How it worksThe story behind the scam
The message copies the name, tone, and branding of a real organisation. It invents an account problem, delivery issue, prize, or urgent notice and sends you to a fake website designed to collect information.
ExampleA text says your bank account will be suspended today unless you verify it through a shortened link.
Common versionsHow this scam may reach you
The details change, but the underlying request usually stays the same: trust the sender, stop checking, and act through the channel they control.
01Account or security alert
A bank, wallet, email provider, or social platform supposedly detected a login and needs you to ‘verify’ before access is suspended.
02Delivery, toll, or bill notice
A small unpaid charge or missed delivery leads to a fake payment page that collects card and personal details.
03Shared document or invoice
A link or attachment appears to come from a coworker, supplier, school, or cloud service and asks you to sign in again.
04Prize, refund, or public benefit
Unexpected money is offered, but you must first submit details, pay a fee, or log in through the provided page.
Warning signsWhat should make you pause
- Unexpected links, login warnings, and slightly misspelled addresses.
- The greeting is generic or the message was not expected.
- The sender address or website differs slightly from the official one.
- The message uses urgency, fear, curiosity, or a reward to make you act before checking.
- A link is shortened, hidden behind a button, uses an unrelated domain, or changes when carefully inspected.
- The attachment, QR code, or login page was unexpected—even if the sender appears familiar.
Your responseUse the three ScamProof habits
01Pause
Do not let urgency choose for you.
02Check
Contact the organisation yourself.
03Protect
Never share secret account details.
Safest next moveCheck
Do not use the link or contact details in the message. Open the organisation’s official app, type its known website yourself, or call the number printed on your card.
Verify safelyInvestigate without engaging the sender
You do not need to prove that a message is fake before stepping away. Verify the claim independently and keep the suspicious sender outside that process.
- 01
Leave the original channel
Do not reply, click, call a supplied number, scan a QR code, install an app, or send a small ‘test’ payment. A legitimate issue can wait while you verify it.
- 02
Find the real organisation yourself
Use an app you already installed, a bookmarked website, the number printed on your card, or a regulator’s official directory. Search results and sponsored ads can also be impersonated, so check the domain carefully.
- 03
Check the claim, not just the sender
Caller ID, profile photos, logos, badges, documents, and even familiar voices can be faked. Ask whether the claimed problem appears inside the official account or can be confirmed by a known representative.
- 04
Use a second person and a second channel
Show the message to someone you trust. If the sender claims to be a person you know, contact that person through a different number or app that you already used before.
- 05
Take pressure as a reason to stop
A safe organisation will allow time to check. Threats, secrecy, guaranteed rewards, and warnings not to hang up are reasons to end the interaction—not reasons to hurry.
Act quicklyIf you already replied, clicked, shared information, or paid
Do not let embarrassment or uncertainty delay you. Fast action gives banks, platforms, and service providers more opportunity to protect your accounts or trace a transaction.
If you entered a password, treat it as exposed even if the page later showed an error. If you opened an attachment or installed software, disconnect the device from sensitive work and seek trusted technical support before using it for banking.
- 01
Stop contact and preserve evidence
Do not send more money to fix the problem. Save messages, usernames, phone numbers, email headers, URLs, receipts, transaction IDs, and dates before blocking or deleting anything.
- 02
Contact the payment provider immediately
Tell the bank, card issuer, wallet, transfer service, or exchange that the transaction was connected to a scam. Ask whether it can be stopped, recalled, disputed, or flagged, and record the case number.
- 03
Secure the most important accounts first
From a trusted device, protect your email and financial accounts, then other affected services. Change reused passwords, sign out unknown sessions, review recovery details, and turn on multi-factor authentication.
- 04
Protect your phone number and identity
Contact your mobile provider if service stopped unexpectedly or a SIM change is suspected. If identity documents were exposed, ask the relevant issuer what monitoring, replacement, or fraud-alert steps are available.
- 05
Warn people who may be targeted next
If an email, messaging, or social account was involved, tell contacts not to trust recent requests from it. Scammers often use a compromised account to reach family, coworkers, and customers.
- 06
Report the account and the incident
Report the profile, message, advertisement, or listing to the platform. Also report through the appropriate cybercrime, financial, securities, or consumer-protection channel and keep every reference number.
Reporting in the PhilippinesReport online scams to the Cybercrime Investigation and Coordinating Center through hotline 1326. For a concern involving a BSP-supervised financial institution, report it to the institution first and keep the reference number before escalating through BSP Online Buddy.
1326Build defenses before the next message arrives
No single tool stops every scam. A few practical layers make it harder for a scammer to turn one mistake into a larger loss.
Use unique passwords
A password manager can create and store a different strong password for every important account, limiting damage when one service is breached.
Turn on strong MFA
Use an authenticator app, security key, or passkey where available. Never approve an unexpected prompt or give a verification code to another person.
Enable alerts and sensible limits
Turn on login and transaction notifications. Review transfer limits and saved payees so an account takeover is less useful to a criminal.
Review accounts regularly
Check financial statements, login history, recovery information, connected apps, and devices. Report unfamiliar activity instead of waiting for the next statement.
Create a family verification habit
Agree that urgent money requests will always be confirmed through a second channel. A simple family question or code phrase can help when a voice or account is impersonated.
Take the next step with ScamProof
Stay in the ScamProof learning experience for locally relevant checking, reporting, recovery, and verification guidance.
Official guidanceSources and further reading
These official resources support the guidance in this lesson and provide current reporting and recovery information.
