by a partner can be financial abuse; use a safer device and an advocate if checking accounts could increase danger. Romance-scam copy here is fraud literacy, not a dating guide; dating remains a closed STUDlearn topic. IdentityTheft.gov is the U.S. recovery planner when personal information was misused. AARP’s Fraud Watch Network Helpline (877-908-3360) is a free support line, not a criminal investigation.
What the research found
- Pause when someone pretends to be an organization you already know. Impersonation means using a real agency, bank, company, or family name to borrow trust you already have. The FTC’s four-sign guide lists pretending as the first common move, and caller ID can be faked. In 2025 people reported about $3.5 billion lost to imposter scams, the most reported fraud category, with nearly one in three fraud reports in that group. Look up the organization on a number or site you already use, not the one in the message. A real name on the screen is a reason to check, not a reason to pay.
Sources 2
- Federal Trade Commission.Research or guidanceHow To Avoid a Scam (opens in a new tab) ↗
- Federal Trade Commission.Research or guidanceFTC Data Show People Reported Losing $3.5 Billion to Imposter Scams in 2025 (opens in a new tab) ↗
- Hang up when the story is a sudden problem or prize. The FTC’s second sign is a problem, prize, virus, family emergency, or overdue account that you did not already know about. Honest groups do not demand an immediate secret payment to “protect” money, claim a lottery win that needs a fee, or fix a computer after a cold call. FBI IC3’s 2025 report urges people to take a beat, resist pressure, and assess the situation before turning over money or personal information. Write down what was claimed and who supposedly called. Then use a contact method you already trust.
Sources 2
- Federal Trade Commission.Research or guidanceHow To Avoid a Scam (opens in a new tab) ↗
- FBI Internet Crime Complaint Center.Research or guidanceCryptocurrency and AI Scams Bilk Americans of Billions (opens in a new tab) ↗2025 Internet Crime Report (opens in a new tab) ↗
- Give yourself time instead of acting under pressure. The FTC’s third sign is pressure to act immediately, stay on the line, or keep the story secret. Frank Stajano and Paul Wilson call this a distraction and social-compliance problem: attention is pulled toward urgency and apparent authority so the payment is not examined. Kathy Stokes’s AARP Pause campaign treats a short delay and a conversation with a trusted person as the protective move. Honest businesses give you time to decide. A demand that you must not hang up is itself useful information.
Sources 3
- Federal Trade Commission.Research or guidanceHow To Avoid a Scam (opens in a new tab) ↗
- Stajano F, Wilson P. Understanding scam victims: seven principles for systems security. Communications of the ACM. 2011;54(3):70–75.Research or guidanceDOI (opens in a new tab) ↗UCAM-CL-TR-754 (opens in a new tab) ↗2011-StajanoWil-scam.pdf (opens in a new tab) ↗
- Kathy StokesProfessional backgroundAARP experts page, updated January 26, 2026 (opens in a new tab) ↗
- Refuse payment methods that honest groups do not use. The FTC’s fourth sign is being told to pay only by gift card, wire, payment app, or cryptocurrency, or to deposit a check and send money back. Gift cards are for gifts; government agencies and real companies do not collect taxes, bail, or tech-support fees that way. John Breyault’s Fraud.org work and FTC gift-card guidance both treat that payment instruction as the tell. If you already paid, contact the card issuer, bank, or transfer company right away and report at ReportFraud.ftc.gov. Speed of reporting is about recovery chances, not about blame.
Sources 3
- Federal Trade Commission.Research or guidanceHow To Avoid a Scam (opens in a new tab) ↗
- Federal Trade Commission.Research or guidanceAvoiding and Reporting Gift Card Scams (opens in a new tab) ↗Report Gift Cards Used in a Scam (opens in a new tab) ↗
- John BreyaultProfessional backgroundFraud.org experts (opens in a new tab) ↗NCL leadership (opens in a new tab) ↗
- Look up a job offer instead of paying to get hired. Honest employers, including the U.S. government, do not charge you for the job, send a check to deposit and forward, or hire you by generic text to rate products. The FTC’s job-scam article and April 2026 recruiter-text alert both say never pay to get paid. Search the company and the recruiter with the words scam or complaint, and describe the offer to someone you trust. A “cleared” check can still bounce days later, and the bank can then ask you to repay the full amount. Use official listings such as USAJobs.gov for federal roles.
Sources 2
- Federal Trade Commission.Research or guidanceJob Scams (opens in a new tab) ↗
- FTC BCP Staff.Research or guidanceThat job offer text is probably a scam (opens in a new tab) ↗
- Use a known number to check a family-emergency story. The FTC’s fake-emergency page says not to trust the voice, even when it sounds like a relative, because a short public clip can be cloned. Hang up, call the person on a number you already have, and tell another family member or friend even if the caller demanded secrecy. AARP’s Fraud Watch Network treats talking openly as part of prevention, not as disloyalty. Gift cards and crypto kiosks are not how real bail or hospital intake works. You can care about the person and still verify the story.
