A pause-and-verify routine for financial scams

Pay attention to the requested action

A financial scam does not always begin with an obviously strange message. It can appear to come from a familiar business, a government agency, or a person who has spent weeks building trust. Instead of judging only the name and presentation, examine the requested action. Are you being pushed to move money, reveal account information, install software, or keep the conversation secret?

The FTC highlights impersonation, urgent pressure, claims of a problem or prize, and demands for particular payment methods as common warning signs. Caller ID and polished branding are not independent verification. A real-looking message can still direct you to a false destination. Build a habit that creates space between receiving a request and acting on it, especially when the request involves financial access.

Use a contact route you choose yourself

If a message claims your account is at risk, close it and use a trusted route to the institution. That might mean opening the app you already use or calling a number from a statement or the back of your card. Do not use the incoming message's link, phone number, or caller ID as the proof that the request is legitimate.

In a hypothetical example, Lee receives a text saying a bank transfer must be verified within ten minutes. Lee does not reply or enter a password. Instead, Lee opens the bank's existing app and contacts support through its established channel. The important step is choosing an independent route. A second conversation with the same unknown sender is not independent verification, even if the sender changes their title or introduces a supposed supervisor.

Treat investment promises as claims to investigate

Investment pitches deserve particular care when they promise large gains with little risk, discourage questions, or insist the opportunity will vanish immediately. The FTC warns that impressive testimonials and invented success stories can support a fraudulent pitch. Check the person and firm through official registration resources, and verify the identity and contact details independently. Registration is a research step, not a guarantee that an investment is safe or profitable.

Imagine a hypothetical online acquaintance shows screenshots of steady profits and recommends a new platform. A screenshot does not prove that trades occurred, money exists, or withdrawals will work. Even an initial small withdrawal does not establish that future funds will be recoverable. The useful questions concern independently verifiable facts: who holds the money, what is being bought, what documents exist, and what oversight applies.

Keep a written pause checklist

A brief checklist can reduce the mental load of deciding during a stressful call. Keep it near the place where you handle bills. It can also help a household use consistent steps when one person receives an unexpected financial request. The point is to make verification routine so that refusing immediate pressure does not feel like improvising.

• Stop the conversation before sending money or sharing sensitive information.
• Name the exact action being requested and the deadline being imposed.
• Contact the organization through a trusted route you selected independently.
• Discuss an unfamiliar request with a person you trust before acting.
• Keep screenshots and transaction details if the request appears fraudulent.

If you already paid, act quickly

Contact the bank, card issuer, payment service, or other provider used to send the money as soon as possible. Explain what happened and ask whether the transfer can be stopped, reversed, or refunded. The FTC provides different steps for different payment methods. Recovery is not guaranteed, so avoid waiting for the sender to resolve the issue or paying an additional fee on a promise that it will unlock a refund.

If account credentials were exposed, change the affected password through the real service and update any other account that reused it. Turn on two-factor authentication where available. If identity information was misused, use IdentityTheft.gov for a recovery plan. If remote device access was granted, follow trusted security guidance to remove that access and check the device. Choose support through known channels rather than a new unsolicited contact.

Create a clear record and report it

Write a timeline with dates, amounts, payment references, website addresses, and the names used by the sender. Save messages without continuing the interaction. Report suspected scams at ReportFraud.ftc.gov and follow the relevant financial provider's reporting process. Investment-related concerns may also belong with securities regulators. A calm, specific record helps explain the situation repeatedly without relying on memory, and reporting can help authorities identify patterns even when an individual loss cannot be recovered.