How scammers think: the red flags behind every scam

Scams change their costumes every month, from fake parcels to fake investments, but the tricks underneath barely change. Learn the pattern once and you will recognise it in any form.

The four Ps (FTC)

• Pretend: scammers pretend to be from an organisation you know, such as your bank, the police, a delivery company, a game studio or a well-known brand.
• Problem or prize: they say there is a problem (your card is blocked, you owe a fine, your account will be closed) or a prize (you won a phone, a giveaway, a free trip).
• Pressure: they push you to act immediately, before you have time to think or ask anyone.
• Pay: they tell you to pay in a specific way, usually one that is hard to trace or reverse.
• If a message ticks even two of these boxes, treat it as a scam until you have proved otherwise using contact details you found yourself.

The emotional buttons they press

• The NCSC lists five triggers: authority (posing as a bank, doctor or government department), urgency ('within 24 hours'), emotion (panic, fear, hope or curiosity), scarcity (tickets, money or offers in short supply) and current events (news, big events, tax season).
• In the UAE, scam messages often borrow real names: police, the Central Bank, courier companies and well-known banks. The Central Bank of the UAE has warned that it never contacts people to tell them their card is blocked.
• Strong emotion is the signal to slow down. If a message makes your heart race, put the phone down for five minutes before you do anything.
• Scammers also study what you post. Exam season, a new phone, a holiday or a part-time job search all give them a story to use.

Payment methods that should set off alarms

• The FTC says never pay anyone who insists on cryptocurrency, a wire transfer service, a payment app or a gift card. Honest organisations do not demand these.
• Never deposit a cheque or receive money and then send part of it back to someone. This is a classic trick used in overpayment and job scams (FTC).
• Never move money to a 'safe account' because someone told you to. Take Five lists this as a warning sign of fraud.
• If someone asks for a one-time passcode (OTP), password or PIN, stop. Take Five and UAE banks treat this as one of the clearest signs of a scam.

The habit that beats almost every scam: Stop, Challenge, Protect

• Stop: take a moment to think before parting with your money or information (Take Five).
• Challenge: ask yourself, 'Could this be fake?' It is fine to reject, refuse or ignore any request, even one that seems to come from an authority.
• Protect: if you think you have been scammed, contact your bank immediately and report it to the police.
• Verify independently: do not use the link or number in the message. Find the official website or the number on the back of your card yourself (FTC, NCSC).
• Talk to someone you trust before acting. The FTC recommends telling a friend or family member what is happening before you do anything else.

Why clever people still get caught

• Scams are designed to work on normal human feelings, not on a lack of intelligence, which is why the NCSC focuses on emotional triggers rather than technical tricks.
• Scammers often contact thousands of people at once. They only need the message to arrive at the right moment for one person, such as someone actually waiting for a parcel.
• Being targeted is not a sign that you did something wrong. Recognising the pattern and pausing is the skill, and it gets easier with practice.