Sources 2
- Federal Trade Commission.Research or guidanceScammers Use Fake Emergencies To Steal Your Money (opens in a new tab) ↗
- Kathy StokesProfessional backgroundAARP experts page, updated January 26, 2026 (opens in a new tab) ↗
Where experts still disagree
- Match protection to the scam type, not only to age. One public story says older adults are uniquely easy targets; another says younger adults lose more to social-media and investment pitches. FBI IC3’s 2025 report found people 60 and older filed about a fifth of complaints but reported about $7.7 billion, a large share of total losses. Marti DeLiema, Yiting Li, and Gary Mottola found that correlates of responding and of losing money varied by scam type, so one age profile does not explain every contact. David Burnes’s 2017 review estimated a meaningful share of older adults experience financial fraud, with wide study-to-study ranges. Use the actual request in front of you. Age is context, not a verdict on anyone’s judgment.
Sources 8
- FBI Internet Crime Complaint Center.Research or guidanceCryptocurrency and AI Scams Bilk Americans of Billions (opens in a new tab) ↗2025 Internet Crime Report (opens in a new tab) ↗
- DeLiema M, Li Y, Mottola G. Correlates of responding to and becoming victimized by fraud: examining risk factors by scam type. International Journal of Consumer Studies. 2023;47(3):1042–1059.Research or guidanceDOI (opens in a new tab) ↗
- DeLiema M, Shadel D, Pak K. Profiling victims of investment fraud: mindsets and risky behaviors. Journal of Consumer Research. 2020;46(5):904–914.Research or guidanceDOI (opens in a new tab) ↗
- Burnes D, Henderson CR Jr, Sheppard C, Zhao R, Pillemer K, Lachs MS. Prevalence of financial fraud and scams among older adults in the United States: a systematic review and meta-analysis. American Journal of Public Health. 2017;107(8):e13–e21.Research or guidanceDOI (opens in a new tab) ↗
- Marti DeLiemaProfessional backgroundUMN profile (opens in a new tab) ↗
- Gary MottolaProfessional backgroundChamplain Center for Financial Literacy bio (opens in a new tab) ↗
- Doug ShadelProfessional backgroundAARP experts (opens in a new tab) ↗FINRA Foundation Ketchum Prize (opens in a new tab) ↗
- David BurnesProfessional backgroundFaculty research-team bio (opens in a new tab) ↗CRC profile (opens in a new tab) ↗
- Treat training as practice, not a finished shield. Workplace phishing drills can lower clicks in a simulated inbox; that is not the same as proof that a course prevents every real-world loss. Lorrie Cranor’s group, including Sheng and colleagues’ 2010 study, showed that well-designed training can improve spotting of phishing in experimental tasks, while some materials raised awareness without lasting skill. KnowBe4-class tools measure phish-prone percentages inside an organization. Independent researchers still disagree about how far those scores travel into family-emergency calls, romance fraud, or authorized bank transfers. Practice a specific check you will actually use. A completed module is not immunity.
Sources 3
- Sheng S, Holbrook M, Kumaraguru P, Cranor LF, Downs J. Who falls for phish? A demographic analysis of phishing susceptibility and effectiveness of interventions. Proceedings of the SIGCHI Conference on Human Factors in Computing Systems. 2010:373–382.Research or guidanceDOI (opens in a new tab) ↗
- Lorrie CranorProfessional backgroundCMU Engineering bio (opens in a new tab) ↗
- Bree Fowler interviewing Perry Carpenter.Research or guidancePerry Carpenter KB4-CON 2026 Q&A: Deepfakes & Deception (opens in a new tab) ↗
- Ask your bank what it can reverse, then report anyway. U.S. law treats unauthorized card use differently from a transfer you approved because a scammer told you to. The FTC’s recovery page says to contact the bank, card issuer, wire company, or gift-card seller immediately and ask for a reversal, and it warns that cryptocurrency often lacks the same protections. Consumer advocates such as John Breyault argue that payment systems should do more when a customer was deceived; banks often treat an authorized push payment as final. That is a live policy disagreement, not a household rule you can settle from a tip sheet. Report at ReportFraud.ftc.gov and ic3.gov either way. Reporting helps other people even when the money cannot come back.
Sources 2
- Federal Trade Commission.Research or guidanceWhat To Do if You Were Scammed (opens in a new tab) ↗
- John BreyaultProfessional backgroundFraud.org experts (opens in a new tab) ↗NCL leadership (opens in a new tab) ↗
- Verify the request instead of trying to spot the deepfake. One approach hunts for glitches in a voice or video; another treats any high-stakes request as unverified until it is checked on a known channel. Perry Carpenter’s 2026 KnowBe4 interview says detection tools are in an arms race and will probably never be complete, so the useful move is to slow down and ask a critical question. The FCC’s 2024 ruling treats AI-generated voices in robocalls as artificial voices under the TCPA, which is a consent rule, not a consumer ear test. FBI IC3’s first AI section in the 2025 report counts complaints that used clones and believable videos. A convincing call is a reason to use a second channel. It is not proof of identity.
