Every scam needs you to do one of three things: pay, reveal (a password or code), or install (an app or file). Whatever the story — romance, prizes, jobs, investments, bank problems — the request underneath is always one of those three.

The seven patterns

1. Urgency

"Your account will be closed in 24 hours." "Pay now or lose the booking." Real institutions give you time; pressure is a weapon, and it is aimed at stopping you from thinking.

2. Secrecy

"Don't tell anyone yet." A deal that must stay hidden is a deal designed to be checked by no one.

3. Too-good returns

"Double your money in two weeks." Every serious investment in the world competes for returns near single digits per year. Anyone offering to multiply your money is not investing it — they are collecting it.

4. The friendly stranger with a method

A polished person befriends you online, shows off profits, and offers to teach you. The screenshots are real — the profits are not. This is the "pig-butchering" pattern that has drained billions worldwide.

5. Moving you off the official channel

"Let's continue on WhatsApp/Telegram." Legitimate companies don't move conversations to private channels where their records and your protection end.

6. Requests for codes or remote access

No bank, and no real support agent, will ever ask for an OTP or ask to control your phone. That code is the last lock on your door — whoever asks for it is holding a crowbar.

7. Paying to receive

"Your prize/tax refund/loan is approved — just pay a small release fee." Real money does not require a payment to arrive.

A scam doesn't need you to be greedy or foolish — only busy, hopeful, or hurried for one moment. The patterns target attention, not intelligence.

The two-second defence

When a message presses any of the buttons above, do one thing: slow down and verify through a channel you choose yourself. Call the bank's official number — not the one in the message. Open the official app — not the link in the SMS. A genuine matter will still be genuine tomorrow.

In plain words

Urgency, secrecy, impossible returns, friendly strangers, channel-switching, code requests, pay-to-receive. Any ONE of these is a warning. Two or more is a scam until proven otherwise. And no legitimate opportunity disappears because you took an evening to verify it.

← All guides Next: Passwords and 2FA →