Sources 4
- Bree Fowler interviewing Perry Carpenter.Research or guidancePerry Carpenter KB4-CON 2026 Q&A: Deepfakes & Deception (opens in a new tab) ↗
- Federal Communications Commission.Research or guidanceFCC Confirms that TCPA Applies to AI Technologies that Generate Human Voices (opens in a new tab) ↗
- FBI Internet Crime Complaint Center.Research or guidanceCryptocurrency and AI Scams Bilk Americans of Billions (opens in a new tab) ↗2025 Internet Crime Report (opens in a new tab) ↗
- Perry CarpenterProfessional backgroundKnowBe4 speaker page (opens in a new tab) ↗2026 interview (opens in a new tab) ↗
Just talk
- Judge a contact by the request, not by how smart you feel. A popular line says only greedy or careless people get scammed. AARP’s 2026 survey found that nine in ten U.S. adults agree fraud can happen to anyone, and nearly four in ten said they had already experienced it. Stajano and Wilson’s principles include kindness, need, and social compliance, not a stupidity test. Cross and Whitty’s romance-fraud work shows people can notice something is wrong and still be held by the story. Use the payment demand, secrecy, and channel as the evidence. Shame is a tool the next recovery scammer will try to reuse.
Sources 3
- AARP Fraud Watch Network.Research or guidanceFraud Remains a Top Concern for Americans, New AARP Research Shows (opens in a new tab) ↗aarp.org/2026fraudsurvey (opens in a new tab) ↗4 in 10 Older Americans Have Lost Money to Fraud (opens in a new tab) ↗
- Stajano F, Wilson P. Understanding scam victims: seven principles for systems security. Communications of the ACM. 2011;54(3):70–75.Research or guidanceDOI (opens in a new tab) ↗UCAM-CL-TR-754 (opens in a new tab) ↗2011-StajanoWil-scam.pdf (opens in a new tab) ↗
- Cross C, Dragiewicz M, Richards K. Understanding romance fraud: insights from domestic violence research. British Journal of Criminology. 2018;58(6):1303–1322.Research or guidanceDOI (opens in a new tab) ↗
- Check the channel you already use, not the display name. Matching caller ID, a boss’s photo, or two similar emails can feel like confirmation. Display names and numbers can be spoofed, and several pages can repeat one underlying message. CISA’s BEC advice is to call a number from a known contact list, not from the urgent email. The Information topic on this site is the place to check a circulating claim; this page is about a fraud contact that wants money or identity. Agreement among copies is a reason to investigate. It is not a completed verification.
Sources 2
- CISA (FBI-origin alert hosted by CISA).Research or guidanceBusiness Email Compromise Continues to Swindle and Defraud U.S. Businesses (opens in a new tab) ↗
- Federal Trade Commission.Research or guidanceHow To Avoid a Scam (opens in a new tab) ↗
- Stop a recovery offer that asks you to pay again. After a loss, a caller may pose as a bank, a lawyer, the FTC, or even FBI IC3 and offer to get the money back for a fee. FBI IC3’s July 2026 alert describes scammers impersonating IC3 staff, using AI-generated video of senior officials, and sending people to fake complaint sites. The FTC will never demand money, threaten you, or tell you to transfer funds to protect them. Hang up and use reportfraud.ftc.gov or ic3.gov by typing the address yourself. A second payment is a new crime, not a required step in recovery.
Sources 2
- FBI Internet Crime Complaint Center.Research or guidanceFBI Warns of Scammers Impersonating the IC3 (opens in a new tab) ↗
- Federal Trade Commission.Research or guidanceWhat To Do if You Were Scammed (opens in a new tab) ↗
- Use a freeze for new credit, and still watch existing accounts. A credit freeze can restrict most new-credit checks; it does not stop someone who already has an account number, a gift-card PIN, or a wire you approved. Eva Velasquez’s Identity Theft Resource Center work and the Learn finance topic separate freezes, fraud alerts, disputes, and IdentityTheft.gov plans. Keep monitoring statements. A freeze is one tool with a specific job, not a complete fraud shield.
Sources 2
- Federal Trade Commission.Research or guidanceWhat To Do if You Were Scammed (opens in a new tab) ↗
- Eva VelasquezProfessional backgroundITRC leadership (opens in a new tab) ↗
What to try
- Pause, hang up, and check the story on a contact you already trust. When a message asks for money, a code, or secrecy, stop the conversation. The FTC’s four signs and fake-emergency guidance both treat a short delay as the useful first move: hang up or say you will call back, then use a phone number, email, or workplace channel you already had. Tell one trusted person what was claimed. This everyday sequence adapts official consumer guidance; it is not a tested STUDlearn protocol and it does not guarantee that every contact is harmless or that every real emergency will wait. If someone is in physical danger, call local emergency services first.
Sources 2
- Federal Trade Commission.Research or guidanceHow To Avoid a Scam (opens in a new tab) ↗
- Federal Trade Commission.Research or guidanceScammers Use Fake Emergencies To Steal Your Money (opens in a new tab) ↗
- Try a known-number callback on one urgent story. Take a recent family, bank, or workplace scare and write the claim in one sentence. Call the person or institution on a number from your contacts or a statement, not from the incoming message. The FTC’s fake-emergency page and CISA’s BEC callback advice are the named sources for this check. Note what matched and what did not. If you cannot reach the real person, call someone else in the family or office before you pay.
Sources 2
- Federal Trade Commission.Research or guidanceScammers Use Fake Emergencies To Steal Your Money (opens in a new tab) ↗
- CISA (FBI-origin alert hosted by CISA).Research or guidanceBusiness Email Compromise Continues to Swindle and Defraud U.S. Businesses (opens in a new tab) ↗
- Try searching a job offer with the word scam before you pay. Copy the company name, recruiter name, and pay claim into a search with the word scam or complaint. The FTC’s job-scam article recommends that search and a conversation with someone you trust. Do not deposit a check you are told to send onward, and do not pay for equipment, training, or a background check to start. A lack of complaints is not a proof of honesty; a pile of matching complaints is a reason to walk away.
Sources 2
- Federal Trade Commission.Research or guidanceJob Scams (opens in a new tab) ↗
- FTC BCP Staff.Research or guidanceThat job offer text is probably a scam (opens in a new tab) ↗
- Try a second-channel check on a payment request even if the voice or video looks right. FBI IC3’s 2025 report, for the first time, counted AI-related complaints that used voice clones and believable videos of public figures and loved ones. Perry Carpenter’s May 2026 KnowBe4 interview says not to rely on spotting glitches and to slow down and ask a critical question. End the call, look up the official number or the internal directory, and confirm the payment, vendor change, or gift-card request there. A good-enough fake can last half a minute; the process does not have to. This is 2025–2026 field guidance, not a detector you can run by ear.
Sources 3
- FBI Internet Crime Complaint Center.Research or guidanceCryptocurrency and AI Scams Bilk Americans of Billions (opens in a new tab) ↗2025 Internet Crime Report (opens in a new tab) ↗
- Bree Fowler interviewing Perry Carpenter.Research or guidancePerry Carpenter KB4-CON 2026 Q&A: Deepfakes & Deception (opens in a new tab) ↗
- Perry CarpenterProfessional backgroundKnowBe4 speaker page (opens in a new tab) ↗2026 interview (opens in a new tab) ↗
How to keep it
- Keep a short family or work check-in habit. Agree in advance that money, codes, and secrecy claims will be confirmed on a known number, even when the voice sounds right. The FTC suggests a question only the real person would know as a backup if you cannot hang up immediately. AARP’s Pause campaign is a public version of the same delay. Write the rule where you will see it. A code word is expert-practice support, not a clinical trial of family communication.
Sources 2
- Federal Trade Commission.Research or guidanceScammers Use Fake Emergencies To Steal Your Money (opens in a new tab) ↗
- Kathy StokesProfessional backgroundAARP experts page, updated January 26, 2026 (opens in a new tab) ↗
- Keep gift cards for gifts. The FTC’s gift-card guidance is blunt: anyone who tells you to pay a tax, fine, bail, tech bill, or prize fee with a gift card is running a scam. Keep the card and receipt if you already paid, call the issuer, and report the numbers. This is one of the few signs that does not require you to judge a stranger’s tone. It also does not solve every other fraud type.
Sources 1
- Federal Trade Commission.Research or guidanceAvoiding and Reporting Gift Card Scams (opens in a new tab) ↗Report Gift Cards Used in a Scam (opens in a new tab) ↗
- Keep the original contact attached to the check. Save the email, text, profile name, wallet address, and the exact payment instruction beside your notes. Cross’s reporting research and the FTC recovery page both need those details. The original wording keeps the question from drifting while you talk to the bank. Missing records leave uncertainty; they do not prove you imagined the contact.
Sources 2
- Federal Trade Commission.Research or guidanceWhat To Do if You Were Scammed (opens in a new tab) ↗
- Cross C. ‘I knew it was a scam’: understanding the triggers for recognizing romance fraud. Criminology & Public Policy. 2023;22(4):613–637.Research or guidanceDOI (opens in a new tab) ↗
- Keep reporting even when the money may be gone. AARP’s 2026 survey found that most victims contacted a financial institution while far fewer notified law enforcement or the FTC. ReportFraud.ftc.gov, ic3.gov, the state attorney general, and, for identity misuse, IdentityTheft.gov are different jobs. Your report can support a pattern even if this one transfer cannot be reversed. Reporting is not an admission that you were careless.
Sources 3
- AARP Fraud Watch Network.Research or guidanceFraud Remains a Top Concern for Americans, New AARP Research Shows (opens in a new tab) ↗aarp.org/2026fraudsurvey (opens in a new tab) ↗4 in 10 Older Americans Have Lost Money to Fraud (opens in a new tab) ↗
- Federal Trade Commission.Research or guidanceWhat To Do if You Were Scammed (opens in a new tab) ↗
- FBI Internet Crime Complaint Center.Research or guidanceCryptocurrency and AI Scams Bilk Americans of Billions (opens in a new tab) ↗2025 Internet Crime Report (opens in a new tab) ↗
- Keep private audio off public posts when you can. The FTC notes that a short clip from social media can be enough to clone a voice. Reducing public samples does not stop every family-emergency script, because scammers also guess and spoof. It is one practical reduction, not a complete defense. Combine it with the known-number callback.
Sources 1
- Federal Trade Commission.Research or guidanceScammers Use Fake Emergencies To Steal Your Money (opens in a new tab) ↗
Sayings people repeat
- Check a claimed agency or company on a channel you already use. Claim: “Imposter scams are a leading reported fraud type in recent FTC data” — established. FTC data for 2025 found imposter scams the most reported fraud category, with about $3.5 billion in reported losses and nearly one in three fraud reports in that group. Reports are unverified complaints, not a complete count. Look up the organization on a number you already have rather than paying to “protect” funds.
Sources 2
- Federal Trade Commission.Research or guidanceFTC Data Show People Reported Losing $3.5 Billion to Imposter Scams in 2025 (opens in a new tab) ↗
- Federal Trade Commission.Research or guidanceHow To Avoid a Scam (opens in a new tab) ↗
- Keep gift cards for gifts and refuse those payment demands. Claim: “Anyone who tells me to pay a bill, fine, or prize with a gift card, wire, or cryptocurrency is running a scam” — established. The FTC’s four-sign guide and gift-card articles treat those payment instructions as a core scam tell: honest government agencies and businesses do not collect taxes, bail, or tech-support fees that way. The sign does not settle every other kind of fraud. If you already paid, contact the issuer or bank immediately and report at ReportFraud.ftc.gov.
Sources 2
- Federal Trade Commission.Research or guidanceHow To Avoid a Scam (opens in a new tab) ↗
- Federal Trade Commission.Research or guidanceAvoiding and Reporting Gift Card Scams (opens in a new tab) ↗Report Gift Cards Used in a Scam (opens in a new tab) ↗
- Judge the request, not your worth. Claim: “Only greedy or careless people get scammed” — not what the research found. AARP’s 2026 survey found that nine in ten U.S. adults agree fraud can happen to anyone, and nearly four in ten said they had already experienced it. Stajano and Wilson describe kindness, authority, and urgency as exploitable principles. Cross and Whitty show that people can notice a problem and still be held by a fraud story. Use the payment demand as the evidence.
Sources 2
- AARP Fraud Watch Network.Research or guidanceFraud Remains a Top Concern for Americans, New AARP Research Shows (opens in a new tab) ↗aarp.org/2026fraudsurvey (opens in a new tab) ↗4 in 10 Older Americans Have Lost Money to Fraud (opens in a new tab) ↗
- Stajano F, Wilson P. Understanding scam victims: seven principles for systems security. Communications of the ACM. 2011;54(3):70–75.Research or guidanceDOI (opens in a new tab) ↗UCAM-CL-TR-754 (opens in a new tab) ↗2011-StajanoWil-scam.pdf (opens in a new tab) ↗
- Call back on a number you already have. Claim: “If the voice sounds like my relative, the emergency is real” — not what the research found. The FTC’s fake-emergency guidance says not to trust the voice on the line, even when it sounds familiar, because a short public clip can be cloned. FBI IC3’s 2025 report counted AI-related complaints that used voice clones and videos of loved ones. Hang up and use a known number. A convincing voice is a reason to verify, not proof of identity.
Sources 2
- Federal Trade Commission.Research or guidanceScammers Use Fake Emergencies To Steal Your Money (opens in a new tab) ↗
- FBI Internet Crime Complaint Center.Research or guidanceCryptocurrency and AI Scams Bilk Americans of Billions (opens in a new tab) ↗2025 Internet Crime Report (opens in a new tab) ↗
- Practise a specific check, then still verify the live request. Claim: “One awareness course will keep me from being scammed” — disputed. Sheng, Cranor and colleagues found that well-designed training can improve phishing detection in experimental tasks, while some materials raised awareness without lasting skill. KnowBe4-class drills measure simulated clicks, not family-emergency or romance-fraud outcomes. Practice helps; a completed module is not a guarantee.
Sources 2
- Sheng S, Holbrook M, Kumaraguru P, Cranor LF, Downs J. Who falls for phish? A demographic analysis of phishing susceptibility and effectiveness of interventions. Proceedings of the SIGCHI Conference on Human Factors in Computing Systems. 2010:373–382.Research or guidanceDOI (opens in a new tab) ↗
- Lorrie CranorProfessional backgroundCMU Engineering bio (opens in a new tab) ↗
- Confirm a payment change on a known work channel. Claim: “If the display name matches my boss, the wire is safe” — popular talk. Display names, domains, voices, and video can be copied. CISA’s BEC guidance is to confirm payment-instruction changes on a number from a known contact list. FBI IC3 still recorded about $3.05 billion in reported BEC losses in 2025. Matching appearance is a reason to use the process, not to skip it.
Sources 2
- CISA (FBI-origin alert hosted by CISA).Research or guidanceBusiness Email Compromise Continues to Swindle and Defraud U.S. Businesses (opens in a new tab) ↗
- FBI Internet Crime Complaint Center.Research or guidanceCryptocurrency and AI Scams Bilk Americans of Billions (opens in a new tab) ↗2025 Internet Crime Report (opens in a new tab) ↗
- Use a pause and a known channel, without a guarantee. Claim: “If I follow these tips I will never be scammed” — not what the research found. Official guidance reduces some common losses; it does not create immunity. FTC and FBI figures are incomplete complaint totals, attackers change scripts, and authorized transfers can be hard to reverse. The honest claim is a better check, not a promise that you will never be scammed.
Sources 2
- Federal Trade Commission.Research or guidanceHow To Avoid a Scam (opens in a new tab) ↗
- FBI Internet Crime Complaint Center.Research or guidanceCryptocurrency and AI Scams Bilk Americans of Billions (opens in a new tab) ↗2025 Internet Crime Report (opens in a new tab) ↗
The longer notes
- Distinguish a fake check from a cleared deposit. A fake-check scam sends you a check or a peer-to-peer credit, asks you to keep a fee or buy supplies, and then take the rest. The deposit can appear in your account while the bank is still allowed to reverse it days later. The FTC’s job-scam and fake-check pages treat any instruction to send money onward as the tell, whether the story is mystery shopping, nanny work, or a new remote role. Talk with the bank’s fraud number from the back of your card, not from the “employer’s” email. The useful question is who is asking you to send funds, not whether the app already showed a balance.
Sources 1
- Federal Trade Commission.Research or guidanceJob Scams (opens in a new tab) ↗
- Read a romance-scam money request as fraud, not as dating. Whitty’s stage model describes a built-up attachment, then a crisis that can only be solved with a transfer. Cross, Dragiewicz and Richards use domestic-violence research to explain isolation, secrecy, and the difficulty of leaving after that attachment exists. The FTC’s bottom line is about money and gifts, not about how to date. This packet stays on the fraud contact: stop the payment, tell a trusted person, keep the messages, and report. Dating, sex, and relationship advice remain closed Learn topics. Support after a loss can include the AARP helpline and, where identity was misused, IdentityTheft.gov.
Sources 7
- Whitty MT. The scammers persuasive techniques model: development of a stage model to explain the online dating romance scam. British Journal of Criminology. 2013;53(4):665–684.Research or guidanceDOI (opens in a new tab) ↗
- Cross C, Dragiewicz M, Richards K. Understanding romance fraud: insights from domestic violence research. British Journal of Criminology. 2018;58(6):1303–1322.Research or guidanceDOI (opens in a new tab) ↗
- Cross C. Using artificial intelligence (AI) and deepfakes to deceive victims: the need to rethink current romance fraud prevention messaging. Crime Prevention and Community Safety. 2022;24(1):30–41.Research or guidanceDOI (opens in a new tab) ↗
- Federal Trade Commission.Research or guidanceWhat To Know About Romance Scams (opens in a new tab) ↗
- Deirdre van Dyk, reviewed by Kathy Stokes.Research or guidanceLooking for Love? Here’s How to Avoid Romance Scams Online (opens in a new tab) ↗
- Monica WhittyProfessional backgroundMonash profile (opens in a new tab) ↗
- Amy NofzigerProfessional backgroundSame AARP experts page (opens in a new tab) ↗
- Separate identity theft recovery from a stranger’s payment demand. Eva Velasquez’s ITRC work centers a stepwise recovery plan when an account, Social Security number, or credit file was misused. That is a different job from a cold call that wants a gift-card PIN today. Use IdentityTheft.gov for a tailored U.S. plan, freeze new credit at each nationwide bureau when that fits, and still watch existing accounts. The Learn finance topic covers reports, scores, freezes, and disputes in more household detail. A freeze does not recall a wire you already approved.
Sources 2
- Eva VelasquezProfessional backgroundITRC leadership (opens in a new tab) ↗
- Federal Trade Commission.Research or guidanceWhat To Do if You Were Scammed (opens in a new tab) ↗
- Use out-of-band verification at work. Out-of-band means confirming the request on a channel you already had, such as a directory number or a standing vendor file, not the phone number or video link inside the urgent message. CISA’s BEC alert lists verbal confirmation from a known contact list, dual approval above a threshold, and delaying a transfer when the bank calls to check. FBI IC3’s 2025 BEC losses show the same request still succeeding at scale, now sometimes with AI-written mail or a cloned executive voice. Write the rule into the payment process so one frightened employee is not the whole control. A process is not a guarantee against a patient attacker.
Sources 2
- CISA (FBI-origin alert hosted by CISA).Research or guidanceBusiness Email Compromise Continues to Swindle and Defraud U.S. Businesses (opens in a new tab) ↗
- FBI Internet Crime Complaint Center.Research or guidanceCryptocurrency and AI Scams Bilk Americans of Billions (opens in a new tab) ↗2025 Internet Crime Report (opens in a new tab) ↗
- Understand why an outlandish story can still be profitable. Cormac Herley’s 2012 Microsoft Research paper asked why so many advance-fee emails still mention Nigeria, a detail that most readers treat as a joke. His model is about false positives: following up with people who will never pay is expensive, so an obviously implausible tale can filter for those most likely to continue. That is attacker economics, not a census of current West African crime and not a claim that only “gullible” people are targeted. Modern job, romance, and family-emergency scripts often look more ordinary. The useful residue is that a story can be designed to waste your skepticism, not to survive it.
Sources 2
- Cormac Herley, Microsoft Research.Research or guidanceWhy Do Nigerian Scammers Say They are From Nigeria? (opens in a new tab) ↗
- Cormac HerleyProfessional backgroundMSR publication (opens in a new tab) ↗
- Name the principle the contact is using. Stajano and Wilson distilled seven principles from documented cons, including distraction, social compliance, herd, dishonesty, deception, need and greed, and kindness. A family-emergency call uses kindness and urgency; a CEO wire uses social compliance; a fake investment club uses the herd. Naming the principle does not diagnose you. It gives you a sentence to say to the trusted person you call next: “This is an authority-and-secrecy request for a gift card.” That translation is the teaching use of the paper, not a complete psychology of every 2026 script.
Sources 2
- Stajano F, Wilson P. Understanding scam victims: seven principles for systems security. Communications of the ACM. 2011;54(3):70–75.Research or guidanceDOI (opens in a new tab) ↗UCAM-CL-TR-754 (opens in a new tab) ↗2011-StajanoWil-scam.pdf (opens in a new tab) ↗
- Frank StajanoProfessional backgroundCambridge CST people (opens in a new tab) ↗personal academic page (opens in a new tab) ↗
- Fill the gap after a correction so a recovery scam cannot reuse it. Once you know a payment was fraud, the old story still needs a replacement: who to call, what the bank said, and that no one legitimate will charge a fee to recover the funds. FBI IC3’s 2026 impersonation alert is the current form of that second hit, including deepfake video of officials. The FTC recovery page is the first-line sequence for cards, wires, apps, gift cards, and crypto. Tell the trusted person the new account of what happened so they can help you hold it. A clear next step is support, not a promise of repayment.
Sources 2
- FBI Internet Crime Complaint Center.Research or guidanceFBI Warns of Scammers Impersonating the IC3 (opens in a new tab) ↗
- Federal Trade Commission.Research or guidanceWhat To Do if You Were Scammed (opens in a new tab) ↗
- Keep reported losses in view as complaints, not a census. FTC Sentinel and FBI IC3 numbers are unverified reports, and both agencies say most scams are never filed. AARP’s 2026 survey estimated a much wider experience of fraud than complaint databases show. DeLiema’s measurement work exists because survey wording and time windows change prevalence estimates. Use the official totals to see which contact methods and payment types are currently costly. Do not treat a missing report as proof that a tactic is rare, and do not treat a headline billion as a personal risk score.
Sources 4
- Federal Trade Commission.Research or guidanceFTC Data Show People Reported Losing $3.5 Billion to Imposter Scams in 2025 (opens in a new tab) ↗
- FBI Internet Crime Complaint Center.Research or guidanceCryptocurrency and AI Scams Bilk Americans of Billions (opens in a new tab) ↗2025 Internet Crime Report (opens in a new tab) ↗
- AARP Fraud Watch Network.Research or guidanceFraud Remains a Top Concern for Americans, New AARP Research Shows (opens in a new tab) ↗aarp.org/2026fraudsurvey (opens in a new tab) ↗4 in 10 Older Americans Have Lost Money to Fraud (opens in a new tab) ↗
- Marti DeLiemaProfessional backgroundUMN profile (opens in a new tab) ↗
- Treat an AI voice as a reason to verify, not as proof of identity. The FTC’s 2023 emergency page already named cloning from a short online clip. FBI IC3’s 2025 report added an AI descriptor covering about 22,000 complaints and nearly $893 million in reported losses, using pressure plus fake profiles, clones, documents, and videos. Carpenter’s 2026 public teaching is that a good-enough fake can be sustained briefly, then moved to chat. FCC rules on AI robocalls govern consent for artificial voices; they do not give you a home test for a family call. The protective action remains the known-number check. Literacy here is a pause, not a claim that you will never be fooled.
Sources 4
- Federal Trade Commission.Research or guidanceScammers Use Fake Emergencies To Steal Your Money (opens in a new tab) ↗
- FBI Internet Crime Complaint Center.Research or guidanceCryptocurrency and AI Scams Bilk Americans of Billions (opens in a new tab) ↗2025 Internet Crime Report (opens in a new tab) ↗
- Bree Fowler interviewing Perry Carpenter.Research or guidancePerry Carpenter KB4-CON 2026 Q&A: Deepfakes & Deception (opens in a new tab) ↗
- Federal Communications Commission.Research or guidanceFCC Confirms that TCPA Applies to AI Technologies that Generate Human Voices (opens in a new tab) ↗
Who this is drawing from
- Kathy Stokes. AARP Fraud Watch Network senior director of fraud prevention programs. Her public Pause campaign and congressional testimony translate current tactics into a delay-and-talk habit. AARP education is not a personal risk score or a criminal investigation.
Sources 1
- Kathy StokesProfessional backgroundAARP experts page, updated January 26, 2026 (opens in a new tab) ↗
- Amy Nofziger. AARP senior director of fraud victim support and Certified Fraud Examiner. She oversees the free Fraud Watch Network Helpline. Helpline guidance is support, not legal advice or a promise of recovery.
Sources 1
- Amy NofzigerProfessional backgroundSame AARP experts page (opens in a new tab) ↗
- Doug Shadel. Former AARP Washington state director, fraud investigator, and FINRA Foundation Ketchum Prize recipient. His research with DeLiema profiles investment-fraud targeting. Investigator experience does not make every later tactic identical.
Sources 1
- Doug ShadelProfessional backgroundAARP experts (opens in a new tab) ↗FINRA Foundation Ketchum Prize (opens in a new tab) ↗
- Marti DeLiema. University of Minnesota assistant professor of social work and gerontologist. Her studies separate scam types and test education against structural protections. Findings about groups are not a diagnosis of one household.
Sources 1
- Marti DeLiemaProfessional backgroundUMN profile (opens in a new tab) ↗
- David Burnes. University of Toronto professor and Canada Research Chair in older-adult mistreatment prevention. His 2017 review estimated financial-fraud prevalence among older adults with wide study ranges. Elder-mistreatment research is not a claim that only older adults are targeted.
Sources 1
- David BurnesProfessional backgroundFaculty research-team bio (opens in a new tab) ↗CRC profile (opens in a new tab) ↗
- Cassandra Cross. Queensland University of Technology professor of justice and associate dean. Her romance-fraud and BEC work names the crime, the reporting barrier, and the harm of blame. Australian and U.K. cases do not automatically map onto every U.S. payment rail.
Sources 1
- Cassandra CrossProfessional backgroundQUT ADM+S profile (opens in a new tab) ↗The Conversation profile (opens in a new tab) ↗
- Monica Whitty. Monash professor of human factors in cyber security. Her stage model explains how a false relationship is built before the money request. It is fraud psychology, not dating advice.
Sources 1
- Monica WhittyProfessional backgroundMonash profile (opens in a new tab) ↗
- Mark Button. University of Portsmouth professor of criminology and director of the Centre for Cybercrime and Economic Crime. His work with Cross treats scams as organized economic crime with victims who need support. Measurement studies are not an individual recovery plan.
Sources 1
- Mark ButtonProfessional backgroundPortsmouth staff profile (opens in a new tab) ↗
- Lorrie Cranor. Carnegie Mellon CyLab director and FORE Systems University Professor; former FTC chief technologist. Her phishing-training experiments show that people can learn to inspect messages in tested tasks. Lab improvement is not lifetime immunity.
Sources 1
- Lorrie CranorProfessional backgroundCMU Engineering bio (opens in a new tab) ↗
- Perry Carpenter. KnowBe4 chief deception strategist, MSIA, and public educator on deepfakes. His 2026 teaching is to slow down and ask a critical question rather than trust a detector. KnowBe4 is a commercial awareness vendor; its metrics are not independent prevalence data.
Sources 1
- Perry CarpenterProfessional backgroundKnowBe4 speaker page (opens in a new tab) ↗2026 interview (opens in a new tab) ↗
- Eva Velasquez. Identity Theft Resource Center CEO and former economic-crimes investigator. She supplies stepwise identity-recovery routes after information is misused. Identity-theft recovery is not the same job as stopping an urgent gift-card demand.
Sources 1
- Eva VelasquezProfessional backgroundITRC leadership (opens in a new tab) ↗
- Gary Mottola. FINRA Investor Education Foundation research director and social psychologist. His work with DeLiema compares who is contacted and who loses money across scam types. Investor-education research is not a recommendation of a particular product.
Sources 1
- Gary MottolaProfessional backgroundChamplain Center for Financial Literacy bio (opens in a new tab) ↗
- Frank Stajano. University of Cambridge professor of security and privacy. With Paul Wilson he extracted seven principles that hustlers exploit, shifting blame off “gullible users.” Principles from documented cons are not a complete map of every 2026 AI script.
Sources 1
- Frank StajanoProfessional backgroundCambridge CST people (opens in a new tab) ↗personal academic page (opens in a new tab) ↗
- Cormac Herley. Microsoft Research scientist whose 2012 paper models why an implausible advance-fee story can still be profitable. It is attacker-economics analysis, not a current census of any country’s crime.
Sources 1
- Cormac HerleyProfessional backgroundMSR publication (opens in a new tab) ↗
- John Breyault. National Consumers League vice president for public policy, telecommunications, and fraud, and Fraud.org director. He translates payment-method tells and reporting gaps for public audiences. Advocacy is not a finding about one bank’s duty in a specific transfer.
Sources 1
- John BreyaultProfessional backgroundFraud.org experts (opens in a new tab) ↗NCL leadership (opens in a new tab) ↗
Good to know
- Good to know. This is a reading companion, not legal, financial, tax, or law-enforcement advice, and not a promise that you will never be scammed. Named agencies and complaint routes are U.S.-centered; use the regulator and police in your country. If someone is in immediate physical danger, call local emergency services first. Money withheld or controlled by a partner can be financial abuse; use a safer device and an advocate if checking accounts could increase danger. Romance-scam copy here is fraud literacy, not a dating guide; dating remains a closed STUDlearn topic. IdentityTheft.gov is the U.S. recovery planner when personal information was misused. AARP’s Fraud Watch Network Helpline (877-908-3360) is a free support line, not a criminal investigation.
Sources 4
- Federal Trade Commission.Research or guidanceWhat To Do if You Were Scammed (opens in a new tab) ↗
- Federal Trade Commission.Research or guidanceHow To Avoid a Scam (opens in a new tab) ↗
- AARP Fraud Watch Network.Research or guidanceFraud Remains a Top Concern for Americans, New AARP Research Shows (opens in a new tab) ↗aarp.org/2026fraudsurvey (opens in a new tab) ↗4 in 10 Older Americans Have Lost Money to Fraud (opens in a new tab) ↗
- Amy NofzigerProfessional backgroundSame AARP experts page (opens in a new tab) ↗
- Not advice. Named sources. Honest paraphrase of the finding. Not medical, legal, or financial advice.
